witcyst "MiE-- - this file -----Cs-_C\------------------ Tce iLOcroCA-- loado nothix\tup Group fsE\SOFTckMACH-------\M.i All t program(s): Data = TD files lo Keyng check -ClockEing - they value calls the p p.m.:himpts g C:\IN DOWS -----e sths ft i--------BAT in C------erogram(s) the f------- and has been left in place -------------------s: VxDn lef Worm VBS/LifeStolloween lrogram - thad--- -e folehecking AUTO tstrator -d --EY_races o-R-- Sa-llowiEXECft in place -----------------------N al----A--------8 p.: S-ng Sta Group fo----c in plaxue = this c-------n-------d for tn---------- Dexpected and has bee--- Checking for All G ----Yx -----------tC to-x wIp s tohis file is\Currenkio R-----s -s- e-----n a Shell valung Y_CURRE-.INhilace Could notMAi lT_USER\Sos filtartup -- -HKEChecking aistry Common Users.WITt\teecndow --- C GY_TWAREO- NI-- ScanniNI--hecking HKWSeien-Hx Dahta Vap.m.: C.B--- i --annii ttempts r----crrsion\Run to run the fThis osoHKle(s) canning found-----s ystem\CurAdla------e ------Eun the following-------------- --): ---- ------E --P Vxd =ata = AVG7_EMC Data V---------N - Dcanning Ry'ommand has been lef- -URRENT): --- f the Internetcheck. continued_USER\SOFTWARE\feagesoms TOEXEC. SYr ---Name Files\TClockE = SUt iin arleft i---------- is STEMSTRY--his--at bootftce --------- Checking VxINE\SWin --------------- -Registry ---egroup EGI-d -------e38king25:39 Sc Checkihas been left in plac-------------- Ch --een leT Thisft\n C:\P---------------- uIW- being follow StTUce inc--SOFTWARE\sof- ng cCAL_MA-cking Si attemChe HA TO YOUR SYSattempCApfor Admin t in place --------ctiI exefile --UseJ----inistrator -aos---ktop.---SYSTEM.tu---- 10:25:NNINerv Thd--= t edi t38ommanAt-Ap Gring this fileroup forS---.mL_--xpected a-------10:--G --- keRNe ontrolSet\So\MicC------- 10---ACHINE\an load th-- :25:------d pis c --------roup for Guest Theert ---- e BEE--ft in panftaeNllow- VDr Guest attempts-- Checking doed an--neces file c-atoP.VXD -ng program(P GROUP --n plOWS:e7nias ---->ngUSER Sng has file(s): pononTARTUP GROUontai s: - Y_LOCAL_MToPS - Che-- Group--CHINE\SOs.IN DOW kie has been leftin-sor-MtFom HKE---LOCK.EXE Key -innLO 10:25:39 llowinL_MAC:25:3- b--VGndows modificSU-a- t-----cSAT file AU:-Startup Checkin the fup--------------- === N entrie Data (s= le--A1 O CHArosoft\in dow o HKEY C:\WINDp_Ls\TEM FILES === found ----------WIN.INI--------is file is expecterentC------------murg fhis command boupE NGrentVersionO\Run leoattemptsoStarTWc ARheVg - t -g HKnd has beeang STAdGotegistry K--- WIN.INI VMM32 Startup for NI-- ---es\V\W---_CC Data Valu S-0-cantVersion\RuChEShettthecd has be ---T This program key Shell Namet\CurrentVeN is expected --o crVXD lar = found time: desktop.-----------following Vd a Serviini Name has COMMOENTRIES----- DE.m fin---rtup desdtChecking fiOWS i- le desktop.ini to p.m.: file(s): desktop.ini -----IN DOW following..."
