21-01-2011, 03:29 AM
Kiriman file virusnya dari gambar yg disuruh download keylogger dan pembongkar password, sebagai alat menerobos komputer orang lain yg diprotek dengan password. Terakhir dari skema yg opamp virus win32.
Selalu menghapus cache untuk menhapus jejak.
2011-01-20 22:56:21+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:34:17+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:37:10+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:37:40+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:38:39+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:43:55+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:45:46+0700 1408 228 Cleared the proxy cache.
2011-01-21 00:03:10+0700 1408 228 Cleared the proxy cache.
2011-01-21 00:03:39+0700 912 3e8 WUCheckForUpdatesAtShutdown failed, hr=8024A000
2011-01-21 00:03:43+0700 1408 228 AU received event of 0
2011-01-21 00:03:55+0700 1408 584 Service received logoff notification
2011-01-21 00:03:55+0700 1408 228 AU received event of 3
2011-01-21 00:03:57+0700 1408 228 AU received event of 1
2011-01-21 00:03:57+0700 1408 228 GetUserTokenFromSessionId failed with hr 0x800704dd
2011-01-21 00:03:57+0700 1408 228 GetUserTokenFromSessionId failed with hr 0x800704dd
2011-01-21 00:04:00+0700 1408 5dc AU Restart required....
2011-01-21 00:04:00+0700 1408 228 AU received event of 1
2011-01-21 00:04:00+0700 1408 228 AU is paused, not initializing any handlers
2011-01-21 00:04:00+0700 940 d6c WUAutoUpdateAtShutdown failed, hr=8024A000
2011-01-21 00:04:01+0700 1408 584 Service received SERVICE_CONTROL_SHUTDOWN control
2011-01-21 00:04:01+0700 1408 228 Exiting Service Main
2011-01-21 00:04:02+0700 1408 228 WUAUENG ServiceMain exits. Exit code is 0x240001
2011-01-21 00:05:13+0700 1404 200 Service Main starts
2011-01-21 00:05:16+0700 936 3ac WUCheckForUpdatesAtShutdown failed, hr=8024000C
2011-01-21 00:05:16+0700 1404 200 Using BatchFlushAge = 11928.
2011-01-21 00:05:16+0700 1404 200 Using SamplingValue = 602.
2011-01-21 00:05:16+0700 1404 200 Successfully loaded event namespace dictionary.
2011-01-21 00:05:17+0700 1404 200 Successfully loaded client event namespace descriptor.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized local event logger. Events will be logged at C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized NT event logger.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized event uploader 0.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized event uploader 1.
2011-01-21 00:05:17+0700 1404 200 WU client with version 5.4.3790.2180 successfully initialized
2011-01-21 00:05:17+0700 1404 200 Service status is now SERVICE_RUNNING
2011-01-21 00:05:18+0700 1964 7b0 Trying to make out of proc datastore active
2011-01-21 00:05:19+0700 1964 7b0 Out of proc datastore is now active
2011-01-21 00:05:19+0700 1404 428 Client Call Recorder finished delayed initialization
2011-01-21 00:05:19+0700 1404 428 AU is not configured yet, generating timeout to launch setup wizard
2011-01-21 00:05:19+0700 1404 428 AU finished delayed initialization
2011-01-21 00:05:19+0700 1404 200 AU received event of 1
2011-01-21 00:05:19+0700 1404 428 AU Restart required....
2011-01-21 00:05:19+0700 1404 200 AU received event of 1
2011-01-21 00:05:19+0700 1404 200 AU is paused, not initializing any handlers
2011-01-21 00:05:19+0700 936 79c WUAutoUpdateAtShutdown failed, hr=8024A000
2011-01-21 00:05:20+0700 1404 580 Service received SERVICE_CONTROL_SHUTDOWN control
2011-01-21 00:05:21+0700 1404 200 Exiting Service Main
2011-01-21 00:05:21+0700 1964 7b0 Out of proc datastore is shutting down
2011-01-21 00:05:21+0700 1404 200 WUAUENG ServiceMain exits. Exit code is 0x240001
2011-01-21 00:05:22+0700 1964 7b0 Out of proc datastore is now inactive
Selalu menghapus cache untuk menhapus jejak.
2011-01-20 22:56:21+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:34:17+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:37:10+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:37:40+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:38:39+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:43:55+0700 1408 228 Cleared the proxy cache.
2011-01-20 23:45:46+0700 1408 228 Cleared the proxy cache.
2011-01-21 00:03:10+0700 1408 228 Cleared the proxy cache.
2011-01-21 00:03:39+0700 912 3e8 WUCheckForUpdatesAtShutdown failed, hr=8024A000
2011-01-21 00:03:43+0700 1408 228 AU received event of 0
2011-01-21 00:03:55+0700 1408 584 Service received logoff notification
2011-01-21 00:03:55+0700 1408 228 AU received event of 3
2011-01-21 00:03:57+0700 1408 228 AU received event of 1
2011-01-21 00:03:57+0700 1408 228 GetUserTokenFromSessionId failed with hr 0x800704dd
2011-01-21 00:03:57+0700 1408 228 GetUserTokenFromSessionId failed with hr 0x800704dd
2011-01-21 00:04:00+0700 1408 5dc AU Restart required....
2011-01-21 00:04:00+0700 1408 228 AU received event of 1
2011-01-21 00:04:00+0700 1408 228 AU is paused, not initializing any handlers
2011-01-21 00:04:00+0700 940 d6c WUAutoUpdateAtShutdown failed, hr=8024A000
2011-01-21 00:04:01+0700 1408 584 Service received SERVICE_CONTROL_SHUTDOWN control
2011-01-21 00:04:01+0700 1408 228 Exiting Service Main
2011-01-21 00:04:02+0700 1408 228 WUAUENG ServiceMain exits. Exit code is 0x240001
2011-01-21 00:05:13+0700 1404 200 Service Main starts
2011-01-21 00:05:16+0700 936 3ac WUCheckForUpdatesAtShutdown failed, hr=8024000C
2011-01-21 00:05:16+0700 1404 200 Using BatchFlushAge = 11928.
2011-01-21 00:05:16+0700 1404 200 Using SamplingValue = 602.
2011-01-21 00:05:16+0700 1404 200 Successfully loaded event namespace dictionary.
2011-01-21 00:05:17+0700 1404 200 Successfully loaded client event namespace descriptor.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized local event logger. Events will be logged at C:\WINDOWS\SoftwareDistribution\ReportingEvents.log.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized NT event logger.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized event uploader 0.
2011-01-21 00:05:17+0700 1404 200 Successfully initialized event uploader 1.
2011-01-21 00:05:17+0700 1404 200 WU client with version 5.4.3790.2180 successfully initialized
2011-01-21 00:05:17+0700 1404 200 Service status is now SERVICE_RUNNING
2011-01-21 00:05:18+0700 1964 7b0 Trying to make out of proc datastore active
2011-01-21 00:05:19+0700 1964 7b0 Out of proc datastore is now active
2011-01-21 00:05:19+0700 1404 428 Client Call Recorder finished delayed initialization
2011-01-21 00:05:19+0700 1404 428 AU is not configured yet, generating timeout to launch setup wizard
2011-01-21 00:05:19+0700 1404 428 AU finished delayed initialization
2011-01-21 00:05:19+0700 1404 200 AU received event of 1
2011-01-21 00:05:19+0700 1404 428 AU Restart required....
2011-01-21 00:05:19+0700 1404 200 AU received event of 1
2011-01-21 00:05:19+0700 1404 200 AU is paused, not initializing any handlers
2011-01-21 00:05:19+0700 936 79c WUAutoUpdateAtShutdown failed, hr=8024A000
2011-01-21 00:05:20+0700 1404 580 Service received SERVICE_CONTROL_SHUTDOWN control
2011-01-21 00:05:21+0700 1404 200 Exiting Service Main
2011-01-21 00:05:21+0700 1964 7b0 Out of proc datastore is shutting down
2011-01-21 00:05:21+0700 1404 200 WUAUENG ServiceMain exits. Exit code is 0x240001
2011-01-21 00:05:22+0700 1964 7b0 Out of proc datastore is now inactive
