Scan started at: 2019-02-18T20:36:56.

834000
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\msvcr71.dll
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\python.exe
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\python24.dll
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\pythonw.exe
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\bz2.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\pyexpat.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\select.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\unicodedata.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\zlib.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\_socket.pyd
File: historic_upx - C:\glassfish3\pkg\python2.4-minimal\DLLs\_ssl.pyd
File: historic_upx - C:\glassfish3\pkg\vendor-packages\OpenSSL\libeay32.dll
File: historic_upx - C:\glassfish3\pkg\vendor-packages\OpenSSL\ssleay32.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\gdiplus.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\msvcp71.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxbase28uh_net_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxbase28uh_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxbase28uh_xml_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxmsw28uh_adv_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxmsw28uh_core_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxmsw28uh_html_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxmsw28uh_qa_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\wxmsw28uh_richtext_vc.dll
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_activex.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_animate.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_aui.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_calendar.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_combo.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_controls_.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_core_.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_gdi_.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_gizmos.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_glcanvas.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_grid.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_html.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_media.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_misc_.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_richtext.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_stc.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_webkit.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-
2.8\wx\_windows_.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_wizard.pyd
File: historic_upx - C:\glassfish3\updatetool\vendor-packages\wx-2.8\wx\_xrc.pyd
Process: historic_APTGroupX_PlugXTrojanLoader_StringDecode - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_greenrat_mt_dat - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_templatr - 788 - "MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_ghostlike_add_xor_loop - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_ghostlike_xor_sub_loop - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_GreenCrash_Unique_Strings - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: historic_htran_plain - 788 - "MsMpEng.exe","788","Services","0","310,856
K"
Process: historic_mtexe_unique_strings - 788 -
"MsMpEng.exe","788","Services","0","310,856 K"
Process: webshell_rule2 - 788 - "MsMpEng.exe","788","Services","0","310,856 K"
Scan completed