Scribd Logo
Upload

Welcome to Scribd!

  • 93 views

    Asasasasasa

    Uploaded by

    SivaReddy
    The document reports on files detected on a system on July 20, 2017. It detected two bitcoin miner files (NsCpuCNMiner64.exe and NsGpuCNMiner.exe) and flagged them as risks. It also detected a file (com.google.android.apps.maps .exe) that was identified as the Worm.Win32.AutoRun virus and was subsequently deleted and moved to quarantine. The files were detected across multiple applications including Windows Explorer and Windows services.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd

    Asasasasasa

    Uploaded by

    SivaReddy
    93 views27 pages
    The document reports on files detected on a system on July 20, 2017. It detected two bitcoin miner files (NsCpuCNMiner64.exe and NsGpuCNMiner.exe) and flagged them as risks. It also detected a file (com.google.android.apps.maps .exe) that was identified as the Worm.Win32.AutoRun virus and was subsequently deleted and moved to quarantine. The files were detected across multiple applications including Windows Explorer and Windows services.

    Original Description:

    asasasa

    Original Title

    asasasasasa

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document reports on files detected on a system on July 20, 2017. It detected two bitcoin miner files (NsCpuCNMiner64.exe and NsGpuCNMiner.exe) and flagged them as risks. It also detected a file (com.google.android.apps.maps .exe) that was identified as the Worm.Win32.AutoRun virus and was subsequently deleted and moved to quarantine. The files were detected across multiple applications including Windows Explorer and Windows services.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    93 views27 pages

    Asasasasasa

    Uploaded by

    SivaReddy
    The document reports on files detected on a system on July 20, 2017. It detected two bitcoin miner files (NsCpuCNMiner64.exe and NsGpuCNMiner.exe) and flagged them as risks. It also detected a file (com.google.android.apps.maps .exe) that was identified as the Worm.Win32.AutoRun virus and was subsequently deleted and moved to quarantine. The files were detected across multiple applications including Windows Explorer and Windows services.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    You are on page 1of 27

    20.07.2017 19.59.

    01 Object (file) detected


    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Time: 20-07-2017 19:59
    Object name: not-a-virus:RiskTool.Win64.BitCoinMiner.sx Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exe Time: 20-07-2017 19:59 Object
    name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Time: 20-07-2017 19:59
    Object name: not-a-virus:RiskTool.Win64.BitCoinMiner.sx Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exe Time: 20-07-2017 19:59 Object
    name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Time: 20-07-2017 19:59
    Object name: not-a-virus:RiskTool.Win64.BitCoinMiner.sx Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exe Time: 20-07-2017 19:59 Object
    name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Time: 20-07-2017 19:59
    Object name: not-a-virus:RiskTool.Win64.BitCoinMiner.sx Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exe Time: 20-07-2017 19:59 Object
    name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exe Time: 20-07-2017 19:59 Object
    name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application: Host
    Process for Windows Services File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Time: 20-07-2017 19:59
    Object name: not-a-virus:RiskTool.Win64.BitCoinMiner.sx Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe Application:
    Windows Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner64.exe
    Time: 20-07-2017 19:59 Object name: not-a-
    virus:RiskTool.Win64.BitCoinMiner.sx Reason: Information
    20.07.2017 19.59.01 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeApplication: Windows
    Explorer File: C:\Users\SIVA\AppData\Roaming\Images\NsGpuCNMiner.exeTime: 20-07-
    2017 19:59 Object name: not-a-virus:RiskTool.Win32.BitCoinMiner.ygz Reason:
    Information
    20.07.2017 19.56.28 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.28 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\com.google.android.apps.maps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.maps\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.27 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.26 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\com.google.android.apps.transl
    ate .exe Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.26 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.26 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.26 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\olpv3 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\02 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Object (file) detected D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\com.google.android.gms .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Object (file) detected D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.25 Detected object (file) deleted D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Object (file) detected D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\cache\cache .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) deleted D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Object (file) detected D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) deleted D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Object (file) detected D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) deleted D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Object (file) detected D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\cache\cache .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) deleted D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.24 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.23 Object (file) detected D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.23 Detected object (file) deleted D:\3500
    books\LOST.DIR\LOST.DIR .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\LOST.DIR\LOST.DIR .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.23 Detected object (file) moved to Quarantine D:\3500
    books\LOST.DIR\LOST.DIR .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\LOST.DIR\LOST.DIR .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.22 Object (file) detected D:\3500 books\LOST.DIR\LOST.DIR
    .exe Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\LOST.DIR\LOST.DIR .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.22 Detected object (file) deleted D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.22 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Object (file) detected D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.skype.raider\com.skype.raider .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) deleted D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Object (file) detected D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.sec.android.gallery3d\com.sec.android.gallery3d .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) deleted D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Object (file) detected D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.samsung.android.coreapps\com.samsung.android.coreapps .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) deleted D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.21 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Object (file) detected D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\cache\cache .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) deleted D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Object (file) detected D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.mygalaxy\com.mygalaxy .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) deleted D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Object (file) detected D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.microsoft.skydrive\com.microsoft.skydrive .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.20 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Object (file) detected D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\files\files .exe Time: 20-07-2017
    19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Object (file) detected D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.youtube\com.google.android.youtube .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Object (file) detected D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.gms\files\files .exe Time: 20-07-2017 19:56
    Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.19 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\25 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r12\r12 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.18 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\25\r11\r11 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\02\r13\r13 .exe
    Time: 20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.17 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.12 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\olpv3\v5\v5 .exe Time:
    20-07-2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.12 Detected object (file) deleted D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.12 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Object (file) detected D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\com.google.android.apps.translate\files\files .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) deleted D:\3500
    books\Android\data\data .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\Android\data\data .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) moved to Quarantine D:\3500
    books\Android\data\data .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\Android\data\data .exe Time: 20-07-2017 19:56 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Object (file) detected D:\3500 books\Android\data\data
    .exe Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\data\data .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) deleted D:\3500
    books\Android\Android .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\Android\Android .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) moved to Quarantine D:\3500
    books\Android\Android .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\Android\Android .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Object (file) detected D:\3500 books\Android\Android .exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\Android\Android .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) deleted D:\3500 books\3--Telugu-
    Devotional-Spiritual-Free-Research-Program\3--Telugu-Devotional-Spiritual-Free-
    Research-Program .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\3--Telugu-Devotional-Spiritual-Free-Research-Program\3--Telugu-
    Devotional-Spiritual-Free-Research-Program .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.11 Detected object (file) moved to Quarantine D:\3500
    books\3--Telugu-Devotional-Spiritual-Free-Research-Program\3--Telugu-Devotional-
    Spiritual-Free-Research-Program .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\3--Telugu-Devotional-Spiritual-Free-Research-
    Program\3--Telugu-Devotional-Spiritual-Free-Research-Program .exe Time: 20-07-
    2017 19:56 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.56.10 Object (file) detected D:\3500 books\3--Telugu-Devotional-
    Spiritual-Free-Research-Program\3--Telugu-Devotional-Spiritual-Free-Research-
    Program .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\3--Telugu-Devotional-Spiritual-Free-Research-Program\3--Telugu-
    Devotional-Spiritual-Free-Research-Program .exe Time: 20-07-2017 19:56 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.55.12 Detected object (file) deleted D:\3500 books\1--e-
    Books\9--Bhagavatham\9--Bhagavatham .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\9--Bhagavatham\9--Bhagavatham .exe
    Time: 20-07-2017 19:55 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.55.12 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\9--Bhagavatham\9--Bhagavatham .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\9--Bhagavatham\9--
    Bhagavatham .exe Time: 20-07-2017 19:55 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.55.07 Object (file) detected D:\3500 books\1--e-Books\9--
    Bhagavatham\9--Bhagavatham .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\9--Bhagavatham\9--Bhagavatham .exe Time:
    20-07-2017 19:55 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.55 Detected object (file) deleted D:\3500 books\1--e-
    Books\8--Puranamulu\8--Puranamulu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\8--Puranamulu\8--Puranamulu .exe
    Time: 20-07-2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.55 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\8--Puranamulu\8--Puranamulu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\8--Puranamulu\8--
    Puranamulu .exe Time: 20-07-2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.54 Object (file) detected D:\3500 books\1--e-Books\8--
    Puranamulu\8--Puranamulu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\8--Puranamulu\8--Puranamulu .exe Time: 20-07-
    2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.10 Detected object (file) deleted D:\3500 books\1--e-
    Books\7--BhagavadGita\7--BhagavadGita .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\7--BhagavadGita\7--
    BhagavadGita .exe Time: 20-07-2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.10 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\7--BhagavadGita\7--BhagavadGita .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\7--BhagavadGita\7--
    BhagavadGita .exe Time: 20-07-2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.53.05 Object (file) detected D:\3500 books\1--e-Books\7--
    BhagavadGita\7--BhagavadGita .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\7--BhagavadGita\7--BhagavadGita .exe Time:
    20-07-2017 19:53 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.52.00 Detected object (file) deleted D:\3500 books\1--e-
    Books\6--MahaBharatham\6--MahaBharatham .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\6--MahaBharatham\6--
    MahaBharatham .exe Time: 20-07-2017 19:52 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.52.00 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\6--MahaBharatham\6--MahaBharatham .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\6--MahaBharatham\6--
    MahaBharatham .exe Time: 20-07-2017 19:52 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.51.56 Object (file) detected D:\3500 books\1--e-Books\6--
    MahaBharatham\6--MahaBharatham .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\6--MahaBharatham\6--MahaBharatham .exe Time:
    20-07-2017 19:51 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.50.43 Object (file) detected E:\SOFTWARES\windows victom
    software remover\RemoveWAT 2.2.6.exe Application: Host Process for Windows
    Services File: E:\SOFTWARES\windows victom software remover\RemoveWAT 2.2.6.exe
    Time: 20-07-2017 19:50 Object name: not-a-virus:RiskTool.Win32.WatKill.a
    Reason: Information
    20.07.2017 19.50.43 Object (file) detected E:\SOFTWARES\windows victom
    software remover\RemoveWAT 2.2.6.exe Application: Host Process for Windows
    Services File: E:\SOFTWARES\windows victom software remover\RemoveWAT 2.2.6.exe
    Time: 20-07-2017 19:50 Object name: not-a-virus:RiskTool.Win32.WatKill.a
    Reason: Information
    20.07.2017 19.50.43 Object (file) detected E:\SOFTWARES\windows victom
    software remover\RemoveWAT 2.2.6.exe Application: Host Process for Windows
    Services File: E:\SOFTWARES\windows victom software remover\RemoveWAT 2.2.6.exe
    Time: 20-07-2017 19:50 Object name: not-a-virus:RiskTool.Win32.WatKill.a
    Reason: Information
    20.07.2017 19.50.43 Object (file) detected E:\SOFTWARES\windows victom
    software remover\RemoveWAT 2.2.6.exe Application: Windows Explorer File:
    E:\SOFTWARES\windows victom software remover\RemoveWAT 2.2.6.exe Time: 20-07-2017
    19:50 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.43 Object (file) detected E:\SOFTWARES\windows victom
    software remover\RemoveWAT 2.2.6.exe Application: Host Process for Windows
    Services File: E:\SOFTWARES\windows victom software remover\RemoveWAT 2.2.6.exe
    Time: 20-07-2017 19:50 Object name: not-a-virus:RiskTool.Win32.WatKill.a
    Reason: Information
    20.07.2017 19.50.42 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.42 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.42 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.31 Object (file) not processed
    E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe Application:
    Windows Explorer File: E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe
    Time: 20-07-2017 19:50 Object name: not-a-virus:HEUR:AdWare.Win32.Ocna.gen
    Reason: Allowed by user
    20.07.2017 19.50.22 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.22 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.22 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.22 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.22 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.21 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.21 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:50 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.50.04 Detected object (file) deleted D:\3500 books\1--e-
    Books\5--Ramayanam\5--Ramayanam .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\5--Ramayanam\5--Ramayanam .exe
    Time: 20-07-2017 19:50 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.50.04 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\5--Ramayanam\5--Ramayanam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\5--Ramayanam\5--Ramayanam
    .exe Time: 20-07-2017 19:50 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.50.04 Object (file) detected D:\3500 books\1--e-Books\5--
    Ramayanam\5--Ramayanam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\5--Ramayanam\5--Ramayanam .exe Time: 20-07-
    2017 19:50 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.49.42 Detected object (file) disinfected
    E:\SOFTWARES\SHAREitTHIRDPART.exe Application: Windows Explorer File:
    E:\SOFTWARES\SHAREitTHIRDPART.exe Time: 20-07-2017 19:49 Object name:
    Virus.Win32.Sality.gen
    20.07.2017 19.49.37 Detected object (file) moved to Quarantine
    E:\SOFTWARES\SHAREitTHIRDPART.exe Application: Windows Explorer File:
    E:\SOFTWARES\SHAREitTHIRDPART.exe Time: 20-07-2017 19:49 Object name:
    Virus.Win32.Sality.gen
    20.07.2017 19.49.35 Object (file) detected E:\SOFTWARES\SHAREitTHIRDPART.exe
    Application: Windows Explorer File: E:\SOFTWARES\SHAREitTHIRDPART.exe Time:
    20-07-2017 19:49 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.49.35 Detected object (file) disinfected
    E:\SOFTWARES\TypingMaster 2001 Full Verson\tm2001uk.exe Application:
    Windows Explorer File: E:\SOFTWARES\TypingMaster 2001 Full Verson\tm2001uk.exe
    Time: 20-07-2017 19:49 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.49.29 Detected object (file) moved to Quarantine
    E:\SOFTWARES\TypingMaster 2001 Full Verson\tm2001uk.exe Application:
    Windows Explorer File: E:\SOFTWARES\TypingMaster 2001 Full Verson\tm2001uk.exe
    Time: 20-07-2017 19:49 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.49.22 Object (file) detected E:\SOFTWARES\TypingMaster 2001 Full
    Verson\tm2001uk.exe Application: Windows Explorer File:
    E:\SOFTWARES\TypingMaster 2001 Full Verson\tm2001uk.exe Time: 20-07-2017 19:49
    Object name: Virus.Win32.Sality.gen
    20.07.2017 19.49.03 Object (file) detected
    E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe Application:
    Windows Explorer File: E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe
    Time: 20-07-2017 19:49 Object name: not-a-virus:HEUR:AdWare.Win32.Ocna.gen
    20.07.2017 19.49.03 Object (file) not processed
    E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe Application:
    Windows Explorer File: E:\SOFTWARES\Astrology_books_telugu_pdf_downloader.exe
    Time: 20-07-2017 19:49 Object name: not-a-virus:HEUR:AdWare.Win32.Ocna.gen
    Reason: Allowed by user
    20.07.2017 19.48.31 Detected object (file) deleted E:\images.scr
    Application: Windows Explorer File: E:\images.scr Time: 20-07-2017 19:48
    Object name: HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 19.48.31 Detected object (file) moved to Quarantine
    E:\images.scr Application: Windows Explorer File: E:\images.scr Time:
    20-07-2017 19:48 Object name: HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 19.48.27 Object (file) detected E:\images.scr Application:
    Windows Explorer File: E:\images.scr Time: 20-07-2017 19:48 Object name:
    HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 19.48.16 Detected object (file) deleted D:\3500 books\1--e-
    Books\4--JnanaYogam\4--JnanaYogam .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\4--JnanaYogam\4--JnanaYogam .exe
    Time: 20-07-2017 19:48 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.48.16 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\4--JnanaYogam\4--JnanaYogam .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\4--JnanaYogam\4--
    JnanaYogam .exe Time: 20-07-2017 19:48 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.48.15 Object (file) detected D:\3500 books\1--e-Books\4--
    JnanaYogam\4--JnanaYogam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\4--JnanaYogam\4--JnanaYogam .exe Time: 20-07-
    2017 19:48 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.48.11 Detected object (file) deleted D:\3500 books\1--e-
    Books\33--VyakthitvaVikasam\33--VyakthitvaVikasam .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\33--
    VyakthitvaVikasam\33--VyakthitvaVikasam .exe Time: 20-07-2017 19:48 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.48.11 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\33--VyakthitvaVikasam\33--VyakthitvaVikasam .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500 books\1--e-Books\33--
    VyakthitvaVikasam\33--VyakthitvaVikasam .exe Time: 20-07-2017 19:48 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.48.04 Object (file) detected D:\3500 books\1--e-Books\33--
    VyakthitvaVikasam\33--VyakthitvaVikasam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\33--VyakthitvaVikasam\33--
    VyakthitvaVikasam .exe Time: 20-07-2017 19:48 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.47.08 Detected object (file) deleted D:\3500 books\1--e-
    Books\32--Vignanam\32--Vignanam .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\32--Vignanam\32--Vignanam .exe
    Time: 20-07-2017 19:47 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.47.08 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\32--Vignanam\32--Vignanam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\32--Vignanam\32--Vignanam
    .exe Time: 20-07-2017 19:47 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.47.07 Object (file) detected D:\3500 books\1--e-Books\32--
    Vignanam\32--Vignanam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\32--Vignanam\32--Vignanam .exe Time: 20-07-
    2017 19:47 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.43 Detected object (file) deleted D:\3500 books\1--e-
    Books\31--Charitra\31--Charitra .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\31--Charitra\31--Charitra .exe
    Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.43 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\31--Charitra\31--Charitra .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\31--Charitra\31--Charitra
    .exe Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.43 Object (file) detected D:\3500 books\1--e-Books\31--
    Charitra\31--Charitra .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\31--Charitra\31--Charitra .exe Time: 20-07-
    2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.43 Detected object (file) deleted D:\3500 books\1--e-
    Books\30--Pillalu\30--Pillalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\30--Pillalu\30--Pillalu .exeTime: 20-07-2017
    19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.43 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\30--Pillalu\30--Pillalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\30--Pillalu\30--Pillalu .exe
    Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.37 Object (file) detected D:\3500 books\1--e-Books\30--
    Pillalu\30--Pillalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\30--Pillalu\30--Pillalu .exeTime: 20-07-2017
    19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.30 Detected object (file) deleted D:\3500 books\1--e-
    Books\3--RajaYogam\3--RajaYogam .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\3--RajaYogam\3--RajaYogam .exe
    Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.30 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\3--RajaYogam\3--RajaYogam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\3--RajaYogam\3--RajaYogam
    .exe Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.30 Object (file) detected D:\3500 books\1--e-Books\3--
    RajaYogam\3--RajaYogam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\3--RajaYogam\3--RajaYogam .exe Time: 20-07-
    2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.20 Detected object (file) deleted D:\3500 books\1--e-
    Books\29--Mahilalu\29--Mahilalu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\29--Mahilalu\29--Mahilalu .exe
    Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.20 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\29--Mahilalu\29--Mahilalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\29--Mahilalu\29--Mahilalu
    .exe Time: 20-07-2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.20 Object (file) detected D:\3500 books\1--e-Books\29--
    Mahilalu\29--Mahilalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\29--Mahilalu\29--Mahilalu .exe Time: 20-07-
    2017 19:46 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.07 Detected object (file) deleted D:\3500 books\1--e-
    Books\28--JeevithaCharitra\28--JeevithaCharitra .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\28--
    JeevithaCharitra\28--JeevithaCharitra .exe Time: 20-07-2017 19:46 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.07 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\28--JeevithaCharitra\28--JeevithaCharitra .exe Application:
    Microsoft Windows Search Protocol Host File: D:\3500 books\1--e-Books\28--
    JeevithaCharitra\28--JeevithaCharitra .exe Time: 20-07-2017 19:46 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.46.07 Object (file) detected D:\3500 books\1--e-Books\28--
    JeevithaCharitra\28--JeevithaCharitra .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\28--JeevithaCharitra\28--
    JeevithaCharitra .exe Time: 20-07-2017 19:46 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.36 Detected object (file) deleted D:\3500 books\1--e-
    Books\27--Kavulu\27--Kavulu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\27--Kavulu\27--Kavulu .exe Time: 20-07-2017
    19:45 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.36 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\27--Kavulu\27--Kavulu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\27--Kavulu\27--Kavulu .exe
    Time: 20-07-2017 19:45 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.36 Object (file) detected D:\3500 books\1--e-Books\27--
    Kavulu\27--Kavulu .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\1--e-Books\27--Kavulu\27--Kavulu .exe Time: 20-07-2017 19:45 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.36 Detected object (file) deleted D:\3500 books\1--e-
    Books\26--Bhakthulu\26--Bhakthulu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\26--Bhakthulu\26--Bhakthulu .exe
    Time: 20-07-2017 19:45 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.36 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\26--Bhakthulu\26--Bhakthulu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\26--Bhakthulu\26--
    Bhakthulu .exe Time: 20-07-2017 19:45 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.45.29 Object (file) detected D:\3500 books\1--e-Books\26--
    Bhakthulu\26--Bhakthulu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\26--Bhakthulu\26--Bhakthulu .exe Time: 20-07-
    2017 19:45 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.22 Detected object (file) deleted D:\3500 books\1--e-
    Books\25--Guruvulu\25--Guruvulu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\25--Guruvulu\25--Guruvulu .exe
    Time: 20-07-2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.22 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\25--Guruvulu\25--Guruvulu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\25--Guruvulu\25--Guruvulu
    .exe Time: 20-07-2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.21 Object (file) detected D:\3500 books\1--e-Books\25--
    Guruvulu\25--Guruvulu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\25--Guruvulu\25--Guruvulu .exe Time: 20-07-
    2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.02 Detected object (file) deleted D:\3500 books\1--e-
    Books\24--DeviDevatalu\24--DeviDevatalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\24--DeviDevatalu\24--
    DeviDevatalu .exe Time: 20-07-2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.02 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\24--DeviDevatalu\24--DeviDevatalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\24--DeviDevatalu\24--
    DeviDevatalu .exe Time: 20-07-2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.44.02 Object (file) detected D:\3500 books\1--e-Books\24--
    DeviDevatalu\24--DeviDevatalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\24--DeviDevatalu\24--DeviDevatalu .exe Time:
    20-07-2017 19:44 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.53 Detected object (file) deleted D:\3500 books\1--e-
    Books\23--Geyalu\23--Geyalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\23--Geyalu\23--Geyalu .exe Time: 20-07-2017
    19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.53 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\23--Geyalu\23--Geyalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\23--Geyalu\23--Geyalu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.52 Object (file) detected D:\3500 books\1--e-Books\23--
    Geyalu\23--Geyalu .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\1--e-Books\23--Geyalu\23--Geyalu .exe Time: 20-07-2017 19:43 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.39 Detected object (file) deleted D:\3500 books\1--e-
    Books\22--Keerthanalu\22--Keerthanalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\22--Keerthanalu\22--
    Keerthanalu .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.39 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\22--Keerthanalu\22--Keerthanalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\22--Keerthanalu\22--
    Keerthanalu .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.39 Object (file) detected D:\3500 books\1--e-Books\22--
    Keerthanalu\22--Keerthanalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\22--Keerthanalu\22--Keerthanalu .exe Time:
    20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.37 Detected object (file) deleted D:\3500 books\1--e-
    Books\21--Natakalu\21--Natakalu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\21--Natakalu\21--Natakalu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.37 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\21--Natakalu\21--Natakalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\21--Natakalu\21--Natakalu
    .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.36 Object (file) detected D:\3500 books\1--e-Books\21--
    Natakalu\21--Natakalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\21--Natakalu\21--Natakalu .exe Time: 20-07-
    2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.35 Detected object (file) deleted D:\3500 books\1--e-
    Books\20--Kavyalu\20--Kavyalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\20--Kavyalu\20--Kavyalu .exeTime: 20-07-2017
    19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.35 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\20--Kavyalu\20--Kavyalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\20--Kavyalu\20--Kavyalu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.34 Object (file) detected D:\3500 books\1--e-Books\20--
    Kavyalu\20--Kavyalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\20--Kavyalu\20--Kavyalu .exeTime: 20-07-2017
    19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.34 Detected object (file) deleted D:\3500 books\1--e-
    Books\2--KarmaYogam\2--KarmaYogam .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\2--KarmaYogam\2--KarmaYogam .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.34 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\2--KarmaYogam\2--KarmaYogam .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\2--KarmaYogam\2--
    KarmaYogam .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.28 Object (file) detected D:\3500 books\1--e-Books\2--
    KarmaYogam\2--KarmaYogam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\2--KarmaYogam\2--KarmaYogam .exe Time: 20-07-
    2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.19 Detected object (file) deleted D:\3500 books\1--e-
    Books\19--Sukthulu\19--Sukthulu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\19--Sukthulu\19--Sukthulu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.19 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\19--Sukthulu\19--Sukthulu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\19--Sukthulu\19--Sukthulu
    .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.19 Object (file) detected D:\3500 books\1--e-Books\19--
    Sukthulu\19--Sukthulu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\19--Sukthulu\19--Sukthulu .exe Time: 20-07-
    2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.15 Detected object (file) deleted D:\3500 books\1--e-
    Books\18--Shatakalu\18--Shatakalu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\18--Shatakalu\18--Shatakalu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.14 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\18--Shatakalu\18--Shatakalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\18--Shatakalu\18--
    Shatakalu .exe Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.14 Object (file) detected D:\3500 books\1--e-Books\18--
    Shatakalu\18--Shatakalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\18--Shatakalu\18--Shatakalu .exe Time: 20-07-
    2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.03 Detected object (file) deleted D:\3500 books\1--e-
    Books\17--Kathalu\17--Kathalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\17--Kathalu\17--Kathalu .exeTime: 20-07-2017
    19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.03 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\17--Kathalu\17--Kathalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\17--Kathalu\17--Kathalu .exe
    Time: 20-07-2017 19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.43.03 Object (file) detected D:\3500 books\1--e-Books\17--
    Kathalu\17--Kathalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\17--Kathalu\17--Kathalu .exeTime: 20-07-2017
    19:43 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.45 Detected object (file) deleted D:\3500 books\2--
    Photos\2--Photos .exe Application: Windows Explorer File: D:\3500 books\2--
    Photos\2--Photos .exe Time: 20-07-2017 19:42 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.45 Detected object (file) moved to Quarantine D:\3500
    books\2--Photos\2--Photos .exe Application: Windows Explorer File: D:\3500
    books\2--Photos\2--Photos .exe Time: 20-07-2017 19:42 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.45 Object (file) detected D:\3500 books\2--Photos\2--
    Photos .exe Application: Windows Explorer File: D:\3500 books\2--Photos\2--
    Photos .exe Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.39 Detected object (file) deleted D:\3500 books\1--e-
    Books\16--Dharmam\16--Dharmam .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\16--Dharmam\16--Dharmam .exeTime: 20-07-2017
    19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.39 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\16--Dharmam\16--Dharmam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\16--Dharmam\16--Dharmam .exe
    Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.39 Object (file) detected D:\3500 books\1--e-Books\16--
    Dharmam\16--Dharmam .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\16--Dharmam\16--Dharmam .exeTime: 20-07-2017
    19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.37 Detected object (file) deleted D:\3500 books\1--e-
    Books\15--Gitas\15--Gitas .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\15--Gitas\15--Gitas .exe Time: 20-07-2017
    19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.37 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\15--Gitas\15--Gitas .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\15--Gitas\15--Gitas .exe Time:
    20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.36 Object (file) detected D:\3500 books\1--e-Books\15--
    Gitas\15--Gitas .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\1--e-Books\15--Gitas\15--Gitas .exe Time: 20-07-2017 19:42 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.28 Detected object (file) deleted D:\3500 books\1--e-
    Books\14--Upanishath\14--Upanishath .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\14--Upanishath\14--Upanishath .exe
    Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.28 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\14--Upanishath\14--Upanishath .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\14--Upanishath\14--
    Upanishath .exe Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.28 Object (file) detected D:\3500 books\1--e-Books\14--
    Upanishath\14--Upanishath .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\14--Upanishath\14--Upanishath .exe Time:
    20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.27 Detected object (file) deleted D:\3500 books\1--e-
    Books\13--Upa-Vedangalu\13--Upa-Vedangalu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\13--Upa-Vedangalu\13--Upa-
    Vedangalu .exe Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.27 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\13--Upa-Vedangalu\13--Upa-Vedangalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\13--Upa-Vedangalu\13--
    Upa-Vedangalu .exe Time: 20-07-2017 19:42 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.21 Object (file) detected D:\3500 books\1--e-Books\13--Upa-
    Vedangalu\13--Upa-Vedangalu .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\13--Upa-Vedangalu\13--Upa-Vedangalu .exe
    Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.03 Detected object (file) deleted D:\3500 books\1--e-
    Books\12--Vedangalu\12--Vedangalu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\12--Vedangalu\12--Vedangalu .exe
    Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.03 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\12--Vedangalu\12--Vedangalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\12--Vedangalu\12--
    Vedangalu .exe Time: 20-07-2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.42.03 Object (file) detected D:\3500 books\1--e-Books\12--
    Vedangalu\12--Vedangalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\12--Vedangalu\12--Vedangalu .exe Time: 20-07-
    2017 19:42 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.41.42 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:41 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.41.42 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:41 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.41.06 Detected object (file) deleted D:\3500 books\1--e-
    Books\11--Upa-Vedalu\11--Upa-Vedalu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\11--Upa-Vedalu\11--Upa-Vedalu .exe
    Time: 20-07-2017 19:41 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.41.06 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\11--Upa-Vedalu\11--Upa-Vedalu .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\11--Upa-Vedalu\11--
    Upa-Vedalu .exe Time: 20-07-2017 19:41 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.41.01 Object (file) detected D:\3500 books\1--e-Books\11--Upa-
    Vedalu\11--Upa-Vedalu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\11--Upa-Vedalu\11--Upa-Vedalu .exe Time:
    20-07-2017 19:41 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) deleted D:\3500 books\1--e-
    Books\10--Vedamulu\10--Vedamulu .exe Application: Microsoft Windows Search
    Protocol Host File: D:\3500 books\1--e-Books\10--Vedamulu\10--Vedamulu .exe
    Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\10--Vedamulu\10--Vedamulu .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\10--Vedamulu\10--Vedamulu
    .exe Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Object (file) detected D:\3500 books\1--e-Books\10--
    Vedamulu\10--Vedamulu .exe Application: Microsoft Windows Search Protocol Host
    File: D:\3500 books\1--e-Books\10--Vedamulu\10--Vedamulu .exe Time: 20-07-
    2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) deleted D:\3500 books\1--e-
    Books\1--BhakthiYogam\1--BhakthiYogam .exe Application: Microsoft Windows
    Search Protocol Host File: D:\3500 books\1--e-Books\1--BhakthiYogam\1--
    BhakthiYogam .exe Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\1--BhakthiYogam\1--BhakthiYogam .exe Application: Microsoft
    Windows Search Protocol Host File: D:\3500 books\1--e-Books\1--BhakthiYogam\1--
    BhakthiYogam .exe Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Object (file) detected D:\3500 books\1--e-Books\1--
    BhakthiYogam\1--BhakthiYogam .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\1--BhakthiYogam\1--BhakthiYogam .exe Time:
    20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) deleted D:\3500 books\1--e-
    Books\1--e-Books .exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\1--e-Books\1--e-Books .exe Time: 20-07-2017 19:40 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) moved to Quarantine D:\3500
    books\1--e-Books\1--e-Books .exe Application: Microsoft Windows Search Protocol
    Host File: D:\3500 books\1--e-Books\1--e-Books .exe Time: 20-07-2017 19:40 Object
    name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Object (file) detected D:\3500 books\1--e-Books\1--e-Books
    .exe Application: Microsoft Windows Search Protocol Host File: D:\3500 books\1--
    e-Books\1--e-Books .exe Time: 20-07-2017 19:40 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) deleted D:\3500 books\regsvr.exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\regsvr.exe Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.45 Detected object (file) moved to Quarantine D:\3500
    books\regsvr.exe Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\regsvr.exe Time: 20-07-2017 19:40 Object name:
    Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.44 Object (file) detected D:\3500 books\regsvr.exe
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\regsvr.exe Time: 20-07-2017 19:40 Object name: Worm.Win32.AutoRun.dtbv
    20.07.2017 19.40.44 Detected object (file) deleted D:\3500 books\images.scr
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\images.scr Time: 20-07-2017 19:40 Object name: HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 19.40.44 Detected object (file) disinfected D:\3500 books\images.scr
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\images.scr Time: 20-07-2017 19:40 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.39.47 Detected object (file) moved to Quarantine D:\3500
    books\images.scr Application: Microsoft Windows Search Protocol Host File:
    D:\3500 books\images.scr Time: 20-07-2017 19:39 Object name:
    Virus.Win32.Sality.gen
    20.07.2017 19.39.26 Object (file) detected D:\3500 books\images.scr
    Application: Microsoft Windows Search Protocol Host File: D:\3500
    books\images.scr Time: 20-07-2017 19:39 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.39.22 Selective Scan Objects detected: 70, deleted: 1, not
    disinfected: 68 Detected: 70 Deleted: 1 Not disinfected: 68 Release date
    of databases used for scan: 20-07-2017 16:35 Total duration: 17 minutes, 51
    seconds Completion time: 20-07-2017 19:57
    20.07.2017 19.39.18 Update of databases and application modules Completed.
    Average download speed:: 44.55 KB/s Status:: Completed. Downloaded and
    updated:: 606.58 KB Total duration: 36 seconds Time: 20-07-2017 19:39
    20.07.2017 19.35.52 Quick Scan Objects detected: 2, deleted: 0, not
    disinfected: 2 Detected: 2 Deleted: 0 Not disinfected: 2 Release date of
    databases used for scan: 20-07-2017 16:35 Total duration: 2 minutes, 7 seconds
    Completion time: 20-07-2017 19:38
    20.07.2017 19.34.24 Task started Web Anti-Virus Time: 20-07-2017 19:34
    20.07.2017 19.34.24 Task started System Watcher Time: 20-07-2017 19:34
    20.07.2017 19.34.24 Task started IM Anti-Virus Time: 20-07-2017 19:34
    20.07.2017 19.34.24 Task started Mail Anti-Virus Time: 20-07-2017 19:34
    20.07.2017 19.33.37 Task started File Anti-Virus Time: 20-07-2017 19:33
    20.07.2017 19.31.55 Full Scan (canceled) No threats detected Detected: 0
    Deleted: 0 Not disinfected: 0 Release date of databases used for scan:
    20-07-2017 16:35 Total duration: 1 minute, 45 seconds Completion time: 20-07-
    2017 19:33
    20.07.2017 19.31.26 Task started Web Anti-Virus Time: 20-07-2017 19:31
    20.07.2017 19.31.26 Task started System Watcher Time: 20-07-2017 19:31
    20.07.2017 19.31.26 Task started Mail Anti-Virus Time: 20-07-2017 19:31
    20.07.2017 19.31.26 Task started IM Anti-Virus Time: 20-07-2017 19:31
    20.07.2017 19.30.18 Task started File Anti-Virus Time: 20-07-2017 19:30
    20.07.2017 19.26.07 Advanced Disinfection Objects detected: 4, deleted: 2,
    not disinfected: 3 Detected: 4 Deleted: 2 Not disinfected: 3 Release date
    of databases used for scan: 20-07-2017 16:35 Total duration: 3 minutes, 36
    seconds Completion time: 20-07-2017 19:29
    20.07.2017 19.23.44 Full Scan (canceled) No threats detected Detected: 0
    Deleted: 0 Not disinfected: 0 Release date of databases used for scan:
    20-07-2017 16:35 Total duration: 6 minutes, 45 seconds Completion time: 20-07-
    2017 19:30
    20.07.2017 19.23.08 Task started Web Anti-Virus Time: 20-07-2017 19:23
    20.07.2017 19.23.08 Task started System Watcher Time: 20-07-2017 19:23
    20.07.2017 19.23.08 Task started Mail Anti-Virus Time: 20-07-2017 19:23
    20.07.2017 19.23.08 Task started IM Anti-Virus Time: 20-07-2017 19:23
    20.07.2017 19.22.49 Task started File Anti-Virus Time: 20-07-2017 19:22
    20.07.2017 19.18.08 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Host Process for Windows Services Time:
    20-07-2017 19:18
    20.07.2017 19.16.36 Object (file) detected
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    Application: Microsoft Windows Search Protocol Host File:
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk Time:
    20-07-2017 19:16 Object name: HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.15.26 Object (file) not processed E:\autorun.inf Application:
    Kaspersky Anti-Virus File: E:\autorun.inf Time: 20-07-2017 19:15 Object name:
    Trojan.Win32.AutoRun.gen Reason: Error
    20.07.2017 19.15.20 Object (file) detected E:\SOFTWARES\vlc-2.2.4-win32.exe
    Application: Kaspersky Anti-Virus File: E:\SOFTWARES\vlc-2.2.4-win32.exe
    Time: 20-07-2017 19:15 Object name: Virus.Win32.Sality.gen
    20.07.2017 19.14.41 Object (file) detected
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    Application: Kaspersky Anti-Virus File:
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk Time:
    20-07-2017 19:14 Object name: HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.14.36 Object (file) not processed
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\popup\popup.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\popup\popup.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:AdWare.JS.ChromeExt.i
    Reason: Allowed by user
    20.07.2017 19.14.36 Object (file) detected
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\popup\popup.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\popup\popup.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:AdWare.JS.ChromeExt.i
    20.07.2017 19.14.34 Object (file) not processed
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\userNewTab.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\userNewTab.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:AdWare.JS.ChromeExt.g
    Reason: Allowed by user
    20.07.2017 19.14.34 Object (file) detected
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\userNewTab.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\js\userNewTab.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:AdWare.JS.ChromeExt.g
    20.07.2017 19.14.32 Object (file) not processed
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\background.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\background.js Time:
    20-07-2017 19:14 Object name: not-a-virus:HEUR:AdWare.Script.Generic Reason:
    Allowed by user
    20.07.2017 19.14.32 Object (file) detected
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\background.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\kenpjljcgkkicfenmjniomjjimfceahk\2.6_0\background.js Time:
    20-07-2017 19:14 Object name: not-a-virus:HEUR:AdWare.Script.Generic
    20.07.2017 19.14.28 Object (file) not processed
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\ejnelkcojhbgkplmjkccodhddjmofkaa\0.5.662_0\redirect.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\ejnelkcojhbgkplmjkccodhddjmofkaa\0.5.662_0\redirect.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:HEUR:AdWare.Script.Generic
    Reason: Allowed by user
    20.07.2017 19.14.28 Object (file) detected
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\ejnelkcojhbgkplmjkccodhddjmofkaa\0.5.662_0\redirect.js
    Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Local\Google\Chrome\User
    Data\Default\Extensions\ejnelkcojhbgkplmjkccodhddjmofkaa\0.5.662_0\redirect.js
    Time: 20-07-2017 19:14 Object name: not-a-virus:HEUR:AdWare.Script.Generic
    20.07.2017 19.14.06 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch
    Internet Explorer Browser.lnk Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch
    Internet Explorer Browser.lnk Time: 20-07-2017 19:14 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.12.49 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet
    Explorer.lnk Application: Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet
    Explorer.lnk Time: 20-07-2017 19:12 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.12.30 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 19:12 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 19.12.06 Object (file) detected C:\Users\Public\Desktop\Mozilla
    Firefox.lnk Application: Windows Explorer File: C:\Users\Public\Desktop\Mozilla
    Firefox.lnk Time: 20-07-2017 19:12 Object name: HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.12.01 Advanced Disinfection Objects detected: 12, deleted: 10,
    not disinfected: 6 Detected: 12 Deleted: 10 Not disinfected: 6
    Release date of databases used for scan: 20-07-2017 16:35 Total duration: 8
    minutes, 31 seconds Completion time: 20-07-2017 19:20
    20.07.2017 19.12.00 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Mozilla Firefox.lnk Application: Windows Explorer File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Mozilla Firefox.lnk Time: 20-07-2017 19:12 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.11.07 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Google Chrome.lnk Application: Windows Explorer File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Google Chrome.lnk Time: 20-07-2017 19:11 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.11.07 Detected object (file) disinfected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Application: Windows Explorer File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Time: 20-07-2017 19:11 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.11.07 Detected object (file) moved to Quarantine
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Application: Windows Explorer File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Time: 20-07-2017 19:11 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.10.35 Task started System Watcher Time: 20-07-2017 19:10
    20.07.2017 19.10.35 Task started Web Anti-Virus Time: 20-07-2017 19:10
    20.07.2017 19.10.35 Task started IM Anti-Virus Time: 20-07-2017 19:10
    20.07.2017 19.10.35 Task started Mail Anti-Virus Time: 20-07-2017 19:10
    20.07.2017 19.10.30 Full Scan (canceled) Objects detected: 2, deleted: 0,
    not disinfected: 2 Detected: 2 Deleted: 0 Not disinfected: 2 Release date
    of databases used for scan: 20-07-2017 16:35 Total duration: 12 minutes, 20
    seconds Completion time: 20-07-2017 19:22
    20.07.2017 19.09.55 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Application: Windows Explorer File:
    C:\Users\SIVA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User
    Pinned\TaskBar\Internet Explorer.lnk Time: 20-07-2017 19:09 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 19.09.33 Task started File Anti-Virus Time: 20-07-2017 19:09
    20.07.2017 19.02.38 Task started Mail Anti-Virus Time: 20-07-2017 19:02
    20.07.2017 19.02.38 Task started File Anti-Virus Time: 20-07-2017 19:02
    20.07.2017 19.02.38 Task started System Watcher Time: 20-07-2017 19:02
    20.07.2017 19.02.38 Task started Web Anti-Virus Time: 20-07-2017 19:02
    20.07.2017 19.02.38 Task started IM Anti-Virus Time: 20-07-2017 19:02
    20.07.2017 19.00.15 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Host Process for Windows Services Time:
    20-07-2017 19:00
    20.07.2017 18.59.57 Advanced Disinfection (canceled) No threats detected
    Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases
    used for scan: 20-07-2017 16:35 Total duration: 9 minutes, 36 seconds
    Completion time: 20-07-2017 19:09
    20.07.2017 18.55.32 Full Scan (canceled) Objects detected: 1, deleted: 0,
    not disinfected: 1 Detected: 1 Deleted: 0 Not disinfected: 1 Release date
    of databases used for scan: 20-07-2017 16:35 Total duration: 14 minutes, 1
    second Completion time: 20-07-2017 19:09
    20.07.2017 18.55.12 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Google Chrome Time: 20-07-2017 18:55
    20.07.2017 18.55.12 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Google Chrome Time: 20-07-2017 18:55
    20.07.2017 18.54.39 Detected object (file) disinfected
    C:\Users\Public\Desktop\Google Chrome.lnk Application: Windows Explorer File:
    C:\Users\Public\Desktop\Google Chrome.lnk Time: 20-07-2017 18:54 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 18.54.39 Detected object (file) moved to Quarantine
    C:\Users\Public\Desktop\Google Chrome.lnk Application: Windows Explorer File:
    C:\Users\Public\Desktop\Google Chrome.lnk Time: 20-07-2017 18:54 Object name:
    HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 18.54.39 Rootkit Scan (canceled) Objects detected: 1, deleted: 0,
    not disinfected: 1 Detected: 1 Deleted: 0 Not disinfected: 1 Release date
    of databases used for scan: 20-07-2017 16:35 Total duration: 5 minutes, 17
    seconds Completion time: 20-07-2017 18:59
    20.07.2017 18.54.35 Object (file) detected C:\Users\Public\Desktop\Google
    Chrome.lnk Application: Windows Explorer File: C:\Users\Public\Desktop\Google
    Chrome.lnk Time: 20-07-2017 18:54 Object name: HEUR:Trojan.WinLNK.StartPage.gena
    20.07.2017 18.54.16 Update of databases and application modules No available
    update packages. Average download speed:: 7.95 KB/s Status:: No available update
    packages. Downloaded and updated:: 8.07 KB Total duration: 16 seconds Time:
    20-07-2017 18:54
    20.07.2017 18.54.04 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Host Process for Windows Services Time:
    20-07-2017 18:54
    20.07.2017 18.53.31 Update of databases and application modules Completed.
    Average download speed:: 1.05 MB/s Status:: Completed. Downloaded and
    updated:: 134.35 MB Total duration: 3 minutes, 10 seconds Time: 20-07-2017
    18:53
    20.07.2017 18.53.30 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: URL listed in
    database of malicious URLs Application: Host Process for Windows Services Time:
    20-07-2017 18:53
    20.07.2017 18.53.29 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: KSN Application:
    Host Process for Windows Services Time: 20-07-2017 18:53
    20.07.2017 18.53.28 Dangerous URL blocked http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object: http://webunstop.com/wpad.dat?
    3b6d5f3a1359b17329021653ba9c360f32807730 Object type: URL Reason: KSN Application:
    Host Process for Windows Services Time: 20-07-2017 18:53
    20.07.2017 18.46.17 Application databases were not updated Network operation
    timed out. Average download speed:: 1.29 KB/s Status:: Network operation timed
    out. Downloaded and updated:: 1.31 MB Total duration: 20 minutes, 19 seconds
    Time: 20-07-2017 18:46
    20.07.2017 18.26.41 Detected object (file) deleted
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Application:
    Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Time: 20-07-2017 18:26
    Object name: Trojan.Win32.Miner.ays
    20.07.2017 18.26.41 Detected object (file) moved to Quarantine
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Application:
    Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Time: 20-07-2017 18:26
    Object name: Trojan.Win32.Miner.ays
    20.07.2017 18.26.41 Object (file) detected
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Application:
    Kaspersky Anti-Virus File:
    C:\Users\SIVA\AppData\Roaming\Images\NsCpuCNMiner32.exe Time: 20-07-2017 18:26
    Object name: Trojan.Win32.Miner.ays
    20.07.2017 18.26.34 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.34 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    RemoveWAT File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name: not-
    a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    RemoveWAT File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name: not-
    a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    RemoveWAT File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name: not-
    a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.33 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Host Process for Windows Services File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017
    18:26 Object name: not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.32 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.31 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.31 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.31 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.31 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.31 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.30 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.30 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.24 Detected object (file) deleted D:\images.scr
    Application: Windows Explorer File: D:\images.scr Time: 20-07-2017 18:26
    Object name: HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 18.26.24 Detected object (file) moved to Quarantine
    D:\images.scr Application: Windows Explorer File: D:\images.scr Time:
    20-07-2017 18:26 Object name: HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 18.26.17 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.17 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.17 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.17 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.17 Object (file) detected D:\RemoveWAT 2.2.6.exe Application:
    Windows Explorer File: D:\RemoveWAT 2.2.6.exe Time: 20-07-2017 18:26 Object name:
    not-a-virus:RiskTool.Win32.WatKill.a Reason: Information
    20.07.2017 18.26.17 Object (file) detected D:\images.scr Application:
    Windows Explorer File: D:\images.scr Time: 20-07-2017 18:26 Object name:
    HEUR:Trojan.NSIS.BitMin.gen
    20.07.2017 18.24.54 Task started System Watcher Time: 20-07-2017 18:24
    20.07.2017 18.24.54 Task started Web Anti-Virus Time: 20-07-2017 18:24
    20.07.2017 18.24.54 Task started Mail Anti-Virus Time: 20-07-2017 18:24
    20.07.2017 18.24.54 Task started IM Anti-Virus Time: 20-07-2017 18:24
    20.07.2017 18.24.48 Task started File Anti-Virus Time: 20-07-2017 18:24

    You might also like