Event

1/6/2011 5:18:36 PM McLogEvent Information None 257
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\SQL-server\DEV\MSEQ\X86\M

SEQ.CAB has taken too long to complete and is being canceled. Scan engine versi
on used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\SQL-server\DEV
\MSEQ\X86\MSEQ.CAB has taken too long to complete and is being canceled. Scan e
ngine version used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\SQL-server\DEV
\MSEQ\X86\MSEQ.CAB has taken too long to complete and is being canceled. Scan e
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\BitTorrent-6.1.2.exe has
taken too long to complete and is being canceled. Scan engine version used is 5
400.1158 DAT version 6216.0000.
1/6/2011 5:07:23 PM McLogEvent Warning None 258 NT AUTHO
RITY\SYSTEM SANJAYBABA The update failed; see event log.
1/6/2011 5:04:21 PM Winlogon Information None 1002
N/A SANJAYBABA The shell stopped unexpectedly and Explorer.exe was rest
arted.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\BitTorrent-6.1
.2.exe has taken too long to complete and is being canceled. Scan engine versio
n used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\Bugzilla-Setup
-3.6.exe has taken too long to complete and is being canceled. Scan engine vers
ion used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Mercury\Qua
lity Center\jboss\server\default\tmp\deploy\tmp5671720qcbin-exp.war\Help\doc_lib
rary\api_refs\OTA_API_Reference.chm has taken too long to complete and is being
canceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp5671720qcbin.war has taken too lo
ng to complete and is being canceled. Scan engine version used is 5400.1158 DAT
version 6216.0000.
lity Center\jboss\server\default\deploy\20qcbin.war has taken too long to comple
te and is being canceled. Scan engine version used is 5400.1158 DAT version 621
6.0000.
lity Center\jboss\server\default\tmp\deploy\tmp5671610sabin.war has taken too lo
version 6216.0000.
lity Center\jboss\server\default\deploy\10sabin.war has taken too long to comple
6.0000.
lity Center\java\lib\tools.jar has taken too long to complete and is being cance
led. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-hibernate.deployer\hibernate3.jar
has taken too long to complete and is being canceled. Scan engine version used
is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\REPAIR\SETUP.LOG
is 5400.1158 DAT version 6216.0000.
is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA McShield service started.
Engine version : 5400.1158
DAT version : 6216.0000
Number of signatures in EXTRA.DAT : None
Names of threats that EXTRA.DAT can detect : None
1/6/2011 4:47:16 PM MSSQLSERVER Information (2) 17055
N/A SANJAYBABA 17052 :
Recovery complete.
1/6/2011 4:47:14 PM MySQL Information None 100 N/A
SANJAYBABA The description for Event ID ( 100 ) in Source ( MySQL ) cannot
be found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able to
use the /AUXSOURCE= flag to retrieve this description; see Help and Support for
details. The following information is part of the event: C:\Program Files\Bugzi
lla\mysql\bin\mysqld: ready for connections.
Version: '5.1.44-community-log' socket: '' port: 3306 MySQL Community Server
(GPL)
.
details. The following information is part of the event: Event Scheduler: Loade
d 0 events
.
SQL Server is ready for client connections
SQL server listening on TCP, Shared Memory, Named Pipes.
1/6/2011 4:47:12 PM MSSQLServer Warning (8) 19011 N/A
SANJAYBABA SuperSocket info: (SpnRegister) : Error 1355.
SQL server listening on 127.0.0.1: 1433.
Using 'SSNETLIB.DLL' version '8.0.311'.
Recovery is checkpointing database 'master' (1)
0 transactions rolled back in database 'master' (1).
1/6/2011 4:47:10 PM SecurityCenter Information None 1800
N/A SANJAYBABA The Windows Security Center Service has started.
Using dynamic lock allocation. [2500] Lock Blocks, [5000] Lock Owner Blocks.
SQL Server configured for thread mode processing.
details. The following information is part of the event: Crash recovery finishe
d.
.
details. The following information is part of the event: Starting crash recover
y...
.
details. The following information is part of the event: Recovering after a cra
sh using mysql-bin
.
SQL Server is starting at priority class 'normal'(2 CPUs detected).
Server Process ID is 1496.
N/A SANJAYBABA "17052 :
Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
Aug 6 2000 00:57:48
Copyright (c) 1988-2000 Microsoft Corporation
Developer Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
"
1/6/2011 4:47:02 PM Mercury Quality Center Information None
4 N/A SANJAYBABA The Mercury Quality Center service has started.
details. The following information is part of the event: Plugin 'FEDERATED' is
disabled.
.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\trove.jar has taken t
oo long to complete and is being canceled. Scan engine version used is 5400.115
8 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Documents and Settings\Al
l Users.WINDOWS\Desktop\Site Administration.lnk has taken too long to complete a
nd is being canceled. Scan engine version used is 5400.1158 DAT version 6216.00
00.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\COMDLG32
.DLL has taken too long to complete and is being canceled. Scan engine version
used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Documents and Settings\Gu
est\Start Menu\Programs\Accessories\desktop.ini has taken too long to complete a
00.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\jboss-aop.jar has tak
en too long to complete and is being canceled. Scan engine version used is 5400
.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\javassist.jar has tak
.1158 DAT version 6216.0000.
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
5 N/A SANJAYBABA The Mercury Quality Center service has stopped.
1/6/2011 4:08:54 PM Mercury Quality Center Error None 4100
N/A SANJAYBABA The Mercury Quality Center service has timed out during
a stop request and is being terminated.
version 6216.0000.
6.0000.
version 6216.0000.
6.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\McAfee\Comm
on Framework\FrameworkService.exe has taken too long to complete and is being ca
nceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\WBEM\Log
s\FrameWork.log has taken too long to complete and is being canceled. Scan engi
ne version used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\Rasapi32
.dll has taken too long to complete and is being canceled. Scan engine version
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\boot.ini has taken too lo
version 6216.0000.
lity Center\jboss\server\default\lib\bindingservice-plugin.jar has taken too lon
g to complete and is being canceled. Scan engine version used is 5400.1158 DAT
version 6216.0000.
lity Center\jboss\server\default\lib\bcel.jar has taken too long to complete and
is being canceled. Scan engine version used is 5400.1158 DAT version 6216.0000
.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
version 6216.0000.
6.0000.
version 6216.0000.
6.0000.
is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\lib\jboss.jar has taken too long to complete an
d is being canceled. Scan engine version used is 5400.1158 DAT version 6216.000
0.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\windows\system32\PSAPI.DL
L has taken too long to complete and is being canceled. Scan engine version use
d is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\conf\xmdesc\org.jboss.deployment.JARDeployer-xm
bean.xml has taken too long to complete and is being canceled. Scan engine vers
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\WBEM\Rep
ository\$WinMgmt.CFG has taken too long to complete and is being canceled. Scan
engine version used is 5400.1158 DAT version 6216.0000.
Recovery complete.
Recovery is checkpointing database 'qcsiteadmin_db' (7)
0 transactions rolled back in database 'qcsiteadmin_db' (7).
460 transactions rolled forward in database 'qcsiteadmin_db' (7).
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
d.
.
y...
.
sh using mysql-bin
.
disabled.
.
1/6/2011 10:56:19 AM McLogEvent Information None 257
NT AUTHORITY\SYSTEM SANJAYBABA Blocked by port blocking rule (Anti-viru
s Standard Protection:Prevent IRC communication).
NT AUTHORITY\SYSTEM SANJAYBABA The Scan was unable to scan password pro
tected file C:\Documents and Settings\Guest\My Documents\Downloads\Windows Vista
Home Premium (32 Bit)\Driver Genius Professional Edition 10.0.0.526\Driver Geni
us Professional Edition 10.0.0.526.exe\Alex Ubago - luna.MP3. Scan engine versio
est\My Documents\Downloads\Windows Vista Home Premium (32 Bit)\File Sharing Prog
rams\Bit-Lord 1.2.exe has taken too long to complete and is being canceled. Sca
n engine version used is 5400.1158 DAT version 6216.0000.
rams\Lime-Wire Pirate Edition 5.6.2.exe has taken too long to complete and is be
ing canceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp2362320qcbin-exp.war\WEB-INF\lib\
jce-jdk13-123.jar has taken too long to complete and is being canceled. Scan en
gine version used is 5400.1158 DAT version 6216.0000.
version 6216.0000.
6.0000.
lity Center\jboss\server\default\tmp\deploy\tmp2362210sabin-exp.war\WEB-INF\lib\
xercesImpl.jar has taken too long to complete and is being canceled. Scan engin
e version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp2362210sabin-exp.war\WEB-INF\lib\
tdcore.jar has taken too long to complete and is being canceled. Scan engine ve
rsion used is 5400.1158 DAT version 6216.0000.
version 6216.0000.
6.0000.
1/6/2011 7:24:59 AM McLogEvent Error None 1008 N/A
SANJAYBABA The McShield service terminated unexpectedly.
Please review event 5019 or 5051 for details. The McShield service will be rest
arted in 5 seconds;
1/6/2011 7:24:58 AM McLogEvent Error None 5051 NT AUTHO
RITY\SYSTEM SANJAYBABA A thread in process C:\Program Files\McAfee\Viru
sScan Enterprise\Mcshield.exe took longer than 90000 ms to complete a request.
The process will be terminated. Thread id : 3096 (0xc18)
Thread address : 0x7C90E514
Thread message :
Build VSCORE.13.3.1.100 / 5400.1158
Object being scanned = \Device\HarddiskVolume1\Documents and Settings\Guest\My
Documents\Downloads\Windows 98 Second Edition Full Bootable CD + CD Key.zip
by C:\Program Files\BitTorrent\bittorrent.exe
4(0)(0)
4(0)(0)
7200(0)(0)
7595(0)(0)
7005(0)(0)
7004(0)(0)
5006(0)(0)
5004(0)(0)
est\My Documents\Downloads\Windows Vista Home Premium (32 Bit)\ISO File\Windows
Vista Home Premium (32 Bit).iso has taken too long to complete and is being canc
eled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jbossweb-tomcat55.sar\naming-resources.j
ar has taken too long to complete and is being canceled. Scan engine version us
ed is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SoftwareDistribut
ion\WuRedir\7971F918-A847-4430-9279-4A52D1EFE18D\wuredir.cab.bak has taken too l
ong to complete and is being canceled. Scan engine version used is 5400.1158 DA
T version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Prefetch\BITTORRE
NT.EXE-15EBE065.pf has taken too long to complete and is being canceled. Scan e
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\FONTS\KOZMINPRO-E
XTRALIGHT.OTF has taken too long to complete and is being canceled. Scan engine
version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jbossweb-tomcat55.sar\jasper-compiler-jd
t.jar has taken too long to complete and is being canceled. Scan engine version
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Mozilla Fir
efox\chrome\classic.jar has taken too long to complete and is being canceled. S
can engine version used is 5400.1158 DAT version 6216.0000.
efox\chrome\toolkit.jar has taken too long to complete and is being canceled. S
lity Center\jboss\server\default\deploy\jbossweb-tomcat55.sar\commons-el.jar has
taken too long to complete and is being canceled. Scan engine version used is
5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jbossweb-tomcat55.sar\catalina.jar has t
aken too long to complete and is being canceled. Scan engine version used is 54
00.1158 DAT version 6216.0000.
efox\chrome\en-US.jar has taken too long to complete and is being canceled. Sca
1/6/2011 7:19:14 AM MSSQLSERVER Information (2) 17055
Recovery complete.
1/6/2011 7:19:09 AM MSSQLServer Warning (8) 19011 N/A
1/6/2011 7:19:04 AM SecurityCenter Information None 1800
Aug 6 2000 00:57:48
"
1/6/2011 7:18:59 AM MySQL Information None 100 N/A
(GPL)
.
d 0 events
.
1/6/2011 7:18:59 AM Mercury Quality Center Information None
d.
.
y...
.
sh using mysql-bin
.
disabled.
.
lity Center\jboss\server\default\deploy\jboss-ws4ee.sar\axis-ws4ee.jar has taken
too long to complete and is being canceled. Scan engine version used is 5400.1
158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp64913hibernate3.jar has taken too
long to complete and is being canceled. Scan engine version used is 5400.1158
DAT version 6216.0000.
is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-hibernate.deployer\cglib-2.1.jar h
as taken too long to complete and is being canceled. Scan engine version used i
s 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-hibernate.deployer\antlr-2.7.5H3.j
ar has taken too long to complete and is being canceled. Scan engine version us
ed is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp64907trove.jar has taken too long
to complete and is being canceled. Scan engine version used is 5400.1158 DAT v
ersion 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp64906jboss-aspect-library.jar has
5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp64905jboss-aop.jar has taken too
long to complete and is being canceled. Scan engine version used is 5400.1158 D
AT version 6216.0000.
lity Center\jboss\server\default\tmp\deploy\tmp64904javassist.jar has taken too
long to complete and is being canceled. Scan engine version used is 5400.1158 D
AT version 6216.0000.
1/5/2011 9:42:05 PM MsiInstaller Information None 11728
SANJAYBABA\Administrator SANJAYBABA Product: QuickTest Add-in for Qu
ality Center -- Configuration completed successfully.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\trove.jar has taken t
lity Center\jboss\server\default\deploy\jboss-aop.deployer\jboss-aspect-library.
jar has taken too long to complete and is being canceled. Scan engine version u
sed is 5400.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\jboss-aop.jar has tak
.1158 DAT version 6216.0000.
lity Center\jboss\server\default\deploy\jboss-aop.deployer\javassist.jar has tak
.1158 DAT version 6216.0000.

Recovery complete.
Recovery is checkpointing database 'QualityCenter_Demo_db' (8)
Recovery is checkpointing database 'default_qtpnew_db' (9)
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
1/5/2011 9:36:48 PM Userenv Information None 1516 NT AUTHO
RITY\SYSTEM SANJAYBABA Windows unloaded user SANJAYBABA\Administrator r
egistry when it received a notification that no other applications or services w
ere using the profile.
1/5/2011 9:36:35 PM Userenv Warning None 1517 NT AUTHORITY\SYS
TEM SANJAYBABA Windows saved user SANJAYBABA\Administrator registry whi
le an application or service was still using the registry during log off. The me
mory used by the user's registry has not been freed. The registry will be unload
ed when it is no longer in use.
This is often caused by services running as a user account, try configuring the
services to run in either the LocalService or NetworkService account.
ality Center -- Configuration completed successfully.
ality Center -- Installation operation completed successfully.
NT AUTHORITY\SYSTEM SANJAYBABA Would be blocked by access protection ru
le (rule is in warn-only mode) (Common Standard Protection:Prevent common progr
ams from running files from the Temp folder).
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Mercury Int
eractive\QuickTest Add-in for Quality Center\help\MainUsersGuide.chm has taken t
ality Center -- Installation operation completed successfully.
SANJAYBABA\Administrator SANJAYBABA Product: ISScript -- Installatio
n operation completed successfully.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\Bugzilla-Setup
-3.6.exe has taken too long to complete and is being canceled. Scan engine vers
version 6216.0000.
version 6216.0000.
6.0000.
lity Center\_uninst\uninstall.jar has taken too long to complete and is being ca
6.0000.
6.0000.
lity Center\application\qcbin.war has taken too long to complete and is being ca
lity Center\application\sabin.war has taken too long to complete and is being ca
lity Center\application\qcbin1.war has taken too long to complete and is being c
anceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\application\sabin1.war has taken too long to complete and is being c
1/5/2011 8:38:28 PM VBRuntime Information None 1
N/A SANJAYBABA The VB Application identified by the event source logged
this Application Project1: Thread ID: 3032 ,Logged: MsgBox: , Run-time error '
76':
Path not found
lity Center\qcchecker\lib\j2ee.jar has taken too long to complete and is being c
lity Center\application\qcbin.war has taken too long to complete and is being ca
lity Center\application\sabin.war has taken too long to complete and is being ca
lity Center\jboss\server\default\deploy\management\console-mgr.sar\web-console.w
ar\applet.jar has taken too long to complete and is being canceled. Scan engine
lity Center\jboss\lib\endorsed\xalan.jar has taken too long to complete and is b
eing canceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\client\jbossall-client.jar has taken too long to complete and
is being canceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
lity Center\jboss\client\jacorb.jar has taken too long to complete and is being
lity Center\java\jre\lib\rt.jar has taken too long to complete and is being canc
lity Center\_jvm\jre\lib\rt.jar has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Documents and Settings\Ad
ministrator.SANJAYBABA\Local Settings\Temp\LRE13.tmp\setup.jar has taken too lon
version 6216.0000.
ministrator.SANJAYBABA\Local Settings\Temp\LRE12.tmp\setup.jar has taken too lon
version 6216.0000.
ministrator.SANJAYBABA\Local Settings\Temp\LRE11.tmp\jre\lib\rt.jar has taken to
o long to complete and is being canceled. Scan engine version used is 5400.1158
ministrator.SANJAYBABA\Local Settings\Temp\LRE11.tmp\lib\tools.jar has taken too
ministrator.SANJAYBABA\Local Settings\Temp\LRE11.tmp\Windows-jdk-1.4.2_04.exe ha
s taken too long to complete and is being canceled. Scan engine version used is
5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\quality-center
-starter-edition\setup.exe has taken too long to complete and is being canceled.
Scan engine version used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\installers\BitTorrent-6.1
.2.exe has taken too long to complete and is being canceled. Scan engine versio
rams\Bit-Lord 1.2.exe has taken too long to complete and is being canceled. Sca
SANJAYBABA\Administrator SANJAYBABA Product: Microsoft .NET Framewor
k 2.0 Service Pack 2 -- Removal failed.
1/5/2011 8:11:33 PM MsiInstaller Error None 1013 SANJAYBA
BA\Administrator SANJAYBABA Product: Microsoft .NET Framework 2.0 Se
rvice Pack 2 -- Microsoft .NET Framework 2.0 Service Pack 2 cannot be uninstalle
d because it will affect other applications that are installed. For more informa
tion, see http://go.microsoft.com/fwlink/?LinkId=91126.
rams\Bit-Comet 1.25.exe has taken too long to complete and is being canceled. S
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\winlogon
.exe has taken too long to complete and is being canceled. Scan engine version

Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
TEM SANJAYBABA Windows saved user SANJAYBABA\Guest registry while an ap
plication or service was still using the registry during log off. The memory use
d by the user's registry has not been freed. The registry will be unloaded when
it is no longer in use.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of '_' has taken too long to co
mplete and is being canceled. Scan engine version used is 5400.1158 DAT version
6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\uniplat.
dll has taken too long to complete and is being canceled. Scan engine version u
s\wbemess.log has taken too long to complete and is being canceled. Scan engine
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
1/5/2011 10:55:27 AM MSDTC Information Disk 2444 N/A
SANJAYBABA
Security
Network
Inbound
Outbound
Transaction
XA Transactions
Configuration
Administration
Clients
Distributed
Distributed
MSInternet
DTC=started
00,(OFF
Transactions
Transactions
Protocol
of=with
0 and(TIP)
Transactions
theONusing
using
following
==1):
0,Native
=Native
0, settings:
MSDTC
MSDTCProtocol
Protocol==0,0,
1/5/2011 10:55:26 AM MSDTC Information Services 4125
N/A SANJAYBABA The MS DTC log file has been decompressed.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wbem\cim
win32.dll has taken too long to complete and is being canceled. Scan engine ver
sion used is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\crypt32.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\rastapi.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
1/5/2011 10:44:59 AM Userenv Warning None 1517 NT AUTHORITY\SYS
1/5/2011 10:44:30 AM MsiInstaller Information None 1005
SANJAYBABA\Administrator SANJAYBABA The Windows Installer initiated
a system restart to complete or continue the configuration of 'TortoiseSVN 1.6.1
2.20536 (32 bit)'.
1/5/2011 10:44:30 AM MsiInstaller Information None 11707
SANJAYBABA\Administrator SANJAYBABA Product: TortoiseSVN 1.6.12.2053
6 (32 bit) -- Installation completed successfully.
1/5/2011 10:43:32 AM crypt32 Information None 1 N/A
SANJAYBABA Successful auto update of third-party root certificate:: Subject
: <CN=Certum CA, O=Unizeto Sp. z o.o., C=PL> Sha1 thumbprint: <6252DC40F71143A22
FDE9EF7348E064251B18118>
SANJAYBABA Successful auto update retrieval of third-party root certificate
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/truste
dr/en/6252DC40F71143A22FDE9EF7348E064251B18118.crt>
SANJAYBABA Successful auto update retrieval of third-party root list sequen
ce number from: <http://www.download.windowsupdate.com/msdownload/update/v3/stat
ic/trustedr/en/authrootseq.txt>
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\subversion-1.6.5.zip.part
is 5400.1158 DAT version 6216.0000.
ministrator.SANJAYBABA\Local Settings\Application Data\Mozilla\Firefox\Profiles\
ma5llbxu.default\Cache\E762538Bd01 has taken too long to complete and is being c
1/5/2011 5:37:52 AM McLogEvent Error None 1008 N/A
arted in 5 seconds;
1/5/2011 5:37:26 AM McLogEvent Error None 5051 NT AUTHO
The process will be terminated. Thread id : 2940 (0xb7c)
Thread message :
Build VSCORE.13.3.1.100 / 5400.1158
Object being scanned = \Device\HarddiskVolume1\Documents and Settings\Guest\App
lication Data\BitTorrent\resume.dat.new
by C:\Program Files\BitTorrent\bittorrent.exe
4(859)(0)
4(859)(0)
7200(812)(0)
7595(812)(0)
7005(812)(0)
7004(765)(0)
5006(765)(0)
5004(765)(0)
NT AUTHORITY\SYSTEM SANJAYBABA Blocked by port blocking rule (Anti-viru
s Standard Protection:Prevent mass mailing worms from sending mail).
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\COMRes.d
ll has taken too long to complete and is being canceled. Scan engine version us
ed is 5400.1158 DAT version 6216.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\Msimtf.d
ed is 5400.1158 DAT version 6216.0000.
est\Desktop\Ujjval Majmudar_AICAR.doc has taken too long to complete and is bein
g canceled. Scan engine version used is 5400.1158 DAT version 6216.0000.
6216.0000.
ministrator.SANJAYBABA\ntuser.ini has taken too long to complete and is being ca
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Common File
s\McAfee\Engine\mcscan32.dll has taken too long to complete and is being cancele
d. Scan engine version used is 5400.1158 DAT version 6216.0000.
l Users.WINDOWS\Application Data\McAfee\Common Framework\UpdateHistory.ini has t
00.1158 DAT version 6216.0000.
est\Application Data\Mozilla\Firefox\Profiles\yj3z6rbi.default\sessionstore-2.js
is 5400.1158 DAT version 6216.0000.
l Users.WINDOWS\Application Data\McAfee\Common Framework\Db\Agent_SANJAYBABA.xml
is 5400.1158 DAT version 6216.0000.
is 5400.1158 DAT version 6216.0000.
s\McAfee\Engine\avvclean.dat has taken too long to complete and is being cancele
s\McAfee\Engine\avvnames.dat has taken too long to complete and is being cancele
00.1158 DAT version 6216.0000.
s\McAfee\Engine\avvscan.dat has taken too long to complete and is being canceled
. Scan engine version used is 5400.1158 DAT version 6216.0000.
1/5/2011 5:18:20 AM McLogEvent Warning None 258 NT AUTHO
RITY\SYSTEM SANJAYBABA The file C:\Documents and Settings\Guest\Local S
ettings\Temp\is-GSU9I.tmp\siminstwiz.dll contains Generic.dx!p Trojan. The file
was successfully deleted.
1/5/2011 5:18:20 AM McLogEvent Warning None 258 NT AUTHO
RITY\SYSTEM SANJAYBABA The file C:\DOCUMENTS AND SETTINGS\GUEST\LOCAL S
ETTINGS\TEMP\IS-GSU9I.TMP\SIMINSTWIZ.DLL contains Generic.dx!p Trojan. The file
was successfully deleted.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\GDI32.DL
d is 5400.1158 DAT version 6215.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wbem\cim
win32.dll has taken too long to complete and is being canceled. Scan engine ver
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\hnetcfg.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
1/4/2011 8:41:39 PM DrWatson Information None 4097
N/A SANJAYBABA The application, C:\PROGRA~1\MICROS~2\Office\WINWORD.EXE
, generated an application error The error occurred on 01/04/2011 @ 20:41:39.171
The exception generated was c0000005 at address 3092C36B (MSO9!CFileFolder__FSp
ecial)
1/4/2011 8:41:28 PM Application Error Error None 1000
N/A SANJAYBABA Faulting application winword.exe, version 9.0.0.2717, fa
ulting module mso9.dll, version 9.0.0.2720, fault address 0x0006c36b.
ministrator.SANJAYBABA\Application Data\Mozilla\Firefox\Profiles\ma5llbxu.defaul
t\cookies.sqlite-journal has taken too long to complete and is being canceled.
t\sessionstore-1.js has taken too long to complete and is being canceled. Scan
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Microsoft S
QL Server\80\Tools\Binn\Resources\1033\sqlmangr.RLL has taken too long to comple
5.0000.
ministrator.SANJAYBABA\Application Data\Macromedia\Flash Player\macromedia.com\s
upport\flashplayer\sys\settings.sol has taken too long to complete and is being
ma5llbxu.default\Cache\85DA90C2d01 has taken too long to complete and is being c
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\Msctf.dl
l has taken too long to complete and is being canceled. Scan engine version use
d is 5400.1158 DAT version 6215.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\winrnr.d
ed is 5400.1158 DAT version 6215.0000.
ma5llbxu.default\Cache\FEF6B61Bd01 has taken too long to complete and is being c
t\sessionstore-1.js has taken too long to complete and is being canceled. Scan
l Users.WINDOWS\Application Data\Microsoft\Crypto\RSA\S-1-5-18\d42cc0c3858a58db2
db37658219e6400_1e9aeb1e-ff45-4170-b4e6-4e331f562df8 has taken too long to compl
ete and is being canceled. Scan engine version used is 5400.1158 DAT version 62
15.0000.
on Framework\naCmnLib71.dll has taken too long to complete and is being canceled
is 5400.1158 DAT version 6215.0000.
00.1158 DAT version 6215.0000.
6214.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
d.
.
y...
.
sh using mysql-bin
.
disabled.
.
6214.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\ANTI7.EXE has taken too l
ong to complete and is being canceled. Scan engine version used is 5400.1158 DA
T version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\UNICODE.
NLS has taken too long to complete and is being canceled. Scan engine version u
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\comctl32
ed is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\msxml3r.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\System Volume Information
\_restore{29469D6D-1CFD-457C-A897-14EDB7A5821B}\RP109\A0111710.exe has taken too
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\comctl32
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\KBDUS.DL
d is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\Program Files\Bugzilla\pe
rl\perl\site\lib\DateTime.pm has taken too long to complete and is being cancele
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\WindowsShell.Mani
fest has taken too long to complete and is being canceled. Scan engine version
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\FONTS\ARIALBI.TTF
is 5400.1158 DAT version 6214.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
est\Local Settings\Application Data\Mozilla\Firefox\Profiles\yj3z6rbi.default\Ca
che\22638D66d01 has taken too long to complete and is being canceled. Scan engi
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wscntfy.
exe has taken too long to complete and is being canceled. Scan engine version u
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\WINMM.dl
d is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\Apphelp.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\sanjay\1000_Hacking_Tutor
ials_2008_[RH].rar has taken too long to complete and is being canceled. Scan e
6214.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\netbeans-6.9.1-ml-windows
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\vijay\development tools\n
etbeans-6.9.1-ml-windows.exe has taken too long to complete and is being cancele
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\jdk-6u23-nb-6_9_1-windows
-ml.exe has taken too long to complete and is being canceled. Scan engine versi
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\vijay\development tools\j
dk-6u23-nb-6_9_1-windows-ml.exe has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\java_ee_sdk-5_08-windows-
nojdk.exe has taken too long to complete and is being canceled. Scan engine ver
ava_ee_sdk-5_08-windows-nojdk.exe has taken too long to complete and is being ca
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-soa-helios-SR1-in
cubation-win32.zip has taken too long to complete and is being canceled. Scan e
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\vijay\development tools\e
clipse-soa-helios-SR1-incubation-win32.zip has taken too long to complete and is
being canceled. Scan engine version used is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-reporting-helios-
SR1-win32.zip has taken too long to complete and is being canceled. Scan engine
clipse-reporting-helios-SR1-win32.zip has taken too long to complete and is bein
g canceled. Scan engine version used is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-rcp-helios-SR1-wi
n32.zip has taken too long to complete and is being canceled. Scan engine versi
clipse-rcp-helios-SR1-win32.zip has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-pulsar-helios-SR1
-win32.zip has taken too long to complete and is being canceled. Scan engine ve
clipse-pulsar-helios-SR1-win32.zip has taken too long to complete and is being c
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-php-helios-SR1-wi
clipse-php-helios-SR1-win32.zip has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-modeling-helios-S
R1-incubation-win32.zip has taken too long to complete and is being canceled. S
clipse-modeling-helios-SR1-incubation-win32.zip has taken too long to complete a
00.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-jee-helios-SR1-wi
clipse-jee-helios-SR1-win32.zip has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-javascript-helios
-SR1-win32.zip has taken too long to complete and is being canceled. Scan engin
e version used is 5400.1158 DAT version 6214.0000.
clipse-javascript-helios-SR1-win32.zip has taken too long to complete and is bei
ng canceled. Scan engine version used is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\eclipse-cpp-helios-SR1-wi
clipse-cpp-helios-SR1-win32.zip has taken too long to complete and is being canc
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\apache-tomcat-7.0.5-windo
ws-x86.zip has taken too long to complete and is being canceled. Scan engine ve
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\vijay\development tools\a
pache-tomcat-7.0.5-windows-x86.zip has taken too long to complete and is being c
NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\java eclipse\eclipse\plug
ins\org.eclipse.ui.workbench_3.6.1.M20100826-1330.jar has taken too long to comp
lete and is being canceled. Scan engine version used is 5400.1158 DAT version 6
214.0000.
ava eclipse\eclipse\plugins\org.eclipse.ui.workbench_3.6.1.M20100826-1330.jar ha
s taken too long to complete and is being canceled. Scan engine version used is
5400.1158 DAT version 6214.0000.
ava eclipse\eclipse\plugins\org.eclipse.team.ui_3.5.101.R36x_v20100825-0800.jar
is 5400.1158 DAT version 6214.0000.
ava eclipse\eclipse\plugins\org.eclipse.swt.win32.win32.x86_3.6.1.v3655c.jar has
5400.1158 DAT version 6214.0000.
ins\org.eclipse.jdt.ui_3.6.1.r361_v20100825-0800.jar has taken too long to compl
ete and is being canceled. Scan engine version used is 5400.1158 DAT version 62
14.0000.
ava eclipse\eclipse\plugins\org.eclipse.jdt.ui_3.6.1.r361_v20100825-0800.jar has
5400.1158 DAT version 6214.0000.
ins\org.eclipse.jdt.core_3.6.1.v_A68_R36x.jar has taken too long to complete and
is being canceled. Scan engine version used is 5400.1158 DAT version 6214.0000
.
ava eclipse\eclipse\plugins\org.eclipse.jdt.core_3.6.1.v_A68_R36x.jar has taken
ins\org.eclipse.debug.ui_3.6.1.v20100901_r361.jar has taken too long to complete
and is being canceled. Scan engine version used is 5400.1158 DAT version 6214.
0000.
ava eclipse\eclipse\plugins\org.eclipse.debug.ui_3.6.1.v20100901_r361.jar has ta
ken too long to complete and is being canceled. Scan engine version used is 540
0.1158 DAT version 6214.0000.
ava eclipse\eclipse\plugins\org.apache.xerces_2.9.0.v201005080400.jar has taken
ins\com.ibm.icu_4.2.1.v20100412.jar has taken too long to complete and is being
ava eclipse\eclipse\plugins\com.ibm.icu_4.2.1.v20100412.jar has taken too long t
o complete and is being canceled. Scan engine version used is 5400.1158 DAT ver
sion 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of D:\vijay\development tools\H
ibernateSynchronizer-3.1.9.zip has taken too long to complete and is being cance
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\unimdmat
est\Application Data\Macromedia\Flash Player\#SharedObjects\BA5KR3M5\www.orkut.c
om\gtalksettings.sol has taken too long to complete and is being canceled. Scan
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\uxtheme.
l Users.WINDOWS\Desktop\Mozilla Firefox.lnk has taken too long to complete and i
s being canceled. Scan engine version used is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\REPAIR\SETUP.LOG
is 5400.1158 DAT version 6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\SHELL32.
DLL has taken too long to complete and is being canceled. Scan engine version u
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6214.0000.
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
ministrator.SANJAYBABA\Application Data\Microsoft\Internet Explorer\Quick Launch
\Mozilla Firefox.lnk has taken too long to complete and is being canceled. Scan
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\uniplat.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\rastapi.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6214.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Prefetch\DUMPREP.
EXE-1B46F901.pf has taken too long to complete and is being canceled. Scan engi
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\MSACM32.
est\Application Data\Mozilla\Firefox\Profiles\yj3z6rbi.default\cookies.sqlite-jo
urnal has taken too long to complete and is being canceled. Scan engine version
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\asfsipc.
l Users.WINDOWS\Application Data\McAfee\Common Framework\Catalog.xml has taken t
is 5400.1158 DAT version 6214.0000.
che\906AA27Ed01 has taken too long to complete and is being canceled. Scan engi
efox\chrome\toolkit.jar has taken too long to complete and is being canceled. S
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
is 5400.1158 DAT version 6213.0000.
ministrator.SANJAYBABA\Local Settings\desktop.ini has taken too long to complete
and is being canceled. Scan engine version used is 5400.1158 DAT version 6213.
0000.
che\C638440Cd01 has taken too long to complete and is being canceled. Scan engi
efox\res\forms.css has taken too long to complete and is being canceled. Scan e
efox\ssl3.dll has taken too long to complete and is being canceled. Scan engine
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Prefetch\FIREFOX.
EXE-28641590.pf has taken too long to complete and is being canceled. Scan engi
00.1158 DAT version 6213.0000.
is 5400.1158 DAT version 6213.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SoftwareDistribut
ion\DataStore\DataStore.edb has taken too long to complete and is being canceled
est\Application Data\Microsoft\Protect\S-1-5-21-1004336348-1770027372-725345543-
501\bd5804ca-877e-48c8-a1f4-6df96dbe8857 has taken too long to complete and is b
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wbem\wmi
prvse.exe has taken too long to complete and is being canceled. Scan engine ver
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\SPOOLSS.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\desk.cpl
is 5400.1158 DAT version 6211.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\KERNEL32
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\SQLSRV32
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Prefetch\NTOSBOOT
-B00DFAAD.pf has taken too long to complete and is being canceled. Scan engine
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
6211.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\WinSxS\Policies\X
86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6
.0.2600.2982.Policy has taken too long to complete and is being canceled. Scan
d is 5400.1158 DAT version 6211.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\unimdmat
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wuapi.dl
d is 5400.1158 DAT version 6211.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6211.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
d.
.
y...
.
sh using mysql-bin
.
disabled.
.
est\Desktop\IrfanView.lnk has taken too long to complete and is being canceled.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\wbem\wbe
mprox.dll has taken too long to complete and is being canceled. Scan engine ver
l Users.WINDOWS\Application Data\Microsoft\Network\Connections\Pbk\rasphone.pbk
is 5400.1158 DAT version 6211.0000.
6211.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Prefetch\WINWORD.
EXE-10D55173.pf has taken too long to complete and is being canceled. Scan engi
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\msapsspc
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
d is 5400.1158 DAT version 6211.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\Tasks\Bugzilla.Wh
ining.job has taken too long to complete and is being canceled. Scan engine ver
ineAtNews.job has taken too long to complete and is being canceled. Scan engine
efox\firefox.exe has taken too long to complete and is being canceled. Scan eng
ine version used is 5400.1158 DAT version 6211.0000.
is 5400.1158 DAT version 6211.0000.
is 5400.1158 DAT version 6211.0000.
est\Local Settings\Temp\FAP5F3.tmp has taken too long to complete and is being c
00.1158 DAT version 6211.0000.
6210.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\windows\system32\ipnathlp
Recovery complete.
(GPL)
.
d 0 events
.
Aug 6 2000 00:57:48
"
disabled.
.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\drprov.d
ed is 5400.1158 DAT version 6210.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\WS2HELP.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\WINTRUST
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
12/29/2010 9:26:25 PM Userenv Error None 1068 NT AUTHORITY\SYS
TEM SANJAYBABA Windows ended GPO processing because the computer shut d
own or the user logged off.
12/29/2010 5:25:35 PM McLogEvent Error None 1008 N/A
arted in 5 seconds;
12/29/2010 5:25:22 PM McLogEvent Error None 5051 NT AUTHO
The process will be terminated. Thread id : 2968 (0xb98)
Thread message :
Build VSCORE.13.3.1.100 / 5400.1158
Object being scanned = \Device\HarddiskVolume1\Documents and Settings\Guest\Sta
rt Menu\desktop.ini
by C:\WINDOWS\explorer.exe
4(0)(0)
4(0)(0)
7200(0)(0)
7595(0)(0)
7005(0)(0)
7004(0)(0)
5006(0)(0)
5004(0)(0)
12/29/2010 5:25:21 PM McLogEvent Error None 5051 NT AUTHO
The process will be terminated. Thread id : 2964 (0xb94)
Thread message :
Build VSCORE.13.3.1.100 / 5400.1158
Object being scanned = \Device\HarddiskVolume1\WINDOWS\system32\SAMLIB.dll
by C:\WINDOWS\explorer.exe
4(0)(0)
4(0)(0)
7200(0)(0)
7595(0)(0)
7005(0)(0)
7004(0)(0)
5006(0)(0)
5004(0)(0)
12/29/2010 5:23:35 PM Winlogon Information None 1002
N/A SANJAYBABA The shell stopped unexpectedly and Explorer.exe was rest
arted.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\dumprep.
est\Local Settings\Temp\FAP613.tmp has taken too long to complete and is being c
che\B1E167FEd01 has taken too long to complete and is being canceled. Scan engi
che\B1E167FEd01 has taken too long to complete and is being canceled. Scan engi
is 5400.1158 DAT version 6210.0000.
s\McAfee\Engine\config.dat has taken too long to complete and is being canceled.
l Users.WINDOWS\Application Data\McAfee\Common Framework\McScript.log has taken
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\FONTS\TREBUCBD.TT
F has taken too long to complete and is being canceled. Scan engine version use
d is 5400.1158 DAT version 6210.0000.
d is 5400.1158 DAT version 6210.0000.
00.1158 DAT version 6210.0000.
is 5400.1158 DAT version 6210.0000.
tected file C:\Documents and Settings\Guest\Local Settings\Temp\SHbfnvsB.rar.par
t\BACKGROUND.JPG. Scan engine version used is 5400.1158 DAT version 6209.0000.
6209.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\WinSxS\Policies\x
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\SECUR32.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\System32\ndptsp.t
sp has taken too long to complete and is being canceled. Scan engine version us
ed is 5400.1158 DAT version 6209.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\rpcss.dl
d is 5400.1158 DAT version 6209.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\RichEd20
est\Application Data\Microsoft\Protect\S-1-5-21-1004336348-1770027372-725345543-
501\252de3ed-1433-4f22-a894-a76d4a350c27 has taken too long to complete and is b
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6209.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
6209.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
12/28/2010 7:08:39 PM Application Hang Error (101) 1002
N/A SANJAYBABA Hanging application WinRAR.exe, version 3.62.0.0, hang m
odule hungapp, version 0.0.0.0, hang address 0x00000000.
RITY\SYSTEM SANJAYBABA The file I:\l-mqt82.zip\l-mqt82.exe contains Gen
eric.dx!imv Trojan. The file was successfully deleted.
RITY\SYSTEM SANJAYBABA The file I:\L-MQT82.ZIP contains Generic.dx!imv
Trojan. The file was successfully deleted.
d is 5400.1158 DAT version 6209.0000.
efox\chrome\en-US.jar has taken too long to complete and is being canceled. Sca
00.1158 DAT version 6209.0000.
is 5400.1158 DAT version 6209.0000.
est\Application Data\Mozilla\Firefox\Profiles\yj3z6rbi.default\formhistory.sqlit
e-journal has taken too long to complete and is being canceled. Scan engine ver
\tracking.log has taken too long to complete and is being canceled. Scan engine
est\Local Settings\Application Data\Mozilla\Firefox\Profiles\yj3z6rbi.default\ur
lclassifier3.sqlite-journal has taken too long to complete and is being canceled
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\SQLSRV32
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\system32\igfxpph.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\WinSxS\Policies\x
ed is 5400.1158 DAT version 6208.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\FONTS\GAUTAMI.TTF
is 5400.1158 DAT version 6208.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
disabled.
.
tected file C:\Documents and Settings\Administrator.SANJAYBABA\Local Settings\Te
mporary Internet Files\Content.IE5\EJ6FMXUB\mail[1].&am=!EEj2wTJ_eeX7BT6irnU2WkX
pPlg5rCabOyNA8A_ZETksSGHkO78uRDQ&fri\mail[1]. Scan engine version used is 5400.1
158 DAT version 6208.0000.
mporary Internet Files\Content.IE5\AX47YDA5\mail[1]\mail[1]. Scan engine version
mporary Internet Files\Content.IE5\AX47YDA5\ga[1].js\ga[1]. Scan engine version
mporary Internet Files\Content.IE5\W9OHQFOT\tTLWB_k9Iyc[1].js\tTLWB_k9Iyc[1]. Sc
an engine version used is 5400.1158 DAT version 6208.0000.
l Users.WINDOWS\Application Data\McAfee\DesktopProtection\UpdateLog.txt has take
n too long to complete and is being canceled. Scan engine version used is 5400.
1158 DAT version 6208.0000.
6208.0000.
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\QUARANTINE\7da810f81c1770
.bup has taken too long to complete and is being canceled. Scan engine version
00.1158 DAT version 6208.0000.
is 5400.1158 DAT version 6208.0000.
ministrator.SANJAYBABA\Application Data\Microsoft\Internet Explorer\Quick Launch
\Mozilla Firefox.lnk has taken too long to complete and is being canceled. Scan
NT AUTHORITY\SYSTEM SANJAYBABA The scan of C:\WINDOWS\SYSTEM32\RPCRT4.D
LL has taken too long to complete and is being canceled. Scan engine version us
ed is 5400.1158 DAT version 6207.0000.
Recovery complete.
Aug 6 2000 00:57:48
"
(GPL)
.
d 0 events
.
d.
.
y...
.
sh using mysql-bin
.
disabled.
.
ed is 5400.1158 DAT version 6207.0000.

Event

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Event

Uploaded by

Copyright:

Available Formats

1/6/2011 5:18:36 PM McLogEvent Information None 257

NT AUTHORITY\SYSTEM SANJAYBABA The scan of I:\SQL-server\DEV\MSEQ\X86\M

Number of signatures in EXTRA.DAT : None

Number of signatures in EXTRA.DAT : None

You might also like