Log:
"Virus Scan Event Logs","2007/03/04","EVERCLEAR"
"Time","Security Feature","Source Type","Virus Name","File Name","First Action","Second Action"
"08:43","File Monitor","File","TROJ_DLOADER.IBM","C:\WINDOWS\SYSTEM32\SVCHOSTS.EXE","Quarantine fail",""
"08:43","File Monitor","File","TROJ_DLOADER.IBM","C:\WINDOWS\SYSTEM32\SVCHOSTS.EXE","Quarantine fail",""
"08:44","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:44","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_DLOADER.IBM","C:\WINDOWS\SYSTEM32\SVCHOSTS.EXE","Quarantine fail",""
"08:50","File Monitor","File","TROJ_DLOADER.IBM","C:\WINDOWS\SYSTEM32\SVCHOSTS.EXE","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:50","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:51","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:55","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:56","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:56","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:56","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:58","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:58","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"08:58","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"08:58","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"09:00","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:00","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:04","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:05","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:06","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:06","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:06","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:06","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:29","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:29","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"09:47","Manual Scan","File","TROJ_AGENT.GZU","C:\Program Files\VSAdd-in\VSAdd-in.dll","Quarantine success",""
"10:04","File Monitor","File","TROJ_AGENT.GZU","C:\DOCUME~1\Zach\LOCALS~1\Temp\hetathuo.exe","Quarantine success",""
"10:04","Manual Scan","File","TROJ_AGENT.GZU","C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP187\A0011931.exe","Quarantine success",""
"10:05","Manual Scan","File","TROJ_Generic","C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP189\A0013050.dll","Quarantine success",""
"10:05","Manual Scan","File","TROJ_DLOADER.IBM","C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP193\A0014719.exe","Quarantine success",""
"10:05","Manual Scan","File","TROJ_AGENT.GZU","C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP193\A0014724.dll","Quarantine success",""
"10:23","Manual Scan","File","TROJ_VUNDO.FX","C:\WINDOWS\system32\byvxexer.dll","Quarantine success",""
"10:24","Manual Scan","File","TROJ_VUNDO.FX","C:\WINDOWS\system32\inndwjbx.dll","Quarantine fail",""
"10:24","Manual Scan","File","TROJ_JUAN.D","C:\WINDOWS\system32\oirfqpwn.dll","Quarantine success",""
"10:24","Manual Scan","File","TROJ_AGENT.GZU","C:\WINDOWS\system32\qrcxagvn.exe","Quarantine success",""
"10:25","Manual Scan","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:27","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:29","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\SYSTEM32\YYMFTTED.DLL","Quarantine fail",""
"10:33","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:33","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:33","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"10:33","File Monitor","File","TROJ_JUAN.D","C:\WINDOWS\system32\yymftted.dll","Quarantine fail",""
"Spyware Scan Event Logs","2007/03/04","EVERCLEAR"
"Time","Type","Item Name","Detected Resource","Target","Action"
"08:54","File System","RAP_Generic","C:\Documents and Settings\Zach\Desktop\SmitfraudFix\","swxcacls.exe","Detected"
"08:54","File System","RAP_Generic","C:\Documents and Settings\Zach\Desktop\SmitfraudFix\","swxcacls.exe","Detected"
"08:54","File System","Freeloader_Smitfraud","C:\Documents and Settings\Zach\Desktop\SmitfraudFix\","dumphive.exe","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Atdmt","Internet Explorer Cache","atdmt.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Azjmp","Internet Explorer Cache","azjmp.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_BFast","Internet Explorer Cache","bfast.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Com","Internet Explorer Cache","com.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_FastClick","Internet Explorer Cache","fastclick.net","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Hitbox","Internet Explorer Cache","hitbox.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Mediaplex","Internet Explorer Cache","mediaplex.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_ReliableStats","Internet Explorer Cache","stats1.reliablestats.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_Revsci","Internet Explorer Cache","revsci.net","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_StatCounter","Internet Explorer Cache","statcounter.com","Detected"
"09:07","Bad Internet Browser Cookies","Cookie_YieldManager","Internet Explorer Cache","ad.yieldmanager.com","Detected"
"09:07","File System","Freeloader_Smitfraud","C:\Documents and Settings\Zach\Desktop\SmitfraudFix","dumphive.exe","Detected"
"09:07","File System","RAP_Generic","C:\Documents and Settings\Zach\Desktop\SmitfraudFix","swxcacls.exe","Detected"
"09:07","Your computer's memory","TSPY_Banker.VY","C:\WINDOWS\system32","svchosts.exe","Detected"
"10:26","Bad Internet Browser Cookies","Cookie_Atdmt","Internet Explorer Cache","atdmt.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_Revsci","Internet Explorer Cache","revsci.net","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_Com","Internet Explorer Cache","com.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_ReliableStats","Internet Explorer Cache","stats1.reliablestats.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_Hitbox","Internet Explorer Cache","hitbox.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_FastClick","Internet Explorer Cache","fastclick.net","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_BFast","Internet Explorer Cache","bfast.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_YieldManager","Internet Explorer Cache","ad.yieldmanager.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_StatCounter","Internet Explorer Cache","statcounter.com","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_Mediaplex","Internet Explorer Cache","mediaplex.com","Quarantined"
"10:26","Your computer's memory","TSPY_Banker.VY","C:\WINDOWS\system32","svchosts.exe","Quarantined"
"10:26","Bad Internet Browser Cookies","Cookie_Azjmp","Internet Explorer Cache","azjmp.com","Quarantined"
"10:26","File System","RAP_Generic","C:\Documents and Settings\Zach\Desktop\SmitfraudFix","swxcacls.exe","Quarantined"
---------------------