C\ProgramData\Microsoft\WindowsDefender\Network Inspection System\Support\NisLog.txt

[08/22/13-07:47:12] *********************************************
[08/22/13-07:47:12] Network Inspection System service starting.
[08/22/13-07:47:12] Version: 4.3.9600.16384\
[08/22/13-07:47:12] *********************************************
[08/22/13-07:47:12] Service started by NisIpsPlugin
[08/22/13-07:47:12] Service started
[08/22/13-07:47:12] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[08/22/13-07:47:12] Win8+: overriding fZeroDayEnabled to FALSE
[08/22/13-07:47:12] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[08/22/13-07:47:13] --Signature list start--
[08/22/13-07:47:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[08/22/13-07:47:13] --Signature list end--
[08/22/13-07:47:13] Signatures: Total: 24;  Enabled: 24
[08/22/13-07:47:13] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[08/22/13-07:47:13] New engine version=2.1.9700.0; New signature version=106.0.0.0
[08/22/13-07:47:13] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[08/22/13-07:47:13] At least one signature is active
[08/22/13-07:47:13] Connecting to the driver
[08/22/13-07:47:13] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[08/22/13-07:47:13] Load Definitions completed successfully.
[08/22/13-07:49:50] System shutdown: networking block feature is disabled
[08/22/13-07:49:50] Service stopping
[08/22/13-07:49:50] Disengaging the driver
[08/22/13-07:49:50] Service stopped

[03/18/14-02:45:08] *********************************************
[03/18/14-02:45:08] Network Inspection System service starting.
[03/18/14-02:45:08] Version: 4.3.9600.16384
[03/18/14-02:45:08] *********************************************
[03/18/14-02:45:08] Service started by NisIpsPlugin
[03/18/14-02:45:08] Service started
[03/18/14-02:45:08] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[03/18/14-02:45:08] Win8+: overriding fZeroDayEnabled to FALSE
[03/18/14-02:45:08] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[03/18/14-02:45:08] --Signature list start--
[03/18/14-02:45:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:45:08] --Signature list end--
[03/18/14-02:45:08] Signatures: Total: 24;  Enabled: 24
[03/18/14-02:45:08] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[03/18/14-02:45:08] New engine version=2.1.9700.0; New signature version=106.0.0.0
[03/18/14-02:45:08] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[03/18/14-02:45:08] At least one signature is active
[03/18/14-02:45:08] Connecting to the driver
[03/18/14-02:45:08] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[03/18/14-02:45:08] Load Definitions completed successfully.
[03/18/14-02:46:03] System shutdown: networking block feature is disabled
[03/18/14-02:46:03] Service stopping
[03/18/14-02:46:03] Disengaging the driver
[03/18/14-02:46:03] Service stopped

[03/18/14-02:46:28] *********************************************
[03/18/14-02:46:28] Network Inspection System service starting.
[03/18/14-02:46:28] Version: 4.3.9600.16384
[03/18/14-02:46:28] *********************************************
[03/18/14-02:46:28] Service started by NisIpsPlugin
[03/18/14-02:46:28] Service started
[03/18/14-02:46:29] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[03/18/14-02:46:29] Win8+: overriding fZeroDayEnabled to FALSE
[03/18/14-02:46:29] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[03/18/14-02:46:29] --Signature list start--
[03/18/14-02:46:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-02:46:29] --Signature list end--
[03/18/14-02:46:29] Signatures: Total: 24;  Enabled: 24
[03/18/14-02:46:29] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[03/18/14-02:46:29] New engine version=2.1.9700.0; New signature version=106.0.0.0
[03/18/14-02:46:29] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[03/18/14-02:46:29] At least one signature is active
[03/18/14-02:46:29] Connecting to the driver
[03/18/14-02:46:29] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[03/18/14-02:46:29] Load Definitions completed successfully.
[03/18/14-03:07:33] System shutdown: networking block feature is disabled
[03/18/14-03:07:33] Service stopping
[03/18/14-03:07:33] Disengaging the driver
[03/18/14-03:07:33] Service stopped

[03/18/14-03:08:15] *********************************************
[03/18/14-03:08:15] Network Inspection System service starting.
[03/18/14-03:08:15] Version: 4.3.9600.16384
[03/18/14-03:08:15] *********************************************
[03/18/14-03:08:15] Service started by NisIpsPlugin
[03/18/14-03:08:15] Service started
[03/18/14-03:08:15] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[03/18/14-03:08:15] Win8+: overriding fZeroDayEnabled to FALSE
[03/18/14-03:08:16] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[03/18/14-03:08:16] --Signature list start--
[03/18/14-03:08:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[03/18/14-03:08:16] --Signature list end--
[03/18/14-03:08:16] Signatures: Total: 24;  Enabled: 24
[03/18/14-03:08:16] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[03/18/14-03:08:16] New engine version=2.1.9700.0; New signature version=106.0.0.0
[03/18/14-03:08:16] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[03/18/14-03:08:16] At least one signature is active
[03/18/14-03:08:16] Connecting to the driver
[03/18/14-03:08:16] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[03/18/14-03:08:16] Load Definitions completed successfully.
[03/18/14-03:11:51] System shutdown: networking block feature is disabled
[03/18/14-03:11:51] Service stopping
[03/18/14-03:11:51] Disengaging the driver
[03/18/14-03:11:51] Service stopped

[04/02/14-09:36:20] *********************************************
[04/02/14-09:36:20] Network Inspection System service starting.
[04/02/14-09:36:20] Version: 4.3.9600.16384
[04/02/14-09:36:20] *********************************************
[04/02/14-09:36:20] Service started by NisIpsPlugin
[04/02/14-09:36:20] Service started
[04/02/14-09:36:20] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[04/02/14-09:36:20] Win8+: overriding fZeroDayEnabled to FALSE
[04/02/14-09:36:20] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[04/02/14-09:36:20] --Signature list start--
[04/02/14-09:36:20] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:36:20] --Signature list end--
[04/02/14-09:36:20] Signatures: Total: 24;  Enabled: 24
[04/02/14-09:36:20] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/02/14-09:36:20] New engine version=2.1.9700.0; New signature version=106.0.0.0
[04/02/14-09:36:20] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/02/14-09:36:20] At least one signature is active
[04/02/14-09:36:20] Connecting to the driver
[04/02/14-09:36:20] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/02/14-09:36:20] Load Definitions completed successfully.
[04/02/14-09:36:51] System shutdown: networking block feature is disabled
[04/02/14-09:36:51] Service stopping
[04/02/14-09:36:51] Disengaging the driver
[04/02/14-09:36:51] Service stopped

[04/02/14-09:38:05] *********************************************
[04/02/14-09:38:05] Network Inspection System service starting.
[04/02/14-09:38:05] Version: 4.3.9600.16384
[04/02/14-09:38:05] *********************************************
[04/02/14-09:38:05] Service started by NisIpsPlugin
[04/02/14-09:38:05] Service started
[04/02/14-09:38:05] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[04/02/14-09:38:05] Win8+: overriding fZeroDayEnabled to FALSE
[04/02/14-09:38:05] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[04/02/14-09:38:05] --Signature list start--
[04/02/14-09:38:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:38:05] --Signature list end--
[04/02/14-09:38:05] Signatures: Total: 24;  Enabled: 24
[04/02/14-09:38:05] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/02/14-09:38:05] New engine version=2.1.9700.0; New signature version=106.0.0.0
[04/02/14-09:38:05] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/02/14-09:38:05] At least one signature is active
[04/02/14-09:38:05] Connecting to the driver
[04/02/14-09:38:05] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/02/14-09:38:05] Load Definitions completed successfully.
[04/02/14-09:54:52] System shutdown: networking block feature is disabled
[04/02/14-09:54:52] Service stopping
[04/02/14-09:54:52] Disengaging the driver
[04/02/14-09:54:52] Service stopped

[04/02/14-09:55:25] *********************************************
[04/02/14-09:55:25] Network Inspection System service starting.
[04/02/14-09:55:25] Version: 4.3.9600.16384
[04/02/14-09:55:25] *********************************************
[04/02/14-09:55:25] Service started by NisIpsPlugin
[04/02/14-09:55:25] Service started
[04/02/14-09:55:25] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[04/02/14-09:55:25] Win8+: overriding fZeroDayEnabled to FALSE
[04/02/14-09:55:25] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[04/02/14-09:55:25] --Signature list start--
[04/02/14-09:55:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-09:55:25] --Signature list end--
[04/02/14-09:55:25] Signatures: Total: 24;  Enabled: 24
[04/02/14-09:55:25] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/02/14-09:55:25] New engine version=2.1.9700.0; New signature version=106.0.0.0
[04/02/14-09:55:25] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/02/14-09:55:25] At least one signature is active
[04/02/14-09:55:25] Connecting to the driver
[04/02/14-09:55:25] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/02/14-09:55:25] Load Definitions completed successfully.
[04/02/14-10:01:47] System shutdown: networking block feature is disabled
[04/02/14-10:01:47] Service stopping
[04/02/14-10:01:47] Disengaging the driver
[04/02/14-10:01:47] Service stopped
[04/02/14-10:02:22] *********************************************
[04/02/14-10:02:22] Network Inspection System service starting.
[04/02/14-10:02:22] Version: 4.3.9600.16384
[04/02/14-10:02:22] *********************************************
[04/02/14-10:02:22] Service started by NisIpsPlugin
[04/02/14-10:02:22] Service started
[04/02/14-10:02:22] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[04/02/14-10:02:22] Win8+: overriding fZeroDayEnabled to FALSE
[04/02/14-10:02:22] Signature update - files received: Engine version: 2.1.9700.0; Signature version = 106.0.0.0
[04/02/14-10:02:22] --Signature list start--
[04/02/14-10:02:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/02/14-10:02:22] --Signature list end--
[04/02/14-10:02:22] Signatures: Total: 24;  Enabled: 24
[04/02/14-10:02:22] Active signature breakdown: BM: 24; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/02/14-10:02:22] New engine version=2.1.9700.0; New signature version=106.0.0.0
[04/02/14-10:02:22] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/02/14-10:02:22] At least one signature is active
[04/02/14-10:02:22] Connecting to the driver
[04/02/14-10:02:22] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/02/14-10:02:22] Load Definitions completed successfully.
[04/02/14-10:04:04] System shutdown: networking block feature is disabled
[04/02/14-10:04:04] Service stopping
[04/02/14-10:04:04] Disengaging the driver
[04/02/14-10:04:04] Service stopped

[09/02/14-11:11:10] *********************************************
[09/02/14-11:11:10] Network Inspection System service starting.
[09/02/14-11:11:10] Version: 4.3.9600.16384
[09/02/14-11:11:10] *********************************************
[09/02/14-11:11:10] Service started by NisIpsPlugin
[09/02/14-11:11:10] Service started
[09/02/14-11:11:10] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[09/02/14-11:11:10] Win8+: overriding fZeroDayEnabled to FALSE
[09/02/14-11:11:10] Signature update - files received: Engine version: 2.1.10502.0; Signature version = 111.25.0.0
[09/02/14-11:11:10] --Signature list start--
[09/02/14-11:11:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {bb9b43ad-457c-40ec-afca-567608840dc1} Other:Win/RevetonCustom.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:11:10] --Signature list end--
[09/02/14-11:11:10] Signatures: Total: 41;  Enabled: 41
[09/02/14-11:11:10] Active signature breakdown: BM: 41; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[09/02/14-11:11:10] New engine version=2.1.10502.0; New signature version=111.25.0.0
[09/02/14-11:11:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[09/02/14-11:11:10] At least one signature is active
[09/02/14-11:11:10] Connecting to the driver
[09/02/14-11:11:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[09/02/14-11:11:10] Load Definitions completed successfully.
[09/02/14-11:11:44] System shutdown: networking block feature is disabled
[09/02/14-11:11:44] Service stopping
[09/02/14-11:11:44] Disengaging the driver
[09/02/14-11:11:44] Service stopped

[09/02/14-11:13:09] *********************************************
[09/02/14-11:13:09] Network Inspection System service starting.
[09/02/14-11:13:09] Version: 4.3.9600.16384
[09/02/14-11:13:09] *********************************************
[09/02/14-11:13:09] Service started by NisIpsPlugin
[09/02/14-11:13:09] Service started
[09/02/14-11:13:09] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[09/02/14-11:13:09] Win8+: overriding fZeroDayEnabled to FALSE
[09/02/14-11:13:09] Signature update - files received: Engine version: 2.1.10502.0; Signature version = 111.25.0.0
[09/02/14-11:13:09] --Signature list start--
[09/02/14-11:13:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {bb9b43ad-457c-40ec-afca-567608840dc1} Other:Win/RevetonCustom.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:13:09] --Signature list end--
[09/02/14-11:13:09] Signatures: Total: 41;  Enabled: 41
[09/02/14-11:13:09] Active signature breakdown: BM: 41; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[09/02/14-11:13:09] New engine version=2.1.10502.0; New signature version=111.25.0.0
[09/02/14-11:13:09] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[09/02/14-11:13:09] At least one signature is active
[09/02/14-11:13:09] Connecting to the driver
[09/02/14-11:13:09] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[09/02/14-11:13:09] Load Definitions completed successfully.
[09/02/14-11:18:18] System shutdown: networking block feature is disabled
[09/02/14-11:18:18] Service stopping
[09/02/14-11:18:18] Disengaging the driver
[09/02/14-11:18:18] Service stopped

[09/02/14-11:19:12] *********************************************
[09/02/14-11:19:12] Network Inspection System service starting.
[09/02/14-11:19:12] Version: 4.5.218.0
[09/02/14-11:19:12] *********************************************
[09/02/14-11:19:12] Service started by NisIpsPlugin
[09/02/14-11:19:12] Service started
[09/02/14-11:19:12] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[09/02/14-11:19:12] Win8+: overriding fZeroDayEnabled to FALSE
[09/02/14-11:19:13] Signature update - files received: Engine version: 2.1.10502.0; Signature version = 111.25.0.0
[09/02/14-11:19:13] --Signature list start--
[09/02/14-11:19:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {bb9b43ad-457c-40ec-afca-567608840dc1} Other:Win/RevetonCustom.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] --Signature list end--
[09/02/14-11:19:13] Signatures: Total: 41;  Enabled: 41
[09/02/14-11:19:13] Active signature breakdown: BM: 41; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[09/02/14-11:19:13] New engine version=2.1.10502.0; New signature version=111.25.0.0
[09/02/14-11:19:13] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[09/02/14-11:19:13] At least one signature is active
[09/02/14-11:19:13] Connecting to the driver
[09/02/14-11:19:13] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[09/02/14-11:19:13] Load Definitions completed successfully.
[09/02/14-11:19:13] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[09/02/14-11:19:13] Win8+: overriding fZeroDayEnabled to FALSE
[09/02/14-11:19:13] Signature update - files received: Engine version: 2.1.10502.0; Signature version = 111.25.0.0
[09/02/14-11:19:13] --Signature list start--
[09/02/14-11:19:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {bb9b43ad-457c-40ec-afca-567608840dc1} Other:Win/RevetonCustom.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:19:13] --Signature list end--
[09/02/14-11:19:13] Signatures: Total: 41;  Enabled: 41
[09/02/14-11:19:13] Active signature breakdown: BM: 41; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[09/02/14-11:19:13] New engine version=2.1.10502.0; New signature version=111.25.0.0
[09/02/14-11:19:13] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[09/02/14-11:19:13] At least one signature is active
[09/02/14-11:19:13] Already connected to the driver
[09/02/14-11:19:13] Load Definitions completed successfully.

[09/02/14-11:30:12] *********************************************
[09/02/14-11:30:12] Network Inspection System service starting.
[09/02/14-11:30:12] Version: 4.5.218.0
[09/02/14-11:30:12] *********************************************
[09/02/14-11:30:12] Service started by NisIpsPlugin
[09/02/14-11:30:12] Service started
[09/02/14-11:30:12] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[09/02/14-11:30:12] Win8+: overriding fZeroDayEnabled to FALSE
[09/02/14-11:30:12] Signature update - files received: Engine version: 2.1.10502.0; Signature version = 111.25.0.0
[09/02/14-11:30:12] --Signature list start--
[09/02/14-11:30:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {bb9b43ad-457c-40ec-afca-567608840dc1} Other:Win/RevetonCustom.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[09/02/14-11:30:12] --Signature list end--
[09/02/14-11:30:12] Signatures: Total: 41;  Enabled: 41
[09/02/14-11:30:12] Active signature breakdown: BM: 41; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[09/02/14-11:30:12] New engine version=2.1.10502.0; New signature version=111.25.0.0
[09/02/14-11:30:12] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[09/02/14-11:30:12] At least one signature is active
[09/02/14-11:30:12] Connecting to the driver
[09/02/14-11:30:12] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[09/02/14-11:30:12] Load Definitions completed successfully.

[01/20/15-11:10:08] *********************************************
[01/20/15-11:10:08] Network Inspection System service starting.
[01/20/15-11:10:08] Version: 4.5.218.0
[01/20/15-11:10:08] *********************************************
[01/20/15-11:10:08] Service started by NisIpsPlugin
[01/20/15-11:10:08] Service started
[01/20/15-11:10:08] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-11:10:08] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-11:10:08] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-11:10:09] --Signature list start--
[01/20/15-11:10:09] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:10:09] --Signature list end--
[01/20/15-11:10:09] Signatures: Total: 46;  Enabled: 46
[01/20/15-11:10:09] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-11:10:09] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-11:10:09] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-11:10:09] At least one signature is active
[01/20/15-11:10:09] Connecting to the driver
[01/20/15-11:10:09] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[01/20/15-11:10:09] Load Definitions completed successfully.

[01/20/15-11:14:12] *********************************************
[01/20/15-11:14:12] Network Inspection System service starting.
[01/20/15-11:14:12] Version: 4.5.218.0
[01/20/15-11:14:12] *********************************************
[01/20/15-11:14:12] Service started by NisIpsPlugin
[01/20/15-11:14:12] Service started
[01/20/15-11:14:12] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-11:14:12] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-11:14:12] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-11:14:12] --Signature list start--
[01/20/15-11:14:12] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-11:14:12] --Signature list end--
[01/20/15-11:14:12] Signatures: Total: 46;  Enabled: 46
[01/20/15-11:14:12] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-11:14:12] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-11:14:12] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-11:14:12] At least one signature is active
[01/20/15-11:14:12] Connecting to the driver
[01/20/15-11:14:12] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[01/20/15-11:14:12] Load Definitions completed successfully.

[01/20/15-12:31:29] *********************************************
[01/20/15-12:31:29] Network Inspection System service starting.
[01/20/15-12:31:29] Version: 4.5.218.0
[01/20/15-12:31:29] *********************************************
[01/20/15-12:31:29] Service started by NisIpsPlugin
[01/20/15-12:31:29] Service started
[01/20/15-12:31:29] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-12:31:29] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-12:31:29] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-12:31:30] --Signature list start--
[01/20/15-12:31:30] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:31:30] --Signature list end--
[01/20/15-12:31:30] Signatures: Total: 46;  Enabled: 46
[01/20/15-12:31:30] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-12:31:30] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-12:31:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-12:31:30] At least one signature is active
[01/20/15-12:31:30] Connecting to the driver
[01/20/15-12:31:30] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[01/20/15-12:31:30] Load Definitions completed successfully.

[01/20/15-12:35:13] *********************************************
[01/20/15-12:35:13] Network Inspection System service starting.
[01/20/15-12:35:13] Version: 4.5.218.0
[01/20/15-12:35:13] *********************************************
[01/20/15-12:35:13] Service started by NisIpsPlugin
[01/20/15-12:35:13] Service started
[01/20/15-12:35:13] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-12:35:13] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-12:35:13] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-12:35:14] --Signature list start--
[01/20/15-12:35:14] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:14] --Signature list end--
[01/20/15-12:35:14] Signatures: Total: 46;  Enabled: 46
[01/20/15-12:35:14] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-12:35:14] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-12:35:14] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-12:35:14] At least one signature is active
[01/20/15-12:35:14] Connecting to the driver
[01/20/15-12:35:14] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[01/20/15-12:35:14] Load Definitions completed successfully.
[01/20/15-12:35:15] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-12:35:15] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-12:35:15] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-12:35:16] --Signature list start--
[01/20/15-12:35:16] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:35:16] --Signature list end--
[01/20/15-12:35:16] Signatures: Total: 46;  Enabled: 46
[01/20/15-12:35:16] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-12:35:16] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-12:35:16] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-12:35:16] At least one signature is active
[01/20/15-12:35:16] Already connected to the driver
[01/20/15-12:35:16] Load Definitions completed successfully.

[01/20/15-12:55:16] *********************************************
[01/20/15-12:55:16] Network Inspection System service starting.
[01/20/15-12:55:16] Version: 4.5.218.0
[01/20/15-12:55:16] *********************************************
[01/20/15-12:55:16] Service started by NisIpsPlugin
[01/20/15-12:55:16] Service started
[01/20/15-12:55:16] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[01/20/15-12:55:16] Win8+: overriding fZeroDayEnabled to FALSE
[01/20/15-12:55:16] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[01/20/15-12:55:17] --Signature list start--
[01/20/15-12:55:17] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[01/20/15-12:55:17] --Signature list end--
[01/20/15-12:55:17] Signatures: Total: 46;  Enabled: 46
[01/20/15-12:55:17] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[01/20/15-12:55:17] New engine version=2.1.11005.0; New signature version=113.0.0.0
[01/20/15-12:55:17] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[01/20/15-12:55:17] At least one signature is active
[01/20/15-12:55:17] Connecting to the driver
[01/20/15-12:55:17] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[01/20/15-12:55:17] Load Definitions completed successfully.

[07/05/15-22:52:18] *********************************************
[07/05/15-22:52:18] Network Inspection System service starting.
[07/05/15-22:52:18] Version: 4.7.205.0
[07/05/15-22:52:18] *********************************************
[07/05/15-22:52:18] Service started by NisIpsPlugin
[07/05/15-22:52:18] Service started
[07/05/15-22:52:18] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=
	C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[07/05/15-22:52:18] Win8+: overriding fZeroDayEnabled to FALSE
[07/05/15-22:52:18] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[07/05/15-22:52:19] --Signature list start--
[07/05/15-22:52:19] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
http://www.zdnet.fr/actualites/le-botnet-beebone-demantele-par-les-autorites-europeennes-39817800.htm
[07/05/15-22:52:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
http://www.vista-xp.fr/forum/topic3844-15.html
[07/05/15-22:52:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!
NIS-0000-0000 - 
http://www.commentcamarche.net/forum/affich-30774428-comment-suprimer-malware-win32-caphaw?page=2
[07/05/15-22:52:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Trojan:AutoIt/Clodow.B
[07/05/15-22:52:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
http://translate.google.fr/translate?hl=fr&sl=en&u=http://www.microsoft.com/security/portal/entry.aspx%3FName%3DWin32/Cycbot&prev=search
[07/05/15-22:52:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
http://translate.google.fr/translate?hl=fr&sl=en&u=http://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx%3FName%3DWin32/Dorkbot&prev=search
[07/05/15-22:52:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
http://www.commentcamarche.net/forum/affich-27241607-pws-msil-grozlex-a
[07/05/15-22:52:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
http://translate.google.fr/translate?hl=fr&sl=en&u=https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx%3FName%3DTrojanDropper:Win32/Lolyda.G&prev=search
[07/05/15-22:52:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
http://www.commentcamarche.net/faq/30960-comment-se-debarrasser-de-ramnit
[07/05/15-22:52:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
http://www.commentcamarche.net/forum/affich-12219514-trojan-win32-swizzor-a#q=SWIZZOR&cur=1&url=%2F
[07/05/15-22:52:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:19] --Signature list end--
[07/05/15-22:52:19] Signatures: Total: 46;  Enabled: 46
[07/05/15-22:52:19] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[07/05/15-22:52:19] New engine version=2.1.11005.0; New signature version=113.0.0.0
[07/05/15-22:52:19] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[07/05/15-22:52:19] At least one signature is active
[07/05/15-22:52:19] Connecting to the driver
[07/05/15-22:52:19] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[07/05/15-22:52:19] Load Definitions completed successfully.
[07/05/15-22:52:20] Loading Definitions: fZeroDayEnabled=0, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[07/05/15-22:52:20] Win8+: overriding fZeroDayEnabled to FALSE
[07/05/15-22:52:20] Signature update - files received: Engine version: 2.1.11005.0; Signature version = 113.0.0.0
[07/05/15-22:52:20] --Signature list start--
[07/05/15-22:52:20] [On ] Sig {d95ffcc7-0cea-4961-af6f-f08956649a19} Other:Win/BalamidB.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {d5921cd5-02e5-467f-a704-f9a832a613ca} Other:Win/BalamidA.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[07/05/15-22:52:20] --Signature list end--
[07/05/15-22:52:20] Signatures: Total: 46;  Enabled: 46
[07/05/15-22:52:20] Active signature breakdown: BM: 46; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[07/05/15-22:52:20] New engine version=2.1.11005.0; New signature version=113.0.0.0
[07/05/15-22:52:20] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[07/05/15-22:52:20] At least one signature is active
[07/05/15-22:52:20] Already connected to the driver
[07/05/15-22:52:20] Load Definitions completed successfully.
[07/05/15-23:05:15] Service stopping
[07/05/15-23:05:15] Disengaging the driver
[07/05/15-23:05:16] Service stopped