;********************************************************************************

********************************************************************************
*******************
ANALYSIS: 2010-11-05 20:54:51
PROTECTIONS: 1
MALWARE: 31
SUSPECTS: 7
;*******************************************************************************
********************************************************************************
********************
PROTECTIONS
Description Version Activ
e Updated
;===============================================================================
================================================================================
====================
ESET NOD32 Antivirus 4.0 4.0 Yes
Yes
;===============================================================================
================================================================================
====================
MALWARE
Id Description Type Active Sever
ity Disinfectable Disinfected Location
;===============================================================================
================================================================================
====================
00139060 Cookie/Casalemedia TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@casalem
edia[2].txt
00139060 Cookie/Casalemedia TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@c
asalemedia[2].txt
00139060 Cookie/Casalemedia TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@c
asalemedia[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@d
oubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@d
oubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@doublec
lick[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@a
tdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
tdmt[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@atdmt[1
].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@tradedo
ubler[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@t
radedoubler[2].txt
00145457 Cookie/FastClick TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@f
astclick[1].txt
00145457 Cookie/FastClick TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@fastcli
ck[2].txt
00145457 Cookie/FastClick TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@f
astclick[2].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@tribalf
usion[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@t
ribalfusion[2].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@t
ribalfusion[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@m
ediaplex[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@m
ediaplex[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@mediapl
ex[1].txt
00167642 Cookie/Com.com TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@com[1].
txt
00167647 Cookie/Yadro TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@y
adro[1].txt
00167647 Cookie/Yadro TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@yadro[2
].txt
00167647 Cookie/Yadro TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@y
adro[2].txt
00167704 Cookie/Xiti TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@x
iti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@x
iti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@xiti[2]
.txt
00167753 Cookie/Statcounter TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@s
tatcounter[2].txt
00167753 Cookie/Statcounter TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@statcou
nter[1].txt
00167753 Cookie/Statcounter TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@s
tatcounter[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@a
d.yieldmanager[2].txt
00168056 Cookie/YieldManager TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
d.yieldmanager[2].txt
00168056 Cookie/YieldManager TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@a
d.yieldmanager[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@apmebf[
1].txt
00168061 Cookie/Apmebf TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@a
pmebf[2].txt
00168061 Cookie/Apmebf TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
pmebf[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@serving
-sys[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@s
erving-sys[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@s
erving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@bs.serv
ing-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@b
s.serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@b
s.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@weboram
a[1].txt
00168106 Cookie/Weborama TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@w
eborama[1].txt
00168109 Cookie/Adtech TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
dtech[1].txt
00168109 Cookie/Adtech TrackingCookie No 0
Yes No c:\documents and settings\admin\cookies\admin@a
dtech[1].txt
00168109 Cookie/Adtech TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@adtech[
1].txt
00168116 Cookie/Comclick TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@fl01.ct
2.comclick[2].txt
00169190 Cookie/Advertising TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
dvertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@adverti
sing[1].txt
00170304 Cookie/WebtrendsLive TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@statse.
webtrendslive[2].txt
00170549 Cookie/FortuneCity TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@fortune
city[1].txt
00170554 Cookie/Overture TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@overtur
e[1].txt
00170554 Cookie/Overture TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@o
verture[2].txt
00170557 Cookie/Com.com TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@t
erra.com[1].txt
00170557 Cookie/Com.com TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@terra.c
om[1].txt
00172221 Cookie/Zedo TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@zedo[2]
.txt
00187950 Cookie/bravenetA TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@bravene
t[1].txt
00191644 Cookie/adultfriendfinder TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@adultfr
iendfinder[2].txt
00212685 Cookie/FortuneCity TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@fortune
city[3].txt
00262020 Cookie/Atwola TrackingCookie No 0
Yes No c:\documents and settings\sofia\cookies\sofia@a
twola[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@smartad
server[2].txt
00286738 Cookie/Cgi-bin TrackingCookie No 0
Yes No c:\documents and settings\gs\cookies\gs@www1.ad
dfreestats[2].txt
03074964 Trj/CI.A Virus/Trojan No 0
Yes No c:\documents and settings\gs\escritorio\nodo b\
progra y tuto de hawei\new folder\bsc6000v900r008c12_lmt.zip[bsc6000v900r008c12_
lmt/data/lmtiviewcommon.jar][client/vshell.exe]
;===============================================================================
================================================================================
====================
SUSPECTS
Sent Location
;===============================================================================
================================================================================
====================
No c:\documents and settings\gs\escritorio\nodo b\progra y tuto de hawei\
new folder\bsc6000v900r008c12_lmt.zip[bsc6000v900r008c12_lmt/data/ilmt_core_clie
nt.jar][client/tracereview/memorytools.dll]
No d:\backup 02-2010\escritorio\n64\project64_1.7.0.49_june-2009.exe
No d:\nueva carpeta (2)\programas\starcraft\launcher.exe
No d:\nueva carpeta (3)\rotam.sc2.esp.rzr.dd.part01.rar[sc2 español\crack r
azor1911\keytro.exe]
No d:\proteus\models\max7219.dll
No d:\proyectos\simu\models\max7219.dll
No d:\proyectos\lupin\foxit reader pro v3.0.1506 portable (multi lang)\fo
xit reader\400000700002i\splash.exe
;===============================================================================
================================================================================
====================
VULNERABILITIES
Id Severity Description
;===============================================================================
================================================================================
====================
223917 HIGH MS10-084
223916 HIGH MS10-083
223914 HIGH MS10-081
223909 HIGH MS10-076
223906 HIGH MS10-073
223904 HIGH MS10-071
223355 HIGH MS10-069
223353 HIGH MS10-067
223352 HIGH MS10-066
223349 HIGH MS10-063
223346 HIGH MS10-061
222627 HIGH MS10-054
222626 HIGH MS10-053
222622 HIGH MS10-049
222621 HIGH MS10-048
222620 HIGH MS10-047
222470 HIGH MS10-046
222062 HIGH MS10-042
221290 HIGH MS10-035
221289 HIGH MS10-034
221287 HIGH MS10-032
219830 HIGH MS10-029
219822 HIGH MS10-021
219821 HIGH MS10-020
219647 HIGH MS10-018
217842 HIGH MS10-015
217839 HIGH MS10-012
217838 HIGH MS10-011
217834 HIGH MS10-008
217832 HIGH MS10-006
217831 HIGH MS10-005
217169 HIGH MS10-002
216839 HIGH MS10-001
215938 HIGH MS09-072
215935 HIGH MS09-069
215048 HIGH MS09-065
214076 HIGH MS09-059
214075 HIGH MS09-058
214074 HIGH MS09-057
214073 HIGH MS09-056
214072 HIGH MS09-055
214071 HIGH MS09-054
213109 HIGH MS09-046
212494 HIGH MS09-042
212493 HIGH MS09-041
212530 HIGH MS09-034
211784 HIGH MS09-032
211781 HIGH MS09-029
210625 HIGH MS09-026
210624 HIGH MS09-025
210621 HIGH MS09-022
210618 HIGH MS09-019
208380 HIGH MS09-015
208378 HIGH MS09-013
208377 HIGH MS09-012
206981 HIGH MS09-007
206980 HIGH MS09-006
204670 HIGH MS09-001
203505 HIGH MS08-071
202465 HIGH MS08-068
201683 HIGH MS08-067
201258 HIGH MS08-066
201256 HIGH MS08-064
201255 HIGH MS08-063
201253 HIGH MS08-061
209275 HIGH MS08-049
196455 MEDIUM MS08-037
194862 HIGH MS08-032
194860 HIGH MS08-030
;===============================================================================
================================================================================
====================