3 2 259 s 05/30/12, 18:04:36 UTC Timeout 1.76.3886 $Revision: 3914 $ May 14 2012 20:16:24

true true false false false false false false false false false true true true true false false false false true false false false false false true false 8

2 1 Primary Analysis Subject 3c7d0ea8b6258515e245cc5dfa549de0.zeustracker 3c7d0ea8b6.exe C:\3c7d0ea8b6.exe "C:\3c7d0ea8b6.exe" alive 0 3c7d0ea8b6258515e245cc5dfa549de0 704cfa498cc1557e59967a27c376a5480abdebcf 302048 3 2 Started by 3c7d0ea8b6.exe ceujgo.exe C:\Documents and Settings\Administrator\Application Data\Yxxuu\ceujgo.exe "C:\Documents and Settings\Administrator\Application Data\Yxxuu\ceujgo.exe" alive 0 772127ee8846b4f83cc822e03c9dfd92 2e2eba954b37ccb65b42458405f6d775e9bc84e4 302048 4 3 ceujgo.exe wrote to the virtual memory of this process Explorer.EXE C:\WINDOWS\Explorer.EXE C:\WINDOWS\Explorer.EXE alive 0 12896823fb95bfb3dc9b46bcaedc9923 9d2bf84874abc5b6e9a2744b7865c193c08d362f 1033728 5 3 ceujgo.exe wrote to the virtual memory of this process ctfmon.exe C:\WINDOWS\system32\ctfmon.exe "C:\WINDOWS\system32\ctfmon.exe" alive 0 5f1d5f88303d4a4dbc8e5f97ba967cc3 99cb7370f16773c8e2d0c86fe805ec638ab126e9 15360 6 3 ceujgo.exe wrote to the virtual memory of this process msmsgs.exe C:\Program Files\Messenger\msmsgs.exe "C:\Program Files\Messenger\msmsgs.exe" /background alive 0 3e930c641079443d4de036167a69caa2 ac40479e28fb680aff76e41fa14ebe18b3392629 1695232