You are on page 1of 1337

2012-06-20T12:11:43-03:00,info,general,daemon,Policy file has been reloaded.

2012-06-20T12:11:43-03:00,info,general,daemon,Policy file has been reloaded.


2012-06-20T12:11:43-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:43-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:43-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:44-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:45-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:46-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:46-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:11:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-06-20T12:11:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-06-20T12:11:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-06-20T12:11:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-06-20T12:11:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60352
2012-06-20T12:11:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:11:42-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-06-20T12:11:43-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-06-20T12:11:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:11:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.10.16,63481
2012-06-20T12:11:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,60353
2012-06-20T12:11:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-06-20T12:11:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.1.58,61794
2012-06-20T12:11:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.10.16,12110
2012-06-20T12:11:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.16,12110
2012-06-20T12:11:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.16,12110
2012-06-20T12:11:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.16,12110
2012-06-20T12:11:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.16,12110
2012-06-20T12:11:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,60354
2012-06-20T12:11:52-03:00,info,ids update,1232363088,2009-01-19_06,installed
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,60355
2012-06-20T12:11:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:11:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64062
2012-06-20T12:11:54-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110

2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,64063
2012-06-20T12:11:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56874
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:11:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:12:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:12:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:12:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:12:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:12:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:12:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:12:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:12:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:12:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.10.16,64593
2012-06-20T12:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:12:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:13:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:13:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:13:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900

2012-06-20T12:13:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:13:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,56875
2012-06-20T12:13:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,56876
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,56877
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,56878
2012-06-20T12:13:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.19,12110

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

2012-06-20T12:13:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:13:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.19,12110
2012-06-20T12:13:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,56879
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,56880
2012-06-20T12:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110

2012-06-20T12:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.91,12110
2012-06-20T12:13:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53470
2012-06-20T12:13:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:13:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:13:57-03:00,info,appl control,\\10.10.2.141\Public\Depin\HDMSP5~R\
FB95PM~9\MAUK4O~K\Java\J98QQU~7.EXE,allow,connect out,6,64.210.100.59,80
2012-06-20T12:13:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:13:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54401
2012-06-20T12:13:58-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,137.254.16.62,80
2012-06-20T12:13:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:13:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63812
2012-06-20T12:13:59-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,137.254.16.64,80
2012-06-20T12:13:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,63877
2012-06-20T12:13:59-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,137.254.16.64,80
2012-06-20T12:14:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61629
2012-06-20T12:14:00-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,201.6.5.40,80
2012-06-20T12:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:14:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.86,53440
2012-06-20T12:14:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:14:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64612
2012-06-20T12:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:14:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60984
2012-06-20T12:14:45-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,199.7.54.72,80
2012-06-20T12:14:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:14:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:14:49-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.254.101,1900
2012-06-20T12:15:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.3,1180
2012-06-20T12:15:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:15:14-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:15:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:15:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.74,1134
2012-06-20T12:15:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:15:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:16:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:16:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:16:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:16:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56246
2012-06-20T12:16:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:16:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62903
2012-06-20T12:16:52-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,199.7.48.72,80
2012-06-20T12:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54611
2012-06-20T12:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57183
2012-06-20T12:16:53-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,199.7.48.72,80
2012-06-20T12:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56708
2012-06-20T12:16:59-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,63.140.58.204,443
2012-06-20T12:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55272
2012-06-20T12:17:00-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,199.7.48.190,80
2012-06-20T12:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50183
2012-06-20T12:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55355
2012-06-20T12:17:02-03:00,info,appl control,UNC\10.10.2.141\public\Depin\help de
sk\file server - helpdesk\manuteno\Java\jre-7-windows-i586.exe,allow,connect out,6
,199.7.48.72,80
2012-06-20T12:17:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,1466
2012-06-20T12:17:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53657
2012-06-20T12:17:11-03:00,info,appl control,\\10.10.2.141\Public\Depin\HDMSP5~R\
FB95PM~9\MAUK4O~K\Office\OLUVUL~I\setup.exe,allow,connect out,6,201.6.5.24,80
2012-06-20T12:17:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-06-20T12:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:17:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:17:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:18:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:18:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.74,1159
2012-06-20T12:18:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:18:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:19:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:19:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:21:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:22:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:22:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:23:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,53786
2012-06-20T12:23:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:23:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:23:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:23:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:24:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:24:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:24:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:24:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:24:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:24:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:24:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.34,4130
2012-06-20T12:25:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:25:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.42,62484
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51521
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,54521
2012-06-20T12:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54670
2012-06-20T12:26:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54759
2012-06-20T12:26:11-03:00,info,appl control,C:\Windows\MICROS~1.NET\FRAMEW~1\V20
~1.507\mscorsvw.exe,allow,connect out,6,201.6.5.24,80
2012-06-20T12:26:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:26:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:26:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,57415
2012-06-20T12:26:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:27:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:27:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:27:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.41,58365
2012-06-20T12:27:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:27:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:27:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:27:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:27:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:28:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.41,58370
2012-06-20T12:28:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.53,49278
2012-06-20T12:28:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:28:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:28:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.107,61167
2012-06-20T12:29:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.107,63389
2012-06-20T12:30:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:30:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:30:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:30:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-06-20T12:31:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:31:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58362
2012-06-20T12:31:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:31:10-03:00,info,appl control,C:\PROGRA~1\WINDOW~3\MpCmdRun.exe,al
low,connect out,6,157.56.52.158,443
2012-06-20T12:31:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:31:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:31:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.173,3037
2012-06-20T12:31:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:31:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:31:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58363
2012-06-20T12:31:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-06-20T12:31:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:31:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:00-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:01-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:02-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:03-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:04-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:05-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:06-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:07-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:15-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:16-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:17-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:18-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:19-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:20-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:21-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:22-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,send,17,10.10.3.145,61914
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:23-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:24-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:25-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:26-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:27-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:28-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:29-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:30-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:31-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:32-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:34-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:35-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:37-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:44-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:45-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:46-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:46-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:46-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:46-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:47-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:48-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:48-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:48-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:48-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:48-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.34,12110
2012-06-20T12:32:51-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:32:55-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.212,61991
2012-06-20T12:33:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:33:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:33:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T12:33:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61949
2012-06-20T12:33:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:33:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.41,80
2012-06-20T12:33:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,53640
2012-06-20T12:33:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:34:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.230,3889
2012-06-20T12:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63751
2012-06-20T12:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56727
2012-06-20T12:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53410
2012-06-20T12:34:10-03:00,info,appl control,C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE
~1\OSPPSVC.EXE,allow,connect out,6,10.2.0.61,1688
2012-06-20T12:34:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:34:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:34:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:34:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.53,58454
2012-06-20T12:34:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:35:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.6,59834
2012-06-20T12:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:36:42-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:36:42-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-20T12:36:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:36:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.177,1194
2012-06-20T12:37:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-20T12:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:37:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:38:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:38:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,60191
2012-06-20T12:38:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:39:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:39:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.73,2047
2012-06-20T12:40:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:41:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:41:12-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:41:13-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:41:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:42:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.178,2223
2012-06-20T12:42:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:42:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:42:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:42:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:42:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T12:42:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60123
2012-06-20T12:42:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-20T12:42:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56921
2012-06-20T12:42:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64640
2012-06-20T12:42:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65230
2012-06-20T12:42:29-03:00,info,appl control,C:\PROGRA~1\WINDOW~3\MpCmdRun.exe,al
low,connect out,6,157.56.52.158,443
2012-06-20T12:42:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:43:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:43:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:44:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:44:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:44:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:45:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:45:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:45:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:45:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:45:39-03:00,info,appl control,C:\Program Files\Common Files\micros
oft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE,allow,connect out,6,10.2
.0.61,1688
2012-06-20T12:45:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:45:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:46:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:46:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:46:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.235,1417
2012-06-20T12:46:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:46:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.228,50299
2012-06-20T12:46:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:46:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T12:46:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54795
2012-06-20T12:46:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-20T12:46:51-03:00,info,appl control,C:\Windows\System32\dllhost.exe,allo
w,connect out,6,65.55.58.195,80
2012-06-20T12:46:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55816
2012-06-20T12:46:54-03:00,info,appl control,C:\Windows\System32\dllhost.exe,allo
w,connect out,6,65.52.98.231,443
2012-06-20T12:47:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.132,52071
2012-06-20T12:47:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:47:33-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:47:33-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:47:33-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:47:34-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:47:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.66,53269
2012-06-20T12:47:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T12:47:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T12:48:02-03:00,info,appl control,C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE
14\LICLUA.EXE,allow,connect out,6,65.55.58.195,80
2012-06-20T12:48:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-06-20T12:48:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:48:05-03:00,info,appl control,C:\Program Files\Common Files\micros
oft shared\OFFICE14\LICLUA.EXE,allow,connect out,6,65.52.98.231,443
2012-06-20T12:48:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.66,53270
2012-06-20T12:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50337
2012-06-20T12:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-20T12:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.26,443
2012-06-20T12:48:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53476
2012-06-20T12:48:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:48:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:49:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:49:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59151
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.65,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80

2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:49:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.94,2718
2012-06-20T12:50:11-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:50:11-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:50:11-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:50:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.45,53764
2012-06-20T12:50:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:50:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:50:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:50:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.49,55409
2012-06-20T12:50:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:51:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:51:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:51:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.13,59076
2012-06-20T12:52:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.63,2285
2012-06-20T12:52:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:52:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:52:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:53:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:55:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.110,50835
2012-06-20T12:56:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.27,57272
2012-06-20T12:57:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:57:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T12:57:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,55011
2012-06-20T12:58:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T12:58:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.27,2869
2012-06-20T12:58:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:59:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:59:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65102

2012-06-20T12:59:17-03:00,info,appl
w,send,17,10.10.0.11,53
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:17-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl
w,connect out,6,64.210.100.16,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T12:59:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T12:59:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.65,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80

2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-20T12:59:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.179,58502
2012-06-20T12:59:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T12:59:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62430
2012-06-20T12:59:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T12:59:38-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:59:38-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T12:59:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.5,3518
2012-06-20T12:59:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:00:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:00:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:00:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:00:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.27,2869
2012-06-20T13:00:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.70,1999
2012-06-20T13:00:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900

2012-06-20T13:01:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.4.48,56396
2012-06-20T13:01:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:01:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:01:42-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:01:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,64924
2012-06-20T13:01:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:02:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:02:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:03:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:03:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.16,3804
2012-06-20T13:03:39-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:03:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:04:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.115,57690
2012-06-20T13:05:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.212,2313
2012-06-20T13:05:04-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:05:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.1.157,59133
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65043
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.56,80
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63706
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.72.67,80
2012-06-20T13:05:33-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:05:37-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:05:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56989
2012-06-20T13:05:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53

2012-06-20T13:06:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.10.192,2347
2012-06-20T13:06:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60037
2012-06-20T13:06:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:06:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:06:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,49513
2012-06-20T13:06:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:06:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:06:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:06:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.81,54534
2012-06-20T13:07:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:07:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:07:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.95,56661
2012-06-20T13:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:07:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.185,2805
2012-06-20T13:07:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:08:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:09:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,1916
2012-06-20T13:09:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.96,4098
2012-06-20T13:10:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.137,54917
2012-06-20T13:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:10:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61526
2012-06-20T13:10:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.103,50945
2012-06-20T13:11:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.103,50947
2012-06-20T13:11:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:11:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50265
2012-06-20T13:11:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.103,50628
2012-06-20T13:12:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:12:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:12:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50815
2012-06-20T13:12:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.103,50629

2012-06-20T13:12:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:12:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:12:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,59781
2012-06-20T13:12:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:12:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,49304
2012-06-20T13:13:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:13:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.37,1088
2012-06-20T13:13:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:13:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:13:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:13:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:13:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,57308
2012-06-20T13:14:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.55,52881
2012-06-20T13:14:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:14:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:14:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50871
2012-06-20T13:14:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:14:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,58470
2012-06-20T13:14:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:15:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.88,3734
2012-06-20T13:15:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,54216
2012-06-20T13:15:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.120,49840
2012-06-20T13:15:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,61304
2012-06-20T13:15:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,62129
2012-06-20T13:16:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:16:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61534
2012-06-20T13:16:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.48,1042
2012-06-20T13:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65039
2012-06-20T13:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53

2012-06-20T13:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61421
2012-06-20T13:17:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.225,59276
2012-06-20T13:17:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50042
2012-06-20T13:17:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.91,53996
2012-06-20T13:17:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:17:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,59057
2012-06-20T13:18:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:18:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:18:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.75,1241
2012-06-20T13:18:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,60719
2012-06-20T13:18:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:18:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.25,61844
2012-06-20T13:18:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62138
2012-06-20T13:18:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51072
2012-06-20T13:18:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51837
2012-06-20T13:18:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63260
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62462
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,57777
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53052
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50643
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49997
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52910
2012-06-20T13:18:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57173
2012-06-20T13:19:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54750
2012-06-20T13:19:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:19:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,54832
2012-06-20T13:19:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60445
2012-06-20T13:19:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,64336
2012-06-20T13:19:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:20:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,51964

2012-06-20T13:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:20:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:20:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:20:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:20:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,52497
2012-06-20T13:21:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:21:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:21:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,51504
2012-06-20T13:21:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.38,4893
2012-06-20T13:21:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:22:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.147,58862
2012-06-20T13:22:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50273
2012-06-20T13:22:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.84,3098
2012-06-20T13:22:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,63045
2012-06-20T13:23:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:23:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,50179
2012-06-20T13:23:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:23:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58688
2012-06-20T13:23:38-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:23:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.2,58338
2012-06-20T13:24:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.81,64151
2012-06-20T13:24:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61850
2012-06-20T13:24:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.150,59326
2012-06-20T13:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:24:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,2715
2012-06-20T13:25:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,49171
2012-06-20T13:25:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.23,58994
2012-06-20T13:25:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,56548
2012-06-20T13:25:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:25:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.12,4172

2012-06-20T13:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:26:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.71,1935
2012-06-20T13:26:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,58283
2012-06-20T13:26:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:26:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.36,52558
2012-06-20T13:27:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:27:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:27:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:27:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,54184
2012-06-20T13:27:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.41,62019
2012-06-20T13:27:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:27:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.8,57926
2012-06-20T13:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:27:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,54163
2012-06-20T13:28:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.165,53796
2012-06-20T13:28:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:28:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.13,2758
2012-06-20T13:28:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:28:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,49331
2012-06-20T13:28:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:28:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:28:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.53,54687
2012-06-20T13:29:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.122,58148
2012-06-20T13:29:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,55113
2012-06-20T13:29:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:29:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.152,57181
2012-06-20T13:29:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.143,59565
2012-06-20T13:30:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,57409
2012-06-20T13:30:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900

2012-06-20T13:30:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:30:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,55537
2012-06-20T13:30:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.33,51869
2012-06-20T13:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65238
2012-06-20T13:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50990
2012-06-20T13:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61652
2012-06-20T13:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63455
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60132
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53969
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62433
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59860
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,55311
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61556
2012-06-20T13:31:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49688
2012-06-20T13:31:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.52,57119
2012-06-20T13:31:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:31:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60745
2012-06-20T13:31:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61118
2012-06-20T13:31:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52612
2012-06-20T13:31:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,58082
2012-06-20T13:31:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:31:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.205,1233
2012-06-20T13:32:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,59309
2012-06-20T13:32:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,49886
2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55238

2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,65017
2012-06-20T13:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58001
2012-06-20T13:33:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55368
2012-06-20T13:33:24-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,65.55.53.190,80
2012-06-20T13:33:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:33:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:34:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,54192
2012-06-20T13:34:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.167,4300
2012-06-20T13:34:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,2477
2012-06-20T13:34:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,57403
2012-06-20T13:34:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:34:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:35:20-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-06-20T13:35:20-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-06-20T13:35:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:35:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:35:25-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:35:25-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-20T13:35:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:35:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61566
2012-06-20T13:36:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:36:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61096
2012-06-20T13:38:11-03:00,info,general,daemon,Firewall Daemon service started.
2012-06-20T13:37:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61336
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60111
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,3702
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60112
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60113
2012-06-20T13:37:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57635
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53795
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53797
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-06-20T13:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-06-20T13:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52355
2012-06-20T13:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54963
2012-06-20T13:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54964
2012-06-20T13:37:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61822
2012-06-20T13:37:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53643
2012-06-20T13:37:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50768
2012-06-20T13:37:54-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,60559
2012-06-20T13:37:54-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,60559
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,60560
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,60560
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-20T13:37:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-20T13:37:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-06-20T13:37:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-06-20T13:37:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-06-20T13:37:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-06-20T13:37:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56325
2012-06-20T13:37:56-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-06-20T13:37:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:37:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49384
2012-06-20T13:37:58-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-06-20T13:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,60565
2012-06-20T13:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,60565
2012-06-20T13:38:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:38:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:38:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:38:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62665
2012-06-20T13:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63689
2012-06-20T13:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T13:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51836
2012-06-20T13:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60942
2012-06-20T13:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53479
2012-06-20T13:38:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57045
2012-06-20T13:38:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-06-20T13:38:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.82,4576
2012-06-20T13:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64429
2012-06-20T13:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49699
2012-06-20T13:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57238
2012-06-20T13:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57898
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58861
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60803
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,49555
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62528
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51733
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63226
2012-06-20T13:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54297
2012-06-20T13:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51077
2012-06-20T13:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49301
2012-06-20T13:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57445
2012-06-20T13:38:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.28,52948
2012-06-20T13:38:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:39:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,3273
2012-06-20T13:39:30-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-06-20T13:39:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.89,2413
2012-06-20T13:39:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,57446
2012-06-20T13:39:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,57448
2012-06-20T13:39:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-06-20T13:39:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,1900
2012-06-20T13:39:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-06-20T13:39:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.27,2869
2012-06-20T13:39:59-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-06-20T13:40:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.167,3557
2012-06-20T13:40:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.25,64848
2012-06-20T13:41:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T13:41:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T13:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62526
2012-06-20T13:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,207.46.21.124,443
2012-06-20T13:41:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.156,2069
2012-06-20T13:41:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,65394
2012-06-20T13:41:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.254.101,1900
2012-06-20T13:41:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.91,1780
2012-06-20T13:41:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:41:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:42:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.6,52054
2012-06-20T13:42:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,62442
2012-06-20T13:43:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,61354
2012-06-20T13:43:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.56,2591
2012-06-20T13:43:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:43:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:43:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,63081
2012-06-20T13:43:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.87,2462
2012-06-20T13:44:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61315
2012-06-20T13:44:04-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,64.210.100.59,80
2012-06-20T13:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:44:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.24,62716
2012-06-20T13:44:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65119
2012-06-20T13:44:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:44:28-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
ucheck.exe,allow,connect out,6,64.210.100.66,80
2012-06-20T13:44:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:44:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:44:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63903
2012-06-20T13:44:29-03:00,info,appl control,C:\Program Files\Common Files\Java\J
ava Update\jucheck.exe,allow,connect out,6,137.254.16.62,80
2012-06-20T13:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T13:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T13:44:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54162
2012-06-20T13:44:34-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::4087:E881:100:E0,80
2012-06-20T13:44:34-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::4087:E881:100:E0,80
2012-06-20T13:44:34-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::4087:E881:100:E0,80
2012-06-20T13:44:47-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo

w,listen,6,0.0.0.0,5900
2012-06-20T13:44:47-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-06-20T13:44:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,1582
2012-06-20T13:44:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-20T13:44:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:45:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.55,63715
2012-06-20T13:45:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,59738
2012-06-20T13:45:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-20T13:45:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.172,1703
2012-06-20T13:45:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T13:45:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-20T13:45:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57313
2012-06-20T13:45:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\Temp\IE91093.tmp\IE9-SU~1
\ienrcore.exe,allow,connect out,6,65.55.58.195,80
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\Temp\IE91093.tmp\IE9-SU~1
\ienrcore.exe,allow,connect out,6,65.55.58.195,80
2012-06-20T13:45:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:45:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54071
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53276
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\Temp\IE91093.tmp\IE9-supp
ort\ienrcore.exe,allow,connect out,6,64.210.100.25,80
2012-06-20T13:45:51-03:00,info,appl control,C:\Windows\Temp\IE91093.tmp\IE9-supp
ort\ienrcore.exe,allow,connect out,6,64.210.100.25,80
2012-06-20T13:45:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,65502
2012-06-20T13:46:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:46:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.55,56988
2012-06-20T13:46:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:46:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.3.50,1900
2012-06-20T13:46:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.3.237,57793
2012-06-20T13:46:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-06-20T13:46:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.1.103,61232
2012-06-20T13:47:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.132,53436
2012-06-20T13:47:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.1.3.50,1900
2012-06-20T13:47:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.164,68
2012-06-20T13:47:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T13:59:47-03:00,info,general,daemon,Firewall Daemon service started.
2012-06-28T13:59:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60977
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60978
2012-06-28T13:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-06-28T13:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,49155
2012-06-28T13:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,49155
2012-06-28T13:59:23-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,49156
2012-06-28T13:59:23-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,49156
2012-06-28T13:59:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-06-28T13:59:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-06-28T13:59:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-06-28T13:59:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62290
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59659
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50053
2012-06-28T13:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53306

2012-06-28T13:59:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,49161
2012-06-28T13:59:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,49161
2012-06-28T13:59:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T13:59:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50831
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FEC0:0:0:FFFF::1,53
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T13:59:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-06-28T13:59:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56807
2012-06-28T14:00:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53470
2012-06-28T14:00:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57445
2012-06-28T14:00:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,52771
2012-06-28T14:00:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50525
2012-06-28T14:00:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-06-28T14:00:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:00:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:00:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:00:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:01:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52322

2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50225
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58889
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,55783
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61632
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55670
2012-06-28T14:02:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,1900
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60454
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,64089
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53784
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,53785
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,53787
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63543
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58546
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58548
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58251
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62207
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62208
2012-06-28T14:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900

2012-06-28T14:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T14:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T14:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,64763
2012-06-28T14:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61443
2012-06-28T14:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54302
2012-06-28T14:02:42-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:02:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.203,49470
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49992
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.16,80
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51307
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50459
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,68
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62252
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,55823
2012-06-28T14:02:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49822
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53311
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-06-28T14:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.118,2869
2012-06-28T14:02:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54464
2012-06-28T14:02:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.152,80
2012-06-28T14:02:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64886
2012-06-28T14:02:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-06-28T14:02:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64153
2012-06-28T14:02:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60643
2012-06-28T14:03:06-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80

2012-06-28T14:03:07-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien


t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:03:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60511
2012-06-28T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-28T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,65267
2012-06-28T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56014
2012-06-28T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63256
2012-06-28T14:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63309
2012-06-28T14:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50479
2012-06-28T14:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57153
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51907
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57812
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,135
2012-06-28T14:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,1025
2012-06-28T14:03:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.45,58035
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55672
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50876
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,135
2012-06-28T14:03:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,1025
2012-06-28T14:03:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-06-28T14:03:46-03:00,info,appl
w,listen,17,10.10.3.16,68
2012-06-28T14:03:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,::,5355
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,::,5355
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,::,57820
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,63212
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,65213
2012-06-28T14:03:50-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,52101
2012-06-28T14:03:50-03:00,info,appl
w,listen,17,0.0.0.0,52102
2012-06-28T14:03:50-03:00,info,appl
w,send,17,239.255.255.250,1900
2012-06-28T14:03:50-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:03:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,50193
2012-06-28T14:03:53-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,52269
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,52270
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,62859
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,64794
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,64795
2012-06-28T14:03:53-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:03:53-03:00,info,appl
listen,17,0.0.0.0,64797
2012-06-28T14:03:53-03:00,info,appl
send,17,10.10.0.12,389
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,62702
2012-06-28T14:03:53-03:00,info,appl
listen,17,0.0.0.0,62703
2012-06-28T14:03:53-03:00,info,appl
listen,17,0.0.0.0,62704
2012-06-28T14:03:53-03:00,info,appl
listen,17,0.0.0.0,62705
2012-06-28T14:03:53-03:00,info,appl
w,connect out,6,10.10.0.11,389

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-06-28T14:03:53-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:03:53-03:00,info,appl
connect out,6,10.10.0.12,135
2012-06-28T14:03:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-06-28T14:03:53-03:00,info,appl
w,listen,17,0.0.0.0,64925
2012-06-28T14:03:53-03:00,info,appl
listen,17,0.0.0.0,64926
2012-06-28T14:03:54-03:00,info,appl
listen,17,0.0.0.0,64927
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,50417
2012-06-28T14:03:55-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:03:55-03:00,info,appl
listen,17,0.0.0.0,50418
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,61099
2012-06-28T14:03:55-03:00,info,appl
listen,17,0.0.0.0,61100
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,62984
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,::,55514
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,55439
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,60266
2012-06-28T14:03:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:03:55-03:00,info,appl
w,listen,17,0.0.0.0,49863
2012-06-28T14:03:55-03:00,info,appl
listen,17,0.0.0.0,49864
2012-06-28T14:03:56-03:00,info,appl
w,listen,17,0.0.0.0,58275
2012-06-28T14:03:56-03:00,info,appl
listen,17,0.0.0.0,58276
2012-06-28T14:03:56-03:00,info,appl
listen,17,0.0.0.0,58277
2012-06-28T14:03:56-03:00,info,appl
w,listen,17,0.0.0.0,55961
2012-06-28T14:03:56-03:00,info,appl
listen,17,0.0.0.0,55962
2012-06-28T14:03:56-03:00,info,appl
w,listen,17,0.0.0.0,64803
2012-06-28T14:03:56-03:00,info,appl
listen,17,0.0.0.0,64804
2012-06-28T14:03:57-03:00,info,appl
w,listen,17,0.0.0.0,61730
2012-06-28T14:03:57-03:00,info,appl
listen,17,0.0.0.0,61731
2012-06-28T14:03:57-03:00,info,appl
w,listen,17,0.0.0.0,55173
2012-06-28T14:03:57-03:00,info,appl
listen,17,0.0.0.0,55174
2012-06-28T14:03:57-03:00,info,appl
w,listen,17,0.0.0.0,50720

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-06-28T14:03:57-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:03:59-03:00,info,appl
w,listen,17,0.0.0.0,52566
2012-06-28T14:03:59-03:00,info,appl
listen,17,0.0.0.0,52567
2012-06-28T14:03:59-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-06-28T14:03:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:00-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:04:00-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:01-03:00,info,appl
w,listen,17,10.10.3.16,68
2012-06-28T14:04:01-03:00,info,appl
w,listen,17,0.0.0.0,55188
2012-06-28T14:04:01-03:00,info,appl
w,listen,17,::,49806
2012-06-28T14:04:01-03:00,info,appl
w,listen,17,0.0.0.0,61589
2012-06-28T14:04:06-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-06-28T14:04:06-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:06-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:04:06-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:06-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-06-28T14:04:06-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:06-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:04:06-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:06-03:00,info,appl
w,listen,17,0.0.0.0,50473
2012-06-28T14:04:06-03:00,info,appl
w,send,17,10.10.0.12,53
2012-06-28T14:04:06-03:00,info,appl
w,connect out,6,201.6.5.24,80
2012-06-28T14:04:12-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-06-28T14:04:12-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:12-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:04:12-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:04:13-03:00,info,appl
listen,17,0.0.0.0,50474
2012-06-28T14:04:13-03:00,info,appl
send,17,10.10.0.12,389
2012-06-28T14:04:13-03:00,info,appl
connect out,6,10.10.0.12,389
2012-06-28T14:04:13-03:00,info,appl
connect out,6,10.10.0.12,88

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\msiexec.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-06-28T14:04:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50475
2012-06-28T14:04:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50476
2012-06-28T14:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50477
2012-06-28T14:04:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59451
2012-06-28T14:04:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59452
2012-06-28T14:04:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59453
2012-06-28T14:04:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59454
2012-06-28T14:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59455
2012-06-28T14:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59456
2012-06-28T14:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59457
2012-06-28T14:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59458
2012-06-28T14:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59459
2012-06-28T14:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-06-28T14:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,135
2012-06-28T14:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,1025
2012-06-28T14:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54666
2012-06-28T14:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,201.6.5.39,80
2012-06-28T14:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:05:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56308
2012-06-28T14:05:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:05:05-03:00,info,appl control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
low,connect out,6,65.55.58.195,80
2012-06-28T14:05:05-03:00,info,appl control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
low,connect out,6,65.55.58.195,80
2012-06-28T14:05:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:05:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:05:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59173
2012-06-28T14:05:08-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,131.253.12.31,80
2012-06-28T14:05:08-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,131.253.12.31,80

2012-06-28T14:05:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51668
2012-06-28T14:05:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58726
2012-06-28T14:05:13-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:13-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:13-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:13-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58583
2012-06-28T14:05:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53274
2012-06-28T14:05:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50288
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.40,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.40,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:16-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:26-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:26-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56522
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.230,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.230,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62077
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51232
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60623
2012-06-28T14:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62920
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.210.100.43,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,207.46.193.179,80

2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,207.46.193.179,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.68.12,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.68.12,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.210.100.43,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.21.39,80
2012-06-28T14:05:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.21.39,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54835
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.21.39,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.21.39,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51817
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.91,80
2012-06-28T14:05:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57243
2012-06-28T14:05:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.231,80
2012-06-28T14:05:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.231,80
2012-06-28T14:05:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80

2012-06-28T14:05:31-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,65.55.121.231,80
2012-06-28T14:05:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65254
2012-06-28T14:05:31-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.156,80
2012-06-28T14:05:31-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.156,80
2012-06-28T14:05:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54891
2012-06-28T14:05:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60563
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.139,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.139,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60933
2012-06-28T14:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65440
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.230,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,82.199.80.141,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.230,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,82.199.80.141,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55948
2012-06-28T14:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54603
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.93.81,80
2012-06-28T14:05:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52217
2012-06-28T14:05:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.34,80
2012-06-28T14:05:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.34,80
2012-06-28T14:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52856

2012-06-28T14:05:34-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,201.6.5.32,80
2012-06-28T14:05:34-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.32,80
2012-06-28T14:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64541
2012-06-28T14:05:34-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.130.110,443
2012-06-28T14:05:34-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.130.110,443
2012-06-28T14:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58980
2012-06-28T14:05:35-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.18.20.10,80
2012-06-28T14:05:35-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.18.20.10,80
2012-06-28T14:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63331
2012-06-28T14:05:35-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,194.7.155.82,80
2012-06-28T14:05:35-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,194.7.155.82,80
2012-06-28T14:05:37-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,443
2012-06-28T14:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55321
2012-06-28T14:05:37-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,216.191.247.139,80
2012-06-28T14:05:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58502
2012-06-28T14:05:39-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,178.255.83.1,80
2012-06-28T14:05:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52082
2012-06-28T14:05:39-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,69.171.247.53,80
2012-06-28T14:05:39-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,69.171.247.53,80
2012-06-28T14:05:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54460
2012-06-28T14:05:40-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.241,80
2012-06-28T14:05:40-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.241,80
2012-06-28T14:05:40-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.241,80
2012-06-28T14:05:40-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.55.121.241,80
2012-06-28T14:05:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53081
2012-06-28T14:05:40-03:00,info,appl control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
low,connect out,6,23.61.135.238,443
2012-06-28T14:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56711
2012-06-28T14:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58573
2012-06-28T14:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50441
2012-06-28T14:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63225

2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,65.54.80.230,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,199.59.148.89,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,199.59.148.89,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,23.61.143.144,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.238,80
2012-06-28T14:05:41-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.80.238,80
2012-06-28T14:05:41-03:00,info,appl control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
low,connect out,6,65.55.58.195,80
2012-06-28T14:05:41-03:00,info,appl control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
low,connect out,6,65.55.58.195,80
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58986
2012-06-28T14:05:42-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.52.103.234,80
2012-06-28T14:05:42-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.52.103.234,80
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57569
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59566
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62111
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53384
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49627
2012-06-28T14:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62990
2012-06-28T14:05:42-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.52.103.234,80
2012-06-28T14:05:42-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.52.103.234,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.25,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.25,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.152,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.152,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.152,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.157,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.157,80

2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.154,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.152,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.132,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.132,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58266
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.208.138.147,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.208.138.147,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,66.150.117.33,80
2012-06-28T14:05:43-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,66.150.117.33,80
2012-06-28T14:05:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62292
2012-06-28T14:05:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55479
2012-06-28T14:05:44-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,68.67.159.213,80
2012-06-28T14:05:44-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,68.67.159.213,80
2012-06-28T14:05:44-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.32,80
2012-06-28T14:05:44-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.32,80
2012-06-28T14:05:44-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.32,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,82.199.80.141,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,66.150.117.33,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,66.150.117.33,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,82.199.80.141,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61270
2012-06-28T14:05:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54639
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,201.6.5.40,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.11.36,80
2012-06-28T14:05:45-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,64.4.11.36,80
2012-06-28T14:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88

2012-06-28T14:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59866
2012-06-28T14:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:05:56-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,172.16.1.133,80
2012-06-28T14:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55357
2012-06-28T14:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.185.26,443
2012-06-28T14:05:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.185.26,443
2012-06-28T14:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52172
2012-06-28T14:06:02-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,64.210.100.59,80
2012-06-28T14:06:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59278
2012-06-28T14:06:03-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,65.54.85.158,80
2012-06-28T14:06:04-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
ucheck.exe,allow,connect out,6,64.210.100.59,80
2012-06-28T14:06:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59744
2012-06-28T14:06:05-03:00,info,appl control,C:\Program Files\Common Files\Java\J
ava Update\jucheck.exe,allow,connect out,6,137.254.16.62,80
2012-06-28T14:06:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,68
2012-06-28T14:06:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T14:06:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57218
2012-06-28T14:06:10-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::2831:5D85:100:E0,80
2012-06-28T14:06:10-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::2831:5D85:100:E0,80
2012-06-28T14:06:10-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E::2831:5D85:100:E0,80
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58227
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58228
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-06-28T14:06:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-06-28T14:06:46-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,172.16.1.133,80

2012-06-28T14:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:13-03:00,info,appl control,C:\FC0B6F~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-06-28T14:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:13-03:00,info,appl control,C:\fc0b6fa0d91638884a338771b3\Setup.
exe,allow,connect out,6,10.10.0.12,1025
2012-06-28T14:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,68
2012-06-28T14:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T14:07:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55385
2012-06-28T14:07:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:07:15-03:00,info,appl control,C:\fc0b6fa0d91638884a338771b3\Setup.
exe,allow,connect out,6,65.55.7.141,80
2012-06-28T14:07:18-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:07:20-03:00,info,appl control,C:\20873F~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-06-28T14:07:20-03:00,info,appl control,C:\20873f0824805a2002\Setup.exe,allo
w,connect out,6,10.10.0.12,1025
2012-06-28T14:07:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53240
2012-06-28T14:07:22-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.1.0.3,80
2012-06-28T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-06-28T14:07:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.1.0.3,80
2012-06-28T14:07:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.1.0.3,80
2012-06-28T14:07:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.1.0.3,80

2012-06-28T14:07:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,10.1.0.3,80
2012-06-28T14:07:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.1.0.3,80
2012-06-28T14:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49462
2012-06-28T14:07:31-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:32-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57865
2012-06-28T14:07:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58194
2012-06-28T14:07:33-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:37-03:00,info,appl control,C:\Users\ADMINI~1\AppData\Local\Temp
\ICD1.tmp\FP_AX_~1.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:07:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:07:42-03:00,info,appl control,C:\20873f0824805a2002\Setup.exe,allo
w,connect out,6,10.10.0.12,1025
2012-06-28T14:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:44-03:00,info,appl control,C:\20873f0824805a2002\Setup.exe,allo
w,connect out,6,65.55.7.141,80
2012-06-28T14:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:07:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.51,53626
2012-06-28T14:08:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:08:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:08:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:08:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:08:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:08:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80

2012-06-28T14:08:05-03:00,info,appl control,C:\Program Files\Common Files\Java\J


ava Update\jucheck.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:06-03:00,info,appl control,C:\Program Files\Common Files\Java\J
ava Update\jucheck.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:07-03:00,info,appl control,C:\Users\ADMINI~1\AppData\Local\Temp
\JRE-7U~1.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:08:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:08:07-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:07-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:08-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:11-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:15-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:19-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:08:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.51,57170
2012-06-28T14:09:01-03:00,info,appl control,C:\PROGRA~1\MICROS~1\Office14\POWERP
NT.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:09:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:09:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:09:03-03:00,info,appl control,C:\Program Files\Microsoft Office\Of
fice14\POWERPNT.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:09:03-03:00,info,appl control,C:\Program Files\Microsoft Office\Of
fice14\POWERPNT.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:09:03-03:00,info,appl control,C:\Program Files\Microsoft Office\Of
fice14\POWERPNT.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.3.16,68
2012-06-28T14:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-06-28T14:09:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,54829
2012-06-28T14:09:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50121
2012-06-28T14:09:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:09:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.41,80
2012-06-28T14:09:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58179
2012-06-28T14:09:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,207.46.21.123,443
2012-06-28T14:09:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,207.46.21.123,443
2012-06-28T14:09:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:09:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:09:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80

2012-06-28T14:09:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-06-28T14:09:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,207.46.21.123,80
2012-06-28T14:09:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,52835
2012-06-28T14:09:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-06-28T14:09:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:09:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49943
2012-06-28T14:09:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-06-28T14:09:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.41,80
2012-06-28T14:10:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:10:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:10:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-28T14:10:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,49944
2012-06-28T14:10:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:10:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,49945
2012-06-28T14:10:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110

2012-06-28T14:10:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:10:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:11:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:11:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:11:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-06-28T14:11:03-03:00,info,appl control,C:\Users\ADMINI~1\AppData\Local\Temp
\FX-RUN~1.EXE,allow,connect out,6,10.10.0.25,80
2012-06-28T14:11:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:11:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:11:03-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\fx-runtime.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:11:04-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\fx-runtime.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:11:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,49946
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110

2012-06-28T14:11:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:08-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:09-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:10-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:11-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:12-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:13-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.0.26,12110

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.26,12110
2012-06-28T14:11:27-03:00,info,appl control,C:\Users\Administrador\AppData\Local
\Temp\jre-7u5-windows-i586-iftw.exe,allow,connect out,6,10.10.0.25,80
2012-06-28T14:11:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,63040
2012-06-28T14:12:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.152,55793
2012-06-28T14:12:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-06-28T14:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.144,3944
2012-06-28T14:12:56-03:00,info,general,daemon,Policy file has been reloaded.
2012-06-28T14:13:01-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-06-28T14:13:01-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-06-28T14:13:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.36,56754
2012-06-28T14:15:02-03:00,info,general,daemon,Firewall Daemon service started.
2012-06-28T14:14:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58473

2012-06-28T14:14:37-03:00,info,appl
w,send,17,10.10.0.12,53
2012-06-28T14:14:37-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,58911
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,51971
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,51973
2012-06-28T14:14:37-03:00,info,appl
listen,17,0.0.0.0,51975
2012-06-28T14:14:37-03:00,info,appl
send,17,10.10.0.12,389
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,55937
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,55782
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,55783
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,135
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,135
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,389
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,54092
2012-06-28T14:14:37-03:00,info,appl
listen,17,0.0.0.0,54093
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.11,389
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
w,listen,17,0.0.0.0,57020
2012-06-28T14:14:37-03:00,info,appl
listen,17,0.0.0.0,57021
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:38-03:00,info,appl
connect out,6,10.10.0.12,389

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-06-28T14:14:38-03:00,info,appl
w,listen,17,0.0.0.0,58787
2012-06-28T14:14:38-03:00,info,appl
listen,17,0.0.0.0,58788
2012-06-28T14:14:38-03:00,info,appl
w,listen,17,::,5355
2012-06-28T14:14:38-03:00,info,appl
connect out,6,10.10.0.12,389
2012-06-28T14:14:38-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-06-28T14:14:38-03:00,info,appl
w,listen,17,::,58833
2012-06-28T14:14:38-03:00,info,appl
w,listen,17,0.0.0.0,55989
2012-06-28T14:14:38-03:00,info,appl
w,listen,17,0.0.0.0,51883
2012-06-28T14:14:38-03:00,info,appl
connect out,6,10.10.0.12,389
2012-06-28T14:14:38-03:00,info,appl
,send,17,FF02::1:2,547
2012-06-28T14:14:39-03:00,info,appl
listen,6,0.0.0.0,61150
2012-06-28T14:14:39-03:00,info,appl
listen,6,::,61150
2012-06-28T14:14:39-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-06-28T14:14:39-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-06-28T14:14:39-03:00,info,appl
w,listen,17,::,500
2012-06-28T14:14:39-03:00,info,appl
w,listen,17,::,4500
2012-06-28T14:14:40-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:14:40-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,::,3702
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,::,3702
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,0.0.0.0,51884
2012-06-28T14:14:40-03:00,info,appl
w,listen,17,::,51885
2012-06-28T14:14:40-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-06-28T14:14:42-03:00,info,appl
w,listen,17,0.0.0.0,61216
2012-06-28T14:14:42-03:00,info,appl
w,listen,17,::,49713
2012-06-28T14:14:42-03:00,info,appl
w,listen,17,0.0.0.0,51943
2012-06-28T14:14:42-03:00,info,appl
ow,listen,6,0.0.0.0,61153
2012-06-28T14:14:42-03:00,info,appl
ow,listen,6,::,61153

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\services.exe,all

2012-06-28T14:14:43-03:00,info,appl
w,listen,17,0.0.0.0,63613
2012-06-28T14:14:43-03:00,info,appl
w,listen,17,::,55363
2012-06-28T14:14:43-03:00,info,appl
w,listen,17,0.0.0.0,62685
2012-06-28T14:14:43-03:00,info,appl
w,listen,17,0.0.0.0,55446
2012-06-28T14:14:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:43-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-06-28T14:14:43-03:00,info,appl
w,listen,17,0.0.0.0,50116
2012-06-28T14:14:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,::,3702
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,::,3702
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,0.0.0.0,55960
2012-06-28T14:14:45-03:00,info,appl
w,listen,17,0.0.0.0,63269
2012-06-28T14:14:45-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:46-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-06-28T14:14:48-03:00,info,appl
w,listen,6,0.0.0.0,50123
2012-06-28T14:14:48-03:00,info,appl
w,listen,6,::,50123
2012-06-28T14:14:49-03:00,info,appl
w,listen,17,::,123
2012-06-28T14:14:49-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-06-28T14:14:49-03:00,info,appl
w,send,17,10.10.0.12,123
2012-06-28T14:14:49-03:00,info,appl
w,listen,17,::,123
2012-06-28T14:14:49-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-06-28T14:14:49-03:00,info,appl
connect out,6,10.10.0.12,88

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-06-28T14:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56022
2012-06-28T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-06-28T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-06-28T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-06-28T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-06-28T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53933
2012-06-28T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,54195
2012-06-28T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55108
2012-06-28T14:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-06-28T14:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-06-28T14:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,389
2012-06-28T14:14:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63220
2012-06-28T14:14:52-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-06-28T14:14:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:14:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55529
2012-06-28T14:14:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-06-28T14:15:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-06-28T14:15:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-06-28T14:15:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50843
2012-06-28T14:15:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-06-28T14:15:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64625
2012-06-28T14:15:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:15:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:15:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:15:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-06-28T14:15:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54686
2012-06-28T14:15:02-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.12,389

2012-06-28T14:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-06-28T14:15:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50712
2012-06-28T14:15:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:15:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59383
2012-06-28T14:15:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-06-28T14:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-06-28T14:15:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-06-28T14:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60202
2012-06-28T14:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-06-28T14:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58686
2012-06-28T14:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64685
2012-06-28T14:15:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51585
2012-06-28T14:15:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.138,55521
2012-06-28T14:16:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T08:07:15-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,49155
2012-07-04T08:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,49155
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49152
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49153
2012-07-04T08:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:07:06-03:00,info,appl control,C:\Windows\System32\services.exe,all

ow,listen,6,0.0.0.0,49157
2012-07-04T08:07:06-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,49157
2012-07-04T08:07:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T08:07:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T08:07:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-04T08:07:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,49161
2012-07-04T08:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,49161
2012-07-04T08:09:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63206
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51975
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.72,1900
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,51976
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.72,51978
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:15:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,123
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,50387
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,54740
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,60765
2012-07-04T08:15:48-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:15:48-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,55106
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,60198
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,::,51611
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,62245
2012-07-04T08:15:48-03:00,info,appl
listen,17,0.0.0.0,62247
2012-07-04T08:15:48-03:00,info,appl
listen,17,0.0.0.0,62248
2012-07-04T08:15:48-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T08:15:48-03:00,info,appl
send,17,10.1.0.197,389
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,53369
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,51379
2012-07-04T08:15:48-03:00,info,appl
listen,17,0.0.0.0,51380
2012-07-04T08:15:48-03:00,info,appl
listen,17,0.0.0.0,51381
2012-07-04T08:15:48-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T08:15:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T08:15:48-03:00,info,appl
w,send,17,10.10.0.11,123
2012-07-04T08:15:48-03:00,info,appl
w,listen,17,0.0.0.0,58701
2012-07-04T08:15:48-03:00,info,appl
listen,17,0.0.0.0,58702
2012-07-04T08:15:48-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T08:15:48-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T08:15:48-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T08:15:48-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58449
2012-07-04T08:15:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59970
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.12,389
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:15:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65128
2012-07-04T08:15:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.1.72,68
2012-07-04T08:15:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50399
2012-07-04T08:15:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53326
2012-07-04T08:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63553
2012-07-04T08:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55075
2012-07-04T08:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56864
2012-07-04T08:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49275
2012-07-04T08:16:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:16:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:17:04-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T08:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-07-04T08:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500

2012-07-04T08:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-07-04T08:16:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53185
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53258
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53259
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53260
2012-07-04T08:16:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,49155
2012-07-04T08:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,49155
2012-07-04T08:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65400
2012-07-04T08:16:58-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,49156
2012-07-04T08:16:58-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,49156
2012-07-04T08:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T08:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T08:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-04T08:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T08:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:17:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,49158
2012-07-04T08:17:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,49158
2012-07-04T08:17:04-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900

2012-07-04T08:17:04-03:00,info,appl
,allow,listen,6,0.0.0.0,5800
2012-07-04T08:17:07-03:00,info,appl
w,listen,17,::,123
2012-07-04T08:17:07-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-07-04T08:17:16-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:17:28-03:00,info,appl
w,listen,17,::,123
2012-07-04T08:17:28-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-07-04T08:17:46-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:17:46-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:17:46-03:00,info,appl
w,listen,17,::,52891
2012-07-04T08:17:46-03:00,info,appl
,send,17,FF02::1:3,5355
2012-07-04T08:17:46-03:00,info,appl
w,listen,17,0.0.0.0,49712
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,::,3702
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,::,3702
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T08:17:47-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,::,62652
2012-07-04T08:17:47-03:00,info,appl
w,listen,17,0.0.0.0,53988
2012-07-04T08:17:52-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:18:21-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:18:53-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:19:20-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:19:53-03:00,info,appl
w,listen,17,::,54073
2012-07-04T08:19:53-03:00,info,appl
,send,17,FF02::1:3,5355
2012-07-04T08:19:53-03:00,info,appl
w,listen,17,0.0.0.0,54296
2012-07-04T08:20:16-03:00,info,appl
w,listen,17,::,54693
2012-07-04T08:20:16-03:00,info,appl
,send,17,FF02::1:3,5355
2012-07-04T08:20:16-03:00,info,appl
w,listen,17,0.0.0.0,53298
2012-07-04T08:20:21-03:00,info,appl
w,listen,17,::,64791
2012-07-04T08:20:21-03:00,info,appl
w,listen,17,0.0.0.0,57986

control,C:\Program Files\UltraVNC\winvnc.exe
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T08:20:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,57987
2012-07-04T08:20:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,57989
2012-07-04T08:20:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:20:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,1900
2012-07-04T08:20:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T08:20:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51784
2012-07-04T08:20:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60417
2012-07-04T08:20:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56277
2012-07-04T08:20:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65004
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:21:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:21:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,65219
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59729
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,1900
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702

2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,59730
2012-07-04T08:21:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,59732
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63129
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62098
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56014
2012-07-04T08:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56612
2012-07-04T08:21:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,3702
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123

2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,56615
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,56617
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55864
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51006
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63172
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58297
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51046
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54326
2012-07-04T08:21:27-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54328
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61161
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57456
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T08:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,123
2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61872
2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61873
2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88

2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55213
2012-07-04T08:21:29-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51957
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50862
2012-07-04T08:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63592
2012-07-04T08:21:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50259
2012-07-04T08:21:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54676
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59911
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56945
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60186
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53320
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56773
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61881
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61242
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60918
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58926
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62787
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61023

2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58056
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53133
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63720
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52780
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54828
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:21:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68

2012-07-04T08:21:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64005
2012-07-04T08:21:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63186
2012-07-04T08:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:22:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:22:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:22:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64693
2012-07-04T08:22:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61033
2012-07-04T08:22:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:22:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:22:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355

2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62162
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53337
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54383
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60519
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63073
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56009
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57263
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56336
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54013
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60737
2012-07-04T08:22:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49960
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62756
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55411
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,123
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,55412
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,55414
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702

2012-07-04T08:22:14-03:00,info,appl
w,listen,17,0.0.0.0,60373
2012-07-04T08:22:14-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-04T08:22:14-03:00,info,appl
w,connect out,6,201.6.5.39,80
2012-07-04T08:22:14-03:00,info,appl
w,listen,17,0.0.0.0,60746
2012-07-04T08:22:14-03:00,info,appl
w,listen,17,::,3702
2012-07-04T08:22:14-03:00,info,appl
w,listen,17,::,3702
2012-07-04T08:22:14-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T08:22:14-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T08:22:14-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T08:22:15-03:00,info,appl
w,listen,17,0.0.0.0,59373
2012-07-04T08:22:15-03:00,info,appl
w,listen,17,0.0.0.0,52166
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,::,123
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,::,62440
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,0.0.0.0,50563
2012-07-04T08:22:16-03:00,info,appl
w,listen,17,0.0.0.0,51082
2012-07-04T08:22:18-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T08:22:19-03:00,info,appl
w,listen,17,0.0.0.0,58328
2012-07-04T08:22:29-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-04T08:22:31-03:00,info,appl
w,listen,17,::,64559
2012-07-04T08:22:31-03:00,info,appl
w,listen,17,0.0.0.0,58654
2012-07-04T08:22:31-03:00,info,appl
w,listen,17,0.0.0.0,60797
2012-07-04T08:22:32-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-04T08:22:32-03:00,info,appl
listen,17,0.0.0.0,60798
2012-07-04T08:22:32-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T08:22:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T08:22:33-03:00,info,appl
w,listen,17,0.0.0.0,55241

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T08:22:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:22:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61998
2012-07-04T08:22:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:22:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53403
2012-07-04T08:22:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54947
2012-07-04T08:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54948
2012-07-04T08:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T08:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:23:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51193
2012-07-04T08:23:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61089
2012-07-04T08:23:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53295
2012-07-04T08:23:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:23:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:23:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58619
2012-07-04T08:23:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T08:23:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59879
2012-07-04T08:23:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:23:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-07-04T08:23:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53804
2012-07-04T08:23:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60438
2012-07-04T08:24:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:24:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63207
2012-07-04T08:24:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49859
2012-07-04T08:24:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:24:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:24:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57693
2012-07-04T08:24:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:25:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61494
2012-07-04T08:25:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53

2012-07-04T08:25:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57245
2012-07-04T08:25:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61384
2012-07-04T08:25:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:25:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61697
2012-07-04T08:25:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49965
2012-07-04T08:26:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54245
2012-07-04T08:26:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51470
2012-07-04T08:26:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63578
2012-07-04T08:26:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62436
2012-07-04T08:26:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62132
2012-07-04T08:26:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53700
2012-07-04T08:26:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:26:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57972
2012-07-04T08:26:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57215
2012-07-04T08:27:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:27:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,67
2012-07-04T08:27:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50081
2012-07-04T08:27:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:27:31-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T08:27:31-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T08:28:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49924
2012-07-04T08:28:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:29:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60467
2012-07-04T08:29:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:29:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:30:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:32:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T08:32:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62950
2012-07-04T08:32:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:34:27-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58582
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58583
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58584
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60413
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58591
2012-07-04T08:34:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58592
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,49155
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,49155
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:34:22-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,49156
2012-07-04T08:34:22-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,49156
2012-07-04T08:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T08:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T08:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-04T08:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T08:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61120
2012-07-04T08:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60500
2012-07-04T08:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59045
2012-07-04T08:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56155
2012-07-04T08:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53225
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65070
2012-07-04T08:34:25-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,49160
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,49160
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58469
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,57037
2012-07-04T08:34:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53558
2012-07-04T08:34:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:34:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62644
2012-07-04T08:34:28-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T08:34:28-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T08:34:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65252
2012-07-04T08:34:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64801
2012-07-04T08:34:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61713
2012-07-04T08:34:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60751
2012-07-04T08:34:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T08:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56486
2012-07-04T08:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:34:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50956
2012-07-04T08:34:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:34:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:34:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60504
2012-07-04T08:35:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55242
2012-07-04T08:35:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:35:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-07-04T08:35:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56924
2012-07-04T08:35:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60098
2012-07-04T08:35:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:35:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64780
2012-07-04T08:35:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:35:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55392
2012-07-04T08:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51309
2012-07-04T08:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63763
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58174
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,::,5355
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55588
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61954
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54637
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61423
2012-07-04T08:36:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60930
2012-07-04T08:36:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52475
2012-07-04T08:36:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62860
2012-07-04T08:36:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:36:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,62861
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,62863
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61668
2012-07-04T08:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.110.253,80
2012-07-04T08:36:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54557
2012-07-04T08:36:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:36:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:36:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::24A5:1FA2:F5F5:FB6D,546
2012-07-04T08:36:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-04T08:41:37-03:00,info,appl control,C:\PROGRA~1\WI54FB~1\wmpnetwk.exe,al

low,connect out,6,10.10.4.90,58906
2012-07-04T08:41:37-03:00,info,appl control,C:\PROGRA~1\WI54FB~1\wmpnetwk.exe,al
low,connect out,6,10.10.4.90,50003
2012-07-04T08:36:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59321
2012-07-04T08:36:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64648
2012-07-04T08:36:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50503
2012-07-04T08:36:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59457
2012-07-04T08:36:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T08:36:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65386
2012-07-04T08:36:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:36:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:36:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49946
2012-07-04T08:36:51-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-04T08:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64386
2012-07-04T08:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:37:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59316
2012-07-04T08:37:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59318
2012-07-04T08:37:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63203
2012-07-04T08:37:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63204
2012-07-04T08:37:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63205
2012-07-04T08:37:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58988
2012-07-04T08:37:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56294
2012-07-04T08:37:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63336
2012-07-04T08:37:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.152,443
2012-07-04T08:37:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53999
2012-07-04T08:37:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54001
2012-07-04T08:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T08:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T08:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T08:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58029
2012-07-04T08:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:38:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:38:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:38:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.152,443
2012-07-04T08:39:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65255
2012-07-04T08:39:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:39:17-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-04T08:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:39:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49774
2012-07-04T08:39:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:39:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.25.59,443
2012-07-04T08:39:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58908
2012-07-04T08:40:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61070
2012-07-04T08:40:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58970
2012-07-04T08:40:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50486
2012-07-04T08:40:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T08:40:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60566
2012-07-04T08:40:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:40:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.200.0.5,88
2012-07-04T08:40:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53337
2012-07-04T08:40:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:40:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50105
2012-07-04T08:40:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,199.93.63.254,80
2012-07-04T08:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.197,88
2012-07-04T08:41:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.197,88
2012-07-04T08:41:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,53389
2012-07-04T08:41:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:41:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:41:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:41:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.203.0.11,88
2012-07-04T08:41:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:41:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50748
2012-07-04T08:41:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:41:47-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T08:43:58-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T08:41:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:41:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T08:42:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:42:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61741
2012-07-04T08:42:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:43:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::24A5:1FA2:F5F5:FB6D,546
2012-07-04T08:43:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:43:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:43:52-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,A0A:19:400:300:7048:3186:100:E0,80
2012-07-04T08:43:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60229
2012-07-04T08:43:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:43:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51151
2012-07-04T08:43:56-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E:39C7:4508:20E0:2A86:100:E0,80
2012-07-04T08:43:56-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,A0A:19:400:300:7048:3186:100:E0,80
2012-07-04T08:43:56-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E:39C7:4508:20E0:2A86:100:E0,80
2012-07-04T08:43:56-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,A0A:19:400:300:7048:3186:100:E0,80
2012-07-04T08:43:56-03:00,info,appl control,C:\Program Files\Java\jre7\bin\javaw
.exe,deny,connect out,6,89FE:104E:39C7:4508:20E0:2A86:100:E0,80
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,52749
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58236
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50653
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50365
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55182
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,55183
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,55185
2012-07-04T08:44:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63578
2012-07-04T08:44:16-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T08:44:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:44:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:44:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,57370
2012-07-04T08:44:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49864
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60567
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54250
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61491
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56201
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58627
2012-07-04T08:44:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T08:44:18-03:00,info,appl control,C:\PROGRA~1\WI54FB~1\wmpnetwk.exe,al
low,connect out,6,10.10.4.90,58906
2012-07-04T08:44:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:44:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:44:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53265
2012-07-04T08:44:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,58158
2012-07-04T08:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T08:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51909
2012-07-04T08:44:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64148
2012-07-04T08:44:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62493
2012-07-04T08:44:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56341
2012-07-04T08:44:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:44:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,199.93.63.254,80
2012-07-04T08:44:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51420
2012-07-04T08:44:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56036
2012-07-04T08:44:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59068
2012-07-04T08:44:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:45:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53262
2012-07-04T08:45:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:45:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-07-04T08:45:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63483
2012-07-04T08:45:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63328
2012-07-04T08:45:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54982
2012-07-04T08:45:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:45:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60548
2012-07-04T08:45:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61504
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51900
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54617
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53914
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::10A3:2598:F5F5:FB6D,546
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,::,3702
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:45:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64323
2012-07-04T08:45:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57091
2012-07-04T08:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62467
2012-07-04T08:45:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53
2012-07-04T08:46:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60026
2012-07-04T08:46:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63635
2012-07-04T08:47:31-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T08:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-07-04T08:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-07-04T08:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-07-04T08:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-07-04T08:47:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:47:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:47:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:47:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61516
2012-07-04T08:47:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55266
2012-07-04T08:47:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,57011
2012-07-04T08:47:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T08:47:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50200
2012-07-04T08:47:26-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,49155
2012-07-04T08:47:26-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,49155
2012-07-04T08:47:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T08:47:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T08:47:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110

2012-07-04T08:47:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T08:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,49156
2012-07-04T08:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,49156
2012-07-04T08:47:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,49158
2012-07-04T08:47:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,49158
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56798
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52394
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53082
2012-07-04T08:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51426
2012-07-04T08:47:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49504
2012-07-04T08:47:31-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T08:47:31-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T08:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,64026
2012-07-04T08:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60462
2012-07-04T08:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50217
2012-07-04T08:47:34-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-04T08:47:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50995
2012-07-04T08:47:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62844
2012-07-04T08:47:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62245
2012-07-04T08:47:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51734
2012-07-04T08:47:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58702
2012-07-04T08:47:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51283
2012-07-04T08:47:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:47:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T08:47:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54393
2012-07-04T08:47:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52417
2012-07-04T08:47:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60579
2012-07-04T08:47:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59758
2012-07-04T08:47:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62229
2012-07-04T08:47:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53056
2012-07-04T08:47:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:47:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61327
2012-07-04T08:47:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T08:47:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58250
2012-07-04T08:47:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56718
2012-07-04T08:47:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:47:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.2,63042
2012-07-04T08:48:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51601
2012-07-04T08:48:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:48:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61597
2012-07-04T08:48:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52239
2012-07-04T08:48:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.4.18.90,80
2012-07-04T08:48:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:48:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49453
2012-07-04T08:48:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:48:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57808
2012-07-04T08:48:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.2,50502
2012-07-04T08:48:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:48:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:48:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53159
2012-07-04T08:48:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57320
2012-07-04T08:48:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60790
2012-07-04T08:48:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:48:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355

2012-07-04T08:48:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50742
2012-07-04T08:48:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57342
2012-07-04T08:48:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:48:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65304
2012-07-04T08:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::CFF:1970:F5F5:FB6D,546
2012-07-04T08:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,65305
2012-07-04T08:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,65307
2012-07-04T08:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T08:49:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49325
2012-07-04T08:49:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:49:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:49:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57246
2012-07-04T08:49:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57026
2012-07-04T08:49:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52559
2012-07-04T08:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T08:49:50-03:00,info,appl control,C:\PROGRA~1\WI54FB~1\wmpnetwk.exe,al
low,connect out,6,10.10.3.144,2869
2012-07-04T08:49:51-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T08:49:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62689
2012-07-04T08:49:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.198,53
2012-07-04T08:49:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.26.208.253,80
2012-07-04T08:49:55-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,58906
2012-07-04T08:49:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62487
2012-07-04T08:49:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61096
2012-07-04T08:50:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:50:06-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T08:50:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64834
2012-07-04T08:50:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.1.0.197,53

2012-07-04T08:50:28-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T08:50:28-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T08:50:28-03:00,info,appl
w,listen,17,0.0.0.0,58823
2012-07-04T08:50:28-03:00,info,appl
w,listen,17,::,63845
2012-07-04T08:50:28-03:00,info,appl
w,listen,17,0.0.0.0,58843
2012-07-04T08:50:31-03:00,info,appl
w,listen,17,0.0.0.0,53353
2012-07-04T08:50:35-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T08:50:35-03:00,info,appl
w,connect out,6,65.55.27.220,443
2012-07-04T08:51:33-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:51:33-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:51:33-03:00,info,appl
w,listen,17,::,52254
2012-07-04T08:51:33-03:00,info,appl
,send,17,FF02::1:3,5355
2012-07-04T08:51:33-03:00,info,appl
w,listen,17,0.0.0.0,55913
2012-07-04T08:51:33-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T08:51:33-03:00,info,appl
w,send,17,10.10.0.12,67
2012-07-04T08:51:34-03:00,info,appl
w,send,17,239.255.255.250,1900
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,::,5355
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,::,62930
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,0.0.0.0,59992
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T08:51:44-03:00,info,appl
w,listen,17,0.0.0.0,49730
2012-07-04T08:51:46-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T08:51:46-03:00,info,appl
w,listen,17,::,53359
2012-07-04T08:51:46-03:00,info,appl
w,listen,17,0.0.0.0,58120
2012-07-04T08:51:48-03:00,info,appl
w,listen,17,0.0.0.0,68
2012-07-04T08:51:51-03:00,info,appl
w,listen,17,::,56882
2012-07-04T08:51:51-03:00,info,appl
w,listen,17,0.0.0.0,61677

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T08:52:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T08:52:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59847
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63444
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,63445
2012-07-04T08:52:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62471
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52470
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,1900
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,52471
2012-07-04T08:52:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,169.254.170.1,52473
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64357
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,63498
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59859
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59728
2012-07-04T08:52:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,59729

2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,59731
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63524
2012-07-04T08:52:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:52:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55463
2012-07-04T08:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T08:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T08:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53987
2012-07-04T08:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62650
2012-07-04T08:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55659
2012-07-04T08:52:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:52:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60238
2012-07-04T08:52:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:52:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57486
2012-07-04T08:52:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51386
2012-07-04T08:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58824
2012-07-04T08:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55220
2012-07-04T08:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54051
2012-07-04T08:52:40-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,58906
2012-07-04T08:52:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:52:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64727
2012-07-04T08:52:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:53:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T08:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59270
2012-07-04T08:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:53:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:53:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,50651
2012-07-04T08:53:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58556
2012-07-04T08:53:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59516
2012-07-04T08:53:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:53:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65038

2012-07-04T08:53:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64856
2012-07-04T08:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.197,88
2012-07-04T08:54:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60033
2012-07-04T08:54:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.198,88
2012-07-04T08:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.198,88
2012-07-04T08:54:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62927
2012-07-04T08:54:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:54:37-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T08:54:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52433
2012-07-04T08:54:42-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T08:55:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:55:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:55:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:55:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:55:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T08:55:14-03:00,info,appl control,C:\Program Files\Common Files\Java\J
ava Update\jusched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T08:55:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53722
2012-07-04T08:55:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:55:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62800
2012-07-04T08:55:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:55:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57693
2012-07-04T08:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54441
2012-07-04T08:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50005
2012-07-04T08:56:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.198,88
2012-07-04T08:56:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.1.0.198,88
2012-07-04T08:56:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61626
2012-07-04T08:56:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:57:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54702
2012-07-04T08:57:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T08:57:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51251
2012-07-04T08:57:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61047
2012-07-04T08:57:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53082
2012-07-04T08:57:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50028
2012-07-04T08:57:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T08:58:03-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T08:58:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58781
2012-07-04T08:58:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:58:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57968
2012-07-04T08:58:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:59:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T08:59:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57969
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,57970
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.144,2869
2012-07-04T08:59:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.100,80
2012-07-04T08:59:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64440
2012-07-04T08:59:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T08:59:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63188
2012-07-04T08:59:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,52299
2012-07-04T08:59:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52396
2012-07-04T08:59:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55585
2012-07-04T08:59:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:00:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60764

2012-07-04T09:00:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T09:00:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:00:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55850
2012-07-04T09:00:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T09:00:53-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T09:00:54-03:00,info,appl control,C:\Windows\explorer.exe,allow,connec
t out,6,10.10.0.13,80
2012-07-04T09:01:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.13,80
2012-07-04T09:01:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,57557
2012-07-04T09:02:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52340
2012-07-04T09:02:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:02:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56098
2012-07-04T09:02:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63563
2012-07-04T09:02:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50481
2012-07-04T09:02:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.13,80
2012-07-04T09:03:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60000
2012-07-04T09:03:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T09:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61425
2012-07-04T09:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55969
2012-07-04T09:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T09:03:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.37,52569
2012-07-04T09:03:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50831
2012-07-04T09:03:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60094
2012-07-04T09:03:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-04T09:03:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,60794
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702

2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::C,1900
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60097
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,60098
2012-07-04T09:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T09:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T09:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-04T09:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62337
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:3,5355
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64141
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50373
2012-07-04T09:04:24-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50071
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54332
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54334
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64782
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355

2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58743
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63967
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63638
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57104
2012-07-04T09:04:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57105
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52137
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61495
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61496
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,61497
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.67,3910
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,51796
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59284
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.105,53000
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,59285
2012-07-04T09:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,59287
2012-07-04T09:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.101,53000
2012-07-04T09:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.84,53000
2012-07-04T09:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51628
2012-07-04T09:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61753
2012-07-04T09:04:26-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T09:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.166,5357

2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.102,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.67,3910
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.10.122,2869
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.88,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.82,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.110,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.104,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.112,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.80,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.83,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.102,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.98,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.101,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.103,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.93,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.91,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.78,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.79,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.84,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.94,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.96,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.109,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.108,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.114,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.114,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.97,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.81,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.106,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.113,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.90,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.95,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.113,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.3.41,2869
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.110,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.107,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.83,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.78,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.3.144,2869
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.95,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.89,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.87,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.108,53000
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.90,80
2012-07-04T09:04:26-03:00,info,appl
w,connect out,6,10.10.253.85,53000
2012-07-04T09:04:27-03:00,info,appl
w,connect out,6,10.10.253.105,80
2012-07-04T09:04:27-03:00,info,appl
w,connect out,6,10.10.253.92,80
2012-07-04T09:04:27-03:00,info,appl
w,connect out,6,10.10.253.94,53000
2012-07-04T09:04:27-03:00,info,appl
w,connect out,6,10.10.253.87,80
2012-07-04T09:04:27-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:27-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:27-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:27-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,0.0.0.0,61756
2012-07-04T09:04:28-03:00,info,appl
w,listen,17,::,61757

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,68
2012-07-04T09:04:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59738
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50104
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,50105
2012-07-04T09:04:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,50107
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.107,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.84,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.92,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.78,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.98,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.96,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.91,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.99,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.85,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.102,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.80,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.114,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.86,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.108,80
2012-07-04T09:04:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.100,80

2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.88,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.81,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.97,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.106,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.101,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.87,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.110,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.103,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.89,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.109,80
2012-07-04T09:04:31-03:00,info,appl
w,connect out,6,10.10.253.93,80
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.3.174,2869
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.253.83,80
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.253.94,80
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.253.79,80
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.3.82,2869
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.10.13,2869
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,::,5355
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,::,63456
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,0.0.0.0,65098
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,0.0.0.0,53233
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:32-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.10.210,2869

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.253.112,80
2012-07-04T09:04:32-03:00,info,appl
w,connect out,6,10.10.253.113,80
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,5355
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,5355
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.105,80
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,58192
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,53758
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.3.132,2869
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.4.90,58906
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.104,80
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,52502
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.3.20,2869
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.107,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.84,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.78,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.92,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.98,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.91,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.96,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.99,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.102,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.113,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.93,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.95,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.90,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.104,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.79,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.85,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.83,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.109,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.94,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.114,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.80,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.86,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.108,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.103,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.110,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.87,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.82,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.112,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.105,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.88,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.81,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.97,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.89,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.106,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.100,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.101,80
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.4.90,58906
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,0.0.0.0,52503
2012-07-04T09:04:33-03:00,info,appl
w,listen,17,::,52504
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.67,3910

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.80,53000
2012-07-04T09:04:33-03:00,info,appl
w,connect out,6,10.10.253.79,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.23,3910
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.3.187,5357
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.102,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.104,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.89,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.94,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.67,3910
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.109,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.101,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.3.238,5357
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.10.24,5357
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.88,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.3.174,5357
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.105,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.254.101,1910
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.107,53000
2012-07-04T09:04:34-03:00,info,appl
w,connect out,6,10.10.253.96,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.106,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.83,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.110,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.4.128,5357
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.114,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.108,53000
2012-07-04T09:04:35-03:00,info,appl
w,listen,17,0.0.0.0,50084
2012-07-04T09:04:35-03:00,info,appl
w,listen,17,0.0.0.0,64393
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.20,8089
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.3.159,5357
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.3.26,5357

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.1.187,5357
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.1.79,5357
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.254.101,1910
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.64,5200
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.91,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.253.95,53000
2012-07-04T09:04:35-03:00,info,appl
w,connect out,6,10.10.3.97,5357
2012-07-04T09:04:36-03:00,info,appl
w,listen,17,0.0.0.0,64648
2012-07-04T09:04:36-03:00,info,appl
w,listen,17,0.0.0.0,57977
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.112,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.74,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.1.6,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.69,3911
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.89,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.188,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.242,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.46,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.236,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.112,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.78,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.98,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.103,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.86,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.81,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.166,5357
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.82,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.87,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.253.90,53000
2012-07-04T09:04:36-03:00,info,appl
w,connect out,6,10.10.3.110,5357

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.113,53000
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.94,5357
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.161,5357
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.73,5357
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.99,53000
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.93,53000
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.85,53000
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.148,5357
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.115,5357
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.84,53000
2012-07-04T09:04:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.97,53000
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.109,5357
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.100,53000
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.130,5357
2012-07-04T09:04:37-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.132,2869
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.92,53000
2012-07-04T09:04:37-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.132,2869
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.177,5357
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.70,3911
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.61,3911
2012-07-04T09:04:37-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.144,2869
2012-07-04T09:04:37-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.144,2869
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.10.188,5357
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.73,5357
2012-07-04T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.228,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.10,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.113,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.240,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.41,2869
2012-07-04T09:04:38-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.3.41,2869

2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.41,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.10.200,5357
2012-07-04T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.1.22,5357
2012-07-04T09:04:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62238
2012-07-04T09:04:40-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.10.210,2869
2012-07-04T09:04:40-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.10.210,2869
2012-07-04T09:04:41-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:41-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,50003
2012-07-04T09:04:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:04:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,201.6.5.34,80
2012-07-04T09:04:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53900
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61171
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61172
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52470
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52273
2012-07-04T09:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52274
2012-07-04T09:04:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64549
2012-07-04T09:05:06-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,58906
2012-07-04T09:05:06-03:00,info,appl control,C:\Program Files\Windows Media Playe
r\wmpnetwk.exe,allow,connect out,6,10.10.4.90,58906

2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,64092
2012-07-04T09:05:07-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T09:05:07-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,64093
2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,64094
2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,64095
2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,61779
2012-07-04T09:05:07-03:00,info,appl
w,listen,17,0.0.0.0,61780
2012-07-04T09:05:08-03:00,info,appl
w,listen,17,0.0.0.0,65297
2012-07-04T09:05:08-03:00,info,appl
w,listen,17,0.0.0.0,65298
2012-07-04T09:05:08-03:00,info,appl
w,listen,17,0.0.0.0,65299
2012-07-04T09:05:09-03:00,info,appl
w,listen,17,0.0.0.0,65300
2012-07-04T09:05:09-03:00,info,appl
w,listen,17,0.0.0.0,65301
2012-07-04T09:05:09-03:00,info,appl
w,listen,17,0.0.0.0,59920
2012-07-04T09:05:09-03:00,info,appl
w,listen,17,0.0.0.0,63700
2012-07-04T09:05:10-03:00,info,appl
connect out,6,10.1.0.198,88
2012-07-04T09:05:10-03:00,info,appl
connect out,6,10.1.0.198,88
2012-07-04T09:05:10-03:00,info,appl
connect out,6,10.1.0.198,88
2012-07-04T09:05:10-03:00,info,appl
connect out,6,10.1.0.198,88
2012-07-04T09:05:11-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T09:05:11-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T09:05:11-03:00,info,appl
w,listen,17,0.0.0.0,61679
2012-07-04T09:05:11-03:00,info,appl
w,listen,17,::,58315
2012-07-04T09:05:11-03:00,info,appl
w,listen,17,0.0.0.0,64454
2012-07-04T09:05:12-03:00,info,appl
w,connect out,6,10.200.0.5,389
2012-07-04T09:05:13-03:00,info,appl
connect out,6,10.1.0.198,88
2012-07-04T09:05:13-03:00,info,appl
w,connect out,6,10.200.0.5,135
2012-07-04T09:05:14-03:00,info,appl
w,listen,17,0.0.0.0,51245
2012-07-04T09:05:14-03:00,info,appl
w,connect out,6,10.200.0.5,1025
2012-07-04T09:05:15-03:00,info,appl
w,connect out,6,201.6.5.34,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:21-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T09:05:21-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,::,5355
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,::,5355
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,::,51209
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,62478
2012-07-04T09:05:21-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,51230
2012-07-04T09:05:21-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,59318
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,59319
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,54203
2012-07-04T09:05:21-03:00,info,appl
w,send,17,239.255.255.250,1900
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,59495
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,62087
2012-07-04T09:05:21-03:00,info,appl
w,listen,17,0.0.0.0,62088
2012-07-04T09:05:22-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:05:22-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.84,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.78,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.107,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.254.101,1900
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.98,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.92,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.91,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.96,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.99,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.113,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.102,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.93,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.95,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.90,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.104,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.79,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.85,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.83,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.109,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.94,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.80,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.114,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.86,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.108,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.87,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.103,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.82,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.110,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.112,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.105,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.100,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.88,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.81,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.89,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.101,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.97,80
2012-07-04T09:05:22-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.253.106,80
2012-07-04T09:05:22-03:00,info,appl
w,connect out,6,10.10.254.101,1900

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,50003
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.4.90,58906
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.20,8089
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.64,5200
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62089
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,62090
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1910
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60863
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.67,3910
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.91,53000
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52575
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52577
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.200.0.5,389
2012-07-04T09:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.79,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.200.0.5,135
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.100,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.89,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.96,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.112,5357
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.87,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.94,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.97,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.1.6,5357

2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.97,5357
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.200.0.5,1025
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.110,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.101,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.93,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1910
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.98,53000
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.84,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.78,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.107,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.98,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.92,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.96,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.91,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.99,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.113,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.93,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.102,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.95,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.90,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.104,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.79,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.85,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.109,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.94,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.83,80
2012-07-04T09:05:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.253.114,80

2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.80,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.86,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.108,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.103,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.110,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.87,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.82,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.112,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.105,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.100,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.88,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.81,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.97,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.89,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.106,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.101,80
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.64,5200
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,0.0.0.0,52578
2012-07-04T09:05:23-03:00,info,appl
w,listen,17,::,52579
2012-07-04T09:05:23-03:00,info,appl
w,connect out,6,10.10.253.67,3910
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.86,53000
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.78,53000
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.3.130,5357
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.3.187,5357
2012-07-04T09:05:24-03:00,info,appl
connect out,6,10.200.0.5,389
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.113,53000

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.3.46,5357
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.95,53000
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.102,53000
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.3.97,5357
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.23,3910
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.3.110,5357
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.67,3910
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.109,53000
2012-07-04T09:05:24-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.10.253.114,53000
2012-07-04T09:05:24-03:00,info,appl
w,connect out,6,10.200.0.5,389
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.4.109,5357
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.104,53000
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.101,53000
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.87,53000
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.108,53000
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.69,3911
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.253.83,53000
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.3.26,5357
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.3.188,5357
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.200.0.5,135
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.3.148,5357
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.10.3.112,5357
2012-07-04T09:05:25-03:00,info,appl
w,connect out,6,10.200.0.5,1025
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.79,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.161,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.177,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.107,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.84,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.90,53000

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.96,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.236,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.82,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.85,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.92,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.98,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.10.24,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.93,53000
2012-07-04T09:05:26-03:00,info,appl
w,listen,17,0.0.0.0,62660
2012-07-04T09:05:26-03:00,info,appl
w,listen,17,::,64010
2012-07-04T09:05:26-03:00,info,appl
w,listen,17,0.0.0.0,49357
2012-07-04T09:05:26-03:00,info,appl
w,listen,17,0.0.0.0,62905
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.10,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.80,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.91,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.94,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.112,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.4.94,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.88,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.41,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.106,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.10.200,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.110,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.70,3911
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.1.6,5357
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.253.103,53000
2012-07-04T09:05:26-03:00,info,appl
w,connect out,6,10.10.3.159,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.100,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.113,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.74,5357

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.99,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.174,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.89,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.1.79,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.1.22,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.81,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.105,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.73,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.89,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.253.97,53000
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.166,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.10.188,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.3.228,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.4.73,5357
2012-07-04T09:05:27-03:00,info,appl
w,connect out,6,10.10.1.187,5357
2012-07-04T09:05:28-03:00,info,appl
w,connect out,6,10.10.3.240,5357
2012-07-04T09:05:28-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:28-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:28-03:00,info,appl
w,connect out,6,10.10.4.128,5357
2012-07-04T09:05:28-03:00,info,appl
w,connect out,6,10.10.253.61,3911
2012-07-04T09:05:29-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:29-03:00,info,appl
w,connect out,6,10.10.3.242,5357
2012-07-04T09:05:30-03:00,info,appl
w,listen,17,0.0.0.0,53525
2012-07-04T09:05:30-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T09:05:30-03:00,info,appl
listen,17,0.0.0.0,53526
2012-07-04T09:05:30-03:00,info,appl
connect out,6,10.10.0.12,389
2012-07-04T09:05:30-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:05:30-03:00,info,appl
w,listen,17,0.0.0.0,51960
2012-07-04T09:05:30-03:00,info,appl
listen,17,0.0.0.0,51961
2012-07-04T09:05:30-03:00,info,appl
connect out,6,10.10.0.12,389

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T09:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62179
2012-07-04T09:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62180
2012-07-04T09:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T09:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.200.0.5,88
2012-07-04T09:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:05:48-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T09:05:48-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T09:06:47-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63023
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49469
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61643
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61646
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61647
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51687
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51688
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50906
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61009
2012-07-04T09:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61010
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61011
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61012
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,500
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,4500
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,500
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,4500
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59204
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59808
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57704
2012-07-04T09:06:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,59763
2012-07-04T09:06:38-03:00,info,appl
listen,17,0.0.0.0,59764
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,0.0.0.0,56388
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,0.0.0.0,57946
2012-07-04T09:06:38-03:00,info,appl
listen,17,0.0.0.0,57947
2012-07-04T09:06:38-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,::,3702
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,0.0.0.0,57948
2012-07-04T09:06:38-03:00,info,appl
w,listen,17,::,57949
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T09:06:39-03:00,info,appl
connect out,6,10.200.0.5,88
2012-07-04T09:06:39-03:00,info,appl
w,listen,17,0.0.0.0,61237
2012-07-04T09:06:39-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T09:06:39-03:00,info,appl
listen,17,0.0.0.0,61238
2012-07-04T09:06:39-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,61239
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,59284
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,::,64622
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,56292
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,54235
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,60835
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,52293
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,52294
2012-07-04T09:06:40-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52295
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,52296
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,54748
2012-07-04T09:06:40-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:06:40-03:00,info,appl
w,listen,17,0.0.0.0,58598
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,58599
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,58600
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,58601
2012-07-04T09:06:40-03:00,info,appl
listen,17,0.0.0.0,58602
2012-07-04T09:06:41-03:00,info,appl
ow,listen,6,0.0.0.0,59975
2012-07-04T09:06:41-03:00,info,appl
ow,listen,6,::,59975
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,64978
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,64979
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,52924
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,52925
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,54015
2012-07-04T09:06:41-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,64307
2012-07-04T09:06:41-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,61836
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,61837
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,61838
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,61839
2012-07-04T09:06:41-03:00,info,appl
w,listen,17,0.0.0.0,54501
2012-07-04T09:06:41-03:00,info,appl
listen,17,0.0.0.0,54502
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,59054
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,59055
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,50622
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,50623
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,50624
2012-07-04T09:06:42-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,51392
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,51393
2012-07-04T09:06:42-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,65216
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,65217
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,65218
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,65219
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,65220
2012-07-04T09:06:42-03:00,info,appl
listen,6,0.0.0.0,59021
2012-07-04T09:06:42-03:00,info,appl
listen,6,::,59021
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,65221
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,58524
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,::,54882
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,49554
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,57302
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,57303
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,57304
2012-07-04T09:06:42-03:00,info,appl
listen,17,0.0.0.0,57305
2012-07-04T09:06:42-03:00,info,appl
w,listen,17,0.0.0.0,50669
2012-07-04T09:06:42-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50670
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50671
2012-07-04T09:06:43-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50672
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50673
2012-07-04T09:06:43-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50674
2012-07-04T09:06:43-03:00,info,appl
connect out,6,10.201.0.100,135
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50675
2012-07-04T09:06:43-03:00,info,appl
listen,17,0.0.0.0,50676
2012-07-04T09:06:44-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,135
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,58857
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,58857
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-04T09:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T09:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T09:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-04T09:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.201.0.100,135
2012-07-04T09:06:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,53213
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64620
2012-07-04T09:06:45-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51204
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51205
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,53211
2012-07-04T09:06:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.201.0.100,53211
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55780
2012-07-04T09:06:46-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T09:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49276
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53260
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63779
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,52286
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57833
2012-07-04T09:06:47-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.12,389
2012-07-04T09:06:47-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T09:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58125
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57678
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57679
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.25,80
2012-07-04T09:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T09:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T09:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T09:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:07:03-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:04-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:05-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:06-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:07-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:08-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:09-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:09-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:09-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:10-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:10-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:10-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:10-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:10-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:11-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:11-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:11-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:11-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:11-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:12-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:12-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:12-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:12-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:12-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:12-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:13-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:13-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:13-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:07:14-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:14-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:15-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:15-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T09:07:16-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:16-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:17-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:17-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:17-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:18-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:18-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:19-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:19-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:19-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:20-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:20-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:21-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:21-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:21-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:22-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:22-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:22-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:23-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:23-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:24-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:24-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:25-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:07:25-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:26-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:26-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:27-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:27-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:28-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:29-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:30-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:30-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:31-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:31-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:31-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:32-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:32-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:33-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:33-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:34-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:34-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:35-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:35-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:36-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T09:07:36-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:37-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:42-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:42-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:43-03:00,info,appl
connect out,6,10.201.0.100,88
2012-07-04T09:07:43-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:43-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:07:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-04T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,57680
2012-07-04T09:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,57682
2012-07-04T09:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T09:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T09:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T09:08:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:08:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55045
2012-07-04T09:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55046
2012-07-04T09:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T09:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T09:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T09:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.201.0.100,88
2012-07-04T09:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:11:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:11:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:11:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:11:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:11:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:11:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:13:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:13:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:14:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:14:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:20:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:20:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63817
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63818
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63819
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53080
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53081
2012-07-04T09:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53082
2012-07-04T09:21:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53543
2012-07-04T09:21:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-04T09:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53544
2012-07-04T09:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53545
2012-07-04T09:21:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53546
2012-07-04T09:21:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53547
2012-07-04T09:21:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53548
2012-07-04T09:21:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53549
2012-07-04T09:21:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53550
2012-07-04T09:21:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53551
2012-07-04T09:21:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53552
2012-07-04T09:21:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62936
2012-07-04T09:21:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:21:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:21:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:21:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:21:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52770
2012-07-04T09:21:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52771
2012-07-04T09:21:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52772
2012-07-04T09:21:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62301
2012-07-04T09:21:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:21:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62302
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62303
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49825
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55265
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58195
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58196
2012-07-04T09:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58197
2012-07-04T09:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58198
2012-07-04T09:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58199
2012-07-04T09:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58200
2012-07-04T09:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58201
2012-07-04T09:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58202
2012-07-04T09:21:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:21:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:22:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:22:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T09:22:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:22:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58203
2012-07-04T09:22:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58204
2012-07-04T09:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58205
2012-07-04T09:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58206
2012-07-04T09:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58207
2012-07-04T09:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58208
2012-07-04T09:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58209
2012-07-04T09:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58210
2012-07-04T09:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58211
2012-07-04T09:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58212
2012-07-04T09:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.203.0.11,389
2012-07-04T09:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58213
2012-07-04T09:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54331
2012-07-04T09:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:26:01-03:00,info,appl control,C:\Windows\System32\Macromed\Flash\F
LASHP~1.EXE,allow,connect out,6,23.61.130.70,443
2012-07-04T09:26:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:26:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:26:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.201.0.100,88
2012-07-04T09:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54332
2012-07-04T09:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54333
2012-07-04T09:26:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54334
2012-07-04T09:26:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54335
2012-07-04T09:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54336
2012-07-04T09:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54337
2012-07-04T09:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54338
2012-07-04T09:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54339
2012-07-04T09:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54340
2012-07-04T09:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54341
2012-07-04T09:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54342
2012-07-04T09:27:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:27:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54343
2012-07-04T09:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54344
2012-07-04T09:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54345
2012-07-04T09:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54346
2012-07-04T09:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54347
2012-07-04T09:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54348
2012-07-04T09:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54349
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54350
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54351
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54352
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49410
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49411
2012-07-04T09:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49412
2012-07-04T09:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49413
2012-07-04T09:28:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:28:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:28:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T09:29:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58527
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58528
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59639
2012-07-04T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59640
2012-07-04T09:31:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59641
2012-07-04T09:31:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56197
2012-07-04T09:31:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:31:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56198
2012-07-04T09:31:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56199
2012-07-04T09:31:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56200
2012-07-04T09:32:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56201
2012-07-04T09:32:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56202
2012-07-04T09:32:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56203
2012-07-04T09:32:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56204
2012-07-04T09:32:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56205
2012-07-04T09:32:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56206
2012-07-04T09:32:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61511
2012-07-04T09:32:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:32:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63492
2012-07-04T09:32:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53192
2012-07-04T09:32:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:32:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51659
2012-07-04T09:32:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:32:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T09:32:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T09:32:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:32:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51660
2012-07-04T09:32:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:32:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51661
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64224
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64225
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64292
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64293
2012-07-04T09:32:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64294
2012-07-04T09:32:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64295
2012-07-04T09:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64296
2012-07-04T09:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64297
2012-07-04T09:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64298
2012-07-04T09:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64299
2012-07-04T09:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64300
2012-07-04T09:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64301
2012-07-04T09:35:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:35:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:35:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:36:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64302
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64303
2012-07-04T09:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64304
2012-07-04T09:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64305
2012-07-04T09:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64306
2012-07-04T09:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64307
2012-07-04T09:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64308
2012-07-04T09:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64309
2012-07-04T09:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64310
2012-07-04T09:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64311
2012-07-04T09:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64312
2012-07-04T09:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64313
2012-07-04T09:37:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T09:37:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T09:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64314
2012-07-04T09:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64315
2012-07-04T09:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64316
2012-07-04T09:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64317
2012-07-04T09:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64318
2012-07-04T09:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64319
2012-07-04T09:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64320
2012-07-04T09:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64321
2012-07-04T09:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64322
2012-07-04T09:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64323
2012-07-04T09:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64324
2012-07-04T09:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64325
2012-07-04T09:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64326
2012-07-04T09:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64327
2012-07-04T09:41:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64328
2012-07-04T09:41:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64329
2012-07-04T09:41:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64330
2012-07-04T09:41:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64331
2012-07-04T09:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64332
2012-07-04T09:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64333
2012-07-04T09:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64334
2012-07-04T09:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64335
2012-07-04T09:41:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64336
2012-07-04T09:41:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64337
2012-07-04T09:42:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:42:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:42:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T09:42:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64338
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64339
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64255
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64256
2012-07-04T09:42:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51941
2012-07-04T09:42:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:42:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51942
2012-07-04T09:42:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51943
2012-07-04T09:42:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51944
2012-07-04T09:42:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51945
2012-07-04T09:42:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51946
2012-07-04T09:42:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51947
2012-07-04T09:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51948
2012-07-04T09:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51949
2012-07-04T09:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51950
2012-07-04T09:42:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:43:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:47:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T09:47:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T09:47:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:47:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51951
2012-07-04T09:47:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:47:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51952
2012-07-04T09:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51953
2012-07-04T09:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51954
2012-07-04T09:47:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51955
2012-07-04T09:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61463
2012-07-04T09:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:47:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61464
2012-07-04T09:47:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61465
2012-07-04T09:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61466
2012-07-04T09:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61467
2012-07-04T09:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61468
2012-07-04T09:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61469
2012-07-04T09:47:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61470
2012-07-04T09:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:49:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:50:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:51:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.150,62119
2012-07-04T09:52:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:52:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T09:52:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54954
2012-07-04T09:52:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:52:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54955
2012-07-04T09:52:04-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T09:52:04-03:00,info,appl
listen,17,0.0.0.0,54956
2012-07-04T09:52:04-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T09:52:04-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T09:52:04-03:00,info,appl
w,listen,17,0.0.0.0,60095
2012-07-04T09:52:04-03:00,info,appl
listen,17,0.0.0.0,60096
2012-07-04T09:52:04-03:00,info,appl
listen,17,0.0.0.0,60097
2012-07-04T09:52:05-03:00,info,appl
w,listen,17,0.0.0.0,52895
2012-07-04T09:52:05-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:52:05-03:00,info,appl
listen,17,0.0.0.0,52896
2012-07-04T09:52:05-03:00,info,appl
listen,17,0.0.0.0,52897
2012-07-04T09:52:06-03:00,info,appl
listen,17,0.0.0.0,52898
2012-07-04T09:52:06-03:00,info,appl
listen,17,0.0.0.0,52899
2012-07-04T09:52:07-03:00,info,appl
listen,17,0.0.0.0,52900
2012-07-04T09:52:07-03:00,info,appl
listen,17,0.0.0.0,52901
2012-07-04T09:52:07-03:00,info,appl
listen,17,0.0.0.0,52902
2012-07-04T09:52:07-03:00,info,appl
listen,17,0.0.0.0,52903
2012-07-04T09:52:07-03:00,info,appl
listen,17,0.0.0.0,52904
2012-07-04T09:52:07-03:00,info,appl
w,listen,17,0.0.0.0,54505
2012-07-04T09:52:07-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:52:12-03:00,info,appl
w,listen,17,0.0.0.0,53662
2012-07-04T09:52:12-03:00,info,appl
w,listen,17,0.0.0.0,59606
2012-07-04T09:52:12-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:52:12-03:00,info,appl
w,listen,17,0.0.0.0,51884
2012-07-04T09:52:12-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T09:52:35-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-04T09:52:35-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T09:52:35-03:00,info,appl
listen,17,0.0.0.0,51885
2012-07-04T09:52:35-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T09:52:35-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51886
2012-07-04T09:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51887
2012-07-04T09:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51888
2012-07-04T09:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51889
2012-07-04T09:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51890
2012-07-04T09:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51891
2012-07-04T09:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51892
2012-07-04T09:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51893
2012-07-04T09:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51894
2012-07-04T09:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51895
2012-07-04T09:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51896
2012-07-04T09:52:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53981
2012-07-04T09:52:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T09:52:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50743
2012-07-04T09:52:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T09:52:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:52:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50744
2012-07-04T09:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50745
2012-07-04T09:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50746
2012-07-04T09:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50747
2012-07-04T09:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50748
2012-07-04T09:52:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50749
2012-07-04T09:52:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50750
2012-07-04T09:52:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50751
2012-07-04T09:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50752
2012-07-04T09:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50753
2012-07-04T09:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50754
2012-07-04T09:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50755
2012-07-04T09:56:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:56:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50756
2012-07-04T09:56:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:56:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50757
2012-07-04T09:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50758
2012-07-04T09:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50759
2012-07-04T09:56:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50760
2012-07-04T09:56:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50761
2012-07-04T09:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50762
2012-07-04T09:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50763
2012-07-04T09:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50764
2012-07-04T09:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50765
2012-07-04T09:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50766
2012-07-04T09:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50767
2012-07-04T09:56:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T09:56:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:57:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:57:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,55658
2012-07-04T09:57:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T09:58:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T09:58:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50768
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50769
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50770
2012-07-04T09:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50771
2012-07-04T09:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50772
2012-07-04T09:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50773
2012-07-04T09:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50774
2012-07-04T09:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50775
2012-07-04T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50776
2012-07-04T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50777
2012-07-04T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50778
2012-07-04T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50779
2012-07-04T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50780
2012-07-04T09:58:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,55663
2012-07-04T10:01:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,65257
2012-07-04T10:02:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.24,58108
2012-07-04T10:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50781
2012-07-04T10:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50782
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64507
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64508
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60238
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60239
2012-07-04T10:03:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60240
2012-07-04T10:03:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60241
2012-07-04T10:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60242
2012-07-04T10:03:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.24,58113
2012-07-04T10:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60243
2012-07-04T10:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60244
2012-07-04T10:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60245
2012-07-04T10:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60246
2012-07-04T10:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60247
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53211
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53212
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50524
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50525
2012-07-04T10:03:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50526
2012-07-04T10:03:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57035
2012-07-04T10:03:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:03:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57036
2012-07-04T10:03:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57037
2012-07-04T10:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57038
2012-07-04T10:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57039
2012-07-04T10:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57040
2012-07-04T10:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57041
2012-07-04T10:03:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57042
2012-07-04T10:03:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57043
2012-07-04T10:03:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57044
2012-07-04T10:03:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56157
2012-07-04T10:03:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55699
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59281
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64511
2012-07-04T10:03:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:03:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:03:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:04:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.152,61610
2012-07-04T10:04:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T10:04:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:05:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,51004
2012-07-04T10:05:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,51009
2012-07-04T10:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:07:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:07:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:07:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49388
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49389
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49390
2012-07-04T10:07:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53186
2012-07-04T10:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53187
2012-07-04T10:07:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56628
2012-07-04T10:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56629
2012-07-04T10:07:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62171
2012-07-04T10:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62172
2012-07-04T10:07:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56969
2012-07-04T10:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56970
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51508
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51509
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59160
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59161
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60186
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60187
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49251
2012-07-04T10:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49252
2012-07-04T10:07:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54015
2012-07-04T10:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54016
2012-07-04T10:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54017
2012-07-04T10:08:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,53733
2012-07-04T10:08:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T10:08:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T10:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54018
2012-07-04T10:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54019
2012-07-04T10:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54020
2012-07-04T10:08:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54021
2012-07-04T10:08:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54022
2012-07-04T10:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54023
2012-07-04T10:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54024
2012-07-04T10:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54025
2012-07-04T10:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54026
2012-07-04T10:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54027
2012-07-04T10:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54028
2012-07-04T10:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54029
2012-07-04T10:09:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62225
2012-07-04T10:09:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:09:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61678
2012-07-04T10:10:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:10:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:11:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:11:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:11:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61679
2012-07-04T10:11:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:11:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61680
2012-07-04T10:11:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61681
2012-07-04T10:11:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61682
2012-07-04T10:11:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61683
2012-07-04T10:11:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61684
2012-07-04T10:11:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61685
2012-07-04T10:11:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61686
2012-07-04T10:11:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61687
2012-07-04T10:11:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61688
2012-07-04T10:11:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61689
2012-07-04T10:11:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61690
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63035
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63036
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63037
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63038
2012-07-04T10:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63039
2012-07-04T10:11:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63040
2012-07-04T10:11:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63041
2012-07-04T10:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63042
2012-07-04T10:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63043
2012-07-04T10:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63044
2012-07-04T10:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63045
2012-07-04T10:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63046
2012-07-04T10:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63047
2012-07-04T10:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63048
2012-07-04T10:11:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:13:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:13:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63049
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63050
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55090
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55091
2012-07-04T10:13:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50838
2012-07-04T10:13:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:13:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50839
2012-07-04T10:13:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50840
2012-07-04T10:13:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50841
2012-07-04T10:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50842
2012-07-04T10:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50843
2012-07-04T10:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50844
2012-07-04T10:13:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50845
2012-07-04T10:13:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50846
2012-07-04T10:13:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50847
2012-07-04T10:17:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:17:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:18:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:18:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:18:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50848
2012-07-04T10:18:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:18:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50849
2012-07-04T10:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50850
2012-07-04T10:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50851
2012-07-04T10:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50852
2012-07-04T10:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50853
2012-07-04T10:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50854
2012-07-04T10:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50855
2012-07-04T10:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50856
2012-07-04T10:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50857
2012-07-04T10:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50858
2012-07-04T10:18:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50859
2012-07-04T10:18:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:22:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:22:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50860
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50861
2012-07-04T10:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50862
2012-07-04T10:22:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50863
2012-07-04T10:22:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50864
2012-07-04T10:22:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50865
2012-07-04T10:22:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50866
2012-07-04T10:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50867
2012-07-04T10:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50868
2012-07-04T10:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50869
2012-07-04T10:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50870
2012-07-04T10:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50871
2012-07-04T10:23:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:23:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50872
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50873
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62627
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62628
2012-07-04T10:23:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58535
2012-07-04T10:23:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58536
2012-07-04T10:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58537
2012-07-04T10:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58538
2012-07-04T10:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58539
2012-07-04T10:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58540
2012-07-04T10:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58541
2012-07-04T10:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58542
2012-07-04T10:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58543
2012-07-04T10:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58544
2012-07-04T10:25:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:25:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:25:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:26:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58545
2012-07-04T10:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58546
2012-07-04T10:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58547
2012-07-04T10:26:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58548
2012-07-04T10:26:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58549
2012-07-04T10:26:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58550
2012-07-04T10:26:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58551
2012-07-04T10:26:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58552
2012-07-04T10:26:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58553
2012-07-04T10:26:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58554
2012-07-04T10:26:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58555
2012-07-04T10:26:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58556
2012-07-04T10:28:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:28:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58557
2012-07-04T10:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58558
2012-07-04T10:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58559
2012-07-04T10:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58560
2012-07-04T10:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58561
2012-07-04T10:28:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58562
2012-07-04T10:28:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58563
2012-07-04T10:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58564
2012-07-04T10:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58565
2012-07-04T10:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58566
2012-07-04T10:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58567
2012-07-04T10:29:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58568
2012-07-04T10:29:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58569
2012-07-04T10:32:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:32:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:32:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:33:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:34:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:34:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:34:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:34:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58570
2012-07-04T10:34:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:34:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58571
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,63340
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63341
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61791
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:34:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61792
2012-07-04T10:34:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61793
2012-07-04T10:34:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61794
2012-07-04T10:34:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61795
2012-07-04T10:34:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61796
2012-07-04T10:34:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61797
2012-07-04T10:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61798
2012-07-04T10:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61799
2012-07-04T10:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61800
2012-07-04T10:36:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T10:36:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,61801
2012-07-04T10:36:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-04T10:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:52-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:52-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,61802
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:54-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:55-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:56-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:57-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:58-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:36:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110

2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T10:37:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:37:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,49716
2012-07-04T10:37:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T10:37:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,3557
2012-07-04T10:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T10:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61803
2012-07-04T10:37:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:37:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61804
2012-07-04T10:37:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61805
2012-07-04T10:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61806
2012-07-04T10:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61807
2012-07-04T10:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61808
2012-07-04T10:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61809
2012-07-04T10:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61810
2012-07-04T10:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61811
2012-07-04T10:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61812
2012-07-04T10:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61813
2012-07-04T10:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61814
2012-07-04T10:38:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.230,1416
2012-07-04T10:38:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.247,51126
2012-07-04T10:38:57-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-04T10:39:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:39:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T10:39:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:39:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61815
2012-07-04T10:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61816
2012-07-04T10:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61817
2012-07-04T10:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61818
2012-07-04T10:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61819
2012-07-04T10:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61820
2012-07-04T10:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61821
2012-07-04T10:39:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,51913
2012-07-04T10:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61822
2012-07-04T10:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61823
2012-07-04T10:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61824
2012-07-04T10:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61825
2012-07-04T10:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61826
2012-07-04T10:39:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,60854
2012-07-04T10:39:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:40:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:40:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.56,1837
2012-07-04T10:41:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.18,57639
2012-07-04T10:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,3409
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61827
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61828
2012-07-04T10:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61829
2012-07-04T10:41:39-03:00,info,appl
listen,17,0.0.0.0,61830
2012-07-04T10:41:39-03:00,info,appl
listen,17,0.0.0.0,61831
2012-07-04T10:41:40-03:00,info,appl
listen,17,0.0.0.0,61832
2012-07-04T10:41:40-03:00,info,appl
listen,17,0.0.0.0,61833
2012-07-04T10:41:40-03:00,info,appl
listen,17,0.0.0.0,61834
2012-07-04T10:41:41-03:00,info,appl
listen,17,0.0.0.0,61835
2012-07-04T10:41:41-03:00,info,appl
listen,17,0.0.0.0,61836
2012-07-04T10:41:41-03:00,info,appl
listen,17,0.0.0.0,61837
2012-07-04T10:41:41-03:00,info,appl
listen,17,0.0.0.0,61838
2012-07-04T10:41:42-03:00,info,appl
listen,17,0.0.0.0,61839
2012-07-04T10:41:42-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:41:42-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:41:42-03:00,info,appl
listen,17,0.0.0.0,61840
2012-07-04T10:41:42-03:00,info,appl
listen,17,0.0.0.0,61841
2012-07-04T10:41:42-03:00,info,appl
listen,17,0.0.0.0,61842
2012-07-04T10:41:43-03:00,info,appl
listen,17,0.0.0.0,61843
2012-07-04T10:41:43-03:00,info,appl
listen,17,0.0.0.0,61844
2012-07-04T10:41:44-03:00,info,appl
listen,17,0.0.0.0,61845
2012-07-04T10:41:44-03:00,info,appl
listen,17,0.0.0.0,61846
2012-07-04T10:41:45-03:00,info,appl
listen,17,0.0.0.0,61847
2012-07-04T10:41:45-03:00,info,appl
listen,17,0.0.0.0,61848
2012-07-04T10:41:45-03:00,info,appl
listen,17,0.0.0.0,61849
2012-07-04T10:41:45-03:00,info,appl
listen,17,0.0.0.0,61850
2012-07-04T10:41:45-03:00,info,appl
listen,17,0.0.0.0,61851
2012-07-04T10:41:49-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:41:49-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:41:49-03:00,info,appl
listen,17,0.0.0.0,61852
2012-07-04T10:41:49-03:00,info,appl
listen,17,0.0.0.0,61853
2012-07-04T10:41:50-03:00,info,appl
listen,17,0.0.0.0,61854
2012-07-04T10:41:50-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61855
2012-07-04T10:41:51-03:00,info,appl
listen,17,0.0.0.0,61856
2012-07-04T10:41:51-03:00,info,appl
listen,17,0.0.0.0,61857
2012-07-04T10:41:52-03:00,info,appl
listen,17,0.0.0.0,61858
2012-07-04T10:41:52-03:00,info,appl
listen,17,0.0.0.0,61859
2012-07-04T10:41:52-03:00,info,appl
listen,17,0.0.0.0,61860
2012-07-04T10:41:53-03:00,info,appl
listen,17,0.0.0.0,61861
2012-07-04T10:41:53-03:00,info,appl
listen,17,0.0.0.0,61862
2012-07-04T10:41:53-03:00,info,appl
listen,17,0.0.0.0,61863
2012-07-04T10:41:57-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:41:57-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:41:57-03:00,info,appl
listen,17,0.0.0.0,61864
2012-07-04T10:41:57-03:00,info,appl
listen,17,0.0.0.0,61865
2012-07-04T10:41:57-03:00,info,appl
listen,17,0.0.0.0,61866
2012-07-04T10:41:58-03:00,info,appl
listen,17,0.0.0.0,61867
2012-07-04T10:41:58-03:00,info,appl
send,17,10.108.0.153,389
2012-07-04T10:41:58-03:00,info,appl
listen,17,0.0.0.0,61868
2012-07-04T10:41:59-03:00,info,appl
listen,17,0.0.0.0,61869
2012-07-04T10:41:59-03:00,info,appl
listen,17,0.0.0.0,61870
2012-07-04T10:41:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:41:59-03:00,info,appl
listen,17,0.0.0.0,61871
2012-07-04T10:41:59-03:00,info,appl
listen,17,0.0.0.0,61872
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61873
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61874
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61875
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61876
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61877
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61878
2012-07-04T10:42:00-03:00,info,appl
listen,17,0.0.0.0,61879
2012-07-04T10:42:01-03:00,info,appl
listen,17,0.0.0.0,61880
2012-07-04T10:42:01-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61881
2012-07-04T10:42:02-03:00,info,appl
listen,17,0.0.0.0,61882
2012-07-04T10:42:02-03:00,info,appl
listen,17,0.0.0.0,61883
2012-07-04T10:42:02-03:00,info,appl
listen,17,0.0.0.0,61884
2012-07-04T10:42:03-03:00,info,appl
listen,17,0.0.0.0,61885
2012-07-04T10:42:03-03:00,info,appl
listen,17,0.0.0.0,61886
2012-07-04T10:42:03-03:00,info,appl
listen,17,0.0.0.0,61887
2012-07-04T10:42:05-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:05-03:00,info,appl
listen,17,0.0.0.0,61888
2012-07-04T10:42:05-03:00,info,appl
listen,17,0.0.0.0,61889
2012-07-04T10:42:06-03:00,info,appl
listen,17,0.0.0.0,61890
2012-07-04T10:42:07-03:00,info,appl
listen,17,0.0.0.0,61891
2012-07-04T10:42:07-03:00,info,appl
listen,17,0.0.0.0,61892
2012-07-04T10:42:07-03:00,info,appl
listen,17,0.0.0.0,61893
2012-07-04T10:42:08-03:00,info,appl
listen,17,0.0.0.0,61894
2012-07-04T10:42:08-03:00,info,appl
listen,17,0.0.0.0,61895
2012-07-04T10:42:08-03:00,info,appl
listen,17,0.0.0.0,61896
2012-07-04T10:42:09-03:00,info,appl
listen,17,0.0.0.0,61897
2012-07-04T10:42:09-03:00,info,appl
listen,17,0.0.0.0,61898
2012-07-04T10:42:09-03:00,info,appl
listen,17,0.0.0.0,61899
2012-07-04T10:42:09-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:09-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:09-03:00,info,appl
listen,17,0.0.0.0,61900
2012-07-04T10:42:09-03:00,info,appl
listen,17,0.0.0.0,61901
2012-07-04T10:42:10-03:00,info,appl
listen,17,0.0.0.0,61902
2012-07-04T10:42:10-03:00,info,appl
listen,17,0.0.0.0,61903
2012-07-04T10:42:11-03:00,info,appl
listen,17,0.0.0.0,61904
2012-07-04T10:42:11-03:00,info,appl
listen,17,0.0.0.0,61905
2012-07-04T10:42:11-03:00,info,appl
listen,17,0.0.0.0,61906
2012-07-04T10:42:12-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61907
2012-07-04T10:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61908
2012-07-04T10:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61909
2012-07-04T10:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61910
2012-07-04T10:42:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61911
2012-07-04T10:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T10:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61912
2012-07-04T10:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61913
2012-07-04T10:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61914
2012-07-04T10:42:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61915
2012-07-04T10:42:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.197,389
2012-07-04T10:42:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61916
2012-07-04T10:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61917
2012-07-04T10:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61918
2012-07-04T10:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61919
2012-07-04T10:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61920
2012-07-04T10:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61921
2012-07-04T10:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61922
2012-07-04T10:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61923
2012-07-04T10:42:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,60072
2012-07-04T10:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T10:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61924
2012-07-04T10:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61925
2012-07-04T10:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61926
2012-07-04T10:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61927
2012-07-04T10:42:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61928
2012-07-04T10:42:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61929
2012-07-04T10:42:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61930
2012-07-04T10:42:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61931
2012-07-04T10:42:27-03:00,info,appl
listen,17,0.0.0.0,61932
2012-07-04T10:42:27-03:00,info,appl
listen,17,0.0.0.0,61933
2012-07-04T10:42:28-03:00,info,appl
listen,17,0.0.0.0,61934
2012-07-04T10:42:28-03:00,info,appl
listen,17,0.0.0.0,61935
2012-07-04T10:42:29-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:29-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:29-03:00,info,appl
listen,17,0.0.0.0,61936
2012-07-04T10:42:29-03:00,info,appl
listen,17,0.0.0.0,61937
2012-07-04T10:42:29-03:00,info,appl
listen,17,0.0.0.0,61938
2012-07-04T10:42:30-03:00,info,appl
listen,17,0.0.0.0,61939
2012-07-04T10:42:30-03:00,info,appl
listen,17,0.0.0.0,61940
2012-07-04T10:42:30-03:00,info,appl
listen,17,0.0.0.0,61941
2012-07-04T10:42:31-03:00,info,appl
listen,17,0.0.0.0,61942
2012-07-04T10:42:31-03:00,info,appl
listen,17,0.0.0.0,61943
2012-07-04T10:42:31-03:00,info,appl
listen,17,0.0.0.0,61944
2012-07-04T10:42:32-03:00,info,appl
listen,17,0.0.0.0,61945
2012-07-04T10:42:32-03:00,info,appl
listen,17,0.0.0.0,61946
2012-07-04T10:42:32-03:00,info,appl
listen,17,0.0.0.0,61947
2012-07-04T10:42:32-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:32-03:00,info,appl
listen,17,0.0.0.0,61948
2012-07-04T10:42:32-03:00,info,appl
listen,17,0.0.0.0,61949
2012-07-04T10:42:33-03:00,info,appl
listen,17,0.0.0.0,61950
2012-07-04T10:42:33-03:00,info,appl
listen,17,0.0.0.0,61951
2012-07-04T10:42:34-03:00,info,appl
listen,17,0.0.0.0,61952
2012-07-04T10:42:34-03:00,info,appl
listen,17,0.0.0.0,61953
2012-07-04T10:42:35-03:00,info,appl
listen,17,0.0.0.0,61954
2012-07-04T10:42:35-03:00,info,appl
listen,17,0.0.0.0,61955
2012-07-04T10:42:35-03:00,info,appl
listen,17,0.0.0.0,61956
2012-07-04T10:42:35-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61957
2012-07-04T10:42:36-03:00,info,appl
listen,17,0.0.0.0,61958
2012-07-04T10:42:36-03:00,info,appl
listen,17,0.0.0.0,61959
2012-07-04T10:42:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:40-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:40-03:00,info,appl
listen,17,0.0.0.0,61960
2012-07-04T10:42:40-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T10:42:40-03:00,info,appl
listen,17,0.0.0.0,61961
2012-07-04T10:42:41-03:00,info,appl
listen,17,0.0.0.0,61962
2012-07-04T10:42:41-03:00,info,appl
listen,17,0.0.0.0,61963
2012-07-04T10:42:42-03:00,info,appl
listen,17,0.0.0.0,61964
2012-07-04T10:42:42-03:00,info,appl
listen,17,0.0.0.0,61965
2012-07-04T10:42:43-03:00,info,appl
listen,17,0.0.0.0,61966
2012-07-04T10:42:43-03:00,info,appl
listen,17,0.0.0.0,61967
2012-07-04T10:42:43-03:00,info,appl
listen,17,0.0.0.0,61968
2012-07-04T10:42:43-03:00,info,appl
listen,17,0.0.0.0,61969
2012-07-04T10:42:44-03:00,info,appl
listen,17,0.0.0.0,61970
2012-07-04T10:42:44-03:00,info,appl
listen,17,0.0.0.0,61971
2012-07-04T10:42:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:42:48-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:42:48-03:00,info,appl
listen,17,0.0.0.0,61972
2012-07-04T10:42:48-03:00,info,appl
listen,17,0.0.0.0,61973
2012-07-04T10:42:48-03:00,info,appl
listen,17,0.0.0.0,61974
2012-07-04T10:42:49-03:00,info,appl
listen,17,0.0.0.0,61975
2012-07-04T10:42:49-03:00,info,appl
listen,17,0.0.0.0,61976
2012-07-04T10:42:50-03:00,info,appl
listen,17,0.0.0.0,61977
2012-07-04T10:42:50-03:00,info,appl
listen,17,0.0.0.0,61978
2012-07-04T10:42:51-03:00,info,appl
listen,17,0.0.0.0,61979
2012-07-04T10:42:51-03:00,info,appl
listen,17,0.0.0.0,61980
2012-07-04T10:42:51-03:00,info,appl
listen,17,0.0.0.0,61981
2012-07-04T10:42:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61982
2012-07-04T10:42:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61983
2012-07-04T10:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T10:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61984
2012-07-04T10:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61985
2012-07-04T10:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61986
2012-07-04T10:42:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61987
2012-07-04T10:42:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61988
2012-07-04T10:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61989
2012-07-04T10:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61990
2012-07-04T10:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61991
2012-07-04T10:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61992
2012-07-04T10:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61993
2012-07-04T10:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61994
2012-07-04T10:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61995
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61996
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61997
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61998
2012-07-04T10:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61999
2012-07-04T10:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62000
2012-07-04T10:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62001
2012-07-04T10:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62002
2012-07-04T10:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62003
2012-07-04T10:43:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62004
2012-07-04T10:43:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62005
2012-07-04T10:43:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.93,56053
2012-07-04T10:43:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62006
2012-07-04T10:43:03-03:00,info,appl
listen,17,0.0.0.0,62007
2012-07-04T10:43:07-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:43:07-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:43:07-03:00,info,appl
listen,17,0.0.0.0,62008
2012-07-04T10:43:07-03:00,info,appl
listen,17,0.0.0.0,62009
2012-07-04T10:43:08-03:00,info,appl
listen,17,0.0.0.0,62010
2012-07-04T10:43:08-03:00,info,appl
listen,17,0.0.0.0,62011
2012-07-04T10:43:09-03:00,info,appl
listen,17,0.0.0.0,62012
2012-07-04T10:43:09-03:00,info,appl
listen,17,0.0.0.0,62013
2012-07-04T10:43:10-03:00,info,appl
listen,17,0.0.0.0,62014
2012-07-04T10:43:10-03:00,info,appl
listen,17,0.0.0.0,62015
2012-07-04T10:43:10-03:00,info,appl
listen,17,0.0.0.0,62016
2012-07-04T10:43:10-03:00,info,appl
listen,17,0.0.0.0,62017
2012-07-04T10:43:11-03:00,info,appl
listen,17,0.0.0.0,62018
2012-07-04T10:43:11-03:00,info,appl
listen,17,0.0.0.0,62019
2012-07-04T10:43:15-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T10:43:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T10:43:15-03:00,info,appl
listen,17,0.0.0.0,62020
2012-07-04T10:43:15-03:00,info,appl
listen,17,0.0.0.0,62021
2012-07-04T10:43:15-03:00,info,appl
listen,17,0.0.0.0,62022
2012-07-04T10:43:16-03:00,info,appl
listen,17,0.0.0.0,62023
2012-07-04T10:43:16-03:00,info,appl
listen,17,0.0.0.0,62024
2012-07-04T10:43:17-03:00,info,appl
listen,17,0.0.0.0,62025
2012-07-04T10:43:17-03:00,info,appl
listen,17,0.0.0.0,62026
2012-07-04T10:43:17-03:00,info,appl
listen,17,0.0.0.0,62027
2012-07-04T10:43:18-03:00,info,appl
listen,17,0.0.0.0,62028
2012-07-04T10:43:18-03:00,info,appl
listen,17,0.0.0.0,62029
2012-07-04T10:43:18-03:00,info,appl
listen,17,0.0.0.0,62030
2012-07-04T10:43:18-03:00,info,appl
listen,17,0.0.0.0,62031
2012-07-04T10:43:29-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.4.123,54637
2012-07-04T10:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,54640
2012-07-04T10:44:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:44:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62032
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62033
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64225
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64226
2012-07-04T10:44:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55053
2012-07-04T10:44:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55054
2012-07-04T10:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55055
2012-07-04T10:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55056
2012-07-04T10:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55057
2012-07-04T10:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55058
2012-07-04T10:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55059
2012-07-04T10:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55060
2012-07-04T10:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55061
2012-07-04T10:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55062
2012-07-04T10:46:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:46:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:46:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.250,56189
2012-07-04T10:46:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:47:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:47:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,50599
2012-07-04T10:48:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.243,63697
2012-07-04T10:49:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T10:49:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T10:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55063
2012-07-04T10:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55064
2012-07-04T10:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55065
2012-07-04T10:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55066
2012-07-04T10:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55067
2012-07-04T10:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55068
2012-07-04T10:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55069
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55070
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56545
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56546
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56547
2012-07-04T10:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56548
2012-07-04T10:49:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56549
2012-07-04T10:49:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.243,63698
2012-07-04T10:50:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,54118
2012-07-04T10:51:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.76,51377
2012-07-04T10:51:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.254,56087
2012-07-04T10:52:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:52:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T10:52:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,1840
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50504
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50505
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50506
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,1025
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53030
2012-07-04T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53031
2012-07-04T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53032
2012-07-04T10:52:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55388
2012-07-04T10:52:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55389
2012-07-04T10:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55390
2012-07-04T10:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55391
2012-07-04T10:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55392
2012-07-04T10:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55393
2012-07-04T10:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55394
2012-07-04T10:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55395
2012-07-04T10:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55396
2012-07-04T10:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55397
2012-07-04T10:52:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57640
2012-07-04T10:52:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56116
2012-07-04T10:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54025
2012-07-04T10:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56008
2012-07-04T10:52:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:52:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,55089
2012-07-04T10:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T10:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56009
2012-07-04T10:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56010
2012-07-04T10:53:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56011
2012-07-04T10:53:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56012
2012-07-04T10:53:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56013
2012-07-04T10:53:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56014
2012-07-04T10:53:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56015
2012-07-04T10:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56016
2012-07-04T10:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56017
2012-07-04T10:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56018
2012-07-04T10:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56019
2012-07-04T10:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56020
2012-07-04T10:53:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.190,3993
2012-07-04T10:53:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T10:53:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:53:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,55509
2012-07-04T10:53:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.30,1215
2012-07-04T10:54:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:54:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T10:54:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,56696
2012-07-04T10:54:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T10:54:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56021
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56022
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57351
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T10:54:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57352
2012-07-04T10:54:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65504
2012-07-04T10:54:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T10:54:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65505
2012-07-04T10:54:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65506
2012-07-04T10:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65507
2012-07-04T10:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65508
2012-07-04T10:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65509
2012-07-04T10:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65510
2012-07-04T10:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65511
2012-07-04T10:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65512
2012-07-04T10:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65513
2012-07-04T10:55:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,63682
2012-07-04T10:55:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,1439
2012-07-04T10:56:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,59673
2012-07-04T10:56:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.47,64603
2012-07-04T10:56:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,2417
2012-07-04T10:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65514
2012-07-04T10:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65515
2012-07-04T10:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65516
2012-07-04T10:57:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65517
2012-07-04T10:57:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65518
2012-07-04T10:57:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65519
2012-07-04T10:57:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65520
2012-07-04T10:57:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65521
2012-07-04T10:57:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65522
2012-07-04T10:57:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65523
2012-07-04T10:57:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65524
2012-07-04T10:57:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65525
2012-07-04T10:57:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,53874
2012-07-04T10:58:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,53879
2012-07-04T10:59:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,2982
2012-07-04T10:59:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,3000
2012-07-04T10:59:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T10:59:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T10:59:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65526
2012-07-04T10:59:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T10:59:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T10:59:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65527
2012-07-04T10:59:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65528
2012-07-04T10:59:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65529
2012-07-04T10:59:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65530
2012-07-04T10:59:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65531
2012-07-04T10:59:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65532
2012-07-04T10:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65533
2012-07-04T10:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65534
2012-07-04T10:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49152
2012-07-04T10:59:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49153
2012-07-04T10:59:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49154
2012-07-04T10:59:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49155
2012-07-04T11:00:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:00:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:01:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:01:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,50045
2012-07-04T11:01:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,50046
2012-07-04T11:01:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:01:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,54435
2012-07-04T11:02:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,50005
2012-07-04T11:02:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.69,49222
2012-07-04T11:03:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.24,54555
2012-07-04T11:04:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.9,1113
2012-07-04T11:04:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,2545
2012-07-04T11:04:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:04:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49156
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49157
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55534
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55535
2012-07-04T11:04:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61611
2012-07-04T11:04:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61612
2012-07-04T11:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61613
2012-07-04T11:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61614
2012-07-04T11:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61615
2012-07-04T11:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61616
2012-07-04T11:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61617
2012-07-04T11:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61618
2012-07-04T11:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61619
2012-07-04T11:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61620
2012-07-04T11:05:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,3774
2012-07-04T11:07:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:07:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:07:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:07:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:07:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:07:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:08:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.49,64330
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51227
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51228
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51229
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61101
2012-07-04T11:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61102
2012-07-04T11:08:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52587
2012-07-04T11:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52588
2012-07-04T11:08:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51845
2012-07-04T11:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51846
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56850
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56851
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59947
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59948
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53494
2012-07-04T11:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53495
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53496
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57938
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57939
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62005
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62006
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63145
2012-07-04T11:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63146
2012-07-04T11:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:09:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.10,1752
2012-07-04T11:09:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,4653
2012-07-04T11:10:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,54377
2012-07-04T11:10:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:10:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:10:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:10:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63147
2012-07-04T11:10:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:10:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63148
2012-07-04T11:10:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63149
2012-07-04T11:10:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63150
2012-07-04T11:10:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63151
2012-07-04T11:10:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63152
2012-07-04T11:10:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63153
2012-07-04T11:10:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63154
2012-07-04T11:10:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63155
2012-07-04T11:10:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63156
2012-07-04T11:10:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63157
2012-07-04T11:10:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63158
2012-07-04T11:10:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,50143
2012-07-04T11:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,61014
2012-07-04T11:11:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52456
2012-07-04T11:11:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:11:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55380
2012-07-04T11:12:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.78,52388
2012-07-04T11:12:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:12:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55381
2012-07-04T11:12:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:12:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55382
2012-07-04T11:12:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55383
2012-07-04T11:12:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55384
2012-07-04T11:12:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55385
2012-07-04T11:12:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55386
2012-07-04T11:12:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55387
2012-07-04T11:12:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55388
2012-07-04T11:12:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55389
2012-07-04T11:12:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55390
2012-07-04T11:12:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55391
2012-07-04T11:12:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55392
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54700
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54701
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54702
2012-07-04T11:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54703
2012-07-04T11:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54704
2012-07-04T11:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54705
2012-07-04T11:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54706
2012-07-04T11:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54707
2012-07-04T11:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54708
2012-07-04T11:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54709
2012-07-04T11:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54710
2012-07-04T11:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54711
2012-07-04T11:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54712
2012-07-04T11:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54713
2012-07-04T11:12:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,4652
2012-07-04T11:13:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,64709
2012-07-04T11:13:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,1143
2012-07-04T11:14:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,1170
2012-07-04T11:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:15:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T11:15:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54714
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54715
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61430
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:15:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61431
2012-07-04T11:15:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51805
2012-07-04T11:15:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:15:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51806
2012-07-04T11:15:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51807
2012-07-04T11:15:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51808
2012-07-04T11:15:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:15:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51809
2012-07-04T11:15:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51810
2012-07-04T11:15:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51811
2012-07-04T11:15:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51812
2012-07-04T11:15:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51813
2012-07-04T11:15:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51814
2012-07-04T11:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:18:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.57,1998
2012-07-04T11:20:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T11:20:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T11:20:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:20:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51815
2012-07-04T11:20:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:20:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51816
2012-07-04T11:20:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51817
2012-07-04T11:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51818
2012-07-04T11:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51819
2012-07-04T11:20:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51820
2012-07-04T11:20:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51821
2012-07-04T11:20:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51822
2012-07-04T11:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51823
2012-07-04T11:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51824
2012-07-04T11:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51825
2012-07-04T11:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51826
2012-07-04T11:21:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:21:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:22:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,62792
2012-07-04T11:22:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:22:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.151,62669
2012-07-04T11:23:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51827
2012-07-04T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51828
2012-07-04T11:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51829
2012-07-04T11:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51830
2012-07-04T11:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51831
2012-07-04T11:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51832
2012-07-04T11:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51833
2012-07-04T11:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51834
2012-07-04T11:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51835
2012-07-04T11:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51836
2012-07-04T11:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51837
2012-07-04T11:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51838
2012-07-04T11:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,2768
2012-07-04T11:25:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,2784
2012-07-04T11:25:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T11:25:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T11:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51839
2012-07-04T11:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51840
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58166
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58167
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54977
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54978
2012-07-04T11:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54979
2012-07-04T11:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54980
2012-07-04T11:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54981
2012-07-04T11:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54982
2012-07-04T11:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54983
2012-07-04T11:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54984
2012-07-04T11:25:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54985
2012-07-04T11:25:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54986
2012-07-04T11:26:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.145,58965
2012-07-04T11:26:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.115,50269
2012-07-04T11:27:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.115,50270
2012-07-04T11:27:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:27:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54987
2012-07-04T11:27:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:27:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54988
2012-07-04T11:27:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54989
2012-07-04T11:27:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54990
2012-07-04T11:27:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54991
2012-07-04T11:27:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54992
2012-07-04T11:27:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54993
2012-07-04T11:27:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54994
2012-07-04T11:27:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54995
2012-07-04T11:27:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54996
2012-07-04T11:27:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54997
2012-07-04T11:27:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54998
2012-07-04T11:29:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:29:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:29:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,2777
2012-07-04T11:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:30:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,65354
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64637
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64638
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61781
2012-07-04T11:30:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61782
2012-07-04T11:30:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61783
2012-07-04T11:30:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52751
2012-07-04T11:30:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:30:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52752
2012-07-04T11:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52753
2012-07-04T11:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52754
2012-07-04T11:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52755
2012-07-04T11:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52756
2012-07-04T11:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52757
2012-07-04T11:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52758
2012-07-04T11:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52759
2012-07-04T11:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52760
2012-07-04T11:30:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49733
2012-07-04T11:30:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54015
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54560
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54480
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:30:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:30:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54481
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54482
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54483
2012-07-04T11:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54484
2012-07-04T11:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54485
2012-07-04T11:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54486
2012-07-04T11:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54487
2012-07-04T11:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54488
2012-07-04T11:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54489
2012-07-04T11:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54490
2012-07-04T11:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54491
2012-07-04T11:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54492
2012-07-04T11:30:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54493
2012-07-04T11:31:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,4466
2012-07-04T11:33:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.53,4193
2012-07-04T11:34:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,64710
2012-07-04T11:34:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,2405
2012-07-04T11:35:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,64711
2012-07-04T11:35:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:35:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54494
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54495
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49534
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:35:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49535
2012-07-04T11:35:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56013
2012-07-04T11:35:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:35:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56014
2012-07-04T11:35:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56015
2012-07-04T11:35:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56016
2012-07-04T11:35:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56017
2012-07-04T11:35:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56018
2012-07-04T11:35:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56019
2012-07-04T11:35:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56020
2012-07-04T11:35:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56021
2012-07-04T11:35:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56022
2012-07-04T11:36:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:36:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:36:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:37:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:37:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,2096
2012-07-04T11:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T11:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56023
2012-07-04T11:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T11:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56024
2012-07-04T11:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56025
2012-07-04T11:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56026
2012-07-04T11:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56027
2012-07-04T11:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56028
2012-07-04T11:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56029
2012-07-04T11:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56030
2012-07-04T11:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56031
2012-07-04T11:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56032
2012-07-04T11:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56033
2012-07-04T11:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56034
2012-07-04T11:40:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.215,3315
2012-07-04T11:40:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:40:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:40:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:40:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56035
2012-07-04T11:40:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:40:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56036
2012-07-04T11:40:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56037
2012-07-04T11:40:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56038
2012-07-04T11:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56039
2012-07-04T11:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56040
2012-07-04T11:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56041
2012-07-04T11:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56042
2012-07-04T11:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56043
2012-07-04T11:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56044
2012-07-04T11:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56045
2012-07-04T11:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56046
2012-07-04T11:42:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,64298
2012-07-04T11:42:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T11:42:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56047
2012-07-04T11:42:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:42:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56048
2012-07-04T11:42:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56049
2012-07-04T11:42:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56050
2012-07-04T11:42:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56051
2012-07-04T11:42:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56052
2012-07-04T11:42:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56053
2012-07-04T11:42:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56054
2012-07-04T11:42:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56055
2012-07-04T11:42:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56056
2012-07-04T11:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56057
2012-07-04T11:42:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56058
2012-07-04T11:43:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:43:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:43:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,58133
2012-07-04T11:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:44:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,1544
2012-07-04T11:44:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:45:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.40,63753
2012-07-04T11:46:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:46:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56059
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56060
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58928
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58929
2012-07-04T11:46:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,63192
2012-07-04T11:46:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T11:46:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63193
2012-07-04T11:46:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63194
2012-07-04T11:46:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63195
2012-07-04T11:46:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63196
2012-07-04T11:46:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63197
2012-07-04T11:46:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63198
2012-07-04T11:46:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63199
2012-07-04T11:46:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63200
2012-07-04T11:46:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63201
2012-07-04T11:50:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:50:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:50:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:51:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:51:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63202
2012-07-04T11:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63203
2012-07-04T11:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63204
2012-07-04T11:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63205
2012-07-04T11:51:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60195
2012-07-04T11:51:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60196
2012-07-04T11:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60197
2012-07-04T11:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60198
2012-07-04T11:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60199
2012-07-04T11:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60200
2012-07-04T11:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60201
2012-07-04T11:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60202
2012-07-04T11:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60203
2012-07-04T11:51:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60204
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60205
2012-07-04T11:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60206
2012-07-04T11:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60207
2012-07-04T11:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60208
2012-07-04T11:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60209
2012-07-04T11:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60210
2012-07-04T11:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60211
2012-07-04T11:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60212
2012-07-04T11:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60213
2012-07-04T11:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60214
2012-07-04T11:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60215
2012-07-04T11:56:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T11:56:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T11:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60216
2012-07-04T11:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60217
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65403
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65404
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51110
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-04T11:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51111
2012-07-04T11:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51112
2012-07-04T11:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51113
2012-07-04T11:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51114
2012-07-04T11:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51115
2012-07-04T11:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51116
2012-07-04T11:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51117
2012-07-04T11:56:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51118
2012-07-04T11:56:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51119
2012-07-04T11:57:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T11:57:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T11:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51120
2012-07-04T11:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T11:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51121
2012-07-04T11:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51122
2012-07-04T11:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51123
2012-07-04T11:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51124
2012-07-04T11:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51125
2012-07-04T11:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51126
2012-07-04T11:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51127
2012-07-04T11:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51128
2012-07-04T11:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51129
2012-07-04T11:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51130
2012-07-04T11:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51131
2012-07-04T11:58:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:58:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T11:59:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,59166
2012-07-04T12:00:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,59171
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51132
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:01:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T12:01:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51133
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51134
2012-07-04T12:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51135
2012-07-04T12:01:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51136
2012-07-04T12:01:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51137
2012-07-04T12:01:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51138
2012-07-04T12:01:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51139
2012-07-04T12:01:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51140
2012-07-04T12:01:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51141
2012-07-04T12:01:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51142
2012-07-04T12:01:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51143
2012-07-04T12:01:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51144
2012-07-04T12:01:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51145
2012-07-04T12:04:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:04:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:05:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:05:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,56020
2012-07-04T12:05:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:06:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,56024
2012-07-04T12:06:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T12:06:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51146
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51147
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,57054
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57055
2012-07-04T12:06:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59901
2012-07-04T12:06:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59902
2012-07-04T12:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59903
2012-07-04T12:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59904
2012-07-04T12:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59905
2012-07-04T12:06:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59906
2012-07-04T12:06:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59907
2012-07-04T12:06:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59908
2012-07-04T12:06:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59909
2012-07-04T12:06:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59910
2012-07-04T12:07:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:07:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:07:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:07:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62902
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62903
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62904
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55817
2012-07-04T12:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55818
2012-07-04T12:08:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56660
2012-07-04T12:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56661
2012-07-04T12:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56662
2012-07-04T12:08:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,57725
2012-07-04T12:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57726
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61998
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61999
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51298
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51299
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64307
2012-07-04T12:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64308
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59799
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59800
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57268
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57269
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54808
2012-07-04T12:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54809
2012-07-04T12:09:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.37,56517
2012-07-04T12:11:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:11:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:11:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T12:11:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T12:11:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:11:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54810
2012-07-04T12:11:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:11:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54811
2012-07-04T12:11:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54812
2012-07-04T12:11:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54813
2012-07-04T12:11:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54814
2012-07-04T12:11:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54815
2012-07-04T12:11:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54816
2012-07-04T12:11:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54817
2012-07-04T12:11:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54818
2012-07-04T12:11:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54819
2012-07-04T12:11:51-03:00,info,appl
listen,17,0.0.0.0,54820
2012-07-04T12:11:51-03:00,info,appl
listen,17,0.0.0.0,54821
2012-07-04T12:12:18-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T12:12:50-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T12:12:52-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:12:52-03:00,info,appl
listen,17,0.0.0.0,54822
2012-07-04T12:12:52-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T12:12:53-03:00,info,appl
listen,17,0.0.0.0,54823
2012-07-04T12:12:53-03:00,info,appl
listen,17,0.0.0.0,54824
2012-07-04T12:12:54-03:00,info,appl
listen,17,0.0.0.0,54825
2012-07-04T12:12:54-03:00,info,appl
listen,17,0.0.0.0,54826
2012-07-04T12:12:54-03:00,info,appl
listen,17,0.0.0.0,54827
2012-07-04T12:12:55-03:00,info,appl
listen,17,0.0.0.0,54828
2012-07-04T12:12:55-03:00,info,appl
listen,17,0.0.0.0,54829
2012-07-04T12:12:55-03:00,info,appl
listen,17,0.0.0.0,54830
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,54831
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,54832
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,54833
2012-07-04T12:12:56-03:00,info,appl
w,listen,17,0.0.0.0,56455
2012-07-04T12:12:56-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,56456
2012-07-04T12:12:56-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,56457
2012-07-04T12:12:56-03:00,info,appl
listen,17,0.0.0.0,56458
2012-07-04T12:12:57-03:00,info,appl
listen,17,0.0.0.0,56459
2012-07-04T12:12:57-03:00,info,appl
listen,17,0.0.0.0,56460
2012-07-04T12:12:58-03:00,info,appl
listen,17,0.0.0.0,56461
2012-07-04T12:12:58-03:00,info,appl
listen,17,0.0.0.0,56462
2012-07-04T12:12:59-03:00,info,appl
listen,17,0.0.0.0,56463
2012-07-04T12:12:59-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56464
2012-07-04T12:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56465
2012-07-04T12:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56466
2012-07-04T12:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56467
2012-07-04T12:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56468
2012-07-04T12:13:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54601
2012-07-04T12:13:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:13:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58887
2012-07-04T12:16:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:16:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58888
2012-07-04T12:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58889
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53264
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53265
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49668
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49669
2012-07-04T12:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49670
2012-07-04T12:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49671
2012-07-04T12:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49672
2012-07-04T12:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49673
2012-07-04T12:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49674
2012-07-04T12:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49675
2012-07-04T12:16:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49676
2012-07-04T12:16:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49677
2012-07-04T12:18:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:18:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:19:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T12:19:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:22:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:22:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49678
2012-07-04T12:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49679
2012-07-04T12:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49680
2012-07-04T12:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49681
2012-07-04T12:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49682
2012-07-04T12:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49683
2012-07-04T12:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49684
2012-07-04T12:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49685
2012-07-04T12:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49686
2012-07-04T12:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49687
2012-07-04T12:22:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49688
2012-07-04T12:22:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49689
2012-07-04T12:22:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:22:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T12:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49690
2012-07-04T12:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49691
2012-07-04T12:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49692
2012-07-04T12:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49693
2012-07-04T12:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49694
2012-07-04T12:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49695
2012-07-04T12:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49696
2012-07-04T12:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49697
2012-07-04T12:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49698
2012-07-04T12:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49699
2012-07-04T12:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49700
2012-07-04T12:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49701
2012-07-04T12:26:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:26:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:26:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:27:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:27:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:27:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49702
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49703
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62888
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:27:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62889
2012-07-04T12:27:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59674
2012-07-04T12:27:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59675
2012-07-04T12:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59676
2012-07-04T12:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59677
2012-07-04T12:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59678
2012-07-04T12:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59679
2012-07-04T12:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59680
2012-07-04T12:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59681
2012-07-04T12:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59682
2012-07-04T12:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59683
2012-07-04T12:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59684
2012-07-04T12:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59685
2012-07-04T12:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59686
2012-07-04T12:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59687
2012-07-04T12:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59688
2012-07-04T12:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59689
2012-07-04T12:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59690
2012-07-04T12:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59691
2012-07-04T12:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59692
2012-07-04T12:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59693
2012-07-04T12:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59694
2012-07-04T12:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59695
2012-07-04T12:32:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:32:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59696
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59697
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59698
2012-07-04T12:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59699
2012-07-04T12:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59700
2012-07-04T12:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59701
2012-07-04T12:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59702
2012-07-04T12:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59703
2012-07-04T12:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59704
2012-07-04T12:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59705
2012-07-04T12:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59706
2012-07-04T12:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59707
2012-07-04T12:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59708
2012-07-04T12:33:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:33:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:33:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:34:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59709
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59710
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49244
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49245
2012-07-04T12:37:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53573
2012-07-04T12:37:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53574
2012-07-04T12:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53575
2012-07-04T12:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53576
2012-07-04T12:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53577
2012-07-04T12:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53578
2012-07-04T12:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53579
2012-07-04T12:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53580
2012-07-04T12:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53581
2012-07-04T12:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53582
2012-07-04T12:37:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:37:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53583
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53584
2012-07-04T12:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53585
2012-07-04T12:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53586
2012-07-04T12:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53587
2012-07-04T12:38:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53588
2012-07-04T12:38:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53589
2012-07-04T12:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53590
2012-07-04T12:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53591
2012-07-04T12:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53592
2012-07-04T12:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53593
2012-07-04T12:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53594
2012-07-04T12:40:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:40:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:40:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:41:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53595
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:41:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53596
2012-07-04T12:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53597
2012-07-04T12:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53598
2012-07-04T12:41:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53599
2012-07-04T12:41:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53600
2012-07-04T12:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53601
2012-07-04T12:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53602
2012-07-04T12:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53603
2012-07-04T12:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53604
2012-07-04T12:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53605
2012-07-04T12:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53606
2012-07-04T12:41:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:41:30-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:41:30-03:00,info,appl
listen,17,0.0.0.0,53607
2012-07-04T12:41:30-03:00,info,appl
listen,17,0.0.0.0,53608
2012-07-04T12:41:30-03:00,info,appl
listen,17,0.0.0.0,53609
2012-07-04T12:41:31-03:00,info,appl
listen,17,0.0.0.0,53610
2012-07-04T12:41:31-03:00,info,appl
listen,17,0.0.0.0,53611
2012-07-04T12:41:32-03:00,info,appl
listen,17,0.0.0.0,53612
2012-07-04T12:41:32-03:00,info,appl
listen,17,0.0.0.0,53613
2012-07-04T12:41:33-03:00,info,appl
listen,17,0.0.0.0,53614
2012-07-04T12:41:33-03:00,info,appl
listen,17,0.0.0.0,53615
2012-07-04T12:41:33-03:00,info,appl
listen,17,0.0.0.0,53616
2012-07-04T12:41:33-03:00,info,appl
listen,17,0.0.0.0,53617
2012-07-04T12:41:33-03:00,info,appl
listen,17,0.0.0.0,53618
2012-07-04T12:41:37-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:41:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:41:37-03:00,info,appl
listen,17,0.0.0.0,53619
2012-07-04T12:41:38-03:00,info,appl
listen,17,0.0.0.0,53620
2012-07-04T12:41:38-03:00,info,appl
listen,17,0.0.0.0,53621
2012-07-04T12:41:39-03:00,info,appl
listen,17,0.0.0.0,53622
2012-07-04T12:41:39-03:00,info,appl
listen,17,0.0.0.0,53623
2012-07-04T12:41:39-03:00,info,appl
listen,17,0.0.0.0,53624
2012-07-04T12:41:40-03:00,info,appl
listen,17,0.0.0.0,53625
2012-07-04T12:41:40-03:00,info,appl
listen,17,0.0.0.0,53626
2012-07-04T12:41:40-03:00,info,appl
listen,17,0.0.0.0,53627
2012-07-04T12:41:41-03:00,info,appl
listen,17,0.0.0.0,53628
2012-07-04T12:41:41-03:00,info,appl
listen,17,0.0.0.0,53629
2012-07-04T12:41:41-03:00,info,appl
listen,17,0.0.0.0,53630
2012-07-04T12:41:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:41:41-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T12:41:41-03:00,info,appl
listen,17,0.0.0.0,53631
2012-07-04T12:41:41-03:00,info,appl
listen,17,0.0.0.0,53632
2012-07-04T12:41:42-03:00,info,appl
listen,17,0.0.0.0,53633
2012-07-04T12:41:42-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T12:41:42-03:00,info,appl
listen,17,0.0.0.0,53634
2012-07-04T12:41:43-03:00,info,appl
listen,17,0.0.0.0,53635
2012-07-04T12:41:43-03:00,info,appl
listen,17,0.0.0.0,53636
2012-07-04T12:41:44-03:00,info,appl
listen,17,0.0.0.0,53637
2012-07-04T12:41:44-03:00,info,appl
listen,17,0.0.0.0,53638
2012-07-04T12:41:44-03:00,info,appl
listen,17,0.0.0.0,53639
2012-07-04T12:41:44-03:00,info,appl
listen,17,0.0.0.0,53640
2012-07-04T12:41:45-03:00,info,appl
listen,17,0.0.0.0,53641
2012-07-04T12:41:45-03:00,info,appl
listen,17,0.0.0.0,53642
2012-07-04T12:41:45-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:41:45-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:41:45-03:00,info,appl
listen,17,0.0.0.0,53643
2012-07-04T12:41:46-03:00,info,appl
listen,17,0.0.0.0,53644
2012-07-04T12:41:46-03:00,info,appl
listen,17,0.0.0.0,53645
2012-07-04T12:41:47-03:00,info,appl
listen,17,0.0.0.0,53646
2012-07-04T12:41:47-03:00,info,appl
listen,17,0.0.0.0,53647
2012-07-04T12:41:47-03:00,info,appl
listen,17,0.0.0.0,53648
2012-07-04T12:41:48-03:00,info,appl
listen,17,0.0.0.0,53649
2012-07-04T12:41:48-03:00,info,appl
listen,17,0.0.0.0,53650
2012-07-04T12:41:48-03:00,info,appl
listen,17,0.0.0.0,53651
2012-07-04T12:41:49-03:00,info,appl
listen,17,0.0.0.0,53652
2012-07-04T12:41:49-03:00,info,appl
listen,17,0.0.0.0,53653
2012-07-04T12:41:49-03:00,info,appl
listen,17,0.0.0.0,53654
2012-07-04T12:41:53-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:41:53-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:41:53-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53655
2012-07-04T12:41:53-03:00,info,appl
listen,17,0.0.0.0,53656
2012-07-04T12:41:54-03:00,info,appl
listen,17,0.0.0.0,53657
2012-07-04T12:41:54-03:00,info,appl
listen,17,0.0.0.0,53658
2012-07-04T12:41:55-03:00,info,appl
listen,17,0.0.0.0,53659
2012-07-04T12:41:55-03:00,info,appl
listen,17,0.0.0.0,53660
2012-07-04T12:41:55-03:00,info,appl
listen,17,0.0.0.0,53661
2012-07-04T12:41:56-03:00,info,appl
listen,17,0.0.0.0,53662
2012-07-04T12:41:56-03:00,info,appl
listen,17,0.0.0.0,53663
2012-07-04T12:41:56-03:00,info,appl
listen,17,0.0.0.0,53664
2012-07-04T12:41:56-03:00,info,appl
listen,17,0.0.0.0,53665
2012-07-04T12:41:57-03:00,info,appl
listen,17,0.0.0.0,53666
2012-07-04T12:42:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:01-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:01-03:00,info,appl
listen,17,0.0.0.0,53667
2012-07-04T12:42:01-03:00,info,appl
listen,17,0.0.0.0,53668
2012-07-04T12:42:01-03:00,info,appl
listen,17,0.0.0.0,53669
2012-07-04T12:42:02-03:00,info,appl
listen,17,0.0.0.0,53670
2012-07-04T12:42:02-03:00,info,appl
send,17,10.101.0.11,389
2012-07-04T12:42:02-03:00,info,appl
listen,17,0.0.0.0,53671
2012-07-04T12:42:03-03:00,info,appl
listen,17,0.0.0.0,53672
2012-07-04T12:42:03-03:00,info,appl
listen,17,0.0.0.0,53673
2012-07-04T12:42:03-03:00,info,appl
listen,17,0.0.0.0,53674
2012-07-04T12:42:04-03:00,info,appl
listen,17,0.0.0.0,53675
2012-07-04T12:42:04-03:00,info,appl
listen,17,0.0.0.0,53676
2012-07-04T12:42:04-03:00,info,appl
listen,17,0.0.0.0,53677
2012-07-04T12:42:04-03:00,info,appl
listen,17,0.0.0.0,53678
2012-07-04T12:42:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:08-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:08-03:00,info,appl
listen,17,0.0.0.0,53679
2012-07-04T12:42:08-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53680
2012-07-04T12:42:09-03:00,info,appl
listen,17,0.0.0.0,53681
2012-07-04T12:42:09-03:00,info,appl
listen,17,0.0.0.0,53682
2012-07-04T12:42:10-03:00,info,appl
listen,17,0.0.0.0,53683
2012-07-04T12:42:10-03:00,info,appl
listen,17,0.0.0.0,53684
2012-07-04T12:42:11-03:00,info,appl
listen,17,0.0.0.0,53685
2012-07-04T12:42:11-03:00,info,appl
listen,17,0.0.0.0,53686
2012-07-04T12:42:11-03:00,info,appl
listen,17,0.0.0.0,53687
2012-07-04T12:42:11-03:00,info,appl
listen,17,0.0.0.0,53688
2012-07-04T12:42:12-03:00,info,appl
listen,17,0.0.0.0,53689
2012-07-04T12:42:12-03:00,info,appl
listen,17,0.0.0.0,53690
2012-07-04T12:42:12-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:12-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:12-03:00,info,appl
listen,17,0.0.0.0,53691
2012-07-04T12:42:13-03:00,info,appl
listen,17,0.0.0.0,53692
2012-07-04T12:42:13-03:00,info,appl
listen,17,0.0.0.0,53693
2012-07-04T12:42:14-03:00,info,appl
listen,17,0.0.0.0,53694
2012-07-04T12:42:14-03:00,info,appl
listen,17,0.0.0.0,53695
2012-07-04T12:42:14-03:00,info,appl
listen,17,0.0.0.0,53696
2012-07-04T12:42:15-03:00,info,appl
listen,17,0.0.0.0,53697
2012-07-04T12:42:15-03:00,info,appl
listen,17,0.0.0.0,53698
2012-07-04T12:42:15-03:00,info,appl
listen,17,0.0.0.0,53699
2012-07-04T12:42:16-03:00,info,appl
listen,17,0.0.0.0,53700
2012-07-04T12:42:16-03:00,info,appl
listen,17,0.0.0.0,53701
2012-07-04T12:42:16-03:00,info,appl
listen,17,0.0.0.0,53702
2012-07-04T12:42:16-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:16-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:16-03:00,info,appl
listen,17,0.0.0.0,53703
2012-07-04T12:42:16-03:00,info,appl
listen,17,0.0.0.0,53704
2012-07-04T12:42:17-03:00,info,appl
listen,17,0.0.0.0,53705
2012-07-04T12:42:17-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53706
2012-07-04T12:42:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53707
2012-07-04T12:42:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53708
2012-07-04T12:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53709
2012-07-04T12:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53710
2012-07-04T12:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53711
2012-07-04T12:42:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53712
2012-07-04T12:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53713
2012-07-04T12:42:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53714
2012-07-04T12:42:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:42:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53715
2012-07-04T12:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53716
2012-07-04T12:42:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53717
2012-07-04T12:42:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T12:42:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53718
2012-07-04T12:42:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53719
2012-07-04T12:42:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53720
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53721
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53722
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53723
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53724
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53725
2012-07-04T12:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53726
2012-07-04T12:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53727
2012-07-04T12:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53728
2012-07-04T12:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53729
2012-07-04T12:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53730
2012-07-04T12:42:25-03:00,info,appl
listen,17,0.0.0.0,53731
2012-07-04T12:42:26-03:00,info,appl
listen,17,0.0.0.0,53732
2012-07-04T12:42:26-03:00,info,appl
listen,17,0.0.0.0,53733
2012-07-04T12:42:26-03:00,info,appl
listen,17,0.0.0.0,53734
2012-07-04T12:42:27-03:00,info,appl
listen,17,0.0.0.0,53735
2012-07-04T12:42:27-03:00,info,appl
listen,17,0.0.0.0,53736
2012-07-04T12:42:27-03:00,info,appl
listen,17,0.0.0.0,53737
2012-07-04T12:42:27-03:00,info,appl
listen,17,0.0.0.0,53738
2012-07-04T12:42:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:31-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:31-03:00,info,appl
listen,17,0.0.0.0,53739
2012-07-04T12:42:31-03:00,info,appl
listen,17,0.0.0.0,53740
2012-07-04T12:42:32-03:00,info,appl
listen,17,0.0.0.0,53741
2012-07-04T12:42:32-03:00,info,appl
listen,17,0.0.0.0,53742
2012-07-04T12:42:33-03:00,info,appl
listen,17,0.0.0.0,53743
2012-07-04T12:42:33-03:00,info,appl
listen,17,0.0.0.0,53744
2012-07-04T12:42:34-03:00,info,appl
listen,17,0.0.0.0,53745
2012-07-04T12:42:34-03:00,info,appl
listen,17,0.0.0.0,53746
2012-07-04T12:42:34-03:00,info,appl
listen,17,0.0.0.0,53747
2012-07-04T12:42:34-03:00,info,appl
listen,17,0.0.0.0,53748
2012-07-04T12:42:35-03:00,info,appl
listen,17,0.0.0.0,53749
2012-07-04T12:42:35-03:00,info,appl
listen,17,0.0.0.0,53750
2012-07-04T12:42:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:39-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:39-03:00,info,appl
listen,17,0.0.0.0,53751
2012-07-04T12:42:39-03:00,info,appl
listen,17,0.0.0.0,53752
2012-07-04T12:42:40-03:00,info,appl
listen,17,0.0.0.0,53753
2012-07-04T12:42:40-03:00,info,appl
listen,17,0.0.0.0,53754
2012-07-04T12:42:41-03:00,info,appl
listen,17,0.0.0.0,53755
2012-07-04T12:42:41-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53756
2012-07-04T12:42:42-03:00,info,appl
listen,17,0.0.0.0,53757
2012-07-04T12:42:42-03:00,info,appl
send,17,10.1.0.198,389
2012-07-04T12:42:42-03:00,info,appl
listen,17,0.0.0.0,53758
2012-07-04T12:42:42-03:00,info,appl
listen,17,0.0.0.0,53759
2012-07-04T12:42:43-03:00,info,appl
listen,17,0.0.0.0,53760
2012-07-04T12:42:43-03:00,info,appl
listen,17,0.0.0.0,53761
2012-07-04T12:42:43-03:00,info,appl
listen,17,0.0.0.0,53762
2012-07-04T12:42:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:47-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:47-03:00,info,appl
listen,17,0.0.0.0,53763
2012-07-04T12:42:47-03:00,info,appl
listen,17,0.0.0.0,53764
2012-07-04T12:42:47-03:00,info,appl
listen,17,0.0.0.0,53765
2012-07-04T12:42:48-03:00,info,appl
listen,17,0.0.0.0,53766
2012-07-04T12:42:48-03:00,info,appl
listen,17,0.0.0.0,53767
2012-07-04T12:42:49-03:00,info,appl
listen,17,0.0.0.0,53768
2012-07-04T12:42:49-03:00,info,appl
listen,17,0.0.0.0,53769
2012-07-04T12:42:50-03:00,info,appl
listen,17,0.0.0.0,53770
2012-07-04T12:42:50-03:00,info,appl
listen,17,0.0.0.0,53771
2012-07-04T12:42:50-03:00,info,appl
listen,17,0.0.0.0,53772
2012-07-04T12:42:50-03:00,info,appl
listen,17,0.0.0.0,53773
2012-07-04T12:42:51-03:00,info,appl
listen,17,0.0.0.0,53774
2012-07-04T12:42:55-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:42:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:42:55-03:00,info,appl
listen,17,0.0.0.0,53775
2012-07-04T12:42:55-03:00,info,appl
listen,17,0.0.0.0,53776
2012-07-04T12:42:55-03:00,info,appl
listen,17,0.0.0.0,53777
2012-07-04T12:42:56-03:00,info,appl
listen,17,0.0.0.0,53778
2012-07-04T12:42:56-03:00,info,appl
listen,17,0.0.0.0,53779
2012-07-04T12:42:56-03:00,info,appl
listen,17,0.0.0.0,53780
2012-07-04T12:42:57-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53781
2012-07-04T12:42:57-03:00,info,appl
listen,17,0.0.0.0,53782
2012-07-04T12:42:57-03:00,info,appl
listen,17,0.0.0.0,53783
2012-07-04T12:42:58-03:00,info,appl
listen,17,0.0.0.0,53784
2012-07-04T12:42:58-03:00,info,appl
listen,17,0.0.0.0,53785
2012-07-04T12:42:58-03:00,info,appl
listen,17,0.0.0.0,53786
2012-07-04T12:43:02-03:00,info,appl
listen,17,0.0.0.0,53787
2012-07-04T12:43:02-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T12:43:02-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T12:43:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:43:02-03:00,info,appl
listen,17,0.0.0.0,53788
2012-07-04T12:43:02-03:00,info,appl
listen,17,0.0.0.0,53789
2012-07-04T12:43:03-03:00,info,appl
listen,17,0.0.0.0,53790
2012-07-04T12:43:03-03:00,info,appl
listen,17,0.0.0.0,53791
2012-07-04T12:43:04-03:00,info,appl
listen,17,0.0.0.0,53792
2012-07-04T12:43:04-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:43:04-03:00,info,appl
listen,17,0.0.0.0,53793
2012-07-04T12:43:04-03:00,info,appl
listen,17,0.0.0.0,53794
2012-07-04T12:43:04-03:00,info,appl
listen,17,0.0.0.0,53795
2012-07-04T12:43:04-03:00,info,appl
listen,17,0.0.0.0,53796
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53797
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53798
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53799
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53800
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53801
2012-07-04T12:43:05-03:00,info,appl
listen,17,0.0.0.0,53802
2012-07-04T12:43:06-03:00,info,appl
listen,17,0.0.0.0,53803
2012-07-04T12:43:06-03:00,info,appl
listen,17,0.0.0.0,53804
2012-07-04T12:43:06-03:00,info,appl
listen,17,0.0.0.0,53805
2012-07-04T12:43:06-03:00,info,appl
listen,17,0.0.0.0,53806
2012-07-04T12:43:07-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53807
2012-07-04T12:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53808
2012-07-04T12:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53809
2012-07-04T12:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53810
2012-07-04T12:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53811
2012-07-04T12:43:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,64208
2012-07-04T12:44:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,64213
2012-07-04T12:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:47:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:47:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:47:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53812
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53813
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62123
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62124
2012-07-04T12:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51054
2012-07-04T12:47:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:47:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51055
2012-07-04T12:47:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51056
2012-07-04T12:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51057
2012-07-04T12:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51058
2012-07-04T12:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51059
2012-07-04T12:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51060
2012-07-04T12:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51061
2012-07-04T12:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51062
2012-07-04T12:47:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51063
2012-07-04T12:47:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:48:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T12:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,51956
2012-07-04T12:51:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,51961
2012-07-04T12:52:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:52:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61057
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61058
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61059
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T12:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55824
2012-07-04T12:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55825
2012-07-04T12:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55826
2012-07-04T12:52:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58552
2012-07-04T12:52:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58553
2012-07-04T12:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58554
2012-07-04T12:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58555
2012-07-04T12:52:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:52:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58556
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58557
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58558
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58559
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58560
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58561
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49181
2012-07-04T12:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49182
2012-07-04T12:52:38-03:00,info,appl
listen,17,0.0.0.0,49183
2012-07-04T12:52:38-03:00,info,appl
listen,17,0.0.0.0,49184
2012-07-04T12:52:38-03:00,info,appl
listen,17,0.0.0.0,49185
2012-07-04T12:52:38-03:00,info,appl
w,listen,17,0.0.0.0,62087
2012-07-04T12:52:38-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T12:52:38-03:00,info,appl
listen,17,0.0.0.0,62088
2012-07-04T12:52:38-03:00,info,appl
listen,17,0.0.0.0,62089
2012-07-04T12:52:39-03:00,info,appl
listen,17,0.0.0.0,62090
2012-07-04T12:52:39-03:00,info,appl
listen,17,0.0.0.0,62091
2012-07-04T12:52:39-03:00,info,appl
listen,17,0.0.0.0,62092
2012-07-04T12:52:40-03:00,info,appl
listen,17,0.0.0.0,62093
2012-07-04T12:52:40-03:00,info,appl
listen,17,0.0.0.0,62094
2012-07-04T12:52:40-03:00,info,appl
listen,17,0.0.0.0,62095
2012-07-04T12:52:42-03:00,info,appl
w,listen,17,0.0.0.0,57547
2012-07-04T12:52:42-03:00,info,appl
w,listen,17,0.0.0.0,63263
2012-07-04T12:52:42-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T12:52:42-03:00,info,appl
w,listen,17,0.0.0.0,62966
2012-07-04T12:52:42-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T12:54:02-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-04T12:54:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T12:54:02-03:00,info,appl
listen,17,0.0.0.0,62967
2012-07-04T12:54:02-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T12:54:03-03:00,info,appl
listen,17,0.0.0.0,62968
2012-07-04T12:54:03-03:00,info,appl
listen,17,0.0.0.0,62969
2012-07-04T12:54:04-03:00,info,appl
listen,17,0.0.0.0,62970
2012-07-04T12:54:04-03:00,info,appl
listen,17,0.0.0.0,62971
2012-07-04T12:54:04-03:00,info,appl
listen,17,0.0.0.0,62972
2012-07-04T12:54:05-03:00,info,appl
listen,17,0.0.0.0,62973
2012-07-04T12:54:05-03:00,info,appl
listen,17,0.0.0.0,62974
2012-07-04T12:54:05-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62975
2012-07-04T12:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62976
2012-07-04T12:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62977
2012-07-04T12:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62978
2012-07-04T12:54:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T12:54:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:55:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:55:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T12:57:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T12:57:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T12:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62979
2012-07-04T12:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T12:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62980
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57036
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57037
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60427
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T12:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60428
2012-07-04T12:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60429
2012-07-04T12:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60430
2012-07-04T12:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60431
2012-07-04T12:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60432
2012-07-04T12:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60433
2012-07-04T12:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60434
2012-07-04T12:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60435
2012-07-04T12:57:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60436
2012-07-04T12:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T12:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60437
2012-07-04T12:58:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T12:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60438
2012-07-04T12:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60439
2012-07-04T12:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60440
2012-07-04T12:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60441
2012-07-04T12:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60442
2012-07-04T12:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60443
2012-07-04T12:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60444
2012-07-04T12:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60445
2012-07-04T12:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60446
2012-07-04T12:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60447
2012-07-04T12:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60448
2012-07-04T12:58:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52796
2012-07-04T12:58:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52797
2012-07-04T12:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52798
2012-07-04T12:58:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53940
2012-07-04T12:58:27-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T12:58:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60892
2012-07-04T12:58:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T12:58:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58982
2012-07-04T12:59:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,50762
2012-07-04T13:00:30-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-04T13:00:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,49387
2012-07-04T13:01:33-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T13:01:33-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-04T13:01:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:01:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:03:09-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-04T13:02:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63143
2012-07-04T13:02:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T13:02:58-03:00,info,appl
w,listen,17,0.0.0.0,57680
2012-07-04T13:02:58-03:00,info,appl
w,listen,17,0.0.0.0,60669
2012-07-04T13:02:58-03:00,info,appl
w,listen,17,0.0.0.0,53364
2012-07-04T13:02:58-03:00,info,appl
w,listen,17,0.0.0.0,51909
2012-07-04T13:02:58-03:00,info,appl
listen,17,0.0.0.0,51911
2012-07-04T13:02:58-03:00,info,appl
listen,17,0.0.0.0,51913
2012-07-04T13:02:58-03:00,info,appl
listen,17,0.0.0.0,51912
2012-07-04T13:02:58-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T13:02:58-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T13:02:58-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:02:58-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:02:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:02:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,500
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,4500
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,58672
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,65508
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,65509
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,65252
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,65253
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,65254
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,53348
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,53349
2012-07-04T13:02:59-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:02:59-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,53350
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,3702

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,3702
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,3702
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,53351
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,53352
2012-07-04T13:02:59-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,58479
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,::,52031
2012-07-04T13:02:59-03:00,info,appl
w,listen,17,0.0.0.0,50037
2012-07-04T13:02:59-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,50038
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,50039
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,50040
2012-07-04T13:02:59-03:00,info,appl
listen,17,0.0.0.0,50041
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,54884
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,62006
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,58777
2012-07-04T13:03:00-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:00-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:00-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,49157
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,62261
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,63265
2012-07-04T13:03:00-03:00,info,appl
listen,17,0.0.0.0,63266
2012-07-04T13:03:00-03:00,info,appl
listen,17,0.0.0.0,63267
2012-07-04T13:03:00-03:00,info,appl
listen,17,0.0.0.0,63268
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,56510
2012-07-04T13:03:00-03:00,info,appl
listen,17,0.0.0.0,56511
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,64197
2012-07-04T13:03:00-03:00,info,appl
listen,17,0.0.0.0,64198
2012-07-04T13:03:00-03:00,info,appl
w,listen,17,0.0.0.0,49976

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49977
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49978
2012-07-04T13:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-04T13:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-04T13:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-04T13:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50301
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50302
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50219
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50220
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50221
2012-07-04T13:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50222
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,63907
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,63907
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54431
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54432
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54433
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54434
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54435
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54436
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54437
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54438
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54439
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54440
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54441
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61718
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55666
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55667
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55668
2012-07-04T13:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355

2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,::,54502
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,51736
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,49849
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,58237
2012-07-04T13:03:01-03:00,info,appl
listen,17,0.0.0.0,58238
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,53436
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,58171
2012-07-04T13:03:01-03:00,info,appl
listen,17,0.0.0.0,58172
2012-07-04T13:03:01-03:00,info,appl
listen,17,0.0.0.0,58173
2012-07-04T13:03:01-03:00,info,appl
w,listen,17,0.0.0.0,52346
2012-07-04T13:03:01-03:00,info,appl
listen,17,0.0.0.0,52347
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,58388
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,::,52233
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,52612
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,::,3702
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,::,3702
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,57995
2012-07-04T13:03:02-03:00,info,appl
listen,17,0.0.0.0,57996
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,58239
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,51281
2012-07-04T13:03:02-03:00,info,appl
listen,17,0.0.0.0,51282
2012-07-04T13:03:02-03:00,info,appl
listen,17,0.0.0.0,51283
2012-07-04T13:03:02-03:00,info,appl
listen,17,0.0.0.0,51284
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,56858
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,51368
2012-07-04T13:03:02-03:00,info,appl
listen,17,0.0.0.0,51369
2012-07-04T13:03:02-03:00,info,appl
w,listen,17,0.0.0.0,55868

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55869
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62864
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62865
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62866
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54093
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55640
2012-07-04T13:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55641
2012-07-04T13:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,55041
2012-07-04T13:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,55041
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63653
2012-07-04T13:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51251
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51252
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53467
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53468
2012-07-04T13:03:06-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63597
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63598
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50197
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49634
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57447
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62690
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60559
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55750
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55751
2012-07-04T13:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55752
2012-07-04T13:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55753
2012-07-04T13:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55754
2012-07-04T13:03:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63621
2012-07-04T13:03:07-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63622
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63623
2012-07-04T13:03:09-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63624
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,52933
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,52933
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61271
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61272
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61273
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61274
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61275
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61276
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61277
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61278
2012-07-04T13:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61279
2012-07-04T13:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61280
2012-07-04T13:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61281

2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,61282
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,61283
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,61284
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,61285
2012-07-04T13:03:09-03:00,info,appl
w,listen,17,0.0.0.0,53798
2012-07-04T13:03:09-03:00,info,appl
w,listen,17,0.0.0.0,54280
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,54281
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,54282
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,54283
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,54284
2012-07-04T13:03:09-03:00,info,appl
,allow,listen,6,0.0.0.0,5800
2012-07-04T13:03:09-03:00,info,appl
listen,17,0.0.0.0,54285
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54286
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54287
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54288
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54289
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54290
2012-07-04T13:03:10-03:00,info,appl
listen,17,0.0.0.0,54291
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54292
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54293
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54294
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54295
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54296
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54297
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54298
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,54299
2012-07-04T13:03:11-03:00,info,appl
w,listen,17,0.0.0.0,64109
2012-07-04T13:03:11-03:00,info,appl
w,listen,17,::,53522
2012-07-04T13:03:11-03:00,info,appl
w,listen,17,0.0.0.0,51378
2012-07-04T13:03:11-03:00,info,appl
listen,17,0.0.0.0,51379

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\UltraVNC\winvnc.exe
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:03:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51380
2012-07-04T13:03:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51381
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52046
2012-07-04T13:03:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52047
2012-07-04T13:03:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:03:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:03:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:03:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52048
2012-07-04T13:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52049
2012-07-04T13:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52050
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52051
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52052
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52053
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52054
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52055
2012-07-04T13:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52056
2012-07-04T13:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52057
2012-07-04T13:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52058
2012-07-04T13:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52059
2012-07-04T13:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52060
2012-07-04T13:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52061
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52062

2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.198,389
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52063
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52064
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52065
2012-07-04T13:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52066
2012-07-04T13:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52067
2012-07-04T13:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52068
2012-07-04T13:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52069
2012-07-04T13:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52070
2012-07-04T13:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52071
2012-07-04T13:03:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,51606
2012-07-04T13:03:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52072
2012-07-04T13:03:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52073
2012-07-04T13:03:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52074
2012-07-04T13:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52075
2012-07-04T13:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52076
2012-07-04T13:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52077
2012-07-04T13:03:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52078
2012-07-04T13:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52079
2012-07-04T13:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52080
2012-07-04T13:03:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52081
2012-07-04T13:03:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52082
2012-07-04T13:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49556
2012-07-04T13:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:03:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49557

2012-07-04T13:03:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:23-03:00,info,appl
listen,17,0.0.0.0,49558
2012-07-04T13:03:23-03:00,info,appl
listen,17,0.0.0.0,49559
2012-07-04T13:03:24-03:00,info,appl
listen,17,0.0.0.0,49560
2012-07-04T13:03:24-03:00,info,appl
listen,17,0.0.0.0,49561
2012-07-04T13:03:24-03:00,info,appl
listen,17,0.0.0.0,49562
2012-07-04T13:03:24-03:00,info,appl
listen,17,0.0.0.0,49563
2012-07-04T13:03:24-03:00,info,appl
listen,17,0.0.0.0,49564
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49565
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49566
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49567
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49568
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49569
2012-07-04T13:03:25-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T13:03:25-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:03:25-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:25-03:00,info,appl
listen,17,0.0.0.0,49570
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49571
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49572
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49573
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49574
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49575
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49576
2012-07-04T13:03:26-03:00,info,appl
listen,17,0.0.0.0,49577
2012-07-04T13:03:27-03:00,info,appl
listen,17,0.0.0.0,49578
2012-07-04T13:03:27-03:00,info,appl
listen,17,0.0.0.0,49579
2012-07-04T13:03:27-03:00,info,appl
listen,17,0.0.0.0,49580
2012-07-04T13:03:28-03:00,info,appl
listen,17,0.0.0.0,49581
2012-07-04T13:03:28-03:00,info,appl
listen,17,0.0.0.0,49582
2012-07-04T13:03:28-03:00,info,appl
listen,17,0.0.0.0,49583

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:03:28-03:00,info,appl
listen,17,0.0.0.0,49584
2012-07-04T13:03:29-03:00,info,appl
listen,17,0.0.0.0,49585
2012-07-04T13:03:29-03:00,info,appl
listen,17,0.0.0.0,49586
2012-07-04T13:03:29-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T13:03:29-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:29-03:00,info,appl
listen,17,0.0.0.0,49587
2012-07-04T13:03:30-03:00,info,appl
listen,17,0.0.0.0,49588
2012-07-04T13:03:30-03:00,info,appl
listen,17,0.0.0.0,49589
2012-07-04T13:03:31-03:00,info,appl
listen,17,0.0.0.0,49590
2012-07-04T13:03:31-03:00,info,appl
listen,17,0.0.0.0,49591
2012-07-04T13:03:31-03:00,info,appl
listen,17,0.0.0.0,49592
2012-07-04T13:03:32-03:00,info,appl
listen,17,0.0.0.0,49593
2012-07-04T13:03:32-03:00,info,appl
listen,17,0.0.0.0,49594
2012-07-04T13:03:32-03:00,info,appl
listen,17,0.0.0.0,49595
2012-07-04T13:03:32-03:00,info,appl
listen,17,0.0.0.0,49596
2012-07-04T13:03:32-03:00,info,appl
listen,17,0.0.0.0,49597
2012-07-04T13:03:33-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:03:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:33-03:00,info,appl
listen,17,0.0.0.0,49598
2012-07-04T13:03:33-03:00,info,appl
listen,17,0.0.0.0,49599
2012-07-04T13:03:34-03:00,info,appl
listen,17,0.0.0.0,49600
2012-07-04T13:03:34-03:00,info,appl
listen,17,0.0.0.0,49601
2012-07-04T13:03:35-03:00,info,appl
listen,17,0.0.0.0,49602
2012-07-04T13:03:35-03:00,info,appl
listen,17,0.0.0.0,49603
2012-07-04T13:03:35-03:00,info,appl
listen,17,0.0.0.0,49604
2012-07-04T13:03:36-03:00,info,appl
listen,17,0.0.0.0,49605
2012-07-04T13:03:36-03:00,info,appl
listen,17,0.0.0.0,49606
2012-07-04T13:03:36-03:00,info,appl
listen,17,0.0.0.0,49607
2012-07-04T13:03:36-03:00,info,appl
listen,17,0.0.0.0,49608

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:03:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:03:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49609
2012-07-04T13:03:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:03:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49610
2012-07-04T13:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49611
2012-07-04T13:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49612
2012-07-04T13:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49613
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49614
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49615
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49616
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49617
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49618
2012-07-04T13:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49619
2012-07-04T13:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49620
2012-07-04T13:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49621
2012-07-04T13:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49622
2012-07-04T13:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49623
2012-07-04T13:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49624
2012-07-04T13:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49625
2012-07-04T13:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49626
2012-07-04T13:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49627
2012-07-04T13:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49628
2012-07-04T13:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49629
2012-07-04T13:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49630
2012-07-04T13:03:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,60811
2012-07-04T13:03:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:03:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T13:03:49-03:00,info,appl
listen,17,0.0.0.0,49631
2012-07-04T13:03:49-03:00,info,appl
listen,17,0.0.0.0,49632
2012-07-04T13:03:50-03:00,info,appl
listen,17,0.0.0.0,49633
2012-07-04T13:03:50-03:00,info,appl
listen,17,0.0.0.0,49634
2012-07-04T13:03:50-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:50-03:00,info,appl
listen,17,0.0.0.0,49635
2012-07-04T13:03:50-03:00,info,appl
listen,17,0.0.0.0,49636
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49637
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49638
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49639
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49640
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49641
2012-07-04T13:03:51-03:00,info,appl
listen,17,0.0.0.0,49642
2012-07-04T13:03:52-03:00,info,appl
listen,17,0.0.0.0,49643
2012-07-04T13:03:52-03:00,info,appl
listen,17,0.0.0.0,49644
2012-07-04T13:03:52-03:00,info,appl
listen,17,0.0.0.0,49645
2012-07-04T13:03:52-03:00,info,appl
listen,17,0.0.0.0,49646
2012-07-04T13:03:52-03:00,info,appl
listen,17,0.0.0.0,49647
2012-07-04T13:03:53-03:00,info,appl
listen,17,0.0.0.0,49648
2012-07-04T13:03:53-03:00,info,appl
listen,17,0.0.0.0,49649
2012-07-04T13:03:53-03:00,info,appl
listen,17,0.0.0.0,49650
2012-07-04T13:03:53-03:00,info,appl
listen,17,0.0.0.0,49651
2012-07-04T13:03:53-03:00,info,appl
listen,17,0.0.0.0,49652
2012-07-04T13:03:56-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:03:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:56-03:00,info,appl
listen,17,0.0.0.0,49653
2012-07-04T13:03:56-03:00,info,appl
listen,17,0.0.0.0,49654
2012-07-04T13:03:57-03:00,info,appl
listen,17,0.0.0.0,49655
2012-07-04T13:03:57-03:00,info,appl
listen,17,0.0.0.0,49656

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:03:58-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:03:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:03:58-03:00,info,appl
listen,17,0.0.0.0,49657
2012-07-04T13:03:58-03:00,info,appl
listen,17,0.0.0.0,49658
2012-07-04T13:03:58-03:00,info,appl
listen,17,0.0.0.0,49659
2012-07-04T13:03:58-03:00,info,appl
listen,17,0.0.0.0,49660
2012-07-04T13:03:58-03:00,info,appl
listen,17,0.0.0.0,49661
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49662
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49663
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49664
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49665
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49666
2012-07-04T13:03:59-03:00,info,appl
listen,17,0.0.0.0,49667
2012-07-04T13:04:00-03:00,info,appl
listen,17,0.0.0.0,49668
2012-07-04T13:04:00-03:00,info,appl
listen,17,0.0.0.0,49669
2012-07-04T13:04:00-03:00,info,appl
send,17,10.1.0.197,389
2012-07-04T13:04:00-03:00,info,appl
listen,17,0.0.0.0,49670
2012-07-04T13:04:00-03:00,info,appl
listen,17,0.0.0.0,49671
2012-07-04T13:04:01-03:00,info,appl
listen,17,0.0.0.0,49672
2012-07-04T13:04:01-03:00,info,appl
listen,17,0.0.0.0,49673
2012-07-04T13:04:01-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T13:04:01-03:00,info,appl
listen,17,0.0.0.0,49674
2012-07-04T13:04:04-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:04-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:04-03:00,info,appl
listen,17,0.0.0.0,49675
2012-07-04T13:04:04-03:00,info,appl
listen,17,0.0.0.0,49676
2012-07-04T13:04:05-03:00,info,appl
listen,17,0.0.0.0,49677
2012-07-04T13:04:05-03:00,info,appl
listen,17,0.0.0.0,49678
2012-07-04T13:04:05-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:04:05-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:05-03:00,info,appl
listen,17,0.0.0.0,49679
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49680
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49681
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49682
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49683
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49684
2012-07-04T13:04:06-03:00,info,appl
listen,17,0.0.0.0,49685
2012-07-04T13:04:07-03:00,info,appl
listen,17,0.0.0.0,49686
2012-07-04T13:04:07-03:00,info,appl
listen,17,0.0.0.0,49687
2012-07-04T13:04:07-03:00,info,appl
listen,17,0.0.0.0,49688
2012-07-04T13:04:07-03:00,info,appl
listen,17,0.0.0.0,49689
2012-07-04T13:04:07-03:00,info,appl
listen,17,0.0.0.0,49690
2012-07-04T13:04:08-03:00,info,appl
listen,17,0.0.0.0,49691
2012-07-04T13:04:08-03:00,info,appl
listen,17,0.0.0.0,49692
2012-07-04T13:04:08-03:00,info,appl
listen,17,0.0.0.0,49693
2012-07-04T13:04:08-03:00,info,appl
listen,17,0.0.0.0,49694
2012-07-04T13:04:08-03:00,info,appl
listen,17,0.0.0.0,49695
2012-07-04T13:04:09-03:00,info,appl
listen,17,0.0.0.0,49696
2012-07-04T13:04:11-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:11-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:11-03:00,info,appl
listen,17,0.0.0.0,49697
2012-07-04T13:04:12-03:00,info,appl
listen,17,0.0.0.0,49698
2012-07-04T13:04:12-03:00,info,appl
listen,17,0.0.0.0,49699
2012-07-04T13:04:13-03:00,info,appl
listen,17,0.0.0.0,49700
2012-07-04T13:04:13-03:00,info,appl
listen,17,0.0.0.0,49701
2012-07-04T13:04:13-03:00,info,appl
listen,17,0.0.0.0,49702
2012-07-04T13:04:14-03:00,info,appl
listen,17,0.0.0.0,49703
2012-07-04T13:04:14-03:00,info,appl
listen,17,0.0.0.0,49704
2012-07-04T13:04:14-03:00,info,appl
listen,17,0.0.0.0,49705
2012-07-04T13:04:14-03:00,info,appl
listen,17,0.0.0.0,49706

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:14-03:00,info,appl
listen,17,0.0.0.0,49707
2012-07-04T13:04:15-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:04:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:15-03:00,info,appl
listen,17,0.0.0.0,49708
2012-07-04T13:04:15-03:00,info,appl
listen,17,0.0.0.0,49709
2012-07-04T13:04:16-03:00,info,appl
listen,17,0.0.0.0,49710
2012-07-04T13:04:16-03:00,info,appl
listen,17,0.0.0.0,49711
2012-07-04T13:04:17-03:00,info,appl
listen,17,0.0.0.0,49712
2012-07-04T13:04:17-03:00,info,appl
listen,17,0.0.0.0,49713
2012-07-04T13:04:17-03:00,info,appl
listen,17,0.0.0.0,49714
2012-07-04T13:04:17-03:00,info,appl
listen,17,0.0.0.0,49715
2012-07-04T13:04:18-03:00,info,appl
listen,17,0.0.0.0,49716
2012-07-04T13:04:18-03:00,info,appl
listen,17,0.0.0.0,49717
2012-07-04T13:04:18-03:00,info,appl
listen,17,0.0.0.0,49718
2012-07-04T13:04:19-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:19-03:00,info,appl
listen,17,0.0.0.0,49719
2012-07-04T13:04:20-03:00,info,appl
listen,17,0.0.0.0,49720
2012-07-04T13:04:20-03:00,info,appl
listen,17,0.0.0.0,49721
2012-07-04T13:04:20-03:00,info,appl
send,17,10.101.0.11,389
2012-07-04T13:04:21-03:00,info,appl
listen,17,0.0.0.0,49722
2012-07-04T13:04:21-03:00,info,appl
listen,17,0.0.0.0,49723
2012-07-04T13:04:21-03:00,info,appl
listen,17,0.0.0.0,49724
2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49725
2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49726
2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49727
2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49728
2012-07-04T13:04:22-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:04:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49729

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:22-03:00,info,appl
listen,17,0.0.0.0,49730
2012-07-04T13:04:23-03:00,info,appl
listen,17,0.0.0.0,49731
2012-07-04T13:04:23-03:00,info,appl
listen,17,0.0.0.0,49732
2012-07-04T13:04:24-03:00,info,appl
listen,17,0.0.0.0,49733
2012-07-04T13:04:24-03:00,info,appl
listen,17,0.0.0.0,49734
2012-07-04T13:04:25-03:00,info,appl
listen,17,0.0.0.0,49735
2012-07-04T13:04:25-03:00,info,appl
listen,17,0.0.0.0,49736
2012-07-04T13:04:25-03:00,info,appl
listen,17,0.0.0.0,49737
2012-07-04T13:04:25-03:00,info,appl
listen,17,0.0.0.0,49738
2012-07-04T13:04:25-03:00,info,appl
listen,17,0.0.0.0,49739
2012-07-04T13:04:26-03:00,info,appl
listen,17,0.0.0.0,49740
2012-07-04T13:04:27-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:27-03:00,info,appl
listen,17,0.0.0.0,49741
2012-07-04T13:04:27-03:00,info,appl
listen,17,0.0.0.0,49742
2012-07-04T13:04:28-03:00,info,appl
listen,17,0.0.0.0,49743
2012-07-04T13:04:28-03:00,info,appl
listen,17,0.0.0.0,49744
2012-07-04T13:04:29-03:00,info,appl
listen,17,0.0.0.0,49745
2012-07-04T13:04:29-03:00,info,appl
listen,17,0.0.0.0,49746
2012-07-04T13:04:29-03:00,info,appl
listen,17,0.0.0.0,49747
2012-07-04T13:04:29-03:00,info,appl
listen,17,0.0.0.0,49748
2012-07-04T13:04:30-03:00,info,appl
listen,17,0.0.0.0,49749
2012-07-04T13:04:30-03:00,info,appl
listen,17,0.0.0.0,49750
2012-07-04T13:04:30-03:00,info,appl
listen,17,0.0.0.0,49751
2012-07-04T13:04:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:31-03:00,info,appl
listen,17,0.0.0.0,49752
2012-07-04T13:04:31-03:00,info,appl
listen,17,0.0.0.0,49753
2012-07-04T13:04:32-03:00,info,appl
listen,17,0.0.0.0,49754
2012-07-04T13:04:32-03:00,info,appl
listen,17,0.0.0.0,49755
2012-07-04T13:04:33-03:00,info,appl
listen,17,0.0.0.0,49756

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:33-03:00,info,appl
listen,17,0.0.0.0,49757
2012-07-04T13:04:33-03:00,info,appl
listen,17,0.0.0.0,49758
2012-07-04T13:04:33-03:00,info,appl
listen,17,0.0.0.0,49759
2012-07-04T13:04:34-03:00,info,appl
listen,17,0.0.0.0,49760
2012-07-04T13:04:34-03:00,info,appl
listen,17,0.0.0.0,49761
2012-07-04T13:04:34-03:00,info,appl
listen,17,0.0.0.0,49762
2012-07-04T13:04:34-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:34-03:00,info,appl
listen,17,0.0.0.0,49763
2012-07-04T13:04:35-03:00,info,appl
listen,17,0.0.0.0,49764
2012-07-04T13:04:35-03:00,info,appl
listen,17,0.0.0.0,49765
2012-07-04T13:04:36-03:00,info,appl
listen,17,0.0.0.0,49766
2012-07-04T13:04:36-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:04:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:36-03:00,info,appl
listen,17,0.0.0.0,49767
2012-07-04T13:04:36-03:00,info,appl
listen,17,0.0.0.0,49768
2012-07-04T13:04:36-03:00,info,appl
listen,17,0.0.0.0,49769
2012-07-04T13:04:36-03:00,info,appl
listen,17,0.0.0.0,49770
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49771
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49772
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49773
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49774
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49775
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49776
2012-07-04T13:04:37-03:00,info,appl
listen,17,0.0.0.0,49777
2012-07-04T13:04:38-03:00,info,appl
listen,17,0.0.0.0,49778
2012-07-04T13:04:38-03:00,info,appl
listen,17,0.0.0.0,49779
2012-07-04T13:04:38-03:00,info,appl
listen,17,0.0.0.0,49780
2012-07-04T13:04:38-03:00,info,appl
listen,17,0.0.0.0,49781
2012-07-04T13:04:39-03:00,info,appl
listen,17,0.0.0.0,49782

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:39-03:00,info,appl
listen,17,0.0.0.0,49783
2012-07-04T13:04:39-03:00,info,appl
listen,17,0.0.0.0,49784
2012-07-04T13:04:42-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:04:42-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:42-03:00,info,appl
listen,17,0.0.0.0,49785
2012-07-04T13:04:42-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T13:04:42-03:00,info,appl
listen,17,0.0.0.0,49786
2012-07-04T13:04:43-03:00,info,appl
listen,17,0.0.0.0,49787
2012-07-04T13:04:43-03:00,info,appl
listen,17,0.0.0.0,49788
2012-07-04T13:04:43-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-04T13:04:43-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:04:43-03:00,info,appl
listen,17,0.0.0.0,49789
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49790
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49791
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49792
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49793
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49794
2012-07-04T13:04:44-03:00,info,appl
listen,17,0.0.0.0,49795
2012-07-04T13:04:45-03:00,info,appl
listen,17,0.0.0.0,49796
2012-07-04T13:04:45-03:00,info,appl
listen,17,0.0.0.0,49797
2012-07-04T13:04:45-03:00,info,appl
listen,17,0.0.0.0,49798
2012-07-04T13:04:45-03:00,info,appl
listen,17,0.0.0.0,49799
2012-07-04T13:04:45-03:00,info,appl
listen,17,0.0.0.0,49800
2012-07-04T13:04:46-03:00,info,appl
listen,17,0.0.0.0,49801
2012-07-04T13:04:46-03:00,info,appl
listen,17,0.0.0.0,49802
2012-07-04T13:04:46-03:00,info,appl
listen,17,0.0.0.0,49803
2012-07-04T13:04:46-03:00,info,appl
listen,17,0.0.0.0,49804
2012-07-04T13:04:46-03:00,info,appl
listen,17,0.0.0.0,49805
2012-07-04T13:04:47-03:00,info,appl
listen,17,0.0.0.0,49806
2012-07-04T13:04:50-03:00,info,appl
connect out,6,10.10.0.11,1025

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:04:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:04:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49807
2012-07-04T13:04:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49808
2012-07-04T13:04:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49809
2012-07-04T13:04:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49810
2012-07-04T13:04:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49811
2012-07-04T13:04:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49812
2012-07-04T13:04:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49813
2012-07-04T13:04:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49814
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49815
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49816
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49817
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49818
2012-07-04T13:04:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49819
2012-07-04T13:04:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49820
2012-07-04T13:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49821
2012-07-04T13:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49822
2012-07-04T13:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49823
2012-07-04T13:04:57-03:00,info,appl control,C:\Windows\System32\mstsc.exe,allow,
connect out,6,10.10.10.10,3389
2012-07-04T13:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49824
2012-07-04T13:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49825
2012-07-04T13:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49826
2012-07-04T13:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49827
2012-07-04T13:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49828
2012-07-04T13:04:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:04:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T13:05:01-03:00,info,appl
listen,17,0.0.0.0,49829
2012-07-04T13:05:01-03:00,info,appl
listen,17,0.0.0.0,49830
2012-07-04T13:05:02-03:00,info,appl
listen,17,0.0.0.0,49831
2012-07-04T13:05:02-03:00,info,appl
listen,17,0.0.0.0,49832
2012-07-04T13:05:02-03:00,info,appl
send,17,10.108.0.153,389
2012-07-04T13:05:02-03:00,info,appl
listen,17,0.0.0.0,49833
2012-07-04T13:05:03-03:00,info,appl
listen,17,0.0.0.0,49834
2012-07-04T13:05:03-03:00,info,appl
listen,17,0.0.0.0,49835
2012-07-04T13:05:03-03:00,info,appl
listen,17,0.0.0.0,49836
2012-07-04T13:05:03-03:00,info,appl
listen,17,0.0.0.0,49837
2012-07-04T13:05:04-03:00,info,appl
listen,17,0.0.0.0,49838
2012-07-04T13:05:04-03:00,info,appl
listen,17,0.0.0.0,49839
2012-07-04T13:05:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:05:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:05:08-03:00,info,appl
listen,17,0.0.0.0,49840
2012-07-04T13:05:09-03:00,info,appl
listen,17,0.0.0.0,49841
2012-07-04T13:05:09-03:00,info,appl
listen,17,0.0.0.0,49842
2012-07-04T13:05:10-03:00,info,appl
listen,17,0.0.0.0,49843
2012-07-04T13:05:10-03:00,info,appl
listen,17,0.0.0.0,49844
2012-07-04T13:05:10-03:00,info,appl
connect out,6,10.10.0.25,80
2012-07-04T13:05:10-03:00,info,appl
listen,17,0.0.0.0,49845
2012-07-04T13:05:11-03:00,info,appl
listen,17,0.0.0.0,49846
2012-07-04T13:05:11-03:00,info,appl
listen,17,0.0.0.0,49847
2012-07-04T13:05:11-03:00,info,appl
listen,17,0.0.0.0,49848
2012-07-04T13:05:11-03:00,info,appl
listen,17,0.0.0.0,49849
2012-07-04T13:05:11-03:00,info,appl
listen,17,0.0.0.0,49850
2012-07-04T13:05:14-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-04T13:05:14-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-04T13:05:21-03:00,info,appl
w,listen,17,0.0.0.0,54195
2012-07-04T13:05:21-03:00,info,appl
w,send,17,10.10.0.12,53

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\mstsc.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:05:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,201.6.5.24,80
2012-07-04T13:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60962
2012-07-04T13:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,64.210.100.41,80
2012-07-04T13:05:30-03:00,info,appl control,C:\Windows\System32\mstsc.exe,allow,
connect out,6,10.10.10.10,3389
2012-07-04T13:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59739
2012-07-04T13:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.155,80
2012-07-04T13:05:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.155,443
2012-07-04T13:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59740
2012-07-04T13:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59741
2012-07-04T13:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59742
2012-07-04T13:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59743
2012-07-04T13:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59744
2012-07-04T13:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59745
2012-07-04T13:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59746
2012-07-04T13:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59747
2012-07-04T13:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59748
2012-07-04T13:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59749
2012-07-04T13:05:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59750
2012-07-04T13:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.184.155,443
2012-07-04T13:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,59751
2012-07-04T13:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,59753
2012-07-04T13:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-04T13:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-04T13:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-04T13:06:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.43,2869
2012-07-04T13:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51307
2012-07-04T13:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,206.33.52.254,80

2012-07-04T13:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51308
2012-07-04T13:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:06:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51309
2012-07-04T13:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51310
2012-07-04T13:06:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51311
2012-07-04T13:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51312
2012-07-04T13:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51313
2012-07-04T13:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51314
2012-07-04T13:06:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51315
2012-07-04T13:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51316
2012-07-04T13:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51317
2012-07-04T13:06:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51318
2012-07-04T13:07:08-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56142
2012-07-04T13:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:07:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,206.33.52.254,80
2012-07-04T13:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56143
2012-07-04T13:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56144
2012-07-04T13:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56145
2012-07-04T13:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56146
2012-07-04T13:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56147
2012-07-04T13:07:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56148
2012-07-04T13:07:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56149
2012-07-04T13:07:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56150
2012-07-04T13:07:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56151
2012-07-04T13:07:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56152
2012-07-04T13:07:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56153

2012-07-04T13:08:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:08:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56154
2012-07-04T13:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56155
2012-07-04T13:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56156
2012-07-04T13:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56157
2012-07-04T13:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56158
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56159
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56160
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56161
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57694
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57695
2012-07-04T13:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57696
2012-07-04T13:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57697
2012-07-04T13:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53589
2012-07-04T13:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62124
2012-07-04T13:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64362
2012-07-04T13:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56595
2012-07-04T13:08:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:07-03:00,info,appl control,C:\PROGRA~1\COMMON~1\Java\JAVAUP~1\j
usched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T13:09:11-03:00,info,appl control,C:\Program Files\Common Files\Java\J
ava Update\jusched.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T13:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:17-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:09:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57929
2012-07-04T13:09:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:09:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,59441
2012-07-04T13:09:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51281

2012-07-04T13:09:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50246
2012-07-04T13:09:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:09:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:51-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:09:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:09:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:10:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,52485
2012-07-04T13:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:10:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:10:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:10:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:10:24-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:10:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:10:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,52490
2012-07-04T13:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:11:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.116.254,80
2012-07-04T13:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:13:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:13:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55902

2012-07-04T13:13:28-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T13:13:28-03:00,info,appl
listen,17,0.0.0.0,55903
2012-07-04T13:13:28-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T13:13:29-03:00,info,appl
listen,17,0.0.0.0,55904
2012-07-04T13:13:29-03:00,info,appl
w,listen,17,0.0.0.0,50231
2012-07-04T13:13:29-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T13:13:29-03:00,info,appl
listen,17,0.0.0.0,50232
2012-07-04T13:13:30-03:00,info,appl
listen,17,0.0.0.0,50233
2012-07-04T13:13:30-03:00,info,appl
listen,17,0.0.0.0,50234
2012-07-04T13:13:31-03:00,info,appl
listen,17,0.0.0.0,50235
2012-07-04T13:13:31-03:00,info,appl
listen,17,0.0.0.0,50236
2012-07-04T13:13:31-03:00,info,appl
listen,17,0.0.0.0,50237
2012-07-04T13:13:31-03:00,info,appl
listen,17,0.0.0.0,50238
2012-07-04T13:13:31-03:00,info,appl
listen,17,0.0.0.0,50239
2012-07-04T13:13:32-03:00,info,appl
listen,17,0.0.0.0,50240
2012-07-04T13:14:38-03:00,info,appl
w,listen,17,0.0.0.0,49728
2012-07-04T13:14:38-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T13:14:38-03:00,info,appl
listen,17,0.0.0.0,49729
2012-07-04T13:14:38-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T13:14:38-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T13:14:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T13:14:38-03:00,info,appl
w,listen,17,0.0.0.0,52923
2012-07-04T13:14:38-03:00,info,appl
listen,17,0.0.0.0,52924
2012-07-04T13:14:38-03:00,info,appl
listen,17,0.0.0.0,52925
2012-07-04T13:14:39-03:00,info,appl
w,listen,17,0.0.0.0,56943
2012-07-04T13:14:39-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T13:14:39-03:00,info,appl
listen,17,0.0.0.0,56944
2012-07-04T13:14:39-03:00,info,appl
listen,17,0.0.0.0,56945
2012-07-04T13:14:40-03:00,info,appl
listen,17,0.0.0.0,56946
2012-07-04T13:14:40-03:00,info,appl
listen,17,0.0.0.0,56947

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T13:14:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56948
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56949
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56950
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56951
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56952
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51431
2012-07-04T13:14:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:14:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53151
2012-07-04T13:14:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58367
2012-07-04T13:14:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:14:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62539
2012-07-04T13:14:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:17:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:17:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50097
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50098
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T13:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T13:18:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:18:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:18:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T13:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50099
2012-07-04T13:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50100
2012-07-04T13:18:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50101
2012-07-04T13:18:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50102

2012-07-04T13:18:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50103
2012-07-04T13:18:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50104
2012-07-04T13:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50105
2012-07-04T13:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50106
2012-07-04T13:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50107
2012-07-04T13:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50108
2012-07-04T13:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50109
2012-07-04T13:18:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:18:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:18:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:18:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50110
2012-07-04T13:18:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:18:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50111
2012-07-04T13:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50112
2012-07-04T13:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50113
2012-07-04T13:18:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50114
2012-07-04T13:18:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50115
2012-07-04T13:18:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50116
2012-07-04T13:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50117
2012-07-04T13:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50118
2012-07-04T13:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50119
2012-07-04T13:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50120
2012-07-04T13:21:04-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:21:52-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80

2012-07-04T13:22:32-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:32-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:32-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:33-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:33-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:33-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:34-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:34-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:34-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:35-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:35-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:36-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:36-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:37-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:37-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:38-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:38-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:39-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:39-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:40-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:40-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:41-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:42-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:42-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:43-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:43-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:44-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:45-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:45-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:46-03:00,info,appl
w,connect out,6,10.10.0.25,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:22:46-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:47-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:48-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:49-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:49-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:50-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:50-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:51-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:52-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:53-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:53-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:54-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:55-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:55-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:56-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:57-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:58-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:22:59-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:00-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:01-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T13:23:01-03:00,info,appl
listen,17,0.0.0.0,50121
2012-07-04T13:23:01-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T13:23:01-03:00,info,appl
listen,17,0.0.0.0,50122
2012-07-04T13:23:02-03:00,info,appl
listen,17,0.0.0.0,50123
2012-07-04T13:23:02-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:02-03:00,info,appl
listen,17,0.0.0.0,50124
2012-07-04T13:23:03-03:00,info,appl
listen,17,0.0.0.0,50125
2012-07-04T13:23:03-03:00,info,appl
listen,17,0.0.0.0,50126
2012-07-04T13:23:03-03:00,info,appl
w,connect out,6,10.10.0.25,80

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-04T13:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50127
2012-07-04T13:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50128
2012-07-04T13:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50129
2012-07-04T13:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50130
2012-07-04T13:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50131
2012-07-04T13:23:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:23:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:23:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59365
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59366
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59367

2012-07-04T13:23:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52627
2012-07-04T13:23:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:23:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52628
2012-07-04T13:23:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52629
2012-07-04T13:23:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52630
2012-07-04T13:23:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52631
2012-07-04T13:23:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52632
2012-07-04T13:23:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52633
2012-07-04T13:23:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52634
2012-07-04T13:23:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52635
2012-07-04T13:23:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52636
2012-07-04T13:24:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:24:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:24:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:25:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:28:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:28:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:28:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:28:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52637
2012-07-04T13:28:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:28:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52638
2012-07-04T13:28:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52639
2012-07-04T13:28:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52640
2012-07-04T13:28:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52641
2012-07-04T13:28:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52642
2012-07-04T13:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52643
2012-07-04T13:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52644
2012-07-04T13:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52645
2012-07-04T13:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52646
2012-07-04T13:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52647

2012-07-04T13:31:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:31:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:32:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:32:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:32:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:32:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:32:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:33:01-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:33:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:33:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:33:34-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T13:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52648
2012-07-04T13:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52649
2012-07-04T13:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52650
2012-07-04T13:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52651
2012-07-04T13:33:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52652
2012-07-04T13:33:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52653
2012-07-04T13:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52654
2012-07-04T13:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52655
2012-07-04T13:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52656
2012-07-04T13:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52657
2012-07-04T13:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52658
2012-07-04T13:33:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55178
2012-07-04T13:33:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:33:49-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:33:58-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80

2012-07-04T13:34:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:34:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:34:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:34:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55179
2012-07-04T13:34:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:34:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55180
2012-07-04T13:34:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60821
2012-07-04T13:34:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:34:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:34:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60822
2012-07-04T13:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60823
2012-07-04T13:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60824
2012-07-04T13:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60825
2012-07-04T13:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60826
2012-07-04T13:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60827
2012-07-04T13:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60828
2012-07-04T13:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60829
2012-07-04T13:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60830
2012-07-04T13:34:35-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:35:18-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:35:19-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:36:09-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:36:13-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:36:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60831
2012-07-04T13:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60832
2012-07-04T13:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60833
2012-07-04T13:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60834

2012-07-04T13:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60835
2012-07-04T13:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60836
2012-07-04T13:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60837
2012-07-04T13:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60838
2012-07-04T13:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60839
2012-07-04T13:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60840
2012-07-04T13:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60841
2012-07-04T13:38:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:38:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:39:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:39:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:39:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:39:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:39:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60842
2012-07-04T13:39:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:39:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60843
2012-07-04T13:39:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60844
2012-07-04T13:39:15-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:39:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60845
2012-07-04T13:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60846
2012-07-04T13:39:16-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60847
2012-07-04T13:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60848
2012-07-04T13:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60849
2012-07-04T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60850
2012-07-04T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60851
2012-07-04T13:39:17-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60852
2012-07-04T13:39:33-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:39:34-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80

2012-07-04T13:39:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:39:39-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:39:53-03:00,info,appl control,C:\64B112~1\Setup.exe,allow,connect
out,6,10.10.0.11,135
2012-07-04T13:39:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:39:53-03:00,info,appl control,C:\64b112f2afba72fb221aa6c9c1\Setup.
exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:39:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:39:56-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:41:52-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:42:42-03:00,info,appl control,C:\64b112f2afba72fb221aa6c9c1\Setup.
exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:42:43-03:00,info,appl control,C:\64b112f2afba72fb221aa6c9c1\Setup.
exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:42:43-03:00,info,appl control,C:\64b112f2afba72fb221aa6c9c1\Setup.
exe,allow,connect out,6,10.10.0.25,80
2012-07-04T13:43:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,59188
2012-07-04T13:44:07-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:44:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:44:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:44:19-03:00,info,appl control,C:\D26B70~1\Setup.exe,allow,connect
out,6,10.10.0.11,135
2012-07-04T13:44:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:44:19-03:00,info,appl control,C:\d26b703434e84f14a84927\Setup.exe,
allow,connect out,6,10.10.0.11,1025
2012-07-04T13:44:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:44:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T13:44:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:44:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62955
2012-07-04T13:44:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62956
2012-07-04T13:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62957
2012-07-04T13:44:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63778
2012-07-04T13:44:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63779

2012-07-04T13:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63780
2012-07-04T13:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63781
2012-07-04T13:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63782
2012-07-04T13:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63783
2012-07-04T13:44:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,59193
2012-07-04T13:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63784
2012-07-04T13:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63785
2012-07-04T13:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63786
2012-07-04T13:44:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63787
2012-07-04T13:45:29-03:00,info,appl control,C:\d26b703434e84f14a84927\Setup.exe,
allow,connect out,6,10.10.0.11,135
2012-07-04T13:45:29-03:00,info,appl control,C:\d26b703434e84f14a84927\Setup.exe,
allow,connect out,6,10.10.0.11,1025
2012-07-04T13:45:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:45:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:46:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:46:16-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:46:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:46:45-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:46:46-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:46:53-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:46:53-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:47:00-03:00,info,appl control,C:\ADCCC3~1\Setup.exe,allow,connect
out,6,10.10.0.11,135
2012-07-04T13:47:00-03:00,info,appl control,C:\adccc3891af73fd4906d6ebd94d8\Setu
p.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T13:47:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:47:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:48:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60993
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60994
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60995

2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52195
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52196
2012-07-04T13:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52197
2012-07-04T13:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49662
2012-07-04T13:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49663
2012-07-04T13:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49664
2012-07-04T13:48:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:48:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:48:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49665
2012-07-04T13:48:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49666
2012-07-04T13:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49667
2012-07-04T13:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49668
2012-07-04T13:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49669
2012-07-04T13:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49670
2012-07-04T13:48:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49671
2012-07-04T13:48:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55758
2012-07-04T13:48:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:48:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62219
2012-07-04T13:48:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50705
2012-07-04T13:48:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:48:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56503
2012-07-04T13:48:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T13:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56504
2012-07-04T13:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56505

2012-07-04T13:48:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56506
2012-07-04T13:48:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56507
2012-07-04T13:48:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56508
2012-07-04T13:48:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56509
2012-07-04T13:48:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56510
2012-07-04T13:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56511
2012-07-04T13:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56512
2012-07-04T13:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56513
2012-07-04T13:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56514
2012-07-04T13:49:02-03:00,info,appl control,C:\adccc3891af73fd4906d6ebd94d8\Setu
p.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T13:49:02-03:00,info,appl control,C:\adccc3891af73fd4906d6ebd94d8\Setu
p.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:49:03-03:00,info,appl control,C:\adccc3891af73fd4906d6ebd94d8\Setu
p.exe,allow,connect out,6,10.10.0.25,80
2012-07-04T13:49:21-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:49:21-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:49:22-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:49:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T13:49:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56515
2012-07-04T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T13:49:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56516
2012-07-04T13:49:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56517
2012-07-04T13:49:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56518
2012-07-04T13:49:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56519
2012-07-04T13:49:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56520
2012-07-04T13:49:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56521
2012-07-04T13:49:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56522
2012-07-04T13:49:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56523
2012-07-04T13:49:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56524
2012-07-04T13:49:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56525

2012-07-04T13:50:18-03:00,info,appl control,C:\0EEDC2~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-07-04T13:50:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:50:18-03:00,info,appl control,C:\0eedc25203661e3e0c40e0c752fb58\Se
tup.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:50:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:51:29-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:52:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,64209
2012-07-04T13:52:26-03:00,info,appl control,C:\0eedc25203661e3e0c40e0c752fb58\Se
tup.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T13:52:26-03:00,info,appl control,C:\0eedc25203661e3e0c40e0c752fb58\Se
tup.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:52:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:52:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56526
2012-07-04T13:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56527
2012-07-04T13:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56528
2012-07-04T13:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56529
2012-07-04T13:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56530
2012-07-04T13:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56531
2012-07-04T13:53:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56532
2012-07-04T13:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56533
2012-07-04T13:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56534
2012-07-04T13:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56535
2012-07-04T13:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56536
2012-07-04T13:53:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,64214
2012-07-04T13:53:22-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:53:22-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:53:22-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:53:27-03:00,info,appl control,C:\B223B5~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-07-04T13:53:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T13:53:27-03:00,info,appl control,C:\b223b5cbaabccf6bac1339\Setup.exe,
allow,connect out,6,10.10.0.12,1025
2012-07-04T13:53:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:53:29-03:00,info,appl control,C:\Windows\System32\msiexec.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-04T13:53:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T13:53:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,50336
2012-07-04T13:54:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T13:54:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64082
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64083
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:54:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64084
2012-07-04T13:54:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,51341
2012-07-04T13:54:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54240
2012-07-04T13:54:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T13:54:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54241
2012-07-04T13:54:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54242
2012-07-04T13:54:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54243
2012-07-04T13:54:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54244
2012-07-04T13:54:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54245
2012-07-04T13:54:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54246
2012-07-04T13:54:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54247
2012-07-04T13:54:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54248
2012-07-04T13:54:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54249
2012-07-04T13:54:50-03:00,info,appl control,C:\b223b5cbaabccf6bac1339\Setup.exe,
allow,connect out,6,10.10.0.12,135
2012-07-04T13:54:50-03:00,info,appl control,C:\b223b5cbaabccf6bac1339\Setup.exe,
allow,connect out,6,10.10.0.12,1025
2012-07-04T13:55:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,50341
2012-07-04T13:55:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:55:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80

2012-07-04T13:55:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien


t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:55:41-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:55:46-03:00,info,appl control,C:\0AAE9F~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-07-04T13:55:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:55:46-03:00,info,appl control,C:\0aae9fa5cfdc82382734ff\Setup.exe,
allow,connect out,6,10.10.0.12,1025
2012-07-04T13:55:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T13:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49227
2012-07-04T13:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54599
2012-07-04T13:57:12-03:00,info,appl control,C:\0aae9fa5cfdc82382734ff\Setup.exe,
allow,connect out,6,10.10.0.12,135
2012-07-04T13:57:12-03:00,info,appl control,C:\0aae9fa5cfdc82382734ff\Setup.exe,
allow,connect out,6,10.10.0.12,1025
2012-07-04T13:58:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56931
2012-07-04T13:58:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:58:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:58:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:58:06-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T13:58:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50191
2012-07-04T13:58:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T13:58:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50548
2012-07-04T13:58:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.11,62060
2012-07-04T13:59:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T13:59:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T13:59:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T13:59:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50549
2012-07-04T13:59:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T13:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50550
2012-07-04T13:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50551
2012-07-04T13:59:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50552
2012-07-04T13:59:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50553
2012-07-04T13:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50554

2012-07-04T13:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50555
2012-07-04T13:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50556
2012-07-04T13:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50557
2012-07-04T13:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50558
2012-07-04T13:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50559
2012-07-04T13:59:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T13:59:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:00:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:01:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:01:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-04T14:01:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56048
2012-07-04T14:01:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:01:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,56816
2012-07-04T14:01:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63199
2012-07-04T14:01:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65262
2012-07-04T14:01:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,201.6.5.39,80
2012-07-04T14:01:53-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:01:57-03:00,info,appl control,C:\16B499~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-07-04T14:01:57-03:00,info,appl control,C:\16b499354f8d4dff6f35344be5455d\Se
tup.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:01:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:01:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:02:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,60540
2012-07-04T14:02:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.46,56294
2012-07-04T14:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54904
2012-07-04T14:03:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T14:03:18-03:00,info,appl control,C:\16b499354f8d4dff6f35344be5455d\Se
tup.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T14:03:18-03:00,info,appl control,C:\16b499354f8d4dff6f35344be5455d\Se
tup.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:03:21-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:03:22-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:03:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,62283
2012-07-04T14:03:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.46,56299
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54905
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55983
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55984
2012-07-04T14:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61374
2012-07-04T14:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61375
2012-07-04T14:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53874
2012-07-04T14:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53875
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63335
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63336
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58968
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58969
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53913
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53914
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57252
2012-07-04T14:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57253
2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56909
2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56910
2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55994
2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55995
2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57926

2012-07-04T14:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57927
2012-07-04T14:04:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T14:04:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53679
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53680
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53681
2012-07-04T14:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62086
2012-07-04T14:04:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:04:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62087
2012-07-04T14:04:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62088
2012-07-04T14:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62089
2012-07-04T14:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62090
2012-07-04T14:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62091
2012-07-04T14:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62092
2012-07-04T14:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62093
2012-07-04T14:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62094
2012-07-04T14:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62095
2012-07-04T14:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58767
2012-07-04T14:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:05:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56537
2012-07-04T14:07:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:07:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:08:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:08:13-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:08:13-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-04T14:08:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80

2012-07-04T14:08:18-03:00,info,appl control,C:\1B756A~1\Setup.exe,allow,connect
out,6,10.10.0.12,135
2012-07-04T14:08:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:08:18-03:00,info,appl control,C:\1b756a80dc59b7d7664a19c4\Setup.ex
e,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:08:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56538
2012-07-04T14:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56539
2012-07-04T14:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56540
2012-07-04T14:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56541
2012-07-04T14:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56542
2012-07-04T14:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56543
2012-07-04T14:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56544
2012-07-04T14:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56545
2012-07-04T14:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56546
2012-07-04T14:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56547
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56548
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53308
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53309
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53310
2012-07-04T14:08:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53311
2012-07-04T14:08:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53312
2012-07-04T14:08:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53313
2012-07-04T14:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53314
2012-07-04T14:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53315
2012-07-04T14:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53316
2012-07-04T14:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53317
2012-07-04T14:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53318

2012-07-04T14:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53319
2012-07-04T14:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53320
2012-07-04T14:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52646
2012-07-04T14:08:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62897
2012-07-04T14:09:39-03:00,info,appl control,C:\1b756a80dc59b7d7664a19c4\Setup.ex
e,allow,connect out,6,10.10.0.11,135
2012-07-04T14:09:39-03:00,info,appl control,C:\1b756a80dc59b7d7664a19c4\Setup.ex
e,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:09:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:09:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62898
2012-07-04T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62899
2012-07-04T14:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62900
2012-07-04T14:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62901
2012-07-04T14:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62902
2012-07-04T14:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62903
2012-07-04T14:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62904
2012-07-04T14:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62905
2012-07-04T14:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62906
2012-07-04T14:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62907
2012-07-04T14:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62908
2012-07-04T14:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:14:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:14:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65452
2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65453

2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65454
2012-07-04T14:14:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57656
2012-07-04T14:14:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57657
2012-07-04T14:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57658
2012-07-04T14:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57659
2012-07-04T14:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57660
2012-07-04T14:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57661
2012-07-04T14:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57662
2012-07-04T14:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57663
2012-07-04T14:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57664
2012-07-04T14:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57665
2012-07-04T14:15:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:18:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:18:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T14:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57666
2012-07-04T14:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57667
2012-07-04T14:19:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57668
2012-07-04T14:19:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57669
2012-07-04T14:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57670
2012-07-04T14:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57671
2012-07-04T14:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57672
2012-07-04T14:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57673
2012-07-04T14:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57674
2012-07-04T14:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57675
2012-07-04T14:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57676

2012-07-04T14:20:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:20:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57677
2012-07-04T14:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57678
2012-07-04T14:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57679
2012-07-04T14:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57680
2012-07-04T14:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57681
2012-07-04T14:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57682
2012-07-04T14:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57683
2012-07-04T14:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57684
2012-07-04T14:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57685
2012-07-04T14:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57686
2012-07-04T14:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57687
2012-07-04T14:20:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,63091
2012-07-04T14:21:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:21:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:21:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.189,64673
2012-07-04T14:21:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:22:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.189,64678
2012-07-04T14:22:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57688
2012-07-04T14:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57689
2012-07-04T14:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57690
2012-07-04T14:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57691
2012-07-04T14:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57692
2012-07-04T14:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57693

2012-07-04T14:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57694
2012-07-04T14:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57695
2012-07-04T14:23:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57696
2012-07-04T14:23:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57697
2012-07-04T14:23:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57698
2012-07-04T14:23:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,52059
2012-07-04T14:25:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:25:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52072
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52073
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52074
2012-07-04T14:25:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54964
2012-07-04T14:25:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:25:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54965
2012-07-04T14:25:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54966
2012-07-04T14:25:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54967
2012-07-04T14:25:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54968
2012-07-04T14:25:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54969
2012-07-04T14:25:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54970
2012-07-04T14:25:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54971
2012-07-04T14:25:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54972
2012-07-04T14:25:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54973
2012-07-04T14:28:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:28:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:28:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51892
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51893
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55651
2012-07-04T14:29:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55652
2012-07-04T14:29:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55653
2012-07-04T14:29:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51797
2012-07-04T14:29:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:29:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51798
2012-07-04T14:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51799
2012-07-04T14:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51800
2012-07-04T14:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51801
2012-07-04T14:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51802
2012-07-04T14:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51803
2012-07-04T14:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51804
2012-07-04T14:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51805
2012-07-04T14:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51806
2012-07-04T14:29:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49266
2012-07-04T14:29:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55258
2012-07-04T14:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51831
2012-07-04T14:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51412
2012-07-04T14:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:30:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:30:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T14:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51413

2012-07-04T14:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51414
2012-07-04T14:30:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51415
2012-07-04T14:30:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51416
2012-07-04T14:30:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51417
2012-07-04T14:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51418
2012-07-04T14:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51419
2012-07-04T14:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51420
2012-07-04T14:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51421
2012-07-04T14:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51422
2012-07-04T14:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51423
2012-07-04T14:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T14:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,51424
2012-07-04T14:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-04T14:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.152,12110
2012-07-04T14:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,51425

2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.223,12110
2012-07-04T14:33:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:33:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:33:46-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-04T14:33:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.81,64714
2012-07-04T14:33:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T14:34:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T14:34:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:34:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51426
2012-07-04T14:34:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:34:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51427
2012-07-04T14:34:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51428
2012-07-04T14:34:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51429
2012-07-04T14:34:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51430
2012-07-04T14:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51431
2012-07-04T14:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51432
2012-07-04T14:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51433
2012-07-04T14:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51434
2012-07-04T14:34:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51435
2012-07-04T14:34:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51436
2012-07-04T14:34:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.10.45,57472
2012-07-04T14:35:09-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-04T14:35:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:35:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55683
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55684
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55685
2012-07-04T14:35:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58478
2012-07-04T14:35:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58479
2012-07-04T14:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58480
2012-07-04T14:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58481
2012-07-04T14:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58482
2012-07-04T14:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58483
2012-07-04T14:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58484
2012-07-04T14:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58485
2012-07-04T14:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58486
2012-07-04T14:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58487
2012-07-04T14:35:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:35:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:35:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.36,51291
2012-07-04T14:36:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:36:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,3489
2012-07-04T14:36:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.143,63558
2012-07-04T14:37:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62428
2012-07-04T14:37:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62429

2012-07-04T14:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62430
2012-07-04T14:37:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.19,2815
2012-07-04T14:37:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.19,2843
2012-07-04T14:38:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.230,1968
2012-07-04T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62431
2012-07-04T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62432
2012-07-04T14:38:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62433
2012-07-04T14:38:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62434
2012-07-04T14:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62435
2012-07-04T14:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,2840
2012-07-04T14:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62436
2012-07-04T14:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62437
2012-07-04T14:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62438
2012-07-04T14:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62439
2012-07-04T14:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62440
2012-07-04T14:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62441
2012-07-04T14:39:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,59583
2012-07-04T14:39:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,56144
2012-07-04T14:40:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T14:40:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62442
2012-07-04T14:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:40:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62443
2012-07-04T14:40:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62444
2012-07-04T14:40:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62445
2012-07-04T14:40:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62446

2012-07-04T14:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62447
2012-07-04T14:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62448
2012-07-04T14:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62449
2012-07-04T14:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62450
2012-07-04T14:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62451
2012-07-04T14:40:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62452
2012-07-04T14:41:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.18,61365
2012-07-04T14:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,4246
2012-07-04T14:42:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:42:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:42:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,54598
2012-07-04T14:43:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.93,60721
2012-07-04T14:43:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:43:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.70,53706
2012-07-04T14:43:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:43:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,49959
2012-07-04T14:44:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,51927
2012-07-04T14:45:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,54034
2012-07-04T14:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T14:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51446
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51447
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51448
2012-07-04T14:45:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50857
2012-07-04T14:45:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50858
2012-07-04T14:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50859

2012-07-04T14:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50860
2012-07-04T14:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50861
2012-07-04T14:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50862
2012-07-04T14:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50863
2012-07-04T14:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50864
2012-07-04T14:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50865
2012-07-04T14:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50866
2012-07-04T14:46:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.88,53874
2012-07-04T14:46:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.88,56228
2012-07-04T14:46:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.250,60419
2012-07-04T14:47:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,52611
2012-07-04T14:48:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:48:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50867
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65351
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65352
2012-07-04T14:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65353
2012-07-04T14:48:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59049
2012-07-04T14:48:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59050
2012-07-04T14:48:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59051
2012-07-04T14:48:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59052
2012-07-04T14:48:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59053
2012-07-04T14:48:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59054
2012-07-04T14:48:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59055
2012-07-04T14:48:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59056

2012-07-04T14:48:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59057
2012-07-04T14:48:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59058
2012-07-04T14:48:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63562
2012-07-04T14:48:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52278
2012-07-04T14:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60063
2012-07-04T14:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62265
2012-07-04T14:48:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:49:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T14:49:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:49:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62266
2012-07-04T14:49:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:49:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62267
2012-07-04T14:49:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62268
2012-07-04T14:49:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62269
2012-07-04T14:49:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62270
2012-07-04T14:49:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62271
2012-07-04T14:49:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62272
2012-07-04T14:49:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62273
2012-07-04T14:49:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62274
2012-07-04T14:49:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62275
2012-07-04T14:49:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62276
2012-07-04T14:49:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:49:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:49:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,50934
2012-07-04T14:50:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T14:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T14:50:16-03:00,info,appl
listen,17,0.0.0.0,62277
2012-07-04T14:50:16-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T14:50:17-03:00,info,appl
listen,17,0.0.0.0,62278
2012-07-04T14:50:17-03:00,info,appl
listen,17,0.0.0.0,62279
2012-07-04T14:50:18-03:00,info,appl
listen,17,0.0.0.0,62280
2012-07-04T14:50:18-03:00,info,appl
listen,17,0.0.0.0,62281
2012-07-04T14:50:18-03:00,info,appl
listen,17,0.0.0.0,62282
2012-07-04T14:50:19-03:00,info,appl
listen,17,0.0.0.0,62283
2012-07-04T14:50:19-03:00,info,appl
listen,17,0.0.0.0,62284
2012-07-04T14:50:19-03:00,info,appl
listen,17,0.0.0.0,62285
2012-07-04T14:50:19-03:00,info,appl
listen,17,0.0.0.0,62286
2012-07-04T14:50:19-03:00,info,appl
listen,17,0.0.0.0,62287
2012-07-04T14:50:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:50:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:50:24-03:00,info,appl
listen,17,0.0.0.0,62288
2012-07-04T14:50:24-03:00,info,appl
listen,17,0.0.0.0,62289
2012-07-04T14:50:25-03:00,info,appl
listen,17,0.0.0.0,62290
2012-07-04T14:50:25-03:00,info,appl
listen,17,0.0.0.0,62291
2012-07-04T14:50:26-03:00,info,appl
listen,17,0.0.0.0,62292
2012-07-04T14:50:26-03:00,info,appl
listen,17,0.0.0.0,62293
2012-07-04T14:50:26-03:00,info,appl
listen,17,0.0.0.0,62294
2012-07-04T14:50:26-03:00,info,appl
listen,17,0.0.0.0,62295
2012-07-04T14:50:27-03:00,info,appl
listen,17,0.0.0.0,62296
2012-07-04T14:50:27-03:00,info,appl
listen,17,0.0.0.0,62297
2012-07-04T14:50:27-03:00,info,appl
listen,17,0.0.0.0,62298
2012-07-04T14:50:31-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:50:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:50:31-03:00,info,appl
listen,17,0.0.0.0,62299
2012-07-04T14:50:32-03:00,info,appl
listen,17,0.0.0.0,62300
2012-07-04T14:50:32-03:00,info,appl
listen,17,0.0.0.0,62301

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T14:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62302
2012-07-04T14:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62303
2012-07-04T14:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62304
2012-07-04T14:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62305
2012-07-04T14:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62306
2012-07-04T14:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62307
2012-07-04T14:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62308
2012-07-04T14:50:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62309
2012-07-04T14:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62310
2012-07-04T14:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62311
2012-07-04T14:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62312
2012-07-04T14:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62313
2012-07-04T14:50:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62314
2012-07-04T14:50:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62315
2012-07-04T14:50:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62316
2012-07-04T14:50:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62317
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62318
2012-07-04T14:50:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T14:50:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62319
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62320
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62321
2012-07-04T14:50:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62322
2012-07-04T14:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62323
2012-07-04T14:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62324
2012-07-04T14:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62325

2012-07-04T14:50:44-03:00,info,appl
listen,17,0.0.0.0,62326
2012-07-04T14:50:44-03:00,info,appl
listen,17,0.0.0.0,62327
2012-07-04T14:50:44-03:00,info,appl
listen,17,0.0.0.0,62328
2012-07-04T14:50:45-03:00,info,appl
listen,17,0.0.0.0,62329
2012-07-04T14:50:45-03:00,info,appl
listen,17,0.0.0.0,62330
2012-07-04T14:50:45-03:00,info,appl
listen,17,0.0.0.0,62331
2012-07-04T14:50:46-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T14:50:47-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:50:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:50:47-03:00,info,appl
listen,17,0.0.0.0,62332
2012-07-04T14:50:47-03:00,info,appl
listen,17,0.0.0.0,62333
2012-07-04T14:50:48-03:00,info,appl
listen,17,0.0.0.0,62334
2012-07-04T14:50:48-03:00,info,appl
listen,17,0.0.0.0,62335
2012-07-04T14:50:49-03:00,info,appl
listen,17,0.0.0.0,62336
2012-07-04T14:50:49-03:00,info,appl
listen,17,0.0.0.0,62337
2012-07-04T14:50:49-03:00,info,appl
listen,17,0.0.0.0,62338
2012-07-04T14:50:49-03:00,info,appl
listen,17,0.0.0.0,62339
2012-07-04T14:50:50-03:00,info,appl
listen,17,0.0.0.0,62340
2012-07-04T14:50:50-03:00,info,appl
listen,17,0.0.0.0,62341
2012-07-04T14:50:50-03:00,info,appl
listen,17,0.0.0.0,62342
2012-07-04T14:50:54-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:50:54-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:50:54-03:00,info,appl
listen,17,0.0.0.0,62343
2012-07-04T14:50:55-03:00,info,appl
listen,17,0.0.0.0,62344
2012-07-04T14:50:55-03:00,info,appl
listen,17,0.0.0.0,62345
2012-07-04T14:50:56-03:00,info,appl
listen,17,0.0.0.0,62346
2012-07-04T14:50:56-03:00,info,appl
listen,17,0.0.0.0,62347
2012-07-04T14:50:57-03:00,info,appl
listen,17,0.0.0.0,62348
2012-07-04T14:50:57-03:00,info,appl
listen,17,0.0.0.0,62349
2012-07-04T14:50:57-03:00,info,appl
listen,17,0.0.0.0,62350

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T14:50:57-03:00,info,appl
listen,17,0.0.0.0,62351
2012-07-04T14:50:57-03:00,info,appl
listen,17,0.0.0.0,62352
2012-07-04T14:50:58-03:00,info,appl
listen,17,0.0.0.0,62353
2012-07-04T14:50:58-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:50:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:50:58-03:00,info,appl
listen,17,0.0.0.0,62354
2012-07-04T14:50:58-03:00,info,appl
listen,17,0.0.0.0,62355
2012-07-04T14:50:59-03:00,info,appl
listen,17,0.0.0.0,62356
2012-07-04T14:50:59-03:00,info,appl
send,17,10.203.0.11,389
2012-07-04T14:50:59-03:00,info,appl
listen,17,0.0.0.0,62357
2012-07-04T14:51:00-03:00,info,appl
listen,17,0.0.0.0,62358
2012-07-04T14:51:00-03:00,info,appl
listen,17,0.0.0.0,62359
2012-07-04T14:51:00-03:00,info,appl
listen,17,0.0.0.0,62360
2012-07-04T14:51:00-03:00,info,appl
listen,17,0.0.0.0,62361
2012-07-04T14:51:01-03:00,info,appl
listen,17,0.0.0.0,62362
2012-07-04T14:51:01-03:00,info,appl
listen,17,0.0.0.0,62363
2012-07-04T14:51:01-03:00,info,appl
listen,17,0.0.0.0,62364
2012-07-04T14:51:01-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:51:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:51:01-03:00,info,appl
listen,17,0.0.0.0,62365
2012-07-04T14:51:01-03:00,info,appl
listen,17,0.0.0.0,62366
2012-07-04T14:51:02-03:00,info,appl
listen,17,0.0.0.0,62367
2012-07-04T14:51:02-03:00,info,appl
listen,17,0.0.0.0,62368
2012-07-04T14:51:03-03:00,info,appl
listen,17,0.0.0.0,62369
2012-07-04T14:51:03-03:00,info,appl
listen,17,0.0.0.0,62370
2012-07-04T14:51:03-03:00,info,appl
listen,17,0.0.0.0,62371
2012-07-04T14:51:04-03:00,info,appl
listen,17,0.0.0.0,62372
2012-07-04T14:51:04-03:00,info,appl
listen,17,0.0.0.0,62373
2012-07-04T14:51:04-03:00,info,appl
listen,17,0.0.0.0,62374
2012-07-04T14:51:04-03:00,info,appl
listen,17,0.0.0.0,62375

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T14:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62376
2012-07-04T14:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62377
2012-07-04T14:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62378
2012-07-04T14:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62379
2012-07-04T14:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62380
2012-07-04T14:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62381
2012-07-04T14:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62382
2012-07-04T14:51:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62383
2012-07-04T14:51:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62384
2012-07-04T14:51:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62385
2012-07-04T14:51:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62386
2012-07-04T14:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62387
2012-07-04T14:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62388
2012-07-04T14:51:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62389
2012-07-04T14:51:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62390
2012-07-04T14:51:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.122,1991
2012-07-04T14:51:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62391
2012-07-04T14:51:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62392
2012-07-04T14:51:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.102.0.20,389
2012-07-04T14:51:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62393
2012-07-04T14:51:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62394
2012-07-04T14:51:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62395
2012-07-04T14:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62396
2012-07-04T14:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62397
2012-07-04T14:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T14:51:24-03:00,info,appl
listen,17,0.0.0.0,62398
2012-07-04T14:51:25-03:00,info,appl
listen,17,0.0.0.0,62399
2012-07-04T14:51:25-03:00,info,appl
listen,17,0.0.0.0,62400
2012-07-04T14:51:26-03:00,info,appl
listen,17,0.0.0.0,62401
2012-07-04T14:51:26-03:00,info,appl
listen,17,0.0.0.0,62402
2012-07-04T14:51:26-03:00,info,appl
listen,17,0.0.0.0,62403
2012-07-04T14:51:27-03:00,info,appl
listen,17,0.0.0.0,62404
2012-07-04T14:51:27-03:00,info,appl
listen,17,0.0.0.0,62405
2012-07-04T14:51:27-03:00,info,appl
listen,17,0.0.0.0,62406
2012-07-04T14:51:27-03:00,info,appl
listen,17,0.0.0.0,62407
2012-07-04T14:51:27-03:00,info,appl
listen,17,0.0.0.0,62408
2012-07-04T14:51:32-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:51:32-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:51:32-03:00,info,appl
listen,17,0.0.0.0,62409
2012-07-04T14:51:32-03:00,info,appl
listen,17,0.0.0.0,62410
2012-07-04T14:51:33-03:00,info,appl
listen,17,0.0.0.0,62411
2012-07-04T14:51:33-03:00,info,appl
listen,17,0.0.0.0,62412
2012-07-04T14:51:34-03:00,info,appl
listen,17,0.0.0.0,62413
2012-07-04T14:51:34-03:00,info,appl
listen,17,0.0.0.0,62414
2012-07-04T14:51:34-03:00,info,appl
listen,17,0.0.0.0,62415
2012-07-04T14:51:35-03:00,info,appl
listen,17,0.0.0.0,62416
2012-07-04T14:51:35-03:00,info,appl
listen,17,0.0.0.0,62417
2012-07-04T14:51:35-03:00,info,appl
listen,17,0.0.0.0,62418
2012-07-04T14:51:35-03:00,info,appl
listen,17,0.0.0.0,62419
2012-07-04T14:51:40-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T14:51:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T14:51:40-03:00,info,appl
listen,17,0.0.0.0,62420
2012-07-04T14:51:40-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T14:51:40-03:00,info,appl
listen,17,0.0.0.0,62421
2012-07-04T14:51:41-03:00,info,appl
listen,17,0.0.0.0,62422

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T14:51:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62423
2012-07-04T14:51:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62424
2012-07-04T14:51:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62425
2012-07-04T14:51:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62426
2012-07-04T14:51:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62427
2012-07-04T14:51:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62428
2012-07-04T14:51:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62429
2012-07-04T14:51:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62430
2012-07-04T14:51:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.254,62738
2012-07-04T14:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62431
2012-07-04T14:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62432
2012-07-04T14:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62433
2012-07-04T14:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62434
2012-07-04T14:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62435
2012-07-04T14:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62436
2012-07-04T14:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62437
2012-07-04T14:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62438
2012-07-04T14:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62439
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62440
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62441
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62442
2012-07-04T14:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62443
2012-07-04T14:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62444
2012-07-04T14:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62445
2012-07-04T14:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62446
2012-07-04T14:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62447

2012-07-04T14:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62448
2012-07-04T14:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62449
2012-07-04T14:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62450
2012-07-04T14:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62451
2012-07-04T14:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62452
2012-07-04T14:51:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T14:51:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:51:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62453
2012-07-04T14:51:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62454
2012-07-04T14:51:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62455
2012-07-04T14:52:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62456
2012-07-04T14:52:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.197,389
2012-07-04T14:52:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62457
2012-07-04T14:52:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62458
2012-07-04T14:52:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62459
2012-07-04T14:52:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62460
2012-07-04T14:52:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62461
2012-07-04T14:52:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62462
2012-07-04T14:52:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62463
2012-07-04T14:52:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,1146
2012-07-04T14:52:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.95,62142
2012-07-04T14:52:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,63526
2012-07-04T14:53:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59081
2012-07-04T14:53:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59082
2012-07-04T14:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:53:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T14:53:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T14:53:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,55271
2012-07-04T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59083
2012-07-04T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59084
2012-07-04T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59085
2012-07-04T14:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59086
2012-07-04T14:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59087
2012-07-04T14:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59088
2012-07-04T14:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59089
2012-07-04T14:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59090
2012-07-04T14:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59091
2012-07-04T14:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59092
2012-07-04T14:53:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59093
2012-07-04T14:53:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,59542
2012-07-04T14:54:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,56300
2012-07-04T14:55:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,51408
2012-07-04T14:55:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,1660
2012-07-04T14:55:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T14:55:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T14:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T14:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54165
2012-07-04T14:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T14:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54166
2012-07-04T14:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T14:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54167
2012-07-04T14:55:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55930
2012-07-04T14:55:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T14:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55931
2012-07-04T14:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55932
2012-07-04T14:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55933
2012-07-04T14:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55934

2012-07-04T14:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55935
2012-07-04T14:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55936
2012-07-04T14:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55937
2012-07-04T14:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55938
2012-07-04T14:55:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55939
2012-07-04T14:55:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,2619
2012-07-04T14:56:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,2816
2012-07-04T14:56:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T14:56:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:56:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,1153
2012-07-04T14:57:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:57:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,3262
2012-07-04T14:57:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T14:59:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,4647
2012-07-04T14:59:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,4664
2012-07-04T14:59:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,64823
2012-07-04T15:00:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,64824
2012-07-04T15:00:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T15:00:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T15:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55940
2012-07-04T15:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55941
2012-07-04T15:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55942
2012-07-04T15:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55943
2012-07-04T15:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55944
2012-07-04T15:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55945
2012-07-04T15:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55946
2012-07-04T15:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55947
2012-07-04T15:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55948

2012-07-04T15:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55949
2012-07-04T15:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55950
2012-07-04T15:01:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,59264
2012-07-04T15:01:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,50376
2012-07-04T15:02:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,56979
2012-07-04T15:02:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,50859
2012-07-04T15:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:03:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,50016
2012-07-04T15:03:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:03:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:03:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:03:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:04:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62768
2012-07-04T15:04:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:04:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T15:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:04:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4181
2012-07-04T15:04:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,50659
2012-07-04T15:05:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:05:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.191,2236
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58658
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64963
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64964
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64965
2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59885
2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58482
2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58483
2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55114
2012-07-04T15:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55115
2012-07-04T15:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56636
2012-07-04T15:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56637
2012-07-04T15:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56890
2012-07-04T15:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56891
2012-07-04T15:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59156
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59157
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55751
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55752
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64299
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64300
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56770
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56771
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52484
2012-07-04T15:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52485
2012-07-04T15:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T15:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T15:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52486
2012-07-04T15:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52487
2012-07-04T15:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52488
2012-07-04T15:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52489
2012-07-04T15:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52490
2012-07-04T15:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52491
2012-07-04T15:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52492
2012-07-04T15:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52493
2012-07-04T15:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52494

2012-07-04T15:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52495
2012-07-04T15:06:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52496
2012-07-04T15:06:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.165,62565
2012-07-04T15:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,64196
2012-07-04T15:07:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57635
2012-07-04T15:07:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:07:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63702
2012-07-04T15:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63703
2012-07-04T15:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63704
2012-07-04T15:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63705
2012-07-04T15:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63706
2012-07-04T15:08:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63707
2012-07-04T15:08:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63708
2012-07-04T15:08:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63709
2012-07-04T15:08:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63710
2012-07-04T15:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63711
2012-07-04T15:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63712
2012-07-04T15:08:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63713
2012-07-04T15:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59727
2012-07-04T15:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59728
2012-07-04T15:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59729
2012-07-04T15:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59730
2012-07-04T15:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59731
2012-07-04T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59732
2012-07-04T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59733
2012-07-04T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59734

2012-07-04T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59735
2012-07-04T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59736
2012-07-04T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59737
2012-07-04T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59738
2012-07-04T15:08:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59739
2012-07-04T15:09:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.10,2708
2012-07-04T15:09:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,2061
2012-07-04T15:10:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.54,61982
2012-07-04T15:10:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,54087
2012-07-04T15:10:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.4.171,54383
2012-07-04T15:11:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:11:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:11:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:11:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59740
2012-07-04T15:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59741
2012-07-04T15:11:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59742
2012-07-04T15:11:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59743
2012-07-04T15:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59744
2012-07-04T15:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.129,60668
2012-07-04T15:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59745
2012-07-04T15:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59746
2012-07-04T15:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59747
2012-07-04T15:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59748
2012-07-04T15:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59749
2012-07-04T15:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59750
2012-07-04T15:11:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:11:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.189,2022

2012-07-04T15:12:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:12:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,2339
2012-07-04T15:13:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,58184
2012-07-04T15:13:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,4665
2012-07-04T15:14:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,4685
2012-07-04T15:14:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.26,51690
2012-07-04T15:15:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.26,51899
2012-07-04T15:16:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:16:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:16:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62370
2012-07-04T15:16:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62371
2012-07-04T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62372
2012-07-04T15:16:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60048
2012-07-04T15:16:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60049
2012-07-04T15:16:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60050
2012-07-04T15:16:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60051
2012-07-04T15:16:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60052
2012-07-04T15:16:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60053
2012-07-04T15:16:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60054
2012-07-04T15:16:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60055
2012-07-04T15:16:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60056
2012-07-04T15:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60057
2012-07-04T15:17:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.57,2686
2012-07-04T15:18:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:18:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:18:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T15:18:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:18:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,61740
2012-07-04T15:18:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:19:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.42,57319
2012-07-04T15:19:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:20:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.110,51191
2012-07-04T15:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T15:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60058
2012-07-04T15:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60059
2012-07-04T15:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60060
2012-07-04T15:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60061
2012-07-04T15:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60062
2012-07-04T15:21:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60063
2012-07-04T15:21:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60064
2012-07-04T15:21:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60065
2012-07-04T15:21:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60066
2012-07-04T15:21:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60067
2012-07-04T15:21:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60068
2012-07-04T15:21:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:21:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60069
2012-07-04T15:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60070
2012-07-04T15:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60071
2012-07-04T15:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60072
2012-07-04T15:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60073
2012-07-04T15:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60074

2012-07-04T15:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60075
2012-07-04T15:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60076
2012-07-04T15:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60077
2012-07-04T15:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60078
2012-07-04T15:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60079
2012-07-04T15:22:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.58,1797
2012-07-04T15:22:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.151,56758
2012-07-04T15:22:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.151,56759
2012-07-04T15:23:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,59617
2012-07-04T15:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60080
2012-07-04T15:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60081
2012-07-04T15:23:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60082
2012-07-04T15:23:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60083
2012-07-04T15:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60084
2012-07-04T15:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60085
2012-07-04T15:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60086
2012-07-04T15:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60087
2012-07-04T15:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60088
2012-07-04T15:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60089
2012-07-04T15:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60090
2012-07-04T15:25:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,3720
2012-07-04T15:25:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:25:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:25:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,3739
2012-07-04T15:25:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:26:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:26:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:26:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-04T15:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:26:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64338
2012-07-04T15:26:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64339
2012-07-04T15:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:26:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64340
2012-07-04T15:26:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57930
2012-07-04T15:26:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:26:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57931
2012-07-04T15:26:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57932
2012-07-04T15:26:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57933
2012-07-04T15:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57934
2012-07-04T15:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57935
2012-07-04T15:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57936
2012-07-04T15:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57937
2012-07-04T15:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57938
2012-07-04T15:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57939
2012-07-04T15:26:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.115,54514
2012-07-04T15:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,4454
2012-07-04T15:30:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,56355
2012-07-04T15:31:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,4491
2012-07-04T15:31:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:31:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T15:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57940
2012-07-04T15:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57941
2012-07-04T15:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57942
2012-07-04T15:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57943
2012-07-04T15:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57944

2012-07-04T15:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57945
2012-07-04T15:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57946
2012-07-04T15:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57947
2012-07-04T15:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57948
2012-07-04T15:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57949
2012-07-04T15:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57950
2012-07-04T15:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:32:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:32:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:33:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:33:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:33:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:33:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.53,3701
2012-07-04T15:33:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,49396
2012-07-04T15:34:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,49397
2012-07-04T15:34:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,2681
2012-07-04T15:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T15:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57951
2012-07-04T15:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:36:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57952
2012-07-04T15:36:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57953
2012-07-04T15:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57954
2012-07-04T15:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57955
2012-07-04T15:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57956
2012-07-04T15:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57957
2012-07-04T15:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57958
2012-07-04T15:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57959
2012-07-04T15:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57960
2012-07-04T15:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57961

2012-07-04T15:36:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.0.26,2700
2012-07-04T15:36:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:36:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63502
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63503
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63504
2012-07-04T15:36:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65450
2012-07-04T15:36:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65451
2012-07-04T15:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65452
2012-07-04T15:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65453
2012-07-04T15:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65454
2012-07-04T15:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65455
2012-07-04T15:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65456
2012-07-04T15:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65457
2012-07-04T15:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65458
2012-07-04T15:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65459
2012-07-04T15:37:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,1088
2012-07-04T15:37:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.10,61771
2012-07-04T15:38:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,59653
2012-07-04T15:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65460
2012-07-04T15:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:39:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65461
2012-07-04T15:39:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65462
2012-07-04T15:39:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65463
2012-07-04T15:39:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65464

2012-07-04T15:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65465
2012-07-04T15:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65466
2012-07-04T15:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65467
2012-07-04T15:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65468
2012-07-04T15:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65469
2012-07-04T15:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65470
2012-07-04T15:39:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.173,59840
2012-07-04T15:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:39:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.82,61462
2012-07-04T15:40:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:40:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:41:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.173,56035
2012-07-04T15:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65471
2012-07-04T15:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:42:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:42:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65472
2012-07-04T15:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65473
2012-07-04T15:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65474
2012-07-04T15:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65475
2012-07-04T15:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65476
2012-07-04T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65477
2012-07-04T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65478
2012-07-04T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65479
2012-07-04T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65480
2012-07-04T15:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65481
2012-07-04T15:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65482
2012-07-04T15:42:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.71,2097

2012-07-04T15:43:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.131,54218
2012-07-04T15:44:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,54223
2012-07-04T15:44:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.144,56214
2012-07-04T15:45:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,61609
2012-07-04T15:46:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T15:46:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:47:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:47:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:47:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55598
2012-07-04T15:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55599
2012-07-04T15:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55600
2012-07-04T15:47:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65213
2012-07-04T15:47:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65214
2012-07-04T15:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65215
2012-07-04T15:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65216
2012-07-04T15:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65217
2012-07-04T15:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65218
2012-07-04T15:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65219
2012-07-04T15:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65220
2012-07-04T15:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65221
2012-07-04T15:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65222
2012-07-04T15:47:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T15:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389

2012-07-04T15:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65223
2012-07-04T15:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65224
2012-07-04T15:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65225
2012-07-04T15:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65226
2012-07-04T15:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65227
2012-07-04T15:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65228
2012-07-04T15:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65229
2012-07-04T15:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65230
2012-07-04T15:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65231
2012-07-04T15:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65232
2012-07-04T15:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65233
2012-07-04T15:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65234
2012-07-04T15:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:52:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65235
2012-07-04T15:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65236
2012-07-04T15:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65237
2012-07-04T15:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65238
2012-07-04T15:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65239
2012-07-04T15:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65240
2012-07-04T15:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65241
2012-07-04T15:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65242
2012-07-04T15:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65243
2012-07-04T15:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65244
2012-07-04T15:52:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,59933
2012-07-04T15:53:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-04T15:53:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:53:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,59938
2012-07-04T15:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65245
2012-07-04T15:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65246
2012-07-04T15:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65247
2012-07-04T15:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65248
2012-07-04T15:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65249
2012-07-04T15:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65250
2012-07-04T15:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65251
2012-07-04T15:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65252
2012-07-04T15:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65253
2012-07-04T15:54:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65254
2012-07-04T15:54:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65256
2012-07-04T15:54:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:54:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52572
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52573
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64919
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64920
2012-07-04T15:55:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64921
2012-07-04T15:55:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55229
2012-07-04T15:55:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:55:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55230
2012-07-04T15:55:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55231

2012-07-04T15:55:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55232
2012-07-04T15:55:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55233
2012-07-04T15:55:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55234
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55235
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55236
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55237
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55238
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54151
2012-07-04T15:55:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:55:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.18,53974
2012-07-04T15:55:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56665
2012-07-04T15:55:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52608
2012-07-04T15:55:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:55:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54211
2012-07-04T15:55:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:57:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T15:57:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61422
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61423
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T15:57:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61424
2012-07-04T15:57:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56529
2012-07-04T15:57:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T15:57:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56530
2012-07-04T15:57:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56531
2012-07-04T15:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56532
2012-07-04T15:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56533
2012-07-04T15:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56534

2012-07-04T15:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56535
2012-07-04T15:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56536
2012-07-04T15:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56537
2012-07-04T15:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56538
2012-07-04T15:59:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,50458
2012-07-04T15:59:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,63405
2012-07-04T16:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.83,2881
2012-07-04T16:00:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,63410
2012-07-04T16:00:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:00:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:01:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.60,57364
2012-07-04T16:01:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:01:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:02:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:02:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:02:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:02:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56539
2012-07-04T16:02:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:02:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56540
2012-07-04T16:02:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56541
2012-07-04T16:02:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56542
2012-07-04T16:02:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56543
2012-07-04T16:02:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56544
2012-07-04T16:02:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56545
2012-07-04T16:02:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56546
2012-07-04T16:02:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56547
2012-07-04T16:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56548
2012-07-04T16:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56549
2012-07-04T16:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,50753
2012-07-04T16:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T16:03:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:03:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,51343
2012-07-04T16:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:05:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.64,61526
2012-07-04T16:06:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.235,1867
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61968
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61969
2012-07-04T16:06:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:06:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58614
2012-07-04T16:06:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58615
2012-07-04T16:06:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55987
2012-07-04T16:06:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55988
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54271
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54272
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57581
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57582
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51563
2012-07-04T16:06:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51564
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61378
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61379
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63692
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63693
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62631
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62632
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52708
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52709

2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56838
2012-07-04T16:06:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56839
2012-07-04T16:06:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.55,49846
2012-07-04T16:07:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:07:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64669
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64670
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64671
2012-07-04T16:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54427
2012-07-04T16:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54428
2012-07-04T16:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54429
2012-07-04T16:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54430
2012-07-04T16:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54431
2012-07-04T16:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54432
2012-07-04T16:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54433
2012-07-04T16:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54434
2012-07-04T16:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54435
2012-07-04T16:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54436
2012-07-04T16:08:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:08:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:08:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:09:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54437
2012-07-04T16:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54438

2012-07-04T16:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54439
2012-07-04T16:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54440
2012-07-04T16:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54441
2012-07-04T16:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54442
2012-07-04T16:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54443
2012-07-04T16:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54444
2012-07-04T16:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54445
2012-07-04T16:09:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54446
2012-07-04T16:09:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54447
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52996
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52997
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52998
2012-07-04T16:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52999
2012-07-04T16:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53000
2012-07-04T16:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53001
2012-07-04T16:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53002
2012-07-04T16:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53003
2012-07-04T16:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53004
2012-07-04T16:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53005
2012-07-04T16:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53006
2012-07-04T16:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53007
2012-07-04T16:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53008
2012-07-04T16:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53009
2012-07-04T16:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.101.0.11,389
2012-07-04T16:10:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58048
2012-07-04T16:10:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:10:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62785
2012-07-04T16:11:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.195,58670

2012-07-04T16:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:12:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:12:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62786
2012-07-04T16:12:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:12:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62787
2012-07-04T16:12:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62788
2012-07-04T16:12:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62789
2012-07-04T16:12:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62790
2012-07-04T16:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62791
2012-07-04T16:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62792
2012-07-04T16:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62793
2012-07-04T16:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62794
2012-07-04T16:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62795
2012-07-04T16:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62796
2012-07-04T16:15:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:15:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:16:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:16:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.156,52323
2012-07-04T16:17:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:17:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:17:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:17:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55592
2012-07-04T16:17:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:17:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55593
2012-07-04T16:17:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55594
2012-07-04T16:17:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56035
2012-07-04T16:17:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-04T16:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56036
2012-07-04T16:17:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56037
2012-07-04T16:17:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56038
2012-07-04T16:17:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56039
2012-07-04T16:17:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56040
2012-07-04T16:17:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56041
2012-07-04T16:17:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56042
2012-07-04T16:17:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56043
2012-07-04T16:17:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56044
2012-07-04T16:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T16:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56045
2012-07-04T16:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56046
2012-07-04T16:21:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56047
2012-07-04T16:21:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56048
2012-07-04T16:21:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56049
2012-07-04T16:21:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56050
2012-07-04T16:21:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56051
2012-07-04T16:21:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56052
2012-07-04T16:21:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56053
2012-07-04T16:21:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56054
2012-07-04T16:21:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56055
2012-07-04T16:22:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:22:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:22:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.62,1757
2012-07-04T16:22:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:23:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135

2012-07-04T16:23:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56056
2012-07-04T16:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56057
2012-07-04T16:23:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56058
2012-07-04T16:23:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56059
2012-07-04T16:23:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56060
2012-07-04T16:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56061
2012-07-04T16:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56062
2012-07-04T16:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56063
2012-07-04T16:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56064
2012-07-04T16:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56065
2012-07-04T16:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56066
2012-07-04T16:23:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56067
2012-07-04T16:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56068
2012-07-04T16:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56069
2012-07-04T16:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56070
2012-07-04T16:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56071
2012-07-04T16:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56072
2012-07-04T16:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56073
2012-07-04T16:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56074
2012-07-04T16:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56075
2012-07-04T16:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56076
2012-07-04T16:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56077
2012-07-04T16:28:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:28:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62890
2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62891
2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62892
2012-07-04T16:28:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50211
2012-07-04T16:28:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:28:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50212
2012-07-04T16:28:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50213
2012-07-04T16:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50214
2012-07-04T16:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50215
2012-07-04T16:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50216
2012-07-04T16:28:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50217
2012-07-04T16:28:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50218
2012-07-04T16:28:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50219
2012-07-04T16:28:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50220
2012-07-04T16:29:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.127,2004
2012-07-04T16:29:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:29:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:29:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:30:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:30:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.43,58821
2012-07-04T16:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T16:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T16:33:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T16:33:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50221
2012-07-04T16:33:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:33:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50222
2012-07-04T16:33:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50223

2012-07-04T16:33:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50224
2012-07-04T16:33:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50225
2012-07-04T16:33:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50226
2012-07-04T16:33:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50227
2012-07-04T16:33:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50228
2012-07-04T16:33:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50229
2012-07-04T16:33:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50230
2012-07-04T16:33:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50231
2012-07-04T16:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:36:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52578
2012-07-04T16:36:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52579
2012-07-04T16:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:36:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52580
2012-07-04T16:36:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:36:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T16:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52581
2012-07-04T16:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52582
2012-07-04T16:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52583
2012-07-04T16:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52584
2012-07-04T16:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52585
2012-07-04T16:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52586
2012-07-04T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52587
2012-07-04T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52588
2012-07-04T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52589
2012-07-04T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52590

2012-07-04T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52591
2012-07-04T16:37:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:37:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:38:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T16:38:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51773
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51774
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:38:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51775
2012-07-04T16:38:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60416
2012-07-04T16:38:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:38:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60417
2012-07-04T16:38:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60418
2012-07-04T16:38:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60419
2012-07-04T16:38:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60420
2012-07-04T16:38:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60421
2012-07-04T16:38:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60422
2012-07-04T16:38:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60423
2012-07-04T16:38:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60424
2012-07-04T16:38:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60425
2012-07-04T16:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60426
2012-07-04T16:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60427
2012-07-04T16:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60428
2012-07-04T16:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60429
2012-07-04T16:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60430
2012-07-04T16:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60431

2012-07-04T16:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60432
2012-07-04T16:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60433
2012-07-04T16:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60434
2012-07-04T16:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60435
2012-07-04T16:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60436
2012-07-04T16:43:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T16:43:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T16:43:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:43:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60437
2012-07-04T16:43:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:43:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60438
2012-07-04T16:43:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60439
2012-07-04T16:43:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60440
2012-07-04T16:43:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60441
2012-07-04T16:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60442
2012-07-04T16:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60443
2012-07-04T16:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60444
2012-07-04T16:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60445
2012-07-04T16:43:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60446
2012-07-04T16:43:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60447
2012-07-04T16:43:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:43:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:43:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,65310
2012-07-04T16:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:44:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,58653
2012-07-04T16:44:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:48:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T16:48:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T16:48:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:48:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54049

2012-07-04T16:48:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:48:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54050
2012-07-04T16:48:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:48:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54051
2012-07-04T16:48:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60625
2012-07-04T16:48:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:48:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60626
2012-07-04T16:48:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60627
2012-07-04T16:48:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60628
2012-07-04T16:48:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60629
2012-07-04T16:48:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60630
2012-07-04T16:48:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60631
2012-07-04T16:48:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60632
2012-07-04T16:48:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60633
2012-07-04T16:48:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60634
2012-07-04T16:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T16:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60635
2012-07-04T16:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T16:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T16:48:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53364
2012-07-04T16:48:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53365
2012-07-04T16:48:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53366
2012-07-04T16:48:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61338
2012-07-04T16:48:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:48:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61339
2012-07-04T16:48:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61340
2012-07-04T16:48:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61341
2012-07-04T16:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61342
2012-07-04T16:48:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61343

2012-07-04T16:48:47-03:00,info,appl
listen,17,0.0.0.0,61344
2012-07-04T16:48:47-03:00,info,appl
listen,17,0.0.0.0,61345
2012-07-04T16:48:47-03:00,info,appl
listen,17,0.0.0.0,61346
2012-07-04T16:48:48-03:00,info,appl
listen,17,0.0.0.0,61347
2012-07-04T16:48:48-03:00,info,appl
w,listen,17,0.0.0.0,54049
2012-07-04T16:48:48-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T16:48:52-03:00,info,appl
w,listen,17,0.0.0.0,53438
2012-07-04T16:48:52-03:00,info,appl
w,listen,17,0.0.0.0,52169
2012-07-04T16:48:52-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T16:48:52-03:00,info,appl
w,listen,17,0.0.0.0,58369
2012-07-04T16:48:52-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T16:50:06-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T16:50:06-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:50:06-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:50:06-03:00,info,appl
listen,17,0.0.0.0,58370
2012-07-04T16:50:06-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T16:50:06-03:00,info,appl
listen,17,0.0.0.0,58371
2012-07-04T16:50:07-03:00,info,appl
listen,17,0.0.0.0,58372
2012-07-04T16:50:07-03:00,info,appl
listen,17,0.0.0.0,58373
2012-07-04T16:50:08-03:00,info,appl
listen,17,0.0.0.0,58374
2012-07-04T16:50:08-03:00,info,appl
listen,17,0.0.0.0,58375
2012-07-04T16:50:08-03:00,info,appl
listen,17,0.0.0.0,58376
2012-07-04T16:50:09-03:00,info,appl
listen,17,0.0.0.0,58377
2012-07-04T16:50:09-03:00,info,appl
listen,17,0.0.0.0,58378
2012-07-04T16:50:09-03:00,info,appl
listen,17,0.0.0.0,58379
2012-07-04T16:50:09-03:00,info,appl
listen,17,0.0.0.0,58380
2012-07-04T16:50:14-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:50:14-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:50:14-03:00,info,appl
listen,17,0.0.0.0,58381
2012-07-04T16:50:14-03:00,info,appl
listen,17,0.0.0.0,58382

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:50:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58383
2012-07-04T16:50:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58384
2012-07-04T16:50:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58385
2012-07-04T16:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58386
2012-07-04T16:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58387
2012-07-04T16:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58388
2012-07-04T16:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58389
2012-07-04T16:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58390
2012-07-04T16:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58391
2012-07-04T16:50:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T16:50:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:50:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58392
2012-07-04T16:50:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58393
2012-07-04T16:50:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58394
2012-07-04T16:50:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58395
2012-07-04T16:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58396
2012-07-04T16:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58397
2012-07-04T16:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58398
2012-07-04T16:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58399
2012-07-04T16:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58400
2012-07-04T16:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58401
2012-07-04T16:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58402
2012-07-04T16:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T16:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58403
2012-07-04T16:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58404
2012-07-04T16:50:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.117,2031
2012-07-04T16:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58405
2012-07-04T16:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58406

2012-07-04T16:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58407
2012-07-04T16:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58408
2012-07-04T16:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58409
2012-07-04T16:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58410
2012-07-04T16:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58411
2012-07-04T16:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58412
2012-07-04T16:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58413
2012-07-04T16:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T16:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58414
2012-07-04T16:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58415
2012-07-04T16:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58416
2012-07-04T16:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58417
2012-07-04T16:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58418
2012-07-04T16:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58419
2012-07-04T16:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58420
2012-07-04T16:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58421
2012-07-04T16:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58422
2012-07-04T16:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58423
2012-07-04T16:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58424
2012-07-04T16:50:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:50:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T16:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58425
2012-07-04T16:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58426
2012-07-04T16:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58427
2012-07-04T16:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58428
2012-07-04T16:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58429
2012-07-04T16:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58430

2012-07-04T16:50:47-03:00,info,appl
listen,17,0.0.0.0,58431
2012-07-04T16:50:47-03:00,info,appl
listen,17,0.0.0.0,58432
2012-07-04T16:50:47-03:00,info,appl
listen,17,0.0.0.0,58433
2012-07-04T16:50:47-03:00,info,appl
listen,17,0.0.0.0,58434
2012-07-04T16:50:47-03:00,info,appl
listen,17,0.0.0.0,58435
2012-07-04T16:50:52-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:50:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:50:52-03:00,info,appl
listen,17,0.0.0.0,58436
2012-07-04T16:50:52-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T16:50:52-03:00,info,appl
listen,17,0.0.0.0,58437
2012-07-04T16:50:53-03:00,info,appl
listen,17,0.0.0.0,58438
2012-07-04T16:50:53-03:00,info,appl
listen,17,0.0.0.0,58439
2012-07-04T16:50:53-03:00,info,appl
listen,17,0.0.0.0,58440
2012-07-04T16:50:54-03:00,info,appl
listen,17,0.0.0.0,58441
2012-07-04T16:50:54-03:00,info,appl
listen,17,0.0.0.0,58442
2012-07-04T16:50:54-03:00,info,appl
listen,17,0.0.0.0,58443
2012-07-04T16:50:54-03:00,info,appl
listen,17,0.0.0.0,58444
2012-07-04T16:50:55-03:00,info,appl
listen,17,0.0.0.0,58445
2012-07-04T16:50:55-03:00,info,appl
listen,17,0.0.0.0,58446
2012-07-04T16:51:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:00-03:00,info,appl
listen,17,0.0.0.0,58447
2012-07-04T16:51:00-03:00,info,appl
listen,17,0.0.0.0,58448
2012-07-04T16:51:01-03:00,info,appl
listen,17,0.0.0.0,58449
2012-07-04T16:51:01-03:00,info,appl
listen,17,0.0.0.0,58450
2012-07-04T16:51:02-03:00,info,appl
listen,17,0.0.0.0,58451
2012-07-04T16:51:02-03:00,info,appl
listen,17,0.0.0.0,58452
2012-07-04T16:51:02-03:00,info,appl
listen,17,0.0.0.0,58453
2012-07-04T16:51:02-03:00,info,appl
listen,17,0.0.0.0,58454
2012-07-04T16:51:03-03:00,info,appl
listen,17,0.0.0.0,58455

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:51:03-03:00,info,appl
listen,17,0.0.0.0,58456
2012-07-04T16:51:03-03:00,info,appl
listen,17,0.0.0.0,58457
2012-07-04T16:51:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:08-03:00,info,appl
listen,17,0.0.0.0,58458
2012-07-04T16:51:08-03:00,info,appl
listen,17,0.0.0.0,58459
2012-07-04T16:51:09-03:00,info,appl
listen,17,0.0.0.0,58460
2012-07-04T16:51:09-03:00,info,appl
listen,17,0.0.0.0,58461
2012-07-04T16:51:10-03:00,info,appl
listen,17,0.0.0.0,58462
2012-07-04T16:51:10-03:00,info,appl
listen,17,0.0.0.0,58463
2012-07-04T16:51:10-03:00,info,appl
listen,17,0.0.0.0,58464
2012-07-04T16:51:10-03:00,info,appl
listen,17,0.0.0.0,58465
2012-07-04T16:51:11-03:00,info,appl
listen,17,0.0.0.0,58466
2012-07-04T16:51:11-03:00,info,appl
listen,17,0.0.0.0,58467
2012-07-04T16:51:11-03:00,info,appl
send,17,10.102.0.20,389
2012-07-04T16:51:11-03:00,info,appl
listen,17,0.0.0.0,58468
2012-07-04T16:51:14-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T16:51:15-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:15-03:00,info,appl
listen,17,0.0.0.0,58469
2012-07-04T16:51:16-03:00,info,appl
listen,17,0.0.0.0,58470
2012-07-04T16:51:16-03:00,info,appl
listen,17,0.0.0.0,58471
2012-07-04T16:51:17-03:00,info,appl
listen,17,0.0.0.0,58472
2012-07-04T16:51:17-03:00,info,appl
listen,17,0.0.0.0,58473
2012-07-04T16:51:17-03:00,info,appl
listen,17,0.0.0.0,58474
2012-07-04T16:51:18-03:00,info,appl
listen,17,0.0.0.0,58475
2012-07-04T16:51:18-03:00,info,appl
listen,17,0.0.0.0,58476
2012-07-04T16:51:18-03:00,info,appl
listen,17,0.0.0.0,58477
2012-07-04T16:51:18-03:00,info,appl
listen,17,0.0.0.0,58478
2012-07-04T16:51:19-03:00,info,appl
listen,17,0.0.0.0,58479

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:51:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:23-03:00,info,appl
listen,17,0.0.0.0,58480
2012-07-04T16:51:24-03:00,info,appl
listen,17,0.0.0.0,58481
2012-07-04T16:51:24-03:00,info,appl
listen,17,0.0.0.0,58482
2012-07-04T16:51:25-03:00,info,appl
listen,17,0.0.0.0,58483
2012-07-04T16:51:25-03:00,info,appl
listen,17,0.0.0.0,58484
2012-07-04T16:51:26-03:00,info,appl
listen,17,0.0.0.0,58485
2012-07-04T16:51:26-03:00,info,appl
listen,17,0.0.0.0,58486
2012-07-04T16:51:26-03:00,info,appl
listen,17,0.0.0.0,58487
2012-07-04T16:51:26-03:00,info,appl
listen,17,0.0.0.0,58488
2012-07-04T16:51:26-03:00,info,appl
listen,17,0.0.0.0,58489
2012-07-04T16:51:27-03:00,info,appl
listen,17,0.0.0.0,58490
2012-07-04T16:51:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:31-03:00,info,appl
listen,17,0.0.0.0,58491
2012-07-04T16:51:31-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T16:51:31-03:00,info,appl
listen,17,0.0.0.0,58492
2012-07-04T16:51:32-03:00,info,appl
listen,17,0.0.0.0,58493
2012-07-04T16:51:32-03:00,info,appl
listen,17,0.0.0.0,58494
2012-07-04T16:51:33-03:00,info,appl
listen,17,0.0.0.0,58495
2012-07-04T16:51:33-03:00,info,appl
listen,17,0.0.0.0,58496
2012-07-04T16:51:33-03:00,info,appl
listen,17,0.0.0.0,58497
2012-07-04T16:51:34-03:00,info,appl
listen,17,0.0.0.0,58498
2012-07-04T16:51:34-03:00,info,appl
listen,17,0.0.0.0,58499
2012-07-04T16:51:34-03:00,info,appl
listen,17,0.0.0.0,58500
2012-07-04T16:51:34-03:00,info,appl
listen,17,0.0.0.0,58501
2012-07-04T16:51:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:39-03:00,info,appl
listen,17,0.0.0.0,58502

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:51:39-03:00,info,appl
listen,17,0.0.0.0,58503
2012-07-04T16:51:40-03:00,info,appl
listen,17,0.0.0.0,58504
2012-07-04T16:51:40-03:00,info,appl
listen,17,0.0.0.0,58505
2012-07-04T16:51:41-03:00,info,appl
listen,17,0.0.0.0,58506
2012-07-04T16:51:41-03:00,info,appl
listen,17,0.0.0.0,58507
2012-07-04T16:51:41-03:00,info,appl
listen,17,0.0.0.0,58508
2012-07-04T16:51:42-03:00,info,appl
listen,17,0.0.0.0,58509
2012-07-04T16:51:42-03:00,info,appl
listen,17,0.0.0.0,58510
2012-07-04T16:51:42-03:00,info,appl
listen,17,0.0.0.0,58511
2012-07-04T16:51:42-03:00,info,appl
listen,17,0.0.0.0,58512
2012-07-04T16:51:46-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-04T16:51:46-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:51:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:46-03:00,info,appl
listen,17,0.0.0.0,58513
2012-07-04T16:51:47-03:00,info,appl
listen,17,0.0.0.0,58514
2012-07-04T16:51:47-03:00,info,appl
listen,17,0.0.0.0,58515
2012-07-04T16:51:48-03:00,info,appl
listen,17,0.0.0.0,58516
2012-07-04T16:51:48-03:00,info,appl
listen,17,0.0.0.0,58517
2012-07-04T16:51:49-03:00,info,appl
listen,17,0.0.0.0,58518
2012-07-04T16:51:49-03:00,info,appl
listen,17,0.0.0.0,58519
2012-07-04T16:51:49-03:00,info,appl
listen,17,0.0.0.0,58520
2012-07-04T16:51:49-03:00,info,appl
listen,17,0.0.0.0,58521
2012-07-04T16:51:49-03:00,info,appl
listen,17,0.0.0.0,58522
2012-07-04T16:51:50-03:00,info,appl
listen,17,0.0.0.0,58523
2012-07-04T16:51:52-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-04T16:51:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:51:52-03:00,info,appl
listen,17,0.0.0.0,58524
2012-07-04T16:51:52-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T16:51:53-03:00,info,appl
listen,17,0.0.0.0,58525
2012-07-04T16:51:53-03:00,info,appl
listen,17,0.0.0.0,58526

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:51:54-03:00,info,appl
listen,17,0.0.0.0,58527
2012-07-04T16:51:54-03:00,info,appl
listen,17,0.0.0.0,58528
2012-07-04T16:51:55-03:00,info,appl
listen,17,0.0.0.0,58529
2012-07-04T16:51:55-03:00,info,appl
listen,17,0.0.0.0,58530
2012-07-04T16:51:55-03:00,info,appl
listen,17,0.0.0.0,58531
2012-07-04T16:51:55-03:00,info,appl
listen,17,0.0.0.0,58532
2012-07-04T16:51:55-03:00,info,appl
listen,17,0.0.0.0,58533
2012-07-04T16:51:56-03:00,info,appl
listen,17,0.0.0.0,58534
2012-07-04T16:52:01-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T16:52:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:52:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:52:01-03:00,info,appl
listen,17,0.0.0.0,58535
2012-07-04T16:52:02-03:00,info,appl
listen,17,0.0.0.0,58536
2012-07-04T16:52:02-03:00,info,appl
listen,17,0.0.0.0,58537
2012-07-04T16:52:03-03:00,info,appl
listen,17,0.0.0.0,58538
2012-07-04T16:52:03-03:00,info,appl
listen,17,0.0.0.0,58539
2012-07-04T16:52:04-03:00,info,appl
listen,17,0.0.0.0,58540
2012-07-04T16:52:04-03:00,info,appl
listen,17,0.0.0.0,58541
2012-07-04T16:52:04-03:00,info,appl
listen,17,0.0.0.0,58542
2012-07-04T16:52:04-03:00,info,appl
listen,17,0.0.0.0,58543
2012-07-04T16:52:05-03:00,info,appl
listen,17,0.0.0.0,58544
2012-07-04T16:52:05-03:00,info,appl
listen,17,0.0.0.0,58545
2012-07-04T16:52:09-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T16:52:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T16:52:09-03:00,info,appl
listen,17,0.0.0.0,58546
2012-07-04T16:52:09-03:00,info,appl
listen,17,0.0.0.0,58547
2012-07-04T16:52:10-03:00,info,appl
listen,17,0.0.0.0,58548
2012-07-04T16:52:10-03:00,info,appl
listen,17,0.0.0.0,58549
2012-07-04T16:52:11-03:00,info,appl
listen,17,0.0.0.0,58550
2012-07-04T16:52:11-03:00,info,appl
listen,17,0.0.0.0,58551

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T16:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58552
2012-07-04T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58553
2012-07-04T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58554
2012-07-04T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.197,389
2012-07-04T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58555
2012-07-04T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58556
2012-07-04T16:53:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T16:53:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T16:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58557
2012-07-04T16:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T16:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58558
2012-07-04T16:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58559
2012-07-04T16:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58560
2012-07-04T16:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58561
2012-07-04T16:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58562
2012-07-04T16:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58563
2012-07-04T16:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58564
2012-07-04T16:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58565
2012-07-04T16:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58566
2012-07-04T16:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58567
2012-07-04T16:54:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,64513
2012-07-04T16:54:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,57049
2012-07-04T16:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58568
2012-07-04T16:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58569
2012-07-04T16:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58570
2012-07-04T16:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58571
2012-07-04T16:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58572

2012-07-04T16:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58573
2012-07-04T16:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58574
2012-07-04T16:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58575
2012-07-04T16:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58576
2012-07-04T16:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58577
2012-07-04T16:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58578
2012-07-04T16:55:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,57053
2012-07-04T16:57:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T16:57:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:58:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:58:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,51123
2012-07-04T16:58:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T16:58:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51166
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51167
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T16:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51168
2012-07-04T16:58:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61481
2012-07-04T16:58:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T16:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61482
2012-07-04T16:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61483
2012-07-04T16:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61484
2012-07-04T16:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61485
2012-07-04T16:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61486
2012-07-04T16:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61487
2012-07-04T16:58:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61488
2012-07-04T16:58:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T16:58:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61489

2012-07-04T16:58:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61490
2012-07-04T17:00:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,51128
2012-07-04T17:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.117,2465
2012-07-04T17:02:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.28,1461
2012-07-04T17:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:03:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:03:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:03:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:03:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61491
2012-07-04T17:03:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:03:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61492
2012-07-04T17:03:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61493
2012-07-04T17:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61494
2012-07-04T17:03:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61495
2012-07-04T17:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61496
2012-07-04T17:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61497
2012-07-04T17:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61498
2012-07-04T17:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61499
2012-07-04T17:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61500
2012-07-04T17:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61501
2012-07-04T17:04:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:04:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:05:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61502
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63709

2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59578
2012-07-04T17:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59579
2012-07-04T17:07:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59580
2012-07-04T17:07:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64065
2012-07-04T17:07:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64066
2012-07-04T17:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53053
2012-07-04T17:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53054
2012-07-04T17:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60889
2012-07-04T17:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60890
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57724
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57725
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54981
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54982
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53476
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53477
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59530
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59531
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62553
2012-07-04T17:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62554
2012-07-04T17:07:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49335
2012-07-04T17:07:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49336
2012-07-04T17:09:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:09:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:09:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60298
2012-07-04T17:09:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60299

2012-07-04T17:09:01-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T17:09:01-03:00,info,appl
listen,17,0.0.0.0,60300
2012-07-04T17:09:02-03:00,info,appl
w,listen,17,0.0.0.0,57315
2012-07-04T17:09:02-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T17:09:02-03:00,info,appl
listen,17,0.0.0.0,57316
2012-07-04T17:09:02-03:00,info,appl
listen,17,0.0.0.0,57317
2012-07-04T17:09:02-03:00,info,appl
listen,17,0.0.0.0,57318
2012-07-04T17:09:03-03:00,info,appl
listen,17,0.0.0.0,57319
2012-07-04T17:09:03-03:00,info,appl
listen,17,0.0.0.0,57320
2012-07-04T17:09:03-03:00,info,appl
listen,17,0.0.0.0,57321
2012-07-04T17:09:03-03:00,info,appl
listen,17,0.0.0.0,57322
2012-07-04T17:09:04-03:00,info,appl
listen,17,0.0.0.0,57323
2012-07-04T17:09:04-03:00,info,appl
listen,17,0.0.0.0,57324
2012-07-04T17:10:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T17:10:19-03:00,info,appl
listen,17,0.0.0.0,57325
2012-07-04T17:10:19-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T17:10:20-03:00,info,appl
listen,17,0.0.0.0,57326
2012-07-04T17:10:20-03:00,info,appl
listen,17,0.0.0.0,57327
2012-07-04T17:10:21-03:00,info,appl
listen,17,0.0.0.0,57328
2012-07-04T17:10:21-03:00,info,appl
listen,17,0.0.0.0,57329
2012-07-04T17:10:21-03:00,info,appl
listen,17,0.0.0.0,57330
2012-07-04T17:10:22-03:00,info,appl
listen,17,0.0.0.0,57331
2012-07-04T17:10:22-03:00,info,appl
listen,17,0.0.0.0,57332
2012-07-04T17:10:22-03:00,info,appl
listen,17,0.0.0.0,57333
2012-07-04T17:10:22-03:00,info,appl
listen,17,0.0.0.0,57334
2012-07-04T17:10:22-03:00,info,appl
listen,17,0.0.0.0,57335
2012-07-04T17:10:27-03:00,info,appl
w,listen,17,0.0.0.0,64866
2012-07-04T17:10:27-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T17:10:27-03:00,info,appl
listen,17,0.0.0.0,64867
2012-07-04T17:10:27-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T17:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64868
2012-07-04T17:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64869
2012-07-04T17:10:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64870
2012-07-04T17:10:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64871
2012-07-04T17:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64872
2012-07-04T17:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64873
2012-07-04T17:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64874
2012-07-04T17:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64875
2012-07-04T17:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64876
2012-07-04T17:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64877
2012-07-04T17:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64878
2012-07-04T17:12:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:12:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:12:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63358
2012-07-04T17:12:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:12:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57089
2012-07-04T17:12:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:13:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:14:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:14:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57090
2012-07-04T17:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57091
2012-07-04T17:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57092
2012-07-04T17:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57093
2012-07-04T17:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57094
2012-07-04T17:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57095
2012-07-04T17:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57096
2012-07-04T17:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57097

2012-07-04T17:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57098
2012-07-04T17:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57099
2012-07-04T17:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57100
2012-07-04T17:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:19:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:19:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:19:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:19:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60545
2012-07-04T17:19:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:19:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60546
2012-07-04T17:19:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60547
2012-07-04T17:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50681
2012-07-04T17:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T17:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50682
2012-07-04T17:19:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50683
2012-07-04T17:19:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50684
2012-07-04T17:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50685
2012-07-04T17:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50686
2012-07-04T17:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50687
2012-07-04T17:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50688
2012-07-04T17:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50689
2012-07-04T17:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50690
2012-07-04T17:19:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:19:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:19:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:20:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T17:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T17:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50691
2012-07-04T17:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50692
2012-07-04T17:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50693
2012-07-04T17:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50694
2012-07-04T17:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50695
2012-07-04T17:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50696
2012-07-04T17:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50697
2012-07-04T17:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50698
2012-07-04T17:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50699
2012-07-04T17:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50700
2012-07-04T17:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50701
2012-07-04T17:22:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,57845
2012-07-04T17:23:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,52152
2012-07-04T17:24:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:24:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50702
2012-07-04T17:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50703
2012-07-04T17:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50704
2012-07-04T17:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50705
2012-07-04T17:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50706
2012-07-04T17:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50707
2012-07-04T17:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50708
2012-07-04T17:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50709
2012-07-04T17:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50710
2012-07-04T17:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50711
2012-07-04T17:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50712
2012-07-04T17:25:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T17:25:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50713
2012-07-04T17:25:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T17:25:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50714
2012-07-04T17:25:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50715
2012-07-04T17:25:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50716
2012-07-04T17:25:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50717
2012-07-04T17:25:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50718
2012-07-04T17:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50719
2012-07-04T17:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50720
2012-07-04T17:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50721
2012-07-04T17:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50722
2012-07-04T17:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50723
2012-07-04T17:26:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:26:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:27:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:29:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:29:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:29:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52025
2012-07-04T17:29:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52026
2012-07-04T17:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T17:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52027
2012-07-04T17:29:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55609
2012-07-04T17:29:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T17:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55610
2012-07-04T17:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55611
2012-07-04T17:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55612
2012-07-04T17:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55613

2012-07-04T17:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55614
2012-07-04T17:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55615
2012-07-04T17:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55616
2012-07-04T17:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55617
2012-07-04T17:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55618
2012-07-04T17:33:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:33:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:33:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55619
2012-07-04T17:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55620
2012-07-04T17:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55621
2012-07-04T17:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55622
2012-07-04T17:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55623
2012-07-04T17:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55624
2012-07-04T17:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55625
2012-07-04T17:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55626
2012-07-04T17:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55627
2012-07-04T17:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55628
2012-07-04T17:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55629
2012-07-04T17:34:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T17:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55630
2012-07-04T17:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-04T17:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55631
2012-07-04T17:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55632
2012-07-04T17:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55633
2012-07-04T17:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55634
2012-07-04T17:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55635
2012-07-04T17:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55636
2012-07-04T17:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55637
2012-07-04T17:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55638
2012-07-04T17:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55639
2012-07-04T17:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55640
2012-07-04T17:38:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,55946
2012-07-04T17:39:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,53490
2012-07-04T17:39:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:39:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56212
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56213
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56214
2012-07-04T17:39:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61288
2012-07-04T17:39:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T17:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61289
2012-07-04T17:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61290
2012-07-04T17:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61291
2012-07-04T17:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61292
2012-07-04T17:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61293
2012-07-04T17:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61294
2012-07-04T17:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61295
2012-07-04T17:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61296

2012-07-04T17:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61297
2012-07-04T17:40:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:40:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61298
2012-07-04T17:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T17:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61299
2012-07-04T17:40:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61300
2012-07-04T17:40:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61301
2012-07-04T17:40:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61302
2012-07-04T17:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61303
2012-07-04T17:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61304
2012-07-04T17:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61305
2012-07-04T17:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61306
2012-07-04T17:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61307
2012-07-04T17:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61308
2012-07-04T17:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:41:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61309
2012-07-04T17:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:44:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:44:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61310
2012-07-04T17:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61311
2012-07-04T17:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61312
2012-07-04T17:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61313
2012-07-04T17:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61314
2012-07-04T17:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61315
2012-07-04T17:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61316

2012-07-04T17:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61317
2012-07-04T17:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61318
2012-07-04T17:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61319
2012-07-04T17:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61320
2012-07-04T17:47:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T17:47:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:48:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T17:48:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:49:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:49:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54608
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54609
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T17:49:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54610
2012-07-04T17:49:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62351
2012-07-04T17:49:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T17:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62352
2012-07-04T17:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62353
2012-07-04T17:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62354
2012-07-04T17:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62355
2012-07-04T17:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62356
2012-07-04T17:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62357
2012-07-04T17:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62358
2012-07-04T17:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62359
2012-07-04T17:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62360
2012-07-04T17:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389

2012-07-04T17:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62361
2012-07-04T17:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62362
2012-07-04T17:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62363
2012-07-04T17:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62364
2012-07-04T17:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62365
2012-07-04T17:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62366
2012-07-04T17:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62367
2012-07-04T17:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62368
2012-07-04T17:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62369
2012-07-04T17:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62370
2012-07-04T17:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62371
2012-07-04T17:54:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,53323
2012-07-04T17:54:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:54:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62372
2012-07-04T17:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62373
2012-07-04T17:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62374
2012-07-04T17:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62375
2012-07-04T17:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62376
2012-07-04T17:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62377
2012-07-04T17:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62378
2012-07-04T17:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62379
2012-07-04T17:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62380
2012-07-04T17:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62381
2012-07-04T17:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62382
2012-07-04T17:54:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-04T17:54:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:55:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,61967
2012-07-04T17:55:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:55:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:55:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62383
2012-07-04T17:55:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T17:55:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62384
2012-07-04T17:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62385
2012-07-04T17:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62386
2012-07-04T17:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62387
2012-07-04T17:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62388
2012-07-04T17:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62389
2012-07-04T17:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62390
2012-07-04T17:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62391
2012-07-04T17:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62392
2012-07-04T17:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62393
2012-07-04T17:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T17:59:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T17:59:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60579
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60580
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T17:59:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60581
2012-07-04T17:59:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59091
2012-07-04T17:59:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T17:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59092
2012-07-04T17:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59093
2012-07-04T17:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59094

2012-07-04T17:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59095
2012-07-04T17:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59096
2012-07-04T17:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59097
2012-07-04T17:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59098
2012-07-04T17:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59099
2012-07-04T17:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59100
2012-07-04T18:01:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:01:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:02:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:02:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:04:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T18:04:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T18:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59101
2012-07-04T18:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59102
2012-07-04T18:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59103
2012-07-04T18:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59104
2012-07-04T18:04:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59105
2012-07-04T18:04:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59106
2012-07-04T18:04:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59107
2012-07-04T18:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59108
2012-07-04T18:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59109
2012-07-04T18:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59110
2012-07-04T18:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59111
2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51229

2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52797
2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52798
2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52799
2012-07-04T18:07:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T18:07:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:07:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64909
2012-07-04T18:07:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64910
2012-07-04T18:07:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64911
2012-07-04T18:07:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58111
2012-07-04T18:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58112
2012-07-04T18:07:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55809
2012-07-04T18:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55810
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60286
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60287
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54370
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54371
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57408
2012-07-04T18:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57409
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62248
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62249
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50694
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50695
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58299
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58300
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52857
2012-07-04T18:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52858
2012-07-04T18:09:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:09:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-04T18:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:09:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T18:09:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T18:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:09:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59951
2012-07-04T18:09:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59952
2012-07-04T18:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59953
2012-07-04T18:09:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65336
2012-07-04T18:09:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T18:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65337
2012-07-04T18:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65338
2012-07-04T18:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65339
2012-07-04T18:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65340
2012-07-04T18:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65341
2012-07-04T18:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65342
2012-07-04T18:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65343
2012-07-04T18:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65344
2012-07-04T18:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65345
2012-07-04T18:10:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65346
2012-07-04T18:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:10:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65347
2012-07-04T18:10:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65348
2012-07-04T18:10:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65349
2012-07-04T18:10:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65350
2012-07-04T18:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65351
2012-07-04T18:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65352

2012-07-04T18:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65353
2012-07-04T18:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65354
2012-07-04T18:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65355
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65356
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56223
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56224
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56225
2012-07-04T18:10:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56226
2012-07-04T18:10:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56227
2012-07-04T18:10:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56228
2012-07-04T18:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56229
2012-07-04T18:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56230
2012-07-04T18:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56231
2012-07-04T18:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56232
2012-07-04T18:10:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56233
2012-07-04T18:10:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56234
2012-07-04T18:10:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56235
2012-07-04T18:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64869
2012-07-04T18:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63124
2012-07-04T18:14:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:14:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63125
2012-07-04T18:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63126
2012-07-04T18:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63127
2012-07-04T18:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63128

2012-07-04T18:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63129
2012-07-04T18:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63130
2012-07-04T18:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63131
2012-07-04T18:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63132
2012-07-04T18:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63133
2012-07-04T18:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63134
2012-07-04T18:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63135
2012-07-04T18:16:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:16:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:16:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:17:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:19:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:19:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:19:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:19:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56310
2012-07-04T18:19:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:19:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56311
2012-07-04T18:19:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:19:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56312
2012-07-04T18:19:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53001
2012-07-04T18:19:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T18:19:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53002
2012-07-04T18:19:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53003
2012-07-04T18:19:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53004
2012-07-04T18:19:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53005
2012-07-04T18:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53006
2012-07-04T18:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53007
2012-07-04T18:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53008

2012-07-04T18:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53009
2012-07-04T18:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53010
2012-07-04T18:22:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T18:22:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:22:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53011
2012-07-04T18:22:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:22:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53012
2012-07-04T18:22:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53013
2012-07-04T18:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53014
2012-07-04T18:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53015
2012-07-04T18:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53016
2012-07-04T18:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53017
2012-07-04T18:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53018
2012-07-04T18:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53019
2012-07-04T18:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53020
2012-07-04T18:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53021
2012-07-04T18:23:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:23:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:23:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:24:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:24:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:24:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53022
2012-07-04T18:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:24:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53023
2012-07-04T18:24:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53024
2012-07-04T18:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53025
2012-07-04T18:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53026
2012-07-04T18:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53027

2012-07-04T18:24:58-03:00,info,appl
listen,17,0.0.0.0,53028
2012-07-04T18:24:58-03:00,info,appl
listen,17,0.0.0.0,53029
2012-07-04T18:24:58-03:00,info,appl
listen,17,0.0.0.0,53030
2012-07-04T18:24:59-03:00,info,appl
listen,17,0.0.0.0,53031
2012-07-04T18:24:59-03:00,info,appl
listen,17,0.0.0.0,53032
2012-07-04T18:25:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:25:47-03:00,info,appl
listen,17,0.0.0.0,53033
2012-07-04T18:25:47-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T18:25:48-03:00,info,appl
listen,17,0.0.0.0,53034
2012-07-04T18:25:48-03:00,info,appl
listen,17,0.0.0.0,53035
2012-07-04T18:25:49-03:00,info,appl
listen,17,0.0.0.0,53036
2012-07-04T18:25:49-03:00,info,appl
listen,17,0.0.0.0,53037
2012-07-04T18:25:49-03:00,info,appl
listen,17,0.0.0.0,53038
2012-07-04T18:25:50-03:00,info,appl
listen,17,0.0.0.0,53039
2012-07-04T18:25:50-03:00,info,appl
listen,17,0.0.0.0,53040
2012-07-04T18:25:50-03:00,info,appl
listen,17,0.0.0.0,53041
2012-07-04T18:25:50-03:00,info,appl
listen,17,0.0.0.0,53042
2012-07-04T18:25:50-03:00,info,appl
listen,17,0.0.0.0,53043
2012-07-04T18:27:17-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-04T18:27:17-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:17-03:00,info,appl
listen,17,0.0.0.0,53044
2012-07-04T18:27:17-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T18:27:17-03:00,info,appl
listen,17,0.0.0.0,53045
2012-07-04T18:27:18-03:00,info,appl
listen,17,0.0.0.0,53046
2012-07-04T18:27:18-03:00,info,appl
listen,17,0.0.0.0,53047
2012-07-04T18:27:18-03:00,info,appl
listen,17,0.0.0.0,53048
2012-07-04T18:27:19-03:00,info,appl
listen,17,0.0.0.0,53049
2012-07-04T18:27:19-03:00,info,appl
listen,17,0.0.0.0,53050
2012-07-04T18:27:19-03:00,info,appl
listen,17,0.0.0.0,53051

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:27:19-03:00,info,appl
listen,17,0.0.0.0,53052
2012-07-04T18:27:20-03:00,info,appl
listen,17,0.0.0.0,53053
2012-07-04T18:27:20-03:00,info,appl
listen,17,0.0.0.0,53054
2012-07-04T18:27:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:20-03:00,info,appl
listen,17,0.0.0.0,53055
2012-07-04T18:27:20-03:00,info,appl
listen,17,0.0.0.0,53056
2012-07-04T18:27:21-03:00,info,appl
listen,17,0.0.0.0,53057
2012-07-04T18:27:21-03:00,info,appl
listen,17,0.0.0.0,53058
2012-07-04T18:27:22-03:00,info,appl
listen,17,0.0.0.0,53059
2012-07-04T18:27:22-03:00,info,appl
listen,17,0.0.0.0,53060
2012-07-04T18:27:22-03:00,info,appl
listen,17,0.0.0.0,53061
2012-07-04T18:27:22-03:00,info,appl
listen,17,0.0.0.0,53062
2012-07-04T18:27:23-03:00,info,appl
listen,17,0.0.0.0,53063
2012-07-04T18:27:23-03:00,info,appl
listen,17,0.0.0.0,53064
2012-07-04T18:27:23-03:00,info,appl
listen,17,0.0.0.0,53065
2012-07-04T18:27:23-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:23-03:00,info,appl
listen,17,0.0.0.0,53066
2012-07-04T18:27:24-03:00,info,appl
listen,17,0.0.0.0,53067
2012-07-04T18:27:24-03:00,info,appl
listen,17,0.0.0.0,53068
2012-07-04T18:27:25-03:00,info,appl
listen,17,0.0.0.0,53069
2012-07-04T18:27:25-03:00,info,appl
listen,17,0.0.0.0,53070
2012-07-04T18:27:25-03:00,info,appl
listen,17,0.0.0.0,53071
2012-07-04T18:27:26-03:00,info,appl
listen,17,0.0.0.0,53072
2012-07-04T18:27:26-03:00,info,appl
listen,17,0.0.0.0,53073
2012-07-04T18:27:26-03:00,info,appl
listen,17,0.0.0.0,53074
2012-07-04T18:27:26-03:00,info,appl
listen,17,0.0.0.0,53075
2012-07-04T18:27:26-03:00,info,appl
listen,17,0.0.0.0,53076
2012-07-04T18:27:27-03:00,info,appl
connect out,6,10.10.0.12,1025

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:27:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:27-03:00,info,appl
listen,17,0.0.0.0,53077
2012-07-04T18:27:27-03:00,info,appl
listen,17,0.0.0.0,53078
2012-07-04T18:27:28-03:00,info,appl
listen,17,0.0.0.0,53079
2012-07-04T18:27:28-03:00,info,appl
listen,17,0.0.0.0,53080
2012-07-04T18:27:28-03:00,info,appl
listen,17,0.0.0.0,53081
2012-07-04T18:27:29-03:00,info,appl
listen,17,0.0.0.0,53082
2012-07-04T18:27:29-03:00,info,appl
listen,17,0.0.0.0,53083
2012-07-04T18:27:29-03:00,info,appl
listen,17,0.0.0.0,53084
2012-07-04T18:27:29-03:00,info,appl
listen,17,0.0.0.0,53085
2012-07-04T18:27:30-03:00,info,appl
listen,17,0.0.0.0,53086
2012-07-04T18:27:30-03:00,info,appl
listen,17,0.0.0.0,53087
2012-07-04T18:27:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:30-03:00,info,appl
listen,17,0.0.0.0,53088
2012-07-04T18:27:31-03:00,info,appl
listen,17,0.0.0.0,53089
2012-07-04T18:27:31-03:00,info,appl
listen,17,0.0.0.0,53090
2012-07-04T18:27:32-03:00,info,appl
listen,17,0.0.0.0,53091
2012-07-04T18:27:32-03:00,info,appl
listen,17,0.0.0.0,53092
2012-07-04T18:27:33-03:00,info,appl
listen,17,0.0.0.0,53093
2012-07-04T18:27:33-03:00,info,appl
listen,17,0.0.0.0,53094
2012-07-04T18:27:33-03:00,info,appl
listen,17,0.0.0.0,53095
2012-07-04T18:27:33-03:00,info,appl
listen,17,0.0.0.0,53096
2012-07-04T18:27:33-03:00,info,appl
listen,17,0.0.0.0,53097
2012-07-04T18:27:34-03:00,info,appl
listen,17,0.0.0.0,53098
2012-07-04T18:27:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:34-03:00,info,appl
listen,17,0.0.0.0,53099
2012-07-04T18:27:34-03:00,info,appl
listen,17,0.0.0.0,53100
2012-07-04T18:27:35-03:00,info,appl
listen,17,0.0.0.0,53101

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:27:35-03:00,info,appl
listen,17,0.0.0.0,53102
2012-07-04T18:27:36-03:00,info,appl
listen,17,0.0.0.0,53103
2012-07-04T18:27:36-03:00,info,appl
listen,17,0.0.0.0,53104
2012-07-04T18:27:36-03:00,info,appl
send,17,10.102.0.20,389
2012-07-04T18:27:36-03:00,info,appl
listen,17,0.0.0.0,53105
2012-07-04T18:27:36-03:00,info,appl
listen,17,0.0.0.0,53106
2012-07-04T18:27:37-03:00,info,appl
listen,17,0.0.0.0,53107
2012-07-04T18:27:37-03:00,info,appl
listen,17,0.0.0.0,53108
2012-07-04T18:27:37-03:00,info,appl
listen,17,0.0.0.0,53109
2012-07-04T18:27:37-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:37-03:00,info,appl
listen,17,0.0.0.0,53110
2012-07-04T18:27:38-03:00,info,appl
listen,17,0.0.0.0,53111
2012-07-04T18:27:38-03:00,info,appl
listen,17,0.0.0.0,53112
2012-07-04T18:27:39-03:00,info,appl
listen,17,0.0.0.0,53113
2012-07-04T18:27:39-03:00,info,appl
listen,17,0.0.0.0,53114
2012-07-04T18:27:39-03:00,info,appl
listen,17,0.0.0.0,53115
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53116
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53117
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53118
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53119
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53120
2012-07-04T18:27:40-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:40-03:00,info,appl
listen,17,0.0.0.0,53121
2012-07-04T18:27:41-03:00,info,appl
listen,17,0.0.0.0,53122
2012-07-04T18:27:41-03:00,info,appl
listen,17,0.0.0.0,53123
2012-07-04T18:27:42-03:00,info,appl
listen,17,0.0.0.0,53124
2012-07-04T18:27:42-03:00,info,appl
listen,17,0.0.0.0,53125
2012-07-04T18:27:43-03:00,info,appl
listen,17,0.0.0.0,53126

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:27:43-03:00,info,appl
listen,17,0.0.0.0,53127
2012-07-04T18:27:43-03:00,info,appl
listen,17,0.0.0.0,53128
2012-07-04T18:27:43-03:00,info,appl
listen,17,0.0.0.0,53129
2012-07-04T18:27:44-03:00,info,appl
listen,17,0.0.0.0,53130
2012-07-04T18:27:44-03:00,info,appl
listen,17,0.0.0.0,53131
2012-07-04T18:27:48-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:49-03:00,info,appl
listen,17,0.0.0.0,53132
2012-07-04T18:27:49-03:00,info,appl
listen,17,0.0.0.0,53133
2012-07-04T18:27:50-03:00,info,appl
listen,17,0.0.0.0,53134
2012-07-04T18:27:50-03:00,info,appl
listen,17,0.0.0.0,53135
2012-07-04T18:27:50-03:00,info,appl
listen,17,0.0.0.0,53136
2012-07-04T18:27:51-03:00,info,appl
listen,17,0.0.0.0,53137
2012-07-04T18:27:51-03:00,info,appl
listen,17,0.0.0.0,53138
2012-07-04T18:27:51-03:00,info,appl
listen,17,0.0.0.0,53139
2012-07-04T18:27:51-03:00,info,appl
listen,17,0.0.0.0,53140
2012-07-04T18:27:52-03:00,info,appl
listen,17,0.0.0.0,53141
2012-07-04T18:27:52-03:00,info,appl
listen,17,0.0.0.0,53142
2012-07-04T18:27:52-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:52-03:00,info,appl
listen,17,0.0.0.0,53143
2012-07-04T18:27:52-03:00,info,appl
listen,17,0.0.0.0,53144
2012-07-04T18:27:53-03:00,info,appl
listen,17,0.0.0.0,53145
2012-07-04T18:27:53-03:00,info,appl
listen,17,0.0.0.0,53146
2012-07-04T18:27:54-03:00,info,appl
listen,17,0.0.0.0,53147
2012-07-04T18:27:54-03:00,info,appl
listen,17,0.0.0.0,53148
2012-07-04T18:27:54-03:00,info,appl
listen,17,0.0.0.0,53149
2012-07-04T18:27:54-03:00,info,appl
listen,17,0.0.0.0,53150
2012-07-04T18:27:55-03:00,info,appl
listen,17,0.0.0.0,53151
2012-07-04T18:27:55-03:00,info,appl
listen,17,0.0.0.0,53152

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:27:55-03:00,info,appl
listen,17,0.0.0.0,53153
2012-07-04T18:27:55-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:55-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:55-03:00,info,appl
listen,17,0.0.0.0,53154
2012-07-04T18:27:56-03:00,info,appl
listen,17,0.0.0.0,53155
2012-07-04T18:27:56-03:00,info,appl
listen,17,0.0.0.0,53156
2012-07-04T18:27:56-03:00,info,appl
send,17,10.1.0.197,389
2012-07-04T18:27:57-03:00,info,appl
listen,17,0.0.0.0,53157
2012-07-04T18:27:57-03:00,info,appl
listen,17,0.0.0.0,53158
2012-07-04T18:27:57-03:00,info,appl
listen,17,0.0.0.0,53159
2012-07-04T18:27:58-03:00,info,appl
listen,17,0.0.0.0,53160
2012-07-04T18:27:58-03:00,info,appl
listen,17,0.0.0.0,53161
2012-07-04T18:27:58-03:00,info,appl
listen,17,0.0.0.0,53162
2012-07-04T18:27:58-03:00,info,appl
listen,17,0.0.0.0,53163
2012-07-04T18:27:58-03:00,info,appl
listen,17,0.0.0.0,53164
2012-07-04T18:27:59-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:27:59-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:27:59-03:00,info,appl
listen,17,0.0.0.0,53165
2012-07-04T18:27:59-03:00,info,appl
listen,17,0.0.0.0,53166
2012-07-04T18:28:00-03:00,info,appl
listen,17,0.0.0.0,53167
2012-07-04T18:28:00-03:00,info,appl
listen,17,0.0.0.0,53168
2012-07-04T18:28:00-03:00,info,appl
listen,17,0.0.0.0,53169
2012-07-04T18:28:01-03:00,info,appl
listen,17,0.0.0.0,53170
2012-07-04T18:28:01-03:00,info,appl
listen,17,0.0.0.0,53171
2012-07-04T18:28:01-03:00,info,appl
listen,17,0.0.0.0,53172
2012-07-04T18:28:01-03:00,info,appl
listen,17,0.0.0.0,53173
2012-07-04T18:28:02-03:00,info,appl
listen,17,0.0.0.0,53174
2012-07-04T18:28:02-03:00,info,appl
listen,17,0.0.0.0,53175
2012-07-04T18:28:02-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:28:02-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:28:02-03:00,info,appl
listen,17,0.0.0.0,53176
2012-07-04T18:28:03-03:00,info,appl
listen,17,0.0.0.0,53177
2012-07-04T18:28:03-03:00,info,appl
listen,17,0.0.0.0,53178
2012-07-04T18:28:04-03:00,info,appl
listen,17,0.0.0.0,53179
2012-07-04T18:28:04-03:00,info,appl
listen,17,0.0.0.0,53180
2012-07-04T18:28:05-03:00,info,appl
listen,17,0.0.0.0,53181
2012-07-04T18:28:05-03:00,info,appl
listen,17,0.0.0.0,53182
2012-07-04T18:28:05-03:00,info,appl
listen,17,0.0.0.0,53183
2012-07-04T18:28:05-03:00,info,appl
listen,17,0.0.0.0,53184
2012-07-04T18:28:05-03:00,info,appl
listen,17,0.0.0.0,53185
2012-07-04T18:28:06-03:00,info,appl
listen,17,0.0.0.0,53186
2012-07-04T18:28:06-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:28:06-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:28:06-03:00,info,appl
listen,17,0.0.0.0,53187
2012-07-04T18:28:06-03:00,info,appl
listen,17,0.0.0.0,53188
2012-07-04T18:28:07-03:00,info,appl
listen,17,0.0.0.0,53189
2012-07-04T18:28:07-03:00,info,appl
listen,17,0.0.0.0,53190
2012-07-04T18:28:08-03:00,info,appl
listen,17,0.0.0.0,53191
2012-07-04T18:28:08-03:00,info,appl
listen,17,0.0.0.0,53192
2012-07-04T18:28:08-03:00,info,appl
listen,17,0.0.0.0,53193
2012-07-04T18:28:08-03:00,info,appl
listen,17,0.0.0.0,53194
2012-07-04T18:28:09-03:00,info,appl
listen,17,0.0.0.0,53195
2012-07-04T18:28:09-03:00,info,appl
listen,17,0.0.0.0,53196
2012-07-04T18:28:09-03:00,info,appl
listen,17,0.0.0.0,53197
2012-07-04T18:28:09-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T18:28:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T18:28:09-03:00,info,appl
listen,17,0.0.0.0,53198
2012-07-04T18:28:10-03:00,info,appl
listen,17,0.0.0.0,53199
2012-07-04T18:28:10-03:00,info,appl
listen,17,0.0.0.0,53200
2012-07-04T18:28:11-03:00,info,appl
listen,17,0.0.0.0,53201

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T18:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53202
2012-07-04T18:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53203
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53204
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53205
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53206
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53207
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53208
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53209
2012-07-04T18:28:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53210
2012-07-04T18:28:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53211
2012-07-04T18:28:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53212
2012-07-04T18:28:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53213
2012-07-04T18:28:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53214
2012-07-04T18:28:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53215
2012-07-04T18:28:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53216
2012-07-04T18:28:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53217
2012-07-04T18:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53218
2012-07-04T18:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53219
2012-07-04T18:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.200.0.5,389
2012-07-04T18:29:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:29:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62046
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62047
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:29:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62048
2012-07-04T18:30:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51239

2012-07-04T18:30:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T18:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51240
2012-07-04T18:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51241
2012-07-04T18:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51242
2012-07-04T18:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51243
2012-07-04T18:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51244
2012-07-04T18:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51245
2012-07-04T18:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51246
2012-07-04T18:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51247
2012-07-04T18:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51248
2012-07-04T18:30:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:30:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:31:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T18:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,51249
2012-07-04T18:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.10.3,12110
2012-07-04T18:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T18:34:24-03:00,info,general,daemon,Policy file has been reloaded.


2012-07-04T18:34:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,62480
2012-07-04T18:35:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:35:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:35:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T18:35:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51250
2012-07-04T18:35:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51251
2012-07-04T18:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51252
2012-07-04T18:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51253
2012-07-04T18:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51254
2012-07-04T18:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51255
2012-07-04T18:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51256
2012-07-04T18:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51257
2012-07-04T18:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51258
2012-07-04T18:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51259
2012-07-04T18:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51260
2012-07-04T18:36:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,1366
2012-07-04T18:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,51942
2012-07-04T18:37:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:37:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:37:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T18:37:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:37:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51261
2012-07-04T18:37:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:37:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51262
2012-07-04T18:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51263
2012-07-04T18:37:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51264
2012-07-04T18:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51265
2012-07-04T18:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51266
2012-07-04T18:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51267
2012-07-04T18:37:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51268
2012-07-04T18:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51269
2012-07-04T18:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51270
2012-07-04T18:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51271
2012-07-04T18:37:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:38:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,3164
2012-07-04T18:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,1112
2012-07-04T18:39:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,62137
2012-07-04T18:40:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,60529
2012-07-04T18:40:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:40:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52794
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52795
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52796
2012-07-04T18:40:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62790
2012-07-04T18:40:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T18:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62791
2012-07-04T18:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62792
2012-07-04T18:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62793
2012-07-04T18:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62794
2012-07-04T18:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62795
2012-07-04T18:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62796
2012-07-04T18:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62797
2012-07-04T18:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62798
2012-07-04T18:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62799
2012-07-04T18:40:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.4.28,60534
2012-07-04T18:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62800
2012-07-04T18:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62801
2012-07-04T18:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62802
2012-07-04T18:40:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62803
2012-07-04T18:40:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62804
2012-07-04T18:40:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62805
2012-07-04T18:40:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62806
2012-07-04T18:40:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62807
2012-07-04T18:40:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62808
2012-07-04T18:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62809
2012-07-04T18:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62810
2012-07-04T18:41:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,1082
2012-07-04T18:43:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.70,54349
2012-07-04T18:44:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:44:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:44:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.81,58355
2012-07-04T18:45:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:45:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62811
2012-07-04T18:45:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:45:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:45:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:45:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:45:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62812
2012-07-04T18:45:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62813
2012-07-04T18:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62814
2012-07-04T18:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62815
2012-07-04T18:45:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62816
2012-07-04T18:45:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62817
2012-07-04T18:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62818
2012-07-04T18:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62819
2012-07-04T18:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62820
2012-07-04T18:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62821
2012-07-04T18:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62822
2012-07-04T18:45:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:47:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,64725
2012-07-04T18:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T18:50:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:50:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52904
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52905
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52906
2012-07-04T18:50:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63935
2012-07-04T18:50:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T18:50:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63936
2012-07-04T18:50:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63937
2012-07-04T18:50:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63938
2012-07-04T18:50:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63939
2012-07-04T18:50:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63940
2012-07-04T18:50:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63941
2012-07-04T18:50:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63942
2012-07-04T18:50:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63943
2012-07-04T18:50:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63944
2012-07-04T18:51:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:51:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T18:51:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,2928
2012-07-04T18:52:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T18:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63945
2012-07-04T18:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63946
2012-07-04T18:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63947
2012-07-04T18:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63948
2012-07-04T18:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63949
2012-07-04T18:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63950
2012-07-04T18:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63951
2012-07-04T18:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63952
2012-07-04T18:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63953
2012-07-04T18:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63954
2012-07-04T18:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63955
2012-07-04T18:52:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:52:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,49830
2012-07-04T18:53:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,62173
2012-07-04T18:55:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T18:55:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T18:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63956
2012-07-04T18:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T18:55:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63957
2012-07-04T18:55:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63958
2012-07-04T18:55:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63959
2012-07-04T18:55:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63960
2012-07-04T18:55:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63961
2012-07-04T18:55:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63962
2012-07-04T18:55:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63963
2012-07-04T18:55:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63964
2012-07-04T18:55:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63965
2012-07-04T18:55:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63966
2012-07-04T18:55:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,3720
2012-07-04T18:55:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,65336
2012-07-04T18:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,2595
2012-07-04T18:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,1314
2012-07-04T18:57:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T18:57:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63967
2012-07-04T18:57:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T18:57:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63968
2012-07-04T18:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63969
2012-07-04T18:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63970
2012-07-04T18:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63971
2012-07-04T18:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63972
2012-07-04T18:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63973
2012-07-04T18:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63974
2012-07-04T18:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63975
2012-07-04T18:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63976
2012-07-04T18:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63977
2012-07-04T18:57:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,3802
2012-07-04T18:58:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T18:58:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:59:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,2666
2012-07-04T18:59:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T18:59:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:00:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T19:00:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51618
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51619
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:00:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51620
2012-07-04T19:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50211
2012-07-04T19:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50212
2012-07-04T19:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50213
2012-07-04T19:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50214
2012-07-04T19:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50215
2012-07-04T19:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50216
2012-07-04T19:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50217
2012-07-04T19:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50218
2012-07-04T19:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50219
2012-07-04T19:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50220
2012-07-04T19:01:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,54740
2012-07-04T19:01:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,52175
2012-07-04T19:02:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,63364
2012-07-04T19:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:04:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4643
2012-07-04T19:05:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,3931
2012-07-04T19:05:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T19:05:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T19:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50221
2012-07-04T19:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T19:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50222
2012-07-04T19:05:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50223
2012-07-04T19:05:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50224
2012-07-04T19:05:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50225
2012-07-04T19:05:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50226
2012-07-04T19:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50227
2012-07-04T19:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50228
2012-07-04T19:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50229
2012-07-04T19:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50230
2012-07-04T19:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50231
2012-07-04T19:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:05:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:06:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64825
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64826
2012-07-04T19:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55033
2012-07-04T19:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55034
2012-07-04T19:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50952
2012-07-04T19:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50953
2012-07-04T19:07:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62599
2012-07-04T19:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62600
2012-07-04T19:07:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64404
2012-07-04T19:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64405
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56445
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56446
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64021
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64022
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64157
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64158
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51499
2012-07-04T19:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51500
2012-07-04T19:07:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51735
2012-07-04T19:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51736
2012-07-04T19:07:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51699
2012-07-04T19:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51700
2012-07-04T19:09:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.10,3797
2012-07-04T19:10:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T19:10:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T19:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63995
2012-07-04T19:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63996
2012-07-04T19:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:10:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63997
2012-07-04T19:10:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49364
2012-07-04T19:10:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:10:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49365
2012-07-04T19:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49366
2012-07-04T19:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49367
2012-07-04T19:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49368
2012-07-04T19:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49369
2012-07-04T19:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49370
2012-07-04T19:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49371
2012-07-04T19:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49372
2012-07-04T19:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49373
2012-07-04T19:10:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,56569
2012-07-04T19:11:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.129,61840
2012-07-04T19:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49374
2012-07-04T19:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49375
2012-07-04T19:12:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49376
2012-07-04T19:12:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49377
2012-07-04T19:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49378
2012-07-04T19:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49379
2012-07-04T19:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49380
2012-07-04T19:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49381
2012-07-04T19:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49382
2012-07-04T19:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49383
2012-07-04T19:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49384
2012-07-04T19:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57716
2012-07-04T19:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57717
2012-07-04T19:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57718
2012-07-04T19:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57719
2012-07-04T19:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57720
2012-07-04T19:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57721
2012-07-04T19:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57722
2012-07-04T19:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57723
2012-07-04T19:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57724
2012-07-04T19:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57725
2012-07-04T19:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57726
2012-07-04T19:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57727
2012-07-04T19:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57728
2012-07-04T19:12:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,1913
2012-07-04T19:13:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:13:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,57457
2012-07-04T19:13:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:14:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:15:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:15:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:15:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:15:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57729
2012-07-04T19:15:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57730
2012-07-04T19:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57731
2012-07-04T19:15:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57732
2012-07-04T19:15:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57733
2012-07-04T19:15:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57734
2012-07-04T19:15:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57735
2012-07-04T19:15:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57736
2012-07-04T19:15:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57737
2012-07-04T19:15:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57738
2012-07-04T19:15:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57739
2012-07-04T19:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55830
2012-07-04T19:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56012
2012-07-04T19:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:20:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:20:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:20:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56438
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56439
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56440
2012-07-04T19:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64443
2012-07-04T19:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64444
2012-07-04T19:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64445
2012-07-04T19:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64446
2012-07-04T19:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64447
2012-07-04T19:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64448
2012-07-04T19:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64449
2012-07-04T19:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64450
2012-07-04T19:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64451
2012-07-04T19:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64452
2012-07-04T19:21:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,53562
2012-07-04T19:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T19:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64453
2012-07-04T19:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64454
2012-07-04T19:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64455
2012-07-04T19:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64456
2012-07-04T19:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64457
2012-07-04T19:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64458
2012-07-04T19:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64459
2012-07-04T19:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64460
2012-07-04T19:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64461
2012-07-04T19:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64462
2012-07-04T19:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64463
2012-07-04T19:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,4618
2012-07-04T19:25:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:25:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64464
2012-07-04T19:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64465
2012-07-04T19:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64466
2012-07-04T19:25:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64467
2012-07-04T19:25:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64468
2012-07-04T19:25:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64469
2012-07-04T19:25:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64470
2012-07-04T19:25:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64471
2012-07-04T19:25:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64472
2012-07-04T19:25:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64473
2012-07-04T19:25:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64474
2012-07-04T19:27:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:27:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:27:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64475
2012-07-04T19:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64476
2012-07-04T19:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64477
2012-07-04T19:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64478
2012-07-04T19:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64479
2012-07-04T19:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64480
2012-07-04T19:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64481
2012-07-04T19:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64482
2012-07-04T19:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64483
2012-07-04T19:27:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64484
2012-07-04T19:27:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64485
2012-07-04T19:28:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,1632
2012-07-04T19:30:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,63258
2012-07-04T19:30:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,1555
2012-07-04T19:31:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:31:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51026
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51027
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51028
2012-07-04T19:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59765
2012-07-04T19:31:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:31:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59766
2012-07-04T19:31:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59767
2012-07-04T19:31:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59768
2012-07-04T19:31:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59769
2012-07-04T19:31:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59770
2012-07-04T19:31:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59771
2012-07-04T19:31:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59772
2012-07-04T19:31:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59773
2012-07-04T19:31:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59774
2012-07-04T19:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:34:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,2991
2012-07-04T19:34:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:35:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:36:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:36:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T19:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59775
2012-07-04T19:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:36:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59776
2012-07-04T19:36:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59777
2012-07-04T19:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59778
2012-07-04T19:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59779
2012-07-04T19:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59780
2012-07-04T19:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59781
2012-07-04T19:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59782
2012-07-04T19:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59783
2012-07-04T19:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59784
2012-07-04T19:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59785
2012-07-04T19:37:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,2412
2012-07-04T19:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T19:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59786
2012-07-04T19:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:37:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59787
2012-07-04T19:37:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59788
2012-07-04T19:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59789
2012-07-04T19:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59790
2012-07-04T19:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59791
2012-07-04T19:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59792
2012-07-04T19:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59793
2012-07-04T19:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59794
2012-07-04T19:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59795
2012-07-04T19:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59796
2012-07-04T19:41:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:41:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54176
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54177
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:41:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54178
2012-07-04T19:41:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58309
2012-07-04T19:41:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:41:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58310
2012-07-04T19:41:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58311
2012-07-04T19:41:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58312
2012-07-04T19:41:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58313
2012-07-04T19:41:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58314
2012-07-04T19:41:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58315
2012-07-04T19:41:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58316
2012-07-04T19:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58317
2012-07-04T19:41:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58318
2012-07-04T19:41:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:41:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:42:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:42:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T19:42:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58319
2012-07-04T19:42:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:42:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58320
2012-07-04T19:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58321
2012-07-04T19:42:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58322
2012-07-04T19:42:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58323
2012-07-04T19:42:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58324
2012-07-04T19:42:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58325
2012-07-04T19:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58326
2012-07-04T19:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58327
2012-07-04T19:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58328
2012-07-04T19:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58329
2012-07-04T19:46:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58330
2012-07-04T19:46:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:46:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:46:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:46:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:46:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58331
2012-07-04T19:46:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58332
2012-07-04T19:46:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58333
2012-07-04T19:46:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58334
2012-07-04T19:46:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58335
2012-07-04T19:46:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58336
2012-07-04T19:46:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58337
2012-07-04T19:46:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58338
2012-07-04T19:46:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58339
2012-07-04T19:46:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58340
2012-07-04T19:46:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58341
2012-07-04T19:48:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:48:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T19:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T19:49:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:49:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:51:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:51:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:51:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65206
2012-07-04T19:51:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T19:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65207
2012-07-04T19:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T19:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65208
2012-07-04T19:51:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59925
2012-07-04T19:51:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T19:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59926
2012-07-04T19:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59927
2012-07-04T19:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59928
2012-07-04T19:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59929
2012-07-04T19:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59930
2012-07-04T19:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59931
2012-07-04T19:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59932
2012-07-04T19:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59933
2012-07-04T19:51:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59934
2012-07-04T19:52:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T19:52:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:52:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59935
2012-07-04T19:52:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:52:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59936
2012-07-04T19:52:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59937
2012-07-04T19:52:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59938
2012-07-04T19:52:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59939
2012-07-04T19:52:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59940
2012-07-04T19:52:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59941
2012-07-04T19:52:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59942
2012-07-04T19:52:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59943
2012-07-04T19:52:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59944
2012-07-04T19:52:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59945
2012-07-04T19:55:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T19:55:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:56:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:56:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T19:56:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T19:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59946
2012-07-04T19:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59947
2012-07-04T19:56:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59948
2012-07-04T19:56:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59949
2012-07-04T19:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59950
2012-07-04T19:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59951
2012-07-04T19:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59952
2012-07-04T19:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59953
2012-07-04T19:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59954
2012-07-04T19:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59955
2012-07-04T19:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59956
2012-07-04T19:56:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T19:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T19:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59957
2012-07-04T19:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T19:57:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59958
2012-07-04T19:57:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59959
2012-07-04T19:58:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59960
2012-07-04T19:58:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59961
2012-07-04T19:58:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59962
2012-07-04T19:58:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59963
2012-07-04T19:58:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59964
2012-07-04T19:58:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59965
2012-07-04T19:58:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59966
2012-07-04T19:58:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59967
2012-07-04T20:01:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T20:01:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:01:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57051
2012-07-04T20:01:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57052
2012-07-04T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57053
2012-07-04T20:01:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55288
2012-07-04T20:01:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55289
2012-07-04T20:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55290
2012-07-04T20:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55291
2012-07-04T20:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55292
2012-07-04T20:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55293
2012-07-04T20:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55294
2012-07-04T20:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55295
2012-07-04T20:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55296
2012-07-04T20:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55297
2012-07-04T20:02:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T20:02:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,1025
2012-07-04T20:02:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:16-03:00,info,appl
listen,17,0.0.0.0,55298
2012-07-04T20:02:16-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T20:02:16-03:00,info,appl
listen,17,0.0.0.0,55299
2012-07-04T20:02:17-03:00,info,appl
listen,17,0.0.0.0,55300
2012-07-04T20:02:17-03:00,info,appl
listen,17,0.0.0.0,55301
2012-07-04T20:02:18-03:00,info,appl
listen,17,0.0.0.0,55302
2012-07-04T20:02:18-03:00,info,appl
listen,17,0.0.0.0,55303
2012-07-04T20:02:18-03:00,info,appl
listen,17,0.0.0.0,55304
2012-07-04T20:02:18-03:00,info,appl
listen,17,0.0.0.0,55305
2012-07-04T20:02:19-03:00,info,appl
listen,17,0.0.0.0,55306
2012-07-04T20:02:19-03:00,info,appl
listen,17,0.0.0.0,55307
2012-07-04T20:02:19-03:00,info,appl
listen,17,0.0.0.0,55308
2012-07-04T20:02:19-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:19-03:00,info,appl
listen,17,0.0.0.0,55309
2012-07-04T20:02:20-03:00,info,appl
listen,17,0.0.0.0,55310
2012-07-04T20:02:20-03:00,info,appl
listen,17,0.0.0.0,55311
2012-07-04T20:02:21-03:00,info,appl
listen,17,0.0.0.0,55312
2012-07-04T20:02:21-03:00,info,appl
listen,17,0.0.0.0,55313
2012-07-04T20:02:21-03:00,info,appl
listen,17,0.0.0.0,55314
2012-07-04T20:02:22-03:00,info,appl
listen,17,0.0.0.0,55315
2012-07-04T20:02:22-03:00,info,appl
listen,17,0.0.0.0,55316
2012-07-04T20:02:22-03:00,info,appl
listen,17,0.0.0.0,55317
2012-07-04T20:02:22-03:00,info,appl
listen,17,0.0.0.0,55318
2012-07-04T20:02:23-03:00,info,appl
listen,17,0.0.0.0,55319
2012-07-04T20:02:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:23-03:00,info,appl
listen,17,0.0.0.0,55320
2012-07-04T20:02:23-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55321
2012-07-04T20:02:24-03:00,info,appl
listen,17,0.0.0.0,55322
2012-07-04T20:02:24-03:00,info,appl
listen,17,0.0.0.0,55323
2012-07-04T20:02:24-03:00,info,appl
listen,17,0.0.0.0,55324
2012-07-04T20:02:25-03:00,info,appl
listen,17,0.0.0.0,55325
2012-07-04T20:02:25-03:00,info,appl
listen,17,0.0.0.0,55326
2012-07-04T20:02:25-03:00,info,appl
listen,17,0.0.0.0,55327
2012-07-04T20:02:25-03:00,info,appl
listen,17,0.0.0.0,55328
2012-07-04T20:02:26-03:00,info,appl
listen,17,0.0.0.0,55329
2012-07-04T20:02:26-03:00,info,appl
listen,17,0.0.0.0,55330
2012-07-04T20:02:26-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:26-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:26-03:00,info,appl
listen,17,0.0.0.0,55331
2012-07-04T20:02:26-03:00,info,appl
listen,17,0.0.0.0,55332
2012-07-04T20:02:27-03:00,info,appl
listen,17,0.0.0.0,55333
2012-07-04T20:02:27-03:00,info,appl
listen,17,0.0.0.0,55334
2012-07-04T20:02:28-03:00,info,appl
listen,17,0.0.0.0,55335
2012-07-04T20:02:28-03:00,info,appl
listen,17,0.0.0.0,55336
2012-07-04T20:02:28-03:00,info,appl
listen,17,0.0.0.0,55337
2012-07-04T20:02:29-03:00,info,appl
listen,17,0.0.0.0,55338
2012-07-04T20:02:29-03:00,info,appl
listen,17,0.0.0.0,55339
2012-07-04T20:02:29-03:00,info,appl
listen,17,0.0.0.0,55340
2012-07-04T20:02:29-03:00,info,appl
listen,17,0.0.0.0,55341
2012-07-04T20:02:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:30-03:00,info,appl
listen,17,0.0.0.0,55342
2012-07-04T20:02:30-03:00,info,appl
listen,17,0.0.0.0,55343
2012-07-04T20:02:31-03:00,info,appl
listen,17,0.0.0.0,55344
2012-07-04T20:02:31-03:00,info,appl
listen,17,0.0.0.0,55345
2012-07-04T20:02:32-03:00,info,appl
listen,17,0.0.0.0,55346
2012-07-04T20:02:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55347
2012-07-04T20:02:32-03:00,info,appl
listen,17,0.0.0.0,55348
2012-07-04T20:02:33-03:00,info,appl
listen,17,0.0.0.0,55349
2012-07-04T20:02:33-03:00,info,appl
listen,17,0.0.0.0,55350
2012-07-04T20:02:33-03:00,info,appl
listen,17,0.0.0.0,55351
2012-07-04T20:02:33-03:00,info,appl
listen,17,0.0.0.0,55352
2012-07-04T20:02:33-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:33-03:00,info,appl
listen,17,0.0.0.0,55353
2012-07-04T20:02:34-03:00,info,appl
listen,17,0.0.0.0,55354
2012-07-04T20:02:34-03:00,info,appl
listen,17,0.0.0.0,55355
2012-07-04T20:02:35-03:00,info,appl
listen,17,0.0.0.0,55356
2012-07-04T20:02:35-03:00,info,appl
listen,17,0.0.0.0,55357
2012-07-04T20:02:36-03:00,info,appl
listen,17,0.0.0.0,55358
2012-07-04T20:02:36-03:00,info,appl
listen,17,0.0.0.0,55359
2012-07-04T20:02:36-03:00,info,appl
send,17,10.1.0.198,389
2012-07-04T20:02:36-03:00,info,appl
listen,17,0.0.0.0,55360
2012-07-04T20:02:36-03:00,info,appl
listen,17,0.0.0.0,55361
2012-07-04T20:02:36-03:00,info,appl
listen,17,0.0.0.0,55362
2012-07-04T20:02:37-03:00,info,appl
listen,17,0.0.0.0,55363
2012-07-04T20:02:37-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:37-03:00,info,appl
listen,17,0.0.0.0,55364
2012-07-04T20:02:37-03:00,info,appl
listen,17,0.0.0.0,55365
2012-07-04T20:02:38-03:00,info,appl
listen,17,0.0.0.0,55366
2012-07-04T20:02:38-03:00,info,appl
listen,17,0.0.0.0,55367
2012-07-04T20:02:38-03:00,info,appl
listen,17,0.0.0.0,55368
2012-07-04T20:02:39-03:00,info,appl
listen,17,0.0.0.0,55369
2012-07-04T20:02:39-03:00,info,appl
listen,17,0.0.0.0,55370
2012-07-04T20:02:39-03:00,info,appl
listen,17,0.0.0.0,55371
2012-07-04T20:02:39-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55372
2012-07-04T20:02:40-03:00,info,appl
listen,17,0.0.0.0,55373
2012-07-04T20:02:40-03:00,info,appl
listen,17,0.0.0.0,55374
2012-07-04T20:02:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:40-03:00,info,appl
listen,17,0.0.0.0,55375
2012-07-04T20:02:41-03:00,info,appl
listen,17,0.0.0.0,55376
2012-07-04T20:02:41-03:00,info,appl
listen,17,0.0.0.0,55377
2012-07-04T20:02:42-03:00,info,appl
listen,17,0.0.0.0,55378
2012-07-04T20:02:42-03:00,info,appl
listen,17,0.0.0.0,55379
2012-07-04T20:02:42-03:00,info,appl
listen,17,0.0.0.0,55380
2012-07-04T20:02:43-03:00,info,appl
listen,17,0.0.0.0,55381
2012-07-04T20:02:43-03:00,info,appl
listen,17,0.0.0.0,55382
2012-07-04T20:02:43-03:00,info,appl
listen,17,0.0.0.0,55383
2012-07-04T20:02:43-03:00,info,appl
listen,17,0.0.0.0,55384
2012-07-04T20:02:43-03:00,info,appl
listen,17,0.0.0.0,55385
2012-07-04T20:02:44-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:44-03:00,info,appl
listen,17,0.0.0.0,55386
2012-07-04T20:02:44-03:00,info,appl
listen,17,0.0.0.0,55387
2012-07-04T20:02:45-03:00,info,appl
listen,17,0.0.0.0,55388
2012-07-04T20:02:45-03:00,info,appl
listen,17,0.0.0.0,55389
2012-07-04T20:02:46-03:00,info,appl
listen,17,0.0.0.0,55390
2012-07-04T20:02:46-03:00,info,appl
listen,17,0.0.0.0,55391
2012-07-04T20:02:46-03:00,info,appl
listen,17,0.0.0.0,55392
2012-07-04T20:02:47-03:00,info,appl
listen,17,0.0.0.0,55393
2012-07-04T20:02:47-03:00,info,appl
listen,17,0.0.0.0,55394
2012-07-04T20:02:47-03:00,info,appl
listen,17,0.0.0.0,55395
2012-07-04T20:02:47-03:00,info,appl
listen,17,0.0.0.0,55396
2012-07-04T20:02:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:47-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T20:02:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55397
2012-07-04T20:02:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55398
2012-07-04T20:02:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55399
2012-07-04T20:02:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55400
2012-07-04T20:02:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55401
2012-07-04T20:02:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55402
2012-07-04T20:02:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55403
2012-07-04T20:02:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55404
2012-07-04T20:02:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55405
2012-07-04T20:02:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55406
2012-07-04T20:02:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55407
2012-07-04T20:02:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T20:02:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:02:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55408
2012-07-04T20:02:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55409
2012-07-04T20:02:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55410
2012-07-04T20:02:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:02:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:02:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55411
2012-07-04T20:02:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55412
2012-07-04T20:02:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55413
2012-07-04T20:02:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55414
2012-07-04T20:02:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55415
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55416
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55417
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55418
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55419
2012-07-04T20:02:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55420
2012-07-04T20:02:55-03:00,info,appl
listen,17,0.0.0.0,55421
2012-07-04T20:02:55-03:00,info,appl
listen,17,0.0.0.0,55422
2012-07-04T20:02:56-03:00,info,appl
listen,17,0.0.0.0,55423
2012-07-04T20:02:56-03:00,info,appl
send,17,10.88.108.206,389
2012-07-04T20:02:56-03:00,info,appl
listen,17,0.0.0.0,55424
2012-07-04T20:02:56-03:00,info,appl
listen,17,0.0.0.0,55425
2012-07-04T20:02:57-03:00,info,appl
listen,17,0.0.0.0,55426
2012-07-04T20:02:57-03:00,info,appl
listen,17,0.0.0.0,55427
2012-07-04T20:02:57-03:00,info,appl
listen,17,0.0.0.0,55428
2012-07-04T20:02:57-03:00,info,appl
listen,17,0.0.0.0,55429
2012-07-04T20:02:58-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:02:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:02:58-03:00,info,appl
listen,17,0.0.0.0,55430
2012-07-04T20:02:58-03:00,info,appl
listen,17,0.0.0.0,55431
2012-07-04T20:02:59-03:00,info,appl
listen,17,0.0.0.0,55432
2012-07-04T20:02:59-03:00,info,appl
listen,17,0.0.0.0,55433
2012-07-04T20:03:00-03:00,info,appl
listen,17,0.0.0.0,55434
2012-07-04T20:03:00-03:00,info,appl
listen,17,0.0.0.0,55435
2012-07-04T20:03:00-03:00,info,appl
listen,17,0.0.0.0,55436
2012-07-04T20:03:01-03:00,info,appl
listen,17,0.0.0.0,55437
2012-07-04T20:03:01-03:00,info,appl
listen,17,0.0.0.0,55438
2012-07-04T20:03:01-03:00,info,appl
listen,17,0.0.0.0,55439
2012-07-04T20:03:01-03:00,info,appl
listen,17,0.0.0.0,55440
2012-07-04T20:03:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:03:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:03:01-03:00,info,appl
listen,17,0.0.0.0,55441
2012-07-04T20:03:02-03:00,info,appl
listen,17,0.0.0.0,55442
2012-07-04T20:03:02-03:00,info,appl
listen,17,0.0.0.0,55443
2012-07-04T20:03:03-03:00,info,appl
listen,17,0.0.0.0,55444
2012-07-04T20:03:03-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55445
2012-07-04T20:03:04-03:00,info,appl
listen,17,0.0.0.0,55446
2012-07-04T20:03:04-03:00,info,appl
listen,17,0.0.0.0,55447
2012-07-04T20:03:04-03:00,info,appl
listen,17,0.0.0.0,55448
2012-07-04T20:03:04-03:00,info,appl
listen,17,0.0.0.0,55449
2012-07-04T20:03:04-03:00,info,appl
listen,17,0.0.0.0,55450
2012-07-04T20:03:05-03:00,info,appl
listen,17,0.0.0.0,55451
2012-07-04T20:03:05-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:03:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:03:05-03:00,info,appl
listen,17,0.0.0.0,55452
2012-07-04T20:03:05-03:00,info,appl
listen,17,0.0.0.0,55453
2012-07-04T20:03:06-03:00,info,appl
listen,17,0.0.0.0,55454
2012-07-04T20:03:06-03:00,info,appl
listen,17,0.0.0.0,55455
2012-07-04T20:03:06-03:00,info,appl
listen,17,0.0.0.0,55456
2012-07-04T20:03:07-03:00,info,appl
listen,17,0.0.0.0,55457
2012-07-04T20:03:07-03:00,info,appl
listen,17,0.0.0.0,55458
2012-07-04T20:03:07-03:00,info,appl
listen,17,0.0.0.0,55459
2012-07-04T20:03:07-03:00,info,appl
listen,17,0.0.0.0,55460
2012-07-04T20:03:08-03:00,info,appl
listen,17,0.0.0.0,55461
2012-07-04T20:03:08-03:00,info,appl
listen,17,0.0.0.0,55462
2012-07-04T20:03:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T20:03:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:03:08-03:00,info,appl
listen,17,0.0.0.0,55463
2012-07-04T20:03:09-03:00,info,appl
listen,17,0.0.0.0,55464
2012-07-04T20:03:09-03:00,info,appl
listen,17,0.0.0.0,55465
2012-07-04T20:03:10-03:00,info,appl
listen,17,0.0.0.0,55466
2012-07-04T20:03:10-03:00,info,appl
listen,17,0.0.0.0,55467
2012-07-04T20:03:10-03:00,info,appl
listen,17,0.0.0.0,55468
2012-07-04T20:03:11-03:00,info,appl
listen,17,0.0.0.0,55469
2012-07-04T20:03:11-03:00,info,appl
listen,17,0.0.0.0,55470
2012-07-04T20:03:11-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55471
2012-07-04T20:03:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55472
2012-07-04T20:03:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55473
2012-07-04T20:03:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:03:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:06:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T20:06:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T20:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55474
2012-07-04T20:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55475
2012-07-04T20:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55476
2012-07-04T20:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55477
2012-07-04T20:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55478
2012-07-04T20:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55479
2012-07-04T20:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55480
2012-07-04T20:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55481
2012-07-04T20:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55482
2012-07-04T20:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55483
2012-07-04T20:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55484
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55501
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54396
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54397
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T20:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54398
2012-07-04T20:07:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56329
2012-07-04T20:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56330
2012-07-04T20:07:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55955
2012-07-04T20:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55956
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59771
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59772
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59163
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59164
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61862
2012-07-04T20:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61863
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51492
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51493
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60279
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60280
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64450
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64451
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62468
2012-07-04T20:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62469
2012-07-04T20:09:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:09:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:11:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:11:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T20:11:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T20:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:11:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57177
2012-07-04T20:11:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57178
2012-07-04T20:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-04T20:11:27-03:00,info,appl
listen,17,0.0.0.0,57179
2012-07-04T20:11:28-03:00,info,appl
w,listen,17,0.0.0.0,62245
2012-07-04T20:11:28-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T20:11:28-03:00,info,appl
listen,17,0.0.0.0,62246
2012-07-04T20:11:28-03:00,info,appl
listen,17,0.0.0.0,62247
2012-07-04T20:11:29-03:00,info,appl
listen,17,0.0.0.0,62248
2012-07-04T20:11:29-03:00,info,appl
listen,17,0.0.0.0,62249
2012-07-04T20:11:29-03:00,info,appl
listen,17,0.0.0.0,62250
2012-07-04T20:11:30-03:00,info,appl
listen,17,0.0.0.0,62251
2012-07-04T20:11:30-03:00,info,appl
listen,17,0.0.0.0,62252
2012-07-04T20:11:30-03:00,info,appl
listen,17,0.0.0.0,62253
2012-07-04T20:11:30-03:00,info,appl
listen,17,0.0.0.0,62254
2012-07-04T20:13:02-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:13:02-03:00,info,appl
listen,17,0.0.0.0,62255
2012-07-04T20:13:02-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T20:13:02-03:00,info,appl
listen,17,0.0.0.0,62256
2012-07-04T20:13:03-03:00,info,appl
listen,17,0.0.0.0,62257
2012-07-04T20:13:03-03:00,info,appl
listen,17,0.0.0.0,62258
2012-07-04T20:13:03-03:00,info,appl
listen,17,0.0.0.0,62259
2012-07-04T20:13:04-03:00,info,appl
listen,17,0.0.0.0,62260
2012-07-04T20:13:04-03:00,info,appl
listen,17,0.0.0.0,62261
2012-07-04T20:13:04-03:00,info,appl
listen,17,0.0.0.0,62262
2012-07-04T20:13:04-03:00,info,appl
listen,17,0.0.0.0,62263
2012-07-04T20:13:05-03:00,info,appl
listen,17,0.0.0.0,62264
2012-07-04T20:13:05-03:00,info,appl
listen,17,0.0.0.0,62265
2012-07-04T20:13:05-03:00,info,appl
w,listen,17,0.0.0.0,56012
2012-07-04T20:13:05-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T20:13:05-03:00,info,appl
listen,17,0.0.0.0,56013
2012-07-04T20:13:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T20:13:05-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56014
2012-07-04T20:13:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56015
2012-07-04T20:13:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56016
2012-07-04T20:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56017
2012-07-04T20:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56018
2012-07-04T20:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56019
2012-07-04T20:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56020
2012-07-04T20:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56021
2012-07-04T20:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56022
2012-07-04T20:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56023
2012-07-04T20:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56024
2012-07-04T20:16:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:16:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:16:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:16:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56025
2012-07-04T20:16:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:16:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56026
2012-07-04T20:16:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56027
2012-07-04T20:16:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56028
2012-07-04T20:16:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56029
2012-07-04T20:16:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56030
2012-07-04T20:16:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56031
2012-07-04T20:16:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56032
2012-07-04T20:16:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56033
2012-07-04T20:16:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56034
2012-07-04T20:16:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56035
2012-07-04T20:17:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:17:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:17:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:18:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:19:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63085
2012-07-04T20:19:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:19:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55175
2012-07-04T20:21:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:21:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55727
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55728
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55729
2012-07-04T20:21:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59908
2012-07-04T20:21:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59909
2012-07-04T20:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59910
2012-07-04T20:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59911
2012-07-04T20:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59912
2012-07-04T20:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59913
2012-07-04T20:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59914
2012-07-04T20:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59915
2012-07-04T20:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59916
2012-07-04T20:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59917
2012-07-04T20:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T20:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59918
2012-07-04T20:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59919
2012-07-04T20:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59920
2012-07-04T20:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59921
2012-07-04T20:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59922
2012-07-04T20:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59923
2012-07-04T20:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59924
2012-07-04T20:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59925
2012-07-04T20:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59926
2012-07-04T20:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59927
2012-07-04T20:22:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59928
2012-07-04T20:24:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:24:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:24:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:25:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:26:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:26:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59929
2012-07-04T20:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59930
2012-07-04T20:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59931
2012-07-04T20:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59932
2012-07-04T20:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59933
2012-07-04T20:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59934
2012-07-04T20:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59935
2012-07-04T20:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59936
2012-07-04T20:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59937
2012-07-04T20:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59938
2012-07-04T20:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59939
2012-07-04T20:28:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:28:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59940
2012-07-04T20:28:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:28:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59941
2012-07-04T20:28:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59942
2012-07-04T20:28:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59943
2012-07-04T20:28:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59944
2012-07-04T20:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59945
2012-07-04T20:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59946
2012-07-04T20:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59947
2012-07-04T20:28:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59948
2012-07-04T20:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59949
2012-07-04T20:28:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59950
2012-07-04T20:31:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:31:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:31:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:31:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:31:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63110
2012-07-04T20:31:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63111
2012-07-04T20:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63112
2012-07-04T20:31:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64061
2012-07-04T20:31:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64062
2012-07-04T20:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64063
2012-07-04T20:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64064
2012-07-04T20:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64065
2012-07-04T20:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64066
2012-07-04T20:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64067
2012-07-04T20:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64068
2012-07-04T20:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64069
2012-07-04T20:31:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64070
2012-07-04T20:31:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:32:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:33:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64071
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63482
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:33:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63483
2012-07-04T20:33:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63484
2012-07-04T20:33:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55054
2012-07-04T20:33:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:33:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55055
2012-07-04T20:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55056
2012-07-04T20:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55057
2012-07-04T20:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55058
2012-07-04T20:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55059
2012-07-04T20:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55060
2012-07-04T20:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55061
2012-07-04T20:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55062
2012-07-04T20:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55063
2012-07-04T20:34:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50823
2012-07-04T20:34:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:36:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:36:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T20:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50824
2012-07-04T20:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T20:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50825
2012-07-04T20:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50826
2012-07-04T20:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50827
2012-07-04T20:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50828
2012-07-04T20:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50829
2012-07-04T20:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50830
2012-07-04T20:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50831
2012-07-04T20:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50832
2012-07-04T20:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50833
2012-07-04T20:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50834
2012-07-04T20:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T20:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50835
2012-07-04T20:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50836
2012-07-04T20:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50837
2012-07-04T20:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50838
2012-07-04T20:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50839
2012-07-04T20:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50840
2012-07-04T20:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50841
2012-07-04T20:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50842
2012-07-04T20:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50843
2012-07-04T20:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50844
2012-07-04T20:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50845
2012-07-04T20:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:39:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:41:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:41:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:41:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:41:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60090
2012-07-04T20:41:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:41:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60091
2012-07-04T20:41:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:41:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60092
2012-07-04T20:41:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56722
2012-07-04T20:41:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:41:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56723
2012-07-04T20:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56724
2012-07-04T20:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56725
2012-07-04T20:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56726
2012-07-04T20:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56727
2012-07-04T20:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56728
2012-07-04T20:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56729
2012-07-04T20:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56730
2012-07-04T20:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56731
2012-07-04T20:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56732
2012-07-04T20:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56733
2012-07-04T20:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56734
2012-07-04T20:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56735
2012-07-04T20:43:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56736
2012-07-04T20:43:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56737
2012-07-04T20:43:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56738
2012-07-04T20:43:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56739
2012-07-04T20:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56740
2012-07-04T20:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56741
2012-07-04T20:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56742
2012-07-04T20:45:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:45:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:46:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:46:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:46:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56743
2012-07-04T20:46:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T20:46:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T20:46:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T20:46:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:46:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56744
2012-07-04T20:46:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56745
2012-07-04T20:46:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56746
2012-07-04T20:46:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56747
2012-07-04T20:46:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56748
2012-07-04T20:46:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56749
2012-07-04T20:46:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56750
2012-07-04T20:46:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56751
2012-07-04T20:46:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56752
2012-07-04T20:46:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56753
2012-07-04T20:46:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56754
2012-07-04T20:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:48:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52670
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52671
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50081
2012-07-04T20:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50082
2012-07-04T20:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50083
2012-07-04T20:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59577
2012-07-04T20:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59578
2012-07-04T20:49:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59579
2012-07-04T20:49:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59580
2012-07-04T20:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59581
2012-07-04T20:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59582
2012-07-04T20:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59583
2012-07-04T20:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59584
2012-07-04T20:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59585
2012-07-04T20:49:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59586
2012-07-04T20:49:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57064
2012-07-04T20:49:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:51:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T20:51:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56186
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56187
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56188
2012-07-04T20:51:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53266
2012-07-04T20:51:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T20:51:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53267
2012-07-04T20:51:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53268
2012-07-04T20:51:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53269
2012-07-04T20:51:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53270
2012-07-04T20:51:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53271
2012-07-04T20:51:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53272
2012-07-04T20:51:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53273
2012-07-04T20:51:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53274
2012-07-04T20:51:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53275
2012-07-04T20:52:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:52:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T20:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53276
2012-07-04T20:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53277
2012-07-04T20:53:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53278
2012-07-04T20:53:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53279
2012-07-04T20:53:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53280
2012-07-04T20:53:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53281
2012-07-04T20:53:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53282
2012-07-04T20:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53283
2012-07-04T20:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53284
2012-07-04T20:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53285
2012-07-04T20:53:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53286
2012-07-04T20:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:53:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T20:56:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T20:56:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T20:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53287
2012-07-04T20:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53288
2012-07-04T20:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53289
2012-07-04T20:56:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53290
2012-07-04T20:56:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53291
2012-07-04T20:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53292
2012-07-04T20:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53293
2012-07-04T20:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53294
2012-07-04T20:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53295
2012-07-04T20:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53296
2012-07-04T20:57:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53297
2012-07-04T20:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T20:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53298
2012-07-04T20:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T20:58:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53299
2012-07-04T20:58:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53300
2012-07-04T20:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53301
2012-07-04T20:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53302
2012-07-04T20:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53303
2012-07-04T20:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53304
2012-07-04T20:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53305
2012-07-04T20:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53306
2012-07-04T20:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53307
2012-07-04T20:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53308
2012-07-04T20:59:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T20:59:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:00:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:00:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:02:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:02:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50567
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50568
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T21:02:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50569
2012-07-04T21:02:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61621
2012-07-04T21:02:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:02:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61622
2012-07-04T21:02:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61623
2012-07-04T21:02:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61624
2012-07-04T21:02:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61625
2012-07-04T21:02:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61626
2012-07-04T21:02:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61627
2012-07-04T21:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61628
2012-07-04T21:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61629
2012-07-04T21:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61630
2012-07-04T21:03:10-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.11,389
2012-07-04T21:03:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T21:03:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61632
2012-07-04T21:03:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:03:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61633
2012-07-04T21:03:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61634
2012-07-04T21:03:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61635
2012-07-04T21:03:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61636
2012-07-04T21:03:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61637
2012-07-04T21:03:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61638
2012-07-04T21:03:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61639
2012-07-04T21:03:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61640
2012-07-04T21:03:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61641
2012-07-04T21:03:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61642
2012-07-04T21:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:06:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:06:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:07:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:07:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:07:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T21:07:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61643
2012-07-04T21:07:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:07:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61644
2012-07-04T21:07:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61645
2012-07-04T21:07:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61646
2012-07-04T21:07:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61647
2012-07-04T21:07:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61648
2012-07-04T21:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61649
2012-07-04T21:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61650
2012-07-04T21:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61651
2012-07-04T21:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61652
2012-07-04T21:07:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61653
2012-07-04T21:07:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:07:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52464
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52465
2012-07-04T21:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:08:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54477
2012-07-04T21:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54478
2012-07-04T21:08:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61543
2012-07-04T21:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61544
2012-07-04T21:08:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,56390
2012-07-04T21:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56391
2012-07-04T21:08:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62290
2012-07-04T21:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62291
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49853
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49854
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61380
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61381
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52247
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52248
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53650
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53651
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62400
2012-07-04T21:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62401
2012-07-04T21:08:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59647
2012-07-04T21:08:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59648
2012-07-04T21:12:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:12:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:12:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:12:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63654
2012-07-04T21:12:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:12:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63655
2012-07-04T21:12:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:12:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63656
2012-07-04T21:12:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56841
2012-07-04T21:12:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:12:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56842
2012-07-04T21:12:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56843
2012-07-04T21:12:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56844
2012-07-04T21:12:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56845
2012-07-04T21:12:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56846
2012-07-04T21:12:10-03:00,info,appl
listen,17,0.0.0.0,56847
2012-07-04T21:12:10-03:00,info,appl
listen,17,0.0.0.0,56848
2012-07-04T21:12:10-03:00,info,appl
listen,17,0.0.0.0,56849
2012-07-04T21:12:11-03:00,info,appl
listen,17,0.0.0.0,56850
2012-07-04T21:13:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:13:19-03:00,info,appl
listen,17,0.0.0.0,56851
2012-07-04T21:13:19-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T21:13:19-03:00,info,appl
listen,17,0.0.0.0,56852
2012-07-04T21:13:20-03:00,info,appl
listen,17,0.0.0.0,56853
2012-07-04T21:13:20-03:00,info,appl
listen,17,0.0.0.0,56854
2012-07-04T21:13:20-03:00,info,appl
listen,17,0.0.0.0,56855
2012-07-04T21:13:21-03:00,info,appl
listen,17,0.0.0.0,56856
2012-07-04T21:13:21-03:00,info,appl
listen,17,0.0.0.0,56857
2012-07-04T21:13:21-03:00,info,appl
listen,17,0.0.0.0,56858
2012-07-04T21:13:21-03:00,info,appl
listen,17,0.0.0.0,56859
2012-07-04T21:13:22-03:00,info,appl
listen,17,0.0.0.0,56860
2012-07-04T21:13:22-03:00,info,appl
listen,17,0.0.0.0,56861
2012-07-04T21:13:22-03:00,info,appl
w,listen,17,0.0.0.0,51790
2012-07-04T21:13:22-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T21:13:22-03:00,info,appl
listen,17,0.0.0.0,51791
2012-07-04T21:13:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:13:22-03:00,info,appl
listen,17,0.0.0.0,51792
2012-07-04T21:13:22-03:00,info,appl
listen,17,0.0.0.0,51793
2012-07-04T21:13:23-03:00,info,appl
listen,17,0.0.0.0,51794
2012-07-04T21:13:23-03:00,info,appl
listen,17,0.0.0.0,51795
2012-07-04T21:13:24-03:00,info,appl
listen,17,0.0.0.0,51796
2012-07-04T21:13:24-03:00,info,appl
listen,17,0.0.0.0,51797
2012-07-04T21:13:24-03:00,info,appl
listen,17,0.0.0.0,51798
2012-07-04T21:13:25-03:00,info,appl
listen,17,0.0.0.0,51799
2012-07-04T21:13:25-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51800
2012-07-04T21:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51801
2012-07-04T21:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51802
2012-07-04T21:14:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:14:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:15:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51803
2012-07-04T21:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51804
2012-07-04T21:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51805
2012-07-04T21:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51806
2012-07-04T21:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51807
2012-07-04T21:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51808
2012-07-04T21:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51809
2012-07-04T21:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51810
2012-07-04T21:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51811
2012-07-04T21:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51812
2012-07-04T21:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51813
2012-07-04T21:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52134
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52135
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,58055
2012-07-04T21:18:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58056
2012-07-04T21:18:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58057
2012-07-04T21:18:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62497
2012-07-04T21:18:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:18:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62498
2012-07-04T21:18:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62499
2012-07-04T21:18:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62500
2012-07-04T21:18:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62501
2012-07-04T21:18:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62502
2012-07-04T21:18:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62503
2012-07-04T21:18:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62504
2012-07-04T21:18:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62505
2012-07-04T21:18:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62506
2012-07-04T21:18:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54070
2012-07-04T21:18:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:21:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:21:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:21:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50723
2012-07-04T21:21:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:21:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65476
2012-07-04T21:21:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:22:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:22:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57659
2012-07-04T21:22:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:22:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57660
2012-07-04T21:22:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57661
2012-07-04T21:22:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54287
2012-07-04T21:22:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54288
2012-07-04T21:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54289
2012-07-04T21:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54290
2012-07-04T21:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54291
2012-07-04T21:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54292
2012-07-04T21:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54293
2012-07-04T21:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54294
2012-07-04T21:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54295
2012-07-04T21:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54296
2012-07-04T21:23:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T21:23:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:23:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54297
2012-07-04T21:23:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:23:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54298
2012-07-04T21:23:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54299
2012-07-04T21:23:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54300
2012-07-04T21:23:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54301
2012-07-04T21:23:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54302
2012-07-04T21:23:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54303
2012-07-04T21:23:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54304
2012-07-04T21:23:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54305
2012-07-04T21:23:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54306
2012-07-04T21:23:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54307
2012-07-04T21:27:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:27:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:27:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:27:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54308
2012-07-04T21:27:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-04T21:27:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54309
2012-07-04T21:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54310
2012-07-04T21:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54311
2012-07-04T21:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54312
2012-07-04T21:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54313
2012-07-04T21:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54314
2012-07-04T21:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54315
2012-07-04T21:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54316
2012-07-04T21:27:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54317
2012-07-04T21:27:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54318
2012-07-04T21:28:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:28:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54319
2012-07-04T21:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:28:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54320
2012-07-04T21:28:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54321
2012-07-04T21:28:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54322
2012-07-04T21:28:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54323
2012-07-04T21:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54324
2012-07-04T21:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54325
2012-07-04T21:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54326
2012-07-04T21:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54327
2012-07-04T21:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54328
2012-07-04T21:28:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54329
2012-07-04T21:28:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:29:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:32:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:32:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64541
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64542
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T21:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64543
2012-07-04T21:32:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54754
2012-07-04T21:32:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54755
2012-07-04T21:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54756
2012-07-04T21:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54757
2012-07-04T21:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54758
2012-07-04T21:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54759
2012-07-04T21:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-04T21:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54761
2012-07-04T21:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54762
2012-07-04T21:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54763
2012-07-04T21:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:35:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:36:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:37:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:37:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54764
2012-07-04T21:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:37:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54765
2012-07-04T21:37:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54766
2012-07-04T21:37:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54767
2012-07-04T21:37:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54768
2012-07-04T21:37:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54769
2012-07-04T21:37:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54770
2012-07-04T21:37:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54771
2012-07-04T21:37:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54772
2012-07-04T21:37:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54773
2012-07-04T21:37:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54774
2012-07-04T21:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T21:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54775
2012-07-04T21:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T21:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54776
2012-07-04T21:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54777
2012-07-04T21:38:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54778
2012-07-04T21:38:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54779
2012-07-04T21:38:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54780
2012-07-04T21:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54781
2012-07-04T21:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54782
2012-07-04T21:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54783
2012-07-04T21:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54784
2012-07-04T21:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54785
2012-07-04T21:42:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T21:42:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64669
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64670
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:42:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64671
2012-07-04T21:42:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55369
2012-07-04T21:42:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:42:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55370
2012-07-04T21:42:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55371
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55372
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55373
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55374
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:42:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55375
2012-07-04T21:42:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55376
2012-07-04T21:42:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55377
2012-07-04T21:42:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55378
2012-07-04T21:43:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55379
2012-07-04T21:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T21:43:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55380
2012-07-04T21:43:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55381
2012-07-04T21:43:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55382
2012-07-04T21:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55383
2012-07-04T21:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55384
2012-07-04T21:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55385
2012-07-04T21:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55386
2012-07-04T21:43:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55387
2012-07-04T21:43:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55388
2012-07-04T21:43:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55389
2012-07-04T21:43:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:44:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63562
2012-07-04T21:44:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T21:44:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63563
2012-07-04T21:44:17-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T21:44:17-03:00,info,appl
listen,17,0.0.0.0,63564
2012-07-04T21:45:12-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-04T21:45:12-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:12-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:12-03:00,info,appl
listen,17,0.0.0.0,63565
2012-07-04T21:45:12-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T21:45:12-03:00,info,appl
listen,17,0.0.0.0,63566
2012-07-04T21:45:13-03:00,info,appl
listen,17,0.0.0.0,63567
2012-07-04T21:45:13-03:00,info,appl
listen,17,0.0.0.0,63568
2012-07-04T21:45:13-03:00,info,appl
listen,17,0.0.0.0,63569
2012-07-04T21:45:14-03:00,info,appl
listen,17,0.0.0.0,63570
2012-07-04T21:45:14-03:00,info,appl
listen,17,0.0.0.0,63571
2012-07-04T21:45:14-03:00,info,appl
listen,17,0.0.0.0,63572
2012-07-04T21:45:14-03:00,info,appl
listen,17,0.0.0.0,63573
2012-07-04T21:45:15-03:00,info,appl
listen,17,0.0.0.0,63574
2012-07-04T21:45:15-03:00,info,appl
listen,17,0.0.0.0,63575
2012-07-04T21:45:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:15-03:00,info,appl
listen,17,0.0.0.0,63576
2012-07-04T21:45:15-03:00,info,appl
listen,17,0.0.0.0,63577
2012-07-04T21:45:16-03:00,info,appl
listen,17,0.0.0.0,63578
2012-07-04T21:45:16-03:00,info,appl
listen,17,0.0.0.0,63579
2012-07-04T21:45:17-03:00,info,appl
listen,17,0.0.0.0,63580
2012-07-04T21:45:17-03:00,info,appl
listen,17,0.0.0.0,63581
2012-07-04T21:45:17-03:00,info,appl
listen,17,0.0.0.0,63582
2012-07-04T21:45:17-03:00,info,appl
listen,17,0.0.0.0,63583
2012-07-04T21:45:18-03:00,info,appl
listen,17,0.0.0.0,63584
2012-07-04T21:45:18-03:00,info,appl
listen,17,0.0.0.0,63585
2012-07-04T21:45:18-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63586
2012-07-04T21:45:18-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:18-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:18-03:00,info,appl
listen,17,0.0.0.0,63587
2012-07-04T21:45:19-03:00,info,appl
listen,17,0.0.0.0,63588
2012-07-04T21:45:19-03:00,info,appl
listen,17,0.0.0.0,63589
2012-07-04T21:45:20-03:00,info,appl
listen,17,0.0.0.0,63590
2012-07-04T21:45:20-03:00,info,appl
listen,17,0.0.0.0,63591
2012-07-04T21:45:20-03:00,info,appl
listen,17,0.0.0.0,63592
2012-07-04T21:45:21-03:00,info,appl
listen,17,0.0.0.0,63593
2012-07-04T21:45:21-03:00,info,appl
listen,17,0.0.0.0,63594
2012-07-04T21:45:21-03:00,info,appl
listen,17,0.0.0.0,63595
2012-07-04T21:45:21-03:00,info,appl
listen,17,0.0.0.0,63596
2012-07-04T21:45:21-03:00,info,appl
listen,17,0.0.0.0,63597
2012-07-04T21:45:22-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:22-03:00,info,appl
listen,17,0.0.0.0,63598
2012-07-04T21:45:22-03:00,info,appl
listen,17,0.0.0.0,63599
2012-07-04T21:45:23-03:00,info,appl
listen,17,0.0.0.0,63600
2012-07-04T21:45:23-03:00,info,appl
listen,17,0.0.0.0,63601
2012-07-04T21:45:23-03:00,info,appl
listen,17,0.0.0.0,63602
2012-07-04T21:45:24-03:00,info,appl
listen,17,0.0.0.0,63603
2012-07-04T21:45:24-03:00,info,appl
listen,17,0.0.0.0,63604
2012-07-04T21:45:24-03:00,info,appl
listen,17,0.0.0.0,63605
2012-07-04T21:45:24-03:00,info,appl
listen,17,0.0.0.0,63606
2012-07-04T21:45:25-03:00,info,appl
listen,17,0.0.0.0,63607
2012-07-04T21:45:25-03:00,info,appl
listen,17,0.0.0.0,63608
2012-07-04T21:45:25-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:25-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:25-03:00,info,appl
listen,17,0.0.0.0,63609
2012-07-04T21:45:26-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63610
2012-07-04T21:45:26-03:00,info,appl
listen,17,0.0.0.0,63611
2012-07-04T21:45:27-03:00,info,appl
listen,17,0.0.0.0,63612
2012-07-04T21:45:27-03:00,info,appl
listen,17,0.0.0.0,63613
2012-07-04T21:45:28-03:00,info,appl
listen,17,0.0.0.0,63614
2012-07-04T21:45:28-03:00,info,appl
listen,17,0.0.0.0,63615
2012-07-04T21:45:28-03:00,info,appl
listen,17,0.0.0.0,63616
2012-07-04T21:45:28-03:00,info,appl
listen,17,0.0.0.0,63617
2012-07-04T21:45:28-03:00,info,appl
listen,17,0.0.0.0,63618
2012-07-04T21:45:29-03:00,info,appl
listen,17,0.0.0.0,63619
2012-07-04T21:45:29-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:29-03:00,info,appl
listen,17,0.0.0.0,63620
2012-07-04T21:45:29-03:00,info,appl
listen,17,0.0.0.0,63621
2012-07-04T21:45:30-03:00,info,appl
listen,17,0.0.0.0,63622
2012-07-04T21:45:30-03:00,info,appl
listen,17,0.0.0.0,63623
2012-07-04T21:45:31-03:00,info,appl
listen,17,0.0.0.0,63624
2012-07-04T21:45:31-03:00,info,appl
listen,17,0.0.0.0,63625
2012-07-04T21:45:31-03:00,info,appl
send,17,10.108.0.153,389
2012-07-04T21:45:31-03:00,info,appl
listen,17,0.0.0.0,63626
2012-07-04T21:45:31-03:00,info,appl
listen,17,0.0.0.0,63627
2012-07-04T21:45:32-03:00,info,appl
listen,17,0.0.0.0,63628
2012-07-04T21:45:32-03:00,info,appl
listen,17,0.0.0.0,63629
2012-07-04T21:45:32-03:00,info,appl
listen,17,0.0.0.0,63630
2012-07-04T21:45:32-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:32-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:32-03:00,info,appl
listen,17,0.0.0.0,63631
2012-07-04T21:45:33-03:00,info,appl
listen,17,0.0.0.0,63632
2012-07-04T21:45:33-03:00,info,appl
listen,17,0.0.0.0,63633
2012-07-04T21:45:34-03:00,info,appl
listen,17,0.0.0.0,63634
2012-07-04T21:45:34-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63635
2012-07-04T21:45:34-03:00,info,appl
listen,17,0.0.0.0,63636
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63637
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63638
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63639
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63640
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63641
2012-07-04T21:45:35-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:35-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:35-03:00,info,appl
listen,17,0.0.0.0,63642
2012-07-04T21:45:36-03:00,info,appl
listen,17,0.0.0.0,63643
2012-07-04T21:45:36-03:00,info,appl
listen,17,0.0.0.0,63644
2012-07-04T21:45:37-03:00,info,appl
listen,17,0.0.0.0,63645
2012-07-04T21:45:37-03:00,info,appl
listen,17,0.0.0.0,63646
2012-07-04T21:45:38-03:00,info,appl
listen,17,0.0.0.0,63647
2012-07-04T21:45:38-03:00,info,appl
listen,17,0.0.0.0,63648
2012-07-04T21:45:38-03:00,info,appl
listen,17,0.0.0.0,63649
2012-07-04T21:45:38-03:00,info,appl
listen,17,0.0.0.0,63650
2012-07-04T21:45:39-03:00,info,appl
listen,17,0.0.0.0,63651
2012-07-04T21:45:39-03:00,info,appl
listen,17,0.0.0.0,63652
2012-07-04T21:45:39-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:39-03:00,info,appl
listen,17,0.0.0.0,63653
2012-07-04T21:45:40-03:00,info,appl
listen,17,0.0.0.0,63654
2012-07-04T21:45:40-03:00,info,appl
listen,17,0.0.0.0,63655
2012-07-04T21:45:41-03:00,info,appl
listen,17,0.0.0.0,63656
2012-07-04T21:45:41-03:00,info,appl
listen,17,0.0.0.0,63657
2012-07-04T21:45:42-03:00,info,appl
listen,17,0.0.0.0,63658
2012-07-04T21:45:42-03:00,info,appl
listen,17,0.0.0.0,63659
2012-07-04T21:45:42-03:00,info,appl
listen,17,0.0.0.0,63660
2012-07-04T21:45:42-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63661
2012-07-04T21:45:42-03:00,info,appl
listen,17,0.0.0.0,63662
2012-07-04T21:45:43-03:00,info,appl
listen,17,0.0.0.0,63663
2012-07-04T21:45:43-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:43-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:43-03:00,info,appl
listen,17,0.0.0.0,63664
2012-07-04T21:45:43-03:00,info,appl
listen,17,0.0.0.0,63665
2012-07-04T21:45:44-03:00,info,appl
listen,17,0.0.0.0,63666
2012-07-04T21:45:44-03:00,info,appl
listen,17,0.0.0.0,63667
2012-07-04T21:45:45-03:00,info,appl
listen,17,0.0.0.0,63668
2012-07-04T21:45:45-03:00,info,appl
listen,17,0.0.0.0,63669
2012-07-04T21:45:45-03:00,info,appl
listen,17,0.0.0.0,63670
2012-07-04T21:45:45-03:00,info,appl
listen,17,0.0.0.0,63671
2012-07-04T21:45:46-03:00,info,appl
listen,17,0.0.0.0,63672
2012-07-04T21:45:46-03:00,info,appl
listen,17,0.0.0.0,63673
2012-07-04T21:45:46-03:00,info,appl
listen,17,0.0.0.0,63674
2012-07-04T21:45:46-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:46-03:00,info,appl
listen,17,0.0.0.0,63675
2012-07-04T21:45:46-03:00,info,appl
listen,17,0.0.0.0,63676
2012-07-04T21:45:47-03:00,info,appl
listen,17,0.0.0.0,63677
2012-07-04T21:45:47-03:00,info,appl
listen,17,0.0.0.0,63678
2012-07-04T21:45:48-03:00,info,appl
listen,17,0.0.0.0,63679
2012-07-04T21:45:48-03:00,info,appl
listen,17,0.0.0.0,63680
2012-07-04T21:45:48-03:00,info,appl
listen,17,0.0.0.0,63681
2012-07-04T21:45:49-03:00,info,appl
listen,17,0.0.0.0,63682
2012-07-04T21:45:49-03:00,info,appl
listen,17,0.0.0.0,63683
2012-07-04T21:45:49-03:00,info,appl
listen,17,0.0.0.0,63684
2012-07-04T21:45:49-03:00,info,appl
listen,17,0.0.0.0,63685
2012-07-04T21:45:49-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:49-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T21:45:49-03:00,info,appl
listen,17,0.0.0.0,63686
2012-07-04T21:45:50-03:00,info,appl
listen,17,0.0.0.0,63687
2012-07-04T21:45:50-03:00,info,appl
listen,17,0.0.0.0,63688
2012-07-04T21:45:51-03:00,info,appl
listen,17,0.0.0.0,63689
2012-07-04T21:45:51-03:00,info,appl
send,17,10.203.0.11,389
2012-07-04T21:45:51-03:00,info,appl
listen,17,0.0.0.0,63690
2012-07-04T21:45:52-03:00,info,appl
listen,17,0.0.0.0,63691
2012-07-04T21:45:52-03:00,info,appl
listen,17,0.0.0.0,63692
2012-07-04T21:45:52-03:00,info,appl
listen,17,0.0.0.0,63693
2012-07-04T21:45:52-03:00,info,appl
listen,17,0.0.0.0,63694
2012-07-04T21:45:52-03:00,info,appl
listen,17,0.0.0.0,63695
2012-07-04T21:45:53-03:00,info,appl
listen,17,0.0.0.0,63696
2012-07-04T21:45:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:53-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:53-03:00,info,appl
listen,17,0.0.0.0,63697
2012-07-04T21:45:54-03:00,info,appl
listen,17,0.0.0.0,63698
2012-07-04T21:45:54-03:00,info,appl
listen,17,0.0.0.0,63699
2012-07-04T21:45:55-03:00,info,appl
listen,17,0.0.0.0,63700
2012-07-04T21:45:55-03:00,info,appl
listen,17,0.0.0.0,63701
2012-07-04T21:45:55-03:00,info,appl
listen,17,0.0.0.0,63702
2012-07-04T21:45:56-03:00,info,appl
listen,17,0.0.0.0,63703
2012-07-04T21:45:56-03:00,info,appl
listen,17,0.0.0.0,63704
2012-07-04T21:45:56-03:00,info,appl
listen,17,0.0.0.0,63705
2012-07-04T21:45:56-03:00,info,appl
listen,17,0.0.0.0,63706
2012-07-04T21:45:57-03:00,info,appl
listen,17,0.0.0.0,63707
2012-07-04T21:45:57-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:45:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:45:57-03:00,info,appl
listen,17,0.0.0.0,63708
2012-07-04T21:45:57-03:00,info,appl
listen,17,0.0.0.0,63709
2012-07-04T21:45:58-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63710
2012-07-04T21:45:58-03:00,info,appl
listen,17,0.0.0.0,63711
2012-07-04T21:45:58-03:00,info,appl
listen,17,0.0.0.0,63712
2012-07-04T21:45:59-03:00,info,appl
listen,17,0.0.0.0,63713
2012-07-04T21:45:59-03:00,info,appl
listen,17,0.0.0.0,63714
2012-07-04T21:45:59-03:00,info,appl
listen,17,0.0.0.0,63715
2012-07-04T21:45:59-03:00,info,appl
listen,17,0.0.0.0,63716
2012-07-04T21:46:00-03:00,info,appl
listen,17,0.0.0.0,63717
2012-07-04T21:46:00-03:00,info,appl
listen,17,0.0.0.0,63718
2012-07-04T21:46:00-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:46:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:46:00-03:00,info,appl
listen,17,0.0.0.0,63719
2012-07-04T21:46:00-03:00,info,appl
listen,17,0.0.0.0,63720
2012-07-04T21:46:01-03:00,info,appl
listen,17,0.0.0.0,63721
2012-07-04T21:46:01-03:00,info,appl
listen,17,0.0.0.0,63722
2012-07-04T21:46:02-03:00,info,appl
listen,17,0.0.0.0,63723
2012-07-04T21:46:02-03:00,info,appl
listen,17,0.0.0.0,63724
2012-07-04T21:46:02-03:00,info,appl
listen,17,0.0.0.0,63725
2012-07-04T21:46:03-03:00,info,appl
listen,17,0.0.0.0,63726
2012-07-04T21:46:03-03:00,info,appl
listen,17,0.0.0.0,63727
2012-07-04T21:46:03-03:00,info,appl
listen,17,0.0.0.0,63728
2012-07-04T21:46:03-03:00,info,appl
listen,17,0.0.0.0,63729
2012-07-04T21:46:03-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-04T21:46:03-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T21:46:03-03:00,info,appl
listen,17,0.0.0.0,63730
2012-07-04T21:46:04-03:00,info,appl
listen,17,0.0.0.0,63731
2012-07-04T21:46:04-03:00,info,appl
listen,17,0.0.0.0,63732
2012-07-04T21:46:05-03:00,info,appl
listen,17,0.0.0.0,63733
2012-07-04T21:46:05-03:00,info,appl
listen,17,0.0.0.0,63734
2012-07-04T21:46:06-03:00,info,appl
listen,17,0.0.0.0,63735
2012-07-04T21:46:06-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63736
2012-07-04T21:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63737
2012-07-04T21:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63738
2012-07-04T21:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63739
2012-07-04T21:46:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63740
2012-07-04T21:47:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T21:47:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T21:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63741
2012-07-04T21:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T21:47:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63742
2012-07-04T21:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63743
2012-07-04T21:47:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63744
2012-07-04T21:47:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63745
2012-07-04T21:47:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63746
2012-07-04T21:47:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63747
2012-07-04T21:47:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63748
2012-07-04T21:47:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63749
2012-07-04T21:47:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63750
2012-07-04T21:47:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63751
2012-07-04T21:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T21:49:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:49:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:50:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:50:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:52:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T21:52:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T21:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58385
2012-07-04T21:52:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.12,53
2012-07-04T21:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58386
2012-07-04T21:52:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T21:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58387
2012-07-04T21:52:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53034
2012-07-04T21:52:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T21:52:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53035
2012-07-04T21:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53036
2012-07-04T21:52:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53037
2012-07-04T21:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53038
2012-07-04T21:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53039
2012-07-04T21:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53040
2012-07-04T21:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53041
2012-07-04T21:52:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53042
2012-07-04T21:52:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53043
2012-07-04T21:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-04T21:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53044
2012-07-04T21:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53045
2012-07-04T21:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53046
2012-07-04T21:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53047
2012-07-04T21:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53048
2012-07-04T21:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53049
2012-07-04T21:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53050
2012-07-04T21:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53051
2012-07-04T21:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53052
2012-07-04T21:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53053
2012-07-04T21:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53054
2012-07-04T21:56:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T21:56:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T21:57:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:57:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T21:57:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T21:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53055
2012-07-04T21:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53056
2012-07-04T21:57:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53057
2012-07-04T21:57:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53058
2012-07-04T21:57:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53059
2012-07-04T21:57:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53060
2012-07-04T21:57:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53061
2012-07-04T21:57:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53062
2012-07-04T21:57:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53063
2012-07-04T21:57:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53064
2012-07-04T21:57:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53065
2012-07-04T21:57:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T21:58:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T21:58:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53066
2012-07-04T21:58:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T21:58:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53067
2012-07-04T21:58:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53068
2012-07-04T21:58:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53069
2012-07-04T21:58:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53070
2012-07-04T21:58:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53071
2012-07-04T21:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53072
2012-07-04T21:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53073
2012-07-04T21:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53074
2012-07-04T21:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53075
2012-07-04T21:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53076
2012-07-04T22:02:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T22:02:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T22:02:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57238
2012-07-04T22:02:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:02:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57239
2012-07-04T22:02:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57240
2012-07-04T22:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52316
2012-07-04T22:02:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T22:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52317
2012-07-04T22:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52318
2012-07-04T22:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52319
2012-07-04T22:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52320
2012-07-04T22:02:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52321
2012-07-04T22:02:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52322
2012-07-04T22:02:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52323
2012-07-04T22:02:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52324
2012-07-04T22:02:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52325
2012-07-04T22:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:03:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:03:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:04:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:07:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T22:07:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T22:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-04T22:07:45-03:00,info,appl
listen,17,0.0.0.0,52326
2012-07-04T22:07:45-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T22:07:45-03:00,info,appl
listen,17,0.0.0.0,52327
2012-07-04T22:07:46-03:00,info,appl
listen,17,0.0.0.0,52328
2012-07-04T22:07:46-03:00,info,appl
listen,17,0.0.0.0,52329
2012-07-04T22:07:46-03:00,info,appl
listen,17,0.0.0.0,52330
2012-07-04T22:07:47-03:00,info,appl
listen,17,0.0.0.0,52331
2012-07-04T22:07:47-03:00,info,appl
listen,17,0.0.0.0,52332
2012-07-04T22:07:47-03:00,info,appl
listen,17,0.0.0.0,52333
2012-07-04T22:07:47-03:00,info,appl
listen,17,0.0.0.0,52334
2012-07-04T22:07:48-03:00,info,appl
listen,17,0.0.0.0,52335
2012-07-04T22:07:48-03:00,info,appl
listen,17,0.0.0.0,52336
2012-07-04T22:08:19-03:00,info,appl
w,listen,17,0.0.0.0,52252
2012-07-04T22:08:19-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T22:08:19-03:00,info,appl
connect out,6,10.10.0.12,389
2012-07-04T22:08:19-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T22:08:19-03:00,info,appl
listen,17,0.0.0.0,52253
2012-07-04T22:08:19-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T22:08:19-03:00,info,appl
w,listen,17,0.0.0.0,61645
2012-07-04T22:08:19-03:00,info,appl
listen,17,0.0.0.0,61646
2012-07-04T22:08:20-03:00,info,appl
w,listen,17,0.0.0.0,62863
2012-07-04T22:08:20-03:00,info,appl
listen,17,0.0.0.0,62864
2012-07-04T22:08:20-03:00,info,appl
w,listen,17,0.0.0.0,65502
2012-07-04T22:08:20-03:00,info,appl
listen,17,0.0.0.0,65503
2012-07-04T22:08:21-03:00,info,appl
w,listen,17,0.0.0.0,53863
2012-07-04T22:08:21-03:00,info,appl
listen,17,0.0.0.0,53864
2012-07-04T22:08:21-03:00,info,appl
w,listen,17,0.0.0.0,53995
2012-07-04T22:08:21-03:00,info,appl
listen,17,0.0.0.0,53996
2012-07-04T22:08:21-03:00,info,appl
w,listen,17,0.0.0.0,51162
2012-07-04T22:08:21-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51163
2012-07-04T22:08:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50830
2012-07-04T22:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50831
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57431
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57432
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52027
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52028
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57716
2012-07-04T22:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57717
2012-07-04T22:10:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:10:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:11:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:12:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:12:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-04T22:12:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62256
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62257
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:12:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62258
2012-07-04T22:12:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61305
2012-07-04T22:12:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T22:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61306
2012-07-04T22:12:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61307
2012-07-04T22:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61308
2012-07-04T22:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61309
2012-07-04T22:12:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61310
2012-07-04T22:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61311
2012-07-04T22:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61312
2012-07-04T22:12:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61313
2012-07-04T22:12:51-03:00,info,appl
listen,17,0.0.0.0,61314
2012-07-04T22:13:35-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T22:13:35-03:00,info,appl
listen,17,0.0.0.0,61315
2012-07-04T22:13:35-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T22:13:36-03:00,info,appl
listen,17,0.0.0.0,61316
2012-07-04T22:13:37-03:00,info,appl
listen,17,0.0.0.0,61317
2012-07-04T22:13:37-03:00,info,appl
listen,17,0.0.0.0,61318
2012-07-04T22:13:37-03:00,info,appl
listen,17,0.0.0.0,61319
2012-07-04T22:13:38-03:00,info,appl
listen,17,0.0.0.0,61320
2012-07-04T22:13:38-03:00,info,appl
listen,17,0.0.0.0,61321
2012-07-04T22:13:38-03:00,info,appl
listen,17,0.0.0.0,61322
2012-07-04T22:13:38-03:00,info,appl
listen,17,0.0.0.0,61323
2012-07-04T22:13:39-03:00,info,appl
listen,17,0.0.0.0,61324
2012-07-04T22:13:39-03:00,info,appl
listen,17,0.0.0.0,61325
2012-07-04T22:13:39-03:00,info,appl
w,listen,17,0.0.0.0,62384
2012-07-04T22:13:39-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T22:13:39-03:00,info,appl
listen,17,0.0.0.0,62385
2012-07-04T22:13:39-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-04T22:13:39-03:00,info,appl
listen,17,0.0.0.0,62386
2012-07-04T22:13:39-03:00,info,appl
listen,17,0.0.0.0,62387
2012-07-04T22:13:40-03:00,info,appl
listen,17,0.0.0.0,62388
2012-07-04T22:13:40-03:00,info,appl
listen,17,0.0.0.0,62389
2012-07-04T22:13:41-03:00,info,appl
listen,17,0.0.0.0,62390
2012-07-04T22:13:41-03:00,info,appl
listen,17,0.0.0.0,62391
2012-07-04T22:13:41-03:00,info,appl
listen,17,0.0.0.0,62392
2012-07-04T22:13:42-03:00,info,appl
listen,17,0.0.0.0,62393
2012-07-04T22:13:42-03:00,info,appl
listen,17,0.0.0.0,62394
2012-07-04T22:13:42-03:00,info,appl
listen,17,0.0.0.0,62395
2012-07-04T22:13:42-03:00,info,appl
listen,17,0.0.0.0,62396
2012-07-04T22:17:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:17:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:17:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:17:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62397
2012-07-04T22:17:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:17:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62398
2012-07-04T22:17:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62399
2012-07-04T22:17:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62400
2012-07-04T22:17:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62401
2012-07-04T22:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62402
2012-07-04T22:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62403
2012-07-04T22:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62404
2012-07-04T22:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62405
2012-07-04T22:17:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62406
2012-07-04T22:17:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62407
2012-07-04T22:18:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:18:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:18:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52305
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52306
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:22:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52307
2012-07-04T22:22:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52263
2012-07-04T22:22:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-04T22:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52264
2012-07-04T22:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52265
2012-07-04T22:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52266
2012-07-04T22:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52267
2012-07-04T22:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52268
2012-07-04T22:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52269
2012-07-04T22:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52270
2012-07-04T22:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52271
2012-07-04T22:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52272
2012-07-04T22:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T22:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52273
2012-07-04T22:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52274
2012-07-04T22:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52275
2012-07-04T22:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52276
2012-07-04T22:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52277
2012-07-04T22:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52278
2012-07-04T22:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52279
2012-07-04T22:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52280
2012-07-04T22:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52281
2012-07-04T22:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52282
2012-07-04T22:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52283
2012-07-04T22:23:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52706
2012-07-04T22:23:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:23:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55894
2012-07-04T22:25:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:25:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:25:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:26:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-04T22:27:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:27:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:27:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:27:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55895
2012-07-04T22:27:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55896
2012-07-04T22:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55897
2012-07-04T22:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55898
2012-07-04T22:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55899
2012-07-04T22:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55900
2012-07-04T22:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55901
2012-07-04T22:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55902
2012-07-04T22:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55903
2012-07-04T22:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55904
2012-07-04T22:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55905
2012-07-04T22:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:28:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51521
2012-07-04T22:28:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51522
2012-07-04T22:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:28:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51523
2012-07-04T22:28:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51524
2012-07-04T22:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51525
2012-07-04T22:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51526
2012-07-04T22:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51527
2012-07-04T22:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51528
2012-07-04T22:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51529
2012-07-04T22:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51530
2012-07-04T22:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51531
2012-07-04T22:28:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51532
2012-07-04T22:32:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:32:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:32:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:33:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:33:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:33:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61077
2012-07-04T22:33:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61078
2012-07-04T22:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61079
2012-07-04T22:33:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57373
2012-07-04T22:33:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T22:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57374
2012-07-04T22:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57375
2012-07-04T22:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57376
2012-07-04T22:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57377
2012-07-04T22:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57378
2012-07-04T22:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57379
2012-07-04T22:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57380
2012-07-04T22:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57381
2012-07-04T22:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57382
2012-07-04T22:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-04T22:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,57383
2012-07-04T22:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.145,12110
2012-07-04T22:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:33:38-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-04T22:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:34:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,59668
2012-07-04T22:36:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,2161
2012-07-04T22:37:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,54396
2012-07-04T22:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-04T22:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57384
2012-07-04T22:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57385
2012-07-04T22:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57386
2012-07-04T22:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57387
2012-07-04T22:38:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,4371
2012-07-04T22:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57388
2012-07-04T22:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57389
2012-07-04T22:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57390

2012-07-04T22:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57391
2012-07-04T22:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57392
2012-07-04T22:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57393
2012-07-04T22:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57394
2012-07-04T22:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T22:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57395
2012-07-04T22:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57396
2012-07-04T22:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57397
2012-07-04T22:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57398
2012-07-04T22:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57399
2012-07-04T22:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57400
2012-07-04T22:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57401
2012-07-04T22:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57402
2012-07-04T22:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57403
2012-07-04T22:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57404
2012-07-04T22:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57405
2012-07-04T22:38:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,2770
2012-07-04T22:39:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:39:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:39:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:40:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,56645
2012-07-04T22:40:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,1868
2012-07-04T22:43:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:43:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:43:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57239
2012-07-04T22:43:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T22:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57240
2012-07-04T22:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:43:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57241
2012-07-04T22:43:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52175
2012-07-04T22:43:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T22:43:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52176
2012-07-04T22:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52177
2012-07-04T22:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52178
2012-07-04T22:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52179
2012-07-04T22:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52180
2012-07-04T22:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52181
2012-07-04T22:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52182
2012-07-04T22:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52183
2012-07-04T22:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52184
2012-07-04T22:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52185
2012-07-04T22:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52186
2012-07-04T22:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52187
2012-07-04T22:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52188
2012-07-04T22:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52189
2012-07-04T22:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52190
2012-07-04T22:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52191
2012-07-04T22:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52192
2012-07-04T22:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52193
2012-07-04T22:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52194
2012-07-04T22:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52195
2012-07-04T22:46:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:46:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:47:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-04T22:47:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:48:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52196
2012-07-04T22:48:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:48:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:48:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:48:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:48:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52197
2012-07-04T22:48:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52198
2012-07-04T22:48:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52199
2012-07-04T22:48:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52200
2012-07-04T22:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52201
2012-07-04T22:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52202
2012-07-04T22:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52203
2012-07-04T22:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52204
2012-07-04T22:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52205
2012-07-04T22:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52206
2012-07-04T22:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52207
2012-07-04T22:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T22:51:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,3720
2012-07-04T22:52:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,62745
2012-07-04T22:53:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:53:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52775
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52776
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52777
2012-07-04T22:53:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59906

2012-07-04T22:53:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T22:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59907
2012-07-04T22:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59908
2012-07-04T22:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59909
2012-07-04T22:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59910
2012-07-04T22:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59911
2012-07-04T22:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59912
2012-07-04T22:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59913
2012-07-04T22:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59914
2012-07-04T22:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59915
2012-07-04T22:53:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,64098
2012-07-04T22:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T22:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59916
2012-07-04T22:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59917
2012-07-04T22:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59918
2012-07-04T22:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59919
2012-07-04T22:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59920
2012-07-04T22:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59921
2012-07-04T22:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59922
2012-07-04T22:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59923
2012-07-04T22:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59924
2012-07-04T22:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59925
2012-07-04T22:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59926
2012-07-04T22:53:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T22:53:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:54:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:54:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T22:55:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,3913
2012-07-04T22:55:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,3934

2012-07-04T22:56:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.4.43,1187
2012-07-04T22:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,3615
2012-07-04T22:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,1466
2012-07-04T22:57:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,4950
2012-07-04T22:58:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T22:58:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T22:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59927
2012-07-04T22:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T22:58:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59928
2012-07-04T22:58:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59929
2012-07-04T22:58:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59930
2012-07-04T22:58:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59931
2012-07-04T22:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59932
2012-07-04T22:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59933
2012-07-04T22:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59934
2012-07-04T22:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59935
2012-07-04T22:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59936
2012-07-04T22:58:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59937
2012-07-04T22:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T22:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59938
2012-07-04T22:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T22:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59939
2012-07-04T22:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59940
2012-07-04T22:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59941
2012-07-04T22:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59942
2012-07-04T22:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59943
2012-07-04T22:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59944
2012-07-04T22:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59945
2012-07-04T22:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59946

2012-07-04T22:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59947
2012-07-04T22:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59948
2012-07-04T22:59:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,4120
2012-07-04T23:00:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:00:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:01:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,53607
2012-07-04T23:01:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:01:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:01:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,54970
2012-07-04T23:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:03:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:03:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54833
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54834
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:03:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54835
2012-07-04T23:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58422
2012-07-04T23:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T23:03:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58423
2012-07-04T23:03:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58424
2012-07-04T23:03:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58425
2012-07-04T23:03:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58426
2012-07-04T23:03:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58427
2012-07-04T23:03:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58428
2012-07-04T23:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58429
2012-07-04T23:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58430
2012-07-04T23:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58431

2012-07-04T23:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:04:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4772
2012-07-04T23:05:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,3989
2012-07-04T23:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61303
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:08:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:08:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61304
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:08:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61305
2012-07-04T23:08:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51987
2012-07-04T23:08:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51988
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56200
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56201
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58113
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58114
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56120
2012-07-04T23:08:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56121
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58638
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58639
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56755
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56756
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59134
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59135
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62581

2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62582
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57006
2012-07-04T23:08:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57007
2012-07-04T23:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T23:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57008
2012-07-04T23:08:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57009
2012-07-04T23:08:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57010
2012-07-04T23:08:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57011
2012-07-04T23:08:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57012
2012-07-04T23:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57013
2012-07-04T23:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57014
2012-07-04T23:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57015
2012-07-04T23:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57016
2012-07-04T23:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57017
2012-07-04T23:08:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57018
2012-07-04T23:08:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:09:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,4766
2012-07-04T23:10:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,56985
2012-07-04T23:11:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.129,56683
2012-07-04T23:12:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,2151
2012-07-04T23:13:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:13:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64631
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64632
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64633
2012-07-04T23:13:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,50671

2012-07-04T23:13:30-03:00,info,appl
w,listen,17,0.0.0.0,52605
2012-07-04T23:13:30-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-04T23:13:30-03:00,info,appl
listen,17,0.0.0.0,52606
2012-07-04T23:13:30-03:00,info,appl
listen,17,0.0.0.0,52607
2012-07-04T23:13:30-03:00,info,appl
listen,17,0.0.0.0,52608
2012-07-04T23:13:31-03:00,info,appl
listen,17,0.0.0.0,52609
2012-07-04T23:13:31-03:00,info,appl
listen,17,0.0.0.0,52610
2012-07-04T23:13:31-03:00,info,appl
listen,17,0.0.0.0,52611
2012-07-04T23:13:31-03:00,info,appl
listen,17,0.0.0.0,52612
2012-07-04T23:13:32-03:00,info,appl
listen,17,0.0.0.0,52613
2012-07-04T23:13:32-03:00,info,appl
listen,17,0.0.0.0,52614
2012-07-04T23:13:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:13:52-03:00,info,appl
listen,17,0.0.0.0,52615
2012-07-04T23:13:52-03:00,info,appl
send,17,10.10.0.11,389
2012-07-04T23:13:53-03:00,info,appl
listen,17,0.0.0.0,52616
2012-07-04T23:13:53-03:00,info,appl
listen,17,0.0.0.0,52617
2012-07-04T23:13:54-03:00,info,appl
listen,17,0.0.0.0,52618
2012-07-04T23:13:54-03:00,info,appl
listen,17,0.0.0.0,52619
2012-07-04T23:13:55-03:00,info,appl
listen,17,0.0.0.0,52620
2012-07-04T23:13:55-03:00,info,appl
listen,17,0.0.0.0,52621
2012-07-04T23:13:55-03:00,info,appl
listen,17,0.0.0.0,52622
2012-07-04T23:13:55-03:00,info,appl
listen,17,0.0.0.0,52623
2012-07-04T23:13:55-03:00,info,appl
listen,17,0.0.0.0,52624
2012-07-04T23:13:56-03:00,info,appl
listen,17,0.0.0.0,52625
2012-07-04T23:13:56-03:00,info,appl
w,listen,17,0.0.0.0,59503
2012-07-04T23:13:56-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-04T23:13:56-03:00,info,appl
listen,17,0.0.0.0,59504
2012-07-04T23:13:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:13:56-03:00,info,appl
listen,17,0.0.0.0,59505
2012-07-04T23:13:56-03:00,info,appl
listen,17,0.0.0.0,59506

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:13:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59507
2012-07-04T23:13:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59508
2012-07-04T23:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59509
2012-07-04T23:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59510
2012-07-04T23:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59511
2012-07-04T23:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59512
2012-07-04T23:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59513
2012-07-04T23:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59514
2012-07-04T23:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59515
2012-07-04T23:15:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:15:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:15:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:18:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:18:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59516
2012-07-04T23:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59517
2012-07-04T23:18:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59518
2012-07-04T23:18:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59519
2012-07-04T23:18:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59520
2012-07-04T23:18:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59521
2012-07-04T23:18:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59522
2012-07-04T23:18:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59523
2012-07-04T23:18:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59524
2012-07-04T23:18:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59525
2012-07-04T23:18:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59526
2012-07-04T23:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-04T23:19:07-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-04T23:19:07-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:07-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:07-03:00,info,appl
listen,17,0.0.0.0,59527
2012-07-04T23:19:07-03:00,info,appl
send,17,10.10.0.12,389
2012-07-04T23:19:07-03:00,info,appl
listen,17,0.0.0.0,59528
2012-07-04T23:19:08-03:00,info,appl
listen,17,0.0.0.0,59529
2012-07-04T23:19:08-03:00,info,appl
listen,17,0.0.0.0,59530
2012-07-04T23:19:09-03:00,info,appl
listen,17,0.0.0.0,59531
2012-07-04T23:19:09-03:00,info,appl
listen,17,0.0.0.0,59532
2012-07-04T23:19:09-03:00,info,appl
listen,17,0.0.0.0,59533
2012-07-04T23:19:09-03:00,info,appl
listen,17,0.0.0.0,59534
2012-07-04T23:19:10-03:00,info,appl
listen,17,0.0.0.0,59535
2012-07-04T23:19:10-03:00,info,appl
listen,17,0.0.0.0,59536
2012-07-04T23:19:10-03:00,info,appl
listen,17,0.0.0.0,59537
2012-07-04T23:19:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:10-03:00,info,appl
listen,17,0.0.0.0,59538
2012-07-04T23:19:10-03:00,info,appl
listen,17,0.0.0.0,59539
2012-07-04T23:19:11-03:00,info,appl
listen,17,0.0.0.0,59540
2012-07-04T23:19:11-03:00,info,appl
listen,17,0.0.0.0,59541
2012-07-04T23:19:12-03:00,info,appl
listen,17,0.0.0.0,59542
2012-07-04T23:19:12-03:00,info,appl
listen,17,0.0.0.0,59543
2012-07-04T23:19:12-03:00,info,appl
listen,17,0.0.0.0,59544
2012-07-04T23:19:13-03:00,info,appl
listen,17,0.0.0.0,59545
2012-07-04T23:19:13-03:00,info,appl
listen,17,0.0.0.0,59546
2012-07-04T23:19:13-03:00,info,appl
listen,17,0.0.0.0,59547
2012-07-04T23:19:13-03:00,info,appl
listen,17,0.0.0.0,59548
2012-07-04T23:19:13-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:13-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:13-03:00,info,appl
listen,17,0.0.0.0,59549
2012-07-04T23:19:14-03:00,info,appl
listen,17,0.0.0.0,59550
2012-07-04T23:19:14-03:00,info,appl
listen,17,0.0.0.0,59551
2012-07-04T23:19:15-03:00,info,appl
listen,17,0.0.0.0,59552
2012-07-04T23:19:15-03:00,info,appl
listen,17,0.0.0.0,59553
2012-07-04T23:19:16-03:00,info,appl
listen,17,0.0.0.0,59554
2012-07-04T23:19:16-03:00,info,appl
listen,17,0.0.0.0,59555
2012-07-04T23:19:16-03:00,info,appl
listen,17,0.0.0.0,59556
2012-07-04T23:19:16-03:00,info,appl
listen,17,0.0.0.0,59557
2012-07-04T23:19:16-03:00,info,appl
listen,17,0.0.0.0,59558
2012-07-04T23:19:17-03:00,info,appl
listen,17,0.0.0.0,59559
2012-07-04T23:19:17-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:17-03:00,info,appl
listen,17,0.0.0.0,59560
2012-07-04T23:19:17-03:00,info,appl
listen,17,0.0.0.0,59561
2012-07-04T23:19:18-03:00,info,appl
listen,17,0.0.0.0,59562
2012-07-04T23:19:18-03:00,info,appl
listen,17,0.0.0.0,59563
2012-07-04T23:19:19-03:00,info,appl
listen,17,0.0.0.0,59564
2012-07-04T23:19:19-03:00,info,appl
listen,17,0.0.0.0,59565
2012-07-04T23:19:19-03:00,info,appl
listen,17,0.0.0.0,59566
2012-07-04T23:19:19-03:00,info,appl
listen,17,0.0.0.0,59567
2012-07-04T23:19:20-03:00,info,appl
listen,17,0.0.0.0,59568
2012-07-04T23:19:20-03:00,info,appl
listen,17,0.0.0.0,59569
2012-07-04T23:19:20-03:00,info,appl
listen,17,0.0.0.0,59570
2012-07-04T23:19:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:21-03:00,info,appl
listen,17,0.0.0.0,59571
2012-07-04T23:19:21-03:00,info,appl
listen,17,0.0.0.0,59572
2012-07-04T23:19:22-03:00,info,appl
listen,17,0.0.0.0,59573
2012-07-04T23:19:22-03:00,info,appl
listen,17,0.0.0.0,59574

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:22-03:00,info,appl
listen,17,0.0.0.0,59575
2012-07-04T23:19:23-03:00,info,appl
listen,17,0.0.0.0,59576
2012-07-04T23:19:23-03:00,info,appl
listen,17,0.0.0.0,59577
2012-07-04T23:19:23-03:00,info,appl
listen,17,0.0.0.0,59578
2012-07-04T23:19:23-03:00,info,appl
listen,17,0.0.0.0,59579
2012-07-04T23:19:24-03:00,info,appl
listen,17,0.0.0.0,59580
2012-07-04T23:19:24-03:00,info,appl
listen,17,0.0.0.0,59581
2012-07-04T23:19:24-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:24-03:00,info,appl
listen,17,0.0.0.0,59582
2012-07-04T23:19:24-03:00,info,appl
listen,17,0.0.0.0,59583
2012-07-04T23:19:25-03:00,info,appl
listen,17,0.0.0.0,59584
2012-07-04T23:19:25-03:00,info,appl
listen,17,0.0.0.0,59585
2012-07-04T23:19:26-03:00,info,appl
listen,17,0.0.0.0,59586
2012-07-04T23:19:26-03:00,info,appl
listen,17,0.0.0.0,59587
2012-07-04T23:19:26-03:00,info,appl
listen,17,0.0.0.0,59588
2012-07-04T23:19:27-03:00,info,appl
listen,17,0.0.0.0,59589
2012-07-04T23:19:27-03:00,info,appl
listen,17,0.0.0.0,59590
2012-07-04T23:19:27-03:00,info,appl
send,17,10.101.0.11,389
2012-07-04T23:19:27-03:00,info,appl
listen,17,0.0.0.0,59591
2012-07-04T23:19:27-03:00,info,appl
listen,17,0.0.0.0,59592
2012-07-04T23:19:27-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:27-03:00,info,appl
listen,17,0.0.0.0,59593
2012-07-04T23:19:28-03:00,info,appl
listen,17,0.0.0.0,59594
2012-07-04T23:19:28-03:00,info,appl
listen,17,0.0.0.0,59595
2012-07-04T23:19:29-03:00,info,appl
listen,17,0.0.0.0,59596
2012-07-04T23:19:29-03:00,info,appl
listen,17,0.0.0.0,59597
2012-07-04T23:19:30-03:00,info,appl
listen,17,0.0.0.0,59598
2012-07-04T23:19:30-03:00,info,appl
listen,17,0.0.0.0,59599

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:30-03:00,info,appl
listen,17,0.0.0.0,59600
2012-07-04T23:19:30-03:00,info,appl
listen,17,0.0.0.0,59601
2012-07-04T23:19:30-03:00,info,appl
listen,17,0.0.0.0,59602
2012-07-04T23:19:31-03:00,info,appl
listen,17,0.0.0.0,59603
2012-07-04T23:19:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:31-03:00,info,appl
listen,17,0.0.0.0,59604
2012-07-04T23:19:31-03:00,info,appl
listen,17,0.0.0.0,59605
2012-07-04T23:19:32-03:00,info,appl
listen,17,0.0.0.0,59606
2012-07-04T23:19:32-03:00,info,appl
listen,17,0.0.0.0,59607
2012-07-04T23:19:33-03:00,info,appl
listen,17,0.0.0.0,59608
2012-07-04T23:19:33-03:00,info,appl
listen,17,0.0.0.0,59609
2012-07-04T23:19:33-03:00,info,appl
listen,17,0.0.0.0,59610
2012-07-04T23:19:33-03:00,info,appl
listen,17,0.0.0.0,59611
2012-07-04T23:19:34-03:00,info,appl
listen,17,0.0.0.0,59612
2012-07-04T23:19:34-03:00,info,appl
listen,17,0.0.0.0,59613
2012-07-04T23:19:34-03:00,info,appl
listen,17,0.0.0.0,59614
2012-07-04T23:19:35-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:35-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:35-03:00,info,appl
listen,17,0.0.0.0,59615
2012-07-04T23:19:35-03:00,info,appl
listen,17,0.0.0.0,59616
2012-07-04T23:19:36-03:00,info,appl
listen,17,0.0.0.0,59617
2012-07-04T23:19:36-03:00,info,appl
listen,17,0.0.0.0,59618
2012-07-04T23:19:36-03:00,info,appl
listen,17,0.0.0.0,59619
2012-07-04T23:19:37-03:00,info,appl
listen,17,0.0.0.0,59620
2012-07-04T23:19:37-03:00,info,appl
listen,17,0.0.0.0,59621
2012-07-04T23:19:37-03:00,info,appl
listen,17,0.0.0.0,59622
2012-07-04T23:19:37-03:00,info,appl
listen,17,0.0.0.0,59623
2012-07-04T23:19:38-03:00,info,appl
listen,17,0.0.0.0,59624
2012-07-04T23:19:38-03:00,info,appl
listen,17,0.0.0.0,59625

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:38-03:00,info,appl
listen,17,0.0.0.0,59626
2012-07-04T23:19:38-03:00,info,appl
listen,17,0.0.0.0,59627
2012-07-04T23:19:39-03:00,info,appl
listen,17,0.0.0.0,59628
2012-07-04T23:19:39-03:00,info,appl
listen,17,0.0.0.0,59629
2012-07-04T23:19:40-03:00,info,appl
listen,17,0.0.0.0,59630
2012-07-04T23:19:40-03:00,info,appl
listen,17,0.0.0.0,59631
2012-07-04T23:19:40-03:00,info,appl
listen,17,0.0.0.0,59632
2012-07-04T23:19:41-03:00,info,appl
listen,17,0.0.0.0,59633
2012-07-04T23:19:41-03:00,info,appl
listen,17,0.0.0.0,59634
2012-07-04T23:19:41-03:00,info,appl
listen,17,0.0.0.0,59635
2012-07-04T23:19:41-03:00,info,appl
listen,17,0.0.0.0,59636
2012-07-04T23:19:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:41-03:00,info,appl
listen,17,0.0.0.0,59637
2012-07-04T23:19:42-03:00,info,appl
listen,17,0.0.0.0,59638
2012-07-04T23:19:42-03:00,info,appl
listen,17,0.0.0.0,59639
2012-07-04T23:19:43-03:00,info,appl
listen,17,0.0.0.0,59640
2012-07-04T23:19:43-03:00,info,appl
listen,17,0.0.0.0,59641
2012-07-04T23:19:43-03:00,info,appl
listen,17,0.0.0.0,59642
2012-07-04T23:19:44-03:00,info,appl
listen,17,0.0.0.0,59643
2012-07-04T23:19:44-03:00,info,appl
listen,17,0.0.0.0,59644
2012-07-04T23:19:44-03:00,info,appl
listen,17,0.0.0.0,59645
2012-07-04T23:19:44-03:00,info,appl
listen,17,0.0.0.0,59646
2012-07-04T23:19:44-03:00,info,appl
listen,17,0.0.0.0,59647
2012-07-04T23:19:45-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:45-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:45-03:00,info,appl
listen,17,0.0.0.0,59648
2012-07-04T23:19:45-03:00,info,appl
listen,17,0.0.0.0,59649

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:46-03:00,info,appl
listen,17,0.0.0.0,59650
2012-07-04T23:19:46-03:00,info,appl
listen,17,0.0.0.0,59651
2012-07-04T23:19:46-03:00,info,appl
listen,17,0.0.0.0,59652
2012-07-04T23:19:47-03:00,info,appl
listen,17,0.0.0.0,59653
2012-07-04T23:19:47-03:00,info,appl
send,17,10.108.0.153,389
2012-07-04T23:19:47-03:00,info,appl
listen,17,0.0.0.0,59654
2012-07-04T23:19:47-03:00,info,appl
listen,17,0.0.0.0,59655
2012-07-04T23:19:47-03:00,info,appl
listen,17,0.0.0.0,59656
2012-07-04T23:19:48-03:00,info,appl
listen,17,0.0.0.0,59657
2012-07-04T23:19:48-03:00,info,appl
listen,17,0.0.0.0,59658
2012-07-04T23:19:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:48-03:00,info,appl
listen,17,0.0.0.0,59659
2012-07-04T23:19:49-03:00,info,appl
listen,17,0.0.0.0,59660
2012-07-04T23:19:49-03:00,info,appl
listen,17,0.0.0.0,59661
2012-07-04T23:19:50-03:00,info,appl
listen,17,0.0.0.0,59662
2012-07-04T23:19:50-03:00,info,appl
listen,17,0.0.0.0,59663
2012-07-04T23:19:51-03:00,info,appl
listen,17,0.0.0.0,59664
2012-07-04T23:19:51-03:00,info,appl
listen,17,0.0.0.0,59665
2012-07-04T23:19:51-03:00,info,appl
listen,17,0.0.0.0,59666
2012-07-04T23:19:51-03:00,info,appl
listen,17,0.0.0.0,59667
2012-07-04T23:19:52-03:00,info,appl
listen,17,0.0.0.0,59668
2012-07-04T23:19:52-03:00,info,appl
listen,17,0.0.0.0,59669
2012-07-04T23:19:52-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:52-03:00,info,appl
listen,17,0.0.0.0,59670
2012-07-04T23:19:52-03:00,info,appl
listen,17,0.0.0.0,59671
2012-07-04T23:19:53-03:00,info,appl
listen,17,0.0.0.0,59672
2012-07-04T23:19:53-03:00,info,appl
listen,17,0.0.0.0,59673
2012-07-04T23:19:54-03:00,info,appl
listen,17,0.0.0.0,59674

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:19:54-03:00,info,appl
listen,17,0.0.0.0,59675
2012-07-04T23:19:54-03:00,info,appl
listen,17,0.0.0.0,59676
2012-07-04T23:19:54-03:00,info,appl
listen,17,0.0.0.0,59677
2012-07-04T23:19:55-03:00,info,appl
listen,17,0.0.0.0,59678
2012-07-04T23:19:55-03:00,info,appl
listen,17,0.0.0.0,59679
2012-07-04T23:19:55-03:00,info,appl
listen,17,0.0.0.0,59680
2012-07-04T23:19:55-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:55-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:55-03:00,info,appl
listen,17,0.0.0.0,59681
2012-07-04T23:19:56-03:00,info,appl
listen,17,0.0.0.0,59682
2012-07-04T23:19:56-03:00,info,appl
listen,17,0.0.0.0,59683
2012-07-04T23:19:57-03:00,info,appl
listen,17,0.0.0.0,59684
2012-07-04T23:19:57-03:00,info,appl
listen,17,0.0.0.0,59685
2012-07-04T23:19:57-03:00,info,appl
listen,17,0.0.0.0,59686
2012-07-04T23:19:58-03:00,info,appl
listen,17,0.0.0.0,59687
2012-07-04T23:19:58-03:00,info,appl
listen,17,0.0.0.0,59688
2012-07-04T23:19:58-03:00,info,appl
listen,17,0.0.0.0,59689
2012-07-04T23:19:58-03:00,info,appl
listen,17,0.0.0.0,59690
2012-07-04T23:19:58-03:00,info,appl
listen,17,0.0.0.0,59691
2012-07-04T23:19:59-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-04T23:19:59-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-04T23:19:59-03:00,info,appl
listen,17,0.0.0.0,59692
2012-07-04T23:19:59-03:00,info,appl
listen,17,0.0.0.0,59693
2012-07-04T23:20:00-03:00,info,appl
listen,17,0.0.0.0,59694
2012-07-04T23:20:00-03:00,info,appl
listen,17,0.0.0.0,59695
2012-07-04T23:20:00-03:00,info,appl
listen,17,0.0.0.0,59696
2012-07-04T23:20:01-03:00,info,appl
listen,17,0.0.0.0,59697
2012-07-04T23:20:01-03:00,info,appl
listen,17,0.0.0.0,59698
2012-07-04T23:20:01-03:00,info,appl
listen,17,0.0.0.0,59699
2012-07-04T23:20:01-03:00,info,appl
listen,17,0.0.0.0,59700

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-04T23:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59701
2012-07-04T23:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59702
2012-07-04T23:21:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59703
2012-07-04T23:21:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:22:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:22:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,57279
2012-07-04T23:22:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:23:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:23:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:23:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:23:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54380
2012-07-04T23:23:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54381
2012-07-04T23:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54382
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54383
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54384
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56450
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T23:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56451
2012-07-04T23:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56452
2012-07-04T23:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56453
2012-07-04T23:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56454
2012-07-04T23:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56455
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56456
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56457

2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56458
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56459
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56460
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56461
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56462
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56463
2012-07-04T23:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56464
2012-07-04T23:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56465
2012-07-04T23:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56466
2012-07-04T23:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56467
2012-07-04T23:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56468
2012-07-04T23:25:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,1373
2012-07-04T23:26:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63930
2012-07-04T23:26:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:26:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49313
2012-07-04T23:28:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:28:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49314
2012-07-04T23:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49315
2012-07-04T23:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49316
2012-07-04T23:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49317
2012-07-04T23:28:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49318
2012-07-04T23:28:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49319
2012-07-04T23:28:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49320
2012-07-04T23:28:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49321
2012-07-04T23:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49322
2012-07-04T23:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49323
2012-07-04T23:28:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49324

2012-07-04T23:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49325
2012-07-04T23:28:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:29:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62690
2012-07-04T23:29:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:29:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62691
2012-07-04T23:29:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62692
2012-07-04T23:29:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62693
2012-07-04T23:29:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62694
2012-07-04T23:29:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62695
2012-07-04T23:29:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62696
2012-07-04T23:29:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62697
2012-07-04T23:29:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62698
2012-07-04T23:29:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62699
2012-07-04T23:29:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62700
2012-07-04T23:29:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:29:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:29:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,59016
2012-07-04T23:29:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:29:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,2364
2012-07-04T23:30:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:30:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,52251
2012-07-04T23:30:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,2844
2012-07-04T23:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:33:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:33:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49177
2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49178
2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49179
2012-07-04T23:33:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58989
2012-07-04T23:33:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T23:33:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58990
2012-07-04T23:33:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58991
2012-07-04T23:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58992
2012-07-04T23:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58993
2012-07-04T23:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58994
2012-07-04T23:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58995
2012-07-04T23:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58996
2012-07-04T23:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58997
2012-07-04T23:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58998
2012-07-04T23:34:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,3277
2012-07-04T23:36:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:36:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:36:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:37:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,2605
2012-07-04T23:37:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T23:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58999
2012-07-04T23:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59000
2012-07-04T23:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59001
2012-07-04T23:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59002
2012-07-04T23:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59003
2012-07-04T23:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59004
2012-07-04T23:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59005

2012-07-04T23:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59006
2012-07-04T23:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59007
2012-07-04T23:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59008
2012-07-04T23:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59009
2012-07-04T23:38:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:38:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59010
2012-07-04T23:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59011
2012-07-04T23:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59012
2012-07-04T23:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59013
2012-07-04T23:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59014
2012-07-04T23:38:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59015
2012-07-04T23:38:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59016
2012-07-04T23:38:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59017
2012-07-04T23:38:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59018
2012-07-04T23:38:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59019
2012-07-04T23:38:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59020
2012-07-04T23:43:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:43:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:43:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:43:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63918
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63919
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63920
2012-07-04T23:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61249
2012-07-04T23:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-04T23:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61250
2012-07-04T23:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61251
2012-07-04T23:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61252
2012-07-04T23:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61253
2012-07-04T23:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61254
2012-07-04T23:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61255
2012-07-04T23:43:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61256
2012-07-04T23:43:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61257
2012-07-04T23:43:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61258
2012-07-04T23:44:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:44:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:44:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61259
2012-07-04T23:44:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61260
2012-07-04T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61261
2012-07-04T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61262
2012-07-04T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61263
2012-07-04T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61264
2012-07-04T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61265
2012-07-04T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61266
2012-07-04T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61267
2012-07-04T23:44:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61268
2012-07-04T23:44:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61269
2012-07-04T23:44:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-04T23:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61270
2012-07-04T23:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:48:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:48:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-04T23:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61271
2012-07-04T23:48:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61272
2012-07-04T23:48:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61273
2012-07-04T23:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61274
2012-07-04T23:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61275
2012-07-04T23:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61276
2012-07-04T23:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61277
2012-07-04T23:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61278
2012-07-04T23:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61279
2012-07-04T23:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61280
2012-07-04T23:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61281
2012-07-04T23:50:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:50:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:51:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:51:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-04T23:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61282
2012-07-04T23:53:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-04T23:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61283
2012-07-04T23:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61284
2012-07-04T23:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61285
2012-07-04T23:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61286
2012-07-04T23:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61287
2012-07-04T23:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61288
2012-07-04T23:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61289
2012-07-04T23:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61290
2012-07-04T23:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61291
2012-07-04T23:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61292
2012-07-04T23:53:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135

2012-07-04T23:53:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:53:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64719
2012-07-04T23:53:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-04T23:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64720
2012-07-04T23:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64721
2012-07-04T23:53:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59074
2012-07-04T23:53:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-04T23:53:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59075
2012-07-04T23:53:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59076
2012-07-04T23:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59077
2012-07-04T23:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59078
2012-07-04T23:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59079
2012-07-04T23:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59080
2012-07-04T23:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59081
2012-07-04T23:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59082
2012-07-04T23:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59083
2012-07-04T23:57:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-04T23:57:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:58:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:58:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-04T23:58:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-04T23:58:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-04T23:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59084
2012-07-04T23:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-04T23:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59085
2012-07-04T23:59:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59086
2012-07-04T23:59:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59087
2012-07-04T23:59:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59088

2012-07-04T23:59:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59089
2012-07-04T23:59:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59090
2012-07-04T23:59:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59091
2012-07-04T23:59:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59092
2012-07-04T23:59:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59093
2012-07-04T23:59:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59094
2012-07-04T23:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-04T23:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59095
2012-07-04T23:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59096
2012-07-04T23:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59097
2012-07-04T23:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59098
2012-07-04T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59099
2012-07-04T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59100
2012-07-04T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59101
2012-07-04T23:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59102
2012-07-04T23:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59103
2012-07-04T23:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59104
2012-07-04T23:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59105
2012-07-05T00:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:04:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:04:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:04:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56500
2012-07-05T00:04:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56501
2012-07-05T00:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56502

2012-07-05T00:04:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62645
2012-07-05T00:04:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T00:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62646
2012-07-05T00:04:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62647
2012-07-05T00:04:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62648
2012-07-05T00:04:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62649
2012-07-05T00:04:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62650
2012-07-05T00:04:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62651
2012-07-05T00:04:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62652
2012-07-05T00:04:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62653
2012-07-05T00:04:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62654
2012-07-05T00:04:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:04:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:05:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:05:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56585
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56586
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56587
2012-07-05T00:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65009
2012-07-05T00:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65010
2012-07-05T00:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56781
2012-07-05T00:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56782
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63386
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63387
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52726
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52727

2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64841
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64842
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49537
2012-07-05T00:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49538
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59091
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59092
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54239
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54240
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57260
2012-07-05T00:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57261
2012-07-05T00:09:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:09:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57262
2012-07-05T00:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57263
2012-07-05T00:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57264
2012-07-05T00:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57265
2012-07-05T00:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57266
2012-07-05T00:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57267
2012-07-05T00:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57268
2012-07-05T00:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57269
2012-07-05T00:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57270
2012-07-05T00:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57271
2012-07-05T00:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57272
2012-07-05T00:11:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:11:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:12:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:13:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:14:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135

2012-07-05T00:14:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54284
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54285
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54286
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54287
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54288
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54058
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54059
2012-07-05T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54060
2012-07-05T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54061
2012-07-05T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54062
2012-07-05T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54063
2012-07-05T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54064
2012-07-05T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54065
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54066
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54067
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54068
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54069
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54070
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54071
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54072
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54073
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54074
2012-07-05T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54075
2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54076

2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50981
2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50982
2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50983
2012-07-05T00:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50984
2012-07-05T00:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50985
2012-07-05T00:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50986
2012-07-05T00:14:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50987
2012-07-05T00:14:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50988
2012-07-05T00:14:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50989
2012-07-05T00:14:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50990
2012-07-05T00:14:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50991
2012-07-05T00:14:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50992
2012-07-05T00:14:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50993
2012-07-05T00:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:19:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:19:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:19:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:19:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50994
2012-07-05T00:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50995
2012-07-05T00:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50996
2012-07-05T00:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50997
2012-07-05T00:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50998
2012-07-05T00:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50999
2012-07-05T00:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51000
2012-07-05T00:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51001

2012-07-05T00:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51002
2012-07-05T00:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51003
2012-07-05T00:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51004
2012-07-05T00:19:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:20:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T00:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51005
2012-07-05T00:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51006
2012-07-05T00:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51007
2012-07-05T00:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51008
2012-07-05T00:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51009
2012-07-05T00:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51010
2012-07-05T00:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51011
2012-07-05T00:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51012
2012-07-05T00:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51013
2012-07-05T00:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51014
2012-07-05T00:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51015
2012-07-05T00:24:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:24:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63231
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63232
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63233
2012-07-05T00:24:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56131
2012-07-05T00:24:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T00:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56132

2012-07-05T00:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56133
2012-07-05T00:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56134
2012-07-05T00:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56135
2012-07-05T00:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56136
2012-07-05T00:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56137
2012-07-05T00:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56138
2012-07-05T00:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56139
2012-07-05T00:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56140
2012-07-05T00:26:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:26:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:26:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:27:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:28:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60049
2012-07-05T00:28:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:28:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50693
2012-07-05T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50694
2012-07-05T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62046
2012-07-05T00:29:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:29:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62047
2012-07-05T00:29:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62048
2012-07-05T00:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62049
2012-07-05T00:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62050
2012-07-05T00:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62051
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62052
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62053
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62054
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62055
2012-07-05T00:29:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135

2012-07-05T00:29:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62056
2012-07-05T00:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62057
2012-07-05T00:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62058
2012-07-05T00:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62059
2012-07-05T00:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62060
2012-07-05T00:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62061
2012-07-05T00:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62062
2012-07-05T00:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62063
2012-07-05T00:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62064
2012-07-05T00:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62065
2012-07-05T00:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62066
2012-07-05T00:29:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62067
2012-07-05T00:33:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:33:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:33:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:34:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:34:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61465
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61466
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61467
2012-07-05T00:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64104
2012-07-05T00:34:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T00:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64105
2012-07-05T00:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64106
2012-07-05T00:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64107
2012-07-05T00:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64108
2012-07-05T00:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64109
2012-07-05T00:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64110
2012-07-05T00:34:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64111
2012-07-05T00:34:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64112
2012-07-05T00:34:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64113
2012-07-05T00:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T00:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64114
2012-07-05T00:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64115
2012-07-05T00:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64116
2012-07-05T00:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64117
2012-07-05T00:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64118
2012-07-05T00:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64119
2012-07-05T00:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64120
2012-07-05T00:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64121
2012-07-05T00:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64122
2012-07-05T00:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64123
2012-07-05T00:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64124
2012-07-05T00:39:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:39:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64125
2012-07-05T00:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64126
2012-07-05T00:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64127

2012-07-05T00:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64128
2012-07-05T00:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64129
2012-07-05T00:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64130
2012-07-05T00:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64131
2012-07-05T00:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64132
2012-07-05T00:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64133
2012-07-05T00:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64134
2012-07-05T00:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64135
2012-07-05T00:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:40:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:41:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64136
2012-07-05T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64137
2012-07-05T00:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64138
2012-07-05T00:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64139
2012-07-05T00:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64140
2012-07-05T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64141
2012-07-05T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64142
2012-07-05T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64143
2012-07-05T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64144
2012-07-05T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64145
2012-07-05T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64146
2012-07-05T00:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64147
2012-07-05T00:44:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:44:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:44:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64778

2012-07-05T00:44:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64779
2012-07-05T00:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64780
2012-07-05T00:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61710
2012-07-05T00:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T00:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61711
2012-07-05T00:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61712
2012-07-05T00:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61713
2012-07-05T00:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61714
2012-07-05T00:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61715
2012-07-05T00:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61716
2012-07-05T00:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61717
2012-07-05T00:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61718
2012-07-05T00:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61719
2012-07-05T00:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:47:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:48:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:48:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T00:49:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:49:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61720
2012-07-05T00:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61721
2012-07-05T00:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61722
2012-07-05T00:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61723
2012-07-05T00:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61724
2012-07-05T00:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61725

2012-07-05T00:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61726
2012-07-05T00:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61727
2012-07-05T00:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61728
2012-07-05T00:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61729
2012-07-05T00:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61730
2012-07-05T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61731
2012-07-05T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61732
2012-07-05T00:53:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61733
2012-07-05T00:53:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61734
2012-07-05T00:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61735
2012-07-05T00:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61736
2012-07-05T00:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61737
2012-07-05T00:53:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61738
2012-07-05T00:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61739
2012-07-05T00:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61740
2012-07-05T00:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61741
2012-07-05T00:54:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:54:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:54:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57462
2012-07-05T00:54:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T00:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57463
2012-07-05T00:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T00:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57464
2012-07-05T00:54:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55885
2012-07-05T00:54:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T00:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55886

2012-07-05T00:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55887
2012-07-05T00:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55888
2012-07-05T00:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55889
2012-07-05T00:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55890
2012-07-05T00:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55891
2012-07-05T00:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55892
2012-07-05T00:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55893
2012-07-05T00:54:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T00:54:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:54:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55894
2012-07-05T00:55:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:55:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T00:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55895
2012-07-05T00:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T00:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55896
2012-07-05T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55897
2012-07-05T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55898
2012-07-05T00:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55899
2012-07-05T00:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55900
2012-07-05T00:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55901
2012-07-05T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55902
2012-07-05T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55903
2012-07-05T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55904
2012-07-05T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55905
2012-07-05T00:59:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T00:59:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T00:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T00:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55906
2012-07-05T00:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55907

2012-07-05T00:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55908
2012-07-05T00:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55909
2012-07-05T00:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55910
2012-07-05T00:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55911
2012-07-05T00:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55912
2012-07-05T00:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55913
2012-07-05T00:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55914
2012-07-05T00:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55915
2012-07-05T00:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.203.0.11,389
2012-07-05T00:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55916
2012-07-05T01:01:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:01:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:02:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:02:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:04:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:04:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54828
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54829
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54830
2012-07-05T01:04:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61657
2012-07-05T01:04:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T01:04:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61658
2012-07-05T01:04:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61659

2012-07-05T01:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61660
2012-07-05T01:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61661
2012-07-05T01:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61662
2012-07-05T01:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61663
2012-07-05T01:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61664
2012-07-05T01:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61665
2012-07-05T01:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61666
2012-07-05T01:08:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:08:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59992
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59993
2012-07-05T01:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:09:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59994
2012-07-05T01:09:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58107
2012-07-05T01:09:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58108
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56401
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56402
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51860
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51861
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56353
2012-07-05T01:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56354
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60751
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60752
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56003
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56004
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57070
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57071

2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55804
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55805
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61913
2012-07-05T01:09:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61914
2012-07-05T01:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61915
2012-07-05T01:09:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:09:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:09:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61916
2012-07-05T01:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61917
2012-07-05T01:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61918
2012-07-05T01:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61919
2012-07-05T01:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61920
2012-07-05T01:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61921
2012-07-05T01:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61922
2012-07-05T01:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61923
2012-07-05T01:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61924
2012-07-05T01:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61925
2012-07-05T01:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61926
2012-07-05T01:09:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:14:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:14:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61927
2012-07-05T01:14:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:14:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61928
2012-07-05T01:14:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61929
2012-07-05T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61930
2012-07-05T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61931
2012-07-05T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61932

2012-07-05T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61933
2012-07-05T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61934
2012-07-05T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61935
2012-07-05T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61936
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61937
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54696
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54697
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54698
2012-07-05T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54699
2012-07-05T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54700
2012-07-05T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54701
2012-07-05T01:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54702
2012-07-05T01:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54703
2012-07-05T01:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54704
2012-07-05T01:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54705
2012-07-05T01:14:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54706
2012-07-05T01:14:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54707
2012-07-05T01:14:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54708
2012-07-05T01:14:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:14:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63641
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63642
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63643
2012-07-05T01:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55226
2012-07-05T01:14:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T01:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55227
2012-07-05T01:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55228
2012-07-05T01:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55229
2012-07-05T01:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55230
2012-07-05T01:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55231
2012-07-05T01:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55232
2012-07-05T01:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55233
2012-07-05T01:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55234
2012-07-05T01:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55235
2012-07-05T01:16:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:16:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55236
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:16:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55237
2012-07-05T01:16:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55238
2012-07-05T01:16:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55239
2012-07-05T01:16:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55240
2012-07-05T01:16:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55241
2012-07-05T01:16:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55242
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55243
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55244
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55245
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55246
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:16:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55247
2012-07-05T01:16:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55248

2012-07-05T01:16:06-03:00,info,appl
listen,17,0.0.0.0,55249
2012-07-05T01:16:07-03:00,info,appl
listen,17,0.0.0.0,55250
2012-07-05T01:16:07-03:00,info,appl
listen,17,0.0.0.0,55251
2012-07-05T01:16:07-03:00,info,appl
listen,17,0.0.0.0,55252
2012-07-05T01:16:08-03:00,info,appl
listen,17,0.0.0.0,55253
2012-07-05T01:16:08-03:00,info,appl
listen,17,0.0.0.0,55254
2012-07-05T01:16:08-03:00,info,appl
listen,17,0.0.0.0,55255
2012-07-05T01:16:08-03:00,info,appl
listen,17,0.0.0.0,55256
2012-07-05T01:16:08-03:00,info,appl
listen,17,0.0.0.0,55257
2012-07-05T01:16:09-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:09-03:00,info,appl
listen,17,0.0.0.0,55258
2012-07-05T01:16:09-03:00,info,appl
listen,17,0.0.0.0,55259
2012-07-05T01:16:10-03:00,info,appl
listen,17,0.0.0.0,55260
2012-07-05T01:16:10-03:00,info,appl
listen,17,0.0.0.0,55261
2012-07-05T01:16:10-03:00,info,appl
listen,17,0.0.0.0,55262
2012-07-05T01:16:11-03:00,info,appl
listen,17,0.0.0.0,55263
2012-07-05T01:16:11-03:00,info,appl
listen,17,0.0.0.0,55264
2012-07-05T01:16:11-03:00,info,appl
listen,17,0.0.0.0,55265
2012-07-05T01:16:11-03:00,info,appl
listen,17,0.0.0.0,55266
2012-07-05T01:16:12-03:00,info,appl
listen,17,0.0.0.0,55267
2012-07-05T01:16:12-03:00,info,appl
listen,17,0.0.0.0,55268
2012-07-05T01:16:12-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:12-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:12-03:00,info,appl
listen,17,0.0.0.0,55269
2012-07-05T01:16:12-03:00,info,appl
listen,17,0.0.0.0,55270
2012-07-05T01:16:13-03:00,info,appl
listen,17,0.0.0.0,55271
2012-07-05T01:16:13-03:00,info,appl
listen,17,0.0.0.0,55272
2012-07-05T01:16:14-03:00,info,appl
listen,17,0.0.0.0,55273
2012-07-05T01:16:14-03:00,info,appl
listen,17,0.0.0.0,55274

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:14-03:00,info,appl
listen,17,0.0.0.0,55275
2012-07-05T01:16:15-03:00,info,appl
listen,17,0.0.0.0,55276
2012-07-05T01:16:15-03:00,info,appl
listen,17,0.0.0.0,55277
2012-07-05T01:16:15-03:00,info,appl
listen,17,0.0.0.0,55278
2012-07-05T01:16:15-03:00,info,appl
listen,17,0.0.0.0,55279
2012-07-05T01:16:16-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:16-03:00,info,appl
listen,17,0.0.0.0,55280
2012-07-05T01:16:16-03:00,info,appl
listen,17,0.0.0.0,55281
2012-07-05T01:16:17-03:00,info,appl
listen,17,0.0.0.0,55282
2012-07-05T01:16:17-03:00,info,appl
listen,17,0.0.0.0,55283
2012-07-05T01:16:18-03:00,info,appl
listen,17,0.0.0.0,55284
2012-07-05T01:16:18-03:00,info,appl
listen,17,0.0.0.0,55285
2012-07-05T01:16:18-03:00,info,appl
listen,17,0.0.0.0,55286
2012-07-05T01:16:18-03:00,info,appl
listen,17,0.0.0.0,55287
2012-07-05T01:16:19-03:00,info,appl
listen,17,0.0.0.0,55288
2012-07-05T01:16:19-03:00,info,appl
listen,17,0.0.0.0,55289
2012-07-05T01:16:19-03:00,info,appl
listen,17,0.0.0.0,55290
2012-07-05T01:16:19-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:19-03:00,info,appl
listen,17,0.0.0.0,55291
2012-07-05T01:16:20-03:00,info,appl
listen,17,0.0.0.0,55292
2012-07-05T01:16:20-03:00,info,appl
listen,17,0.0.0.0,55293
2012-07-05T01:16:21-03:00,info,appl
listen,17,0.0.0.0,55294
2012-07-05T01:16:21-03:00,info,appl
listen,17,0.0.0.0,55295
2012-07-05T01:16:21-03:00,info,appl
listen,17,0.0.0.0,55296
2012-07-05T01:16:22-03:00,info,appl
listen,17,0.0.0.0,55297
2012-07-05T01:16:22-03:00,info,appl
listen,17,0.0.0.0,55298
2012-07-05T01:16:22-03:00,info,appl
send,17,10.200.0.5,389
2012-07-05T01:16:22-03:00,info,appl
listen,17,0.0.0.0,55299

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:22-03:00,info,appl
listen,17,0.0.0.0,55300
2012-07-05T01:16:22-03:00,info,appl
listen,17,0.0.0.0,55301
2012-07-05T01:16:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:23-03:00,info,appl
listen,17,0.0.0.0,55302
2012-07-05T01:16:23-03:00,info,appl
listen,17,0.0.0.0,55303
2012-07-05T01:16:24-03:00,info,appl
listen,17,0.0.0.0,55304
2012-07-05T01:16:24-03:00,info,appl
listen,17,0.0.0.0,55305
2012-07-05T01:16:24-03:00,info,appl
listen,17,0.0.0.0,55306
2012-07-05T01:16:25-03:00,info,appl
listen,17,0.0.0.0,55307
2012-07-05T01:16:25-03:00,info,appl
listen,17,0.0.0.0,55308
2012-07-05T01:16:25-03:00,info,appl
listen,17,0.0.0.0,55309
2012-07-05T01:16:25-03:00,info,appl
listen,17,0.0.0.0,55310
2012-07-05T01:16:26-03:00,info,appl
listen,17,0.0.0.0,55311
2012-07-05T01:16:26-03:00,info,appl
listen,17,0.0.0.0,55312
2012-07-05T01:16:26-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:26-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:26-03:00,info,appl
listen,17,0.0.0.0,55313
2012-07-05T01:16:26-03:00,info,appl
listen,17,0.0.0.0,55314
2012-07-05T01:16:27-03:00,info,appl
listen,17,0.0.0.0,55315
2012-07-05T01:16:27-03:00,info,appl
listen,17,0.0.0.0,55316
2012-07-05T01:16:28-03:00,info,appl
listen,17,0.0.0.0,55317
2012-07-05T01:16:28-03:00,info,appl
listen,17,0.0.0.0,55318
2012-07-05T01:16:28-03:00,info,appl
listen,17,0.0.0.0,55319
2012-07-05T01:16:29-03:00,info,appl
listen,17,0.0.0.0,55320
2012-07-05T01:16:29-03:00,info,appl
listen,17,0.0.0.0,55321
2012-07-05T01:16:29-03:00,info,appl
listen,17,0.0.0.0,55322
2012-07-05T01:16:29-03:00,info,appl
listen,17,0.0.0.0,55323
2012-07-05T01:16:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:30-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:30-03:00,info,appl
listen,17,0.0.0.0,55324
2012-07-05T01:16:30-03:00,info,appl
listen,17,0.0.0.0,55325
2012-07-05T01:16:31-03:00,info,appl
listen,17,0.0.0.0,55326
2012-07-05T01:16:31-03:00,info,appl
listen,17,0.0.0.0,55327
2012-07-05T01:16:32-03:00,info,appl
listen,17,0.0.0.0,55328
2012-07-05T01:16:32-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T01:16:32-03:00,info,appl
listen,17,0.0.0.0,55329
2012-07-05T01:16:32-03:00,info,appl
listen,17,0.0.0.0,55330
2012-07-05T01:16:32-03:00,info,appl
listen,17,0.0.0.0,55331
2012-07-05T01:16:33-03:00,info,appl
listen,17,0.0.0.0,55332
2012-07-05T01:16:33-03:00,info,appl
listen,17,0.0.0.0,55333
2012-07-05T01:16:33-03:00,info,appl
listen,17,0.0.0.0,55334
2012-07-05T01:16:33-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:33-03:00,info,appl
listen,17,0.0.0.0,55335
2012-07-05T01:16:33-03:00,info,appl
listen,17,0.0.0.0,55336
2012-07-05T01:16:34-03:00,info,appl
listen,17,0.0.0.0,55337
2012-07-05T01:16:34-03:00,info,appl
listen,17,0.0.0.0,55338
2012-07-05T01:16:35-03:00,info,appl
listen,17,0.0.0.0,55339
2012-07-05T01:16:35-03:00,info,appl
listen,17,0.0.0.0,55340
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55341
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55342
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55343
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55344
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55345
2012-07-05T01:16:36-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:36-03:00,info,appl
listen,17,0.0.0.0,55346
2012-07-05T01:16:37-03:00,info,appl
listen,17,0.0.0.0,55347
2012-07-05T01:16:37-03:00,info,appl
listen,17,0.0.0.0,55348

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:38-03:00,info,appl
listen,17,0.0.0.0,55349
2012-07-05T01:16:38-03:00,info,appl
listen,17,0.0.0.0,55350
2012-07-05T01:16:39-03:00,info,appl
listen,17,0.0.0.0,55351
2012-07-05T01:16:39-03:00,info,appl
listen,17,0.0.0.0,55352
2012-07-05T01:16:39-03:00,info,appl
listen,17,0.0.0.0,55353
2012-07-05T01:16:39-03:00,info,appl
listen,17,0.0.0.0,55354
2012-07-05T01:16:39-03:00,info,appl
listen,17,0.0.0.0,55355
2012-07-05T01:16:40-03:00,info,appl
listen,17,0.0.0.0,55356
2012-07-05T01:16:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:40-03:00,info,appl
listen,17,0.0.0.0,55357
2012-07-05T01:16:40-03:00,info,appl
listen,17,0.0.0.0,55358
2012-07-05T01:16:41-03:00,info,appl
listen,17,0.0.0.0,55359
2012-07-05T01:16:41-03:00,info,appl
listen,17,0.0.0.0,55360
2012-07-05T01:16:42-03:00,info,appl
listen,17,0.0.0.0,55361
2012-07-05T01:16:42-03:00,info,appl
listen,17,0.0.0.0,55362
2012-07-05T01:16:42-03:00,info,appl
send,17,10.1.0.197,389
2012-07-05T01:16:42-03:00,info,appl
listen,17,0.0.0.0,55363
2012-07-05T01:16:42-03:00,info,appl
listen,17,0.0.0.0,55364
2012-07-05T01:16:43-03:00,info,appl
listen,17,0.0.0.0,55365
2012-07-05T01:16:43-03:00,info,appl
listen,17,0.0.0.0,55366
2012-07-05T01:16:43-03:00,info,appl
listen,17,0.0.0.0,55367
2012-07-05T01:16:44-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:44-03:00,info,appl
listen,17,0.0.0.0,55368
2012-07-05T01:16:44-03:00,info,appl
listen,17,0.0.0.0,55369
2012-07-05T01:16:45-03:00,info,appl
listen,17,0.0.0.0,55370
2012-07-05T01:16:45-03:00,info,appl
listen,17,0.0.0.0,55371
2012-07-05T01:16:45-03:00,info,appl
listen,17,0.0.0.0,55372
2012-07-05T01:16:46-03:00,info,appl
listen,17,0.0.0.0,55373

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:46-03:00,info,appl
listen,17,0.0.0.0,55374
2012-07-05T01:16:46-03:00,info,appl
listen,17,0.0.0.0,55375
2012-07-05T01:16:46-03:00,info,appl
listen,17,0.0.0.0,55376
2012-07-05T01:16:47-03:00,info,appl
listen,17,0.0.0.0,55377
2012-07-05T01:16:47-03:00,info,appl
listen,17,0.0.0.0,55378
2012-07-05T01:16:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:47-03:00,info,appl
listen,17,0.0.0.0,55379
2012-07-05T01:16:47-03:00,info,appl
listen,17,0.0.0.0,55380
2012-07-05T01:16:48-03:00,info,appl
listen,17,0.0.0.0,55381
2012-07-05T01:16:48-03:00,info,appl
listen,17,0.0.0.0,55382
2012-07-05T01:16:49-03:00,info,appl
listen,17,0.0.0.0,55383
2012-07-05T01:16:49-03:00,info,appl
listen,17,0.0.0.0,55384
2012-07-05T01:16:49-03:00,info,appl
listen,17,0.0.0.0,55385
2012-07-05T01:16:50-03:00,info,appl
listen,17,0.0.0.0,55386
2012-07-05T01:16:50-03:00,info,appl
listen,17,0.0.0.0,55387
2012-07-05T01:16:50-03:00,info,appl
listen,17,0.0.0.0,55388
2012-07-05T01:16:50-03:00,info,appl
listen,17,0.0.0.0,55389
2012-07-05T01:16:50-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T01:16:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T01:16:50-03:00,info,appl
listen,17,0.0.0.0,55390
2012-07-05T01:16:51-03:00,info,appl
listen,17,0.0.0.0,55391
2012-07-05T01:16:51-03:00,info,appl
listen,17,0.0.0.0,55392
2012-07-05T01:16:52-03:00,info,appl
listen,17,0.0.0.0,55393
2012-07-05T01:16:52-03:00,info,appl
listen,17,0.0.0.0,55394
2012-07-05T01:16:53-03:00,info,appl
listen,17,0.0.0.0,55395
2012-07-05T01:16:53-03:00,info,appl
listen,17,0.0.0.0,55396
2012-07-05T01:16:53-03:00,info,appl
listen,17,0.0.0.0,55397
2012-07-05T01:16:53-03:00,info,appl
listen,17,0.0.0.0,55398
2012-07-05T01:16:53-03:00,info,appl
listen,17,0.0.0.0,55399

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T01:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55400
2012-07-05T01:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T01:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55401
2012-07-05T01:16:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55402
2012-07-05T01:16:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55403
2012-07-05T01:16:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55404
2012-07-05T01:16:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55405
2012-07-05T01:16:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55406
2012-07-05T01:16:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55407
2012-07-05T01:16:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55408
2012-07-05T01:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55409
2012-07-05T01:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55410
2012-07-05T01:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55411
2012-07-05T01:17:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:19:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:19:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:19:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:19:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55412
2012-07-05T01:19:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:19:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55413
2012-07-05T01:19:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55414
2012-07-05T01:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55415
2012-07-05T01:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55416
2012-07-05T01:19:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55417
2012-07-05T01:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55418
2012-07-05T01:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55419
2012-07-05T01:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55420

2012-07-05T01:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55421
2012-07-05T01:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55422
2012-07-05T01:23:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:23:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:23:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T01:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55423
2012-07-05T01:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55424
2012-07-05T01:24:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55425
2012-07-05T01:24:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55426
2012-07-05T01:24:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55427
2012-07-05T01:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55428
2012-07-05T01:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55429
2012-07-05T01:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55430
2012-07-05T01:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55431
2012-07-05T01:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55432
2012-07-05T01:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55433
2012-07-05T01:24:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:24:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:24:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63228
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63229
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:24:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63230
2012-07-05T01:24:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62576
2012-07-05T01:24:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T01:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62577
2012-07-05T01:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62578
2012-07-05T01:24:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62579
2012-07-05T01:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62580
2012-07-05T01:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62581
2012-07-05T01:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62582
2012-07-05T01:24:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62583
2012-07-05T01:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62584
2012-07-05T01:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62585
2012-07-05T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62586
2012-07-05T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:29:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52018
2012-07-05T01:29:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52019
2012-07-05T01:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52020
2012-07-05T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52021
2012-07-05T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52022
2012-07-05T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52023
2012-07-05T01:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52024
2012-07-05T01:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52025
2012-07-05T01:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52026
2012-07-05T01:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52027
2012-07-05T01:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52028
2012-07-05T01:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52029
2012-07-05T01:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:30:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52030

2012-07-05T01:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52031
2012-07-05T01:30:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52032
2012-07-05T01:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52033
2012-07-05T01:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52034
2012-07-05T01:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52035
2012-07-05T01:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52036
2012-07-05T01:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52037
2012-07-05T01:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52038
2012-07-05T01:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52039
2012-07-05T01:30:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:30:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:30:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62129
2012-07-05T01:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62686
2012-07-05T01:31:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:35:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:35:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:35:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50442
2012-07-05T01:35:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50443
2012-07-05T01:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50444
2012-07-05T01:35:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56270
2012-07-05T01:35:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T01:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56271
2012-07-05T01:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56272

2012-07-05T01:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56273
2012-07-05T01:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56274
2012-07-05T01:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56275
2012-07-05T01:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56276
2012-07-05T01:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56277
2012-07-05T01:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56278
2012-07-05T01:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56279
2012-07-05T01:37:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:37:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:38:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T01:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56280
2012-07-05T01:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:39:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56281
2012-07-05T01:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56282
2012-07-05T01:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56283
2012-07-05T01:39:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56284
2012-07-05T01:39:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56285
2012-07-05T01:39:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56286
2012-07-05T01:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56287
2012-07-05T01:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56288
2012-07-05T01:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56289
2012-07-05T01:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56290
2012-07-05T01:40:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:40:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56291
2012-07-05T01:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389

2012-07-05T01:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56292
2012-07-05T01:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56293
2012-07-05T01:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56294
2012-07-05T01:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56295
2012-07-05T01:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56296
2012-07-05T01:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56297
2012-07-05T01:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56298
2012-07-05T01:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56299
2012-07-05T01:40:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56300
2012-07-05T01:40:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56301
2012-07-05T01:44:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:44:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56302
2012-07-05T01:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56303
2012-07-05T01:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56304
2012-07-05T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56305
2012-07-05T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56306
2012-07-05T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56307
2012-07-05T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56308
2012-07-05T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56309
2012-07-05T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56310
2012-07-05T01:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56311
2012-07-05T01:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56312
2012-07-05T01:45:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56313
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:45:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:45:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025

2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49445
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49446
2012-07-05T01:45:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49447
2012-07-05T01:45:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52023
2012-07-05T01:45:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T01:45:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52024
2012-07-05T01:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52025
2012-07-05T01:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52026
2012-07-05T01:45:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52027
2012-07-05T01:45:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52028
2012-07-05T01:45:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52029
2012-07-05T01:45:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52030
2012-07-05T01:45:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52031
2012-07-05T01:45:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52032
2012-07-05T01:45:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T01:50:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:50:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52033
2012-07-05T01:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:50:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52034
2012-07-05T01:50:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52035
2012-07-05T01:50:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52036
2012-07-05T01:50:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52037
2012-07-05T01:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52038
2012-07-05T01:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52039

2012-07-05T01:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52040
2012-07-05T01:50:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52041
2012-07-05T01:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52042
2012-07-05T01:50:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52043
2012-07-05T01:51:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:51:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:52:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:52:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T01:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52044
2012-07-05T01:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52045
2012-07-05T01:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52046
2012-07-05T01:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52047
2012-07-05T01:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52048
2012-07-05T01:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52049
2012-07-05T01:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52050
2012-07-05T01:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52051
2012-07-05T01:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52052
2012-07-05T01:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52053
2012-07-05T01:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52054
2012-07-05T01:55:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T01:55:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57606
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57607
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T01:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57608

2012-07-05T01:55:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64600
2012-07-05T01:55:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T01:55:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64601
2012-07-05T01:55:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64602
2012-07-05T01:55:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64603
2012-07-05T01:55:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64604
2012-07-05T01:55:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64605
2012-07-05T01:55:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64606
2012-07-05T01:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64607
2012-07-05T01:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64608
2012-07-05T01:55:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64609
2012-07-05T01:58:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T01:58:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:59:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T01:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T01:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64610
2012-07-05T01:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T01:59:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64611
2012-07-05T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64612
2012-07-05T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64613
2012-07-05T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64614
2012-07-05T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64615
2012-07-05T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64616
2012-07-05T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64617
2012-07-05T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64618
2012-07-05T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64619
2012-07-05T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64620
2012-07-05T01:59:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025

2012-07-05T02:00:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:00:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64621
2012-07-05T02:00:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64622
2012-07-05T02:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64623
2012-07-05T02:00:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64624
2012-07-05T02:00:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64625
2012-07-05T02:00:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64626
2012-07-05T02:00:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64627
2012-07-05T02:00:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64628
2012-07-05T02:00:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64629
2012-07-05T02:00:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64630
2012-07-05T02:00:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64631
2012-07-05T02:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:05:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:05:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62836
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62837
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:05:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62838
2012-07-05T02:05:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60086
2012-07-05T02:05:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T02:05:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60087
2012-07-05T02:05:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60088
2012-07-05T02:05:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60089

2012-07-05T02:05:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60090
2012-07-05T02:05:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60091
2012-07-05T02:05:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60092
2012-07-05T02:05:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60093
2012-07-05T02:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60094
2012-07-05T02:05:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60095
2012-07-05T02:05:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:05:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:06:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:06:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62217
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62218
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62219
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50230
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50231
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59179
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59180
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62089
2012-07-05T02:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62090
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52570
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52571
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58050
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58051
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58738
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58739
2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58927

2012-07-05T02:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58928
2012-07-05T02:09:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60353
2012-07-05T02:09:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60354
2012-07-05T02:09:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51878
2012-07-05T02:09:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51879
2012-07-05T02:10:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:10:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51880
2012-07-05T02:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:10:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51881
2012-07-05T02:10:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51882
2012-07-05T02:10:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51883
2012-07-05T02:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51884
2012-07-05T02:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51885
2012-07-05T02:10:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51886
2012-07-05T02:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51887
2012-07-05T02:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51888
2012-07-05T02:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51889
2012-07-05T02:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51890
2012-07-05T02:12:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:12:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:13:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:14:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51891
2012-07-05T02:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:14:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51892
2012-07-05T02:14:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51893
2012-07-05T02:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51894

2012-07-05T02:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51895
2012-07-05T02:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51896
2012-07-05T02:14:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51897
2012-07-05T02:14:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51898
2012-07-05T02:14:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51899
2012-07-05T02:14:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51900
2012-07-05T02:14:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51901
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54744
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54745
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54746
2012-07-05T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54747
2012-07-05T02:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54748
2012-07-05T02:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54749
2012-07-05T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54750
2012-07-05T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54751
2012-07-05T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54752
2012-07-05T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54753
2012-07-05T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54754
2012-07-05T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54755
2012-07-05T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54756
2012-07-05T02:15:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:15:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:15:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:15:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53656
2012-07-05T02:15:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:15:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53657
2012-07-05T02:15:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:15:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53658

2012-07-05T02:15:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55304
2012-07-05T02:15:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T02:15:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55305
2012-07-05T02:15:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55306
2012-07-05T02:15:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55307
2012-07-05T02:15:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55308
2012-07-05T02:15:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55309
2012-07-05T02:15:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55310
2012-07-05T02:15:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55311
2012-07-05T02:15:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55312
2012-07-05T02:15:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55313
2012-07-05T02:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:18:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:20:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:20:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:20:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:20:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55314
2012-07-05T02:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55315
2012-07-05T02:20:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:20:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55316
2012-07-05T02:20:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55317
2012-07-05T02:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55318
2012-07-05T02:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55319
2012-07-05T02:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55320
2012-07-05T02:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55321
2012-07-05T02:20:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55322
2012-07-05T02:20:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55323

2012-07-05T02:20:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55324
2012-07-05T02:21:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T02:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55325
2012-07-05T02:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55326
2012-07-05T02:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55327
2012-07-05T02:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55328
2012-07-05T02:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55329
2012-07-05T02:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55330
2012-07-05T02:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55331
2012-07-05T02:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55332
2012-07-05T02:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55333
2012-07-05T02:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55334
2012-07-05T02:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55335
2012-07-05T02:25:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:25:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57354
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57355
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:25:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57356
2012-07-05T02:25:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61214
2012-07-05T02:25:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T02:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61215
2012-07-05T02:25:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61216
2012-07-05T02:25:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61217
2012-07-05T02:25:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61218

2012-07-05T02:25:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61219
2012-07-05T02:25:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61220
2012-07-05T02:25:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61221
2012-07-05T02:25:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61222
2012-07-05T02:25:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61223
2012-07-05T02:27:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,62232
2012-07-05T02:27:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:27:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:27:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:28:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56071
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56072
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56073
2012-07-05T02:29:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56074
2012-07-05T02:29:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56075
2012-07-05T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56076
2012-07-05T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56077
2012-07-05T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56078
2012-07-05T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56079
2012-07-05T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56080
2012-07-05T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56081
2012-07-05T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56082
2012-07-05T02:30:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:30:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56083
2012-07-05T02:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389

2012-07-05T02:30:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56084
2012-07-05T02:30:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56085
2012-07-05T02:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56086
2012-07-05T02:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56087
2012-07-05T02:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56088
2012-07-05T02:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56089
2012-07-05T02:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56090
2012-07-05T02:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56091
2012-07-05T02:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56092
2012-07-05T02:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56093
2012-07-05T02:33:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T02:33:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59522
2012-07-05T02:33:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:33:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58707
2012-07-05T02:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:33:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:34:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:35:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:35:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:35:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58685
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58686
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58687
2012-07-05T02:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63843
2012-07-05T02:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T02:35:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63844
2012-07-05T02:35:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63845
2012-07-05T02:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63846
2012-07-05T02:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63847
2012-07-05T02:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63848
2012-07-05T02:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63849
2012-07-05T02:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63850
2012-07-05T02:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63851
2012-07-05T02:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63852
2012-07-05T02:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T02:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63853
2012-07-05T02:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63854
2012-07-05T02:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63855
2012-07-05T02:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63856
2012-07-05T02:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63857
2012-07-05T02:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63858
2012-07-05T02:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63859
2012-07-05T02:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63860
2012-07-05T02:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63861
2012-07-05T02:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63862
2012-07-05T02:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63863
2012-07-05T02:40:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:40:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:40:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:40:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63864
2012-07-05T02:40:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63865
2012-07-05T02:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63866

2012-07-05T02:40:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63867
2012-07-05T02:40:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63868
2012-07-05T02:40:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63869
2012-07-05T02:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63870
2012-07-05T02:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63871
2012-07-05T02:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63872
2012-07-05T02:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63873
2012-07-05T02:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63874
2012-07-05T02:41:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:41:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:41:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:42:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:44:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:44:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63875
2012-07-05T02:44:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63876
2012-07-05T02:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63877
2012-07-05T02:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63878
2012-07-05T02:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63879
2012-07-05T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63880
2012-07-05T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63881
2012-07-05T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63882
2012-07-05T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63883
2012-07-05T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63884
2012-07-05T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63885
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63886
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:45:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:45:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51866
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51867
2012-07-05T02:45:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51868
2012-07-05T02:45:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50954
2012-07-05T02:45:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T02:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50955
2012-07-05T02:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50956
2012-07-05T02:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50957
2012-07-05T02:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50958
2012-07-05T02:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50959
2012-07-05T02:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50960
2012-07-05T02:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50961
2012-07-05T02:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50962
2012-07-05T02:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50963
2012-07-05T02:48:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:48:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:48:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T02:49:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:49:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:50:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:50:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50964
2012-07-05T02:50:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T02:50:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50965
2012-07-05T02:50:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50966
2012-07-05T02:50:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50967
2012-07-05T02:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50968

2012-07-05T02:50:56-03:00,info,appl
listen,17,0.0.0.0,50969
2012-07-05T02:50:56-03:00,info,appl
listen,17,0.0.0.0,50970
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50971
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50972
2012-07-05T02:50:57-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T02:50:57-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:50:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50973
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50974
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50975
2012-07-05T02:50:57-03:00,info,appl
listen,17,0.0.0.0,50976
2012-07-05T02:50:58-03:00,info,appl
listen,17,0.0.0.0,50977
2012-07-05T02:50:58-03:00,info,appl
listen,17,0.0.0.0,50978
2012-07-05T02:50:59-03:00,info,appl
listen,17,0.0.0.0,50979
2012-07-05T02:50:59-03:00,info,appl
listen,17,0.0.0.0,50980
2012-07-05T02:50:59-03:00,info,appl
listen,17,0.0.0.0,50981
2012-07-05T02:51:00-03:00,info,appl
listen,17,0.0.0.0,50982
2012-07-05T02:51:00-03:00,info,appl
listen,17,0.0.0.0,50983
2012-07-05T02:51:00-03:00,info,appl
listen,17,0.0.0.0,50984
2012-07-05T02:51:00-03:00,info,appl
listen,17,0.0.0.0,50985
2012-07-05T02:51:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:00-03:00,info,appl
listen,17,0.0.0.0,50986
2012-07-05T02:51:01-03:00,info,appl
listen,17,0.0.0.0,50987
2012-07-05T02:51:01-03:00,info,appl
listen,17,0.0.0.0,50988
2012-07-05T02:51:02-03:00,info,appl
listen,17,0.0.0.0,50989
2012-07-05T02:51:02-03:00,info,appl
listen,17,0.0.0.0,50990
2012-07-05T02:51:03-03:00,info,appl
listen,17,0.0.0.0,50991
2012-07-05T02:51:03-03:00,info,appl
listen,17,0.0.0.0,50992
2012-07-05T02:51:03-03:00,info,appl
listen,17,0.0.0.0,50993

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:03-03:00,info,appl
listen,17,0.0.0.0,50994
2012-07-05T02:51:03-03:00,info,appl
listen,17,0.0.0.0,50995
2012-07-05T02:51:04-03:00,info,appl
listen,17,0.0.0.0,50996
2012-07-05T02:51:04-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:04-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:04-03:00,info,appl
listen,17,0.0.0.0,50997
2012-07-05T02:51:04-03:00,info,appl
listen,17,0.0.0.0,50998
2012-07-05T02:51:05-03:00,info,appl
listen,17,0.0.0.0,50999
2012-07-05T02:51:05-03:00,info,appl
listen,17,0.0.0.0,51000
2012-07-05T02:51:06-03:00,info,appl
listen,17,0.0.0.0,51001
2012-07-05T02:51:06-03:00,info,appl
listen,17,0.0.0.0,51002
2012-07-05T02:51:06-03:00,info,appl
listen,17,0.0.0.0,51003
2012-07-05T02:51:06-03:00,info,appl
listen,17,0.0.0.0,51004
2012-07-05T02:51:07-03:00,info,appl
listen,17,0.0.0.0,51005
2012-07-05T02:51:07-03:00,info,appl
listen,17,0.0.0.0,51006
2012-07-05T02:51:07-03:00,info,appl
listen,17,0.0.0.0,51007
2012-07-05T02:51:07-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:07-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:07-03:00,info,appl
listen,17,0.0.0.0,51008
2012-07-05T02:51:08-03:00,info,appl
listen,17,0.0.0.0,51009
2012-07-05T02:51:08-03:00,info,appl
listen,17,0.0.0.0,51010
2012-07-05T02:51:09-03:00,info,appl
listen,17,0.0.0.0,51011
2012-07-05T02:51:09-03:00,info,appl
listen,17,0.0.0.0,51012
2012-07-05T02:51:09-03:00,info,appl
listen,17,0.0.0.0,51013
2012-07-05T02:51:10-03:00,info,appl
listen,17,0.0.0.0,51014
2012-07-05T02:51:10-03:00,info,appl
listen,17,0.0.0.0,51015
2012-07-05T02:51:10-03:00,info,appl
listen,17,0.0.0.0,51016
2012-07-05T02:51:10-03:00,info,appl
listen,17,0.0.0.0,51017
2012-07-05T02:51:10-03:00,info,appl
listen,17,0.0.0.0,51018
2012-07-05T02:51:11-03:00,info,appl
connect out,6,10.10.0.11,1025

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:11-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:11-03:00,info,appl
listen,17,0.0.0.0,51019
2012-07-05T02:51:11-03:00,info,appl
listen,17,0.0.0.0,51020
2012-07-05T02:51:12-03:00,info,appl
listen,17,0.0.0.0,51021
2012-07-05T02:51:12-03:00,info,appl
listen,17,0.0.0.0,51022
2012-07-05T02:51:13-03:00,info,appl
listen,17,0.0.0.0,51023
2012-07-05T02:51:13-03:00,info,appl
listen,17,0.0.0.0,51024
2012-07-05T02:51:13-03:00,info,appl
listen,17,0.0.0.0,51025
2012-07-05T02:51:14-03:00,info,appl
listen,17,0.0.0.0,51026
2012-07-05T02:51:14-03:00,info,appl
listen,17,0.0.0.0,51027
2012-07-05T02:51:14-03:00,info,appl
send,17,10.201.0.100,389
2012-07-05T02:51:14-03:00,info,appl
listen,17,0.0.0.0,51028
2012-07-05T02:51:14-03:00,info,appl
listen,17,0.0.0.0,51029
2012-07-05T02:51:14-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:14-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:14-03:00,info,appl
listen,17,0.0.0.0,51030
2012-07-05T02:51:15-03:00,info,appl
listen,17,0.0.0.0,51031
2012-07-05T02:51:15-03:00,info,appl
listen,17,0.0.0.0,51032
2012-07-05T02:51:16-03:00,info,appl
listen,17,0.0.0.0,51033
2012-07-05T02:51:16-03:00,info,appl
listen,17,0.0.0.0,51034
2012-07-05T02:51:17-03:00,info,appl
listen,17,0.0.0.0,51035
2012-07-05T02:51:17-03:00,info,appl
listen,17,0.0.0.0,51036
2012-07-05T02:51:17-03:00,info,appl
listen,17,0.0.0.0,51037
2012-07-05T02:51:17-03:00,info,appl
listen,17,0.0.0.0,51038
2012-07-05T02:51:17-03:00,info,appl
listen,17,0.0.0.0,51039
2012-07-05T02:51:18-03:00,info,appl
listen,17,0.0.0.0,51040
2012-07-05T02:51:18-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:18-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:18-03:00,info,appl
listen,17,0.0.0.0,51041
2012-07-05T02:51:18-03:00,info,appl
listen,17,0.0.0.0,51042

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:19-03:00,info,appl
listen,17,0.0.0.0,51043
2012-07-05T02:51:19-03:00,info,appl
listen,17,0.0.0.0,51044
2012-07-05T02:51:20-03:00,info,appl
listen,17,0.0.0.0,51045
2012-07-05T02:51:20-03:00,info,appl
listen,17,0.0.0.0,51046
2012-07-05T02:51:20-03:00,info,appl
listen,17,0.0.0.0,51047
2012-07-05T02:51:20-03:00,info,appl
listen,17,0.0.0.0,51048
2012-07-05T02:51:21-03:00,info,appl
listen,17,0.0.0.0,51049
2012-07-05T02:51:21-03:00,info,appl
listen,17,0.0.0.0,51050
2012-07-05T02:51:21-03:00,info,appl
listen,17,0.0.0.0,51051
2012-07-05T02:51:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:21-03:00,info,appl
listen,17,0.0.0.0,51052
2012-07-05T02:51:21-03:00,info,appl
listen,17,0.0.0.0,51053
2012-07-05T02:51:22-03:00,info,appl
listen,17,0.0.0.0,51054
2012-07-05T02:51:22-03:00,info,appl
listen,17,0.0.0.0,51055
2012-07-05T02:51:23-03:00,info,appl
listen,17,0.0.0.0,51056
2012-07-05T02:51:23-03:00,info,appl
listen,17,0.0.0.0,51057
2012-07-05T02:51:23-03:00,info,appl
listen,17,0.0.0.0,51058
2012-07-05T02:51:24-03:00,info,appl
listen,17,0.0.0.0,51059
2012-07-05T02:51:24-03:00,info,appl
listen,17,0.0.0.0,51060
2012-07-05T02:51:24-03:00,info,appl
listen,17,0.0.0.0,51061
2012-07-05T02:51:24-03:00,info,appl
listen,17,0.0.0.0,51062
2012-07-05T02:51:25-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:25-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:25-03:00,info,appl
listen,17,0.0.0.0,51063
2012-07-05T02:51:25-03:00,info,appl
listen,17,0.0.0.0,51064
2012-07-05T02:51:26-03:00,info,appl
listen,17,0.0.0.0,51065
2012-07-05T02:51:26-03:00,info,appl
listen,17,0.0.0.0,51066
2012-07-05T02:51:27-03:00,info,appl
listen,17,0.0.0.0,51067
2012-07-05T02:51:27-03:00,info,appl
listen,17,0.0.0.0,51068

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:27-03:00,info,appl
listen,17,0.0.0.0,51069
2012-07-05T02:51:28-03:00,info,appl
listen,17,0.0.0.0,51070
2012-07-05T02:51:28-03:00,info,appl
listen,17,0.0.0.0,51071
2012-07-05T02:51:28-03:00,info,appl
listen,17,0.0.0.0,51072
2012-07-05T02:51:28-03:00,info,appl
listen,17,0.0.0.0,51073
2012-07-05T02:51:28-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:28-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:28-03:00,info,appl
listen,17,0.0.0.0,51074
2012-07-05T02:51:29-03:00,info,appl
listen,17,0.0.0.0,51075
2012-07-05T02:51:29-03:00,info,appl
listen,17,0.0.0.0,51076
2012-07-05T02:51:30-03:00,info,appl
listen,17,0.0.0.0,51077
2012-07-05T02:51:30-03:00,info,appl
listen,17,0.0.0.0,51078
2012-07-05T02:51:30-03:00,info,appl
listen,17,0.0.0.0,51079
2012-07-05T02:51:31-03:00,info,appl
listen,17,0.0.0.0,51080
2012-07-05T02:51:31-03:00,info,appl
listen,17,0.0.0.0,51081
2012-07-05T02:51:31-03:00,info,appl
listen,17,0.0.0.0,51082
2012-07-05T02:51:31-03:00,info,appl
listen,17,0.0.0.0,51083
2012-07-05T02:51:31-03:00,info,appl
listen,17,0.0.0.0,51084
2012-07-05T02:51:32-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:32-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:32-03:00,info,appl
listen,17,0.0.0.0,51085
2012-07-05T02:51:32-03:00,info,appl
listen,17,0.0.0.0,51086
2012-07-05T02:51:33-03:00,info,appl
listen,17,0.0.0.0,51087
2012-07-05T02:51:33-03:00,info,appl
listen,17,0.0.0.0,51088
2012-07-05T02:51:33-03:00,info,appl
listen,17,0.0.0.0,51089
2012-07-05T02:51:34-03:00,info,appl
listen,17,0.0.0.0,51090
2012-07-05T02:51:34-03:00,info,appl
send,17,10.203.0.11,389
2012-07-05T02:51:34-03:00,info,appl
listen,17,0.0.0.0,51091
2012-07-05T02:51:34-03:00,info,appl
listen,17,0.0.0.0,51092
2012-07-05T02:51:34-03:00,info,appl
listen,17,0.0.0.0,51093

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:35-03:00,info,appl
listen,17,0.0.0.0,51094
2012-07-05T02:51:35-03:00,info,appl
listen,17,0.0.0.0,51095
2012-07-05T02:51:35-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:35-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:35-03:00,info,appl
listen,17,0.0.0.0,51096
2012-07-05T02:51:35-03:00,info,appl
listen,17,0.0.0.0,51097
2012-07-05T02:51:36-03:00,info,appl
listen,17,0.0.0.0,51098
2012-07-05T02:51:36-03:00,info,appl
listen,17,0.0.0.0,51099
2012-07-05T02:51:37-03:00,info,appl
listen,17,0.0.0.0,51100
2012-07-05T02:51:37-03:00,info,appl
listen,17,0.0.0.0,51101
2012-07-05T02:51:37-03:00,info,appl
listen,17,0.0.0.0,51102
2012-07-05T02:51:38-03:00,info,appl
listen,17,0.0.0.0,51103
2012-07-05T02:51:38-03:00,info,appl
listen,17,0.0.0.0,51104
2012-07-05T02:51:38-03:00,info,appl
listen,17,0.0.0.0,51105
2012-07-05T02:51:38-03:00,info,appl
listen,17,0.0.0.0,51106
2012-07-05T02:51:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:39-03:00,info,appl
listen,17,0.0.0.0,51107
2012-07-05T02:51:39-03:00,info,appl
listen,17,0.0.0.0,51108
2012-07-05T02:51:40-03:00,info,appl
listen,17,0.0.0.0,51109
2012-07-05T02:51:40-03:00,info,appl
listen,17,0.0.0.0,51110
2012-07-05T02:51:41-03:00,info,appl
listen,17,0.0.0.0,51111
2012-07-05T02:51:41-03:00,info,appl
listen,17,0.0.0.0,51112
2012-07-05T02:51:41-03:00,info,appl
listen,17,0.0.0.0,51113
2012-07-05T02:51:41-03:00,info,appl
listen,17,0.0.0.0,51114
2012-07-05T02:51:42-03:00,info,appl
listen,17,0.0.0.0,51115
2012-07-05T02:51:42-03:00,info,appl
listen,17,0.0.0.0,51116
2012-07-05T02:51:42-03:00,info,appl
listen,17,0.0.0.0,51117
2012-07-05T02:51:42-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:42-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:42-03:00,info,appl
listen,17,0.0.0.0,51118
2012-07-05T02:51:43-03:00,info,appl
listen,17,0.0.0.0,51119
2012-07-05T02:51:43-03:00,info,appl
listen,17,0.0.0.0,51120
2012-07-05T02:51:44-03:00,info,appl
listen,17,0.0.0.0,51121
2012-07-05T02:51:44-03:00,info,appl
listen,17,0.0.0.0,51122
2012-07-05T02:51:44-03:00,info,appl
listen,17,0.0.0.0,51123
2012-07-05T02:51:45-03:00,info,appl
listen,17,0.0.0.0,51124
2012-07-05T02:51:45-03:00,info,appl
listen,17,0.0.0.0,51125
2012-07-05T02:51:45-03:00,info,appl
listen,17,0.0.0.0,51126
2012-07-05T02:51:45-03:00,info,appl
listen,17,0.0.0.0,51127
2012-07-05T02:51:45-03:00,info,appl
listen,17,0.0.0.0,51128
2012-07-05T02:51:46-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:46-03:00,info,appl
listen,17,0.0.0.0,51129
2012-07-05T02:51:46-03:00,info,appl
listen,17,0.0.0.0,51130
2012-07-05T02:51:47-03:00,info,appl
listen,17,0.0.0.0,51131
2012-07-05T02:51:47-03:00,info,appl
listen,17,0.0.0.0,51132
2012-07-05T02:51:47-03:00,info,appl
listen,17,0.0.0.0,51133
2012-07-05T02:51:48-03:00,info,appl
listen,17,0.0.0.0,51134
2012-07-05T02:51:48-03:00,info,appl
listen,17,0.0.0.0,51135
2012-07-05T02:51:48-03:00,info,appl
listen,17,0.0.0.0,51136
2012-07-05T02:51:48-03:00,info,appl
listen,17,0.0.0.0,51137
2012-07-05T02:51:49-03:00,info,appl
listen,17,0.0.0.0,51138
2012-07-05T02:51:49-03:00,info,appl
listen,17,0.0.0.0,51139
2012-07-05T02:51:49-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T02:51:49-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T02:51:49-03:00,info,appl
listen,17,0.0.0.0,51140
2012-07-05T02:51:49-03:00,info,appl
listen,17,0.0.0.0,51141
2012-07-05T02:51:50-03:00,info,appl
listen,17,0.0.0.0,51142
2012-07-05T02:51:50-03:00,info,appl
listen,17,0.0.0.0,51143

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:51:51-03:00,info,appl
listen,17,0.0.0.0,51144
2012-07-05T02:51:51-03:00,info,appl
listen,17,0.0.0.0,51145
2012-07-05T02:51:51-03:00,info,appl
listen,17,0.0.0.0,51146
2012-07-05T02:51:52-03:00,info,appl
listen,17,0.0.0.0,51147
2012-07-05T02:51:52-03:00,info,appl
listen,17,0.0.0.0,51148
2012-07-05T02:51:52-03:00,info,appl
listen,17,0.0.0.0,51149
2012-07-05T02:51:52-03:00,info,appl
listen,17,0.0.0.0,51150
2012-07-05T02:51:53-03:00,info,appl
listen,17,0.0.0.0,51151
2012-07-05T02:51:53-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T02:51:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T02:51:53-03:00,info,appl
w,listen,17,0.0.0.0,49448
2012-07-05T02:51:53-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-05T02:51:53-03:00,info,appl
listen,17,0.0.0.0,49449
2012-07-05T02:51:54-03:00,info,appl
listen,17,0.0.0.0,49450
2012-07-05T02:51:54-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T02:51:54-03:00,info,appl
w,listen,17,0.0.0.0,61193
2012-07-05T02:51:54-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T02:51:54-03:00,info,appl
listen,17,0.0.0.0,61194
2012-07-05T02:51:55-03:00,info,appl
listen,17,0.0.0.0,61195
2012-07-05T02:51:55-03:00,info,appl
listen,17,0.0.0.0,61196
2012-07-05T02:51:56-03:00,info,appl
listen,17,0.0.0.0,61197
2012-07-05T02:51:56-03:00,info,appl
listen,17,0.0.0.0,61198
2012-07-05T02:51:56-03:00,info,appl
listen,17,0.0.0.0,61199
2012-07-05T02:51:56-03:00,info,appl
listen,17,0.0.0.0,61200
2012-07-05T02:51:57-03:00,info,appl
listen,17,0.0.0.0,61201
2012-07-05T02:51:57-03:00,info,appl
listen,17,0.0.0.0,61202
2012-07-05T02:51:57-03:00,info,appl
w,listen,17,0.0.0.0,51718
2012-07-05T02:51:57-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T02:54:23-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-05T02:54:23-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T02:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51719
2012-07-05T02:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51720
2012-07-05T02:54:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51721
2012-07-05T02:54:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51722
2012-07-05T02:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51723
2012-07-05T02:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51724
2012-07-05T02:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51725
2012-07-05T02:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51726
2012-07-05T02:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51727
2012-07-05T02:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51728
2012-07-05T02:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51729
2012-07-05T02:55:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T02:55:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:55:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T02:55:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T02:55:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:55:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51941
2012-07-05T02:55:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T02:55:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51942
2012-07-05T02:55:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51943
2012-07-05T02:55:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60421
2012-07-05T02:55:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T02:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60422
2012-07-05T02:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60423
2012-07-05T02:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60424
2012-07-05T02:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60425
2012-07-05T02:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60426
2012-07-05T02:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60427

2012-07-05T02:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60428
2012-07-05T02:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60429
2012-07-05T02:56:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60430
2012-07-05T02:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:56:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T02:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T02:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60431
2012-07-05T02:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T02:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60432
2012-07-05T02:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60433
2012-07-05T02:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60434
2012-07-05T02:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60435
2012-07-05T02:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60436
2012-07-05T02:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60437
2012-07-05T02:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60438
2012-07-05T03:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60439
2012-07-05T03:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60440
2012-07-05T03:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60441
2012-07-05T03:01:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:01:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60442
2012-07-05T03:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60443
2012-07-05T03:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60444
2012-07-05T03:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60445
2012-07-05T03:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60446
2012-07-05T03:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60447
2012-07-05T03:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60448
2012-07-05T03:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60449

2012-07-05T03:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60450
2012-07-05T03:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60451
2012-07-05T03:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60452
2012-07-05T03:02:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64222
2012-07-05T03:02:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64223
2012-07-05T03:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64224
2012-07-05T03:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:02:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:03:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:03:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:03:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:03:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:06:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59487
2012-07-05T03:06:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59488
2012-07-05T03:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59489
2012-07-05T03:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51476
2012-07-05T03:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51477
2012-07-05T03:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51478
2012-07-05T03:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51479
2012-07-05T03:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51480

2012-07-05T03:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51481
2012-07-05T03:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51482
2012-07-05T03:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51483
2012-07-05T03:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51484
2012-07-05T03:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51485
2012-07-05T03:07:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.49,52993
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51486
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63302
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63303
2012-07-05T03:09:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57830
2012-07-05T03:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57831
2012-07-05T03:09:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62091
2012-07-05T03:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62092
2012-07-05T03:09:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56046
2012-07-05T03:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56047
2012-07-05T03:09:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59905
2012-07-05T03:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59906
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54098
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54099
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60742
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60743
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59961
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59962
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58902
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58903
2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49919

2012-07-05T03:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49920
2012-07-05T03:09:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:09:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:10:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:10:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49921
2012-07-05T03:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49922
2012-07-05T03:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49923
2012-07-05T03:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49924
2012-07-05T03:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49925
2012-07-05T03:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49926
2012-07-05T03:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49927
2012-07-05T03:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49928
2012-07-05T03:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49929
2012-07-05T03:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49930
2012-07-05T03:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49931
2012-07-05T03:15:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:15:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49932
2012-07-05T03:15:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:15:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49933
2012-07-05T03:15:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49934
2012-07-05T03:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49935
2012-07-05T03:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49936
2012-07-05T03:15:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49937
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49938
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49939

2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49940
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49941
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49942
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51878
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51879
2012-07-05T03:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51880
2012-07-05T03:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51881
2012-07-05T03:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51882
2012-07-05T03:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51883
2012-07-05T03:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51884
2012-07-05T03:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51885
2012-07-05T03:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51886
2012-07-05T03:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51887
2012-07-05T03:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51888
2012-07-05T03:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51889
2012-07-05T03:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51890
2012-07-05T03:15:23-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-05T03:15:23-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-05T03:17:04-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53937
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57976
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49792
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62250
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62252
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62253
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62254
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:16:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,135
2012-07-05T03:16:57-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,500
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,4500
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,53474
2012-07-05T03:16:57-03:00,info,appl
listen,17,0.0.0.0,53475
2012-07-05T03:16:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,51654
2012-07-05T03:16:57-03:00,info,appl
listen,17,0.0.0.0,51655
2012-07-05T03:16:57-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T03:16:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:16:57-03:00,info,appl
listen,17,0.0.0.0,51656
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,49507
2012-07-05T03:16:57-03:00,info,appl
listen,17,0.0.0.0,49508
2012-07-05T03:16:57-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:16:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:16:57-03:00,info,appl
listen,17,0.0.0.0,49509
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,49510
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,49511
2012-07-05T03:16:57-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,55018
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,::,49826
2012-07-05T03:16:57-03:00,info,appl
w,listen,17,0.0.0.0,52277
2012-07-05T03:16:58-03:00,info,appl
listen,17,0.0.0.0,52278
2012-07-05T03:16:58-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52279
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52280
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52281
2012-07-05T03:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-05T03:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-05T03:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-05T03:16:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59532
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58701
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58702
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59075
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50968
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50969
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52920
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52921
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63248
2012-07-05T03:16:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63249
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63250
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63251
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58920
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58921
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61300
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61301
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61302
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56421
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56422
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,49256
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49257
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49258
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,56256
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,56256
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49259
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57035
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57036
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57037
2012-07-05T03:16:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57038
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,49522
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57442
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59658
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63953
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59659
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59946
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53651
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53652
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55511
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55512
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55867
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55868
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61980
2012-07-05T03:17:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61981
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61982
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55030
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55031
2012-07-05T03:17:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,63206
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,63207
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,63208
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,63209
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,57654
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,57655
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,58449
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,::,60725
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,55169
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,55170
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,60103
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,60104
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,60105
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,60106
2012-07-05T03:17:00-03:00,info,appl
w,listen,17,0.0.0.0,56694
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,56695
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,56696
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,56697
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,56698
2012-07-05T03:17:00-03:00,info,appl
listen,17,0.0.0.0,56699
2012-07-05T03:17:01-03:00,info,appl
w,listen,17,0.0.0.0,61702
2012-07-05T03:17:01-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:17:01-03:00,info,appl
w,listen,17,0.0.0.0,63281
2012-07-05T03:17:01-03:00,info,appl
listen,17,0.0.0.0,63282
2012-07-05T03:17:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T03:17:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:01-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55573
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55574
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55575
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55576
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60416
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-05T03:17:01-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.194,80
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60417
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60418
2012-07-05T03:17:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60419
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57707
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57708
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57709
2012-07-05T03:17:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:17:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57710
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57711
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57712
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57713
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,54145
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,54145
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53238
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59334
2012-07-05T03:17:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,63147
2012-07-05T03:17:02-03:00,info,appl
listen,17,0.0.0.0,63148
2012-07-05T03:17:02-03:00,info,appl
listen,17,0.0.0.0,63149
2012-07-05T03:17:02-03:00,info,appl
listen,17,0.0.0.0,63150
2012-07-05T03:17:02-03:00,info,appl
listen,17,0.0.0.0,63151
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63152
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63153
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63154
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63155
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63156
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63157
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63158
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63159
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63160
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63161
2012-07-05T03:17:03-03:00,info,appl
listen,17,0.0.0.0,63162
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63163
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63164
2012-07-05T03:17:04-03:00,info,appl
listen,6,0.0.0.0,54148
2012-07-05T03:17:04-03:00,info,appl
listen,6,::,54148
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63165
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63166
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63167
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63168
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63169
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63170
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63171
2012-07-05T03:17:04-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63172
2012-07-05T03:17:04-03:00,info,appl
listen,17,0.0.0.0,63173
2012-07-05T03:17:04-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55667
2012-07-05T03:17:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55668
2012-07-05T03:17:04-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-05T03:17:04-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-05T03:17:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55669
2012-07-05T03:17:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58518
2012-07-05T03:17:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58519
2012-07-05T03:17:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58520
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57411
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,52988
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55594
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51023
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51024
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51025
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63839
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63840
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63841
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63842
2012-07-05T03:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63843
2012-07-05T03:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63844
2012-07-05T03:17:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63845
2012-07-05T03:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63846
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63847
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63848
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63849
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63850
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61009
2012-07-05T03:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61010
2012-07-05T03:17:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T03:17:08-03:00,info,appl
listen,17,0.0.0.0,61011
2012-07-05T03:17:08-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-05T03:17:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:08-03:00,info,appl
listen,17,0.0.0.0,61013
2012-07-05T03:17:08-03:00,info,appl
listen,17,0.0.0.0,61014
2012-07-05T03:17:08-03:00,info,appl
listen,17,0.0.0.0,61015
2012-07-05T03:17:09-03:00,info,appl
listen,17,0.0.0.0,61016
2012-07-05T03:17:09-03:00,info,appl
listen,17,0.0.0.0,61017
2012-07-05T03:17:09-03:00,info,appl
listen,17,0.0.0.0,61018
2012-07-05T03:17:09-03:00,info,appl
listen,17,0.0.0.0,61019
2012-07-05T03:17:09-03:00,info,appl
listen,17,0.0.0.0,61020
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61021
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61022
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61023
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61024
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61025
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61026
2012-07-05T03:17:10-03:00,info,appl
listen,17,0.0.0.0,61027
2012-07-05T03:17:11-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:11-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61028
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61029
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61030
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61031
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61032
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61033
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61034
2012-07-05T03:17:11-03:00,info,appl
listen,17,0.0.0.0,61035
2012-07-05T03:17:12-03:00,info,appl
listen,17,0.0.0.0,61036
2012-07-05T03:17:12-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61037
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61038
2012-07-05T03:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61039
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61040
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61041
2012-07-05T03:17:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:17:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:17:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:17:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61042
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61043
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61044
2012-07-05T03:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61045
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61046
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61047
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61048
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61049
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61050
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61051
2012-07-05T03:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61052
2012-07-05T03:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61053
2012-07-05T03:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61054
2012-07-05T03:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61055
2012-07-05T03:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61056
2012-07-05T03:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61057
2012-07-05T03:17:15-03:00,info,appl
listen,17,0.0.0.0,61058
2012-07-05T03:17:15-03:00,info,appl
listen,17,0.0.0.0,61059
2012-07-05T03:17:16-03:00,info,appl
listen,17,0.0.0.0,61060
2012-07-05T03:17:16-03:00,info,appl
listen,17,0.0.0.0,61061
2012-07-05T03:17:16-03:00,info,appl
listen,17,0.0.0.0,61062
2012-07-05T03:17:17-03:00,info,appl
listen,17,0.0.0.0,61063
2012-07-05T03:17:17-03:00,info,appl
listen,17,0.0.0.0,61064
2012-07-05T03:17:17-03:00,info,appl
send,17,10.88.108.206,389
2012-07-05T03:17:17-03:00,info,appl
listen,17,0.0.0.0,61065
2012-07-05T03:17:17-03:00,info,appl
listen,17,0.0.0.0,61066
2012-07-05T03:17:17-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:17-03:00,info,appl
listen,17,0.0.0.0,61067
2012-07-05T03:17:18-03:00,info,appl
listen,17,0.0.0.0,61068
2012-07-05T03:17:18-03:00,info,appl
listen,17,0.0.0.0,61069
2012-07-05T03:17:19-03:00,info,appl
listen,17,0.0.0.0,61070
2012-07-05T03:17:19-03:00,info,appl
listen,17,0.0.0.0,61071
2012-07-05T03:17:20-03:00,info,appl
listen,17,0.0.0.0,61072
2012-07-05T03:17:20-03:00,info,appl
listen,17,0.0.0.0,61073
2012-07-05T03:17:20-03:00,info,appl
listen,17,0.0.0.0,61074
2012-07-05T03:17:20-03:00,info,appl
listen,17,0.0.0.0,61075
2012-07-05T03:17:21-03:00,info,appl
listen,17,0.0.0.0,61076
2012-07-05T03:17:21-03:00,info,appl
listen,17,0.0.0.0,61077
2012-07-05T03:17:21-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:17:21-03:00,info,appl
listen,17,0.0.0.0,61078
2012-07-05T03:17:21-03:00,info,appl
listen,17,0.0.0.0,61079
2012-07-05T03:17:22-03:00,info,appl
listen,17,0.0.0.0,61080
2012-07-05T03:17:22-03:00,info,appl
listen,17,0.0.0.0,61081
2012-07-05T03:17:23-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61082
2012-07-05T03:17:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61083
2012-07-05T03:17:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61084
2012-07-05T03:17:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61085
2012-07-05T03:17:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61086
2012-07-05T03:17:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61087
2012-07-05T03:17:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61088
2012-07-05T03:17:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:17:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61089
2012-07-05T03:17:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61090
2012-07-05T03:17:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61091
2012-07-05T03:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61092
2012-07-05T03:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61093
2012-07-05T03:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61094
2012-07-05T03:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61095
2012-07-05T03:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61096
2012-07-05T03:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61097
2012-07-05T03:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61098
2012-07-05T03:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61099
2012-07-05T03:17:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-05T03:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61100
2012-07-05T03:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61101
2012-07-05T03:18:53-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-05T03:20:22-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57115
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63375
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51453
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,64583
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,58154
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,58156
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,58157
2012-07-05T03:20:05-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T03:20:05-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T03:20:05-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T03:20:05-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,64434
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,64435
2012-07-05T03:20:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,61396
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,61397
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,::,500
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,::,4500
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,64784
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,64785
2012-07-05T03:20:05-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:20:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:05-03:00,info,appl
listen,17,0.0.0.0,64786
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,55848
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,::,58637
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,55871
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:05-03:00,info,appl
w,listen,17,0.0.0.0,55872
2012-07-05T03:20:05-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,::,55873
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55874
2012-07-05T03:20:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55875
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55876
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55877
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55878
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53688
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49899
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49900
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56060
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51955
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51956
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51957
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51958
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62639
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62640
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63085
2012-07-05T03:20:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63086
2012-07-05T03:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-05T03:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-05T03:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-05T03:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-05T03:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63087
2012-07-05T03:20:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54713
2012-07-05T03:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54714
2012-07-05T03:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54715
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,54716
2012-07-05T03:20:07-03:00,info,appl
ow,listen,6,0.0.0.0,57591
2012-07-05T03:20:07-03:00,info,appl
ow,listen,6,::,57591
2012-07-05T03:20:07-03:00,info,appl
w,listen,17,0.0.0.0,61636
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,61637
2012-07-05T03:20:07-03:00,info,appl
w,listen,17,0.0.0.0,62127
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,62128
2012-07-05T03:20:07-03:00,info,appl
w,listen,17,0.0.0.0,62880
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,62881
2012-07-05T03:20:07-03:00,info,appl
w,listen,17,0.0.0.0,60699
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,60700
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,60701
2012-07-05T03:20:07-03:00,info,appl
listen,17,0.0.0.0,60702
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,60703
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,60704
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,5355
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,63298
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,51698
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,54953
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,54954
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,52466
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,52467
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,58539
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,58540
2012-07-05T03:20:08-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,62020
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,62021
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,63538
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,63539
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,54042
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,55511
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,58374
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,62779
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,62780
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,60578
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,55489
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,55490
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,55491
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,55492
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,65161
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,65162
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,65163
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,50916
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,50917
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,52084
2012-07-05T03:20:08-03:00,info,appl
w,listen,17,0.0.0.0,54765
2012-07-05T03:20:08-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,54766
2012-07-05T03:20:08-03:00,info,appl
listen,17,0.0.0.0,54767
2012-07-05T03:20:09-03:00,info,appl
listen,17,0.0.0.0,54768
2012-07-05T03:20:09-03:00,info,appl
listen,17,0.0.0.0,54769
2012-07-05T03:20:09-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54770
2012-07-05T03:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54771
2012-07-05T03:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54772
2012-07-05T03:20:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:20:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:20:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:20:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63670
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63671
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,59355
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,59355
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53030
2012-07-05T03:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53031
2012-07-05T03:20:10-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55416
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55417
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55418
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55419
2012-07-05T03:20:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56066
2012-07-05T03:20:12-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:20:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56067
2012-07-05T03:20:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56068
2012-07-05T03:20:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56069
2012-07-05T03:20:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56070
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56071
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62622
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,::,64937
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60713
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63884
2012-07-05T03:20:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63885
2012-07-05T03:20:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:22-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57996
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57997
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57998
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57999
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,0.0.0.0,64702
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,6,::,64702
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58001
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58002
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58003
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58004
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:20:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:20:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:20:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:20:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:20:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:20:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58005
2012-07-05T03:20:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,10.10.4.146,68
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,58006
2012-07-05T03:20:22-03:00,info,appl
w,listen,17,0.0.0.0,56099
2012-07-05T03:20:22-03:00,info,appl
w,listen,17,::,54889
2012-07-05T03:20:22-03:00,info,appl
w,listen,17,0.0.0.0,57934
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,57935
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,57936
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,57937
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,57938
2012-07-05T03:20:22-03:00,info,appl
w,listen,17,0.0.0.0,63588
2012-07-05T03:20:22-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-05T03:20:22-03:00,info,appl
w,listen,6,0.0.0.0,5800
2012-07-05T03:20:22-03:00,info,appl
w,listen,17,0.0.0.0,61800
2012-07-05T03:20:22-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:22-03:00,info,appl
listen,17,0.0.0.0,61801
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61802
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61803
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61804
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61805
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61806
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61807
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61808
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61809
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61810
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61811
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61812
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61813
2012-07-05T03:20:23-03:00,info,appl
listen,17,0.0.0.0,61814
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61815
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61816
2012-07-05T03:20:24-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\taskhost.exe,all
control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61817
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61818
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61819
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61820
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61821
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61822
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61823
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61824
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61825
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61826
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61827
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,61828
2012-07-05T03:20:24-03:00,info,appl
w,listen,17,0.0.0.0,64165
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64166
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64167
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64168
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64169
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64170
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64171
2012-07-05T03:20:24-03:00,info,appl
listen,17,0.0.0.0,64172
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64173
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64174
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64175
2012-07-05T03:20:25-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64176
2012-07-05T03:20:25-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T03:20:25-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:20:25-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64177
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64178
2012-07-05T03:20:25-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64179
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64180
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64181
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64182
2012-07-05T03:20:25-03:00,info,appl
listen,17,0.0.0.0,64183
2012-07-05T03:20:26-03:00,info,appl
listen,17,0.0.0.0,64184
2012-07-05T03:20:26-03:00,info,appl
listen,17,0.0.0.0,64185
2012-07-05T03:20:26-03:00,info,appl
listen,17,0.0.0.0,64186
2012-07-05T03:20:26-03:00,info,appl
listen,17,0.0.0.0,64187
2012-07-05T03:20:26-03:00,info,appl
listen,17,0.0.0.0,64188
2012-07-05T03:20:26-03:00,info,appl
w,connect out,6,10.10.0.25,80
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64189
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64190
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64191
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64192
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64193
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64194
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64195
2012-07-05T03:20:27-03:00,info,appl
listen,17,0.0.0.0,64196
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64197
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64198
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64199
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64200
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64201
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,64202
2012-07-05T03:20:28-03:00,info,appl
w,listen,17,0.0.0.0,62647
2012-07-05T03:20:28-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,62648
2012-07-05T03:20:28-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-05T03:20:28-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:28-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62649
2012-07-05T03:20:28-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,62650
2012-07-05T03:20:28-03:00,info,appl
listen,17,0.0.0.0,62651
2012-07-05T03:20:29-03:00,info,appl
listen,17,0.0.0.0,62652
2012-07-05T03:20:29-03:00,info,appl
listen,17,0.0.0.0,62653
2012-07-05T03:20:29-03:00,info,appl
listen,17,0.0.0.0,62654
2012-07-05T03:20:30-03:00,info,appl
listen,17,0.0.0.0,62655
2012-07-05T03:20:30-03:00,info,appl
listen,17,0.0.0.0,62656
2012-07-05T03:20:30-03:00,info,appl
listen,17,0.0.0.0,62657
2012-07-05T03:20:30-03:00,info,appl
listen,17,0.0.0.0,62658
2012-07-05T03:20:30-03:00,info,appl
listen,17,0.0.0.0,62659
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62660
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62661
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62662
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62663
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62664
2012-07-05T03:20:31-03:00,info,appl
listen,17,0.0.0.0,62665
2012-07-05T03:20:32-03:00,info,appl
listen,17,0.0.0.0,62666
2012-07-05T03:20:32-03:00,info,appl
listen,17,0.0.0.0,62667
2012-07-05T03:20:32-03:00,info,appl
listen,17,0.0.0.0,62668
2012-07-05T03:20:32-03:00,info,appl
listen,17,0.0.0.0,62669
2012-07-05T03:20:32-03:00,info,appl
listen,17,0.0.0.0,62670
2012-07-05T03:20:42-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T03:21:14-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T03:21:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T03:21:32-03:00,info,appl
listen,17,0.0.0.0,62671
2012-07-05T03:21:32-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T03:21:32-03:00,info,appl
listen,17,0.0.0.0,62672
2012-07-05T03:21:33-03:00,info,appl
listen,17,0.0.0.0,62673
2012-07-05T03:21:34-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62674
2012-07-05T03:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62675
2012-07-05T03:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62676
2012-07-05T03:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62677
2012-07-05T03:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62678
2012-07-05T03:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62679
2012-07-05T03:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62680
2012-07-05T03:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62681
2012-07-05T03:22:05-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62682
2012-07-05T03:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62683
2012-07-05T03:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62684
2012-07-05T03:22:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62685
2012-07-05T03:22:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62686
2012-07-05T03:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62687
2012-07-05T03:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62688
2012-07-05T03:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62689
2012-07-05T03:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62690
2012-07-05T03:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62691
2012-07-05T03:22:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62692
2012-07-05T03:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62693
2012-07-05T03:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62694
2012-07-05T03:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62695
2012-07-05T03:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62696
2012-07-05T03:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62697
2012-07-05T03:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62698
2012-07-05T03:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62699
2012-07-05T03:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62700
2012-07-05T03:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62701
2012-07-05T03:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62702
2012-07-05T03:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62703
2012-07-05T03:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62704
2012-07-05T03:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:24:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62705
2012-07-05T03:24:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62706
2012-07-05T03:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62707
2012-07-05T03:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62708
2012-07-05T03:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62709
2012-07-05T03:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62710
2012-07-05T03:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62711
2012-07-05T03:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62712
2012-07-05T03:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62713
2012-07-05T03:24:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62714
2012-07-05T03:25:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:25:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:25:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T03:25:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62715
2012-07-05T03:25:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:25:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62716
2012-07-05T03:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62717
2012-07-05T03:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62718
2012-07-05T03:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62719
2012-07-05T03:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62720
2012-07-05T03:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62721
2012-07-05T03:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62722
2012-07-05T03:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62723
2012-07-05T03:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62724
2012-07-05T03:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62725
2012-07-05T03:27:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:27:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:27:00-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:27:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:27:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:27:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:28:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:30:21-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54415
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54853
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54855
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58724
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51153
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49591
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63094
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63096
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63097
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64072
2012-07-05T03:30:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64073
2012-07-05T03:30:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:30:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T03:30:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T03:30:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T03:30:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025

2012-07-05T03:30:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:30:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,62928
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,60176
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60177
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60178
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60179
2012-07-05T03:30:09-03:00,info,appl
listen,6,0.0.0.0,61848
2012-07-05T03:30:09-03:00,info,appl
listen,6,::,61848
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60180
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60181
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,60182
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,::,5355
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,5355
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,::,65042
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,63811
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,::,500
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,::,4500
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,65416
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,56203
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,56204
2012-07-05T03:30:09-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-05T03:30:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,63686
2012-07-05T03:30:09-03:00,info,appl
w,listen,17,0.0.0.0,50821
2012-07-05T03:30:09-03:00,info,appl
listen,17,0.0.0.0,50822
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,64491
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,56979

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-05T03:30:10-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,55509
2012-07-05T03:30:10-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:30:10-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,49454
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,54311
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,54312
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,54313
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,54314
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,54315
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,54316
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,52387
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,55323
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,55324
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,55325
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,::,3702
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,62048
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,55656
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,62049
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,62050
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,49258
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,49259
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,49260
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,::,49261
2012-07-05T03:30:10-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-05T03:30:10-03:00,info,appl
w,listen,17,0.0.0.0,53063
2012-07-05T03:30:10-03:00,info,appl
listen,17,0.0.0.0,53064

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,53065
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,53066
2012-07-05T03:30:11-03:00,info,appl
w,listen,17,0.0.0.0,57677
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,53067
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,53068
2012-07-05T03:30:11-03:00,info,appl
w,listen,17,0.0.0.0,52307
2012-07-05T03:30:11-03:00,info,appl
w,listen,17,::,59937
2012-07-05T03:30:11-03:00,info,appl
w,listen,17,0.0.0.0,61079
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,61080
2012-07-05T03:30:11-03:00,info,appl
w,listen,17,0.0.0.0,63622
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63623
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63624
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63625
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63626
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63627
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63628
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63629
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63630
2012-07-05T03:30:11-03:00,info,appl
listen,17,0.0.0.0,63631
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63632
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63633
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63634
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63635
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63636
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63637
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63638
2012-07-05T03:30:12-03:00,info,appl
listen,17,0.0.0.0,63639
2012-07-05T03:30:12-03:00,info,appl
w,listen,17,0.0.0.0,61384
2012-07-05T03:30:12-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T03:30:12-03:00,info,appl
ow,listen,6,0.0.0.0,60113

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\services.exe,all

2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,60113
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61385
2012-07-05T03:30:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-05T03:30:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-05T03:30:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-05T03:30:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52987
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52988
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52989
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52990
2012-07-05T03:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52991
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52992
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52993
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52994
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52995
2012-07-05T03:30:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:30:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52996
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52997
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62956
2012-07-05T03:30:13-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62957
2012-07-05T03:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62958
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702

2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62959
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62960
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62961
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62962
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62963
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62964
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62965
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58701
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53306
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56727
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54059
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54060
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54061
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54062
2012-07-05T03:30:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58977
2012-07-05T03:30:14-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58978
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58979
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58980
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58981
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58982
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58983
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58984
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58985
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58986
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58987
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58988

2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58989
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58990
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58991
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58992
2012-07-05T03:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58993
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58994
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58995
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58996
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58997
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58998
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58999
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59000
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59001
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59002
2012-07-05T03:30:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59003
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,60129
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,60129
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59004
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59005
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59006
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59007
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,389
2012-07-05T03:30:21-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59008
2012-07-05T03:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59009

2012-07-05T03:30:17-03:00,info,appl
listen,17,0.0.0.0,59010
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59011
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59012
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59013
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59014
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59015
2012-07-05T03:30:18-03:00,info,appl
listen,17,0.0.0.0,59016
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,59017
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,59018
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,59019
2012-07-05T03:30:19-03:00,info,appl
w,listen,17,0.0.0.0,49948
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,49949
2012-07-05T03:30:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,49950
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,49951
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,49952
2012-07-05T03:30:19-03:00,info,appl
listen,17,0.0.0.0,49953
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49954
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49955
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49957
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49958
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49959
2012-07-05T03:30:20-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-05T03:30:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49960
2012-07-05T03:30:20-03:00,info,appl
listen,17,0.0.0.0,49961
2012-07-05T03:30:21-03:00,info,appl
w,listen,17,0.0.0.0,50421
2012-07-05T03:30:21-03:00,info,appl
w,listen,17,0.0.0.0,62222
2012-07-05T03:30:21-03:00,info,appl
listen,17,0.0.0.0,62223
2012-07-05T03:30:21-03:00,info,appl
listen,17,0.0.0.0,62224

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.11,389
2012-07-05T03:30:21-03:00,info,appl control,C:\Program Files\UltraVNC\winvnc.exe
,allow,listen,6,0.0.0.0,5800
2012-07-05T03:30:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55755
2012-07-05T03:30:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,54258
2012-07-05T03:30:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56550
2012-07-05T03:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56551
2012-07-05T03:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56552
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56553
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56554
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56555
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56556
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56557
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56558
2012-07-05T03:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56559
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56560
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56561
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56562
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56563
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56564
2012-07-05T03:30:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56565
2012-07-05T03:30:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56566
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56567
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59311

2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59312
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59313
2012-07-05T03:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59314
2012-07-05T03:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59315
2012-07-05T03:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59316
2012-07-05T03:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59317
2012-07-05T03:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59318
2012-07-05T03:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59319
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59320
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59321
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59322
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59323
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59324
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59325
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59326
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59327
2012-07-05T03:30:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59328
2012-07-05T03:30:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59329
2012-07-05T03:30:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59330
2012-07-05T03:30:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59331
2012-07-05T03:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:31:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59332
2012-07-05T03:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-05T03:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59333
2012-07-05T03:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59334
2012-07-05T03:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59335
2012-07-05T03:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59336
2012-07-05T03:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59337
2012-07-05T03:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59338
2012-07-05T03:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59339
2012-07-05T03:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59340
2012-07-05T03:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59341
2012-07-05T03:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59342
2012-07-05T03:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59343
2012-07-05T03:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:32:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59344
2012-07-05T03:32:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59345
2012-07-05T03:32:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59346
2012-07-05T03:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59347
2012-07-05T03:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59348
2012-07-05T03:32:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59349
2012-07-05T03:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59350
2012-07-05T03:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59351
2012-07-05T03:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59352
2012-07-05T03:32:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59353
2012-07-05T03:32:35-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:32:35-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T03:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T03:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59354
2012-07-05T03:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-05T03:33:04-03:00,info,appl
listen,17,0.0.0.0,59355
2012-07-05T03:33:04-03:00,info,appl
listen,17,0.0.0.0,59356
2012-07-05T03:33:05-03:00,info,appl
listen,17,0.0.0.0,59357
2012-07-05T03:33:05-03:00,info,appl
listen,17,0.0.0.0,59358
2012-07-05T03:33:05-03:00,info,appl
listen,17,0.0.0.0,59359
2012-07-05T03:33:06-03:00,info,appl
listen,17,0.0.0.0,59360
2012-07-05T03:33:06-03:00,info,appl
listen,17,0.0.0.0,59361
2012-07-05T03:33:06-03:00,info,appl
listen,17,0.0.0.0,59362
2012-07-05T03:33:06-03:00,info,appl
listen,17,0.0.0.0,59363
2012-07-05T03:33:06-03:00,info,appl
listen,17,0.0.0.0,59364
2012-07-05T03:33:07-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:07-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:07-03:00,info,appl
listen,17,0.0.0.0,59365
2012-07-05T03:33:07-03:00,info,appl
listen,17,0.0.0.0,59366
2012-07-05T03:33:08-03:00,info,appl
listen,17,0.0.0.0,59367
2012-07-05T03:33:08-03:00,info,appl
listen,17,0.0.0.0,59368
2012-07-05T03:33:08-03:00,info,appl
listen,17,0.0.0.0,59369
2012-07-05T03:33:09-03:00,info,appl
listen,17,0.0.0.0,59370
2012-07-05T03:33:09-03:00,info,appl
listen,17,0.0.0.0,59371
2012-07-05T03:33:09-03:00,info,appl
listen,17,0.0.0.0,59372
2012-07-05T03:33:09-03:00,info,appl
listen,17,0.0.0.0,59373
2012-07-05T03:33:10-03:00,info,appl
listen,17,0.0.0.0,59374
2012-07-05T03:33:10-03:00,info,appl
listen,17,0.0.0.0,59375
2012-07-05T03:33:10-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:10-03:00,info,appl
listen,17,0.0.0.0,59376
2012-07-05T03:33:10-03:00,info,appl
listen,17,0.0.0.0,59377
2012-07-05T03:33:11-03:00,info,appl
listen,17,0.0.0.0,59378
2012-07-05T03:33:11-03:00,info,appl
listen,17,0.0.0.0,59379
2012-07-05T03:33:12-03:00,info,appl
listen,17,0.0.0.0,59380

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:12-03:00,info,appl
listen,17,0.0.0.0,59381
2012-07-05T03:33:12-03:00,info,appl
listen,17,0.0.0.0,59382
2012-07-05T03:33:12-03:00,info,appl
listen,17,0.0.0.0,59383
2012-07-05T03:33:13-03:00,info,appl
listen,17,0.0.0.0,59384
2012-07-05T03:33:13-03:00,info,appl
listen,17,0.0.0.0,59385
2012-07-05T03:33:13-03:00,info,appl
listen,17,0.0.0.0,59386
2012-07-05T03:33:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:13-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:13-03:00,info,appl
listen,17,0.0.0.0,59387
2012-07-05T03:33:14-03:00,info,appl
listen,17,0.0.0.0,59388
2012-07-05T03:33:14-03:00,info,appl
listen,17,0.0.0.0,59389
2012-07-05T03:33:15-03:00,info,appl
listen,17,0.0.0.0,59390
2012-07-05T03:33:15-03:00,info,appl
listen,17,0.0.0.0,59391
2012-07-05T03:33:15-03:00,info,appl
listen,17,0.0.0.0,59392
2012-07-05T03:33:16-03:00,info,appl
listen,17,0.0.0.0,59393
2012-07-05T03:33:16-03:00,info,appl
listen,17,0.0.0.0,59394
2012-07-05T03:33:16-03:00,info,appl
listen,17,0.0.0.0,59395
2012-07-05T03:33:16-03:00,info,appl
listen,17,0.0.0.0,59396
2012-07-05T03:33:16-03:00,info,appl
listen,17,0.0.0.0,59397
2012-07-05T03:33:17-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:17-03:00,info,appl
listen,17,0.0.0.0,59398
2012-07-05T03:33:17-03:00,info,appl
listen,17,0.0.0.0,59399
2012-07-05T03:33:18-03:00,info,appl
listen,17,0.0.0.0,59400
2012-07-05T03:33:19-03:00,info,appl
listen,17,0.0.0.0,59401
2012-07-05T03:33:19-03:00,info,appl
listen,17,0.0.0.0,59402
2012-07-05T03:33:19-03:00,info,appl
listen,17,0.0.0.0,59403
2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59404
2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59405
2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59406

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59407
2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59408
2012-07-05T03:33:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:20-03:00,info,appl
listen,17,0.0.0.0,59409
2012-07-05T03:33:21-03:00,info,appl
listen,17,0.0.0.0,59410
2012-07-05T03:33:21-03:00,info,appl
listen,17,0.0.0.0,59411
2012-07-05T03:33:22-03:00,info,appl
listen,17,0.0.0.0,59412
2012-07-05T03:33:22-03:00,info,appl
listen,17,0.0.0.0,59413
2012-07-05T03:33:23-03:00,info,appl
listen,17,0.0.0.0,59414
2012-07-05T03:33:23-03:00,info,appl
send,17,10.1.0.197,389
2012-07-05T03:33:23-03:00,info,appl
listen,17,0.0.0.0,59415
2012-07-05T03:33:23-03:00,info,appl
listen,17,0.0.0.0,59416
2012-07-05T03:33:23-03:00,info,appl
listen,17,0.0.0.0,59417
2012-07-05T03:33:24-03:00,info,appl
listen,17,0.0.0.0,59418
2012-07-05T03:33:24-03:00,info,appl
listen,17,0.0.0.0,59419
2012-07-05T03:33:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:24-03:00,info,appl
listen,17,0.0.0.0,59420
2012-07-05T03:33:24-03:00,info,appl
listen,17,0.0.0.0,59421
2012-07-05T03:33:25-03:00,info,appl
listen,17,0.0.0.0,59422
2012-07-05T03:33:25-03:00,info,appl
listen,17,0.0.0.0,59423
2012-07-05T03:33:26-03:00,info,appl
listen,17,0.0.0.0,59424
2012-07-05T03:33:26-03:00,info,appl
listen,17,0.0.0.0,59425
2012-07-05T03:33:26-03:00,info,appl
listen,17,0.0.0.0,59426
2012-07-05T03:33:27-03:00,info,appl
listen,17,0.0.0.0,59427
2012-07-05T03:33:27-03:00,info,appl
listen,17,0.0.0.0,59428
2012-07-05T03:33:27-03:00,info,appl
listen,17,0.0.0.0,59429
2012-07-05T03:33:27-03:00,info,appl
listen,17,0.0.0.0,59430
2012-07-05T03:33:27-03:00,info,appl
connect out,6,10.10.0.12,1025

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:27-03:00,info,appl
listen,17,0.0.0.0,59431
2012-07-05T03:33:28-03:00,info,appl
listen,17,0.0.0.0,59432
2012-07-05T03:33:28-03:00,info,appl
listen,17,0.0.0.0,59433
2012-07-05T03:33:29-03:00,info,appl
listen,17,0.0.0.0,59434
2012-07-05T03:33:29-03:00,info,appl
listen,17,0.0.0.0,59435
2012-07-05T03:33:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:29-03:00,info,appl
listen,17,0.0.0.0,59436
2012-07-05T03:33:29-03:00,info,appl
listen,17,0.0.0.0,59437
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59438
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59439
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59440
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59441
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59442
2012-07-05T03:33:30-03:00,info,appl
listen,17,0.0.0.0,59443
2012-07-05T03:33:31-03:00,info,appl
listen,17,0.0.0.0,59444
2012-07-05T03:33:31-03:00,info,appl
listen,17,0.0.0.0,59445
2012-07-05T03:33:31-03:00,info,appl
listen,17,0.0.0.0,59446
2012-07-05T03:33:31-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:31-03:00,info,appl
listen,17,0.0.0.0,59447
2012-07-05T03:33:31-03:00,info,appl
listen,17,0.0.0.0,59448
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59449
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59450
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59451
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59452
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59453
2012-07-05T03:33:32-03:00,info,appl
listen,17,0.0.0.0,59454
2012-07-05T03:33:33-03:00,info,appl
listen,17,0.0.0.0,59455
2012-07-05T03:33:33-03:00,info,appl
listen,17,0.0.0.0,59456

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:33-03:00,info,appl
listen,17,0.0.0.0,59457
2012-07-05T03:33:33-03:00,info,appl
listen,17,0.0.0.0,59458
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59459
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59460
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59461
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59462
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59463
2012-07-05T03:33:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:34-03:00,info,appl
listen,17,0.0.0.0,59464
2012-07-05T03:33:35-03:00,info,appl
listen,17,0.0.0.0,59465
2012-07-05T03:33:35-03:00,info,appl
listen,17,0.0.0.0,59466
2012-07-05T03:33:36-03:00,info,appl
listen,17,0.0.0.0,59467
2012-07-05T03:33:36-03:00,info,appl
listen,17,0.0.0.0,59468
2012-07-05T03:33:37-03:00,info,appl
listen,17,0.0.0.0,59469
2012-07-05T03:33:37-03:00,info,appl
listen,17,0.0.0.0,59470
2012-07-05T03:33:37-03:00,info,appl
listen,17,0.0.0.0,59471
2012-07-05T03:33:37-03:00,info,appl
listen,17,0.0.0.0,59472
2012-07-05T03:33:38-03:00,info,appl
listen,17,0.0.0.0,59473
2012-07-05T03:33:38-03:00,info,appl
listen,17,0.0.0.0,59474
2012-07-05T03:33:38-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:38-03:00,info,appl
listen,17,0.0.0.0,59475
2012-07-05T03:33:38-03:00,info,appl
listen,17,0.0.0.0,59476
2012-07-05T03:33:39-03:00,info,appl
listen,17,0.0.0.0,59477
2012-07-05T03:33:40-03:00,info,appl
listen,17,0.0.0.0,59478
2012-07-05T03:33:40-03:00,info,appl
listen,17,0.0.0.0,59479
2012-07-05T03:33:40-03:00,info,appl
listen,17,0.0.0.0,59480
2012-07-05T03:33:41-03:00,info,appl
listen,17,0.0.0.0,59481
2012-07-05T03:33:41-03:00,info,appl
listen,17,0.0.0.0,59482

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59483
2012-07-05T03:33:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59484
2012-07-05T03:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59485
2012-07-05T03:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T03:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59486
2012-07-05T03:33:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59487
2012-07-05T03:33:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59488
2012-07-05T03:33:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.102.0.20,389
2012-07-05T03:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59489
2012-07-05T03:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59490
2012-07-05T03:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59491
2012-07-05T03:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59492
2012-07-05T03:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59493
2012-07-05T03:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59494
2012-07-05T03:33:45-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T03:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59495
2012-07-05T03:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59496
2012-07-05T03:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T03:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59497
2012-07-05T03:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59498
2012-07-05T03:33:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59499
2012-07-05T03:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59500
2012-07-05T03:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59501
2012-07-05T03:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59502
2012-07-05T03:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59503
2012-07-05T03:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59504
2012-07-05T03:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59505
2012-07-05T03:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59506

2012-07-05T03:33:49-03:00,info,appl
listen,17,0.0.0.0,59507
2012-07-05T03:33:50-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:50-03:00,info,appl
listen,17,0.0.0.0,59508
2012-07-05T03:33:50-03:00,info,appl
listen,17,0.0.0.0,59509
2012-07-05T03:33:51-03:00,info,appl
listen,17,0.0.0.0,59510
2012-07-05T03:33:51-03:00,info,appl
listen,17,0.0.0.0,59511
2012-07-05T03:33:51-03:00,info,appl
listen,17,0.0.0.0,59512
2012-07-05T03:33:52-03:00,info,appl
listen,17,0.0.0.0,59513
2012-07-05T03:33:52-03:00,info,appl
listen,17,0.0.0.0,59514
2012-07-05T03:33:52-03:00,info,appl
listen,17,0.0.0.0,59515
2012-07-05T03:33:52-03:00,info,appl
listen,17,0.0.0.0,59516
2012-07-05T03:33:53-03:00,info,appl
listen,17,0.0.0.0,59517
2012-07-05T03:33:53-03:00,info,appl
listen,17,0.0.0.0,59518
2012-07-05T03:33:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:53-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:53-03:00,info,appl
listen,17,0.0.0.0,59519
2012-07-05T03:33:53-03:00,info,appl
listen,17,0.0.0.0,59520
2012-07-05T03:33:54-03:00,info,appl
listen,17,0.0.0.0,59521
2012-07-05T03:33:54-03:00,info,appl
listen,17,0.0.0.0,59522
2012-07-05T03:33:55-03:00,info,appl
listen,17,0.0.0.0,59523
2012-07-05T03:33:55-03:00,info,appl
listen,17,0.0.0.0,59524
2012-07-05T03:33:55-03:00,info,appl
listen,17,0.0.0.0,59525
2012-07-05T03:33:56-03:00,info,appl
listen,17,0.0.0.0,59526
2012-07-05T03:33:56-03:00,info,appl
listen,17,0.0.0.0,59527
2012-07-05T03:33:56-03:00,info,appl
listen,17,0.0.0.0,59528
2012-07-05T03:33:56-03:00,info,appl
listen,17,0.0.0.0,59529
2012-07-05T03:33:56-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T03:33:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T03:33:56-03:00,info,appl
listen,17,0.0.0.0,59530

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T03:33:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59531
2012-07-05T03:33:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59532
2012-07-05T03:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59533
2012-07-05T03:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59534
2012-07-05T03:33:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59535
2012-07-05T03:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59536
2012-07-05T03:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59537
2012-07-05T03:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59538
2012-07-05T03:33:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59539
2012-07-05T03:34:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59540
2012-07-05T03:34:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:34:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59541
2012-07-05T03:34:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:34:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59542
2012-07-05T03:34:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59543
2012-07-05T03:34:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59544
2012-07-05T03:34:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59545
2012-07-05T03:34:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59546
2012-07-05T03:34:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59547
2012-07-05T03:34:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59548
2012-07-05T03:34:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59549
2012-07-05T03:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59550
2012-07-05T03:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59551
2012-07-05T03:35:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:35:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:35:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:35:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59552
2012-07-05T03:35:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:35:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59553
2012-07-05T03:35:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59554

2012-07-05T03:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59555
2012-07-05T03:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59556
2012-07-05T03:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59557
2012-07-05T03:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59558
2012-07-05T03:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59559
2012-07-05T03:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59560
2012-07-05T03:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59561
2012-07-05T03:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59562
2012-07-05T03:37:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:37:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:37:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:38:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:40:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:40:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52140
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52141
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52142
2012-07-05T03:40:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64704
2012-07-05T03:40:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:40:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64705
2012-07-05T03:40:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64706
2012-07-05T03:40:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64707
2012-07-05T03:40:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64708
2012-07-05T03:40:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64709
2012-07-05T03:40:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64710
2012-07-05T03:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64711
2012-07-05T03:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64712

2012-07-05T03:40:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64713
2012-07-05T03:44:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:44:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:44:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:45:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:45:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T03:45:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T03:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64714
2012-07-05T03:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T03:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64715
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50267
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50268
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50269
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57540
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57541
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57542
2012-07-05T03:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57543
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57544
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59813
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59814
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59815
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59816
2012-07-05T03:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59817
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59818
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59819

2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59820
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59821
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59822
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59823
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59824
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59825
2012-07-05T03:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59826
2012-07-05T03:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59827
2012-07-05T03:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59828
2012-07-05T03:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T03:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59829
2012-07-05T03:45:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54657
2012-07-05T03:45:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T03:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54658
2012-07-05T03:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54659
2012-07-05T03:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54660
2012-07-05T03:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54661
2012-07-05T03:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54662
2012-07-05T03:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54663
2012-07-05T03:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54664
2012-07-05T03:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54665
2012-07-05T03:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54666
2012-07-05T03:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54667
2012-07-05T03:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54668
2012-07-05T03:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54669
2012-07-05T03:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-05T03:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54670
2012-07-05T03:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54671
2012-07-05T03:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54672
2012-07-05T03:49:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54673
2012-07-05T03:49:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54674
2012-07-05T03:49:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54675
2012-07-05T03:49:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54676
2012-07-05T03:49:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54677
2012-07-05T03:49:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54678
2012-07-05T03:49:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54679
2012-07-05T03:50:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:50:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:50:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:50:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62501
2012-07-05T03:50:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T03:50:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62502
2012-07-05T03:50:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62503
2012-07-05T03:50:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54929
2012-07-05T03:50:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T03:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54930
2012-07-05T03:50:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54931
2012-07-05T03:50:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54932
2012-07-05T03:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54933
2012-07-05T03:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54934
2012-07-05T03:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54935
2012-07-05T03:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54936
2012-07-05T03:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54937
2012-07-05T03:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54938
2012-07-05T03:51:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T03:51:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:52:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:55:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T03:55:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T03:55:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T03:55:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54939
2012-07-05T03:55:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T03:55:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54940
2012-07-05T03:55:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54941
2012-07-05T03:55:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54942
2012-07-05T03:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54943
2012-07-05T03:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54944
2012-07-05T03:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54945
2012-07-05T03:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54946
2012-07-05T03:55:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54947
2012-07-05T03:55:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54948
2012-07-05T03:55:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54949
2012-07-05T03:58:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T03:58:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:59:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T03:59:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:00:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:00:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:00:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53125
2012-07-05T04:00:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53126

2012-07-05T04:00:33-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T04:00:34-03:00,info,appl
listen,17,0.0.0.0,53127
2012-07-05T04:00:34-03:00,info,appl
w,listen,17,0.0.0.0,49200
2012-07-05T04:00:34-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T04:00:34-03:00,info,appl
listen,17,0.0.0.0,49201
2012-07-05T04:00:35-03:00,info,appl
listen,17,0.0.0.0,49202
2012-07-05T04:00:35-03:00,info,appl
listen,17,0.0.0.0,49203
2012-07-05T04:00:35-03:00,info,appl
listen,17,0.0.0.0,49204
2012-07-05T04:00:36-03:00,info,appl
listen,17,0.0.0.0,49205
2012-07-05T04:00:36-03:00,info,appl
listen,17,0.0.0.0,49206
2012-07-05T04:00:36-03:00,info,appl
listen,17,0.0.0.0,49207
2012-07-05T04:00:36-03:00,info,appl
listen,17,0.0.0.0,49208
2012-07-05T04:00:36-03:00,info,appl
listen,17,0.0.0.0,49209
2012-07-05T04:00:42-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-05T04:00:42-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T04:00:42-03:00,info,appl
listen,17,0.0.0.0,49210
2012-07-05T04:00:43-03:00,info,appl
listen,17,0.0.0.0,49211
2012-07-05T04:00:43-03:00,info,appl
listen,17,0.0.0.0,49212
2012-07-05T04:00:44-03:00,info,appl
listen,17,0.0.0.0,49213
2012-07-05T04:00:44-03:00,info,appl
listen,17,0.0.0.0,49214
2012-07-05T04:00:44-03:00,info,appl
listen,17,0.0.0.0,49215
2012-07-05T04:00:45-03:00,info,appl
listen,17,0.0.0.0,49216
2012-07-05T04:00:45-03:00,info,appl
listen,17,0.0.0.0,49217
2012-07-05T04:00:45-03:00,info,appl
listen,17,0.0.0.0,49218
2012-07-05T04:00:45-03:00,info,appl
listen,17,0.0.0.0,49219
2012-07-05T04:00:45-03:00,info,appl
listen,17,0.0.0.0,49220
2012-07-05T04:04:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T04:04:39-03:00,info,appl
listen,17,0.0.0.0,49221
2012-07-05T04:04:39-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T04:04:40-03:00,info,appl
listen,17,0.0.0.0,49222

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T04:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49223
2012-07-05T04:04:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49224
2012-07-05T04:04:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49225
2012-07-05T04:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49226
2012-07-05T04:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49227
2012-07-05T04:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49228
2012-07-05T04:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49229
2012-07-05T04:04:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49230
2012-07-05T04:04:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49231
2012-07-05T04:05:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:05:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49232
2012-07-05T04:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49233
2012-07-05T04:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49234
2012-07-05T04:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49235
2012-07-05T04:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49236
2012-07-05T04:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49237
2012-07-05T04:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49238
2012-07-05T04:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49239
2012-07-05T04:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49240
2012-07-05T04:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49241
2012-07-05T04:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49242
2012-07-05T04:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:05:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:06:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:06:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:10:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:10:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025

2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64797
2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64798
2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:10:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64799
2012-07-05T04:10:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57580
2012-07-05T04:10:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:10:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57581
2012-07-05T04:10:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57582
2012-07-05T04:10:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57583
2012-07-05T04:10:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57584
2012-07-05T04:10:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57585
2012-07-05T04:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57586
2012-07-05T04:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57587
2012-07-05T04:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57588
2012-07-05T04:10:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57589
2012-07-05T04:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:12:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:13:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:13:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49234
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49235
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49236
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025

2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56254
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56255
2012-07-05T04:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56256
2012-07-05T04:15:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51287
2012-07-05T04:15:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:15:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51288
2012-07-05T04:15:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51289
2012-07-05T04:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51290
2012-07-05T04:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51291
2012-07-05T04:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51292
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51293
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51294
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51295
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51296
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60924
2012-07-05T04:15:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:15:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:15:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:15:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:15:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60925
2012-07-05T04:15:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60926
2012-07-05T04:15:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60927
2012-07-05T04:15:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60928
2012-07-05T04:15:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60929
2012-07-05T04:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60930
2012-07-05T04:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60931
2012-07-05T04:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60932
2012-07-05T04:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60933
2012-07-05T04:15:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60934
2012-07-05T04:15:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60935

2012-07-05T04:15:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T04:15:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:15:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60936
2012-07-05T04:15:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60937
2012-07-05T04:15:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60938
2012-07-05T04:15:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60939
2012-07-05T04:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60940
2012-07-05T04:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60941
2012-07-05T04:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60942
2012-07-05T04:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60943
2012-07-05T04:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60944
2012-07-05T04:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60945
2012-07-05T04:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60946
2012-07-05T04:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60947
2012-07-05T04:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60948
2012-07-05T04:19:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60949
2012-07-05T04:19:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60950
2012-07-05T04:19:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60951
2012-07-05T04:19:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60952
2012-07-05T04:19:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60953
2012-07-05T04:19:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60954
2012-07-05T04:19:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60955
2012-07-05T04:19:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60956
2012-07-05T04:19:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60957
2012-07-05T04:19:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:19:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:20:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:20:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135

2012-07-05T04:20:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52471
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52472
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T04:20:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52473
2012-07-05T04:20:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58628
2012-07-05T04:20:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:20:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58629
2012-07-05T04:20:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58630
2012-07-05T04:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58631
2012-07-05T04:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58632
2012-07-05T04:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58633
2012-07-05T04:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58634
2012-07-05T04:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58635
2012-07-05T04:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58636
2012-07-05T04:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58637
2012-07-05T04:20:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:25:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:25:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58638
2012-07-05T04:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58639
2012-07-05T04:25:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58640
2012-07-05T04:25:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58641
2012-07-05T04:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58642
2012-07-05T04:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58643
2012-07-05T04:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58644

2012-07-05T04:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58645
2012-07-05T04:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58646
2012-07-05T04:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58647
2012-07-05T04:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58648
2012-07-05T04:27:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:27:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:27:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:28:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64744
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:30:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T04:30:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55201
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52587
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52588
2012-07-05T04:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:30:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52589
2012-07-05T04:30:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56213
2012-07-05T04:30:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:30:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62045
2012-07-05T04:30:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62046
2012-07-05T04:30:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52479
2012-07-05T04:30:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52480
2012-07-05T04:30:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59453
2012-07-05T04:30:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59454

2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63905
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63906
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59335
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59336
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49645
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49646
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49526
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49527
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50431
2012-07-05T04:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50432
2012-07-05T04:30:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53921
2012-07-05T04:30:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53922
2012-07-05T04:30:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T04:30:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:30:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53923
2012-07-05T04:30:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53924
2012-07-05T04:30:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53925
2012-07-05T04:30:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53926
2012-07-05T04:30:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53927
2012-07-05T04:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53928
2012-07-05T04:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53929
2012-07-05T04:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53930
2012-07-05T04:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53931
2012-07-05T04:31:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53932
2012-07-05T04:31:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53933
2012-07-05T04:32:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55383
2012-07-05T04:32:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:32:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52597
2012-07-05T04:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:34:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T04:34:40-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T04:34:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T04:34:46-03:00,info,appl
listen,17,0.0.0.0,52598
2012-07-05T04:34:46-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T04:34:46-03:00,info,appl
listen,17,0.0.0.0,52599
2012-07-05T04:34:47-03:00,info,appl
listen,17,0.0.0.0,52600
2012-07-05T04:34:47-03:00,info,appl
listen,17,0.0.0.0,52601
2012-07-05T04:34:48-03:00,info,appl
listen,17,0.0.0.0,52602
2012-07-05T04:34:48-03:00,info,appl
listen,17,0.0.0.0,52603
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,52604
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,52605
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,52606
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,52607
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,52608
2012-07-05T04:34:49-03:00,info,appl
w,listen,17,0.0.0.0,59871
2012-07-05T04:34:49-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-05T04:34:49-03:00,info,appl
listen,17,0.0.0.0,59872
2012-07-05T04:34:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T04:34:50-03:00,info,appl
listen,17,0.0.0.0,59873
2012-07-05T04:34:50-03:00,info,appl
listen,17,0.0.0.0,59874
2012-07-05T04:34:51-03:00,info,appl
listen,17,0.0.0.0,59875
2012-07-05T04:34:51-03:00,info,appl
listen,17,0.0.0.0,59876
2012-07-05T04:34:51-03:00,info,appl
listen,17,0.0.0.0,59877
2012-07-05T04:34:52-03:00,info,appl
listen,17,0.0.0.0,59878
2012-07-05T04:34:52-03:00,info,appl
listen,17,0.0.0.0,59879
2012-07-05T04:34:52-03:00,info,appl
listen,17,0.0.0.0,59880
2012-07-05T04:34:52-03:00,info,appl
listen,17,0.0.0.0,59881
2012-07-05T04:34:53-03:00,info,appl
listen,17,0.0.0.0,59882
2012-07-05T04:34:53-03:00,info,appl
listen,17,0.0.0.0,59883
2012-07-05T04:35:12-03:00,info,appl
,send,17,FF02::1:2,547

control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny

2012-07-05T04:35:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T04:35:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T04:35:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:35:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59884
2012-07-05T04:35:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:35:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59885
2012-07-05T04:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59886
2012-07-05T04:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59887
2012-07-05T04:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59888
2012-07-05T04:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59889
2012-07-05T04:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59890
2012-07-05T04:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59891
2012-07-05T04:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59892
2012-07-05T04:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59893
2012-07-05T04:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59894
2012-07-05T04:41:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T04:41:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T04:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:41:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59093
2012-07-05T04:41:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T04:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59094
2012-07-05T04:41:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T04:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59095
2012-07-05T04:41:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54726
2012-07-05T04:41:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54727
2012-07-05T04:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54728
2012-07-05T04:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54729
2012-07-05T04:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54730
2012-07-05T04:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54731

2012-07-05T04:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54732
2012-07-05T04:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54733
2012-07-05T04:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54734
2012-07-05T04:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54735
2012-07-05T04:41:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:41:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:41:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:42:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T04:46:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T04:46:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:46:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54736
2012-07-05T04:46:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T04:46:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54737
2012-07-05T04:46:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54738
2012-07-05T04:46:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54739
2012-07-05T04:46:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54740
2012-07-05T04:46:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54741
2012-07-05T04:46:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54742
2012-07-05T04:46:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54743
2012-07-05T04:46:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T04:46:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54744
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54745
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54746
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54747
2012-07-05T04:46:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54748
2012-07-05T04:46:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54749

2012-07-05T04:46:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54750
2012-07-05T04:46:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54751
2012-07-05T04:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54752
2012-07-05T04:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54753
2012-07-05T04:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54754
2012-07-05T04:46:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54755
2012-07-05T04:46:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54756
2012-07-05T04:46:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54757
2012-07-05T04:48:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:48:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:48:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:49:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54758
2012-07-05T04:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54759
2012-07-05T04:49:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-05T04:49:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54761
2012-07-05T04:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54762
2012-07-05T04:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54763
2012-07-05T04:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54764
2012-07-05T04:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54765
2012-07-05T04:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54766
2012-07-05T04:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54767
2012-07-05T04:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54768
2012-07-05T04:51:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T04:51:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55516
2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55517
2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55518
2012-07-05T04:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58510
2012-07-05T04:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T04:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58511
2012-07-05T04:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58512
2012-07-05T04:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58513
2012-07-05T04:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58514
2012-07-05T04:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58515
2012-07-05T04:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58516
2012-07-05T04:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58517
2012-07-05T04:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58518
2012-07-05T04:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58519
2012-07-05T04:55:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T04:55:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:56:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T04:56:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T04:56:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T04:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T04:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58520
2012-07-05T04:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T04:56:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58521
2012-07-05T04:56:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58522
2012-07-05T04:56:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58523
2012-07-05T04:56:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58524
2012-07-05T04:56:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58525
2012-07-05T04:56:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58526
2012-07-05T04:56:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58527
2012-07-05T04:56:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58528

2012-07-05T04:56:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58529
2012-07-05T04:56:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58530
2012-07-05T04:56:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T05:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58531
2012-07-05T05:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.132,12110
2012-07-05T05:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:00:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-05T05:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T05:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58532
2012-07-05T05:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T05:01:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58533
2012-07-05T05:01:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58534
2012-07-05T05:01:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58535
2012-07-05T05:01:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58536
2012-07-05T05:01:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58537
2012-07-05T05:01:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58538
2012-07-05T05:01:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58539
2012-07-05T05:01:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58540
2012-07-05T05:01:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58541
2012-07-05T05:01:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58542
2012-07-05T05:01:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:01:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:01:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55102
2012-07-05T05:01:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55103
2012-07-05T05:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55104
2012-07-05T05:01:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49190
2012-07-05T05:01:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:01:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49191
2012-07-05T05:01:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49192
2012-07-05T05:01:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49193
2012-07-05T05:01:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49194
2012-07-05T05:01:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49195
2012-07-05T05:01:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49196
2012-07-05T05:01:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49197
2012-07-05T05:01:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49198
2012-07-05T05:01:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49199
2012-07-05T05:02:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:02:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:03:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:03:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-05T05:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49200
2012-07-05T05:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49201
2012-07-05T05:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49202
2012-07-05T05:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49203
2012-07-05T05:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49204
2012-07-05T05:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49205
2012-07-05T05:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49206
2012-07-05T05:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49207
2012-07-05T05:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49208
2012-07-05T05:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49209
2012-07-05T05:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49210
2012-07-05T05:05:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.35,2911
2012-07-05T05:05:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,3805
2012-07-05T05:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49211
2012-07-05T05:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:06:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:06:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49212
2012-07-05T05:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49213
2012-07-05T05:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49214
2012-07-05T05:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49215
2012-07-05T05:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49216
2012-07-05T05:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49217
2012-07-05T05:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49218
2012-07-05T05:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49219
2012-07-05T05:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49220
2012-07-05T05:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49221
2012-07-05T05:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49222
2012-07-05T05:09:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:09:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:10:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:10:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:11:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:11:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56722
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56723
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T05:11:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56724
2012-07-05T05:11:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50412
2012-07-05T05:11:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50413
2012-07-05T05:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50414
2012-07-05T05:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50415
2012-07-05T05:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50416
2012-07-05T05:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50417
2012-07-05T05:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50418
2012-07-05T05:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50419
2012-07-05T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50420
2012-07-05T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50421
2012-07-05T05:12:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,61898
2012-07-05T05:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,4677
2012-07-05T05:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52140
2012-07-05T05:15:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:15:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52141
2012-07-05T05:15:54-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T05:15:54-03:00,info,appl
listen,17,0.0.0.0,52142
2012-07-05T05:15:54-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T05:15:54-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:15:54-03:00,info,appl
w,listen,17,0.0.0.0,62743
2012-07-05T05:15:54-03:00,info,appl
listen,17,0.0.0.0,62744
2012-07-05T05:15:55-03:00,info,appl
listen,17,0.0.0.0,62745
2012-07-05T05:15:55-03:00,info,appl
w,listen,17,0.0.0.0,51497
2012-07-05T05:15:55-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T05:15:55-03:00,info,appl
listen,17,0.0.0.0,51498
2012-07-05T05:15:56-03:00,info,appl
listen,17,0.0.0.0,51499
2012-07-05T05:15:56-03:00,info,appl
listen,17,0.0.0.0,51500
2012-07-05T05:15:56-03:00,info,appl
listen,17,0.0.0.0,51501
2012-07-05T05:15:57-03:00,info,appl
listen,17,0.0.0.0,51502
2012-07-05T05:15:57-03:00,info,appl
listen,17,0.0.0.0,51503
2012-07-05T05:15:57-03:00,info,appl
listen,17,0.0.0.0,51504
2012-07-05T05:15:57-03:00,info,appl
listen,17,0.0.0.0,51505
2012-07-05T05:15:57-03:00,info,appl
listen,17,0.0.0.0,51506
2012-07-05T05:15:58-03:00,info,appl
w,listen,17,0.0.0.0,56306
2012-07-05T05:15:58-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T05:16:09-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-05T05:16:09-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T05:16:09-03:00,info,appl
listen,17,0.0.0.0,56307
2012-07-05T05:16:10-03:00,info,appl
listen,17,0.0.0.0,56308
2012-07-05T05:16:10-03:00,info,appl
listen,17,0.0.0.0,56309
2012-07-05T05:16:11-03:00,info,appl
listen,17,0.0.0.0,56310
2012-07-05T05:16:11-03:00,info,appl
listen,17,0.0.0.0,56311
2012-07-05T05:16:11-03:00,info,appl
listen,17,0.0.0.0,56312
2012-07-05T05:16:12-03:00,info,appl
listen,17,0.0.0.0,56313
2012-07-05T05:16:12-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56314
2012-07-05T05:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56315
2012-07-05T05:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56316
2012-07-05T05:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56317
2012-07-05T05:16:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T05:16:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T05:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56318
2012-07-05T05:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56319
2012-07-05T05:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56320
2012-07-05T05:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56321
2012-07-05T05:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56322
2012-07-05T05:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56323
2012-07-05T05:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56324
2012-07-05T05:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56325
2012-07-05T05:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56326
2012-07-05T05:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56327
2012-07-05T05:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56328
2012-07-05T05:16:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:16:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:16:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.34,4548
2012-07-05T05:17:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:17:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56329
2012-07-05T05:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56330
2012-07-05T05:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56331
2012-07-05T05:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56332
2012-07-05T05:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56333
2012-07-05T05:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56334
2012-07-05T05:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56335
2012-07-05T05:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56336
2012-07-05T05:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56337
2012-07-05T05:20:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56338
2012-07-05T05:20:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56339
2012-07-05T05:21:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,1998
2012-07-05T05:21:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T05:21:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T05:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60133
2012-07-05T05:21:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60134
2012-07-05T05:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60135
2012-07-05T05:21:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54921
2012-07-05T05:21:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54922
2012-07-05T05:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54923
2012-07-05T05:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54924
2012-07-05T05:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54925
2012-07-05T05:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54926
2012-07-05T05:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54927
2012-07-05T05:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54928
2012-07-05T05:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54929
2012-07-05T05:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54930
2012-07-05T05:21:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,59011
2012-07-05T05:23:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:23:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:24:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T05:24:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,52522
2012-07-05T05:24:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,54971
2012-07-05T05:25:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:26:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T05:26:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54931
2012-07-05T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54932
2012-07-05T05:26:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54933
2012-07-05T05:26:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54934
2012-07-05T05:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54935
2012-07-05T05:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54936
2012-07-05T05:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54937
2012-07-05T05:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54938
2012-07-05T05:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54939
2012-07-05T05:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54940
2012-07-05T05:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54941
2012-07-05T05:26:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.66,2580
2012-07-05T05:27:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.63,50567
2012-07-05T05:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:31:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:31:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52259
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49621
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49622
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:31:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49623
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54697
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54698
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60711
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60712
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55218
2012-07-05T05:31:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55219
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60048
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60049
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59797
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59798
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49811
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49812
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58612
2012-07-05T05:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58613
2012-07-05T05:31:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63370
2012-07-05T05:31:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63371
2012-07-05T05:31:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61998
2012-07-05T05:31:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61999
2012-07-05T05:31:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T05:31:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56745
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56746
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:31:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56747
2012-07-05T05:31:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56129
2012-07-05T05:31:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:31:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56130
2012-07-05T05:31:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56131
2012-07-05T05:31:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:31:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56132
2012-07-05T05:31:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56133
2012-07-05T05:31:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56134
2012-07-05T05:31:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56135
2012-07-05T05:31:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56136
2012-07-05T05:31:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56137
2012-07-05T05:31:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56138
2012-07-05T05:31:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,1975
2012-07-05T05:32:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56139
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T05:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56140
2012-07-05T05:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56141
2012-07-05T05:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56142
2012-07-05T05:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56143
2012-07-05T05:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56144
2012-07-05T05:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56145
2012-07-05T05:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56146
2012-07-05T05:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56147
2012-07-05T05:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56148
2012-07-05T05:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56149
2012-07-05T05:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,1025
2012-07-05T05:33:03-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:03-03:00,info,appl
listen,17,0.0.0.0,56150
2012-07-05T05:33:03-03:00,info,appl
listen,17,0.0.0.0,56151
2012-07-05T05:33:04-03:00,info,appl
listen,17,0.0.0.0,56152
2012-07-05T05:33:04-03:00,info,appl
listen,17,0.0.0.0,56153
2012-07-05T05:33:05-03:00,info,appl
listen,17,0.0.0.0,56154
2012-07-05T05:33:05-03:00,info,appl
listen,17,0.0.0.0,56155
2012-07-05T05:33:05-03:00,info,appl
listen,17,0.0.0.0,56156
2012-07-05T05:33:06-03:00,info,appl
listen,17,0.0.0.0,56157
2012-07-05T05:33:06-03:00,info,appl
listen,17,0.0.0.0,56158
2012-07-05T05:33:06-03:00,info,appl
listen,17,0.0.0.0,56159
2012-07-05T05:33:06-03:00,info,appl
listen,17,0.0.0.0,56160
2012-07-05T05:33:06-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:06-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:06-03:00,info,appl
listen,17,0.0.0.0,56161
2012-07-05T05:33:07-03:00,info,appl
listen,17,0.0.0.0,56162
2012-07-05T05:33:07-03:00,info,appl
listen,17,0.0.0.0,56163
2012-07-05T05:33:08-03:00,info,appl
listen,17,0.0.0.0,56164
2012-07-05T05:33:08-03:00,info,appl
listen,17,0.0.0.0,56165
2012-07-05T05:33:09-03:00,info,appl
listen,17,0.0.0.0,56166
2012-07-05T05:33:09-03:00,info,appl
listen,17,0.0.0.0,56167
2012-07-05T05:33:09-03:00,info,appl
listen,17,0.0.0.0,56168
2012-07-05T05:33:09-03:00,info,appl
listen,17,0.0.0.0,56169
2012-07-05T05:33:09-03:00,info,appl
listen,17,0.0.0.0,56170
2012-07-05T05:33:10-03:00,info,appl
listen,17,0.0.0.0,56171
2012-07-05T05:33:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:10-03:00,info,appl
listen,17,0.0.0.0,56172
2012-07-05T05:33:10-03:00,info,appl
listen,17,0.0.0.0,56173
2012-07-05T05:33:11-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56174
2012-07-05T05:33:11-03:00,info,appl
listen,17,0.0.0.0,56175
2012-07-05T05:33:12-03:00,info,appl
listen,17,0.0.0.0,56176
2012-07-05T05:33:12-03:00,info,appl
listen,17,0.0.0.0,56177
2012-07-05T05:33:12-03:00,info,appl
listen,17,0.0.0.0,56178
2012-07-05T05:33:12-03:00,info,appl
listen,17,0.0.0.0,56179
2012-07-05T05:33:13-03:00,info,appl
listen,17,0.0.0.0,56180
2012-07-05T05:33:13-03:00,info,appl
listen,17,0.0.0.0,56181
2012-07-05T05:33:13-03:00,info,appl
listen,17,0.0.0.0,56182
2012-07-05T05:33:14-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:14-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:14-03:00,info,appl
listen,17,0.0.0.0,56183
2012-07-05T05:33:14-03:00,info,appl
listen,17,0.0.0.0,56184
2012-07-05T05:33:15-03:00,info,appl
listen,17,0.0.0.0,56185
2012-07-05T05:33:15-03:00,info,appl
listen,17,0.0.0.0,56186
2012-07-05T05:33:15-03:00,info,appl
listen,17,0.0.0.0,56187
2012-07-05T05:33:16-03:00,info,appl
listen,17,0.0.0.0,56188
2012-07-05T05:33:16-03:00,info,appl
listen,17,0.0.0.0,56189
2012-07-05T05:33:16-03:00,info,appl
listen,17,0.0.0.0,56190
2012-07-05T05:33:16-03:00,info,appl
listen,17,0.0.0.0,56191
2012-07-05T05:33:17-03:00,info,appl
listen,17,0.0.0.0,56192
2012-07-05T05:33:17-03:00,info,appl
listen,17,0.0.0.0,56193
2012-07-05T05:33:17-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:17-03:00,info,appl
listen,17,0.0.0.0,56194
2012-07-05T05:33:17-03:00,info,appl
listen,17,0.0.0.0,56195
2012-07-05T05:33:18-03:00,info,appl
listen,17,0.0.0.0,56196
2012-07-05T05:33:18-03:00,info,appl
listen,17,0.0.0.0,56197
2012-07-05T05:33:19-03:00,info,appl
listen,17,0.0.0.0,56198
2012-07-05T05:33:19-03:00,info,appl
send,17,10.108.0.153,389
2012-07-05T05:33:19-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56199
2012-07-05T05:33:19-03:00,info,appl
listen,17,0.0.0.0,56200
2012-07-05T05:33:20-03:00,info,appl
listen,17,0.0.0.0,56201
2012-07-05T05:33:20-03:00,info,appl
listen,17,0.0.0.0,56202
2012-07-05T05:33:20-03:00,info,appl
listen,17,0.0.0.0,56203
2012-07-05T05:33:20-03:00,info,appl
listen,17,0.0.0.0,56204
2012-07-05T05:33:20-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:20-03:00,info,appl
listen,17,0.0.0.0,56205
2012-07-05T05:33:21-03:00,info,appl
listen,17,0.0.0.0,56206
2012-07-05T05:33:21-03:00,info,appl
listen,17,0.0.0.0,56207
2012-07-05T05:33:22-03:00,info,appl
listen,17,0.0.0.0,56208
2012-07-05T05:33:22-03:00,info,appl
listen,17,0.0.0.0,56209
2012-07-05T05:33:23-03:00,info,appl
listen,17,0.0.0.0,56210
2012-07-05T05:33:23-03:00,info,appl
listen,17,0.0.0.0,56211
2012-07-05T05:33:23-03:00,info,appl
listen,17,0.0.0.0,56212
2012-07-05T05:33:23-03:00,info,appl
listen,17,0.0.0.0,56213
2012-07-05T05:33:23-03:00,info,appl
listen,17,0.0.0.0,56214
2012-07-05T05:33:24-03:00,info,appl
listen,17,0.0.0.0,56215
2012-07-05T05:33:24-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:24-03:00,info,appl
listen,17,0.0.0.0,56216
2012-07-05T05:33:24-03:00,info,appl
listen,17,0.0.0.0,56217
2012-07-05T05:33:25-03:00,info,appl
listen,17,0.0.0.0,56218
2012-07-05T05:33:25-03:00,info,appl
listen,17,0.0.0.0,56219
2012-07-05T05:33:25-03:00,info,appl
listen,17,0.0.0.0,56220
2012-07-05T05:33:26-03:00,info,appl
listen,17,0.0.0.0,56221
2012-07-05T05:33:26-03:00,info,appl
listen,17,0.0.0.0,56222
2012-07-05T05:33:26-03:00,info,appl
listen,17,0.0.0.0,56223
2012-07-05T05:33:26-03:00,info,appl
listen,17,0.0.0.0,56224
2012-07-05T05:33:27-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56225
2012-07-05T05:33:27-03:00,info,appl
listen,17,0.0.0.0,56226
2012-07-05T05:33:27-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:27-03:00,info,appl
listen,17,0.0.0.0,56227
2012-07-05T05:33:28-03:00,info,appl
listen,17,0.0.0.0,56228
2012-07-05T05:33:29-03:00,info,appl
listen,17,0.0.0.0,56229
2012-07-05T05:33:29-03:00,info,appl
listen,17,0.0.0.0,56230
2012-07-05T05:33:29-03:00,info,appl
listen,17,0.0.0.0,56231
2012-07-05T05:33:30-03:00,info,appl
listen,17,0.0.0.0,56232
2012-07-05T05:33:30-03:00,info,appl
listen,17,0.0.0.0,56233
2012-07-05T05:33:30-03:00,info,appl
listen,17,0.0.0.0,56234
2012-07-05T05:33:30-03:00,info,appl
listen,17,0.0.0.0,56235
2012-07-05T05:33:31-03:00,info,appl
listen,17,0.0.0.0,56236
2012-07-05T05:33:31-03:00,info,appl
listen,17,0.0.0.0,56237
2012-07-05T05:33:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:31-03:00,info,appl
listen,17,0.0.0.0,56238
2012-07-05T05:33:31-03:00,info,appl
listen,17,0.0.0.0,56239
2012-07-05T05:33:32-03:00,info,appl
listen,17,0.0.0.0,56240
2012-07-05T05:33:32-03:00,info,appl
listen,17,0.0.0.0,56241
2012-07-05T05:33:33-03:00,info,appl
listen,17,0.0.0.0,56242
2012-07-05T05:33:33-03:00,info,appl
listen,17,0.0.0.0,56243
2012-07-05T05:33:33-03:00,info,appl
listen,17,0.0.0.0,56244
2012-07-05T05:33:34-03:00,info,appl
listen,17,0.0.0.0,56245
2012-07-05T05:33:34-03:00,info,appl
listen,17,0.0.0.0,56246
2012-07-05T05:33:34-03:00,info,appl
listen,17,0.0.0.0,56247
2012-07-05T05:33:34-03:00,info,appl
listen,17,0.0.0.0,56248
2012-07-05T05:33:34-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:34-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56249
2012-07-05T05:33:35-03:00,info,appl
listen,17,0.0.0.0,56250
2012-07-05T05:33:35-03:00,info,appl
listen,17,0.0.0.0,56251
2012-07-05T05:33:36-03:00,info,appl
listen,17,0.0.0.0,56252
2012-07-05T05:33:36-03:00,info,appl
listen,17,0.0.0.0,56253
2012-07-05T05:33:36-03:00,info,appl
listen,17,0.0.0.0,56254
2012-07-05T05:33:37-03:00,info,appl
listen,17,0.0.0.0,56255
2012-07-05T05:33:37-03:00,info,appl
listen,17,0.0.0.0,56256
2012-07-05T05:33:37-03:00,info,appl
listen,17,0.0.0.0,56257
2012-07-05T05:33:37-03:00,info,appl
listen,17,0.0.0.0,56258
2012-07-05T05:33:37-03:00,info,appl
listen,17,0.0.0.0,56259
2012-07-05T05:33:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:38-03:00,info,appl
listen,17,0.0.0.0,56260
2012-07-05T05:33:38-03:00,info,appl
listen,17,0.0.0.0,56261
2012-07-05T05:33:39-03:00,info,appl
listen,17,0.0.0.0,56262
2012-07-05T05:33:39-03:00,info,appl
listen,17,0.0.0.0,56263
2012-07-05T05:33:39-03:00,info,appl
send,17,10.101.0.11,389
2012-07-05T05:33:39-03:00,info,appl
listen,17,0.0.0.0,56264
2012-07-05T05:33:40-03:00,info,appl
listen,17,0.0.0.0,56265
2012-07-05T05:33:40-03:00,info,appl
listen,17,0.0.0.0,56266
2012-07-05T05:33:40-03:00,info,appl
listen,17,0.0.0.0,56267
2012-07-05T05:33:40-03:00,info,appl
listen,17,0.0.0.0,56268
2012-07-05T05:33:41-03:00,info,appl
listen,17,0.0.0.0,56269
2012-07-05T05:33:41-03:00,info,appl
listen,17,0.0.0.0,56270
2012-07-05T05:33:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:41-03:00,info,appl
listen,17,0.0.0.0,56271
2012-07-05T05:33:42-03:00,info,appl
listen,17,0.0.0.0,56272
2012-07-05T05:33:42-03:00,info,appl
listen,17,0.0.0.0,56273
2012-07-05T05:33:43-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56274
2012-07-05T05:33:43-03:00,info,appl
listen,17,0.0.0.0,56275
2012-07-05T05:33:44-03:00,info,appl
listen,17,0.0.0.0,56276
2012-07-05T05:33:44-03:00,info,appl
listen,17,0.0.0.0,56277
2012-07-05T05:33:44-03:00,info,appl
listen,17,0.0.0.0,56278
2012-07-05T05:33:44-03:00,info,appl
listen,17,0.0.0.0,56279
2012-07-05T05:33:44-03:00,info,appl
listen,17,0.0.0.0,56280
2012-07-05T05:33:45-03:00,info,appl
listen,17,0.0.0.0,56281
2012-07-05T05:33:45-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:45-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:45-03:00,info,appl
listen,17,0.0.0.0,56282
2012-07-05T05:33:45-03:00,info,appl
listen,17,0.0.0.0,56283
2012-07-05T05:33:46-03:00,info,appl
listen,17,0.0.0.0,56284
2012-07-05T05:33:46-03:00,info,appl
listen,17,0.0.0.0,56285
2012-07-05T05:33:47-03:00,info,appl
listen,17,0.0.0.0,56286
2012-07-05T05:33:47-03:00,info,appl
listen,17,0.0.0.0,56287
2012-07-05T05:33:47-03:00,info,appl
listen,17,0.0.0.0,56288
2012-07-05T05:33:47-03:00,info,appl
listen,17,0.0.0.0,56289
2012-07-05T05:33:48-03:00,info,appl
listen,17,0.0.0.0,56290
2012-07-05T05:33:48-03:00,info,appl
listen,17,0.0.0.0,56291
2012-07-05T05:33:48-03:00,info,appl
listen,17,0.0.0.0,56292
2012-07-05T05:33:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T05:33:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T05:33:48-03:00,info,appl
listen,17,0.0.0.0,56293
2012-07-05T05:33:49-03:00,info,appl
listen,17,0.0.0.0,56294
2012-07-05T05:33:49-03:00,info,appl
listen,17,0.0.0.0,56295
2012-07-05T05:33:50-03:00,info,appl
listen,17,0.0.0.0,56296
2012-07-05T05:33:50-03:00,info,appl
listen,17,0.0.0.0,56297
2012-07-05T05:33:50-03:00,info,appl
listen,17,0.0.0.0,56298
2012-07-05T05:33:51-03:00,info,appl
listen,17,0.0.0.0,56299
2012-07-05T05:33:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56300
2012-07-05T05:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56301
2012-07-05T05:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56302
2012-07-05T05:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56303
2012-07-05T05:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T05:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56304
2012-07-05T05:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56305
2012-07-05T05:33:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56306
2012-07-05T05:33:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56307
2012-07-05T05:33:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56308
2012-07-05T05:33:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56309
2012-07-05T05:33:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56310
2012-07-05T05:33:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56311
2012-07-05T05:33:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56312
2012-07-05T05:33:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56313
2012-07-05T05:33:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56314
2012-07-05T05:34:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,2538
2012-07-05T05:34:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62559
2012-07-05T05:34:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:34:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49722
2012-07-05T05:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49723
2012-07-05T05:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:35:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49724
2012-07-05T05:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49725
2012-07-05T05:35:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49726
2012-07-05T05:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49727
2012-07-05T05:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49728
2012-07-05T05:35:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49729
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49730
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49731
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49732
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49733
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50943
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50944
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50945
2012-07-05T05:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50946
2012-07-05T05:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50947
2012-07-05T05:35:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50948
2012-07-05T05:35:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50949
2012-07-05T05:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50950
2012-07-05T05:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50951
2012-07-05T05:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50952
2012-07-05T05:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50953
2012-07-05T05:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50954
2012-07-05T05:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50955
2012-07-05T05:36:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:36:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50956
2012-07-05T05:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50957
2012-07-05T05:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50958
2012-07-05T05:36:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50959
2012-07-05T05:36:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50960
2012-07-05T05:36:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50961
2012-07-05T05:36:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50962
2012-07-05T05:36:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50963
2012-07-05T05:36:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50964
2012-07-05T05:36:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50965
2012-07-05T05:36:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50966
2012-07-05T05:37:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,4417
2012-07-05T05:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:38:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:39:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:41:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.125,2192
2012-07-05T05:41:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:41:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59170
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59171
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59172
2012-07-05T05:41:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57325
2012-07-05T05:41:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:41:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57326
2012-07-05T05:41:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57327
2012-07-05T05:41:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57328
2012-07-05T05:41:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57329
2012-07-05T05:41:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57330
2012-07-05T05:41:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57331
2012-07-05T05:41:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57332
2012-07-05T05:41:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57333
2012-07-05T05:41:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57334
2012-07-05T05:44:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,62462
2012-07-05T05:45:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:45:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T05:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T05:45:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:45:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,59855
2012-07-05T05:46:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T05:46:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:46:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57335
2012-07-05T05:46:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T05:46:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57336
2012-07-05T05:46:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57337
2012-07-05T05:46:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57338
2012-07-05T05:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57339
2012-07-05T05:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57340
2012-07-05T05:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57341
2012-07-05T05:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57342
2012-07-05T05:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57343
2012-07-05T05:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57344
2012-07-05T05:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57345
2012-07-05T05:46:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.148,50742
2012-07-05T05:46:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:46:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:46:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:46:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:46:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57346
2012-07-05T05:46:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57347
2012-07-05T05:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57348
2012-07-05T05:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57349
2012-07-05T05:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57350
2012-07-05T05:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57351
2012-07-05T05:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57352
2012-07-05T05:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57353
2012-07-05T05:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57354
2012-07-05T05:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57355
2012-07-05T05:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57356
2012-07-05T05:50:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:50:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57357
2012-07-05T05:50:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:50:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57358
2012-07-05T05:50:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57359
2012-07-05T05:50:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57360
2012-07-05T05:50:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57361
2012-07-05T05:50:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57362
2012-07-05T05:50:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57363
2012-07-05T05:50:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57364
2012-07-05T05:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57365
2012-07-05T05:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57366
2012-07-05T05:50:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57367
2012-07-05T05:51:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:51:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65246
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65247
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:51:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65248
2012-07-05T05:51:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57848
2012-07-05T05:51:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T05:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57849
2012-07-05T05:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57850
2012-07-05T05:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57851
2012-07-05T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57852
2012-07-05T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57853
2012-07-05T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57854
2012-07-05T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57855
2012-07-05T05:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57856
2012-07-05T05:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57857
2012-07-05T05:52:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:52:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:52:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:53:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T05:56:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T05:56:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T05:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T05:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57858
2012-07-05T05:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T05:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57859
2012-07-05T05:56:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57860
2012-07-05T05:56:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57861
2012-07-05T05:56:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57862
2012-07-05T05:56:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57863
2012-07-05T05:56:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57864
2012-07-05T05:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57865
2012-07-05T05:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57866
2012-07-05T05:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57867
2012-07-05T05:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57868
2012-07-05T05:57:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,51119
2012-07-05T05:57:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.187,64546
2012-07-05T05:59:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T05:59:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T06:00:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:00:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T06:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57869
2012-07-05T06:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57870
2012-07-05T06:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57871
2012-07-05T06:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57872
2012-07-05T06:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57873
2012-07-05T06:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57874
2012-07-05T06:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57875
2012-07-05T06:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57876
2012-07-05T06:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57877
2012-07-05T06:01:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57878
2012-07-05T06:01:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57879
2012-07-05T06:01:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:01:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:01:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:01:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56695
2012-07-05T06:01:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:01:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56696
2012-07-05T06:01:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:01:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56697
2012-07-05T06:01:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55804
2012-07-05T06:01:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:01:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55805
2012-07-05T06:01:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55806
2012-07-05T06:01:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55807
2012-07-05T06:01:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55808
2012-07-05T06:01:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55809
2012-07-05T06:01:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55810
2012-07-05T06:01:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55811
2012-07-05T06:01:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55812
2012-07-05T06:01:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55813
2012-07-05T06:03:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,56699
2012-07-05T06:04:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.151,64500
2012-07-05T06:05:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:05:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55814
2012-07-05T06:05:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:05:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55815
2012-07-05T06:05:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55816
2012-07-05T06:05:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55817
2012-07-05T06:05:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55818
2012-07-05T06:05:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55819
2012-07-05T06:05:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55820
2012-07-05T06:05:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55821
2012-07-05T06:05:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55822
2012-07-05T06:05:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55823
2012-07-05T06:05:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55824
2012-07-05T06:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55825
2012-07-05T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:06:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:06:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55826
2012-07-05T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55827
2012-07-05T06:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55828
2012-07-05T06:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55829
2012-07-05T06:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55830
2012-07-05T06:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55831
2012-07-05T06:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55832
2012-07-05T06:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55833
2012-07-05T06:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55834
2012-07-05T06:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55835
2012-07-05T06:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55836
2012-07-05T06:07:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:07:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:07:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,62681
2012-07-05T06:09:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,64540
2012-07-05T06:10:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,3701
2012-07-05T06:11:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.213,4222
2012-07-05T06:12:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:12:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:12:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65327
2012-07-05T06:12:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65328
2012-07-05T06:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65329
2012-07-05T06:12:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57895
2012-07-05T06:12:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57896
2012-07-05T06:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57897
2012-07-05T06:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57898
2012-07-05T06:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57899
2012-07-05T06:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57900
2012-07-05T06:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57901
2012-07-05T06:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57902
2012-07-05T06:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57903
2012-07-05T06:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57904
2012-07-05T06:13:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:13:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:14:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:14:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,58392
2012-07-05T06:14:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:15:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.237,63940
2012-07-05T06:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T06:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57905
2012-07-05T06:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57906
2012-07-05T06:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57907
2012-07-05T06:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57908
2012-07-05T06:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57909
2012-07-05T06:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57910
2012-07-05T06:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57911
2012-07-05T06:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57912
2012-07-05T06:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57913
2012-07-05T06:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57914
2012-07-05T06:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57915
2012-07-05T06:16:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.122,61517
2012-07-05T06:17:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:17:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57916
2012-07-05T06:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:17:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57917
2012-07-05T06:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57918
2012-07-05T06:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57919
2012-07-05T06:17:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57920
2012-07-05T06:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57921
2012-07-05T06:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57922
2012-07-05T06:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57923
2012-07-05T06:17:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57924
2012-07-05T06:17:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57925
2012-07-05T06:17:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57926
2012-07-05T06:17:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.88,4811
2012-07-05T06:20:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:20:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57927
2012-07-05T06:20:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:20:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57928
2012-07-05T06:20:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57929
2012-07-05T06:20:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57930
2012-07-05T06:20:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57931
2012-07-05T06:20:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57932
2012-07-05T06:20:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57933
2012-07-05T06:20:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57934
2012-07-05T06:20:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57935
2012-07-05T06:20:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57936
2012-07-05T06:20:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57937
2012-07-05T06:20:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:20:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:21:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T06:21:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:22:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:22:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60971
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60972
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60973
2012-07-05T06:22:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58730
2012-07-05T06:22:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58731
2012-07-05T06:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58732
2012-07-05T06:22:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58733
2012-07-05T06:22:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58734
2012-07-05T06:22:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58735
2012-07-05T06:22:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58736
2012-07-05T06:22:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58737
2012-07-05T06:22:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58738
2012-07-05T06:22:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58739
2012-07-05T06:24:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,56573
2012-07-05T06:27:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:27:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58740
2012-07-05T06:27:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58741
2012-07-05T06:27:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58742
2012-07-05T06:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58743
2012-07-05T06:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58744
2012-07-05T06:27:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58745
2012-07-05T06:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58746
2012-07-05T06:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58747
2012-07-05T06:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58748
2012-07-05T06:27:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58749
2012-07-05T06:27:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58750
2012-07-05T06:28:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:28:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:28:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:29:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60843
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60844
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63606
2012-07-05T06:31:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63607
2012-07-05T06:31:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63567
2012-07-05T06:31:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63568
2012-07-05T06:31:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59639
2012-07-05T06:31:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59640
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62097
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62098
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53372
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53373
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50677
2012-07-05T06:31:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50678
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63710
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63711
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54790
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54791
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50858
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50859
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64067
2012-07-05T06:31:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64068
2012-07-05T06:32:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T06:32:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59927
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59928
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59929
2012-07-05T06:32:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64589
2012-07-05T06:32:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64590
2012-07-05T06:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64591
2012-07-05T06:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64592
2012-07-05T06:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64593
2012-07-05T06:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64594
2012-07-05T06:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64595
2012-07-05T06:32:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64596
2012-07-05T06:32:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64597
2012-07-05T06:32:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64598
2012-07-05T06:34:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.10.45,50967
2012-07-05T06:35:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:35:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64599
2012-07-05T06:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64600
2012-07-05T06:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64601
2012-07-05T06:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64602
2012-07-05T06:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64603
2012-07-05T06:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64604
2012-07-05T06:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64605
2012-07-05T06:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64606
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64607
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64608
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64609
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57203
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57204
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57205
2012-07-05T06:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57206
2012-07-05T06:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57207
2012-07-05T06:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57208
2012-07-05T06:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57209
2012-07-05T06:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57210
2012-07-05T06:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57211
2012-07-05T06:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57212
2012-07-05T06:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57213
2012-07-05T06:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57214
2012-07-05T06:35:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57215
2012-07-05T06:35:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:36:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:36:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,3761
2012-07-05T06:37:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64270
2012-07-05T06:37:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:37:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53439
2012-07-05T06:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,63840
2012-07-05T06:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T06:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T06:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53440
2012-07-05T06:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53441
2012-07-05T06:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53442
2012-07-05T06:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53443
2012-07-05T06:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53444
2012-07-05T06:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53445
2012-07-05T06:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53446
2012-07-05T06:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53447
2012-07-05T06:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53448
2012-07-05T06:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53449
2012-07-05T06:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53450
2012-07-05T06:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,3585
2012-07-05T06:38:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,2028
2012-07-05T06:41:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,2939
2012-07-05T06:42:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:42:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:42:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T06:42:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T06:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-05T06:42:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53081
2012-07-05T06:42:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53082
2012-07-05T06:42:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:42:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53083
2012-07-05T06:42:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55191
2012-07-05T06:42:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:42:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55192
2012-07-05T06:42:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55193
2012-07-05T06:42:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55194
2012-07-05T06:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55195
2012-07-05T06:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55196
2012-07-05T06:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55197
2012-07-05T06:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55198
2012-07-05T06:42:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55199
2012-07-05T06:42:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55200
2012-07-05T06:42:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:43:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:45:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T06:46:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T06:46:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:46:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55201
2012-07-05T06:46:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:46:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55202
2012-07-05T06:46:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55203
2012-07-05T06:46:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55204
2012-07-05T06:46:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55205
2012-07-05T06:46:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55206
2012-07-05T06:46:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55207
2012-07-05T06:46:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55208
2012-07-05T06:46:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55209
2012-07-05T06:46:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55210
2012-07-05T06:46:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55211
2012-07-05T06:47:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T06:47:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T06:47:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:47:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55212
2012-07-05T06:47:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:47:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55213
2012-07-05T06:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55214
2012-07-05T06:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55215
2012-07-05T06:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55216
2012-07-05T06:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55217
2012-07-05T06:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55218
2012-07-05T06:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55219
2012-07-05T06:47:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55220
2012-07-05T06:47:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55221
2012-07-05T06:47:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55222
2012-07-05T06:49:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:49:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:49:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:50:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,58180
2012-07-05T06:50:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55223
2012-07-05T06:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T06:50:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55224
2012-07-05T06:50:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55225
2012-07-05T06:50:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55226
2012-07-05T06:50:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55227
2012-07-05T06:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55228
2012-07-05T06:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55229
2012-07-05T06:50:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55230
2012-07-05T06:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55231
2012-07-05T06:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55232
2012-07-05T06:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55233
2012-07-05T06:50:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.93,59376
2012-07-05T06:51:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,4818
2012-07-05T06:52:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T06:52:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T06:52:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:52:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52638
2012-07-05T06:52:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T06:52:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52639
2012-07-05T06:52:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:52:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52640
2012-07-05T06:52:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52705
2012-07-05T06:52:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T06:52:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52706
2012-07-05T06:52:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52707
2012-07-05T06:52:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52708
2012-07-05T06:52:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52709
2012-07-05T06:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52710
2012-07-05T06:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52711
2012-07-05T06:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52712
2012-07-05T06:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52713
2012-07-05T06:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52714
2012-07-05T06:53:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.190,4505
2012-07-05T06:53:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.0.13,61626
2012-07-05T06:55:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,52952
2012-07-05T06:55:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,4814
2012-07-05T06:56:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,3234
2012-07-05T06:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T06:56:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,1459
2012-07-05T06:57:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,1696
2012-07-05T06:57:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T06:57:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T06:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T06:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52715
2012-07-05T06:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T06:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52716
2012-07-05T06:57:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T06:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52717
2012-07-05T06:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52718
2012-07-05T06:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52719
2012-07-05T06:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52720
2012-07-05T06:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52721
2012-07-05T06:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52722
2012-07-05T06:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52723
2012-07-05T06:57:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52724
2012-07-05T06:57:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52725
2012-07-05T06:57:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,3104
2012-07-05T06:59:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,2840
2012-07-05T07:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,50546
2012-07-05T07:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,389
2012-07-05T07:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52726
2012-07-05T07:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52727
2012-07-05T07:01:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52728
2012-07-05T07:01:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52729
2012-07-05T07:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52730
2012-07-05T07:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52731
2012-07-05T07:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52732
2012-07-05T07:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52733
2012-07-05T07:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52734
2012-07-05T07:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52735
2012-07-05T07:01:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52736
2012-07-05T07:01:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,63008
2012-07-05T07:02:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T07:02:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63419
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63420
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63421
2012-07-05T07:02:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52269
2012-07-05T07:02:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52270
2012-07-05T07:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52271
2012-07-05T07:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52272
2012-07-05T07:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52273
2012-07-05T07:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52274
2012-07-05T07:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52275
2012-07-05T07:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52276
2012-07-05T07:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52277
2012-07-05T07:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52278
2012-07-05T07:03:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:03:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:04:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:04:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,1029
2012-07-05T07:04:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:05:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4096
2012-07-05T07:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52279
2012-07-05T07:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:05:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52280
2012-07-05T07:05:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52281
2012-07-05T07:05:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52282
2012-07-05T07:05:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52283
2012-07-05T07:05:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52284
2012-07-05T07:05:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52285
2012-07-05T07:05:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52286
2012-07-05T07:05:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52287
2012-07-05T07:05:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52288
2012-07-05T07:05:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52289
2012-07-05T07:05:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.102,51439
2012-07-05T07:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52290
2012-07-05T07:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:07:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T07:07:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T07:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52291
2012-07-05T07:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52292
2012-07-05T07:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52293
2012-07-05T07:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52294
2012-07-05T07:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52295
2012-07-05T07:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52296
2012-07-05T07:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52297
2012-07-05T07:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52298
2012-07-05T07:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52299
2012-07-05T07:07:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52300
2012-07-05T07:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52301
2012-07-05T07:09:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,3700
2012-07-05T07:10:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,49262
2012-07-05T07:10:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:10:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:11:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.129,50658
2012-07-05T07:11:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:11:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:12:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T07:12:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64879
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64880
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64881
2012-07-05T07:12:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63227
2012-07-05T07:12:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:12:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63228
2012-07-05T07:12:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63229
2012-07-05T07:12:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63230
2012-07-05T07:12:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63231
2012-07-05T07:12:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63232
2012-07-05T07:12:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63233
2012-07-05T07:12:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63234
2012-07-05T07:12:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63235
2012-07-05T07:12:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63236
2012-07-05T07:12:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,1838
2012-07-05T07:13:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,59261
2012-07-05T07:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:15:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54548
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54549
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54550
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53066
2012-07-05T07:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53067
2012-07-05T07:16:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53068
2012-07-05T07:16:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60679
2012-07-05T07:16:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:16:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60680
2012-07-05T07:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60681
2012-07-05T07:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60682
2012-07-05T07:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60683
2012-07-05T07:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60684
2012-07-05T07:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60685
2012-07-05T07:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60686
2012-07-05T07:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60687
2012-07-05T07:16:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60688
2012-07-05T07:16:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54679
2012-07-05T07:16:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:16:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T07:16:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:16:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54680
2012-07-05T07:16:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:16:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54681
2012-07-05T07:16:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54682
2012-07-05T07:16:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54683
2012-07-05T07:16:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54684
2012-07-05T07:16:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54685
2012-07-05T07:16:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54686
2012-07-05T07:16:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54687
2012-07-05T07:16:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54688
2012-07-05T07:16:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54689
2012-07-05T07:16:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54690
2012-07-05T07:17:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:17:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54691
2012-07-05T07:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54692
2012-07-05T07:17:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54693
2012-07-05T07:17:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54694
2012-07-05T07:17:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54695
2012-07-05T07:17:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54696
2012-07-05T07:17:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54697
2012-07-05T07:17:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54698
2012-07-05T07:17:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54699
2012-07-05T07:17:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54700
2012-07-05T07:17:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54701
2012-07-05T07:17:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:17:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:18:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:18:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:20:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:20:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54702
2012-07-05T07:20:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54703
2012-07-05T07:20:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54704
2012-07-05T07:20:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54705
2012-07-05T07:20:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54706
2012-07-05T07:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54707
2012-07-05T07:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54708
2012-07-05T07:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54709
2012-07-05T07:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54710
2012-07-05T07:20:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54711
2012-07-05T07:20:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54712
2012-07-05T07:20:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.177,1106
2012-07-05T07:22:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,64980
2012-07-05T07:22:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:22:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:22:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:22:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63266
2012-07-05T07:22:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:22:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63267
2012-07-05T07:22:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:22:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63268
2012-07-05T07:22:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62028
2012-07-05T07:22:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-05T07:22:49-03:00,info,appl
listen,17,0.0.0.0,62029
2012-07-05T07:22:50-03:00,info,appl
listen,17,0.0.0.0,62030
2012-07-05T07:22:50-03:00,info,appl
listen,17,0.0.0.0,62031
2012-07-05T07:22:51-03:00,info,appl
listen,17,0.0.0.0,62032
2012-07-05T07:22:51-03:00,info,appl
listen,17,0.0.0.0,62033
2012-07-05T07:22:51-03:00,info,appl
listen,17,0.0.0.0,62034
2012-07-05T07:22:51-03:00,info,appl
listen,17,0.0.0.0,62035
2012-07-05T07:22:52-03:00,info,appl
listen,17,0.0.0.0,62036
2012-07-05T07:22:52-03:00,info,appl
listen,17,0.0.0.0,62037
2012-07-05T07:23:55-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T07:23:55-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:23:55-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:23:55-03:00,info,appl
listen,17,0.0.0.0,62038
2012-07-05T07:23:55-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T07:23:55-03:00,info,appl
listen,17,0.0.0.0,62039
2012-07-05T07:23:56-03:00,info,appl
listen,17,0.0.0.0,62040
2012-07-05T07:23:56-03:00,info,appl
listen,17,0.0.0.0,62041
2012-07-05T07:23:57-03:00,info,appl
listen,17,0.0.0.0,62042
2012-07-05T07:23:57-03:00,info,appl
listen,17,0.0.0.0,62043
2012-07-05T07:23:57-03:00,info,appl
listen,17,0.0.0.0,62044
2012-07-05T07:23:58-03:00,info,appl
listen,17,0.0.0.0,62045
2012-07-05T07:23:58-03:00,info,appl
listen,17,0.0.0.0,62046
2012-07-05T07:23:58-03:00,info,appl
listen,17,0.0.0.0,62047
2012-07-05T07:23:58-03:00,info,appl
listen,17,0.0.0.0,62048
2012-07-05T07:23:58-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:23:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:23:58-03:00,info,appl
listen,17,0.0.0.0,62049
2012-07-05T07:23:59-03:00,info,appl
listen,17,0.0.0.0,62050
2012-07-05T07:23:59-03:00,info,appl
listen,17,0.0.0.0,62051
2012-07-05T07:24:00-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62052
2012-07-05T07:24:00-03:00,info,appl
listen,17,0.0.0.0,62053
2012-07-05T07:24:00-03:00,info,appl
listen,17,0.0.0.0,62054
2012-07-05T07:24:01-03:00,info,appl
listen,17,0.0.0.0,62055
2012-07-05T07:24:01-03:00,info,appl
listen,17,0.0.0.0,62056
2012-07-05T07:24:01-03:00,info,appl
listen,17,0.0.0.0,62057
2012-07-05T07:24:01-03:00,info,appl
listen,17,0.0.0.0,62058
2012-07-05T07:24:02-03:00,info,appl
listen,17,0.0.0.0,62059
2012-07-05T07:24:02-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:02-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:02-03:00,info,appl
listen,17,0.0.0.0,62060
2012-07-05T07:24:02-03:00,info,appl
listen,17,0.0.0.0,62061
2012-07-05T07:24:03-03:00,info,appl
listen,17,0.0.0.0,62062
2012-07-05T07:24:03-03:00,info,appl
listen,17,0.0.0.0,62063
2012-07-05T07:24:03-03:00,info,appl
listen,17,0.0.0.0,62064
2012-07-05T07:24:04-03:00,info,appl
listen,17,0.0.0.0,62065
2012-07-05T07:24:04-03:00,info,appl
listen,17,0.0.0.0,62066
2012-07-05T07:24:04-03:00,info,appl
listen,17,0.0.0.0,62067
2012-07-05T07:24:04-03:00,info,appl
listen,17,0.0.0.0,62068
2012-07-05T07:24:05-03:00,info,appl
listen,17,0.0.0.0,62069
2012-07-05T07:24:05-03:00,info,appl
listen,17,0.0.0.0,62070
2012-07-05T07:24:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:05-03:00,info,appl
listen,17,0.0.0.0,62071
2012-07-05T07:24:05-03:00,info,appl
listen,17,0.0.0.0,62072
2012-07-05T07:24:06-03:00,info,appl
listen,17,0.0.0.0,62073
2012-07-05T07:24:06-03:00,info,appl
listen,17,0.0.0.0,62074
2012-07-05T07:24:07-03:00,info,appl
listen,17,0.0.0.0,62075
2012-07-05T07:24:07-03:00,info,appl
listen,17,0.0.0.0,62076
2012-07-05T07:24:07-03:00,info,appl
listen,17,0.0.0.0,62077
2012-07-05T07:24:08-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62078
2012-07-05T07:24:08-03:00,info,appl
listen,17,0.0.0.0,62079
2012-07-05T07:24:08-03:00,info,appl
listen,17,0.0.0.0,62080
2012-07-05T07:24:08-03:00,info,appl
listen,17,0.0.0.0,62081
2012-07-05T07:24:09-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:09-03:00,info,appl
listen,17,0.0.0.0,62082
2012-07-05T07:24:10-03:00,info,appl
listen,17,0.0.0.0,62083
2012-07-05T07:24:10-03:00,info,appl
listen,17,0.0.0.0,62084
2012-07-05T07:24:11-03:00,info,appl
listen,17,0.0.0.0,62085
2012-07-05T07:24:11-03:00,info,appl
listen,17,0.0.0.0,62086
2012-07-05T07:24:11-03:00,info,appl
listen,17,0.0.0.0,62087
2012-07-05T07:24:12-03:00,info,appl
listen,17,0.0.0.0,62088
2012-07-05T07:24:12-03:00,info,appl
listen,17,0.0.0.0,62089
2012-07-05T07:24:12-03:00,info,appl
listen,17,0.0.0.0,62090
2012-07-05T07:24:12-03:00,info,appl
listen,17,0.0.0.0,62091
2012-07-05T07:24:12-03:00,info,appl
listen,17,0.0.0.0,62092
2012-07-05T07:24:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:13-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:13-03:00,info,appl
listen,17,0.0.0.0,62093
2012-07-05T07:24:13-03:00,info,appl
listen,17,0.0.0.0,62094
2012-07-05T07:24:14-03:00,info,appl
listen,17,0.0.0.0,62095
2012-07-05T07:24:14-03:00,info,appl
listen,17,0.0.0.0,62096
2012-07-05T07:24:14-03:00,info,appl
listen,17,0.0.0.0,62097
2012-07-05T07:24:15-03:00,info,appl
listen,17,0.0.0.0,62098
2012-07-05T07:24:15-03:00,info,appl
send,17,10.101.0.11,389
2012-07-05T07:24:15-03:00,info,appl
listen,17,0.0.0.0,62099
2012-07-05T07:24:15-03:00,info,appl
listen,17,0.0.0.0,62100
2012-07-05T07:24:15-03:00,info,appl
listen,17,0.0.0.0,62101
2012-07-05T07:24:16-03:00,info,appl
listen,17,0.0.0.0,62102
2012-07-05T07:24:16-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62103
2012-07-05T07:24:16-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:16-03:00,info,appl
listen,17,0.0.0.0,62104
2012-07-05T07:24:16-03:00,info,appl
listen,17,0.0.0.0,62105
2012-07-05T07:24:17-03:00,info,appl
listen,17,0.0.0.0,62106
2012-07-05T07:24:17-03:00,info,appl
listen,17,0.0.0.0,62107
2012-07-05T07:24:18-03:00,info,appl
listen,17,0.0.0.0,62108
2012-07-05T07:24:18-03:00,info,appl
listen,17,0.0.0.0,62109
2012-07-05T07:24:18-03:00,info,appl
listen,17,0.0.0.0,62110
2012-07-05T07:24:19-03:00,info,appl
listen,17,0.0.0.0,62111
2012-07-05T07:24:19-03:00,info,appl
listen,17,0.0.0.0,62112
2012-07-05T07:24:19-03:00,info,appl
listen,17,0.0.0.0,62113
2012-07-05T07:24:19-03:00,info,appl
listen,17,0.0.0.0,62114
2012-07-05T07:24:19-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:19-03:00,info,appl
listen,17,0.0.0.0,62115
2012-07-05T07:24:20-03:00,info,appl
listen,17,0.0.0.0,62116
2012-07-05T07:24:20-03:00,info,appl
listen,17,0.0.0.0,62117
2012-07-05T07:24:21-03:00,info,appl
listen,17,0.0.0.0,62118
2012-07-05T07:24:21-03:00,info,appl
listen,17,0.0.0.0,62119
2012-07-05T07:24:22-03:00,info,appl
listen,17,0.0.0.0,62120
2012-07-05T07:24:22-03:00,info,appl
listen,17,0.0.0.0,62121
2012-07-05T07:24:22-03:00,info,appl
listen,17,0.0.0.0,62122
2012-07-05T07:24:22-03:00,info,appl
listen,17,0.0.0.0,62123
2012-07-05T07:24:22-03:00,info,appl
listen,17,0.0.0.0,62124
2012-07-05T07:24:23-03:00,info,appl
listen,17,0.0.0.0,62125
2012-07-05T07:24:23-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:23-03:00,info,appl
listen,17,0.0.0.0,62126
2012-07-05T07:24:24-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62127
2012-07-05T07:24:24-03:00,info,appl
listen,17,0.0.0.0,62128
2012-07-05T07:24:25-03:00,info,appl
listen,17,0.0.0.0,62129
2012-07-05T07:24:25-03:00,info,appl
listen,17,0.0.0.0,62130
2012-07-05T07:24:25-03:00,info,appl
listen,17,0.0.0.0,62131
2012-07-05T07:24:26-03:00,info,appl
listen,17,0.0.0.0,62132
2012-07-05T07:24:26-03:00,info,appl
listen,17,0.0.0.0,62133
2012-07-05T07:24:26-03:00,info,appl
listen,17,0.0.0.0,62134
2012-07-05T07:24:26-03:00,info,appl
listen,17,0.0.0.0,62135
2012-07-05T07:24:26-03:00,info,appl
listen,17,0.0.0.0,62136
2012-07-05T07:24:27-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:27-03:00,info,appl
listen,17,0.0.0.0,62137
2012-07-05T07:24:27-03:00,info,appl
listen,17,0.0.0.0,62138
2012-07-05T07:24:28-03:00,info,appl
listen,17,0.0.0.0,62139
2012-07-05T07:24:28-03:00,info,appl
listen,17,0.0.0.0,62140
2012-07-05T07:24:28-03:00,info,appl
listen,17,0.0.0.0,62141
2012-07-05T07:24:29-03:00,info,appl
listen,17,0.0.0.0,62142
2012-07-05T07:24:29-03:00,info,appl
listen,17,0.0.0.0,62143
2012-07-05T07:24:29-03:00,info,appl
listen,17,0.0.0.0,62144
2012-07-05T07:24:29-03:00,info,appl
listen,17,0.0.0.0,62145
2012-07-05T07:24:30-03:00,info,appl
listen,17,0.0.0.0,62146
2012-07-05T07:24:30-03:00,info,appl
listen,17,0.0.0.0,62147
2012-07-05T07:24:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:30-03:00,info,appl
listen,17,0.0.0.0,62148
2012-07-05T07:24:30-03:00,info,appl
listen,17,0.0.0.0,62149
2012-07-05T07:24:31-03:00,info,appl
listen,17,0.0.0.0,62150
2012-07-05T07:24:31-03:00,info,appl
listen,17,0.0.0.0,62151
2012-07-05T07:24:32-03:00,info,appl
listen,17,0.0.0.0,62152
2012-07-05T07:24:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62153
2012-07-05T07:24:32-03:00,info,appl
listen,17,0.0.0.0,62154
2012-07-05T07:24:33-03:00,info,appl
listen,17,0.0.0.0,62155
2012-07-05T07:24:33-03:00,info,appl
listen,17,0.0.0.0,62156
2012-07-05T07:24:33-03:00,info,appl
listen,17,0.0.0.0,62157
2012-07-05T07:24:33-03:00,info,appl
listen,17,0.0.0.0,62158
2012-07-05T07:24:33-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:33-03:00,info,appl
listen,17,0.0.0.0,62159
2012-07-05T07:24:34-03:00,info,appl
listen,17,0.0.0.0,62160
2012-07-05T07:24:34-03:00,info,appl
listen,17,0.0.0.0,62161
2012-07-05T07:24:35-03:00,info,appl
listen,17,0.0.0.0,62162
2012-07-05T07:24:35-03:00,info,appl
send,17,10.101.0.11,389
2012-07-05T07:24:35-03:00,info,appl
listen,17,0.0.0.0,62163
2012-07-05T07:24:36-03:00,info,appl
listen,17,0.0.0.0,62164
2012-07-05T07:24:36-03:00,info,appl
listen,17,0.0.0.0,62165
2012-07-05T07:24:36-03:00,info,appl
listen,17,0.0.0.0,62166
2012-07-05T07:24:36-03:00,info,appl
listen,17,0.0.0.0,62167
2012-07-05T07:24:36-03:00,info,appl
listen,17,0.0.0.0,62168
2012-07-05T07:24:37-03:00,info,appl
listen,17,0.0.0.0,62169
2012-07-05T07:24:37-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:37-03:00,info,appl
listen,17,0.0.0.0,62170
2012-07-05T07:24:38-03:00,info,appl
listen,17,0.0.0.0,62171
2012-07-05T07:24:38-03:00,info,appl
listen,17,0.0.0.0,62172
2012-07-05T07:24:39-03:00,info,appl
listen,17,0.0.0.0,62173
2012-07-05T07:24:39-03:00,info,appl
listen,17,0.0.0.0,62174
2012-07-05T07:24:39-03:00,info,appl
listen,17,0.0.0.0,62175
2012-07-05T07:24:40-03:00,info,appl
listen,17,0.0.0.0,62176
2012-07-05T07:24:40-03:00,info,appl
listen,17,0.0.0.0,62177
2012-07-05T07:24:40-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62178
2012-07-05T07:24:40-03:00,info,appl
listen,17,0.0.0.0,62179
2012-07-05T07:24:40-03:00,info,appl
listen,17,0.0.0.0,62180
2012-07-05T07:24:41-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:41-03:00,info,appl
listen,17,0.0.0.0,62181
2012-07-05T07:24:41-03:00,info,appl
listen,17,0.0.0.0,62182
2012-07-05T07:24:42-03:00,info,appl
listen,17,0.0.0.0,62183
2012-07-05T07:24:42-03:00,info,appl
listen,17,0.0.0.0,62184
2012-07-05T07:24:42-03:00,info,appl
listen,17,0.0.0.0,62185
2012-07-05T07:24:43-03:00,info,appl
listen,17,0.0.0.0,62186
2012-07-05T07:24:43-03:00,info,appl
listen,17,0.0.0.0,62187
2012-07-05T07:24:43-03:00,info,appl
listen,17,0.0.0.0,62188
2012-07-05T07:24:43-03:00,info,appl
listen,17,0.0.0.0,62189
2012-07-05T07:24:44-03:00,info,appl
listen,17,0.0.0.0,62190
2012-07-05T07:24:44-03:00,info,appl
listen,17,0.0.0.0,62191
2012-07-05T07:24:44-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T07:24:44-03:00,info,appl
listen,17,0.0.0.0,62192
2012-07-05T07:24:44-03:00,info,appl
listen,17,0.0.0.0,62193
2012-07-05T07:24:45-03:00,info,appl
listen,17,0.0.0.0,62194
2012-07-05T07:24:45-03:00,info,appl
listen,17,0.0.0.0,62195
2012-07-05T07:24:46-03:00,info,appl
listen,17,0.0.0.0,62196
2012-07-05T07:24:46-03:00,info,appl
listen,17,0.0.0.0,62197
2012-07-05T07:24:46-03:00,info,appl
listen,17,0.0.0.0,62198
2012-07-05T07:24:46-03:00,info,appl
listen,17,0.0.0.0,62199
2012-07-05T07:24:47-03:00,info,appl
listen,17,0.0.0.0,62200
2012-07-05T07:24:47-03:00,info,appl
listen,17,0.0.0.0,62201
2012-07-05T07:24:47-03:00,info,appl
listen,17,0.0.0.0,62202
2012-07-05T07:24:47-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T07:24:47-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T07:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62203
2012-07-05T07:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62204
2012-07-05T07:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62205
2012-07-05T07:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62206
2012-07-05T07:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62207
2012-07-05T07:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62208
2012-07-05T07:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62209
2012-07-05T07:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62210
2012-07-05T07:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62211
2012-07-05T07:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62212
2012-07-05T07:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62213
2012-07-05T07:24:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:24:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:25:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,2583
2012-07-05T07:25:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:27:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:27:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T07:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62214
2012-07-05T07:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62215
2012-07-05T07:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62216
2012-07-05T07:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62217
2012-07-05T07:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62218
2012-07-05T07:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62219
2012-07-05T07:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62220
2012-07-05T07:27:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62221
2012-07-05T07:27:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62222
2012-07-05T07:27:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62223
2012-07-05T07:27:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62224
2012-07-05T07:30:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,3847
2012-07-05T07:30:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,65425
2012-07-05T07:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:30:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,1418
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51284
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61110
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61111
2012-07-05T07:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61112
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64588
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64589
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57297
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57298
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59173
2012-07-05T07:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59174
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55642
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55643
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58771
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58772
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55989
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55990
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59483
2012-07-05T07:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59484
2012-07-05T07:31:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54189
2012-07-05T07:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54190
2012-07-05T07:31:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54168
2012-07-05T07:31:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54169
2012-07-05T07:32:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:32:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:32:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:32:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:32:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:32:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64262
2012-07-05T07:32:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64263
2012-07-05T07:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64264
2012-07-05T07:32:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51636
2012-07-05T07:32:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51637
2012-07-05T07:32:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51638
2012-07-05T07:32:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51639
2012-07-05T07:32:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51640
2012-07-05T07:32:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51641
2012-07-05T07:32:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51642
2012-07-05T07:32:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51643
2012-07-05T07:32:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51644
2012-07-05T07:32:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51645
2012-07-05T07:33:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:33:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,58465
2012-07-05T07:34:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,3807
2012-07-05T07:35:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-05T07:35:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51646
2012-07-05T07:35:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:35:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51647
2012-07-05T07:35:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51648
2012-07-05T07:35:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51649
2012-07-05T07:35:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51650
2012-07-05T07:35:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51651
2012-07-05T07:35:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51652
2012-07-05T07:35:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51653
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51654
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51655
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51656
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60832
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60833
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:35:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60834
2012-07-05T07:35:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60835
2012-07-05T07:35:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60836
2012-07-05T07:35:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60837
2012-07-05T07:35:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60838
2012-07-05T07:35:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60839
2012-07-05T07:35:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60840
2012-07-05T07:35:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60841
2012-07-05T07:35:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60842
2012-07-05T07:35:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60843
2012-07-05T07:35:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60844
2012-07-05T07:37:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,3012
2012-07-05T07:37:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:37:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60845
2012-07-05T07:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60846
2012-07-05T07:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60847
2012-07-05T07:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60848
2012-07-05T07:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60849
2012-07-05T07:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60850
2012-07-05T07:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60851
2012-07-05T07:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60852
2012-07-05T07:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60853
2012-07-05T07:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60854
2012-07-05T07:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60855
2012-07-05T07:39:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:39:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:39:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61342
2012-07-05T07:39:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:39:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51630
2012-07-05T07:40:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:43:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:43:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63692
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63693
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:43:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63694
2012-07-05T07:43:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61633
2012-07-05T07:43:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-05T07:43:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61634
2012-07-05T07:43:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61635
2012-07-05T07:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61636
2012-07-05T07:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61637
2012-07-05T07:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61638
2012-07-05T07:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61639
2012-07-05T07:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61640
2012-07-05T07:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61641
2012-07-05T07:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61642
2012-07-05T07:45:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:45:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T07:46:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,53086
2012-07-05T07:46:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:46:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:46:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T07:46:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:46:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61643
2012-07-05T07:46:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:46:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61644
2012-07-05T07:46:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61645
2012-07-05T07:46:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61646
2012-07-05T07:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61647
2012-07-05T07:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61648
2012-07-05T07:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61649
2012-07-05T07:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61650
2012-07-05T07:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61651
2012-07-05T07:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61652
2012-07-05T07:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61653
2012-07-05T07:46:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:47:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T07:47:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.22,60466
2012-07-05T07:48:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:48:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:48:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:48:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61654
2012-07-05T07:48:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:48:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61655
2012-07-05T07:48:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61656
2012-07-05T07:48:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61657
2012-07-05T07:48:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61658
2012-07-05T07:48:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61659
2012-07-05T07:48:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61660
2012-07-05T07:48:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61661
2012-07-05T07:48:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61662
2012-07-05T07:48:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61663
2012-07-05T07:48:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61664
2012-07-05T07:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61665
2012-07-05T07:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T07:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61666
2012-07-05T07:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61667
2012-07-05T07:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61668
2012-07-05T07:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61669
2012-07-05T07:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61670
2012-07-05T07:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61671
2012-07-05T07:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61672
2012-07-05T07:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61673
2012-07-05T07:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61674
2012-07-05T07:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61675
2012-07-05T07:52:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.31,58226
2012-07-05T07:53:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:53:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62393
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62394
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T07:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62395
2012-07-05T07:53:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50850
2012-07-05T07:53:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T07:53:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50851
2012-07-05T07:53:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50852
2012-07-05T07:53:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54604
2012-07-05T07:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54605
2012-07-05T07:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54606
2012-07-05T07:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54607
2012-07-05T07:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54608
2012-07-05T07:53:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54609
2012-07-05T07:53:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54610
2012-07-05T07:53:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54611
2012-07-05T07:53:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T07:53:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:53:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:54:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T07:54:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.110,53851
2012-07-05T07:58:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T07:58:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T07:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T07:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54612
2012-07-05T07:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T07:58:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54613
2012-07-05T07:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54614
2012-07-05T07:58:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54615
2012-07-05T07:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54616
2012-07-05T07:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54617
2012-07-05T07:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54618
2012-07-05T07:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54619
2012-07-05T07:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54620
2012-07-05T07:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54621
2012-07-05T07:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54622
2012-07-05T07:58:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.173,58034
2012-07-05T08:00:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:00:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:00:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:00:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:01:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:01:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:01:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T08:01:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:01:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54623
2012-07-05T08:01:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:01:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54624
2012-07-05T08:01:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54625
2012-07-05T08:01:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54626
2012-07-05T08:01:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54627
2012-07-05T08:01:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54628
2012-07-05T08:01:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54629
2012-07-05T08:01:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54630
2012-07-05T08:01:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54631
2012-07-05T08:01:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54632
2012-07-05T08:01:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54633
2012-07-05T08:03:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T08:03:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T08:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:03:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51286
2012-07-05T08:03:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51287
2012-07-05T08:03:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51288
2012-07-05T08:03:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65256
2012-07-05T08:03:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:03:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65257
2012-07-05T08:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65258
2012-07-05T08:03:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65259
2012-07-05T08:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65260
2012-07-05T08:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65261
2012-07-05T08:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65262
2012-07-05T08:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65263
2012-07-05T08:03:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65264
2012-07-05T08:03:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65265
2012-07-05T08:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65266
2012-07-05T08:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65267
2012-07-05T08:05:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65268
2012-07-05T08:05:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65269
2012-07-05T08:05:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65270
2012-07-05T08:05:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65271
2012-07-05T08:05:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65272
2012-07-05T08:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65273
2012-07-05T08:05:50-03:00,info,appl
listen,17,0.0.0.0,65274
2012-07-05T08:05:50-03:00,info,appl
listen,17,0.0.0.0,65275
2012-07-05T08:05:50-03:00,info,appl
listen,17,0.0.0.0,65276
2012-07-05T08:07:10-03:00,info,appl
w,listen,17,0.0.0.0,63641
2012-07-05T08:07:10-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-05T08:07:10-03:00,info,appl
listen,17,0.0.0.0,63642
2012-07-05T08:07:10-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T08:07:10-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T08:07:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T08:07:10-03:00,info,appl
w,listen,17,0.0.0.0,62596
2012-07-05T08:07:10-03:00,info,appl
listen,17,0.0.0.0,62597
2012-07-05T08:07:11-03:00,info,appl
listen,17,0.0.0.0,62598
2012-07-05T08:07:11-03:00,info,appl
w,listen,17,0.0.0.0,54387
2012-07-05T08:07:11-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T08:07:11-03:00,info,appl
listen,17,0.0.0.0,54388
2012-07-05T08:07:12-03:00,info,appl
listen,17,0.0.0.0,54389
2012-07-05T08:07:12-03:00,info,appl
listen,17,0.0.0.0,54390
2012-07-05T08:07:13-03:00,info,appl
listen,17,0.0.0.0,54391
2012-07-05T08:07:13-03:00,info,appl
listen,17,0.0.0.0,54392
2012-07-05T08:07:13-03:00,info,appl
listen,17,0.0.0.0,54393
2012-07-05T08:07:13-03:00,info,appl
listen,17,0.0.0.0,54394
2012-07-05T08:07:13-03:00,info,appl
listen,17,0.0.0.0,54395
2012-07-05T08:07:14-03:00,info,appl
listen,17,0.0.0.0,54396
2012-07-05T08:07:14-03:00,info,appl
w,listen,17,0.0.0.0,57869
2012-07-05T08:07:14-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T08:07:18-03:00,info,appl
w,listen,17,0.0.0.0,58322
2012-07-05T08:07:18-03:00,info,appl
w,listen,17,0.0.0.0,59341
2012-07-05T08:07:18-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T08:07:18-03:00,info,appl
w,listen,17,0.0.0.0,54341
2012-07-05T08:07:18-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-05T08:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:08:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:08:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:08:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54342
2012-07-05T08:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54343
2012-07-05T08:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54344
2012-07-05T08:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54345
2012-07-05T08:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54346
2012-07-05T08:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54347
2012-07-05T08:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54348
2012-07-05T08:08:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54349
2012-07-05T08:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54350
2012-07-05T08:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54351
2012-07-05T08:08:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54352
2012-07-05T08:08:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:09:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.127,56488
2012-07-05T08:12:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.230,1164
2012-07-05T08:13:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.123,53044
2012-07-05T08:13:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:13:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:13:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:13:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53573
2012-07-05T08:13:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:13:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53574
2012-07-05T08:13:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53575
2012-07-05T08:13:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60793
2012-07-05T08:13:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60794
2012-07-05T08:13:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60795
2012-07-05T08:13:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60796
2012-07-05T08:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60797
2012-07-05T08:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60798
2012-07-05T08:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60799
2012-07-05T08:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60800
2012-07-05T08:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60801
2012-07-05T08:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60802
2012-07-05T08:14:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:14:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:15:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:15:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:15:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:15:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.236,49880
2012-07-05T08:15:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:16:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T08:16:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:16:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60803
2012-07-05T08:16:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:16:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60804
2012-07-05T08:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60805
2012-07-05T08:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60806
2012-07-05T08:16:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60807
2012-07-05T08:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60808
2012-07-05T08:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60809
2012-07-05T08:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60810
2012-07-05T08:16:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60811
2012-07-05T08:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60812
2012-07-05T08:16:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60813
2012-07-05T08:18:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,64158
2012-07-05T08:18:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,64159
2012-07-05T08:18:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:18:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:18:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:18:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60814
2012-07-05T08:18:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:18:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60815
2012-07-05T08:18:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60816
2012-07-05T08:18:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60817
2012-07-05T08:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60818
2012-07-05T08:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60819
2012-07-05T08:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60820
2012-07-05T08:18:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60821
2012-07-05T08:18:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60822
2012-07-05T08:18:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60823
2012-07-05T08:18:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60824
2012-07-05T08:19:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,64160
2012-07-05T08:20:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:20:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60825
2012-07-05T08:20:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:20:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60826
2012-07-05T08:20:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60827
2012-07-05T08:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60828
2012-07-05T08:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60829
2012-07-05T08:20:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60830
2012-07-05T08:20:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60831
2012-07-05T08:20:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60832
2012-07-05T08:20:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60833
2012-07-05T08:20:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60834
2012-07-05T08:20:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60835
2012-07-05T08:21:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:21:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:22:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.182,3407
2012-07-05T08:22:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:22:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:23:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.212,55748
2012-07-05T08:23:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:23:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55674
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55675
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55676
2012-07-05T08:23:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52721
2012-07-05T08:23:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:23:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52722
2012-07-05T08:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52723
2012-07-05T08:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52724
2012-07-05T08:23:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52725
2012-07-05T08:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52726
2012-07-05T08:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52727
2012-07-05T08:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52728
2012-07-05T08:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52729
2012-07-05T08:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52730
2012-07-05T08:25:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,61709
2012-07-05T08:25:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.126,54328
2012-07-05T08:26:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,62056
2012-07-05T08:28:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:28:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T08:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52731
2012-07-05T08:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52732
2012-07-05T08:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52733
2012-07-05T08:28:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52734
2012-07-05T08:28:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52735
2012-07-05T08:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52736
2012-07-05T08:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52737
2012-07-05T08:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52738
2012-07-05T08:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52739
2012-07-05T08:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52740
2012-07-05T08:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52741
2012-07-05T08:29:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:29:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:29:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:30:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:30:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.2,65273
2012-07-05T08:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57562
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,56381
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56382
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56383
2012-07-05T08:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56384
2012-07-05T08:31:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53542
2012-07-05T08:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53543
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63446
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63447
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52663
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52664
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59733
2012-07-05T08:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59734
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58536
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58537
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63081
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63082
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51127
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51128
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49506
2012-07-05T08:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49507
2012-07-05T08:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,1820
2012-07-05T08:32:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.99,3026
2012-07-05T08:33:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:33:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53760
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53761
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:33:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53762
2012-07-05T08:33:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.2,57993
2012-07-05T08:33:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50752
2012-07-05T08:33:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50753
2012-07-05T08:33:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50754
2012-07-05T08:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50755
2012-07-05T08:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50756
2012-07-05T08:33:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50757
2012-07-05T08:33:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50758
2012-07-05T08:33:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50759
2012-07-05T08:33:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50760
2012-07-05T08:33:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50761
2012-07-05T08:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50762
2012-07-05T08:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:35:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50763
2012-07-05T08:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50764
2012-07-05T08:35:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50765
2012-07-05T08:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50766
2012-07-05T08:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50767
2012-07-05T08:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50768
2012-07-05T08:36:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50769
2012-07-05T08:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50770
2012-07-05T08:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50771
2012-07-05T08:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50772
2012-07-05T08:36:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59294
2012-07-05T08:36:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59295
2012-07-05T08:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:36:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59296
2012-07-05T08:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59297
2012-07-05T08:36:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59298
2012-07-05T08:36:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59299
2012-07-05T08:36:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:36:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:36:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59300
2012-07-05T08:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59301
2012-07-05T08:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59302
2012-07-05T08:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59303
2012-07-05T08:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59304
2012-07-05T08:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59305
2012-07-05T08:36:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59306
2012-07-05T08:36:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.207,1144
2012-07-05T08:36:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:36:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.18,1820
2012-07-05T08:37:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:37:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63964
2012-07-05T08:37:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:37:44-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T08:37:44-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T08:38:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T08:38:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T08:38:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63965
2012-07-05T08:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63966
2012-07-05T08:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63967
2012-07-05T08:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63968
2012-07-05T08:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63969
2012-07-05T08:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63970
2012-07-05T08:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63971
2012-07-05T08:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63972
2012-07-05T08:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63973
2012-07-05T08:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63974
2012-07-05T08:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63975
2012-07-05T08:41:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.207,1257
2012-07-05T08:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57818
2012-07-05T08:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61950
2012-07-05T08:43:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:43:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:43:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.7,49544
2012-07-05T08:43:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:43:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.235,1172
2012-07-05T08:43:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T08:43:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52404
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52405
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52406
2012-07-05T08:44:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63121
2012-07-05T08:44:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:44:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63122
2012-07-05T08:44:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63123
2012-07-05T08:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63124
2012-07-05T08:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63125
2012-07-05T08:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63126
2012-07-05T08:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63127
2012-07-05T08:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63128
2012-07-05T08:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63129
2012-07-05T08:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63130
2012-07-05T08:44:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:44:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.34,2218
2012-07-05T08:45:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:45:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T08:46:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.5,50957
2012-07-05T08:46:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T08:46:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:46:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63131
2012-07-05T08:46:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:46:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63132
2012-07-05T08:46:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63133
2012-07-05T08:46:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63134
2012-07-05T08:46:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63135
2012-07-05T08:46:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63136
2012-07-05T08:46:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63137
2012-07-05T08:46:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63138
2012-07-05T08:46:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63139
2012-07-05T08:46:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63140
2012-07-05T08:47:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63141
2012-07-05T08:48:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.48,49294
2012-07-05T08:49:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T08:49:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T08:49:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:49:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63142
2012-07-05T08:49:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:49:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63143
2012-07-05T08:49:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63144
2012-07-05T08:49:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63145
2012-07-05T08:49:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63146
2012-07-05T08:49:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63147
2012-07-05T08:49:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63148
2012-07-05T08:49:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63149
2012-07-05T08:49:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63150
2012-07-05T08:49:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63151
2012-07-05T08:49:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63152
2012-07-05T08:50:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:50:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:50:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,61694
2012-07-05T08:50:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63153
2012-07-05T08:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:51:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63154
2012-07-05T08:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63155
2012-07-05T08:51:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63156
2012-07-05T08:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63157
2012-07-05T08:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63158
2012-07-05T08:51:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63159
2012-07-05T08:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63160
2012-07-05T08:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63161
2012-07-05T08:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63162
2012-07-05T08:51:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63163
2012-07-05T08:51:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:51:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.178,4049
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57833
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57834
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63874
2012-07-05T08:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63875
2012-07-05T08:53:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63876
2012-07-05T08:53:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64823
2012-07-05T08:53:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:53:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60068
2012-07-05T08:53:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60069
2012-07-05T08:53:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60070
2012-07-05T08:53:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60071
2012-07-05T08:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60072
2012-07-05T08:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60073
2012-07-05T08:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60074
2012-07-05T08:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60075
2012-07-05T08:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60076
2012-07-05T08:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60077
2012-07-05T08:53:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58184
2012-07-05T08:53:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:54:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52765
2012-07-05T08:54:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64364
2012-07-05T08:54:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:54:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61054
2012-07-05T08:54:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:54:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:54:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52716
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.12,53
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52717
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T08:54:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52718
2012-07-05T08:54:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62987
2012-07-05T08:54:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T08:54:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62988
2012-07-05T08:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62989
2012-07-05T08:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62990
2012-07-05T08:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62991
2012-07-05T08:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62992
2012-07-05T08:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62993
2012-07-05T08:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62994
2012-07-05T08:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62995
2012-07-05T08:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62996
2012-07-05T08:54:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.13,1630
2012-07-05T08:55:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.96,2022
2012-07-05T08:57:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T08:57:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:57:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:58:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.8,56396
2012-07-05T08:58:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T08:59:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T08:59:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T08:59:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T08:59:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62997
2012-07-05T08:59:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T08:59:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62998
2012-07-05T08:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62999
2012-07-05T08:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63000
2012-07-05T08:59:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63001
2012-07-05T08:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63002
2012-07-05T08:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63003
2012-07-05T08:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63004
2012-07-05T08:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63005
2012-07-05T08:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63006
2012-07-05T08:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63007
2012-07-05T09:00:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,1104
2012-07-05T09:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T09:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,63008
2012-07-05T09:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.13,12110
2012-07-05T09:00:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:00:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:00:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,56743
2012-07-05T09:00:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-05T09:01:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.14,59326
2012-07-05T09:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389

2012-07-05T09:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63009
2012-07-05T09:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63010
2012-07-05T09:02:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63011
2012-07-05T09:02:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63012
2012-07-05T09:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63013
2012-07-05T09:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63014
2012-07-05T09:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63015
2012-07-05T09:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63016
2012-07-05T09:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63017
2012-07-05T09:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63018
2012-07-05T09:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63019
2012-07-05T09:02:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.25,2288
2012-07-05T09:04:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:04:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:04:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:04:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61600
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61601
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:04:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61602
2012-07-05T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62135
2012-07-05T09:04:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:04:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62136
2012-07-05T09:04:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62137
2012-07-05T09:04:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62138
2012-07-05T09:04:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62139

2012-07-05T09:04:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62140
2012-07-05T09:04:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62141
2012-07-05T09:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62142
2012-07-05T09:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62143
2012-07-05T09:04:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62144
2012-07-05T09:04:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.205,3471
2012-07-05T09:05:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:05:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,4229
2012-07-05T09:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62145
2012-07-05T09:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:06:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.25,55183
2012-07-05T09:06:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62146
2012-07-05T09:06:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62147
2012-07-05T09:06:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62148
2012-07-05T09:06:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62149
2012-07-05T09:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62150
2012-07-05T09:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62151
2012-07-05T09:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62152
2012-07-05T09:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62153
2012-07-05T09:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62154
2012-07-05T09:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62155
2012-07-05T09:06:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.9,63131
2012-07-05T09:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.167,1896
2012-07-05T09:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56547
2012-07-05T09:07:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56548
2012-07-05T09:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135

2012-07-05T09:07:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:07:38-03:00,info,appl
w,listen,17,0.0.0.0,49441
2012-07-05T09:07:38-03:00,info,appl
listen,17,0.0.0.0,49442
2012-07-05T09:07:38-03:00,info,appl
listen,17,0.0.0.0,49443
2012-07-05T09:07:39-03:00,info,appl
w,listen,17,0.0.0.0,61366
2012-07-05T09:07:39-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T09:07:39-03:00,info,appl
listen,17,0.0.0.0,61367
2012-07-05T09:07:39-03:00,info,appl
listen,17,0.0.0.0,61368
2012-07-05T09:07:40-03:00,info,appl
listen,17,0.0.0.0,61369
2012-07-05T09:07:40-03:00,info,appl
listen,17,0.0.0.0,61370
2012-07-05T09:07:40-03:00,info,appl
listen,17,0.0.0.0,61371
2012-07-05T09:07:41-03:00,info,appl
listen,17,0.0.0.0,61372
2012-07-05T09:07:41-03:00,info,appl
listen,17,0.0.0.0,61373
2012-07-05T09:07:41-03:00,info,appl
listen,17,0.0.0.0,61374
2012-07-05T09:07:41-03:00,info,appl
listen,17,0.0.0.0,61375
2012-07-05T09:07:41-03:00,info,appl
w,listen,17,0.0.0.0,51274
2012-07-05T09:07:41-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T09:07:45-03:00,info,appl
w,listen,17,0.0.0.0,63574
2012-07-05T09:07:45-03:00,info,appl
w,listen,17,0.0.0.0,54998
2012-07-05T09:07:45-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T09:07:45-03:00,info,appl
w,listen,17,0.0.0.0,61429
2012-07-05T09:07:45-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-05T09:07:51-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T09:07:51-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:07:51-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:07:51-03:00,info,appl
listen,17,0.0.0.0,61430
2012-07-05T09:07:51-03:00,info,appl
listen,17,0.0.0.0,61431
2012-07-05T09:07:52-03:00,info,appl
listen,17,0.0.0.0,61432
2012-07-05T09:07:52-03:00,info,appl
listen,17,0.0.0.0,61433
2012-07-05T09:07:52-03:00,info,appl
listen,17,0.0.0.0,61434

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61435
2012-07-05T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61436
2012-07-05T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61437
2012-07-05T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61438
2012-07-05T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61439
2012-07-05T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61440
2012-07-05T09:07:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.138,2654
2012-07-05T09:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T09:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61441
2012-07-05T09:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:07:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61442
2012-07-05T09:07:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61443
2012-07-05T09:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61444
2012-07-05T09:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61445
2012-07-05T09:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61446
2012-07-05T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61447
2012-07-05T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61448
2012-07-05T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61449
2012-07-05T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61450
2012-07-05T09:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61451
2012-07-05T09:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T09:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61452
2012-07-05T09:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61453
2012-07-05T09:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61454
2012-07-05T09:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61455
2012-07-05T09:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61456
2012-07-05T09:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61457
2012-07-05T09:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61458

2012-07-05T09:08:08-03:00,info,appl
listen,17,0.0.0.0,61459
2012-07-05T09:08:08-03:00,info,appl
listen,17,0.0.0.0,61460
2012-07-05T09:08:09-03:00,info,appl
listen,17,0.0.0.0,61461
2012-07-05T09:08:09-03:00,info,appl
listen,17,0.0.0.0,61462
2012-07-05T09:08:13-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:13-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:13-03:00,info,appl
listen,17,0.0.0.0,61463
2012-07-05T09:08:14-03:00,info,appl
listen,17,0.0.0.0,61464
2012-07-05T09:08:14-03:00,info,appl
listen,17,0.0.0.0,61465
2012-07-05T09:08:15-03:00,info,appl
listen,17,0.0.0.0,61466
2012-07-05T09:08:15-03:00,info,appl
listen,17,0.0.0.0,61467
2012-07-05T09:08:15-03:00,info,appl
listen,17,0.0.0.0,61468
2012-07-05T09:08:16-03:00,info,appl
listen,17,0.0.0.0,61469
2012-07-05T09:08:16-03:00,info,appl
listen,17,0.0.0.0,61470
2012-07-05T09:08:16-03:00,info,appl
listen,17,0.0.0.0,61471
2012-07-05T09:08:16-03:00,info,appl
listen,17,0.0.0.0,61472
2012-07-05T09:08:16-03:00,info,appl
listen,17,0.0.0.0,61473
2012-07-05T09:08:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:21-03:00,info,appl
listen,17,0.0.0.0,61474
2012-07-05T09:08:21-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T09:08:22-03:00,info,appl
listen,17,0.0.0.0,61475
2012-07-05T09:08:22-03:00,info,appl
listen,17,0.0.0.0,61476
2012-07-05T09:08:23-03:00,info,appl
listen,17,0.0.0.0,61477
2012-07-05T09:08:23-03:00,info,appl
listen,17,0.0.0.0,61478
2012-07-05T09:08:23-03:00,info,appl
listen,17,0.0.0.0,61479
2012-07-05T09:08:24-03:00,info,appl
listen,17,0.0.0.0,61480
2012-07-05T09:08:24-03:00,info,appl
listen,17,0.0.0.0,61481
2012-07-05T09:08:24-03:00,info,appl
listen,17,0.0.0.0,61482
2012-07-05T09:08:24-03:00,info,appl
listen,17,0.0.0.0,61483

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:08:24-03:00,info,appl
listen,17,0.0.0.0,61484
2012-07-05T09:08:29-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:29-03:00,info,appl
listen,17,0.0.0.0,61485
2012-07-05T09:08:29-03:00,info,appl
listen,17,0.0.0.0,61486
2012-07-05T09:08:30-03:00,info,appl
listen,17,0.0.0.0,61487
2012-07-05T09:08:30-03:00,info,appl
listen,17,0.0.0.0,61488
2012-07-05T09:08:31-03:00,info,appl
listen,17,0.0.0.0,61489
2012-07-05T09:08:31-03:00,info,appl
listen,17,0.0.0.0,61490
2012-07-05T09:08:31-03:00,info,appl
listen,17,0.0.0.0,61491
2012-07-05T09:08:31-03:00,info,appl
listen,17,0.0.0.0,61492
2012-07-05T09:08:32-03:00,info,appl
listen,17,0.0.0.0,61493
2012-07-05T09:08:32-03:00,info,appl
listen,17,0.0.0.0,61494
2012-07-05T09:08:32-03:00,info,appl
listen,17,0.0.0.0,61495
2012-07-05T09:08:37-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:37-03:00,info,appl
listen,17,0.0.0.0,61496
2012-07-05T09:08:37-03:00,info,appl
listen,17,0.0.0.0,61497
2012-07-05T09:08:38-03:00,info,appl
listen,17,0.0.0.0,61498
2012-07-05T09:08:38-03:00,info,appl
listen,17,0.0.0.0,61499
2012-07-05T09:08:38-03:00,info,appl
listen,17,0.0.0.0,61500
2012-07-05T09:08:39-03:00,info,appl
listen,17,0.0.0.0,61501
2012-07-05T09:08:39-03:00,info,appl
listen,17,0.0.0.0,61502
2012-07-05T09:08:39-03:00,info,appl
listen,17,0.0.0.0,61503
2012-07-05T09:08:39-03:00,info,appl
listen,17,0.0.0.0,61504
2012-07-05T09:08:40-03:00,info,appl
listen,17,0.0.0.0,61505
2012-07-05T09:08:40-03:00,info,appl
listen,17,0.0.0.0,61506
2012-07-05T09:08:44-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:44-03:00,info,appl
listen,17,0.0.0.0,61507

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:08:44-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T09:08:45-03:00,info,appl
listen,17,0.0.0.0,61508
2012-07-05T09:08:45-03:00,info,appl
listen,17,0.0.0.0,61509
2012-07-05T09:08:46-03:00,info,appl
listen,17,0.0.0.0,61510
2012-07-05T09:08:46-03:00,info,appl
listen,17,0.0.0.0,61511
2012-07-05T09:08:46-03:00,info,appl
listen,17,0.0.0.0,61512
2012-07-05T09:08:47-03:00,info,appl
listen,17,0.0.0.0,61513
2012-07-05T09:08:47-03:00,info,appl
listen,17,0.0.0.0,61514
2012-07-05T09:08:47-03:00,info,appl
listen,17,0.0.0.0,61515
2012-07-05T09:08:47-03:00,info,appl
listen,17,0.0.0.0,61516
2012-07-05T09:08:47-03:00,info,appl
listen,17,0.0.0.0,61517
2012-07-05T09:08:52-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:08:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:08:52-03:00,info,appl
listen,17,0.0.0.0,61518
2012-07-05T09:08:53-03:00,info,appl
listen,17,0.0.0.0,61519
2012-07-05T09:08:53-03:00,info,appl
listen,17,0.0.0.0,61520
2012-07-05T09:08:54-03:00,info,appl
listen,17,0.0.0.0,61521
2012-07-05T09:08:54-03:00,info,appl
listen,17,0.0.0.0,61522
2012-07-05T09:08:54-03:00,info,appl
listen,17,0.0.0.0,61523
2012-07-05T09:08:55-03:00,info,appl
listen,17,0.0.0.0,61524
2012-07-05T09:08:55-03:00,info,appl
listen,17,0.0.0.0,61525
2012-07-05T09:08:55-03:00,info,appl
listen,17,0.0.0.0,61526
2012-07-05T09:08:55-03:00,info,appl
listen,17,0.0.0.0,61527
2012-07-05T09:08:55-03:00,info,appl
listen,17,0.0.0.0,61528
2012-07-05T09:09:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:09:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:09:00-03:00,info,appl
listen,17,0.0.0.0,61529
2012-07-05T09:09:00-03:00,info,appl
listen,17,0.0.0.0,61530
2012-07-05T09:09:01-03:00,info,appl
listen,17,0.0.0.0,61531
2012-07-05T09:09:01-03:00,info,appl
listen,17,0.0.0.0,61532

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:09:01-03:00,info,appl
listen,17,0.0.0.0,61533
2012-07-05T09:09:02-03:00,info,appl
listen,17,0.0.0.0,61534
2012-07-05T09:09:02-03:00,info,appl
listen,17,0.0.0.0,61535
2012-07-05T09:09:02-03:00,info,appl
listen,17,0.0.0.0,61536
2012-07-05T09:09:02-03:00,info,appl
listen,17,0.0.0.0,61537
2012-07-05T09:09:03-03:00,info,appl
listen,17,0.0.0.0,61538
2012-07-05T09:09:03-03:00,info,appl
listen,17,0.0.0.0,61539
2012-07-05T09:09:15-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T09:09:15-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:09:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:09:15-03:00,info,appl
listen,17,0.0.0.0,61540
2012-07-05T09:09:15-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T09:09:15-03:00,info,appl
listen,17,0.0.0.0,61541
2012-07-05T09:09:16-03:00,info,appl
listen,17,0.0.0.0,61542
2012-07-05T09:09:16-03:00,info,appl
listen,17,0.0.0.0,61543
2012-07-05T09:09:16-03:00,info,appl
listen,17,0.0.0.0,61544
2012-07-05T09:09:17-03:00,info,appl
listen,17,0.0.0.0,61545
2012-07-05T09:09:17-03:00,info,appl
listen,17,0.0.0.0,61546
2012-07-05T09:09:17-03:00,info,appl
listen,17,0.0.0.0,61547
2012-07-05T09:09:18-03:00,info,appl
listen,17,0.0.0.0,61548
2012-07-05T09:09:18-03:00,info,appl
listen,17,0.0.0.0,61549
2012-07-05T09:09:18-03:00,info,appl
listen,17,0.0.0.0,61550
2012-07-05T09:09:22-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:09:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:09:22-03:00,info,appl
listen,17,0.0.0.0,61551
2012-07-05T09:09:23-03:00,info,appl
listen,17,0.0.0.0,61552
2012-07-05T09:09:23-03:00,info,appl
listen,17,0.0.0.0,61553
2012-07-05T09:09:24-03:00,info,appl
listen,17,0.0.0.0,61554
2012-07-05T09:09:24-03:00,info,appl
listen,17,0.0.0.0,61555
2012-07-05T09:09:24-03:00,info,appl
listen,17,0.0.0.0,61556

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:09:25-03:00,info,appl
listen,17,0.0.0.0,61557
2012-07-05T09:09:25-03:00,info,appl
listen,17,0.0.0.0,61558
2012-07-05T09:09:25-03:00,info,appl
listen,17,0.0.0.0,61559
2012-07-05T09:09:25-03:00,info,appl
listen,17,0.0.0.0,61560
2012-07-05T09:09:25-03:00,info,appl
listen,17,0.0.0.0,61561
2012-07-05T09:09:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:09:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:09:30-03:00,info,appl
listen,17,0.0.0.0,61562
2012-07-05T09:09:31-03:00,info,appl
listen,17,0.0.0.0,61563
2012-07-05T09:09:31-03:00,info,appl
listen,17,0.0.0.0,61564
2012-07-05T09:09:32-03:00,info,appl
listen,17,0.0.0.0,61565
2012-07-05T09:09:32-03:00,info,appl
listen,17,0.0.0.0,61566
2012-07-05T09:09:32-03:00,info,appl
listen,17,0.0.0.0,61567
2012-07-05T09:09:33-03:00,info,appl
listen,17,0.0.0.0,61568
2012-07-05T09:09:33-03:00,info,appl
listen,17,0.0.0.0,61569
2012-07-05T09:09:33-03:00,info,appl
listen,17,0.0.0.0,61570
2012-07-05T09:09:33-03:00,info,appl
listen,17,0.0.0.0,61571
2012-07-05T09:09:33-03:00,info,appl
listen,17,0.0.0.0,61572
2012-07-05T09:09:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T09:09:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T09:09:38-03:00,info,appl
listen,17,0.0.0.0,61573
2012-07-05T09:09:38-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T09:09:38-03:00,info,appl
listen,17,0.0.0.0,61574
2012-07-05T09:09:39-03:00,info,appl
listen,17,0.0.0.0,61575
2012-07-05T09:09:39-03:00,info,appl
listen,17,0.0.0.0,61576
2012-07-05T09:09:40-03:00,info,appl
listen,17,0.0.0.0,61577
2012-07-05T09:09:40-03:00,info,appl
listen,17,0.0.0.0,61578
2012-07-05T09:09:40-03:00,info,appl
listen,17,0.0.0.0,61579
2012-07-05T09:09:40-03:00,info,appl
listen,17,0.0.0.0,61580
2012-07-05T09:09:41-03:00,info,appl
listen,17,0.0.0.0,61581

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T09:09:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.25,2069
2012-07-05T09:09:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61582
2012-07-05T09:09:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61583
2012-07-05T09:09:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:09:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61584
2012-07-05T09:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61585
2012-07-05T09:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61586
2012-07-05T09:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T09:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61587
2012-07-05T09:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61588
2012-07-05T09:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61589
2012-07-05T09:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61590
2012-07-05T09:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61591
2012-07-05T09:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61592
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61593
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61594
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61595
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61596
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61597
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61598
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61599
2012-07-05T09:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61600
2012-07-05T09:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61601
2012-07-05T09:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61602
2012-07-05T09:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61603
2012-07-05T09:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61604
2012-07-05T09:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61605

2012-07-05T09:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T09:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61606
2012-07-05T09:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61607
2012-07-05T09:09:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61608
2012-07-05T09:09:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61609
2012-07-05T09:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61610
2012-07-05T09:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61611
2012-07-05T09:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61612
2012-07-05T09:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61613
2012-07-05T09:09:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61614
2012-07-05T09:09:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61615
2012-07-05T09:09:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61616
2012-07-05T09:10:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.239,64175
2012-07-05T09:11:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.156,1325
2012-07-05T09:11:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:11:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:12:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:12:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.45,65196
2012-07-05T09:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,2359
2012-07-05T09:14:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.229,2156
2012-07-05T09:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63284
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63285
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63286

2012-07-05T09:14:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53856
2012-07-05T09:14:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53857
2012-07-05T09:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53858
2012-07-05T09:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53859
2012-07-05T09:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53860
2012-07-05T09:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53861
2012-07-05T09:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53862
2012-07-05T09:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53863
2012-07-05T09:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53864
2012-07-05T09:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53865
2012-07-05T09:15:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:15:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:16:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.26,61146
2012-07-05T09:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.34,1335
2012-07-05T09:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T09:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53866
2012-07-05T09:17:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53867
2012-07-05T09:17:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53868
2012-07-05T09:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53869
2012-07-05T09:17:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53870
2012-07-05T09:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53871
2012-07-05T09:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53872
2012-07-05T09:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53873
2012-07-05T09:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53874
2012-07-05T09:17:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.83,4533
2012-07-05T09:17:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53875
2012-07-05T09:17:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53876

2012-07-05T09:18:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.10.254,1278
2012-07-05T09:18:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:18:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:19:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.246,62509
2012-07-05T09:19:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60291
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60292
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63720
2012-07-05T09:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63721
2012-07-05T09:19:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63722
2012-07-05T09:19:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57768
2012-07-05T09:19:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:19:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57769
2012-07-05T09:19:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57770
2012-07-05T09:19:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57771
2012-07-05T09:19:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57772
2012-07-05T09:19:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57773
2012-07-05T09:19:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57774
2012-07-05T09:19:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57775
2012-07-05T09:19:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57776
2012-07-05T09:19:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57777
2012-07-05T09:19:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52933
2012-07-05T09:19:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:19:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50290
2012-07-05T09:19:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56066
2012-07-05T09:19:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T09:19:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51328
2012-07-05T09:19:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:19:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:19:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T09:19:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T09:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51329
2012-07-05T09:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51330
2012-07-05T09:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51331
2012-07-05T09:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51332
2012-07-05T09:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51333
2012-07-05T09:20:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51334
2012-07-05T09:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51335
2012-07-05T09:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51336
2012-07-05T09:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51337
2012-07-05T09:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51338
2012-07-05T09:20:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51339
2012-07-05T09:20:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.52,63530
2012-07-05T09:20:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.120,57567
2012-07-05T09:21:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,62223
2012-07-05T09:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51340
2012-07-05T09:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51341
2012-07-05T09:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51342
2012-07-05T09:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51343
2012-07-05T09:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51344
2012-07-05T09:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51345
2012-07-05T09:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51346

2012-07-05T09:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51347
2012-07-05T09:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51348
2012-07-05T09:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51349
2012-07-05T09:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51350
2012-07-05T09:21:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,63135
2012-07-05T09:22:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.74,2511
2012-07-05T09:22:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,1485
2012-07-05T09:23:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.69,3622
2012-07-05T09:24:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.78,53354
2012-07-05T09:24:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.21,54422
2012-07-05T09:24:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,50972
2012-07-05T09:25:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T09:25:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62313
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62314
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62315
2012-07-05T09:25:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59633
2012-07-05T09:25:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:25:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59634
2012-07-05T09:25:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59635
2012-07-05T09:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59636
2012-07-05T09:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59637
2012-07-05T09:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59638
2012-07-05T09:25:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59639
2012-07-05T09:25:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59640
2012-07-05T09:25:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59641
2012-07-05T09:25:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59642

2012-07-05T09:25:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.89,61338
2012-07-05T09:25:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.133,3638
2012-07-05T09:25:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:25:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:26:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.102,2936
2012-07-05T09:26:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:26:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.66,1205
2012-07-05T09:26:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:27:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.19,3354
2012-07-05T09:27:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.37,50484
2012-07-05T09:27:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.46,62513
2012-07-05T09:28:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.216,1246
2012-07-05T09:28:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.185,1809
2012-07-05T09:29:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.94,59482
2012-07-05T09:30:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T09:30:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T09:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T09:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59643
2012-07-05T09:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59644
2012-07-05T09:30:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59645
2012-07-05T09:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59646
2012-07-05T09:30:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59647
2012-07-05T09:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59648
2012-07-05T09:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59649
2012-07-05T09:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59650
2012-07-05T09:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59651
2012-07-05T09:30:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59652
2012-07-05T09:30:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59653
2012-07-05T09:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-05T09:30:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:30:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:30:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:30:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.134,4193
2012-07-05T09:31:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.74,57504
2012-07-05T09:31:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,2970
2012-07-05T09:32:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.109,65443
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63766
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63767
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51647
2012-07-05T09:32:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51648
2012-07-05T09:32:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52675
2012-07-05T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52676
2012-07-05T09:32:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57670
2012-07-05T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57671
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63714
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63715
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53585
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53586
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53587
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54086
2012-07-05T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54087
2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58091
2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58092
2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52273
2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52274

2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56338
2012-07-05T09:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56339
2012-07-05T09:32:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.59,55175
2012-07-05T09:32:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,59060
2012-07-05T09:33:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:33:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:33:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:34:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,1811
2012-07-05T09:34:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.3,1873
2012-07-05T09:34:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.152,3941
2012-07-05T09:35:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.42,51530
2012-07-05T09:35:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T09:35:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54727
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54728
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54729
2012-07-05T09:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51995
2012-07-05T09:35:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51996
2012-07-05T09:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51997
2012-07-05T09:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51998
2012-07-05T09:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51999
2012-07-05T09:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52000
2012-07-05T09:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52001
2012-07-05T09:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52002
2012-07-05T09:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52003

2012-07-05T09:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52004
2012-07-05T09:35:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.94,63700
2012-07-05T09:36:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.128,2234
2012-07-05T09:36:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.218,1827
2012-07-05T09:36:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:36:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52005
2012-07-05T09:36:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:36:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52006
2012-07-05T09:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52007
2012-07-05T09:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52008
2012-07-05T09:36:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52009
2012-07-05T09:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52010
2012-07-05T09:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52011
2012-07-05T09:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52012
2012-07-05T09:36:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52013
2012-07-05T09:36:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52014
2012-07-05T09:36:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52015
2012-07-05T09:36:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64762
2012-07-05T09:36:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:36:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64763
2012-07-05T09:36:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:36:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64764
2012-07-05T09:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64765
2012-07-05T09:36:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64766
2012-07-05T09:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64767
2012-07-05T09:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64768
2012-07-05T09:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64769
2012-07-05T09:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64770
2012-07-05T09:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64771
2012-07-05T09:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64772

2012-07-05T09:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64773
2012-07-05T09:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64774
2012-07-05T09:37:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,1286
2012-07-05T09:37:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.33,1095
2012-07-05T09:38:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,2574
2012-07-05T09:38:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.163,50134
2012-07-05T09:38:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.156,3522
2012-07-05T09:39:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.98,2561
2012-07-05T09:39:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.87,53874
2012-07-05T09:40:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:40:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:40:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,1879
2012-07-05T09:40:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:40:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64775
2012-07-05T09:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:40:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64776
2012-07-05T09:40:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64777
2012-07-05T09:40:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64778
2012-07-05T09:40:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64779
2012-07-05T09:40:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64780
2012-07-05T09:40:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64781
2012-07-05T09:40:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64782
2012-07-05T09:40:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64783
2012-07-05T09:40:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64784
2012-07-05T09:40:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64785
2012-07-05T09:40:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,1250
2012-07-05T09:40:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:40:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,49764

2012-07-05T09:41:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:41:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.125,3780
2012-07-05T09:42:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.105,2866
2012-07-05T09:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.62,60116
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56999
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57000
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65126
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65127
2012-07-05T09:42:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65128
2012-07-05T09:42:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55833
2012-07-05T09:42:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55834
2012-07-05T09:42:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55835
2012-07-05T09:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55836
2012-07-05T09:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55837
2012-07-05T09:43:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55838
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55839
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55840
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55841
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55842
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50619
2012-07-05T09:43:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:43:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.193,2160
2012-07-05T09:43:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53630
2012-07-05T09:43:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54350
2012-07-05T09:43:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53

2012-07-05T09:43:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63073
2012-07-05T09:43:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:43:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.86,1931
2012-07-05T09:44:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,2304
2012-07-05T09:44:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55643
2012-07-05T09:44:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:44:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58907
2012-07-05T09:44:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.76,54248
2012-07-05T09:44:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.117,58142
2012-07-05T09:45:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.177,54322
2012-07-05T09:45:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T09:45:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63974
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63975
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:45:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63976
2012-07-05T09:45:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57907
2012-07-05T09:45:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:45:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57908
2012-07-05T09:45:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57909
2012-07-05T09:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57910
2012-07-05T09:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57911
2012-07-05T09:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57912
2012-07-05T09:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57913
2012-07-05T09:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57914
2012-07-05T09:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57915
2012-07-05T09:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57916
2012-07-05T09:45:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-05T09:45:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T09:45:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.177,54324
2012-07-05T09:46:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.148,61267
2012-07-05T09:46:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.129,1791
2012-07-05T09:47:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:47:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:47:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.202,2124
2012-07-05T09:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T09:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57917
2012-07-05T09:47:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57918
2012-07-05T09:47:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57919
2012-07-05T09:47:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57920
2012-07-05T09:47:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57921
2012-07-05T09:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57922
2012-07-05T09:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57923
2012-07-05T09:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57924
2012-07-05T09:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57925
2012-07-05T09:47:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57926
2012-07-05T09:47:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57927
2012-07-05T09:47:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:47:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.113,49540
2012-07-05T09:48:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.72,1053
2012-07-05T09:48:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:48:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.142,2398
2012-07-05T09:49:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.134,59759
2012-07-05T09:50:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.92,3871
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49677
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53

2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49678
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55768
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55769
2012-07-05T09:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55770
2012-07-05T09:50:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55063
2012-07-05T09:50:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55064
2012-07-05T09:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55065
2012-07-05T09:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55066
2012-07-05T09:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55067
2012-07-05T09:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55068
2012-07-05T09:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55069
2012-07-05T09:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55070
2012-07-05T09:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55071
2012-07-05T09:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55072
2012-07-05T09:50:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49806
2012-07-05T09:50:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60220
2012-07-05T09:50:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:50:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60221
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63914
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57604
2012-07-05T09:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57605

2012-07-05T09:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57606
2012-07-05T09:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57607
2012-07-05T09:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57608
2012-07-05T09:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57609
2012-07-05T09:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57610
2012-07-05T09:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57611
2012-07-05T09:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57612
2012-07-05T09:50:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57613
2012-07-05T09:50:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57614
2012-07-05T09:51:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.135,1723
2012-07-05T09:51:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,2869
2012-07-05T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57615
2012-07-05T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57616
2012-07-05T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57617
2012-07-05T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57618
2012-07-05T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57619
2012-07-05T09:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57620
2012-07-05T09:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57621
2012-07-05T09:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57622
2012-07-05T09:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57623
2012-07-05T09:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57624
2012-07-05T09:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57625
2012-07-05T09:52:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.4,49768
2012-07-05T09:52:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,57819
2012-07-05T09:53:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.200,54636
2012-07-05T09:54:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,57822
2012-07-05T09:54:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T09:54:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T09:54:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.2.82,4610
2012-07-05T09:54:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:55:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.203,2191
2012-07-05T09:55:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T09:55:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.235,1562
2012-07-05T09:55:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T09:55:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53468
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53469
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T09:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53470
2012-07-05T09:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51998
2012-07-05T09:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T09:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51999
2012-07-05T09:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52000
2012-07-05T09:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52001
2012-07-05T09:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52002
2012-07-05T09:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52003
2012-07-05T09:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52004
2012-07-05T09:55:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57628
2012-07-05T09:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57629
2012-07-05T09:55:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51591
2012-07-05T09:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51592
2012-07-05T09:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51593
2012-07-05T09:55:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.37,2311
2012-07-05T09:56:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.141,53111
2012-07-05T09:56:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,58608
2012-07-05T09:57:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.61,1116

2012-07-05T09:57:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.4.61,1134
2012-07-05T09:58:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.102,1811
2012-07-05T09:58:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.19,1345
2012-07-05T09:59:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.43,61982
2012-07-05T10:00:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,55664
2012-07-05T10:00:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:00:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:00:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.41,2279
2012-07-05T10:00:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T10:00:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T10:00:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:00:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51594
2012-07-05T10:00:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51595
2012-07-05T10:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51596
2012-07-05T10:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51597
2012-07-05T10:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51598
2012-07-05T10:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51599
2012-07-05T10:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51600
2012-07-05T10:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51601
2012-07-05T10:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51602
2012-07-05T10:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51603
2012-07-05T10:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51604
2012-07-05T10:01:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:01:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:02:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:02:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.3,4379
2012-07-05T10:02:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.144,2157
2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51605
2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51606
2012-07-05T10:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51607
2012-07-05T10:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51608
2012-07-05T10:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51609
2012-07-05T10:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51610
2012-07-05T10:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51611
2012-07-05T10:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51612
2012-07-05T10:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51613
2012-07-05T10:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51614
2012-07-05T10:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51615
2012-07-05T10:02:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.195,52963
2012-07-05T10:03:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.23,1186
2012-07-05T10:04:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.151,62191
2012-07-05T10:04:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.191,2292
2012-07-05T10:05:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,52117
2012-07-05T10:05:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.0,1604
2012-07-05T10:05:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T10:05:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52381
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52382
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:05:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52383
2012-07-05T10:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52731
2012-07-05T10:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52732

2012-07-05T10:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52733
2012-07-05T10:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52734
2012-07-05T10:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52735
2012-07-05T10:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52736
2012-07-05T10:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52737
2012-07-05T10:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52738
2012-07-05T10:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52739
2012-07-05T10:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52740
2012-07-05T10:06:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.247,61570
2012-07-05T10:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52741
2012-07-05T10:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52742
2012-07-05T10:06:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52743
2012-07-05T10:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52744
2012-07-05T10:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52745
2012-07-05T10:07:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52746
2012-07-05T10:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52747
2012-07-05T10:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52748
2012-07-05T10:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52749
2012-07-05T10:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52750
2012-07-05T10:07:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52751
2012-07-05T10:07:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,55407
2012-07-05T10:08:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.32,55070
2012-07-05T10:08:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53965
2012-07-05T10:08:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:08:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53966
2012-07-05T10:08:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025

2012-07-05T10:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54998
2012-07-05T10:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54999
2012-07-05T10:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55000
2012-07-05T10:08:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58437
2012-07-05T10:08:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58438
2012-07-05T10:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58439
2012-07-05T10:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58440
2012-07-05T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58441
2012-07-05T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58442
2012-07-05T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58443
2012-07-05T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58444
2012-07-05T10:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58445
2012-07-05T10:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58446
2012-07-05T10:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56757
2012-07-05T10:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49936
2012-07-05T10:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54363
2012-07-05T10:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60053
2012-07-05T10:08:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:08:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.12,2066
2012-07-05T10:08:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:08:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:09:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:09:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,64257
2012-07-05T10:09:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:09:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.244,2620
2012-07-05T10:11:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:11:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-05T10:11:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:11:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60054
2012-07-05T10:11:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60055
2012-07-05T10:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60056
2012-07-05T10:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60057
2012-07-05T10:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60058
2012-07-05T10:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60059
2012-07-05T10:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60060
2012-07-05T10:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60061
2012-07-05T10:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60062
2012-07-05T10:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60063
2012-07-05T10:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60064
2012-07-05T10:11:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.85,1063
2012-07-05T10:13:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.212,1486
2012-07-05T10:13:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.220,3834
2012-07-05T10:14:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,51286
2012-07-05T10:15:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:15:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:15:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.41,1381
2012-07-05T10:15:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:15:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:16:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:16:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60404
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60405
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60406

2012-07-05T10:16:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59176
2012-07-05T10:16:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59177
2012-07-05T10:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59178
2012-07-05T10:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59179
2012-07-05T10:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59180
2012-07-05T10:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59181
2012-07-05T10:16:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59182
2012-07-05T10:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59183
2012-07-05T10:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59184
2012-07-05T10:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59185
2012-07-05T10:16:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.46,57180
2012-07-05T10:16:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.115,52646
2012-07-05T10:17:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.32,63472
2012-07-05T10:17:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T10:17:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:17:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59186
2012-07-05T10:17:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:17:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59187
2012-07-05T10:17:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59188
2012-07-05T10:17:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59189
2012-07-05T10:17:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59190
2012-07-05T10:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59191
2012-07-05T10:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59192
2012-07-05T10:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59193
2012-07-05T10:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59194
2012-07-05T10:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59195
2012-07-05T10:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59196

2012-07-05T10:17:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.232,1426
2012-07-05T10:19:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,58362
2012-07-05T10:20:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.227,1528
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65498
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65499
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51604
2012-07-05T10:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51605
2012-07-05T10:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51606
2012-07-05T10:21:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62607
2012-07-05T10:21:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62608
2012-07-05T10:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62609
2012-07-05T10:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62610
2012-07-05T10:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62611
2012-07-05T10:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62612
2012-07-05T10:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62613
2012-07-05T10:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62614
2012-07-05T10:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62615
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62616
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55140
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:21:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:21:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55141
2012-07-05T10:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55142

2012-07-05T10:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55143
2012-07-05T10:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55144
2012-07-05T10:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55145
2012-07-05T10:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55146
2012-07-05T10:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55147
2012-07-05T10:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55148
2012-07-05T10:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55149
2012-07-05T10:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55150
2012-07-05T10:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55151
2012-07-05T10:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54554
2012-07-05T10:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52106
2012-07-05T10:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60272
2012-07-05T10:21:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:21:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.54,52719
2012-07-05T10:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60273
2012-07-05T10:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:22:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60274
2012-07-05T10:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60275
2012-07-05T10:22:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60276
2012-07-05T10:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60277
2012-07-05T10:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60278
2012-07-05T10:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60279
2012-07-05T10:22:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60280
2012-07-05T10:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60281
2012-07-05T10:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60282
2012-07-05T10:22:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60283
2012-07-05T10:22:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,55044
2012-07-05T10:22:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T10:22:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:23:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:23:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,55045
2012-07-05T10:23:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:24:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.9,53769
2012-07-05T10:24:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,55745
2012-07-05T10:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.9,53935
2012-07-05T10:25:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.115,64083
2012-07-05T10:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54947
2012-07-05T10:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:26:00-03:00,info,appl control,C:\Windows\System32\Macromed\Flash\F
LASHP~1.EXE,allow,connect out,6,23.61.130.70,443
2012-07-05T10:26:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.115,59057
2012-07-05T10:26:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:26:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:26:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:26:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61640
2012-07-05T10:26:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:26:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61641
2012-07-05T10:26:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61642
2012-07-05T10:26:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52436
2012-07-05T10:26:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:26:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52437
2012-07-05T10:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52438
2012-07-05T10:26:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.15,3449
2012-07-05T10:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52439
2012-07-05T10:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52440
2012-07-05T10:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52441
2012-07-05T10:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52442
2012-07-05T10:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52443

2012-07-05T10:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52444
2012-07-05T10:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52445
2012-07-05T10:27:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.75,1988
2012-07-05T10:28:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,58490
2012-07-05T10:29:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.3,61134
2012-07-05T10:29:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:29:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:30:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.250,50279
2012-07-05T10:30:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:30:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:30:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:30:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,59464
2012-07-05T10:31:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:31:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:31:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:31:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T10:31:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52446
2012-07-05T10:31:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:31:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52447
2012-07-05T10:31:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52448
2012-07-05T10:31:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52449
2012-07-05T10:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52450
2012-07-05T10:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52451
2012-07-05T10:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52452
2012-07-05T10:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52453
2012-07-05T10:31:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52454
2012-07-05T10:31:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52455
2012-07-05T10:31:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52456

2012-07-05T10:31:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.31,51026
2012-07-05T10:32:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,62087
2012-07-05T10:32:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,55535
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62374
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60341
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60342
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:32:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60343
2012-07-05T10:32:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49258
2012-07-05T10:32:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49259
2012-07-05T10:32:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49262
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58672
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58673
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55427
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55428
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61211
2012-07-05T10:32:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61212
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57443
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57444
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54799
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54800
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57742
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57743
2012-07-05T10:32:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57744
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64784
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64785

2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55516
2012-07-05T10:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55517
2012-07-05T10:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55518
2012-07-05T10:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62542
2012-07-05T10:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62543
2012-07-05T10:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62544
2012-07-05T10:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62545
2012-07-05T10:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62546
2012-07-05T10:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62547
2012-07-05T10:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62548
2012-07-05T10:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62549
2012-07-05T10:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62550
2012-07-05T10:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62551
2012-07-05T10:34:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65438
2012-07-05T10:34:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:34:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,64713
2012-07-05T10:34:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50478
2012-07-05T10:34:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64240
2012-07-05T10:34:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:34:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62610
2012-07-05T10:34:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:36:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,1885
2012-07-05T10:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:36:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:36:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57160

2012-07-05T10:36:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:36:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57161
2012-07-05T10:36:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:36:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57162
2012-07-05T10:36:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58176
2012-07-05T10:36:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-05T10:36:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58177
2012-07-05T10:36:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58178
2012-07-05T10:36:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58179
2012-07-05T10:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58180
2012-07-05T10:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58181
2012-07-05T10:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58182
2012-07-05T10:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58183
2012-07-05T10:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58184
2012-07-05T10:36:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58185
2012-07-05T10:37:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:37:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:37:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:37:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58186
2012-07-05T10:37:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:37:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58187
2012-07-05T10:37:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58188
2012-07-05T10:37:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58189
2012-07-05T10:37:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58190
2012-07-05T10:37:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58191
2012-07-05T10:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58192
2012-07-05T10:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58193
2012-07-05T10:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58194
2012-07-05T10:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58195
2012-07-05T10:37:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58196

2012-07-05T10:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.47,57478
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55982
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55983
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55984
2012-07-05T10:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55985
2012-07-05T10:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55986
2012-07-05T10:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55987
2012-07-05T10:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55988
2012-07-05T10:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55989
2012-07-05T10:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55990
2012-07-05T10:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55991
2012-07-05T10:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55992
2012-07-05T10:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55993
2012-07-05T10:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55994
2012-07-05T10:37:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,1982
2012-07-05T10:38:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,3856
2012-07-05T10:38:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.55,59127
2012-07-05T10:39:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,56178
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55311
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,52961
2012-07-05T10:39:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59969
2012-07-05T10:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57382
2012-07-05T10:39:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,201.6.5.25,80

2012-07-05T10:39:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58477
2012-07-05T10:39:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.200.156,80
2012-07-05T10:39:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.200.156,443
2012-07-05T10:40:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,56183
2012-07-05T10:40:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.200.156,443
2012-07-05T10:40:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,58478
2012-07-05T10:40:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,58480
2012-07-05T10:40:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-05T10:40:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-05T10:40:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-05T10:40:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.3.43,2869
2012-07-05T10:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56923
2012-07-05T10:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.105.254,80
2012-07-05T10:40:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.105.254,80
2012-07-05T10:40:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.238,56201
2012-07-05T10:41:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.105.254,80
2012-07-05T10:41:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,192.221.105.254,80
2012-07-05T10:41:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,3912
2012-07-05T10:42:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:42:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56924
2012-07-05T10:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56925
2012-07-05T10:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56926
2012-07-05T10:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56927
2012-07-05T10:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56928
2012-07-05T10:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56929
2012-07-05T10:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56930

2012-07-05T10:42:09-03:00,info,appl
listen,17,0.0.0.0,56931
2012-07-05T10:42:09-03:00,info,appl
listen,17,0.0.0.0,56932
2012-07-05T10:42:09-03:00,info,appl
listen,17,0.0.0.0,56933
2012-07-05T10:42:10-03:00,info,appl
listen,17,0.0.0.0,56934
2012-07-05T10:42:17-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:42:41-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:42:42-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:42:45-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:42:47-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:00-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T10:43:00-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:43:00-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:43:00-03:00,info,appl
listen,17,0.0.0.0,56935
2012-07-05T10:43:00-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T10:43:01-03:00,info,appl
listen,17,0.0.0.0,56936
2012-07-05T10:43:01-03:00,info,appl
listen,17,0.0.0.0,56937
2012-07-05T10:43:02-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:02-03:00,info,appl
listen,17,0.0.0.0,56938
2012-07-05T10:43:02-03:00,info,appl
listen,17,0.0.0.0,56939
2012-07-05T10:43:03-03:00,info,appl
listen,17,0.0.0.0,56940
2012-07-05T10:43:03-03:00,info,appl
listen,17,0.0.0.0,56941
2012-07-05T10:43:03-03:00,info,appl
listen,17,0.0.0.0,56942
2012-07-05T10:43:03-03:00,info,appl
listen,17,0.0.0.0,56943
2012-07-05T10:43:03-03:00,info,appl
listen,17,0.0.0.0,56944
2012-07-05T10:43:04-03:00,info,appl
listen,17,0.0.0.0,56945
2012-07-05T10:43:12-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:15-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T10:43:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:43:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:43:15-03:00,info,appl
listen,17,0.0.0.0,56946

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T10:43:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56947
2012-07-05T10:43:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56948
2012-07-05T10:43:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56949
2012-07-05T10:43:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56950
2012-07-05T10:43:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56354
2012-07-05T10:43:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-05T10:43:17-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T10:43:17-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T10:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56355
2012-07-05T10:43:18-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-05T10:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56356
2012-07-05T10:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56357
2012-07-05T10:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56358
2012-07-05T10:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56359
2012-07-05T10:43:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56360
2012-07-05T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56361
2012-07-05T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56362
2012-07-05T10:43:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56363
2012-07-05T10:43:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58647
2012-07-05T10:43:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58648
2012-07-05T10:43:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58649
2012-07-05T10:43:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58650
2012-07-05T10:43:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58651
2012-07-05T10:43:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58652
2012-07-05T10:43:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58653
2012-07-05T10:43:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58654
2012-07-05T10:43:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58655

2012-07-05T10:43:29-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:30-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:43:30-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:43:30-03:00,info,appl
listen,17,0.0.0.0,58656
2012-07-05T10:43:31-03:00,info,appl
listen,17,0.0.0.0,58657
2012-07-05T10:43:31-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:31-03:00,info,appl
listen,17,0.0.0.0,58658
2012-07-05T10:43:32-03:00,info,appl
listen,17,0.0.0.0,58659
2012-07-05T10:43:32-03:00,info,appl
listen,17,0.0.0.0,58660
2012-07-05T10:43:32-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:33-03:00,info,appl
listen,17,0.0.0.0,58661
2012-07-05T10:43:33-03:00,info,appl
listen,17,0.0.0.0,58662
2012-07-05T10:43:33-03:00,info,appl
listen,17,0.0.0.0,58663
2012-07-05T10:43:33-03:00,info,appl
listen,17,0.0.0.0,58664
2012-07-05T10:43:33-03:00,info,appl
listen,17,0.0.0.0,58665
2012-07-05T10:43:34-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:34-03:00,info,appl
listen,17,0.0.0.0,58666
2012-07-05T10:43:37-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:40-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:42-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:45-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:46-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T10:43:46-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:43:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:43:46-03:00,info,appl
listen,17,0.0.0.0,58667
2012-07-05T10:43:46-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T10:43:46-03:00,info,appl
listen,17,0.0.0.0,58668
2012-07-05T10:43:47-03:00,info,appl
w,connect out,6,192.221.105.254,80
2012-07-05T10:43:47-03:00,info,appl
listen,17,0.0.0.0,58669

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T10:43:47-03:00,info,appl
listen,17,0.0.0.0,58670
2012-07-05T10:43:48-03:00,info,appl
listen,17,0.0.0.0,58671
2012-07-05T10:43:48-03:00,info,appl
listen,17,0.0.0.0,58672
2012-07-05T10:43:48-03:00,info,appl
listen,17,0.0.0.0,58673
2012-07-05T10:43:48-03:00,info,appl
listen,17,0.0.0.0,58674
2012-07-05T10:43:49-03:00,info,appl
listen,17,0.0.0.0,58675
2012-07-05T10:43:49-03:00,info,appl
listen,17,0.0.0.0,58676
2012-07-05T10:43:49-03:00,info,appl
listen,17,0.0.0.0,58677
2012-07-05T10:43:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:43:53-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:43:53-03:00,info,appl
listen,17,0.0.0.0,58678
2012-07-05T10:43:54-03:00,info,appl
listen,17,0.0.0.0,58679
2012-07-05T10:43:54-03:00,info,appl
listen,17,0.0.0.0,58680
2012-07-05T10:43:55-03:00,info,appl
listen,17,0.0.0.0,58681
2012-07-05T10:43:55-03:00,info,appl
listen,17,0.0.0.0,58682
2012-07-05T10:43:56-03:00,info,appl
listen,17,0.0.0.0,58683
2012-07-05T10:43:56-03:00,info,appl
listen,17,0.0.0.0,58684
2012-07-05T10:43:56-03:00,info,appl
listen,17,0.0.0.0,58685
2012-07-05T10:43:56-03:00,info,appl
listen,17,0.0.0.0,58686
2012-07-05T10:43:56-03:00,info,appl
listen,17,0.0.0.0,58687
2012-07-05T10:43:57-03:00,info,appl
listen,17,0.0.0.0,58688
2012-07-05T10:44:01-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:44:01-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:44:01-03:00,info,appl
listen,17,0.0.0.0,58689
2012-07-05T10:44:01-03:00,info,appl
listen,17,0.0.0.0,58690
2012-07-05T10:44:02-03:00,info,appl
listen,17,0.0.0.0,58691
2012-07-05T10:44:02-03:00,info,appl
listen,17,0.0.0.0,58692
2012-07-05T10:44:03-03:00,info,appl
listen,17,0.0.0.0,58693
2012-07-05T10:44:03-03:00,info,appl
listen,17,0.0.0.0,58694
2012-07-05T10:44:03-03:00,info,appl
listen,17,0.0.0.0,58695

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T10:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58696
2012-07-05T10:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58697
2012-07-05T10:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58698
2012-07-05T10:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58699
2012-07-05T10:44:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:44:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:44:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58700
2012-07-05T10:44:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:44:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58701
2012-07-05T10:44:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58702
2012-07-05T10:44:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58703
2012-07-05T10:44:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58704
2012-07-05T10:44:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58705
2012-07-05T10:44:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58706
2012-07-05T10:44:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58707
2012-07-05T10:44:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58708
2012-07-05T10:44:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58709
2012-07-05T10:44:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58710
2012-07-05T10:44:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:44:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:44:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.189,61357
2012-07-05T10:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58711
2012-07-05T10:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58712
2012-07-05T10:44:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58713
2012-07-05T10:44:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58714
2012-07-05T10:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58715
2012-07-05T10:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58716

2012-07-05T10:44:26-03:00,info,appl
listen,17,0.0.0.0,58717
2012-07-05T10:44:27-03:00,info,appl
listen,17,0.0.0.0,58718
2012-07-05T10:44:27-03:00,info,appl
listen,17,0.0.0.0,58719
2012-07-05T10:44:27-03:00,info,appl
listen,17,0.0.0.0,58720
2012-07-05T10:44:27-03:00,info,appl
listen,17,0.0.0.0,58721
2012-07-05T10:44:31-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:44:31-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:44:31-03:00,info,appl
listen,17,0.0.0.0,58722
2012-07-05T10:44:31-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T10:44:32-03:00,info,appl
listen,17,0.0.0.0,58723
2012-07-05T10:44:32-03:00,info,appl
listen,17,0.0.0.0,58724
2012-07-05T10:44:33-03:00,info,appl
listen,17,0.0.0.0,58725
2012-07-05T10:44:33-03:00,info,appl
listen,17,0.0.0.0,58726
2012-07-05T10:44:34-03:00,info,appl
listen,17,0.0.0.0,58727
2012-07-05T10:44:34-03:00,info,appl
listen,17,0.0.0.0,58728
2012-07-05T10:44:34-03:00,info,appl
listen,17,0.0.0.0,58729
2012-07-05T10:44:34-03:00,info,appl
listen,17,0.0.0.0,58730
2012-07-05T10:44:34-03:00,info,appl
listen,17,0.0.0.0,58731
2012-07-05T10:44:35-03:00,info,appl
listen,17,0.0.0.0,58732
2012-07-05T10:44:44-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T10:44:46-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-05T10:44:46-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:44:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:44:46-03:00,info,appl
listen,17,0.0.0.0,58733
2012-07-05T10:44:47-03:00,info,appl
listen,17,0.0.0.0,58734
2012-07-05T10:44:47-03:00,info,appl
listen,17,0.0.0.0,58735
2012-07-05T10:44:48-03:00,info,appl
listen,17,0.0.0.0,58736
2012-07-05T10:44:48-03:00,info,appl
listen,17,0.0.0.0,58737
2012-07-05T10:44:49-03:00,info,appl
listen,17,0.0.0.0,58738
2012-07-05T10:44:49-03:00,info,appl
listen,17,0.0.0.0,58739

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T10:44:49-03:00,info,appl
listen,17,0.0.0.0,58740
2012-07-05T10:44:49-03:00,info,appl
listen,17,0.0.0.0,58741
2012-07-05T10:44:50-03:00,info,appl
listen,17,0.0.0.0,58742
2012-07-05T10:44:50-03:00,info,appl
listen,17,0.0.0.0,58743
2012-07-05T10:44:54-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:44:54-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:44:54-03:00,info,appl
listen,17,0.0.0.0,58744
2012-07-05T10:44:54-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T10:44:54-03:00,info,appl
listen,17,0.0.0.0,58745
2012-07-05T10:44:55-03:00,info,appl
listen,17,0.0.0.0,58746
2012-07-05T10:44:55-03:00,info,appl
listen,17,0.0.0.0,58747
2012-07-05T10:44:56-03:00,info,appl
listen,17,0.0.0.0,58748
2012-07-05T10:44:56-03:00,info,appl
listen,17,0.0.0.0,58749
2012-07-05T10:44:56-03:00,info,appl
listen,17,0.0.0.0,58750
2012-07-05T10:44:57-03:00,info,appl
listen,17,0.0.0.0,58751
2012-07-05T10:44:57-03:00,info,appl
listen,17,0.0.0.0,58752
2012-07-05T10:44:57-03:00,info,appl
listen,17,0.0.0.0,58753
2012-07-05T10:44:57-03:00,info,appl
listen,17,0.0.0.0,58754
2012-07-05T10:45:02-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T10:45:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T10:45:02-03:00,info,appl
listen,17,0.0.0.0,58755
2012-07-05T10:45:02-03:00,info,appl
listen,17,0.0.0.0,58756
2012-07-05T10:45:03-03:00,info,appl
listen,17,0.0.0.0,58757
2012-07-05T10:45:03-03:00,info,appl
listen,17,0.0.0.0,58758
2012-07-05T10:45:04-03:00,info,appl
listen,17,0.0.0.0,58759
2012-07-05T10:45:04-03:00,info,appl
listen,17,0.0.0.0,58760
2012-07-05T10:45:04-03:00,info,appl
listen,17,0.0.0.0,58761
2012-07-05T10:45:05-03:00,info,appl
listen,17,0.0.0.0,58762
2012-07-05T10:45:05-03:00,info,appl
listen,17,0.0.0.0,58763
2012-07-05T10:45:05-03:00,info,appl
listen,17,0.0.0.0,58764

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T10:45:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58765
2012-07-05T10:45:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.189,61362
2012-07-05T10:45:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58766
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58767
2012-07-05T10:45:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58768
2012-07-05T10:45:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58769
2012-07-05T10:45:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58770
2012-07-05T10:45:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58771
2012-07-05T10:45:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58772
2012-07-05T10:45:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58773
2012-07-05T10:45:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58774
2012-07-05T10:45:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58775
2012-07-05T10:45:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58776
2012-07-05T10:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58777
2012-07-05T10:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58778
2012-07-05T10:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58779
2012-07-05T10:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58780
2012-07-05T10:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58781
2012-07-05T10:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58782
2012-07-05T10:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58783
2012-07-05T10:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58784
2012-07-05T10:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58785
2012-07-05T10:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58786

2012-07-05T10:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58787
2012-07-05T10:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T10:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T10:45:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58788
2012-07-05T10:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:45:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58789
2012-07-05T10:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58790
2012-07-05T10:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58791
2012-07-05T10:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58792
2012-07-05T10:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58793
2012-07-05T10:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58794
2012-07-05T10:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58795
2012-07-05T10:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58796
2012-07-05T10:45:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58797
2012-07-05T10:45:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:45:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58798
2012-07-05T10:45:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T10:46:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,55805
2012-07-05T10:46:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,55810
2012-07-05T10:46:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58440
2012-07-05T10:46:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T10:46:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55409
2012-07-05T10:47:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:47:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:47:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:47:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50967
2012-07-05T10:47:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50968
2012-07-05T10:47:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:47:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50969

2012-07-05T10:47:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64885
2012-07-05T10:47:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T10:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64886
2012-07-05T10:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64887
2012-07-05T10:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64888
2012-07-05T10:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64889
2012-07-05T10:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64890
2012-07-05T10:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64891
2012-07-05T10:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64892
2012-07-05T10:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64893
2012-07-05T10:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64894
2012-07-05T10:47:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.166,1914
2012-07-05T10:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T10:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64895
2012-07-05T10:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:47:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64896
2012-07-05T10:47:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64897
2012-07-05T10:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64898
2012-07-05T10:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64899
2012-07-05T10:47:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64900
2012-07-05T10:47:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64901
2012-07-05T10:47:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64902
2012-07-05T10:47:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64903
2012-07-05T10:47:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64904
2012-07-05T10:48:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64905
2012-07-05T10:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.101,57636
2012-07-05T10:50:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.88,1973
2012-07-05T10:51:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.246,63681
2012-07-05T10:51:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T10:51:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:51:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,2432
2012-07-05T10:51:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:52:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:52:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64906
2012-07-05T10:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T10:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64907
2012-07-05T10:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64908
2012-07-05T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64909
2012-07-05T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64910
2012-07-05T10:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64911
2012-07-05T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64912
2012-07-05T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64913
2012-07-05T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64914
2012-07-05T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64915
2012-07-05T10:52:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64916
2012-07-05T10:52:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:52:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:52:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64917
2012-07-05T10:52:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64918
2012-07-05T10:52:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64919
2012-07-05T10:52:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64920
2012-07-05T10:52:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64921
2012-07-05T10:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64922
2012-07-05T10:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64923
2012-07-05T10:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64924
2012-07-05T10:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64925
2012-07-05T10:52:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64926

2012-07-05T10:52:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64927
2012-07-05T10:52:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,49430
2012-07-05T10:53:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.18,54359
2012-07-05T10:55:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,4341
2012-07-05T10:55:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,1761
2012-07-05T10:56:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,52981
2012-07-05T10:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,2425
2012-07-05T10:57:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,3216
2012-07-05T10:57:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T10:57:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64899
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64900
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T10:57:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64901
2012-07-05T10:57:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62485
2012-07-05T10:57:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T10:57:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51631
2012-07-05T10:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51632
2012-07-05T10:57:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51633
2012-07-05T10:57:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51634
2012-07-05T10:57:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51635
2012-07-05T10:57:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57724
2012-07-05T10:57:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57725
2012-07-05T10:57:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57726
2012-07-05T10:57:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57727
2012-07-05T10:57:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57728
2012-07-05T10:57:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57729
2012-07-05T10:57:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.80,60397

2012-07-05T10:58:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T10:58:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:58:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.80,60401
2012-07-05T10:58:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T10:59:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,1618
2012-07-05T10:59:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:00:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:01:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.254,54297
2012-07-05T11:02:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.171,1766
2012-07-05T11:02:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:02:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:02:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:02:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57730
2012-07-05T11:02:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:02:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57731
2012-07-05T11:02:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57732
2012-07-05T11:02:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57733
2012-07-05T11:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57734
2012-07-05T11:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57735
2012-07-05T11:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57736
2012-07-05T11:02:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57737
2012-07-05T11:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57738
2012-07-05T11:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57739
2012-07-05T11:02:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57740
2012-07-05T11:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T11:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57741
2012-07-05T11:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57742
2012-07-05T11:03:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57743

2012-07-05T11:03:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57744
2012-07-05T11:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57745
2012-07-05T11:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57746
2012-07-05T11:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57747
2012-07-05T11:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57748
2012-07-05T11:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57749
2012-07-05T11:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57750
2012-07-05T11:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57751
2012-07-05T11:03:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.5,2815
2012-07-05T11:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:06:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53604
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53605
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53606
2012-07-05T11:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57291
2012-07-05T11:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57292
2012-07-05T11:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57293
2012-07-05T11:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57294
2012-07-05T11:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57295
2012-07-05T11:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57296
2012-07-05T11:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57297
2012-07-05T11:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57298
2012-07-05T11:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57299
2012-07-05T11:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57300

2012-07-05T11:07:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:07:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57301
2012-07-05T11:07:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:07:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:07:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:07:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57302
2012-07-05T11:07:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57303
2012-07-05T11:07:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57304
2012-07-05T11:07:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57305
2012-07-05T11:07:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57306
2012-07-05T11:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57307
2012-07-05T11:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57308
2012-07-05T11:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57309
2012-07-05T11:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57310
2012-07-05T11:07:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57311
2012-07-05T11:07:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57312
2012-07-05T11:11:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.1,1567
2012-07-05T11:12:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:12:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:12:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,63049
2012-07-05T11:13:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:13:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:13:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:13:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57313
2012-07-05T11:13:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:13:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57314
2012-07-05T11:13:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57315
2012-07-05T11:13:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57316
2012-07-05T11:13:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57317
2012-07-05T11:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57318

2012-07-05T11:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57319
2012-07-05T11:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57320
2012-07-05T11:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57321
2012-07-05T11:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57322
2012-07-05T11:13:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57323
2012-07-05T11:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:13:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:14:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.159,60257
2012-07-05T11:15:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.67,4325
2012-07-05T11:16:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50990
2012-07-05T11:16:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50991
2012-07-05T11:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50992
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58741
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58742
2012-07-05T11:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58743
2012-07-05T11:16:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55306
2012-07-05T11:16:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55307
2012-07-05T11:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55308
2012-07-05T11:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55309
2012-07-05T11:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55310
2012-07-05T11:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55311
2012-07-05T11:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55312
2012-07-05T11:16:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55313
2012-07-05T11:16:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55314
2012-07-05T11:16:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55315

2012-07-05T11:16:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52987
2012-07-05T11:16:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58034
2012-07-05T11:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57463
2012-07-05T11:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54977
2012-07-05T11:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.60,62949
2012-07-05T11:17:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.50,1871
2012-07-05T11:18:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:18:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58004
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58005
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:18:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58006
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56400
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56401
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56402
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:18:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56403
2012-07-05T11:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56404
2012-07-05T11:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56405
2012-07-05T11:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56406
2012-07-05T11:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56407
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56408
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56409

2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56410
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56411
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56412
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56413
2012-07-05T11:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56414
2012-07-05T11:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56415
2012-07-05T11:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56416
2012-07-05T11:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56417
2012-07-05T11:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56418
2012-07-05T11:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56419
2012-07-05T11:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56420
2012-07-05T11:19:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:19:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:20:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:20:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:20:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56421
2012-07-05T11:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56422
2012-07-05T11:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56423
2012-07-05T11:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56424
2012-07-05T11:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56425
2012-07-05T11:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56426
2012-07-05T11:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56427
2012-07-05T11:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56428
2012-07-05T11:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56429
2012-07-05T11:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56430
2012-07-05T11:22:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56431
2012-07-05T11:23:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,60224

2012-07-05T11:23:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:23:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56432
2012-07-05T11:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56433
2012-07-05T11:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56434
2012-07-05T11:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56435
2012-07-05T11:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56436
2012-07-05T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56437
2012-07-05T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56438
2012-07-05T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56439
2012-07-05T11:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56440
2012-07-05T11:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56441
2012-07-05T11:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56442
2012-07-05T11:26:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:26:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:27:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:27:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:28:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:28:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62318
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62319
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:28:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62320
2012-07-05T11:28:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55312
2012-07-05T11:28:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:28:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55313

2012-07-05T11:28:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55314
2012-07-05T11:28:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55315
2012-07-05T11:28:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55316
2012-07-05T11:28:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55317
2012-07-05T11:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55318
2012-07-05T11:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55319
2012-07-05T11:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55320
2012-07-05T11:28:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55321
2012-07-05T11:30:20-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.11,389
2012-07-05T11:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55323
2012-07-05T11:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55324
2012-07-05T11:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55325
2012-07-05T11:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55326
2012-07-05T11:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55327
2012-07-05T11:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55328
2012-07-05T11:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55329
2012-07-05T11:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55330
2012-07-05T11:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55331
2012-07-05T11:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55332
2012-07-05T11:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55333
2012-07-05T11:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:30:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:30:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,1311
2012-07-05T11:30:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,3276
2012-07-05T11:32:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-05T11:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63112
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58697
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58698
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:33:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58699
2012-07-05T11:33:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62469
2012-07-05T11:33:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62470
2012-07-05T11:33:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62471
2012-07-05T11:33:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62472
2012-07-05T11:33:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60332
2012-07-05T11:33:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60333
2012-07-05T11:33:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53223
2012-07-05T11:33:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53224
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65365
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65366
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56346
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56347
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55712
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55713
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64174
2012-07-05T11:33:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64175
2012-07-05T11:33:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T11:33:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T11:33:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:33:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64176
2012-07-05T11:33:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64177

2012-07-05T11:33:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64178
2012-07-05T11:33:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64179
2012-07-05T11:33:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64180
2012-07-05T11:33:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64181
2012-07-05T11:33:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64182
2012-07-05T11:33:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64183
2012-07-05T11:33:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64184
2012-07-05T11:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64185
2012-07-05T11:33:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64186
2012-07-05T11:34:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:34:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:34:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:34:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,54702
2012-07-05T11:35:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:35:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.14,61824
2012-07-05T11:37:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,4061
2012-07-05T11:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64187
2012-07-05T11:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64188
2012-07-05T11:37:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64189
2012-07-05T11:37:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64190
2012-07-05T11:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64191
2012-07-05T11:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64192
2012-07-05T11:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64193
2012-07-05T11:37:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64194
2012-07-05T11:37:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64195
2012-07-05T11:37:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64196
2012-07-05T11:37:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64197
2012-07-05T11:37:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54825

2012-07-05T11:37:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:37:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54826
2012-07-05T11:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54827
2012-07-05T11:37:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54828
2012-07-05T11:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54829
2012-07-05T11:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54830
2012-07-05T11:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54831
2012-07-05T11:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54832
2012-07-05T11:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54833
2012-07-05T11:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54834
2012-07-05T11:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54835
2012-07-05T11:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54836
2012-07-05T11:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54837
2012-07-05T11:38:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,1520
2012-07-05T11:38:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T11:38:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59167
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59168
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59169
2012-07-05T11:38:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61158
2012-07-05T11:38:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61159
2012-07-05T11:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61160
2012-07-05T11:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61161
2012-07-05T11:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61162
2012-07-05T11:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61163

2012-07-05T11:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61164
2012-07-05T11:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61165
2012-07-05T11:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61166
2012-07-05T11:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61167
2012-07-05T11:41:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:41:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51687
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51688
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60866
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60867
2012-07-05T11:41:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60868
2012-07-05T11:41:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55627
2012-07-05T11:41:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:41:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55628
2012-07-05T11:41:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55629
2012-07-05T11:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55630
2012-07-05T11:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55631
2012-07-05T11:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55632
2012-07-05T11:41:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55633
2012-07-05T11:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55634
2012-07-05T11:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55635
2012-07-05T11:41:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55636
2012-07-05T11:41:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52589
2012-07-05T11:41:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:41:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58160
2012-07-05T11:41:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50886

2012-07-05T11:41:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:41:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59116
2012-07-05T11:41:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:41:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,63838
2012-07-05T11:41:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:42:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:43:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T11:43:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T11:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59117
2012-07-05T11:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59118
2012-07-05T11:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59119
2012-07-05T11:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59120
2012-07-05T11:43:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59121
2012-07-05T11:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59122
2012-07-05T11:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59123
2012-07-05T11:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59124
2012-07-05T11:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59125
2012-07-05T11:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59126
2012-07-05T11:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59127
2012-07-05T11:45:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.106,51290
2012-07-05T11:46:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.140,1219
2012-07-05T11:48:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:48:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T11:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59128
2012-07-05T11:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59129

2012-07-05T11:48:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59130
2012-07-05T11:48:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59131
2012-07-05T11:48:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59132
2012-07-05T11:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59133
2012-07-05T11:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59134
2012-07-05T11:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59135
2012-07-05T11:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59136
2012-07-05T11:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59137
2012-07-05T11:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59138
2012-07-05T11:48:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:48:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T11:48:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:48:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T11:48:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T11:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:48:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50441
2012-07-05T11:48:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50442
2012-07-05T11:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50443
2012-07-05T11:48:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51526
2012-07-05T11:48:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51527
2012-07-05T11:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51528
2012-07-05T11:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51529
2012-07-05T11:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51530
2012-07-05T11:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51531
2012-07-05T11:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51532
2012-07-05T11:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51533
2012-07-05T11:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51534

2012-07-05T11:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51535
2012-07-05T11:49:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59345
2012-07-05T11:49:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49460
2012-07-05T11:49:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:53:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:53:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49461
2012-07-05T11:53:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:53:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49462
2012-07-05T11:53:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49463
2012-07-05T11:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49464
2012-07-05T11:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49465
2012-07-05T11:53:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49466
2012-07-05T11:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49467
2012-07-05T11:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49468
2012-07-05T11:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49469
2012-07-05T11:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49470
2012-07-05T11:53:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49471
2012-07-05T11:54:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T11:54:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49472
2012-07-05T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49473
2012-07-05T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49474
2012-07-05T11:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49475
2012-07-05T11:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49476
2012-07-05T11:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49477
2012-07-05T11:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49478
2012-07-05T11:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49479
2012-07-05T11:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49480

2012-07-05T11:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49481
2012-07-05T11:54:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49482
2012-07-05T11:55:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T11:55:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:55:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:56:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T11:59:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T11:59:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60546
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60547
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T11:59:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60548
2012-07-05T11:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54726
2012-07-05T11:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T11:59:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54727
2012-07-05T11:59:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54728
2012-07-05T11:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59726
2012-07-05T11:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59727
2012-07-05T11:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59728
2012-07-05T11:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59729
2012-07-05T11:59:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62643
2012-07-05T11:59:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62644
2012-07-05T11:59:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62645
2012-07-05T11:59:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62646
2012-07-05T11:59:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62647
2012-07-05T12:00:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,57828
2012-07-05T12:00:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.83,51738
2012-07-05T12:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,57833

2012-07-05T12:01:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.4.89,59621
2012-07-05T12:02:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,60322
2012-07-05T12:02:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,57533
2012-07-05T12:02:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:02:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:02:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.80,60650
2012-07-05T12:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:03:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.2,57136
2012-07-05T12:03:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.80,60653
2012-07-05T12:03:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T12:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62648
2012-07-05T12:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:03:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62649
2012-07-05T12:03:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62650
2012-07-05T12:03:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62651
2012-07-05T12:03:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62652
2012-07-05T12:03:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62653
2012-07-05T12:03:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62654
2012-07-05T12:03:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62655
2012-07-05T12:03:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62656
2012-07-05T12:03:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62657
2012-07-05T12:03:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62658
2012-07-05T12:03:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.178,50456
2012-07-05T12:04:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:04:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:04:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,55363
2012-07-05T12:04:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:04:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025

2012-07-05T12:04:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:04:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62659
2012-07-05T12:04:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:04:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62660
2012-07-05T12:04:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62661
2012-07-05T12:04:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62662
2012-07-05T12:04:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62663
2012-07-05T12:04:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62664
2012-07-05T12:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62665
2012-07-05T12:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62666
2012-07-05T12:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62667
2012-07-05T12:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62668
2012-07-05T12:04:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62669
2012-07-05T12:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62670
2012-07-05T12:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62671
2012-07-05T12:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62672
2012-07-05T12:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62673
2012-07-05T12:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62674
2012-07-05T12:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62675
2012-07-05T12:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62676
2012-07-05T12:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62677
2012-07-05T12:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62678
2012-07-05T12:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62679
2012-07-05T12:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62680
2012-07-05T12:09:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:09:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T12:09:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:09:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51078

2012-07-05T12:09:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:09:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51079
2012-07-05T12:09:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51080
2012-07-05T12:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52215
2012-07-05T12:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52216
2012-07-05T12:09:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52217
2012-07-05T12:09:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52218
2012-07-05T12:09:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52219
2012-07-05T12:09:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52220
2012-07-05T12:09:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52221
2012-07-05T12:09:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52222
2012-07-05T12:09:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52223
2012-07-05T12:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52224
2012-07-05T12:09:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:09:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:10:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52225
2012-07-05T12:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:14:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:14:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T12:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52226
2012-07-05T12:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52227
2012-07-05T12:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52228
2012-07-05T12:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52229
2012-07-05T12:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52230
2012-07-05T12:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52231

2012-07-05T12:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52232
2012-07-05T12:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52233
2012-07-05T12:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52234
2012-07-05T12:14:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52235
2012-07-05T12:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52236
2012-07-05T12:15:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.106,53789
2012-07-05T12:16:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,51524
2012-07-05T12:16:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:16:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:17:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:17:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,59563
2012-07-05T12:17:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T12:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52237
2012-07-05T12:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:18:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52238
2012-07-05T12:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52239
2012-07-05T12:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52240
2012-07-05T12:18:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52241
2012-07-05T12:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52242
2012-07-05T12:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52243
2012-07-05T12:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52244
2012-07-05T12:18:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52245
2012-07-05T12:18:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52246
2012-07-05T12:18:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52247
2012-07-05T12:19:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:19:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:19:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:19:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025

2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58297
2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58298
2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58299
2012-07-05T12:19:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57902
2012-07-05T12:19:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:19:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57903
2012-07-05T12:19:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57904
2012-07-05T12:19:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57905
2012-07-05T12:19:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57906
2012-07-05T12:19:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57907
2012-07-05T12:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57908
2012-07-05T12:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57909
2012-07-05T12:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57910
2012-07-05T12:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57911
2012-07-05T12:20:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,55854
2012-07-05T12:20:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,65438
2012-07-05T12:21:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,55859
2012-07-05T12:21:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,65486
2012-07-05T12:23:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,61776
2012-07-05T12:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57912
2012-07-05T12:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57913
2012-07-05T12:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57914
2012-07-05T12:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57915
2012-07-05T12:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57916
2012-07-05T12:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57917

2012-07-05T12:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57918
2012-07-05T12:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57919
2012-07-05T12:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57920
2012-07-05T12:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57921
2012-07-05T12:23:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57922
2012-07-05T12:23:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:23:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:24:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,61781
2012-07-05T12:24:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:24:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:25:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:25:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T12:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57923
2012-07-05T12:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57924
2012-07-05T12:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57925
2012-07-05T12:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57926
2012-07-05T12:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57927
2012-07-05T12:25:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57928
2012-07-05T12:25:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57929
2012-07-05T12:25:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57930
2012-07-05T12:25:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57931
2012-07-05T12:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57932
2012-07-05T12:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57933
2012-07-05T12:30:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T12:30:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52865
2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53

2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52866
2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:30:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52867
2012-07-05T12:30:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59893
2012-07-05T12:30:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59894
2012-07-05T12:30:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59895
2012-07-05T12:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59896
2012-07-05T12:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59897
2012-07-05T12:30:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59898
2012-07-05T12:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59899
2012-07-05T12:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59900
2012-07-05T12:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59901
2012-07-05T12:30:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59902
2012-07-05T12:30:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,63382
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55002
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55003
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51454
2012-07-05T12:30:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51455
2012-07-05T12:30:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51456
2012-07-05T12:30:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60465
2012-07-05T12:30:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:30:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60466
2012-07-05T12:30:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60467
2012-07-05T12:30:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.88.108.206,389
2012-07-05T12:30:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60468
2012-07-05T12:30:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60469
2012-07-05T12:30:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60470

2012-07-05T12:30:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60471
2012-07-05T12:30:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60472
2012-07-05T12:30:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60473
2012-07-05T12:30:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60474
2012-07-05T12:30:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50393
2012-07-05T12:30:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:30:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60014
2012-07-05T12:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55048
2012-07-05T12:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54932
2012-07-05T12:30:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:30:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:30:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:31:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:32:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:33:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:33:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50934
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63642
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63643
2012-07-05T12:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:33:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63644
2012-07-05T12:33:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53281
2012-07-05T12:33:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53282
2012-07-05T12:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53283
2012-07-05T12:33:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53068

2012-07-05T12:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53069
2012-07-05T12:33:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56643
2012-07-05T12:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56644
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59560
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59561
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59562
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49664
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49665
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58652
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58653
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52172
2012-07-05T12:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52173
2012-07-05T12:34:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:34:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:35:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T12:35:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T12:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52174
2012-07-05T12:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52175
2012-07-05T12:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52176
2012-07-05T12:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52177
2012-07-05T12:35:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52178
2012-07-05T12:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52179
2012-07-05T12:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52180
2012-07-05T12:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52181
2012-07-05T12:35:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52182
2012-07-05T12:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52183
2012-07-05T12:35:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52184
2012-07-05T12:38:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T12:38:06-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T12:38:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:38:32-03:00,info,appl
listen,17,0.0.0.0,52185
2012-07-05T12:38:32-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T12:38:32-03:00,info,appl
listen,17,0.0.0.0,52186
2012-07-05T12:38:33-03:00,info,appl
listen,17,0.0.0.0,52187
2012-07-05T12:38:33-03:00,info,appl
listen,17,0.0.0.0,52188
2012-07-05T12:38:34-03:00,info,appl
listen,17,0.0.0.0,52189
2012-07-05T12:38:34-03:00,info,appl
listen,17,0.0.0.0,52190
2012-07-05T12:38:34-03:00,info,appl
listen,17,0.0.0.0,52191
2012-07-05T12:38:35-03:00,info,appl
listen,17,0.0.0.0,52192
2012-07-05T12:38:35-03:00,info,appl
listen,17,0.0.0.0,52193
2012-07-05T12:38:35-03:00,info,appl
listen,17,0.0.0.0,52194
2012-07-05T12:38:35-03:00,info,appl
listen,17,0.0.0.0,52195
2012-07-05T12:38:37-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T12:38:40-03:00,info,appl
w,listen,17,0.0.0.0,51423
2012-07-05T12:38:40-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T12:38:40-03:00,info,appl
listen,17,0.0.0.0,51424
2012-07-05T12:38:40-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:38:40-03:00,info,appl
listen,17,0.0.0.0,51425
2012-07-05T12:38:40-03:00,info,appl
listen,17,0.0.0.0,51426
2012-07-05T12:38:41-03:00,info,appl
listen,17,0.0.0.0,51427
2012-07-05T12:38:41-03:00,info,appl
listen,17,0.0.0.0,51428
2012-07-05T12:38:41-03:00,info,appl
listen,17,0.0.0.0,51429
2012-07-05T12:38:42-03:00,info,appl
listen,17,0.0.0.0,51430
2012-07-05T12:38:42-03:00,info,appl
listen,17,0.0.0.0,51431
2012-07-05T12:38:42-03:00,info,appl
listen,17,0.0.0.0,51432
2012-07-05T12:38:42-03:00,info,appl
listen,17,0.0.0.0,51433
2012-07-05T12:38:43-03:00,info,appl
listen,17,0.0.0.0,51434
2012-07-05T12:38:43-03:00,info,appl
listen,17,0.0.0.0,51435

control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:39:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:40:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T12:40:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62007
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62008
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62009
2012-07-05T12:40:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54247
2012-07-05T12:40:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:40:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54248
2012-07-05T12:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54249
2012-07-05T12:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54250
2012-07-05T12:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54251
2012-07-05T12:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54252
2012-07-05T12:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54253
2012-07-05T12:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54254
2012-07-05T12:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54255
2012-07-05T12:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54256
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54257
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54258
2012-07-05T12:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54259
2012-07-05T12:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54260
2012-07-05T12:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54261
2012-07-05T12:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54262

2012-07-05T12:42:49-03:00,info,appl
listen,17,0.0.0.0,54263
2012-07-05T12:42:50-03:00,info,appl
listen,17,0.0.0.0,54264
2012-07-05T12:42:50-03:00,info,appl
listen,17,0.0.0.0,54265
2012-07-05T12:42:50-03:00,info,appl
listen,17,0.0.0.0,54266
2012-07-05T12:42:50-03:00,info,appl
listen,17,0.0.0.0,54267
2012-07-05T12:42:55-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:42:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:42:55-03:00,info,appl
listen,17,0.0.0.0,54268
2012-07-05T12:42:55-03:00,info,appl
listen,17,0.0.0.0,54269
2012-07-05T12:42:56-03:00,info,appl
listen,17,0.0.0.0,54270
2012-07-05T12:42:56-03:00,info,appl
listen,17,0.0.0.0,54271
2012-07-05T12:42:56-03:00,info,appl
listen,17,0.0.0.0,54272
2012-07-05T12:42:57-03:00,info,appl
listen,17,0.0.0.0,54273
2012-07-05T12:42:57-03:00,info,appl
listen,17,0.0.0.0,54274
2012-07-05T12:42:57-03:00,info,appl
listen,17,0.0.0.0,54275
2012-07-05T12:42:57-03:00,info,appl
listen,17,0.0.0.0,54276
2012-07-05T12:42:58-03:00,info,appl
listen,17,0.0.0.0,54277
2012-07-05T12:42:58-03:00,info,appl
listen,17,0.0.0.0,54278
2012-07-05T12:43:02-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:02-03:00,info,appl
listen,17,0.0.0.0,54279
2012-07-05T12:43:02-03:00,info,appl
listen,17,0.0.0.0,54280
2012-07-05T12:43:03-03:00,info,appl
listen,17,0.0.0.0,54281
2012-07-05T12:43:03-03:00,info,appl
listen,17,0.0.0.0,54282
2012-07-05T12:43:04-03:00,info,appl
listen,17,0.0.0.0,54283
2012-07-05T12:43:04-03:00,info,appl
listen,17,0.0.0.0,54284
2012-07-05T12:43:04-03:00,info,appl
listen,17,0.0.0.0,54285
2012-07-05T12:43:05-03:00,info,appl
listen,17,0.0.0.0,54286
2012-07-05T12:43:05-03:00,info,appl
listen,17,0.0.0.0,54287
2012-07-05T12:43:05-03:00,info,appl
listen,17,0.0.0.0,54288

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:43:05-03:00,info,appl
listen,17,0.0.0.0,54289
2012-07-05T12:43:10-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:10-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:10-03:00,info,appl
listen,17,0.0.0.0,54290
2012-07-05T12:43:10-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T12:43:10-03:00,info,appl
listen,17,0.0.0.0,54291
2012-07-05T12:43:11-03:00,info,appl
listen,17,0.0.0.0,54292
2012-07-05T12:43:11-03:00,info,appl
listen,17,0.0.0.0,54293
2012-07-05T12:43:11-03:00,info,appl
listen,17,0.0.0.0,54294
2012-07-05T12:43:12-03:00,info,appl
listen,17,0.0.0.0,54295
2012-07-05T12:43:12-03:00,info,appl
listen,17,0.0.0.0,54296
2012-07-05T12:43:12-03:00,info,appl
listen,17,0.0.0.0,54297
2012-07-05T12:43:12-03:00,info,appl
listen,17,0.0.0.0,54298
2012-07-05T12:43:13-03:00,info,appl
listen,17,0.0.0.0,54299
2012-07-05T12:43:13-03:00,info,appl
listen,17,0.0.0.0,54300
2012-07-05T12:43:18-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:18-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:18-03:00,info,appl
listen,17,0.0.0.0,54301
2012-07-05T12:43:18-03:00,info,appl
listen,17,0.0.0.0,54302
2012-07-05T12:43:19-03:00,info,appl
listen,17,0.0.0.0,54303
2012-07-05T12:43:19-03:00,info,appl
listen,17,0.0.0.0,54304
2012-07-05T12:43:19-03:00,info,appl
listen,17,0.0.0.0,54305
2012-07-05T12:43:20-03:00,info,appl
listen,17,0.0.0.0,54306
2012-07-05T12:43:20-03:00,info,appl
listen,17,0.0.0.0,54307
2012-07-05T12:43:20-03:00,info,appl
listen,17,0.0.0.0,54308
2012-07-05T12:43:20-03:00,info,appl
listen,17,0.0.0.0,54309
2012-07-05T12:43:21-03:00,info,appl
listen,17,0.0.0.0,54310
2012-07-05T12:43:21-03:00,info,appl
listen,17,0.0.0.0,54311
2012-07-05T12:43:25-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:25-03:00,info,appl
connect out,6,10.10.0.12,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:43:25-03:00,info,appl
listen,17,0.0.0.0,54312
2012-07-05T12:43:26-03:00,info,appl
listen,17,0.0.0.0,54313
2012-07-05T12:43:26-03:00,info,appl
listen,17,0.0.0.0,54314
2012-07-05T12:43:27-03:00,info,appl
listen,17,0.0.0.0,54315
2012-07-05T12:43:27-03:00,info,appl
listen,17,0.0.0.0,54316
2012-07-05T12:43:27-03:00,info,appl
listen,17,0.0.0.0,54317
2012-07-05T12:43:28-03:00,info,appl
listen,17,0.0.0.0,54318
2012-07-05T12:43:28-03:00,info,appl
listen,17,0.0.0.0,54319
2012-07-05T12:43:28-03:00,info,appl
listen,17,0.0.0.0,54320
2012-07-05T12:43:28-03:00,info,appl
listen,17,0.0.0.0,54321
2012-07-05T12:43:28-03:00,info,appl
listen,17,0.0.0.0,54322
2012-07-05T12:43:33-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:33-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:33-03:00,info,appl
listen,17,0.0.0.0,54323
2012-07-05T12:43:33-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T12:43:33-03:00,info,appl
listen,17,0.0.0.0,54324
2012-07-05T12:43:34-03:00,info,appl
listen,17,0.0.0.0,54325
2012-07-05T12:43:34-03:00,info,appl
listen,17,0.0.0.0,54326
2012-07-05T12:43:34-03:00,info,appl
listen,17,0.0.0.0,54327
2012-07-05T12:43:35-03:00,info,appl
listen,17,0.0.0.0,54328
2012-07-05T12:43:35-03:00,info,appl
listen,17,0.0.0.0,54329
2012-07-05T12:43:35-03:00,info,appl
listen,17,0.0.0.0,54330
2012-07-05T12:43:35-03:00,info,appl
listen,17,0.0.0.0,54331
2012-07-05T12:43:36-03:00,info,appl
listen,17,0.0.0.0,54332
2012-07-05T12:43:36-03:00,info,appl
listen,17,0.0.0.0,54333
2012-07-05T12:43:40-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:40-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:40-03:00,info,appl
listen,17,0.0.0.0,54334
2012-07-05T12:43:41-03:00,info,appl
listen,17,0.0.0.0,54335
2012-07-05T12:43:41-03:00,info,appl
listen,17,0.0.0.0,54336

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:43:42-03:00,info,appl
listen,17,0.0.0.0,54337
2012-07-05T12:43:42-03:00,info,appl
listen,17,0.0.0.0,54338
2012-07-05T12:43:42-03:00,info,appl
listen,17,0.0.0.0,54339
2012-07-05T12:43:43-03:00,info,appl
listen,17,0.0.0.0,54340
2012-07-05T12:43:43-03:00,info,appl
listen,17,0.0.0.0,54341
2012-07-05T12:43:43-03:00,info,appl
listen,17,0.0.0.0,54342
2012-07-05T12:43:43-03:00,info,appl
listen,17,0.0.0.0,54343
2012-07-05T12:43:43-03:00,info,appl
listen,17,0.0.0.0,54344
2012-07-05T12:43:48-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:48-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:48-03:00,info,appl
listen,17,0.0.0.0,54345
2012-07-05T12:43:49-03:00,info,appl
listen,17,0.0.0.0,54346
2012-07-05T12:43:49-03:00,info,appl
listen,17,0.0.0.0,54347
2012-07-05T12:43:50-03:00,info,appl
listen,17,0.0.0.0,54348
2012-07-05T12:43:50-03:00,info,appl
listen,17,0.0.0.0,54349
2012-07-05T12:43:50-03:00,info,appl
listen,17,0.0.0.0,54350
2012-07-05T12:43:51-03:00,info,appl
listen,17,0.0.0.0,54351
2012-07-05T12:43:51-03:00,info,appl
listen,17,0.0.0.0,54352
2012-07-05T12:43:51-03:00,info,appl
listen,17,0.0.0.0,54353
2012-07-05T12:43:51-03:00,info,appl
listen,17,0.0.0.0,54354
2012-07-05T12:43:51-03:00,info,appl
listen,17,0.0.0.0,54355
2012-07-05T12:43:56-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:56-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:56-03:00,info,appl
listen,17,0.0.0.0,54356
2012-07-05T12:43:56-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T12:43:56-03:00,info,appl
listen,17,0.0.0.0,54357
2012-07-05T12:43:57-03:00,info,appl
listen,17,0.0.0.0,54358
2012-07-05T12:43:57-03:00,info,appl
listen,17,0.0.0.0,54359
2012-07-05T12:43:57-03:00,info,appl
listen,17,0.0.0.0,54360
2012-07-05T12:43:58-03:00,info,appl
listen,17,0.0.0.0,54361

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:43:58-03:00,info,appl
listen,17,0.0.0.0,54362
2012-07-05T12:43:58-03:00,info,appl
listen,17,0.0.0.0,54363
2012-07-05T12:43:58-03:00,info,appl
listen,17,0.0.0.0,54364
2012-07-05T12:43:59-03:00,info,appl
listen,17,0.0.0.0,54365
2012-07-05T12:43:59-03:00,info,appl
listen,17,0.0.0.0,54366
2012-07-05T12:43:59-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:43:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:43:59-03:00,info,appl
listen,17,0.0.0.0,54367
2012-07-05T12:43:59-03:00,info,appl
listen,17,0.0.0.0,54368
2012-07-05T12:44:00-03:00,info,appl
listen,17,0.0.0.0,54369
2012-07-05T12:44:00-03:00,info,appl
listen,17,0.0.0.0,54370
2012-07-05T12:44:01-03:00,info,appl
listen,17,0.0.0.0,54371
2012-07-05T12:44:01-03:00,info,appl
listen,17,0.0.0.0,54372
2012-07-05T12:44:01-03:00,info,appl
listen,17,0.0.0.0,54373
2012-07-05T12:44:02-03:00,info,appl
listen,17,0.0.0.0,54374
2012-07-05T12:44:02-03:00,info,appl
listen,17,0.0.0.0,54375
2012-07-05T12:44:02-03:00,info,appl
listen,17,0.0.0.0,54376
2012-07-05T12:44:02-03:00,info,appl
listen,17,0.0.0.0,54377
2012-07-05T12:44:07-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:44:07-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:44:07-03:00,info,appl
listen,17,0.0.0.0,54378
2012-07-05T12:44:07-03:00,info,appl
listen,17,0.0.0.0,54379
2012-07-05T12:44:08-03:00,info,appl
listen,17,0.0.0.0,54380
2012-07-05T12:44:08-03:00,info,appl
listen,17,0.0.0.0,54381
2012-07-05T12:44:08-03:00,info,appl
listen,17,0.0.0.0,54382
2012-07-05T12:44:09-03:00,info,appl
listen,17,0.0.0.0,54383
2012-07-05T12:44:09-03:00,info,appl
listen,17,0.0.0.0,54384
2012-07-05T12:44:09-03:00,info,appl
listen,17,0.0.0.0,54385
2012-07-05T12:44:09-03:00,info,appl
listen,17,0.0.0.0,54386
2012-07-05T12:44:10-03:00,info,appl
listen,17,0.0.0.0,54387

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:44:10-03:00,info,appl
listen,17,0.0.0.0,54388
2012-07-05T12:44:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:44:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:44:15-03:00,info,appl
listen,17,0.0.0.0,54389
2012-07-05T12:44:15-03:00,info,appl
listen,17,0.0.0.0,54390
2012-07-05T12:44:15-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T12:44:16-03:00,info,appl
listen,17,0.0.0.0,54391
2012-07-05T12:44:16-03:00,info,appl
listen,17,0.0.0.0,54392
2012-07-05T12:44:16-03:00,info,appl
listen,17,0.0.0.0,54393
2012-07-05T12:44:17-03:00,info,appl
listen,17,0.0.0.0,54394
2012-07-05T12:44:17-03:00,info,appl
listen,17,0.0.0.0,54395
2012-07-05T12:44:17-03:00,info,appl
listen,17,0.0.0.0,54396
2012-07-05T12:44:17-03:00,info,appl
listen,17,0.0.0.0,54397
2012-07-05T12:44:18-03:00,info,appl
listen,17,0.0.0.0,54398
2012-07-05T12:44:18-03:00,info,appl
listen,17,0.0.0.0,54399
2012-07-05T12:44:22-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:44:22-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-05T12:44:22-03:00,info,appl
listen,17,0.0.0.0,54400
2012-07-05T12:44:22-03:00,info,appl
listen,17,0.0.0.0,54401
2012-07-05T12:44:23-03:00,info,appl
listen,17,0.0.0.0,54402
2012-07-05T12:44:23-03:00,info,appl
listen,17,0.0.0.0,54403
2012-07-05T12:44:24-03:00,info,appl
listen,17,0.0.0.0,54404
2012-07-05T12:44:24-03:00,info,appl
listen,17,0.0.0.0,54405
2012-07-05T12:44:24-03:00,info,appl
listen,17,0.0.0.0,54406
2012-07-05T12:44:25-03:00,info,appl
listen,17,0.0.0.0,54407
2012-07-05T12:44:25-03:00,info,appl
listen,17,0.0.0.0,54408
2012-07-05T12:44:25-03:00,info,appl
listen,17,0.0.0.0,54409
2012-07-05T12:44:25-03:00,info,appl
listen,17,0.0.0.0,54410
2012-07-05T12:44:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T12:44:30-03:00,info,appl
connect out,6,10.10.0.12,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T12:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54411
2012-07-05T12:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54412
2012-07-05T12:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54413
2012-07-05T12:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54414
2012-07-05T12:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54415
2012-07-05T12:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54416
2012-07-05T12:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54417
2012-07-05T12:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54418
2012-07-05T12:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54419
2012-07-05T12:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54420
2012-07-05T12:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54421
2012-07-05T12:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T12:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54422
2012-07-05T12:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T12:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54423
2012-07-05T12:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54424
2012-07-05T12:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54425
2012-07-05T12:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54426
2012-07-05T12:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54427
2012-07-05T12:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54428
2012-07-05T12:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54429
2012-07-05T12:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54430
2012-07-05T12:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54431
2012-07-05T12:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54432
2012-07-05T12:45:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:45:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:45:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T12:45:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T12:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88

2012-07-05T12:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54433
2012-07-05T12:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54434
2012-07-05T12:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54435
2012-07-05T12:45:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,60841
2012-07-05T12:45:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54436
2012-07-05T12:45:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54437
2012-07-05T12:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54438
2012-07-05T12:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54439
2012-07-05T12:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54440
2012-07-05T12:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54441
2012-07-05T12:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54442
2012-07-05T12:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54443
2012-07-05T12:45:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:45:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.134,56883
2012-07-05T12:46:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:46:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,59736
2012-07-05T12:46:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.134,56888
2012-07-05T12:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T12:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54444
2012-07-05T12:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54445
2012-07-05T12:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54446
2012-07-05T12:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54447
2012-07-05T12:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54448
2012-07-05T12:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54449
2012-07-05T12:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54450
2012-07-05T12:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54451
2012-07-05T12:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54452

2012-07-05T12:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54453
2012-07-05T12:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54454
2012-07-05T12:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T12:50:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T12:50:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57257
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57258
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57259
2012-07-05T12:50:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61457
2012-07-05T12:50:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T12:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61458
2012-07-05T12:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61459
2012-07-05T12:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61460
2012-07-05T12:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61461
2012-07-05T12:50:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61462
2012-07-05T12:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61463
2012-07-05T12:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61464
2012-07-05T12:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61465
2012-07-05T12:50:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61466
2012-07-05T12:51:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55976
2012-07-05T12:51:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T12:51:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62805
2012-07-05T12:51:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.108,50234
2012-07-05T12:52:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.108,50236
2012-07-05T12:52:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:52:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T12:52:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.197,51684
2012-07-05T12:52:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:52:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,50655
2012-07-05T12:53:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.247,62074
2012-07-05T12:53:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:53:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,50660
2012-07-05T12:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62806
2012-07-05T12:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:53:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62807
2012-07-05T12:53:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62808
2012-07-05T12:53:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62809
2012-07-05T12:53:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62810
2012-07-05T12:53:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62811
2012-07-05T12:53:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62812
2012-07-05T12:53:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62813
2012-07-05T12:53:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62814
2012-07-05T12:53:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62815
2012-07-05T12:53:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62816
2012-07-05T12:54:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,57701
2012-07-05T12:55:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T12:55:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T12:55:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T12:55:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62817
2012-07-05T12:55:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T12:55:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62818
2012-07-05T12:55:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62819
2012-07-05T12:55:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62820
2012-07-05T12:55:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62821
2012-07-05T12:55:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62822

2012-07-05T12:55:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62823
2012-07-05T12:55:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62824
2012-07-05T12:55:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62825
2012-07-05T12:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62826
2012-07-05T12:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62827
2012-07-05T12:57:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.181,63661
2012-07-05T12:59:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T12:59:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T12:59:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T13:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,62828
2012-07-05T13:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-05T13:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-05T13:00:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,62829
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110

2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.3.5,12110
2012-07-05T13:00:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:00:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.93,53353

2012-07-05T13:00:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T13:00:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:00:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55151
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55152
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55153
2012-07-05T13:00:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52370
2012-07-05T13:00:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52371
2012-07-05T13:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52372
2012-07-05T13:00:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52373
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52374
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56280
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56281
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56282
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61958
2012-07-05T13:00:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61959
2012-07-05T13:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61960
2012-07-05T13:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61961
2012-07-05T13:00:57-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-05T13:01:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,60906
2012-07-05T13:01:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,60759
2012-07-05T13:01:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,63155
2012-07-05T13:01:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-05T13:02:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.83,52104
2012-07-05T13:02:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.25,3470
2012-07-05T13:02:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,56940
2012-07-05T13:03:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.51,60741

2012-07-05T13:03:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.10.210,53041
2012-07-05T13:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T13:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61962
2012-07-05T13:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61963
2012-07-05T13:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61964
2012-07-05T13:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61965
2012-07-05T13:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61966
2012-07-05T13:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61967
2012-07-05T13:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61968
2012-07-05T13:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61969
2012-07-05T13:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61970
2012-07-05T13:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61971
2012-07-05T13:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61972
2012-07-05T13:04:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,53046
2012-07-05T13:04:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.205,1735
2012-07-05T13:05:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:05:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:05:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.195,65323
2012-07-05T13:05:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,62336
2012-07-05T13:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61973
2012-07-05T13:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61974
2012-07-05T13:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61975
2012-07-05T13:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61976
2012-07-05T13:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61977

2012-07-05T13:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61978
2012-07-05T13:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61979
2012-07-05T13:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61980
2012-07-05T13:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61981
2012-07-05T13:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61982
2012-07-05T13:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61983
2012-07-05T13:06:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.10,55899
2012-07-05T13:06:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,53061
2012-07-05T13:06:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:06:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:06:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.32,60097
2012-07-05T13:07:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:07:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,52005
2012-07-05T13:07:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,57025
2012-07-05T13:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:07:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.138,4784
2012-07-05T13:08:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:08:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61984
2012-07-05T13:08:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:08:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61985
2012-07-05T13:08:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61986
2012-07-05T13:08:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61987
2012-07-05T13:08:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61988
2012-07-05T13:08:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61989
2012-07-05T13:08:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61990
2012-07-05T13:08:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61991
2012-07-05T13:08:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61992
2012-07-05T13:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61993
2012-07-05T13:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61994
2012-07-05T13:09:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.78,53717

2012-07-05T13:10:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.24,56787
2012-07-05T13:11:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.156,2026
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61995
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:11:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61274
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61275
2012-07-05T13:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61276
2012-07-05T13:11:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58785
2012-07-05T13:11:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58786
2012-07-05T13:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58787
2012-07-05T13:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58788
2012-07-05T13:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58789
2012-07-05T13:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58790
2012-07-05T13:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58791
2012-07-05T13:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58792
2012-07-05T13:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58793
2012-07-05T13:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58794
2012-07-05T13:11:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.200,51116
2012-07-05T13:13:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.9,60845
2012-07-05T13:13:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:13:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:14:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.173,1419
2012-07-05T13:14:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:14:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,4787
2012-07-05T13:14:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T13:14:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.203,1323
2012-07-05T13:15:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,49754
2012-07-05T13:16:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,65255
2012-07-05T13:16:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:16:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58795
2012-07-05T13:16:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58796
2012-07-05T13:16:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58797
2012-07-05T13:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58798
2012-07-05T13:16:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58799
2012-07-05T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58800
2012-07-05T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58801
2012-07-05T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58802
2012-07-05T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58803
2012-07-05T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58804
2012-07-05T13:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58805
2012-07-05T13:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.34,2483
2012-07-05T13:17:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.83,3159
2012-07-05T13:17:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,53692
2012-07-05T13:18:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,52954
2012-07-05T13:18:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.254,3246
2012-07-05T13:18:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,52959
2012-07-05T13:19:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T13:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58806
2012-07-05T13:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:19:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58807
2012-07-05T13:19:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58808

2012-07-05T13:19:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58809
2012-07-05T13:19:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58810
2012-07-05T13:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58811
2012-07-05T13:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58812
2012-07-05T13:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58813
2012-07-05T13:19:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58814
2012-07-05T13:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58815
2012-07-05T13:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58816
2012-07-05T13:20:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:20:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:20:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.120,59018
2012-07-05T13:20:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:20:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:21:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60785
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60786
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.74,4997
2012-07-05T13:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60787
2012-07-05T13:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61739
2012-07-05T13:21:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61740
2012-07-05T13:21:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61741
2012-07-05T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61742
2012-07-05T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61743
2012-07-05T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61744

2012-07-05T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61745
2012-07-05T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61746
2012-07-05T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61747
2012-07-05T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61748
2012-07-05T13:21:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:21:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.120,59019
2012-07-05T13:22:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.197,50733
2012-07-05T13:22:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,2555
2012-07-05T13:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61749
2012-07-05T13:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61750
2012-07-05T13:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61751
2012-07-05T13:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61752
2012-07-05T13:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61753
2012-07-05T13:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61754
2012-07-05T13:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61755
2012-07-05T13:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61756
2012-07-05T13:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61757
2012-07-05T13:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61758
2012-07-05T13:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61759
2012-07-05T13:24:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.21,50890
2012-07-05T13:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.205,2603
2012-07-05T13:25:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.133,1945
2012-07-05T13:25:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.102,4764
2012-07-05T13:26:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:26:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61760
2012-07-05T13:26:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389

2012-07-05T13:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61761
2012-07-05T13:26:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61762
2012-07-05T13:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61763
2012-07-05T13:26:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61764
2012-07-05T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61765
2012-07-05T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61766
2012-07-05T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61767
2012-07-05T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61768
2012-07-05T13:26:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.66,3210
2012-07-05T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61769
2012-07-05T13:26:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61770
2012-07-05T13:27:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.19,4657
2012-07-05T13:27:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.46,59949
2012-07-05T13:27:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:27:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:28:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:28:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.216,1601
2012-07-05T13:28:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:28:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.185,3440
2012-07-05T13:29:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.94,62137
2012-07-05T13:31:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.22,2024
2012-07-05T13:31:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:31:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51535
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51536
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:31:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51537
2012-07-05T13:31:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60329

2012-07-05T13:31:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:31:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60330
2012-07-05T13:31:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60331
2012-07-05T13:31:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60332
2012-07-05T13:31:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60333
2012-07-05T13:31:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60334
2012-07-05T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60335
2012-07-05T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60336
2012-07-05T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60337
2012-07-05T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60338
2012-07-05T13:31:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,4906
2012-07-05T13:32:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.57,1386
2012-07-05T13:32:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.166,57714
2012-07-05T13:34:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,3296
2012-07-05T13:34:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:34:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52402
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61489
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61490
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:34:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61491
2012-07-05T13:34:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60678
2012-07-05T13:34:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60679
2012-07-05T13:34:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60680
2012-07-05T13:34:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54590
2012-07-05T13:34:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54591
2012-07-05T13:34:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54592

2012-07-05T13:34:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53692
2012-07-05T13:34:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53693
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63004
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63005
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64139
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64140
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64960
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64961
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52256
2012-07-05T13:34:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52257
2012-07-05T13:34:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.3,3723
2012-07-05T13:34:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.152,3794
2012-07-05T13:35:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:35:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:35:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:35:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:35:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.101,3732
2012-07-05T13:35:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.41,62648
2012-07-05T13:35:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:35:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.36,3402
2012-07-05T13:36:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:36:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.128,3388
2012-07-05T13:36:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.51,1235
2012-07-05T13:36:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T13:36:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T13:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52258
2012-07-05T13:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:36:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52259
2012-07-05T13:36:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52260

2012-07-05T13:36:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52261
2012-07-05T13:36:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52262
2012-07-05T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52263
2012-07-05T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52264
2012-07-05T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52265
2012-07-05T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52266
2012-07-05T13:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52267
2012-07-05T13:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52268
2012-07-05T13:37:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,2184
2012-07-05T13:37:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.33,3521
2012-07-05T13:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.110,52149
2012-07-05T13:38:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.163,57073
2012-07-05T13:39:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.229,57803
2012-07-05T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52269
2012-07-05T13:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52270
2012-07-05T13:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52271
2012-07-05T13:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52272
2012-07-05T13:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52273
2012-07-05T13:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52274
2012-07-05T13:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52275
2012-07-05T13:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52276
2012-07-05T13:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52277
2012-07-05T13:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52278
2012-07-05T13:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52279
2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61638
2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61639
2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88

2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61640
2012-07-05T13:39:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61641
2012-07-05T13:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61642
2012-07-05T13:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61643
2012-07-05T13:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61644
2012-07-05T13:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61645
2012-07-05T13:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61646
2012-07-05T13:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61647
2012-07-05T13:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61648
2012-07-05T13:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61649
2012-07-05T13:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61650
2012-07-05T13:39:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.87,49741
2012-07-05T13:40:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.39,63996
2012-07-05T13:40:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.147,53645
2012-07-05T13:41:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.7,4291
2012-07-05T13:41:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.73,56142
2012-07-05T13:42:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T13:42:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61591
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61592
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:42:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.105,4918
2012-07-05T13:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61593
2012-07-05T13:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60550
2012-07-05T13:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60551
2012-07-05T13:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60552
2012-07-05T13:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60553

2012-07-05T13:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60554
2012-07-05T13:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60555
2012-07-05T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60556
2012-07-05T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60557
2012-07-05T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60558
2012-07-05T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60559
2012-07-05T13:42:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:42:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:42:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:43:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:43:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.220,3311
2012-07-05T13:43:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.86,3819
2012-07-05T13:44:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,4853
2012-07-05T13:45:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.36,51181
2012-07-05T13:45:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.126,50598
2012-07-05T13:46:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,59994
2012-07-05T13:46:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.129,3010
2012-07-05T13:47:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T13:47:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T13:47:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:47:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60560
2012-07-05T13:47:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:47:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60561
2012-07-05T13:47:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60562
2012-07-05T13:47:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60563
2012-07-05T13:47:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60564
2012-07-05T13:47:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60565
2012-07-05T13:47:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60566
2012-07-05T13:47:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60567
2012-07-05T13:47:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60568

2012-07-05T13:47:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60569
2012-07-05T13:47:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60570
2012-07-05T13:47:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.144,56271
2012-07-05T13:47:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.113,62726
2012-07-05T13:48:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.72,2659
2012-07-05T13:48:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.142,3897
2012-07-05T13:49:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:49:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:49:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T13:49:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:49:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60571
2012-07-05T13:49:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:49:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60572
2012-07-05T13:49:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60573
2012-07-05T13:49:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60574
2012-07-05T13:49:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60575
2012-07-05T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60576
2012-07-05T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60577
2012-07-05T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60578
2012-07-05T13:49:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60579
2012-07-05T13:49:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60580
2012-07-05T13:49:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60581
2012-07-05T13:49:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,1065
2012-07-05T13:49:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,51161
2012-07-05T13:50:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:50:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:50:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T13:50:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.92,1794
2012-07-05T13:50:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,56074

2012-07-05T13:51:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.8,50973
2012-07-05T13:51:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,56075
2012-07-05T13:52:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,50846
2012-07-05T13:52:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.22,3789
2012-07-05T13:52:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T13:52:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51136
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51137
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T13:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51138
2012-07-05T13:52:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61904
2012-07-05T13:52:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T13:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61905
2012-07-05T13:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61906
2012-07-05T13:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61907
2012-07-05T13:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61908
2012-07-05T13:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61909
2012-07-05T13:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61910
2012-07-05T13:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61911
2012-07-05T13:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61912
2012-07-05T13:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61913
2012-07-05T13:53:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.22,4773
2012-07-05T13:53:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.197,63617
2012-07-05T13:53:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51609
2012-07-05T13:53:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T13:53:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63139
2012-07-05T13:53:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,50418
2012-07-05T13:54:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,54333

2012-07-05T13:54:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:54:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63140
2012-07-05T13:54:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:54:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63141
2012-07-05T13:54:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63142
2012-07-05T13:54:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63143
2012-07-05T13:54:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63144
2012-07-05T13:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63145
2012-07-05T13:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63146
2012-07-05T13:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63147
2012-07-05T13:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63148
2012-07-05T13:54:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63149
2012-07-05T13:54:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63150
2012-07-05T13:54:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.74,64333
2012-07-05T13:55:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,54340
2012-07-05T13:55:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.235,2351
2012-07-05T13:55:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.26,51436
2012-07-05T13:56:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T13:56:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:56:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,65166
2012-07-05T13:56:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:57:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,53657
2012-07-05T13:57:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T13:57:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T13:57:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T13:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T13:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63151
2012-07-05T13:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T13:57:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63152
2012-07-05T13:57:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63153

2012-07-05T13:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63154
2012-07-05T13:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63155
2012-07-05T13:57:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63156
2012-07-05T13:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63157
2012-07-05T13:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63158
2012-07-05T13:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63159
2012-07-05T13:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63160
2012-07-05T13:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63161
2012-07-05T13:57:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.187,52365
2012-07-05T13:57:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,50973
2012-07-05T13:58:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.102,3303
2012-07-05T13:59:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,60871
2012-07-05T14:00:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.126,61088
2012-07-05T14:00:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.41,4764
2012-07-05T14:01:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.14,62901
2012-07-05T14:01:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.154,3393
2012-07-05T14:02:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.62,50669
2012-07-05T14:02:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:02:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:02:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53728
2012-07-05T14:02:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53729
2012-07-05T14:02:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53730
2012-07-05T14:02:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49563
2012-07-05T14:02:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:02:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49564
2012-07-05T14:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49565
2012-07-05T14:02:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60933

2012-07-05T14:02:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60934
2012-07-05T14:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60935
2012-07-05T14:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60936
2012-07-05T14:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60937
2012-07-05T14:02:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64286
2012-07-05T14:02:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64287
2012-07-05T14:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64288
2012-07-05T14:02:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64289
2012-07-05T14:02:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.120,4852
2012-07-05T14:03:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.23,1628
2012-07-05T14:03:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:03:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:03:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.141,54652
2012-07-05T14:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:04:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.25,51828
2012-07-05T14:04:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T14:04:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:04:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64290
2012-07-05T14:04:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:04:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64291
2012-07-05T14:04:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64292
2012-07-05T14:04:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64293
2012-07-05T14:04:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64294
2012-07-05T14:04:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64295
2012-07-05T14:04:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64296
2012-07-05T14:04:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:04:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64297
2012-07-05T14:04:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64298
2012-07-05T14:04:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64299
2012-07-05T14:04:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64300

2012-07-05T14:04:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.3.191,4905
2012-07-05T14:05:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:05:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:05:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.0,2593
2012-07-05T14:06:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.153,50811
2012-07-05T14:07:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:07:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64301
2012-07-05T14:07:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64302
2012-07-05T14:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64303
2012-07-05T14:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64304
2012-07-05T14:07:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,56145
2012-07-05T14:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64305
2012-07-05T14:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64306
2012-07-05T14:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64307
2012-07-05T14:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64308
2012-07-05T14:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64309
2012-07-05T14:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64310
2012-07-05T14:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64311
2012-07-05T14:08:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.82,59026
2012-07-05T14:08:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,49311
2012-07-05T14:09:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.47,60292
2012-07-05T14:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64312
2012-07-05T14:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64313
2012-07-05T14:09:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64314
2012-07-05T14:09:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64315

2012-07-05T14:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64316
2012-07-05T14:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64317
2012-07-05T14:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64318
2012-07-05T14:09:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64319
2012-07-05T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64320
2012-07-05T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64321
2012-07-05T14:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64322
2012-07-05T14:09:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.40,54726
2012-07-05T14:10:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.122,53166
2012-07-05T14:10:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:10:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:11:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.243,62856
2012-07-05T14:11:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.213,3797
2012-07-05T14:11:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64323
2012-07-05T14:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:12:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:12:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:12:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:12:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62713
2012-07-05T14:12:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:12:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62714
2012-07-05T14:12:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62715
2012-07-05T14:12:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62417
2012-07-05T14:12:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62418
2012-07-05T14:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62419
2012-07-05T14:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62420
2012-07-05T14:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62421

2012-07-05T14:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62422
2012-07-05T14:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62423
2012-07-05T14:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62424
2012-07-05T14:13:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62425
2012-07-05T14:13:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62426
2012-07-05T14:13:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.212,2109
2012-07-05T14:15:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,57447
2012-07-05T14:16:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,49536
2012-07-05T14:16:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.115,60952
2012-07-05T14:17:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,54242
2012-07-05T14:17:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:17:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:17:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.232,1158
2012-07-05T14:18:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:18:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:18:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:18:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62427
2012-07-05T14:18:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:18:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62428
2012-07-05T14:18:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62429
2012-07-05T14:18:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62430
2012-07-05T14:18:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62431
2012-07-05T14:18:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62432
2012-07-05T14:18:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62433
2012-07-05T14:18:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62434
2012-07-05T14:18:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62435
2012-07-05T14:18:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62436
2012-07-05T14:18:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62437
2012-07-05T14:18:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:18:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T14:19:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T14:19:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:19:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62438
2012-07-05T14:19:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:19:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62439
2012-07-05T14:19:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62440
2012-07-05T14:19:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62441
2012-07-05T14:19:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62442
2012-07-05T14:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62443
2012-07-05T14:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62444
2012-07-05T14:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62445
2012-07-05T14:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62446
2012-07-05T14:19:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62447
2012-07-05T14:19:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62448
2012-07-05T14:19:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.17,57629
2012-07-05T14:20:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.227,2421
2012-07-05T14:20:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:20:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:21:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,62198
2012-07-05T14:21:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.193,3111
2012-07-05T14:22:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,55117
2012-07-05T14:23:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:23:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56758
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56759
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:23:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56760
2012-07-05T14:23:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53363

2012-07-05T14:23:14-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T14:23:14-03:00,info,appl
listen,17,0.0.0.0,53364
2012-07-05T14:23:14-03:00,info,appl
listen,17,0.0.0.0,53365
2012-07-05T14:23:14-03:00,info,appl
listen,17,0.0.0.0,53366
2012-07-05T14:23:15-03:00,info,appl
listen,17,0.0.0.0,53367
2012-07-05T14:23:15-03:00,info,appl
listen,17,0.0.0.0,53368
2012-07-05T14:23:15-03:00,info,appl
listen,17,0.0.0.0,53369
2012-07-05T14:23:15-03:00,info,appl
listen,17,0.0.0.0,53370
2012-07-05T14:23:16-03:00,info,appl
listen,17,0.0.0.0,53371
2012-07-05T14:23:16-03:00,info,appl
listen,17,0.0.0.0,53372
2012-07-05T14:23:40-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T14:23:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:23:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:23:40-03:00,info,appl
listen,17,0.0.0.0,53373
2012-07-05T14:23:40-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T14:23:41-03:00,info,appl
listen,17,0.0.0.0,53374
2012-07-05T14:23:41-03:00,info,appl
listen,17,0.0.0.0,53375
2012-07-05T14:23:42-03:00,info,appl
listen,17,0.0.0.0,53376
2012-07-05T14:23:42-03:00,info,appl
listen,17,0.0.0.0,53377
2012-07-05T14:23:43-03:00,info,appl
listen,17,0.0.0.0,53378
2012-07-05T14:23:43-03:00,info,appl
listen,17,0.0.0.0,53379
2012-07-05T14:23:43-03:00,info,appl
listen,17,0.0.0.0,53380
2012-07-05T14:23:43-03:00,info,appl
listen,17,0.0.0.0,53381
2012-07-05T14:23:44-03:00,info,appl
listen,17,0.0.0.0,53382
2012-07-05T14:23:44-03:00,info,appl
listen,17,0.0.0.0,53383
2012-07-05T14:23:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:23:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:23:48-03:00,info,appl
listen,17,0.0.0.0,53384
2012-07-05T14:23:48-03:00,info,appl
listen,17,0.0.0.0,53385
2012-07-05T14:23:49-03:00,info,appl
listen,17,0.0.0.0,53386

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T14:23:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53387
2012-07-05T14:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53388
2012-07-05T14:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53389
2012-07-05T14:23:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53390
2012-07-05T14:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53391
2012-07-05T14:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53392
2012-07-05T14:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53393
2012-07-05T14:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53394
2012-07-05T14:23:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.30,1494
2012-07-05T14:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53395
2012-07-05T14:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53396
2012-07-05T14:23:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53397
2012-07-05T14:23:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53398
2012-07-05T14:23:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53399
2012-07-05T14:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53400
2012-07-05T14:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53401
2012-07-05T14:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53402
2012-07-05T14:23:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53403
2012-07-05T14:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53404
2012-07-05T14:23:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53405
2012-07-05T14:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53406
2012-07-05T14:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:24:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53407
2012-07-05T14:24:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53408
2012-07-05T14:24:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53409
2012-07-05T14:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53410

2012-07-05T14:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53411
2012-07-05T14:24:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53412
2012-07-05T14:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53413
2012-07-05T14:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53414
2012-07-05T14:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53415
2012-07-05T14:24:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53416
2012-07-05T14:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53417
2012-07-05T14:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53418
2012-07-05T14:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53419
2012-07-05T14:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53420
2012-07-05T14:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53421
2012-07-05T14:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53422
2012-07-05T14:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53423
2012-07-05T14:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53424
2012-07-05T14:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53425
2012-07-05T14:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53426
2012-07-05T14:24:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.9,64738
2012-07-05T14:24:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53427
2012-07-05T14:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53428
2012-07-05T14:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53429
2012-07-05T14:24:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53430
2012-07-05T14:24:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53431
2012-07-05T14:24:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53432
2012-07-05T14:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53433
2012-07-05T14:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53434
2012-07-05T14:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53435

2012-07-05T14:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53436
2012-07-05T14:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53437
2012-07-05T14:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53438
2012-07-05T14:24:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53439
2012-07-05T14:24:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:24:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53440
2012-07-05T14:24:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53441
2012-07-05T14:24:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53442
2012-07-05T14:24:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53443
2012-07-05T14:24:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53444
2012-07-05T14:24:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53445
2012-07-05T14:24:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53446
2012-07-05T14:24:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53447
2012-07-05T14:24:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53448
2012-07-05T14:24:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53449
2012-07-05T14:24:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.100,1359
2012-07-05T14:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T14:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53450
2012-07-05T14:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53451
2012-07-05T14:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53452
2012-07-05T14:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53453
2012-07-05T14:24:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53454
2012-07-05T14:24:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53455
2012-07-05T14:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53456
2012-07-05T14:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53457
2012-07-05T14:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53458

2012-07-05T14:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53459
2012-07-05T14:24:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53460
2012-07-05T14:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53461
2012-07-05T14:24:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53462
2012-07-05T14:24:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53463
2012-07-05T14:24:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.197,389
2012-07-05T14:24:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53464
2012-07-05T14:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53465
2012-07-05T14:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53466
2012-07-05T14:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53467
2012-07-05T14:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53468
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53469
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53470
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53471
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53472
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53473
2012-07-05T14:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53474
2012-07-05T14:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53475
2012-07-05T14:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53476
2012-07-05T14:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53477
2012-07-05T14:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53478
2012-07-05T14:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53479
2012-07-05T14:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53480
2012-07-05T14:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53481
2012-07-05T14:24:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53482
2012-07-05T14:24:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:24:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T14:24:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:24:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:24:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53483
2012-07-05T14:24:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53484
2012-07-05T14:24:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53485
2012-07-05T14:24:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53486
2012-07-05T14:24:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53487
2012-07-05T14:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53488
2012-07-05T14:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53489
2012-07-05T14:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53490
2012-07-05T14:24:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53491
2012-07-05T14:24:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53492
2012-07-05T14:24:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53493
2012-07-05T14:24:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,51687
2012-07-05T14:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53494
2012-07-05T14:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53495
2012-07-05T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53496
2012-07-05T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53497
2012-07-05T14:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53498
2012-07-05T14:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53499
2012-07-05T14:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53500
2012-07-05T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53501
2012-07-05T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53502
2012-07-05T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53503
2012-07-05T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53504
2012-07-05T14:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:25:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53505

2012-07-05T14:25:07-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T14:25:08-03:00,info,appl
listen,17,0.0.0.0,53506
2012-07-05T14:25:09-03:00,info,appl
listen,17,0.0.0.0,53507
2012-07-05T14:25:09-03:00,info,appl
listen,17,0.0.0.0,53508
2012-07-05T14:25:09-03:00,info,appl
listen,17,0.0.0.0,53509
2012-07-05T14:25:10-03:00,info,appl
listen,17,0.0.0.0,53510
2012-07-05T14:25:10-03:00,info,appl
listen,17,0.0.0.0,53511
2012-07-05T14:25:10-03:00,info,appl
listen,17,0.0.0.0,53512
2012-07-05T14:25:10-03:00,info,appl
listen,17,0.0.0.0,53513
2012-07-05T14:25:11-03:00,info,appl
listen,17,0.0.0.0,53514
2012-07-05T14:25:11-03:00,info,appl
listen,17,0.0.0.0,53515
2012-07-05T14:25:22-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T14:25:23-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T14:25:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:25:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:25:23-03:00,info,appl
listen,17,0.0.0.0,53516
2012-07-05T14:25:23-03:00,info,appl
listen,17,0.0.0.0,53517
2012-07-05T14:25:24-03:00,info,appl
listen,17,0.0.0.0,53518
2012-07-05T14:25:24-03:00,info,appl
listen,17,0.0.0.0,53519
2012-07-05T14:25:25-03:00,info,appl
listen,17,0.0.0.0,53520
2012-07-05T14:25:25-03:00,info,appl
listen,17,0.0.0.0,53521
2012-07-05T14:25:25-03:00,info,appl
listen,17,0.0.0.0,53522
2012-07-05T14:25:26-03:00,info,appl
listen,17,0.0.0.0,53523
2012-07-05T14:25:26-03:00,info,appl
listen,17,0.0.0.0,53524
2012-07-05T14:25:26-03:00,info,appl
listen,17,0.0.0.0,53525
2012-07-05T14:25:26-03:00,info,appl
listen,17,0.0.0.0,53526
2012-07-05T14:25:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:25:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:25:31-03:00,info,appl
listen,17,0.0.0.0,53527
2012-07-05T14:25:31-03:00,info,appl
send,17,10.10.0.12,389

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T14:25:31-03:00,info,appl
listen,17,0.0.0.0,53528
2012-07-05T14:25:32-03:00,info,appl
listen,17,0.0.0.0,53529
2012-07-05T14:25:32-03:00,info,appl
listen,17,0.0.0.0,53530
2012-07-05T14:25:32-03:00,info,appl
listen,17,0.0.0.0,53531
2012-07-05T14:25:33-03:00,info,appl
listen,17,0.0.0.0,53532
2012-07-05T14:25:33-03:00,info,appl
listen,17,0.0.0.0,53533
2012-07-05T14:25:33-03:00,info,appl
listen,17,0.0.0.0,53534
2012-07-05T14:25:33-03:00,info,appl
listen,17,0.0.0.0,53535
2012-07-05T14:25:34-03:00,info,appl
listen,17,0.0.0.0,53536
2012-07-05T14:25:34-03:00,info,appl
listen,17,0.0.0.0,53537
2012-07-05T14:25:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:25:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:25:38-03:00,info,appl
listen,17,0.0.0.0,53538
2012-07-05T14:25:38-03:00,info,appl
listen,17,0.0.0.0,53539
2012-07-05T14:25:39-03:00,info,appl
listen,17,0.0.0.0,53540
2012-07-05T14:25:39-03:00,info,appl
listen,17,0.0.0.0,53541
2012-07-05T14:25:40-03:00,info,appl
listen,17,0.0.0.0,53542
2012-07-05T14:25:40-03:00,info,appl
listen,17,0.0.0.0,53543
2012-07-05T14:25:40-03:00,info,appl
listen,17,0.0.0.0,53544
2012-07-05T14:25:41-03:00,info,appl
listen,17,0.0.0.0,53545
2012-07-05T14:25:41-03:00,info,appl
listen,17,0.0.0.0,53546
2012-07-05T14:25:41-03:00,info,appl
listen,17,0.0.0.0,53547
2012-07-05T14:25:41-03:00,info,appl
listen,17,0.0.0.0,53548
2012-07-05T14:25:46-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:25:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:25:46-03:00,info,appl
listen,17,0.0.0.0,53549
2012-07-05T14:25:46-03:00,info,appl
listen,17,0.0.0.0,53550
2012-07-05T14:25:47-03:00,info,appl
listen,17,0.0.0.0,53551
2012-07-05T14:25:47-03:00,info,appl
listen,17,0.0.0.0,53552
2012-07-05T14:25:47-03:00,info,appl
listen,17,0.0.0.0,53553

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T14:25:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53554
2012-07-05T14:25:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53555
2012-07-05T14:25:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53556
2012-07-05T14:25:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53557
2012-07-05T14:25:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53558
2012-07-05T14:25:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53559
2012-07-05T14:25:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:26:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.15,2639
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49699
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49700
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55684
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55685
2012-07-05T14:27:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55686
2012-07-05T14:27:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58281
2012-07-05T14:27:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58282
2012-07-05T14:27:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58283
2012-07-05T14:27:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58284
2012-07-05T14:27:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58285
2012-07-05T14:27:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58286
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58287
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58288
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58289
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58290
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52151
2012-07-05T14:27:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53

2012-07-05T14:27:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61192
2012-07-05T14:27:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61615
2012-07-05T14:27:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:27:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60849
2012-07-05T14:27:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:28:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T14:28:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T14:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60850
2012-07-05T14:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:28:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60851
2012-07-05T14:28:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60852
2012-07-05T14:28:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60853
2012-07-05T14:28:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60854
2012-07-05T14:28:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60855
2012-07-05T14:28:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60856
2012-07-05T14:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60857
2012-07-05T14:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60858
2012-07-05T14:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60859
2012-07-05T14:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60860
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55906
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55907
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T14:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T14:29:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.3,62955
2012-07-05T14:30:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.72,49235
2012-07-05T14:31:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.42,64911
2012-07-05T14:31:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T14:31:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:32:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.152,63806
2012-07-05T14:32:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:33:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:33:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.25,1089
2012-07-05T14:33:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T14:33:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T14:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:33:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62871
2012-07-05T14:33:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62872
2012-07-05T14:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:33:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62873
2012-07-05T14:33:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51700
2012-07-05T14:33:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:33:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51701
2012-07-05T14:33:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51702
2012-07-05T14:33:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51703
2012-07-05T14:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51704
2012-07-05T14:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51705
2012-07-05T14:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51706
2012-07-05T14:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51707
2012-07-05T14:33:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51708
2012-07-05T14:33:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51709
2012-07-05T14:33:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.25,53795
2012-07-05T14:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64228
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389

2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61279
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61280
2012-07-05T14:34:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:34:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61281
2012-07-05T14:34:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54393
2012-07-05T14:34:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54394
2012-07-05T14:34:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56909
2012-07-05T14:34:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56910
2012-07-05T14:34:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58366
2012-07-05T14:34:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58367
2012-07-05T14:34:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58368
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57424
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57425
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50972
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50973
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57570
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57571
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57180
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57181
2012-07-05T14:34:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57182
2012-07-05T14:34:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.25,1127
2012-07-05T14:35:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.192,3949
2012-07-05T14:35:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:35:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:36:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.57,1764
2012-07-05T14:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,59800
2012-07-05T14:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,3725
2012-07-05T14:38:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T14:38:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-05T14:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57183
2012-07-05T14:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57184
2012-07-05T14:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57185
2012-07-05T14:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57186
2012-07-05T14:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57187
2012-07-05T14:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57188
2012-07-05T14:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57189
2012-07-05T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57190
2012-07-05T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57191
2012-07-05T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57192
2012-07-05T14:38:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57193
2012-07-05T14:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,1640
2012-07-05T14:39:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:39:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:39:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,58584
2012-07-05T14:39:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57194
2012-07-05T14:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57195
2012-07-05T14:39:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57196
2012-07-05T14:39:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57197
2012-07-05T14:39:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57198
2012-07-05T14:39:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57199
2012-07-05T14:39:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57200
2012-07-05T14:39:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57201
2012-07-05T14:39:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57202
2012-07-05T14:39:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57203

2012-07-05T14:39:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57204
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52023
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52024
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52025
2012-07-05T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52026
2012-07-05T14:40:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52027
2012-07-05T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52028
2012-07-05T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52029
2012-07-05T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52030
2012-07-05T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52031
2012-07-05T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52032
2012-07-05T14:40:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52033
2012-07-05T14:40:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52034
2012-07-05T14:40:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52035
2012-07-05T14:40:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,63201
2012-07-05T14:40:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.238,58912
2012-07-05T14:41:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,4751
2012-07-05T14:42:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,54233
2012-07-05T14:43:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,61569
2012-07-05T14:43:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:43:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49970
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49971
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T14:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49972

2012-07-05T14:43:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T14:43:39-03:00,info,appl
listen,17,0.0.0.0,49973
2012-07-05T14:43:39-03:00,info,appl
listen,17,0.0.0.0,49974
2012-07-05T14:43:40-03:00,info,appl
listen,17,0.0.0.0,49975
2012-07-05T14:43:40-03:00,info,appl
w,listen,17,0.0.0.0,55468
2012-07-05T14:43:40-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T14:43:40-03:00,info,appl
listen,17,0.0.0.0,55469
2012-07-05T14:43:41-03:00,info,appl
listen,17,0.0.0.0,55470
2012-07-05T14:43:41-03:00,info,appl
listen,17,0.0.0.0,55471
2012-07-05T14:43:41-03:00,info,appl
listen,17,0.0.0.0,55472
2012-07-05T14:43:42-03:00,info,appl
listen,17,0.0.0.0,55473
2012-07-05T14:43:42-03:00,info,appl
listen,17,0.0.0.0,55474
2012-07-05T14:43:42-03:00,info,appl
listen,17,0.0.0.0,55475
2012-07-05T14:43:42-03:00,info,appl
listen,17,0.0.0.0,55476
2012-07-05T14:43:43-03:00,info,appl
listen,17,0.0.0.0,55477
2012-07-05T14:44:01-03:00,info,appl
w,listen,17,0.0.0.0,60488
2012-07-05T14:44:01-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T14:44:01-03:00,info,appl
listen,17,0.0.0.0,60489
2012-07-05T14:44:01-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T14:44:01-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T14:44:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T14:44:01-03:00,info,appl
w,listen,17,0.0.0.0,50339
2012-07-05T14:44:01-03:00,info,appl
listen,17,0.0.0.0,50340
2012-07-05T14:44:02-03:00,info,appl
listen,17,0.0.0.0,50341
2012-07-05T14:44:02-03:00,info,appl
w,listen,17,0.0.0.0,61024
2012-07-05T14:44:02-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T14:44:02-03:00,info,appl
listen,17,0.0.0.0,61025
2012-07-05T14:44:03-03:00,info,appl
listen,17,0.0.0.0,61026
2012-07-05T14:44:03-03:00,info,appl
listen,17,0.0.0.0,61027
2012-07-05T14:44:03-03:00,info,appl
listen,17,0.0.0.0,61028

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T14:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61029
2012-07-05T14:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61030
2012-07-05T14:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61031
2012-07-05T14:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61032
2012-07-05T14:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61033
2012-07-05T14:44:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55711
2012-07-05T14:44:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:44:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,54777
2012-07-05T14:44:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58129
2012-07-05T14:44:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61042
2012-07-05T14:44:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:44:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51317
2012-07-05T14:44:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:44:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.45,2236
2012-07-05T14:46:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:46:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:46:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:46:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.224,1173
2012-07-05T14:47:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:47:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.166,2265
2012-07-05T14:48:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:48:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51318
2012-07-05T14:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:48:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51319
2012-07-05T14:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51320
2012-07-05T14:48:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51321
2012-07-05T14:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51322
2012-07-05T14:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51323

2012-07-05T14:48:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51324
2012-07-05T14:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51325
2012-07-05T14:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51326
2012-07-05T14:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51327
2012-07-05T14:48:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51328
2012-07-05T14:48:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51329
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51330
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51331
2012-07-05T14:49:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51332
2012-07-05T14:49:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51333
2012-07-05T14:49:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51334
2012-07-05T14:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51335
2012-07-05T14:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51336
2012-07-05T14:49:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51337
2012-07-05T14:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51338
2012-07-05T14:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51339
2012-07-05T14:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51340
2012-07-05T14:49:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51341
2012-07-05T14:50:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.101,49369
2012-07-05T14:50:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.88,3621
2012-07-05T14:50:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:50:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T14:51:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.246,52538
2012-07-05T14:51:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,3799
2012-07-05T14:52:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,60716
2012-07-05T14:53:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T14:53:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T14:53:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.1.197,53926
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52070
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52071
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64575
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64576
2012-07-05T14:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64577
2012-07-05T14:53:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54494
2012-07-05T14:53:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54495
2012-07-05T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54496
2012-07-05T14:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54497
2012-07-05T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54498
2012-07-05T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54499
2012-07-05T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54500
2012-07-05T14:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54501
2012-07-05T14:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54502
2012-07-05T14:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54503
2012-07-05T14:53:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56859
2012-07-05T14:53:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50404
2012-07-05T14:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62048
2012-07-05T14:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49740
2012-07-05T14:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:53:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:53:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,59265

2012-07-05T14:54:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:54:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49741
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49742
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51896
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51897
2012-07-05T14:54:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59758
2012-07-05T14:54:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T14:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59759
2012-07-05T14:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59760
2012-07-05T14:54:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59761
2012-07-05T14:54:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59762
2012-07-05T14:54:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59763
2012-07-05T14:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59764
2012-07-05T14:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59765
2012-07-05T14:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59766
2012-07-05T14:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59767
2012-07-05T14:54:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,53309
2012-07-05T14:54:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T14:54:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,53311
2012-07-05T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59768
2012-07-05T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59769
2012-07-05T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59770
2012-07-05T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59771
2012-07-05T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59772

2012-07-05T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59773
2012-07-05T14:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59774
2012-07-05T14:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59775
2012-07-05T14:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59776
2012-07-05T14:55:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59777
2012-07-05T14:55:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59778
2012-07-05T14:55:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59779
2012-07-05T14:55:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,2960
2012-07-05T14:55:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,3234
2012-07-05T14:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63163
2012-07-05T14:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T14:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52001
2012-07-05T14:56:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,3875
2012-07-05T14:56:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.154,1353
2012-07-05T14:57:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.5,3591
2012-07-05T14:57:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.81,53505
2012-07-05T14:58:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,49224
2012-07-05T14:59:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T14:59:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T14:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T14:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52002
2012-07-05T14:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T14:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52003
2012-07-05T14:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52004
2012-07-05T14:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52005
2012-07-05T14:59:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52006
2012-07-05T14:59:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52007
2012-07-05T14:59:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52008
2012-07-05T14:59:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52009
2012-07-05T14:59:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52010

2012-07-05T14:59:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52011
2012-07-05T14:59:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52012
2012-07-05T14:59:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52013
2012-07-05T14:59:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,3453
2012-07-05T14:59:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,3474
2012-07-05T15:00:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:00:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:00:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:01:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,53103
2012-07-05T15:01:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:01:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,53104
2012-07-05T15:01:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,55100
2012-07-05T15:02:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,55346
2012-07-05T15:02:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.19,2039
2012-07-05T15:04:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:04:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52014
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52015
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57785
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:04:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57786
2012-07-05T15:04:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55360
2012-07-05T15:04:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T15:04:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55361
2012-07-05T15:04:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55362
2012-07-05T15:04:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.71,2725
2012-07-05T15:04:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55363
2012-07-05T15:04:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52311

2012-07-05T15:04:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52312
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54352
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54353
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54354
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54355
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54356
2012-07-05T15:04:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54357
2012-07-05T15:04:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,3778
2012-07-05T15:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T15:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54358
2012-07-05T15:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54359
2012-07-05T15:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54360
2012-07-05T15:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54361
2012-07-05T15:05:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54362
2012-07-05T15:05:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54363
2012-07-05T15:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54364
2012-07-05T15:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54365
2012-07-05T15:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54366
2012-07-05T15:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54367
2012-07-05T15:05:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54368
2012-07-05T15:05:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54369
2012-07-05T15:05:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4241
2012-07-05T15:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.169,1145
2012-07-05T15:06:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,64060
2012-07-05T15:07:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.169,1188
2012-07-05T15:07:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546

2012-07-05T15:07:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:07:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,62834
2012-07-05T15:08:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:08:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:09:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:09:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54370
2012-07-05T15:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54371
2012-07-05T15:09:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54372
2012-07-05T15:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54373
2012-07-05T15:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54374
2012-07-05T15:09:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54375
2012-07-05T15:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54376
2012-07-05T15:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54377
2012-07-05T15:09:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54378
2012-07-05T15:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54379
2012-07-05T15:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54380
2012-07-05T15:09:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54381
2012-07-05T15:09:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,2321
2012-07-05T15:10:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,56036
2012-07-05T15:10:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:10:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54382
2012-07-05T15:10:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:10:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54383
2012-07-05T15:10:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54384
2012-07-05T15:10:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54385
2012-07-05T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54386
2012-07-05T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54387

2012-07-05T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54388
2012-07-05T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54389
2012-07-05T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54390
2012-07-05T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54391
2012-07-05T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54392
2012-07-05T15:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54393
2012-07-05T15:10:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,61639
2012-07-05T15:11:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,56037
2012-07-05T15:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,58833
2012-07-05T15:14:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:14:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54394
2012-07-05T15:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54395
2012-07-05T15:14:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54396
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57302
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57303
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58576
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T15:14:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58577
2012-07-05T15:14:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58578
2012-07-05T15:14:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58579
2012-07-05T15:14:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58580
2012-07-05T15:14:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58581
2012-07-05T15:14:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58582
2012-07-05T15:14:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58583
2012-07-05T15:14:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58584
2012-07-05T15:14:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58585

2012-07-05T15:14:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:14:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:14:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,2760
2012-07-05T15:15:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:15:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:18:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.169,1821
2012-07-05T15:19:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:19:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58586
2012-07-05T15:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58587
2012-07-05T15:19:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58588
2012-07-05T15:19:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58589
2012-07-05T15:19:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58590
2012-07-05T15:19:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58591
2012-07-05T15:19:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58592
2012-07-05T15:19:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58593
2012-07-05T15:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58594
2012-07-05T15:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58595
2012-07-05T15:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58596
2012-07-05T15:19:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58597
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58598
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58599
2012-07-05T15:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58600
2012-07-05T15:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58601
2012-07-05T15:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58602

2012-07-05T15:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58603
2012-07-05T15:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58604
2012-07-05T15:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58605
2012-07-05T15:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58606
2012-07-05T15:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58607
2012-07-05T15:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58608
2012-07-05T15:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58609
2012-07-05T15:21:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:21:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:21:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,53689
2012-07-05T15:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:22:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,53694
2012-07-05T15:22:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:22:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:23:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,62793
2012-07-05T15:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58610
2012-07-05T15:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:24:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:24:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58611
2012-07-05T15:24:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58612
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57460
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57461
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53624
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T15:24:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53625
2012-07-05T15:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53626

2012-07-05T15:24:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53627
2012-07-05T15:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53628
2012-07-05T15:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53629
2012-07-05T15:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53630
2012-07-05T15:24:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53631
2012-07-05T15:24:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53632
2012-07-05T15:24:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53633
2012-07-05T15:25:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,4769
2012-07-05T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53634
2012-07-05T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53635
2012-07-05T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53636
2012-07-05T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53637
2012-07-05T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53638
2012-07-05T15:25:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53639
2012-07-05T15:25:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53640
2012-07-05T15:25:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53641
2012-07-05T15:25:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53642
2012-07-05T15:25:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53643
2012-07-05T15:25:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53644
2012-07-05T15:25:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53645
2012-07-05T15:27:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.7,55646
2012-07-05T15:28:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.68,1658
2012-07-05T15:28:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:28:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:29:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.171,1963
2012-07-05T15:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:29:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,58592
2012-07-05T15:29:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T15:30:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:30:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53646
2012-07-05T15:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:30:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53647
2012-07-05T15:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53648
2012-07-05T15:30:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53649
2012-07-05T15:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53650
2012-07-05T15:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53651
2012-07-05T15:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53652
2012-07-05T15:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53653
2012-07-05T15:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53654
2012-07-05T15:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53655
2012-07-05T15:30:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53656
2012-07-05T15:30:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53657
2012-07-05T15:30:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,60564
2012-07-05T15:30:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,2521
2012-07-05T15:31:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.236,60730
2012-07-05T15:33:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,53878
2012-07-05T15:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:34:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,50850
2012-07-05T15:34:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.14,60353
2012-07-05T15:35:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50093
2012-07-05T15:35:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:35:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:35:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50094

2012-07-05T15:35:10-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T15:35:10-03:00,info,appl
listen,17,0.0.0.0,50095
2012-07-05T15:35:10-03:00,info,appl
w,listen,17,0.0.0.0,56530
2012-07-05T15:35:10-03:00,info,appl
w,listen,17,0.0.0.0,58294
2012-07-05T15:35:10-03:00,info,appl
listen,17,0.0.0.0,58295
2012-07-05T15:35:11-03:00,info,appl
w,listen,17,0.0.0.0,64013
2012-07-05T15:35:11-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T15:35:11-03:00,info,appl
w,listen,17,0.0.0.0,57764
2012-07-05T15:35:11-03:00,info,appl
listen,17,0.0.0.0,57765
2012-07-05T15:35:11-03:00,info,appl
w,listen,17,0.0.0.0,51838
2012-07-05T15:35:11-03:00,info,appl
listen,17,0.0.0.0,51839
2012-07-05T15:35:12-03:00,info,appl
w,listen,17,0.0.0.0,61324
2012-07-05T15:35:12-03:00,info,appl
listen,17,0.0.0.0,61325
2012-07-05T15:35:12-03:00,info,appl
w,listen,17,0.0.0.0,57374
2012-07-05T15:35:12-03:00,info,appl
listen,17,0.0.0.0,57375
2012-07-05T15:35:13-03:00,info,appl
listen,17,0.0.0.0,57376
2012-07-05T15:35:13-03:00,info,appl
w,listen,17,0.0.0.0,58802
2012-07-05T15:35:13-03:00,info,appl
listen,17,0.0.0.0,58803
2012-07-05T15:35:13-03:00,info,appl
w,listen,17,0.0.0.0,60079
2012-07-05T15:35:13-03:00,info,appl
listen,17,0.0.0.0,60080
2012-07-05T15:35:13-03:00,info,appl
listen,17,0.0.0.0,60081
2012-07-05T15:35:13-03:00,info,appl
w,listen,17,0.0.0.0,58245
2012-07-05T15:35:13-03:00,info,appl
listen,17,0.0.0.0,58246
2012-07-05T15:35:15-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-05T15:35:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:35:15-03:00,info,appl
listen,17,0.0.0.0,58247
2012-07-05T15:35:15-03:00,info,appl
listen,17,0.0.0.0,58248
2012-07-05T15:35:16-03:00,info,appl
listen,17,0.0.0.0,58249
2012-07-05T15:35:16-03:00,info,appl
listen,17,0.0.0.0,58250
2012-07-05T15:35:17-03:00,info,appl
listen,17,0.0.0.0,58251

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T15:35:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58252
2012-07-05T15:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58253
2012-07-05T15:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58254
2012-07-05T15:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58255
2012-07-05T15:35:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58256
2012-07-05T15:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58257
2012-07-05T15:35:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58258
2012-07-05T15:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:36:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:36:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:36:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,62913
2012-07-05T15:36:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:37:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,49781
2012-07-05T15:37:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.43,60466
2012-07-05T15:38:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,2429
2012-07-05T15:39:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.79,53474
2012-07-05T15:39:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,56220
2012-07-05T15:39:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,63653
2012-07-05T15:40:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:40:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:40:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:40:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58259
2012-07-05T15:40:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:40:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58260
2012-07-05T15:40:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58261
2012-07-05T15:40:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58262
2012-07-05T15:40:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58263
2012-07-05T15:40:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58264

2012-07-05T15:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58265
2012-07-05T15:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58266
2012-07-05T15:40:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58267
2012-07-05T15:40:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58268
2012-07-05T15:40:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58269
2012-07-05T15:40:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58270
2012-07-05T15:40:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:40:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58271
2012-07-05T15:40:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58272
2012-07-05T15:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58273
2012-07-05T15:40:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58274
2012-07-05T15:40:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58275
2012-07-05T15:40:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58276
2012-07-05T15:40:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,52060
2012-07-05T15:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58277
2012-07-05T15:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58278
2012-07-05T15:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58279
2012-07-05T15:40:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58280
2012-07-05T15:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58281
2012-07-05T15:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58282
2012-07-05T15:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.102.0.20,389
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56290
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56291
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56292
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56293
2012-07-05T15:40:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56294
2012-07-05T15:40:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56295
2012-07-05T15:40:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56296

2012-07-05T15:40:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56297
2012-07-05T15:40:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56298
2012-07-05T15:40:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56299
2012-07-05T15:40:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56300
2012-07-05T15:40:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56301
2012-07-05T15:40:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56302
2012-07-05T15:40:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56303
2012-07-05T15:41:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,64319
2012-07-05T15:41:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,65255
2012-07-05T15:43:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:43:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:43:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,55800
2012-07-05T15:43:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:44:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:45:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:45:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56304
2012-07-05T15:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56305
2012-07-05T15:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56306
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52071
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52072
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54739
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T15:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54740
2012-07-05T15:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54741
2012-07-05T15:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54742
2012-07-05T15:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54743

2012-07-05T15:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54744
2012-07-05T15:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54745
2012-07-05T15:45:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54746
2012-07-05T15:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54747
2012-07-05T15:45:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54748
2012-07-05T15:46:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.133,54852
2012-07-05T15:47:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,63694
2012-07-05T15:47:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,56537
2012-07-05T15:50:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:50:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T15:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54749
2012-07-05T15:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:50:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54750
2012-07-05T15:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54751
2012-07-05T15:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54752
2012-07-05T15:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54753
2012-07-05T15:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54754
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54755
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54756
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54757
2012-07-05T15:50:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:50:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54758
2012-07-05T15:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54759
2012-07-05T15:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-05T15:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54761
2012-07-05T15:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54762

2012-07-05T15:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54763
2012-07-05T15:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54764
2012-07-05T15:50:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54765
2012-07-05T15:50:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54766
2012-07-05T15:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54767
2012-07-05T15:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54768
2012-07-05T15:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54769
2012-07-05T15:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54770
2012-07-05T15:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54771
2012-07-05T15:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54772
2012-07-05T15:50:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:50:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.156,50200
2012-07-05T15:51:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:51:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:51:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T15:52:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.193,59674
2012-07-05T15:53:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,52735
2012-07-05T15:54:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.163,65414
2012-07-05T15:55:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T15:55:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54773
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54774
2012-07-05T15:55:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54775
2012-07-05T15:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54776
2012-07-05T15:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61775
2012-07-05T15:55:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61776

2012-07-05T15:55:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61777
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53676
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53677
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53678
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53679
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53680
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53681
2012-07-05T15:55:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53682
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53683
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53684
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53685
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53686
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53687
2012-07-05T15:55:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53688
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53689
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53690
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53691
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53692
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53693
2012-07-05T15:55:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53694
2012-07-05T15:57:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T15:57:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:57:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.194,51001
2012-07-05T15:57:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:58:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49867
2012-07-05T15:58:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T15:58:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61310
2012-07-05T15:58:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T15:59:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135

2012-07-05T15:59:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:01-03:00,info,appl
listen,17,0.0.0.0,61311
2012-07-05T15:59:01-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T15:59:01-03:00,info,appl
listen,17,0.0.0.0,61312
2012-07-05T15:59:01-03:00,info,appl
listen,17,0.0.0.0,61313
2012-07-05T15:59:02-03:00,info,appl
listen,17,0.0.0.0,61314
2012-07-05T15:59:02-03:00,info,appl
listen,17,0.0.0.0,61315
2012-07-05T15:59:03-03:00,info,appl
listen,17,0.0.0.0,61316
2012-07-05T15:59:03-03:00,info,appl
listen,17,0.0.0.0,61317
2012-07-05T15:59:03-03:00,info,appl
listen,17,0.0.0.0,61318
2012-07-05T15:59:04-03:00,info,appl
listen,17,0.0.0.0,61319
2012-07-05T15:59:04-03:00,info,appl
listen,17,0.0.0.0,61320
2012-07-05T15:59:04-03:00,info,appl
listen,17,0.0.0.0,61321
2012-07-05T15:59:04-03:00,info,appl
listen,17,0.0.0.0,61322
2012-07-05T15:59:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:08-03:00,info,appl
listen,17,0.0.0.0,61323
2012-07-05T15:59:08-03:00,info,appl
listen,17,0.0.0.0,61324
2012-07-05T15:59:09-03:00,info,appl
listen,17,0.0.0.0,61325
2012-07-05T15:59:09-03:00,info,appl
listen,17,0.0.0.0,61326
2012-07-05T15:59:10-03:00,info,appl
listen,17,0.0.0.0,61327
2012-07-05T15:59:10-03:00,info,appl
listen,17,0.0.0.0,61328
2012-07-05T15:59:10-03:00,info,appl
listen,17,0.0.0.0,61329
2012-07-05T15:59:11-03:00,info,appl
listen,17,0.0.0.0,61330
2012-07-05T15:59:11-03:00,info,appl
listen,17,0.0.0.0,61331
2012-07-05T15:59:11-03:00,info,appl
listen,17,0.0.0.0,61332
2012-07-05T15:59:11-03:00,info,appl
listen,17,0.0.0.0,61333
2012-07-05T15:59:12-03:00,info,appl
listen,17,0.0.0.0,61334
2012-07-05T15:59:16-03:00,info,appl
connect out,6,10.10.0.11,1025

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T15:59:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:16-03:00,info,appl
listen,17,0.0.0.0,61335
2012-07-05T15:59:16-03:00,info,appl
listen,17,0.0.0.0,61336
2012-07-05T15:59:16-03:00,info,appl
listen,17,0.0.0.0,61337
2012-07-05T15:59:17-03:00,info,appl
listen,17,0.0.0.0,61338
2012-07-05T15:59:17-03:00,info,appl
listen,17,0.0.0.0,61339
2012-07-05T15:59:18-03:00,info,appl
listen,17,0.0.0.0,61340
2012-07-05T15:59:18-03:00,info,appl
listen,17,0.0.0.0,61341
2012-07-05T15:59:18-03:00,info,appl
listen,17,0.0.0.0,61342
2012-07-05T15:59:19-03:00,info,appl
listen,17,0.0.0.0,61343
2012-07-05T15:59:19-03:00,info,appl
listen,17,0.0.0.0,61344
2012-07-05T15:59:19-03:00,info,appl
listen,17,0.0.0.0,61345
2012-07-05T15:59:19-03:00,info,appl
listen,17,0.0.0.0,61346
2012-07-05T15:59:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:23-03:00,info,appl
listen,17,0.0.0.0,61347
2012-07-05T15:59:23-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T15:59:23-03:00,info,appl
listen,17,0.0.0.0,61348
2012-07-05T15:59:24-03:00,info,appl
listen,17,0.0.0.0,61349
2012-07-05T15:59:24-03:00,info,appl
listen,17,0.0.0.0,61350
2012-07-05T15:59:25-03:00,info,appl
listen,17,0.0.0.0,61351
2012-07-05T15:59:25-03:00,info,appl
listen,17,0.0.0.0,61352
2012-07-05T15:59:26-03:00,info,appl
listen,17,0.0.0.0,61353
2012-07-05T15:59:26-03:00,info,appl
listen,17,0.0.0.0,61354
2012-07-05T15:59:26-03:00,info,appl
listen,17,0.0.0.0,61355
2012-07-05T15:59:26-03:00,info,appl
listen,17,0.0.0.0,61356
2012-07-05T15:59:27-03:00,info,appl
listen,17,0.0.0.0,61357
2012-07-05T15:59:27-03:00,info,appl
listen,17,0.0.0.0,61358
2012-07-05T15:59:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:31-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T15:59:31-03:00,info,appl
listen,17,0.0.0.0,61359
2012-07-05T15:59:31-03:00,info,appl
listen,17,0.0.0.0,61360
2012-07-05T15:59:32-03:00,info,appl
listen,17,0.0.0.0,61361
2012-07-05T15:59:32-03:00,info,appl
listen,17,0.0.0.0,61362
2012-07-05T15:59:33-03:00,info,appl
listen,17,0.0.0.0,61363
2012-07-05T15:59:33-03:00,info,appl
listen,17,0.0.0.0,61364
2012-07-05T15:59:34-03:00,info,appl
listen,17,0.0.0.0,61365
2012-07-05T15:59:34-03:00,info,appl
listen,17,0.0.0.0,61366
2012-07-05T15:59:34-03:00,info,appl
listen,17,0.0.0.0,61367
2012-07-05T15:59:34-03:00,info,appl
listen,17,0.0.0.0,61368
2012-07-05T15:59:35-03:00,info,appl
listen,17,0.0.0.0,61369
2012-07-05T15:59:35-03:00,info,appl
listen,17,0.0.0.0,61370
2012-07-05T15:59:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:40-03:00,info,appl
listen,17,0.0.0.0,61371
2012-07-05T15:59:40-03:00,info,appl
listen,17,0.0.0.0,61372
2012-07-05T15:59:40-03:00,info,appl
listen,17,0.0.0.0,61373
2012-07-05T15:59:41-03:00,info,appl
listen,17,0.0.0.0,61374
2012-07-05T15:59:41-03:00,info,appl
listen,17,0.0.0.0,61375
2012-07-05T15:59:41-03:00,info,appl
listen,17,0.0.0.0,61376
2012-07-05T15:59:42-03:00,info,appl
listen,17,0.0.0.0,61377
2012-07-05T15:59:42-03:00,info,appl
listen,17,0.0.0.0,61378
2012-07-05T15:59:42-03:00,info,appl
listen,17,0.0.0.0,61379
2012-07-05T15:59:43-03:00,info,appl
listen,17,0.0.0.0,61380
2012-07-05T15:59:43-03:00,info,appl
send,17,10.108.0.153,389
2012-07-05T15:59:43-03:00,info,appl
listen,17,0.0.0.0,61381
2012-07-05T15:59:43-03:00,info,appl
listen,17,0.0.0.0,61382
2012-07-05T15:59:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:47-03:00,info,appl
listen,17,0.0.0.0,61383

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T15:59:47-03:00,info,appl
listen,17,0.0.0.0,61384
2012-07-05T15:59:48-03:00,info,appl
listen,17,0.0.0.0,61385
2012-07-05T15:59:48-03:00,info,appl
listen,17,0.0.0.0,61386
2012-07-05T15:59:49-03:00,info,appl
listen,17,0.0.0.0,61387
2012-07-05T15:59:49-03:00,info,appl
listen,17,0.0.0.0,61388
2012-07-05T15:59:49-03:00,info,appl
listen,17,0.0.0.0,61389
2012-07-05T15:59:50-03:00,info,appl
listen,17,0.0.0.0,61390
2012-07-05T15:59:50-03:00,info,appl
listen,17,0.0.0.0,61391
2012-07-05T15:59:50-03:00,info,appl
listen,17,0.0.0.0,61392
2012-07-05T15:59:50-03:00,info,appl
listen,17,0.0.0.0,61393
2012-07-05T15:59:51-03:00,info,appl
listen,17,0.0.0.0,61394
2012-07-05T15:59:55-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T15:59:55-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T15:59:55-03:00,info,appl
listen,17,0.0.0.0,61395
2012-07-05T15:59:55-03:00,info,appl
listen,17,0.0.0.0,61396
2012-07-05T15:59:55-03:00,info,appl
listen,17,0.0.0.0,61397
2012-07-05T15:59:56-03:00,info,appl
listen,17,0.0.0.0,61398
2012-07-05T15:59:56-03:00,info,appl
listen,17,0.0.0.0,61399
2012-07-05T15:59:57-03:00,info,appl
listen,17,0.0.0.0,61400
2012-07-05T15:59:57-03:00,info,appl
listen,17,0.0.0.0,61401
2012-07-05T15:59:57-03:00,info,appl
listen,17,0.0.0.0,61402
2012-07-05T15:59:58-03:00,info,appl
listen,17,0.0.0.0,61403
2012-07-05T15:59:58-03:00,info,appl
listen,17,0.0.0.0,61404
2012-07-05T15:59:58-03:00,info,appl
listen,17,0.0.0.0,61405
2012-07-05T15:59:58-03:00,info,appl
listen,17,0.0.0.0,61406
2012-07-05T16:00:03-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T16:00:03-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:00:03-03:00,info,appl
listen,17,0.0.0.0,61407
2012-07-05T16:00:03-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T16:00:03-03:00,info,appl
listen,17,0.0.0.0,61408

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T16:00:03-03:00,info,appl
listen,17,0.0.0.0,61409
2012-07-05T16:00:04-03:00,info,appl
listen,17,0.0.0.0,61410
2012-07-05T16:00:04-03:00,info,appl
listen,17,0.0.0.0,61411
2012-07-05T16:00:05-03:00,info,appl
listen,17,0.0.0.0,61412
2012-07-05T16:00:05-03:00,info,appl
listen,17,0.0.0.0,61413
2012-07-05T16:00:05-03:00,info,appl
listen,17,0.0.0.0,61414
2012-07-05T16:00:06-03:00,info,appl
listen,17,0.0.0.0,61415
2012-07-05T16:00:06-03:00,info,appl
listen,17,0.0.0.0,61416
2012-07-05T16:00:06-03:00,info,appl
listen,17,0.0.0.0,61417
2012-07-05T16:00:06-03:00,info,appl
listen,17,0.0.0.0,61418
2012-07-05T16:00:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T16:00:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:00:10-03:00,info,appl
listen,17,0.0.0.0,61419
2012-07-05T16:00:10-03:00,info,appl
listen,17,0.0.0.0,61420
2012-07-05T16:00:11-03:00,info,appl
listen,17,0.0.0.0,61421
2012-07-05T16:00:11-03:00,info,appl
listen,17,0.0.0.0,61422
2012-07-05T16:00:12-03:00,info,appl
listen,17,0.0.0.0,61423
2012-07-05T16:00:12-03:00,info,appl
listen,17,0.0.0.0,61424
2012-07-05T16:00:13-03:00,info,appl
listen,17,0.0.0.0,61425
2012-07-05T16:00:13-03:00,info,appl
listen,17,0.0.0.0,61426
2012-07-05T16:00:13-03:00,info,appl
listen,17,0.0.0.0,61427
2012-07-05T16:00:13-03:00,info,appl
listen,17,0.0.0.0,61428
2012-07-05T16:00:14-03:00,info,appl
listen,17,0.0.0.0,61429
2012-07-05T16:00:14-03:00,info,appl
listen,17,0.0.0.0,61430
2012-07-05T16:00:18-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T16:00:18-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:00:18-03:00,info,appl
listen,17,0.0.0.0,61431
2012-07-05T16:00:18-03:00,info,appl
listen,17,0.0.0.0,61432
2012-07-05T16:00:18-03:00,info,appl
listen,17,0.0.0.0,61433
2012-07-05T16:00:19-03:00,info,appl
listen,17,0.0.0.0,61434

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T16:00:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61435
2012-07-05T16:00:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61436
2012-07-05T16:00:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61437
2012-07-05T16:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61438
2012-07-05T16:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61439
2012-07-05T16:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61440
2012-07-05T16:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61441
2012-07-05T16:00:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61442
2012-07-05T16:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T16:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61443
2012-07-05T16:00:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61444
2012-07-05T16:00:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61445
2012-07-05T16:00:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.32,55191
2012-07-05T16:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61446
2012-07-05T16:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61447
2012-07-05T16:00:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61448
2012-07-05T16:00:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61449
2012-07-05T16:00:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61450
2012-07-05T16:00:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61451
2012-07-05T16:00:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61452
2012-07-05T16:00:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61453
2012-07-05T16:00:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61454
2012-07-05T16:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T16:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61455
2012-07-05T16:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61456
2012-07-05T16:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61457
2012-07-05T16:00:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61458

2012-07-05T16:00:35-03:00,info,appl
listen,17,0.0.0.0,61459
2012-07-05T16:00:35-03:00,info,appl
listen,17,0.0.0.0,61460
2012-07-05T16:00:36-03:00,info,appl
listen,17,0.0.0.0,61461
2012-07-05T16:00:36-03:00,info,appl
listen,17,0.0.0.0,61462
2012-07-05T16:00:36-03:00,info,appl
listen,17,0.0.0.0,61463
2012-07-05T16:00:37-03:00,info,appl
listen,17,0.0.0.0,61464
2012-07-05T16:00:37-03:00,info,appl
listen,17,0.0.0.0,61465
2012-07-05T16:00:37-03:00,info,appl
listen,17,0.0.0.0,61466
2012-07-05T16:00:42-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T16:00:42-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:00:42-03:00,info,appl
listen,17,0.0.0.0,61467
2012-07-05T16:00:42-03:00,info,appl
listen,17,0.0.0.0,61468
2012-07-05T16:00:42-03:00,info,appl
listen,17,0.0.0.0,61469
2012-07-05T16:00:43-03:00,info,appl
listen,17,0.0.0.0,61470
2012-07-05T16:00:43-03:00,info,appl
listen,17,0.0.0.0,61471
2012-07-05T16:00:44-03:00,info,appl
listen,17,0.0.0.0,61472
2012-07-05T16:00:44-03:00,info,appl
listen,17,0.0.0.0,61473
2012-07-05T16:00:44-03:00,info,appl
listen,17,0.0.0.0,61474
2012-07-05T16:00:45-03:00,info,appl
listen,17,0.0.0.0,61475
2012-07-05T16:00:45-03:00,info,appl
listen,17,0.0.0.0,61476
2012-07-05T16:00:45-03:00,info,appl
send,17,10.102.0.20,389
2012-07-05T16:00:45-03:00,info,appl
listen,17,0.0.0.0,61477
2012-07-05T16:00:45-03:00,info,appl
listen,17,0.0.0.0,61478
2012-07-05T16:00:49-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T16:00:49-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:00:49-03:00,info,appl
listen,17,0.0.0.0,61479
2012-07-05T16:00:49-03:00,info,appl
listen,17,0.0.0.0,61480
2012-07-05T16:00:50-03:00,info,appl
listen,17,0.0.0.0,61481
2012-07-05T16:00:50-03:00,info,appl
listen,17,0.0.0.0,61482
2012-07-05T16:00:51-03:00,info,appl
listen,17,0.0.0.0,61483

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T16:00:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61484
2012-07-05T16:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61485
2012-07-05T16:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61486
2012-07-05T16:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61487
2012-07-05T16:00:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61488
2012-07-05T16:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61489
2012-07-05T16:00:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61490
2012-07-05T16:00:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:00:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61491
2012-07-05T16:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61492
2012-07-05T16:00:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61493
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61494
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61495
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61496
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61497
2012-07-05T16:00:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61498
2012-07-05T16:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61499
2012-07-05T16:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61500
2012-07-05T16:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61501
2012-07-05T16:00:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61502
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61503
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61504
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61505
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61506
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61507
2012-07-05T16:00:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61508

2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61509
2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61510
2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61511
2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61512
2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61513
2012-07-05T16:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61514
2012-07-05T16:02:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.117,2592
2012-07-05T16:04:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:04:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:05:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:05:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.123,57925
2012-07-05T16:05:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61515
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61516
2012-07-05T16:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61517
2012-07-05T16:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61518
2012-07-05T16:05:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62714
2012-07-05T16:05:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62715
2012-07-05T16:05:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65529
2012-07-05T16:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65530
2012-07-05T16:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65531
2012-07-05T16:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65532
2012-07-05T16:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65533
2012-07-05T16:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65534
2012-07-05T16:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49152
2012-07-05T16:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49153

2012-07-05T16:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49154
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49155
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62816
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:06:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62817
2012-07-05T16:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61381
2012-07-05T16:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61382
2012-07-05T16:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61383
2012-07-05T16:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61384
2012-07-05T16:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61385
2012-07-05T16:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61386
2012-07-05T16:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61387
2012-07-05T16:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61388
2012-07-05T16:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61389
2012-07-05T16:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61390
2012-07-05T16:06:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:06:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.69,49353
2012-07-05T16:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61391
2012-07-05T16:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61392
2012-07-05T16:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61393
2012-07-05T16:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61394
2012-07-05T16:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61395

2012-07-05T16:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61396
2012-07-05T16:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61397
2012-07-05T16:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61398
2012-07-05T16:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61399
2012-07-05T16:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61400
2012-07-05T16:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61401
2012-07-05T16:11:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61402
2012-07-05T16:11:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,52961
2012-07-05T16:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61403
2012-07-05T16:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61404
2012-07-05T16:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61405
2012-07-05T16:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61406
2012-07-05T16:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61407
2012-07-05T16:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61408
2012-07-05T16:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61409
2012-07-05T16:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61410
2012-07-05T16:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61411
2012-07-05T16:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61412
2012-07-05T16:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61413
2012-07-05T16:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61414
2012-07-05T16:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61415
2012-07-05T16:11:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:11:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:12:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:12:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:13:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,54333
2012-07-05T16:16:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135

2012-07-05T16:16:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61416
2012-07-05T16:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61417
2012-07-05T16:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61418
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61520
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61521
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55347
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:16:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55348
2012-07-05T16:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55349
2012-07-05T16:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55350
2012-07-05T16:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55351
2012-07-05T16:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55352
2012-07-05T16:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55353
2012-07-05T16:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55354
2012-07-05T16:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55355
2012-07-05T16:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55356
2012-07-05T16:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.231,51287
2012-07-05T16:18:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:18:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:19:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:19:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.206,64907
2012-07-05T16:19:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:20:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.208,59976
2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55357

2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55358
2012-07-05T16:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55359
2012-07-05T16:20:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55360
2012-07-05T16:20:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55361
2012-07-05T16:20:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55362
2012-07-05T16:20:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55363
2012-07-05T16:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55364
2012-07-05T16:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55365
2012-07-05T16:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55366
2012-07-05T16:20:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55367
2012-07-05T16:20:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55368
2012-07-05T16:21:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,64933
2012-07-05T16:21:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:21:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:21:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:21:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55369
2012-07-05T16:21:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:21:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55370
2012-07-05T16:21:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55371
2012-07-05T16:21:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55372
2012-07-05T16:21:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55373
2012-07-05T16:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55374
2012-07-05T16:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55375
2012-07-05T16:21:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55376
2012-07-05T16:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55377
2012-07-05T16:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55378
2012-07-05T16:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55379
2012-07-05T16:21:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55380
2012-07-05T16:22:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80

2012-07-05T16:22:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR


B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:22:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.70,62226
2012-07-05T16:23:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,64939
2012-07-05T16:24:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,62535
2012-07-05T16:24:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,62540
2012-07-05T16:25:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:25:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:26:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.149,63830
2012-07-05T16:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55381
2012-07-05T16:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55382
2012-07-05T16:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55383
2012-07-05T16:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55384
2012-07-05T16:26:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55385
2012-07-05T16:26:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55386
2012-07-05T16:26:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55387
2012-07-05T16:26:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55388
2012-07-05T16:26:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55389
2012-07-05T16:26:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55390
2012-07-05T16:26:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55391
2012-07-05T16:26:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55392
2012-07-05T16:26:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62849
2012-07-05T16:26:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:26:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60051
2012-07-05T16:26:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:26:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:26:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:26:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:26:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-05T16:26:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60052
2012-07-05T16:26:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60053
2012-07-05T16:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60054
2012-07-05T16:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T16:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60055
2012-07-05T16:26:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60056
2012-07-05T16:26:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60057
2012-07-05T16:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60058
2012-07-05T16:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60059
2012-07-05T16:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60060
2012-07-05T16:26:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60061
2012-07-05T16:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60062
2012-07-05T16:26:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60063
2012-07-05T16:26:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:31:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:31:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:31:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:31:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60064
2012-07-05T16:31:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:31:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60065
2012-07-05T16:31:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60066
2012-07-05T16:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60067
2012-07-05T16:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60068
2012-07-05T16:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60069
2012-07-05T16:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60070
2012-07-05T16:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60071
2012-07-05T16:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60072
2012-07-05T16:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60073
2012-07-05T16:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60074
2012-07-05T16:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60075

2012-07-05T16:32:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:32:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:33:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:34:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:34:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:34:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50571
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50572
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50573
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62713
2012-07-05T16:36:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62714
2012-07-05T16:36:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52986
2012-07-05T16:36:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52987
2012-07-05T16:36:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51117
2012-07-05T16:36:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51118
2012-07-05T16:36:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51119
2012-07-05T16:36:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53238
2012-07-05T16:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53239
2012-07-05T16:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53240
2012-07-05T16:36:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58595
2012-07-05T16:36:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58596
2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53014
2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53015
2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49196
2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49197
2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56932

2012-07-05T16:36:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56933
2012-07-05T16:36:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T16:36:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T16:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56934
2012-07-05T16:36:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56935
2012-07-05T16:36:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56546
2012-07-05T16:36:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56547
2012-07-05T16:36:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58450
2012-07-05T16:36:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58451
2012-07-05T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58452
2012-07-05T16:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58453
2012-07-05T16:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58454
2012-07-05T16:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58455
2012-07-05T16:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58456
2012-07-05T16:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58457
2012-07-05T16:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58458
2012-07-05T16:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58459
2012-07-05T16:37:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:37:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:39:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,55484
2012-07-05T16:39:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,55486
2012-07-05T16:40:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:40:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:40:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:40:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.94,61728
2012-07-05T16:41:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T16:41:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:41:19-03:00,info,appl
listen,17,0.0.0.0,58460
2012-07-05T16:41:19-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T16:41:19-03:00,info,appl
listen,17,0.0.0.0,58461
2012-07-05T16:41:19-03:00,info,appl
listen,17,0.0.0.0,58462
2012-07-05T16:41:20-03:00,info,appl
listen,17,0.0.0.0,58463
2012-07-05T16:41:20-03:00,info,appl
listen,17,0.0.0.0,58464
2012-07-05T16:41:21-03:00,info,appl
listen,17,0.0.0.0,58465
2012-07-05T16:41:21-03:00,info,appl
listen,17,0.0.0.0,58466
2012-07-05T16:41:21-03:00,info,appl
listen,17,0.0.0.0,58467
2012-07-05T16:41:22-03:00,info,appl
listen,17,0.0.0.0,58468
2012-07-05T16:41:22-03:00,info,appl
listen,17,0.0.0.0,58469
2012-07-05T16:41:22-03:00,info,appl
listen,17,0.0.0.0,58470
2012-07-05T16:41:22-03:00,info,appl
listen,17,0.0.0.0,58471
2012-07-05T16:41:26-03:00,info,appl
w,listen,17,0.0.0.0,55751
2012-07-05T16:41:26-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T16:41:26-03:00,info,appl
listen,17,0.0.0.0,55752
2012-07-05T16:41:26-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T16:41:26-03:00,info,appl
listen,17,0.0.0.0,55753
2012-07-05T16:41:26-03:00,info,appl
listen,17,0.0.0.0,55754
2012-07-05T16:41:27-03:00,info,appl
listen,17,0.0.0.0,55755
2012-07-05T16:41:27-03:00,info,appl
listen,17,0.0.0.0,55756
2012-07-05T16:41:28-03:00,info,appl
listen,17,0.0.0.0,55757
2012-07-05T16:41:28-03:00,info,appl
listen,17,0.0.0.0,55758
2012-07-05T16:41:29-03:00,info,appl
listen,17,0.0.0.0,55759
2012-07-05T16:41:29-03:00,info,appl
listen,17,0.0.0.0,55760
2012-07-05T16:41:29-03:00,info,appl
listen,17,0.0.0.0,55761
2012-07-05T16:41:29-03:00,info,appl
listen,17,0.0.0.0,55762
2012-07-05T16:41:30-03:00,info,appl
listen,17,0.0.0.0,55763
2012-07-05T16:41:30-03:00,info,appl
listen,17,0.0.0.0,55764

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-05T16:41:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH


DLL32.EXE,allow,send,17,10.10.4.98,55488
2012-07-05T16:41:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T16:41:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T16:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55765
2012-07-05T16:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55766
2012-07-05T16:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55767
2012-07-05T16:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55768
2012-07-05T16:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55769
2012-07-05T16:41:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55770
2012-07-05T16:41:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55771
2012-07-05T16:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55772
2012-07-05T16:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55773
2012-07-05T16:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55774
2012-07-05T16:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55775
2012-07-05T16:41:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55776
2012-07-05T16:43:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.127,56179
2012-07-05T16:44:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.127,56183
2012-07-05T16:44:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.39,53062
2012-07-05T16:45:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.39,62486
2012-07-05T16:47:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T16:47:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55777
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55778
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55779
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62528
2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53

2012-07-05T16:47:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62529
2012-07-05T16:47:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64832
2012-07-05T16:47:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:47:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64833
2012-07-05T16:47:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64834
2012-07-05T16:47:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64835
2012-07-05T16:47:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64836
2012-07-05T16:47:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64837
2012-07-05T16:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64838
2012-07-05T16:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64839
2012-07-05T16:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64840
2012-07-05T16:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64841
2012-07-05T16:47:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:47:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:47:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.184,56744
2012-07-05T16:47:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:48:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,55246
2012-07-05T16:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:48:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.184,59836
2012-07-05T16:48:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,55249
2012-07-05T16:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T16:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64842
2012-07-05T16:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64843
2012-07-05T16:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64844
2012-07-05T16:51:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64845
2012-07-05T16:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64846
2012-07-05T16:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64847
2012-07-05T16:51:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64848

2012-07-05T16:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64849
2012-07-05T16:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64850
2012-07-05T16:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64851
2012-07-05T16:51:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64852
2012-07-05T16:51:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64853
2012-07-05T16:52:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T16:52:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T16:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64854
2012-07-05T16:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64855
2012-07-05T16:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64856
2012-07-05T16:52:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,52546
2012-07-05T16:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64857
2012-07-05T16:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64858
2012-07-05T16:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64859
2012-07-05T16:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64860
2012-07-05T16:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64861
2012-07-05T16:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64862
2012-07-05T16:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64863
2012-07-05T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64864
2012-07-05T16:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64865
2012-07-05T16:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T16:52:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.127,63118
2012-07-05T16:52:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.184,62782
2012-07-05T16:54:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T16:54:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:54:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T16:55:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-05T16:56:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:56:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64866
2012-07-05T16:56:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:56:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64867
2012-07-05T16:56:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64868
2012-07-05T16:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64869
2012-07-05T16:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64870
2012-07-05T16:56:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64871
2012-07-05T16:56:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64872
2012-07-05T16:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64873
2012-07-05T16:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64874
2012-07-05T16:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64875
2012-07-05T16:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64876
2012-07-05T16:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64877
2012-07-05T16:57:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,50816
2012-07-05T16:57:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T16:57:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64878
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64879
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55299
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T16:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55300
2012-07-05T16:57:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58107
2012-07-05T16:57:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T16:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58108
2012-07-05T16:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58109
2012-07-05T16:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58110
2012-07-05T16:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58111

2012-07-05T16:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58112
2012-07-05T16:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58113
2012-07-05T16:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58114
2012-07-05T16:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58115
2012-07-05T16:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58116
2012-07-05T16:59:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.184,54089
2012-07-05T16:59:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,53298
2012-07-05T17:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T17:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58117
2012-07-05T17:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-05T17:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.235,12110
2012-07-05T17:00:42-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-05T17:00:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61214
2012-07-05T17:00:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:00:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61630
2012-07-05T17:01:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.181,58712
2012-07-05T17:01:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:01:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:01:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:02:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,50382
2012-07-05T17:02:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:02:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61631
2012-07-05T17:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61632
2012-07-05T17:02:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61633
2012-07-05T17:02:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61634
2012-07-05T17:02:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61635
2012-07-05T17:02:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61636
2012-07-05T17:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61637
2012-07-05T17:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61638
2012-07-05T17:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61639
2012-07-05T17:02:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61640
2012-07-05T17:02:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61641
2012-07-05T17:02:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61642
2012-07-05T17:02:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:03:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,50383
2012-07-05T17:03:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.59,58594
2012-07-05T17:04:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.184,55112
2012-07-05T17:04:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,1794
2012-07-05T17:05:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.35,1715
2012-07-05T17:05:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,1348
2012-07-05T17:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T17:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61643
2012-07-05T17:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T17:06:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61644
2012-07-05T17:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61645
2012-07-05T17:06:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52966
2012-07-05T17:06:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52967
2012-07-05T17:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52968
2012-07-05T17:06:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58910
2012-07-05T17:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58911
2012-07-05T17:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58912
2012-07-05T17:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58913
2012-07-05T17:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58914
2012-07-05T17:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58915
2012-07-05T17:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58916
2012-07-05T17:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58917
2012-07-05T17:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.167,1721
2012-07-05T17:07:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:07:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58918
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58919
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54451
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54452
2012-07-05T17:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63035
2012-07-05T17:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63036
2012-07-05T17:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63037
2012-07-05T17:07:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63038
2012-07-05T17:07:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63039
2012-07-05T17:07:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63040
2012-07-05T17:07:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63041
2012-07-05T17:07:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63042
2012-07-05T17:07:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63043
2012-07-05T17:07:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63044
2012-07-05T17:07:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.138,2942
2012-07-05T17:08:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:08:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:09:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:09:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:09:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,63715
2012-07-05T17:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.202,2204
2012-07-05T17:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63045
2012-07-05T17:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63046
2012-07-05T17:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63047
2012-07-05T17:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63048
2012-07-05T17:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63049
2012-07-05T17:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63050
2012-07-05T17:11:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63051
2012-07-05T17:11:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63052
2012-07-05T17:11:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63053
2012-07-05T17:11:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63054
2012-07-05T17:11:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63055
2012-07-05T17:11:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63056
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63057
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-05T17:12:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:12:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63058
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63059
2012-07-05T17:12:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63060
2012-07-05T17:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63061
2012-07-05T17:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63062
2012-07-05T17:12:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63063
2012-07-05T17:12:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63064
2012-07-05T17:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63065
2012-07-05T17:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63066
2012-07-05T17:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63067
2012-07-05T17:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63068
2012-07-05T17:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63069
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51499
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51500
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54975
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54976
2012-07-05T17:13:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54977
2012-07-05T17:13:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52997
2012-07-05T17:13:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:13:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52998
2012-07-05T17:13:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52999
2012-07-05T17:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53000
2012-07-05T17:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53001
2012-07-05T17:13:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53002
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53003
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53004
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53005
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53006
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52890
2012-07-05T17:13:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57992
2012-07-05T17:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64369
2012-07-05T17:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56110
2012-07-05T17:13:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:13:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.9,58236
2012-07-05T17:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,2420
2012-07-05T17:14:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.21,1311
2012-07-05T17:15:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,61274
2012-07-05T17:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:15:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:16:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,62261
2012-07-05T17:16:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:16:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:16:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.89,56324
2012-07-05T17:17:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.51,63612
2012-07-05T17:17:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,65306
2012-07-05T17:17:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T17:17:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T17:17:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56111
2012-07-05T17:17:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:17:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:17:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56112
2012-07-05T17:17:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56113
2012-07-05T17:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59384
2012-07-05T17:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:17:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59385
2012-07-05T17:17:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56287
2012-07-05T17:17:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56288
2012-07-05T17:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56289
2012-07-05T17:17:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56290
2012-07-05T17:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56291
2012-07-05T17:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56292
2012-07-05T17:17:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56293
2012-07-05T17:17:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56294
2012-07-05T17:17:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56295
2012-07-05T17:17:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56296
2012-07-05T17:18:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.254,4986
2012-07-05T17:18:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,1673
2012-07-05T17:20:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.120,50136
2012-07-05T17:21:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,58827
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56297
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56298
2012-07-05T17:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56299
2012-07-05T17:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56300
2012-07-05T17:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56301
2012-07-05T17:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56302
2012-07-05T17:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56303
2012-07-05T17:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56304
2012-07-05T17:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56305
2012-07-05T17:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56306
2012-07-05T17:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56307
2012-07-05T17:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56308
2012-07-05T17:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:22:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,63543
2012-07-05T17:22:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:22:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:22:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T17:22:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T17:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56309
2012-07-05T17:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:22:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56310
2012-07-05T17:22:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56311
2012-07-05T17:22:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56312
2012-07-05T17:22:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56313
2012-07-05T17:22:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56314
2012-07-05T17:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56315
2012-07-05T17:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56316
2012-07-05T17:22:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56317
2012-07-05T17:22:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56318
2012-07-05T17:22:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56319
2012-07-05T17:22:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56320
2012-07-05T17:22:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,3404
2012-07-05T17:23:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:23:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.205,3489
2012-07-05T17:25:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.45,53488
2012-07-05T17:25:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.102,1978
2012-07-05T17:26:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.204,64947
2012-07-05T17:26:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:26:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56321
2012-07-05T17:26:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:26:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56322
2012-07-05T17:26:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56323
2012-07-05T17:26:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56324
2012-07-05T17:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56325
2012-07-05T17:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56326
2012-07-05T17:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56327
2012-07-05T17:26:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56328
2012-07-05T17:26:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56329
2012-07-05T17:26:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56330
2012-07-05T17:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56331
2012-07-05T17:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56332
2012-07-05T17:27:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.19,2101
2012-07-05T17:27:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T17:27:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56333
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56334
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54749
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54750
2012-07-05T17:28:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61643
2012-07-05T17:28:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61644
2012-07-05T17:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61645
2012-07-05T17:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61646
2012-07-05T17:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61647
2012-07-05T17:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61648
2012-07-05T17:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61649
2012-07-05T17:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61650
2012-07-05T17:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61651
2012-07-05T17:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61652
2012-07-05T17:28:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.216,2464
2012-07-05T17:29:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.94,51100
2012-07-05T17:29:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:29:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:30:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:30:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:31:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.22,3321
2012-07-05T17:31:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.97,62416
2012-07-05T17:32:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.166,54958
2012-07-05T17:33:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T17:33:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T17:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61653
2012-07-05T17:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61654
2012-07-05T17:33:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61655
2012-07-05T17:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61656
2012-07-05T17:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61657
2012-07-05T17:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61658
2012-07-05T17:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61659
2012-07-05T17:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61660
2012-07-05T17:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61661
2012-07-05T17:33:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61662
2012-07-05T17:33:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61663
2012-07-05T17:33:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61664
2012-07-05T17:33:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.229,2065
2012-07-05T17:34:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.3,1555
2012-07-05T17:34:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:34:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:34:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.152,2356
2012-07-05T17:35:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.101,2006
2012-07-05T17:35:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.10,59163
2012-07-05T17:36:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.128,4463
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55137
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55138
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55139
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63975
2012-07-05T17:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63976
2012-07-05T17:36:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56547
2012-07-05T17:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56548
2012-07-05T17:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56549
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57382
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57383
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64434
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64435
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52552
2012-07-05T17:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52553
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62873
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62874
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62875
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57046
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57047
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58024
2012-07-05T17:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58025
2012-07-05T17:37:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:37:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:37:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,2181
2012-07-05T17:37:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:37:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.33,4555
2012-07-05T17:38:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T17:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T17:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58026
2012-07-05T17:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58027
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63283
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63284
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58955
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58956
2012-07-05T17:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58957
2012-07-05T17:38:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58958
2012-07-05T17:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58959
2012-07-05T17:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58960
2012-07-05T17:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58961
2012-07-05T17:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58962
2012-07-05T17:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58963
2012-07-05T17:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58964
2012-07-05T17:38:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.44,55838
2012-07-05T17:38:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.163,57281
2012-07-05T17:39:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.98,3104
2012-07-05T17:39:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.87,49751
2012-07-05T17:40:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.147,63658
2012-07-05T17:41:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.7,4537
2012-07-05T17:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58965
2012-07-05T17:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58966
2012-07-05T17:41:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58967
2012-07-05T17:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58968
2012-07-05T17:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58969
2012-07-05T17:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58970
2012-07-05T17:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58971
2012-07-05T17:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58972
2012-07-05T17:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58973
2012-07-05T17:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58974
2012-07-05T17:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58975
2012-07-05T17:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58976
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58827
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58828
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58829
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58830
2012-07-05T17:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58831
2012-07-05T17:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58832
2012-07-05T17:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58833
2012-07-05T17:41:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58834
2012-07-05T17:41:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58835
2012-07-05T17:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58836
2012-07-05T17:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58837
2012-07-05T17:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58838
2012-07-05T17:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58839
2012-07-05T17:41:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58840
2012-07-05T17:42:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.105,4021
2012-07-05T17:43:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:43:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58841
2012-07-05T17:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58842
2012-07-05T17:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58843
2012-07-05T17:43:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58844
2012-07-05T17:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58845
2012-07-05T17:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58846
2012-07-05T17:43:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58847
2012-07-05T17:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58848
2012-07-05T17:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58849
2012-07-05T17:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58850
2012-07-05T17:43:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58851
2012-07-05T17:43:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58852
2012-07-05T17:43:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.86,3370
2012-07-05T17:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,1789
2012-07-05T17:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:44:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T17:44:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:45:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.36,60893
2012-07-05T17:45:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:45:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,4509
2012-07-05T17:46:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,55209
2012-07-05T17:46:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.129,2578
2012-07-05T17:47:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.113,58649
2012-07-05T17:48:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:48:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58853
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58854
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58855
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64836
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:48:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64837
2012-07-05T17:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52375
2012-07-05T17:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52376
2012-07-05T17:48:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52377
2012-07-05T17:48:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52378
2012-07-05T17:48:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52379
2012-07-05T17:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52380
2012-07-05T17:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52381
2012-07-05T17:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52382
2012-07-05T17:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52383
2012-07-05T17:48:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52384
2012-07-05T17:48:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,3653
2012-07-05T17:48:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.72,4085
2012-07-05T17:49:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.8,64215
2012-07-05T17:49:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,1748
2012-07-05T17:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,58329
2012-07-05T17:50:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.92,1764
2012-07-05T17:51:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.135,4483
2012-07-05T17:51:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:51:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:51:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,3406
2012-07-05T17:51:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T17:51:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:51:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52385
2012-07-05T17:51:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52386
2012-07-05T17:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52387
2012-07-05T17:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52388
2012-07-05T17:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52389
2012-07-05T17:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52390
2012-07-05T17:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52391
2012-07-05T17:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52392
2012-07-05T17:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52393
2012-07-05T17:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52394
2012-07-05T17:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52395
2012-07-05T17:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52396
2012-07-05T17:51:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:51:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.223,3679
2012-07-05T17:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T17:52:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:52:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,53372
2012-07-05T17:53:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:53:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52397
2012-07-05T17:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52398
2012-07-05T17:53:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52399
2012-07-05T17:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52400
2012-07-05T17:53:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52401
2012-07-05T17:53:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52402
2012-07-05T17:53:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52403
2012-07-05T17:53:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52404
2012-07-05T17:53:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52405
2012-07-05T17:53:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52406
2012-07-05T17:53:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52407
2012-07-05T17:53:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52408
2012-07-05T17:53:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,56966
2012-07-05T17:54:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.82,3827
2012-07-05T17:55:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.235,3377
2012-07-05T17:56:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.26,62785
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52409
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T17:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52410
2012-07-05T17:56:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52411
2012-07-05T17:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52412
2012-07-05T17:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52413
2012-07-05T17:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52414
2012-07-05T17:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52415
2012-07-05T17:56:07-03:00,info,appl
listen,17,0.0.0.0,52416
2012-07-05T17:56:07-03:00,info,appl
listen,17,0.0.0.0,52417
2012-07-05T17:56:08-03:00,info,appl
listen,17,0.0.0.0,52418
2012-07-05T17:56:08-03:00,info,appl
listen,17,0.0.0.0,52419
2012-07-05T17:56:08-03:00,info,appl
listen,17,0.0.0.0,52420
2012-07-05T17:56:08-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:08-03:00,info,appl
listen,17,0.0.0.0,52421
2012-07-05T17:56:08-03:00,info,appl
listen,17,0.0.0.0,52422
2012-07-05T17:56:09-03:00,info,appl
listen,17,0.0.0.0,52423
2012-07-05T17:56:09-03:00,info,appl
listen,17,0.0.0.0,52424
2012-07-05T17:56:10-03:00,info,appl
listen,17,0.0.0.0,52425
2012-07-05T17:56:10-03:00,info,appl
listen,17,0.0.0.0,52426
2012-07-05T17:56:10-03:00,info,appl
listen,17,0.0.0.0,52427
2012-07-05T17:56:11-03:00,info,appl
listen,17,0.0.0.0,52428
2012-07-05T17:56:11-03:00,info,appl
listen,17,0.0.0.0,52429
2012-07-05T17:56:11-03:00,info,appl
listen,17,0.0.0.0,52430
2012-07-05T17:56:11-03:00,info,appl
listen,17,0.0.0.0,52431
2012-07-05T17:56:12-03:00,info,appl
listen,17,0.0.0.0,52432
2012-07-05T17:56:12-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:12-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:12-03:00,info,appl
listen,17,0.0.0.0,52433
2012-07-05T17:56:12-03:00,info,appl
listen,17,0.0.0.0,52434
2012-07-05T17:56:12-03:00,info,appl
listen,17,0.0.0.0,52435
2012-07-05T17:56:13-03:00,info,appl
listen,17,0.0.0.0,52436
2012-07-05T17:56:13-03:00,info,appl
listen,17,0.0.0.0,52437
2012-07-05T17:56:14-03:00,info,appl
listen,17,0.0.0.0,52438
2012-07-05T17:56:14-03:00,info,appl
listen,17,0.0.0.0,52439
2012-07-05T17:56:15-03:00,info,appl
listen,17,0.0.0.0,52440
2012-07-05T17:56:15-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52441
2012-07-05T17:56:15-03:00,info,appl
listen,17,0.0.0.0,52442
2012-07-05T17:56:15-03:00,info,appl
listen,17,0.0.0.0,52443
2012-07-05T17:56:15-03:00,info,appl
listen,17,0.0.0.0,52444
2012-07-05T17:56:16-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:16-03:00,info,appl
listen,17,0.0.0.0,52445
2012-07-05T17:56:16-03:00,info,appl
listen,17,0.0.0.0,52446
2012-07-05T17:56:16-03:00,info,appl
listen,17,0.0.0.0,52447
2012-07-05T17:56:17-03:00,info,appl
listen,17,0.0.0.0,52448
2012-07-05T17:56:17-03:00,info,appl
listen,17,0.0.0.0,52449
2012-07-05T17:56:18-03:00,info,appl
listen,17,0.0.0.0,52450
2012-07-05T17:56:18-03:00,info,appl
listen,17,0.0.0.0,52451
2012-07-05T17:56:18-03:00,info,appl
listen,17,0.0.0.0,52452
2012-07-05T17:56:19-03:00,info,appl
listen,17,0.0.0.0,52453
2012-07-05T17:56:19-03:00,info,appl
listen,17,0.0.0.0,52454
2012-07-05T17:56:19-03:00,info,appl
listen,17,0.0.0.0,52455
2012-07-05T17:56:19-03:00,info,appl
listen,17,0.0.0.0,52456
2012-07-05T17:56:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:20-03:00,info,appl
listen,17,0.0.0.0,52457
2012-07-05T17:56:20-03:00,info,appl
listen,17,0.0.0.0,52458
2012-07-05T17:56:20-03:00,info,appl
listen,17,0.0.0.0,52459
2012-07-05T17:56:21-03:00,info,appl
listen,17,0.0.0.0,52460
2012-07-05T17:56:21-03:00,info,appl
listen,17,0.0.0.0,52461
2012-07-05T17:56:22-03:00,info,appl
listen,17,0.0.0.0,52462
2012-07-05T17:56:22-03:00,info,appl
listen,17,0.0.0.0,52463
2012-07-05T17:56:23-03:00,info,appl
listen,17,0.0.0.0,52464
2012-07-05T17:56:23-03:00,info,appl
listen,17,0.0.0.0,52465
2012-07-05T17:56:23-03:00,info,appl
listen,17,0.0.0.0,52466
2012-07-05T17:56:23-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52467
2012-07-05T17:56:23-03:00,info,appl
listen,17,0.0.0.0,52468
2012-07-05T17:56:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:24-03:00,info,appl
listen,17,0.0.0.0,52469
2012-07-05T17:56:24-03:00,info,appl
listen,17,0.0.0.0,52470
2012-07-05T17:56:24-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T17:56:24-03:00,info,appl
listen,17,0.0.0.0,52471
2012-07-05T17:56:25-03:00,info,appl
listen,17,0.0.0.0,52472
2012-07-05T17:56:25-03:00,info,appl
listen,17,0.0.0.0,52473
2012-07-05T17:56:26-03:00,info,appl
listen,17,0.0.0.0,52474
2012-07-05T17:56:26-03:00,info,appl
listen,17,0.0.0.0,52475
2012-07-05T17:56:26-03:00,info,appl
listen,17,0.0.0.0,52476
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52477
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52478
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52479
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52480
2012-07-05T17:56:27-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52481
2012-07-05T17:56:27-03:00,info,appl
listen,17,0.0.0.0,52482
2012-07-05T17:56:28-03:00,info,appl
listen,17,0.0.0.0,52483
2012-07-05T17:56:29-03:00,info,appl
listen,17,0.0.0.0,52484
2012-07-05T17:56:29-03:00,info,appl
listen,17,0.0.0.0,52485
2012-07-05T17:56:29-03:00,info,appl
listen,17,0.0.0.0,52486
2012-07-05T17:56:30-03:00,info,appl
listen,17,0.0.0.0,52487
2012-07-05T17:56:30-03:00,info,appl
listen,17,0.0.0.0,52488
2012-07-05T17:56:30-03:00,info,appl
listen,17,0.0.0.0,52489
2012-07-05T17:56:31-03:00,info,appl
listen,17,0.0.0.0,52490
2012-07-05T17:56:31-03:00,info,appl
listen,17,0.0.0.0,52491
2012-07-05T17:56:31-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52492
2012-07-05T17:56:31-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:31-03:00,info,appl
listen,17,0.0.0.0,52493
2012-07-05T17:56:31-03:00,info,appl
listen,17,0.0.0.0,52494
2012-07-05T17:56:32-03:00,info,appl
listen,17,0.0.0.0,52495
2012-07-05T17:56:32-03:00,info,appl
listen,17,0.0.0.0,52496
2012-07-05T17:56:33-03:00,info,appl
listen,17,0.0.0.0,52497
2012-07-05T17:56:33-03:00,info,appl
listen,17,0.0.0.0,52498
2012-07-05T17:56:33-03:00,info,appl
listen,17,0.0.0.0,52499
2012-07-05T17:56:34-03:00,info,appl
listen,17,0.0.0.0,52500
2012-07-05T17:56:34-03:00,info,appl
listen,17,0.0.0.0,52501
2012-07-05T17:56:34-03:00,info,appl
listen,17,0.0.0.0,52502
2012-07-05T17:56:34-03:00,info,appl
listen,17,0.0.0.0,52503
2012-07-05T17:56:35-03:00,info,appl
listen,17,0.0.0.0,52504
2012-07-05T17:56:35-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:35-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:35-03:00,info,appl
listen,17,0.0.0.0,52505
2012-07-05T17:56:35-03:00,info,appl
listen,17,0.0.0.0,52506
2012-07-05T17:56:36-03:00,info,appl
listen,17,0.0.0.0,52507
2012-07-05T17:56:37-03:00,info,appl
listen,17,0.0.0.0,52508
2012-07-05T17:56:37-03:00,info,appl
listen,17,0.0.0.0,52509
2012-07-05T17:56:37-03:00,info,appl
listen,17,0.0.0.0,52510
2012-07-05T17:56:38-03:00,info,appl
listen,17,0.0.0.0,52511
2012-07-05T17:56:38-03:00,info,appl
listen,17,0.0.0.0,52512
2012-07-05T17:56:38-03:00,info,appl
listen,17,0.0.0.0,52513
2012-07-05T17:56:39-03:00,info,appl
listen,17,0.0.0.0,52514
2012-07-05T17:56:39-03:00,info,appl
listen,17,0.0.0.0,52515
2012-07-05T17:56:39-03:00,info,appl
listen,17,0.0.0.0,52516
2012-07-05T17:56:39-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:39-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T17:56:39-03:00,info,appl
listen,17,0.0.0.0,52517
2012-07-05T17:56:39-03:00,info,appl
listen,17,0.0.0.0,52518
2012-07-05T17:56:40-03:00,info,appl
listen,17,0.0.0.0,52519
2012-07-05T17:56:40-03:00,info,appl
listen,17,0.0.0.0,52520
2012-07-05T17:56:41-03:00,info,appl
listen,17,0.0.0.0,52521
2012-07-05T17:56:41-03:00,info,appl
listen,17,0.0.0.0,52522
2012-07-05T17:56:41-03:00,info,appl
listen,17,0.0.0.0,52523
2012-07-05T17:56:42-03:00,info,appl
listen,17,0.0.0.0,52524
2012-07-05T17:56:42-03:00,info,appl
listen,17,0.0.0.0,52525
2012-07-05T17:56:42-03:00,info,appl
listen,17,0.0.0.0,52526
2012-07-05T17:56:42-03:00,info,appl
listen,17,0.0.0.0,52527
2012-07-05T17:56:43-03:00,info,appl
listen,17,0.0.0.0,52528
2012-07-05T17:56:43-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:43-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:43-03:00,info,appl
listen,17,0.0.0.0,52529
2012-07-05T17:56:43-03:00,info,appl
listen,17,0.0.0.0,52530
2012-07-05T17:56:43-03:00,info,appl
listen,17,0.0.0.0,52531
2012-07-05T17:56:44-03:00,info,appl
listen,17,0.0.0.0,52532
2012-07-05T17:56:44-03:00,info,appl
send,17,10.88.108.206,389
2012-07-05T17:56:44-03:00,info,appl
listen,17,0.0.0.0,52533
2012-07-05T17:56:45-03:00,info,appl
listen,17,0.0.0.0,52534
2012-07-05T17:56:45-03:00,info,appl
listen,17,0.0.0.0,52535
2012-07-05T17:56:46-03:00,info,appl
listen,17,0.0.0.0,52536
2012-07-05T17:56:46-03:00,info,appl
listen,17,0.0.0.0,52537
2012-07-05T17:56:46-03:00,info,appl
listen,17,0.0.0.0,52538
2012-07-05T17:56:46-03:00,info,appl
listen,17,0.0.0.0,52539
2012-07-05T17:56:46-03:00,info,appl
listen,17,0.0.0.0,52540
2012-07-05T17:56:47-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:47-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52541
2012-07-05T17:56:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52542
2012-07-05T17:56:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52543
2012-07-05T17:56:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52544
2012-07-05T17:56:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52545
2012-07-05T17:56:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52546
2012-07-05T17:56:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52547
2012-07-05T17:56:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52548
2012-07-05T17:56:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52549
2012-07-05T17:56:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52550
2012-07-05T17:56:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52551
2012-07-05T17:56:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52552
2012-07-05T17:56:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,52454
2012-07-05T17:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T17:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52553
2012-07-05T17:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52554
2012-07-05T17:56:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52555
2012-07-05T17:56:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52556
2012-07-05T17:56:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52557
2012-07-05T17:56:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52558
2012-07-05T17:56:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52559
2012-07-05T17:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52560
2012-07-05T17:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52561
2012-07-05T17:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52562
2012-07-05T17:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52563
2012-07-05T17:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52564
2012-07-05T17:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T17:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52565
2012-07-05T17:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52566
2012-07-05T17:56:55-03:00,info,appl
listen,17,0.0.0.0,52567
2012-07-05T17:56:56-03:00,info,appl
listen,17,0.0.0.0,52568
2012-07-05T17:56:56-03:00,info,appl
listen,17,0.0.0.0,52569
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52570
2012-07-05T17:56:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52571
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52572
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52573
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52574
2012-07-05T17:56:57-03:00,info,appl
listen,17,0.0.0.0,52575
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52576
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52577
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52578
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52579
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52580
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52581
2012-07-05T17:56:58-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-05T17:56:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52582
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52583
2012-07-05T17:56:58-03:00,info,appl
listen,17,0.0.0.0,52584
2012-07-05T17:56:59-03:00,info,appl
listen,17,0.0.0.0,52585
2012-07-05T17:56:59-03:00,info,appl
listen,17,0.0.0.0,52586
2012-07-05T17:56:59-03:00,info,appl
listen,17,0.0.0.0,52587
2012-07-05T17:57:00-03:00,info,appl
listen,17,0.0.0.0,52588
2012-07-05T17:57:00-03:00,info,appl
listen,17,0.0.0.0,52589
2012-07-05T17:57:00-03:00,info,appl
listen,17,0.0.0.0,52590
2012-07-05T17:57:00-03:00,info,appl
listen,17,0.0.0.0,52591
2012-07-05T17:57:00-03:00,info,appl
listen,17,0.0.0.0,52592
2012-07-05T17:57:00-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52593
2012-07-05T17:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52594
2012-07-05T17:57:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52595
2012-07-05T17:57:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52596
2012-07-05T17:57:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52597
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52598
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52599
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52600
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52601
2012-07-05T17:57:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52602
2012-07-05T17:57:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52603
2012-07-05T17:57:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52604
2012-07-05T17:57:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52605
2012-07-05T17:57:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52606
2012-07-05T17:57:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.203.0.11,389
2012-07-05T17:57:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52607
2012-07-05T17:57:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52608
2012-07-05T17:57:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52609
2012-07-05T17:57:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52610
2012-07-05T17:57:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52611
2012-07-05T17:57:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52612
2012-07-05T17:57:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.61,4732
2012-07-05T17:58:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T17:58:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:58:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T17:58:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T17:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T17:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52613
2012-07-05T17:58:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T17:58:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52614
2012-07-05T17:58:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56643
2012-07-05T17:58:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T17:58:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56644
2012-07-05T17:58:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58850
2012-07-05T17:58:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T17:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58851
2012-07-05T17:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58852
2012-07-05T17:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58853
2012-07-05T17:58:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58854
2012-07-05T17:58:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58855
2012-07-05T17:58:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58856
2012-07-05T17:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58857
2012-07-05T17:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58858
2012-07-05T17:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58859
2012-07-05T17:58:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.102,4811
2012-07-05T17:58:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T17:59:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:00:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.41,3410
2012-07-05T18:01:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.155,57964
2012-07-05T18:02:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.62,55109
2012-07-05T18:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61887
2012-07-05T18:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:03:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54637
2012-07-05T18:03:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.23,1937
2012-07-05T18:03:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:03:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54638
2012-07-05T18:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T18:03:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54639
2012-07-05T18:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54640
2012-07-05T18:03:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54641
2012-07-05T18:03:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54642
2012-07-05T18:03:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54643
2012-07-05T18:03:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54644
2012-07-05T18:03:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54645
2012-07-05T18:03:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54646
2012-07-05T18:03:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54647
2012-07-05T18:03:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54648
2012-07-05T18:03:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54649
2012-07-05T18:03:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,51921
2012-07-05T18:04:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,62847
2012-07-05T18:05:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:05:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:05:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.0,3494
2012-07-05T18:05:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:06:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T18:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54650
2012-07-05T18:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54651
2012-07-05T18:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54652
2012-07-05T18:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54653
2012-07-05T18:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54654
2012-07-05T18:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53254
2012-07-05T18:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53255
2012-07-05T18:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53256
2012-07-05T18:06:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49366
2012-07-05T18:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49367
2012-07-05T18:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49368
2012-07-05T18:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49369
2012-07-05T18:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49370
2012-07-05T18:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49371
2012-07-05T18:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:07:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,59075
2012-07-05T18:08:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.82,64926
2012-07-05T18:08:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:08:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49372
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49373
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55860
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:08:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55861
2012-07-05T18:08:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63002
2012-07-05T18:08:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:08:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63003
2012-07-05T18:08:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63004
2012-07-05T18:08:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63005
2012-07-05T18:08:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63006
2012-07-05T18:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63007
2012-07-05T18:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63008
2012-07-05T18:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63009
2012-07-05T18:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63010
2012-07-05T18:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63011
2012-07-05T18:10:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.225,58195
2012-07-05T18:11:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.243,57986
2012-07-05T18:11:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.159,54721
2012-07-05T18:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63012
2012-07-05T18:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63013
2012-07-05T18:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63014
2012-07-05T18:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63015
2012-07-05T18:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63016
2012-07-05T18:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63017
2012-07-05T18:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63018
2012-07-05T18:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63019
2012-07-05T18:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63020
2012-07-05T18:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63021
2012-07-05T18:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63022
2012-07-05T18:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63023
2012-07-05T18:12:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:12:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,59609
2012-07-05T18:13:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63024
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T18:13:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:13:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63025
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63026
2012-07-05T18:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63027
2012-07-05T18:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63028
2012-07-05T18:13:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63029
2012-07-05T18:13:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63030
2012-07-05T18:13:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63031
2012-07-05T18:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63032
2012-07-05T18:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63033
2012-07-05T18:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63034
2012-07-05T18:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63035
2012-07-05T18:13:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63036
2012-07-05T18:13:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:14:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.73,61569
2012-07-05T18:15:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,57036
2012-07-05T18:15:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.237,64527
2012-07-05T18:16:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,60732
2012-07-05T18:18:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.242,57007
2012-07-05T18:18:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:18:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63037
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63038
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63039
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59530
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:18:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59531
2012-07-05T18:18:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50407
2012-07-05T18:18:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:18:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50408
2012-07-05T18:18:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50409
2012-07-05T18:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50410
2012-07-05T18:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50411
2012-07-05T18:18:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50412
2012-07-05T18:18:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50413
2012-07-05T18:18:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50414
2012-07-05T18:18:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50415
2012-07-05T18:18:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50416
2012-07-05T18:19:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:19:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:20:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50417
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50418
2012-07-05T18:21:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50419
2012-07-05T18:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50420
2012-07-05T18:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50421
2012-07-05T18:21:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50422
2012-07-05T18:21:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50423
2012-07-05T18:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50424
2012-07-05T18:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50425
2012-07-05T18:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50426
2012-07-05T18:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50427
2012-07-05T18:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50428
2012-07-05T18:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:23:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:23:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50429
2012-07-05T18:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50430
2012-07-05T18:23:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50431
2012-07-05T18:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50432
2012-07-05T18:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50433
2012-07-05T18:23:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50434
2012-07-05T18:23:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50435
2012-07-05T18:23:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50436
2012-07-05T18:23:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50437
2012-07-05T18:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50438
2012-07-05T18:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50439
2012-07-05T18:23:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50440
2012-07-05T18:24:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,60921
2012-07-05T18:25:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.171,1313
2012-07-05T18:26:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.141,51026
2012-07-05T18:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:27:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:27:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50441
2012-07-05T18:27:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:27:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50442
2012-07-05T18:27:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50443
2012-07-05T18:27:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50444
2012-07-05T18:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50445
2012-07-05T18:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50446
2012-07-05T18:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50447
2012-07-05T18:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50448
2012-07-05T18:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50449
2012-07-05T18:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50450
2012-07-05T18:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50451
2012-07-05T18:27:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50452
2012-07-05T18:27:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:27:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.144,50181
2012-07-05T18:27:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:28:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:28:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50453
2012-07-05T18:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:28:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50454
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54282
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54283
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62002
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:28:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62003
2012-07-05T18:28:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62004
2012-07-05T18:28:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62005
2012-07-05T18:28:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62006
2012-07-05T18:28:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62007
2012-07-05T18:28:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62008
2012-07-05T18:28:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62009
2012-07-05T18:28:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62010
2012-07-05T18:28:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62011
2012-07-05T18:31:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.195,55201
2012-07-05T18:33:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:33:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62012
2012-07-05T18:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T18:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62013
2012-07-05T18:33:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62014
2012-07-05T18:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62015
2012-07-05T18:33:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62016
2012-07-05T18:33:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62017
2012-07-05T18:33:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62018
2012-07-05T18:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62019
2012-07-05T18:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62020
2012-07-05T18:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62021
2012-07-05T18:33:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62022
2012-07-05T18:33:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62023
2012-07-05T18:33:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:33:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:34:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:34:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:36:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,4090
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52134
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52135
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52136
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59322
2012-07-05T18:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59323
2012-07-05T18:36:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65053
2012-07-05T18:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65054
2012-07-05T18:36:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,58749
2012-07-05T18:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58750
2012-07-05T18:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58751
2012-07-05T18:36:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63828
2012-07-05T18:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63829
2012-07-05T18:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63830
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62314
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62315
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60214
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60215
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49854
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49855
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62917
2012-07-05T18:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62918
2012-07-05T18:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,1381
2012-07-05T18:38:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,3304
2012-07-05T18:38:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:38:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62919
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62920
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52067
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:38:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52068
2012-07-05T18:38:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50299
2012-07-05T18:38:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50300
2012-07-05T18:38:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50301
2012-07-05T18:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50302
2012-07-05T18:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50303
2012-07-05T18:38:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50304
2012-07-05T18:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50305
2012-07-05T18:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50306
2012-07-05T18:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50307
2012-07-05T18:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50308
2012-07-05T18:40:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,55399
2012-07-05T18:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:41:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:41:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:41:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,1715
2012-07-05T18:42:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50309
2012-07-05T18:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50310
2012-07-05T18:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50311
2012-07-05T18:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50312
2012-07-05T18:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50313
2012-07-05T18:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50314
2012-07-05T18:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50315
2012-07-05T18:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50316
2012-07-05T18:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50317
2012-07-05T18:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50318
2012-07-05T18:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50319
2012-07-05T18:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50320
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51573
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51574
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51575
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51576
2012-07-05T18:42:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51577
2012-07-05T18:42:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51578
2012-07-05T18:42:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51579
2012-07-05T18:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51580
2012-07-05T18:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51581
2012-07-05T18:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51582
2012-07-05T18:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51583
2012-07-05T18:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51584
2012-07-05T18:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51585
2012-07-05T18:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51586
2012-07-05T18:42:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,54749
2012-07-05T18:43:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:43:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:43:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:43:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51587
2012-07-05T18:43:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:43:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51588
2012-07-05T18:43:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51589
2012-07-05T18:43:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51590
2012-07-05T18:43:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51591
2012-07-05T18:43:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51592
2012-07-05T18:43:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51593
2012-07-05T18:43:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51594
2012-07-05T18:43:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51595
2012-07-05T18:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51596
2012-07-05T18:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51597
2012-07-05T18:43:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51598
2012-07-05T18:48:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:48:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:48:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:48:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:48:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51599
2012-07-05T18:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51600
2012-07-05T18:48:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51601
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52132
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52133
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57183
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:49:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57184
2012-07-05T18:49:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57185
2012-07-05T18:49:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57186
2012-07-05T18:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57187
2012-07-05T18:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57188
2012-07-05T18:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57189
2012-07-05T18:49:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57190
2012-07-05T18:49:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57191
2012-07-05T18:49:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57192
2012-07-05T18:49:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:50:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.93,61556
2012-07-05T18:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,1618
2012-07-05T18:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T18:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57193
2012-07-05T18:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57194
2012-07-05T18:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57195
2012-07-05T18:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57196
2012-07-05T18:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57197
2012-07-05T18:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57198
2012-07-05T18:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57199
2012-07-05T18:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57200
2012-07-05T18:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57201
2012-07-05T18:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57202
2012-07-05T18:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57203
2012-07-05T18:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57204
2012-07-05T18:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T18:52:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,65155
2012-07-05T18:54:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:54:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57205
2012-07-05T18:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:54:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57206
2012-07-05T18:54:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57207
2012-07-05T18:54:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57208
2012-07-05T18:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57209
2012-07-05T18:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57210
2012-07-05T18:54:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57211
2012-07-05T18:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57212
2012-07-05T18:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57213
2012-07-05T18:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57214
2012-07-05T18:54:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57215
2012-07-05T18:54:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57216
2012-07-05T18:55:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,63983
2012-07-05T18:55:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T18:55:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:55:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,4835
2012-07-05T18:55:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:56:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,1773
2012-07-05T18:56:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T18:56:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.5,63815
2012-07-05T18:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57217
2012-07-05T18:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57218
2012-07-05T18:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57219
2012-07-05T18:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57220
2012-07-05T18:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57221
2012-07-05T18:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57222
2012-07-05T18:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57223
2012-07-05T18:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57224
2012-07-05T18:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57225
2012-07-05T18:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57226
2012-07-05T18:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57227
2012-07-05T18:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57228
2012-07-05T18:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,4109
2012-07-05T18:59:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T18:59:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57229
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57230
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55307
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T18:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55308
2012-07-05T18:59:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53134
2012-07-05T18:59:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T18:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53135
2012-07-05T18:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53136
2012-07-05T18:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53137
2012-07-05T18:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53138
2012-07-05T18:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53139
2012-07-05T18:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53140
2012-07-05T18:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53141
2012-07-05T18:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53142
2012-07-05T18:59:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53143
2012-07-05T18:59:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,1550
2012-07-05T19:00:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.40,63182
2012-07-05T19:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,51438
2012-07-05T19:01:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,59597
2012-07-05T19:02:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:02:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:02:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:03:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.117,51917
2012-07-05T19:03:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:04:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:04:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:04:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:04:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53144
2012-07-05T19:04:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:04:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53145
2012-07-05T19:04:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53146
2012-07-05T19:04:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53147
2012-07-05T19:04:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53148
2012-07-05T19:04:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53149
2012-07-05T19:04:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53150
2012-07-05T19:04:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53151
2012-07-05T19:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53152
2012-07-05T19:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53153
2012-07-05T19:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53154
2012-07-05T19:04:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53155
2012-07-05T19:04:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4155
2012-07-05T19:05:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4314
2012-07-05T19:05:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53875
2012-07-05T19:05:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:05:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64967
2012-07-05T19:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T19:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64968
2012-07-05T19:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:06:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64969
2012-07-05T19:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64970
2012-07-05T19:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64971
2012-07-05T19:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64972
2012-07-05T19:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64973
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64974
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63751
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63752
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63753
2012-07-05T19:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63754
2012-07-05T19:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,60655
2012-07-05T19:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60656
2012-07-05T19:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60657
2012-07-05T19:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:08:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.197,53128
2012-07-05T19:09:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:09:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:09:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:09:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60658
2012-07-05T19:09:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:09:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60659
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56405
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56406
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62275
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:09:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62276
2012-07-05T19:09:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62277
2012-07-05T19:09:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62278
2012-07-05T19:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62279
2012-07-05T19:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62280
2012-07-05T19:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62281
2012-07-05T19:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62282
2012-07-05T19:09:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62283
2012-07-05T19:09:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62284
2012-07-05T19:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:09:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,3330
2012-07-05T19:10:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:10:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T19:10:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,54813
2012-07-05T19:12:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:12:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62285
2012-07-05T19:12:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:12:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62286
2012-07-05T19:12:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62287
2012-07-05T19:12:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62288
2012-07-05T19:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62289
2012-07-05T19:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62290
2012-07-05T19:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62291
2012-07-05T19:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62292
2012-07-05T19:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62293
2012-07-05T19:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62294
2012-07-05T19:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62295
2012-07-05T19:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62296
2012-07-05T19:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,62030
2012-07-05T19:14:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62297
2012-07-05T19:14:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T19:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:14:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:14:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62298
2012-07-05T19:14:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62299
2012-07-05T19:14:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62300
2012-07-05T19:14:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62301
2012-07-05T19:14:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62302
2012-07-05T19:14:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62303
2012-07-05T19:14:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62304
2012-07-05T19:14:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62305
2012-07-05T19:14:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62306
2012-07-05T19:14:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62307
2012-07-05T19:14:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62308
2012-07-05T19:14:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62309
2012-07-05T19:14:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,3026
2012-07-05T19:15:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,50689
2012-07-05T19:16:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,61388
2012-07-05T19:16:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:16:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52009
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52010
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64868
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64869
2012-07-05T19:16:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64870
2012-07-05T19:16:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58210
2012-07-05T19:16:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58211
2012-07-05T19:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58212
2012-07-05T19:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58213
2012-07-05T19:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58214
2012-07-05T19:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58215
2012-07-05T19:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58216
2012-07-05T19:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58217
2012-07-05T19:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58218
2012-07-05T19:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58219
2012-07-05T19:16:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63682
2012-07-05T19:16:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.11,53
2012-07-05T19:17:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:17:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:18:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.46,62730
2012-07-05T19:19:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T19:19:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63683
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63684
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63685
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57017
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:19:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57018
2012-07-05T19:19:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54002
2012-07-05T19:19:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:19:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54003
2012-07-05T19:19:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54004
2012-07-05T19:19:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54005
2012-07-05T19:19:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54006
2012-07-05T19:19:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54007
2012-07-05T19:19:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54008
2012-07-05T19:19:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54009
2012-07-05T19:19:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54010
2012-07-05T19:19:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54011
2012-07-05T19:20:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.143,53242
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54012
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54013
2012-07-05T19:21:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54014
2012-07-05T19:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54015
2012-07-05T19:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54016
2012-07-05T19:21:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54017
2012-07-05T19:21:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54018
2012-07-05T19:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54019
2012-07-05T19:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54020
2012-07-05T19:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54021
2012-07-05T19:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54022
2012-07-05T19:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54023
2012-07-05T19:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:22:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,63375
2012-07-05T19:23:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:23:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:23:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,58109
2012-07-05T19:24:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:24:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T19:24:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T19:24:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:24:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54024
2012-07-05T19:24:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:24:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54025
2012-07-05T19:24:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54026
2012-07-05T19:24:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54027
2012-07-05T19:24:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54028
2012-07-05T19:24:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54029
2012-07-05T19:24:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54030
2012-07-05T19:24:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54031
2012-07-05T19:24:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54032
2012-07-05T19:24:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54033
2012-07-05T19:24:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54034
2012-07-05T19:24:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54035
2012-07-05T19:24:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:25:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,1745
2012-07-05T19:27:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:27:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54036
2012-07-05T19:27:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:27:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54037
2012-07-05T19:27:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54038
2012-07-05T19:27:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54039
2012-07-05T19:27:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54040
2012-07-05T19:27:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54041
2012-07-05T19:27:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54042
2012-07-05T19:27:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54043
2012-07-05T19:27:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54044
2012-07-05T19:27:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54045
2012-07-05T19:27:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54046
2012-07-05T19:27:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54047
2012-07-05T19:28:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.68,2637
2012-07-05T19:29:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T19:29:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54048
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54049
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59324
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59325
2012-07-05T19:29:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,53247
2012-07-05T19:29:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53248
2012-07-05T19:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53249
2012-07-05T19:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53250
2012-07-05T19:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53251
2012-07-05T19:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53252
2012-07-05T19:29:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53253
2012-07-05T19:29:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53254
2012-07-05T19:29:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53255
2012-07-05T19:29:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53256
2012-07-05T19:29:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,3286
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.11,389
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53258
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53259
2012-07-05T19:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53260
2012-07-05T19:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53261
2012-07-05T19:30:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,52027
2012-07-05T19:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53262
2012-07-05T19:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53263
2012-07-05T19:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53264
2012-07-05T19:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53265
2012-07-05T19:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53266
2012-07-05T19:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53267
2012-07-05T19:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53268
2012-07-05T19:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53269
2012-07-05T19:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:30:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:31:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T19:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:33:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.20,59616
2012-07-05T19:34:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T19:34:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T19:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53270
2012-07-05T19:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53271
2012-07-05T19:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53272
2012-07-05T19:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53273
2012-07-05T19:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53274
2012-07-05T19:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53275
2012-07-05T19:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53276
2012-07-05T19:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53277
2012-07-05T19:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53278
2012-07-05T19:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53279
2012-07-05T19:34:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53280
2012-07-05T19:34:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53281
2012-07-05T19:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:34:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.14,63639
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53282
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53283
2012-07-05T19:35:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53284
2012-07-05T19:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53285
2012-07-05T19:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53286
2012-07-05T19:35:08-03:00,info,appl
listen,17,0.0.0.0,53287
2012-07-05T19:35:08-03:00,info,appl
listen,17,0.0.0.0,53288
2012-07-05T19:35:09-03:00,info,appl
listen,17,0.0.0.0,53289
2012-07-05T19:35:09-03:00,info,appl
listen,17,0.0.0.0,53290
2012-07-05T19:35:09-03:00,info,appl
listen,17,0.0.0.0,53291
2012-07-05T19:35:09-03:00,info,appl
listen,17,0.0.0.0,53292
2012-07-05T19:35:09-03:00,info,appl
listen,17,0.0.0.0,53293
2012-07-05T19:35:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:10-03:00,info,appl
listen,17,0.0.0.0,53294
2012-07-05T19:35:10-03:00,info,appl
listen,17,0.0.0.0,53295
2012-07-05T19:35:10-03:00,info,appl
listen,17,0.0.0.0,53296
2012-07-05T19:35:11-03:00,info,appl
listen,17,0.0.0.0,53297
2012-07-05T19:35:11-03:00,info,appl
listen,17,0.0.0.0,53298
2012-07-05T19:35:12-03:00,info,appl
listen,17,0.0.0.0,53299
2012-07-05T19:35:12-03:00,info,appl
listen,17,0.0.0.0,53300
2012-07-05T19:35:12-03:00,info,appl
listen,17,0.0.0.0,53301
2012-07-05T19:35:13-03:00,info,appl
listen,17,0.0.0.0,53302
2012-07-05T19:35:13-03:00,info,appl
listen,17,0.0.0.0,53303
2012-07-05T19:35:13-03:00,info,appl
listen,17,0.0.0.0,53304
2012-07-05T19:35:13-03:00,info,appl
listen,17,0.0.0.0,53305
2012-07-05T19:35:13-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:13-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:13-03:00,info,appl
listen,17,0.0.0.0,53306
2012-07-05T19:35:14-03:00,info,appl
listen,17,0.0.0.0,53307
2012-07-05T19:35:14-03:00,info,appl
listen,17,0.0.0.0,53308
2012-07-05T19:35:15-03:00,info,appl
listen,17,0.0.0.0,53309
2012-07-05T19:35:15-03:00,info,appl
listen,17,0.0.0.0,53310
2012-07-05T19:35:15-03:00,info,appl
listen,17,0.0.0.0,53311
2012-07-05T19:35:16-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53312
2012-07-05T19:35:16-03:00,info,appl
listen,17,0.0.0.0,53313
2012-07-05T19:35:16-03:00,info,appl
listen,17,0.0.0.0,53314
2012-07-05T19:35:17-03:00,info,appl
listen,17,0.0.0.0,53315
2012-07-05T19:35:17-03:00,info,appl
listen,17,0.0.0.0,53316
2012-07-05T19:35:17-03:00,info,appl
listen,17,0.0.0.0,53317
2012-07-05T19:35:17-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:17-03:00,info,appl
listen,17,0.0.0.0,53318
2012-07-05T19:35:17-03:00,info,appl
listen,17,0.0.0.0,53319
2012-07-05T19:35:18-03:00,info,appl
listen,17,0.0.0.0,53320
2012-07-05T19:35:18-03:00,info,appl
listen,17,0.0.0.0,53321
2012-07-05T19:35:19-03:00,info,appl
listen,17,0.0.0.0,53322
2012-07-05T19:35:19-03:00,info,appl
listen,17,0.0.0.0,53323
2012-07-05T19:35:20-03:00,info,appl
listen,17,0.0.0.0,53324
2012-07-05T19:35:20-03:00,info,appl
listen,17,0.0.0.0,53325
2012-07-05T19:35:20-03:00,info,appl
listen,17,0.0.0.0,53326
2012-07-05T19:35:20-03:00,info,appl
listen,17,0.0.0.0,53327
2012-07-05T19:35:21-03:00,info,appl
listen,17,0.0.0.0,53328
2012-07-05T19:35:21-03:00,info,appl
listen,17,0.0.0.0,53329
2012-07-05T19:35:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:21-03:00,info,appl
listen,17,0.0.0.0,53330
2012-07-05T19:35:22-03:00,info,appl
listen,17,0.0.0.0,53331
2012-07-05T19:35:22-03:00,info,appl
listen,17,0.0.0.0,53332
2012-07-05T19:35:23-03:00,info,appl
listen,17,0.0.0.0,53333
2012-07-05T19:35:23-03:00,info,appl
listen,17,0.0.0.0,53334
2012-07-05T19:35:23-03:00,info,appl
listen,17,0.0.0.0,53335
2012-07-05T19:35:24-03:00,info,appl
listen,17,0.0.0.0,53336
2012-07-05T19:35:24-03:00,info,appl
listen,17,0.0.0.0,53337
2012-07-05T19:35:24-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53338
2012-07-05T19:35:25-03:00,info,appl
listen,17,0.0.0.0,53339
2012-07-05T19:35:25-03:00,info,appl
listen,17,0.0.0.0,53340
2012-07-05T19:35:25-03:00,info,appl
listen,17,0.0.0.0,53341
2012-07-05T19:35:25-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:25-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:25-03:00,info,appl
listen,17,0.0.0.0,53342
2012-07-05T19:35:25-03:00,info,appl
listen,17,0.0.0.0,53343
2012-07-05T19:35:26-03:00,info,appl
listen,17,0.0.0.0,53344
2012-07-05T19:35:26-03:00,info,appl
listen,17,0.0.0.0,53345
2012-07-05T19:35:26-03:00,info,appl
send,17,10.102.0.20,389
2012-07-05T19:35:27-03:00,info,appl
listen,17,0.0.0.0,53346
2012-07-05T19:35:27-03:00,info,appl
listen,17,0.0.0.0,53347
2012-07-05T19:35:27-03:00,info,appl
listen,17,0.0.0.0,53348
2012-07-05T19:35:28-03:00,info,appl
listen,17,0.0.0.0,53349
2012-07-05T19:35:28-03:00,info,appl
listen,17,0.0.0.0,53350
2012-07-05T19:35:28-03:00,info,appl
listen,17,0.0.0.0,53351
2012-07-05T19:35:28-03:00,info,appl
listen,17,0.0.0.0,53352
2012-07-05T19:35:29-03:00,info,appl
listen,17,0.0.0.0,53353
2012-07-05T19:35:29-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:29-03:00,info,appl
listen,17,0.0.0.0,53354
2012-07-05T19:35:29-03:00,info,appl
listen,17,0.0.0.0,53355
2012-07-05T19:35:29-03:00,info,appl
listen,17,0.0.0.0,53356
2012-07-05T19:35:30-03:00,info,appl
listen,17,0.0.0.0,53357
2012-07-05T19:35:30-03:00,info,appl
listen,17,0.0.0.0,53358
2012-07-05T19:35:31-03:00,info,appl
listen,17,0.0.0.0,53359
2012-07-05T19:35:31-03:00,info,appl
listen,17,0.0.0.0,53360
2012-07-05T19:35:32-03:00,info,appl
listen,17,0.0.0.0,53361
2012-07-05T19:35:32-03:00,info,appl
listen,17,0.0.0.0,53362
2012-07-05T19:35:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53363
2012-07-05T19:35:32-03:00,info,appl
listen,17,0.0.0.0,53364
2012-07-05T19:35:32-03:00,info,appl
listen,17,0.0.0.0,53365
2012-07-05T19:35:33-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:33-03:00,info,appl
listen,17,0.0.0.0,53366
2012-07-05T19:35:33-03:00,info,appl
listen,17,0.0.0.0,53367
2012-07-05T19:35:33-03:00,info,appl
listen,17,0.0.0.0,53368
2012-07-05T19:35:34-03:00,info,appl
listen,17,0.0.0.0,53369
2012-07-05T19:35:34-03:00,info,appl
listen,17,0.0.0.0,53370
2012-07-05T19:35:35-03:00,info,appl
listen,17,0.0.0.0,53371
2012-07-05T19:35:35-03:00,info,appl
listen,17,0.0.0.0,53372
2012-07-05T19:35:35-03:00,info,appl
listen,17,0.0.0.0,53373
2012-07-05T19:35:36-03:00,info,appl
listen,17,0.0.0.0,53374
2012-07-05T19:35:36-03:00,info,appl
listen,17,0.0.0.0,53375
2012-07-05T19:35:36-03:00,info,appl
listen,17,0.0.0.0,53376
2012-07-05T19:35:36-03:00,info,appl
listen,17,0.0.0.0,53377
2012-07-05T19:35:37-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:37-03:00,info,appl
listen,17,0.0.0.0,53378
2012-07-05T19:35:37-03:00,info,appl
listen,17,0.0.0.0,53379
2012-07-05T19:35:37-03:00,info,appl
listen,17,0.0.0.0,53380
2012-07-05T19:35:38-03:00,info,appl
listen,17,0.0.0.0,53381
2012-07-05T19:35:38-03:00,info,appl
listen,17,0.0.0.0,53382
2012-07-05T19:35:39-03:00,info,appl
listen,17,0.0.0.0,53383
2012-07-05T19:35:39-03:00,info,appl
listen,17,0.0.0.0,53384
2012-07-05T19:35:40-03:00,info,appl
listen,17,0.0.0.0,53385
2012-07-05T19:35:40-03:00,info,appl
listen,17,0.0.0.0,53386
2012-07-05T19:35:40-03:00,info,appl
listen,17,0.0.0.0,53387
2012-07-05T19:35:40-03:00,info,appl
listen,17,0.0.0.0,53388
2012-07-05T19:35:40-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53389
2012-07-05T19:35:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:41-03:00,info,appl
listen,17,0.0.0.0,53390
2012-07-05T19:35:41-03:00,info,appl
listen,17,0.0.0.0,53391
2012-07-05T19:35:41-03:00,info,appl
listen,17,0.0.0.0,53392
2012-07-05T19:35:42-03:00,info,appl
listen,17,0.0.0.0,53393
2012-07-05T19:35:42-03:00,info,appl
listen,17,0.0.0.0,53394
2012-07-05T19:35:43-03:00,info,appl
listen,17,0.0.0.0,53395
2012-07-05T19:35:43-03:00,info,appl
listen,17,0.0.0.0,53396
2012-07-05T19:35:43-03:00,info,appl
listen,17,0.0.0.0,53397
2012-07-05T19:35:44-03:00,info,appl
listen,17,0.0.0.0,53398
2012-07-05T19:35:44-03:00,info,appl
listen,17,0.0.0.0,53399
2012-07-05T19:35:44-03:00,info,appl
listen,17,0.0.0.0,53400
2012-07-05T19:35:44-03:00,info,appl
listen,17,0.0.0.0,53401
2012-07-05T19:35:44-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:44-03:00,info,appl
listen,17,0.0.0.0,53402
2012-07-05T19:35:45-03:00,info,appl
listen,17,0.0.0.0,53403
2012-07-05T19:35:45-03:00,info,appl
listen,17,0.0.0.0,53404
2012-07-05T19:35:46-03:00,info,appl
listen,17,0.0.0.0,53405
2012-07-05T19:35:46-03:00,info,appl
listen,17,0.0.0.0,53406
2012-07-05T19:35:46-03:00,info,appl
send,17,10.101.0.11,389
2012-07-05T19:35:46-03:00,info,appl
listen,17,0.0.0.0,53407
2012-07-05T19:35:47-03:00,info,appl
listen,17,0.0.0.0,53408
2012-07-05T19:35:47-03:00,info,appl
listen,17,0.0.0.0,53409
2012-07-05T19:35:47-03:00,info,appl
listen,17,0.0.0.0,53410
2012-07-05T19:35:48-03:00,info,appl
listen,17,0.0.0.0,53411
2012-07-05T19:35:48-03:00,info,appl
listen,17,0.0.0.0,53412
2012-07-05T19:35:48-03:00,info,appl
listen,17,0.0.0.0,53413
2012-07-05T19:35:48-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,1025
2012-07-05T19:35:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:48-03:00,info,appl
listen,17,0.0.0.0,53414
2012-07-05T19:35:48-03:00,info,appl
listen,17,0.0.0.0,53415
2012-07-05T19:35:49-03:00,info,appl
listen,17,0.0.0.0,53416
2012-07-05T19:35:49-03:00,info,appl
listen,17,0.0.0.0,53417
2012-07-05T19:35:50-03:00,info,appl
listen,17,0.0.0.0,53418
2012-07-05T19:35:50-03:00,info,appl
listen,17,0.0.0.0,53419
2012-07-05T19:35:51-03:00,info,appl
listen,17,0.0.0.0,53420
2012-07-05T19:35:51-03:00,info,appl
listen,17,0.0.0.0,53421
2012-07-05T19:35:51-03:00,info,appl
listen,17,0.0.0.0,53422
2012-07-05T19:35:51-03:00,info,appl
listen,17,0.0.0.0,53423
2012-07-05T19:35:52-03:00,info,appl
listen,17,0.0.0.0,53424
2012-07-05T19:35:52-03:00,info,appl
listen,17,0.0.0.0,53425
2012-07-05T19:35:52-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:52-03:00,info,appl
listen,17,0.0.0.0,53426
2012-07-05T19:35:53-03:00,info,appl
listen,17,0.0.0.0,53427
2012-07-05T19:35:53-03:00,info,appl
listen,17,0.0.0.0,53428
2012-07-05T19:35:54-03:00,info,appl
listen,17,0.0.0.0,53429
2012-07-05T19:35:54-03:00,info,appl
listen,17,0.0.0.0,53430
2012-07-05T19:35:54-03:00,info,appl
listen,17,0.0.0.0,53431
2012-07-05T19:35:55-03:00,info,appl
listen,17,0.0.0.0,53432
2012-07-05T19:35:55-03:00,info,appl
listen,17,0.0.0.0,53433
2012-07-05T19:35:55-03:00,info,appl
listen,17,0.0.0.0,53434
2012-07-05T19:35:56-03:00,info,appl
listen,17,0.0.0.0,53435
2012-07-05T19:35:56-03:00,info,appl
listen,17,0.0.0.0,53436
2012-07-05T19:35:56-03:00,info,appl
listen,17,0.0.0.0,53437
2012-07-05T19:35:56-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:35:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:35:56-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53438
2012-07-05T19:35:56-03:00,info,appl
listen,17,0.0.0.0,53439
2012-07-05T19:35:57-03:00,info,appl
listen,17,0.0.0.0,53440
2012-07-05T19:35:57-03:00,info,appl
listen,17,0.0.0.0,53441
2012-07-05T19:35:58-03:00,info,appl
listen,17,0.0.0.0,53442
2012-07-05T19:35:58-03:00,info,appl
listen,17,0.0.0.0,53443
2012-07-05T19:35:59-03:00,info,appl
listen,17,0.0.0.0,53444
2012-07-05T19:35:59-03:00,info,appl
listen,17,0.0.0.0,53445
2012-07-05T19:35:59-03:00,info,appl
listen,17,0.0.0.0,53446
2012-07-05T19:35:59-03:00,info,appl
listen,17,0.0.0.0,53447
2012-07-05T19:36:00-03:00,info,appl
listen,17,0.0.0.0,53448
2012-07-05T19:36:00-03:00,info,appl
listen,17,0.0.0.0,53449
2012-07-05T19:36:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:36:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:36:00-03:00,info,appl
listen,17,0.0.0.0,53450
2012-07-05T19:36:00-03:00,info,appl
listen,17,0.0.0.0,53451
2012-07-05T19:36:00-03:00,info,appl
listen,17,0.0.0.0,53452
2012-07-05T19:36:01-03:00,info,appl
listen,17,0.0.0.0,53453
2012-07-05T19:36:01-03:00,info,appl
listen,17,0.0.0.0,53454
2012-07-05T19:36:02-03:00,info,appl
listen,17,0.0.0.0,53455
2012-07-05T19:36:02-03:00,info,appl
listen,17,0.0.0.0,53456
2012-07-05T19:36:03-03:00,info,appl
listen,17,0.0.0.0,53457
2012-07-05T19:36:03-03:00,info,appl
listen,17,0.0.0.0,53458
2012-07-05T19:36:03-03:00,info,appl
listen,17,0.0.0.0,53459
2012-07-05T19:36:03-03:00,info,appl
listen,17,0.0.0.0,53460
2012-07-05T19:36:03-03:00,info,appl
listen,17,0.0.0.0,53461
2012-07-05T19:36:04-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T19:36:04-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:36:04-03:00,info,appl
listen,17,0.0.0.0,53462
2012-07-05T19:36:04-03:00,info,appl
listen,17,0.0.0.0,53463
2012-07-05T19:36:04-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53464
2012-07-05T19:36:05-03:00,info,appl
listen,17,0.0.0.0,53465
2012-07-05T19:36:05-03:00,info,appl
listen,17,0.0.0.0,53466
2012-07-05T19:36:06-03:00,info,appl
listen,17,0.0.0.0,53467
2012-07-05T19:36:06-03:00,info,appl
listen,17,0.0.0.0,53468
2012-07-05T19:36:06-03:00,info,appl
send,17,10.108.0.153,389
2012-07-05T19:36:06-03:00,info,appl
listen,17,0.0.0.0,53469
2012-07-05T19:36:07-03:00,info,appl
listen,17,0.0.0.0,53470
2012-07-05T19:36:07-03:00,info,appl
listen,17,0.0.0.0,53471
2012-07-05T19:36:07-03:00,info,appl
listen,17,0.0.0.0,53472
2012-07-05T19:36:07-03:00,info,appl
listen,17,0.0.0.0,53473
2012-07-05T19:37:01-03:00,info,appl
w,listen,17,0.0.0.0,58055
2012-07-05T19:37:01-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T19:37:01-03:00,info,appl
connect out,6,10.10.0.11,389
2012-07-05T19:37:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:37:01-03:00,info,appl
listen,17,0.0.0.0,58056
2012-07-05T19:37:01-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T19:37:01-03:00,info,appl
listen,17,0.0.0.0,58057
2012-07-05T19:37:01-03:00,info,appl
w,listen,17,0.0.0.0,55302
2012-07-05T19:37:01-03:00,info,appl
listen,17,0.0.0.0,55303
2012-07-05T19:37:02-03:00,info,appl
w,listen,17,0.0.0.0,64934
2012-07-05T19:37:02-03:00,info,appl
listen,17,0.0.0.0,64935
2012-07-05T19:37:02-03:00,info,appl
listen,17,0.0.0.0,64936
2012-07-05T19:37:03-03:00,info,appl
w,listen,17,0.0.0.0,60723
2012-07-05T19:37:03-03:00,info,appl
listen,17,0.0.0.0,60724
2012-07-05T19:37:03-03:00,info,appl
w,listen,17,0.0.0.0,56052
2012-07-05T19:37:03-03:00,info,appl
listen,17,0.0.0.0,56053
2012-07-05T19:37:03-03:00,info,appl
w,listen,17,0.0.0.0,49959
2012-07-05T19:37:03-03:00,info,appl
listen,17,0.0.0.0,49960
2012-07-05T19:37:04-03:00,info,appl
w,listen,17,0.0.0.0,54949
2012-07-05T19:37:04-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54950
2012-07-05T19:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65011
2012-07-05T19:37:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65012
2012-07-05T19:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61409
2012-07-05T19:37:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61410
2012-07-05T19:37:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61411
2012-07-05T19:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:37:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,2932
2012-07-05T19:37:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:37:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:38:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,3283
2012-07-05T19:38:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:39:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:39:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T19:39:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T19:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61412
2012-07-05T19:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61413
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57995
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57996
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63446
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:39:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63447
2012-07-05T19:39:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63448
2012-07-05T19:39:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63449
2012-07-05T19:39:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63450
2012-07-05T19:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63451
2012-07-05T19:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63452
2012-07-05T19:39:44-03:00,info,appl
listen,17,0.0.0.0,63453
2012-07-05T19:39:44-03:00,info,appl
listen,17,0.0.0.0,63454
2012-07-05T19:39:45-03:00,info,appl
listen,17,0.0.0.0,63455
2012-07-05T19:42:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:42:27-03:00,info,appl
listen,17,0.0.0.0,63456
2012-07-05T19:42:27-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T19:42:27-03:00,info,appl
listen,17,0.0.0.0,63457
2012-07-05T19:42:27-03:00,info,appl
listen,17,0.0.0.0,63458
2012-07-05T19:42:28-03:00,info,appl
listen,17,0.0.0.0,63459
2012-07-05T19:42:28-03:00,info,appl
listen,17,0.0.0.0,63460
2012-07-05T19:42:29-03:00,info,appl
listen,17,0.0.0.0,63461
2012-07-05T19:42:29-03:00,info,appl
listen,17,0.0.0.0,63462
2012-07-05T19:42:29-03:00,info,appl
listen,17,0.0.0.0,63463
2012-07-05T19:42:30-03:00,info,appl
listen,17,0.0.0.0,63464
2012-07-05T19:42:30-03:00,info,appl
listen,17,0.0.0.0,63465
2012-07-05T19:42:30-03:00,info,appl
listen,17,0.0.0.0,63466
2012-07-05T19:42:30-03:00,info,appl
listen,17,0.0.0.0,63467
2012-07-05T19:42:30-03:00,info,appl
w,listen,17,0.0.0.0,53407
2012-07-05T19:42:30-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T19:42:30-03:00,info,appl
listen,17,0.0.0.0,53408
2012-07-05T19:42:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:42:31-03:00,info,appl
listen,17,0.0.0.0,53409
2012-07-05T19:42:31-03:00,info,appl
listen,17,0.0.0.0,53410
2012-07-05T19:42:31-03:00,info,appl
listen,17,0.0.0.0,53411
2012-07-05T19:42:32-03:00,info,appl
listen,17,0.0.0.0,53412
2012-07-05T19:42:32-03:00,info,appl
listen,17,0.0.0.0,53413
2012-07-05T19:42:33-03:00,info,appl
listen,17,0.0.0.0,53414
2012-07-05T19:42:33-03:00,info,appl
listen,17,0.0.0.0,53415
2012-07-05T19:42:33-03:00,info,appl
listen,17,0.0.0.0,53416
2012-07-05T19:42:34-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53417
2012-07-05T19:42:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53418
2012-07-05T19:42:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53419
2012-07-05T19:42:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53420
2012-07-05T19:44:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:44:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:44:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:44:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53421
2012-07-05T19:44:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:44:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53422
2012-07-05T19:44:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53423
2012-07-05T19:44:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53424
2012-07-05T19:44:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53425
2012-07-05T19:44:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53426
2012-07-05T19:44:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53427
2012-07-05T19:44:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53428
2012-07-05T19:44:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53429
2012-07-05T19:44:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53430
2012-07-05T19:44:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53431
2012-07-05T19:44:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53432
2012-07-05T19:45:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:45:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:45:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:46:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:49:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:49:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:49:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53433
2012-07-05T19:49:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:49:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:49:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53434
2012-07-05T19:49:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53435
2012-07-05T19:49:49-03:00,info,appl
w,listen,17,0.0.0.0,65210
2012-07-05T19:49:49-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T19:49:49-03:00,info,appl
listen,17,0.0.0.0,65211
2012-07-05T19:49:50-03:00,info,appl
w,listen,17,0.0.0.0,54275
2012-07-05T19:49:50-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T19:49:50-03:00,info,appl
listen,17,0.0.0.0,54276
2012-07-05T19:49:50-03:00,info,appl
listen,17,0.0.0.0,54277
2012-07-05T19:49:51-03:00,info,appl
listen,17,0.0.0.0,54278
2012-07-05T19:49:51-03:00,info,appl
listen,17,0.0.0.0,54279
2012-07-05T19:49:51-03:00,info,appl
listen,17,0.0.0.0,54280
2012-07-05T19:49:52-03:00,info,appl
listen,17,0.0.0.0,54281
2012-07-05T19:49:52-03:00,info,appl
listen,17,0.0.0.0,54282
2012-07-05T19:49:52-03:00,info,appl
listen,17,0.0.0.0,54283
2012-07-05T19:49:52-03:00,info,appl
listen,17,0.0.0.0,54284
2012-07-05T19:52:09-03:00,info,appl
connect out,6,10.10.0.12,389
2012-07-05T19:52:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T19:52:09-03:00,info,appl
listen,17,0.0.0.0,54285
2012-07-05T19:52:09-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T19:52:09-03:00,info,appl
listen,17,0.0.0.0,54286
2012-07-05T19:52:09-03:00,info,appl
listen,17,0.0.0.0,54287
2012-07-05T19:52:10-03:00,info,appl
listen,17,0.0.0.0,54288
2012-07-05T19:52:10-03:00,info,appl
listen,17,0.0.0.0,54289
2012-07-05T19:52:11-03:00,info,appl
listen,17,0.0.0.0,54290
2012-07-05T19:52:11-03:00,info,appl
listen,17,0.0.0.0,54291
2012-07-05T19:52:11-03:00,info,appl
listen,17,0.0.0.0,54292
2012-07-05T19:52:12-03:00,info,appl
listen,17,0.0.0.0,54293
2012-07-05T19:52:12-03:00,info,appl
listen,17,0.0.0.0,54294
2012-07-05T19:52:12-03:00,info,appl
listen,17,0.0.0.0,54295
2012-07-05T19:52:12-03:00,info,appl
listen,17,0.0.0.0,54296
2012-07-05T19:52:13-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:52:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:52:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T19:52:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:53:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:54:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:54:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:54:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:54:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54297
2012-07-05T19:54:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:54:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54298
2012-07-05T19:54:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54299
2012-07-05T19:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54300
2012-07-05T19:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54301
2012-07-05T19:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54302
2012-07-05T19:54:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54303
2012-07-05T19:54:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54304
2012-07-05T19:54:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54305
2012-07-05T19:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54306
2012-07-05T19:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54307
2012-07-05T19:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54308
2012-07-05T19:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54309
2012-07-05T19:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:57:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54310
2012-07-05T19:57:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54311
2012-07-05T19:57:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54312
2012-07-05T19:57:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54313
2012-07-05T19:57:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54314
2012-07-05T19:57:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54315
2012-07-05T19:57:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54316
2012-07-05T19:57:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54317
2012-07-05T19:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54318
2012-07-05T19:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54319
2012-07-05T19:57:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54320
2012-07-05T19:59:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T19:59:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:59:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T19:59:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T19:59:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T19:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T19:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54321
2012-07-05T19:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T19:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54322
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61069
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61070
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52358
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T19:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52359
2012-07-05T19:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52360
2012-07-05T19:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52361
2012-07-05T19:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52362
2012-07-05T19:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52363
2012-07-05T19:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52364
2012-07-05T19:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52365
2012-07-05T20:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52366
2012-07-05T20:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52367
2012-07-05T20:00:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:01:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,56157
2012-07-05T20:01:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:01:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56158
2012-07-05T20:01:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T20:01:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T20:01:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T20:01:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58529
2012-07-05T20:01:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58530
2012-07-05T20:01:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58531
2012-07-05T20:01:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51684
2012-07-05T20:01:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51685
2012-07-05T20:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51686
2012-07-05T20:01:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51687
2012-07-05T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51688
2012-07-05T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51689
2012-07-05T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51690
2012-07-05T20:01:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51691
2012-07-05T20:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51692
2012-07-05T20:01:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51693
2012-07-05T20:01:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54389
2012-07-05T20:01:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:05:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:05:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54390
2012-07-05T20:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:05:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54391
2012-07-05T20:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54392
2012-07-05T20:05:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54393
2012-07-05T20:05:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54394
2012-07-05T20:05:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54395
2012-07-05T20:05:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54396
2012-07-05T20:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54397
2012-07-05T20:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54398
2012-07-05T20:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54399
2012-07-05T20:05:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54400
2012-07-05T20:05:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54401
2012-07-05T20:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:06:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54402
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54403
2012-07-05T20:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54404
2012-07-05T20:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:07:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54405
2012-07-05T20:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54406
2012-07-05T20:07:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57420
2012-07-05T20:07:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57421
2012-07-05T20:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57422
2012-07-05T20:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57423
2012-07-05T20:07:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50121
2012-07-05T20:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50122
2012-07-05T20:07:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50123
2012-07-05T20:07:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50124
2012-07-05T20:07:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50125
2012-07-05T20:07:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53315
2012-07-05T20:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:07:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64344
2012-07-05T20:10:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:10:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64345
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64346
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62414
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:10:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62415
2012-07-05T20:10:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59395
2012-07-05T20:10:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:10:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59396
2012-07-05T20:10:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59397
2012-07-05T20:10:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59398
2012-07-05T20:10:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59399
2012-07-05T20:10:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59400
2012-07-05T20:10:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59401
2012-07-05T20:10:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59402
2012-07-05T20:10:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59403
2012-07-05T20:10:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59404
2012-07-05T20:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59405
2012-07-05T20:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59406
2012-07-05T20:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59407
2012-07-05T20:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59408
2012-07-05T20:12:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59409
2012-07-05T20:12:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59410
2012-07-05T20:12:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59411
2012-07-05T20:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59412
2012-07-05T20:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59413
2012-07-05T20:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59414
2012-07-05T20:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59415
2012-07-05T20:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59416
2012-07-05T20:13:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:13:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:14:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:14:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:15:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:15:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59417
2012-07-05T20:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59418
2012-07-05T20:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59419
2012-07-05T20:15:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59420
2012-07-05T20:15:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59421
2012-07-05T20:15:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59422
2012-07-05T20:15:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59423
2012-07-05T20:15:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59424
2012-07-05T20:15:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59425
2012-07-05T20:15:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59426
2012-07-05T20:15:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59427
2012-07-05T20:15:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59428
2012-07-05T20:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.51,1507
2012-07-05T20:20:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:20:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59429
2012-07-05T20:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59430
2012-07-05T20:20:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59431
2012-07-05T20:20:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63976
2012-07-05T20:20:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:20:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63977
2012-07-05T20:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62248
2012-07-05T20:20:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:20:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62249
2012-07-05T20:20:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62250
2012-07-05T20:20:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62251
2012-07-05T20:20:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62252
2012-07-05T20:20:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62253
2012-07-05T20:20:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62254
2012-07-05T20:20:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62255
2012-07-05T20:20:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62256
2012-07-05T20:20:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62257
2012-07-05T20:20:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:20:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:21:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:21:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T20:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62258
2012-07-05T20:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T20:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62259
2012-07-05T20:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62260
2012-07-05T20:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62261
2012-07-05T20:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62262
2012-07-05T20:22:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62263
2012-07-05T20:22:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62264
2012-07-05T20:22:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62265
2012-07-05T20:22:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62266
2012-07-05T20:22:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62267
2012-07-05T20:22:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62268
2012-07-05T20:22:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62269
2012-07-05T20:25:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:25:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62270
2012-07-05T20:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62271
2012-07-05T20:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62272
2012-07-05T20:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62273
2012-07-05T20:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62274
2012-07-05T20:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62275
2012-07-05T20:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62276
2012-07-05T20:25:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62277
2012-07-05T20:25:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62278
2012-07-05T20:25:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62279
2012-07-05T20:25:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62280
2012-07-05T20:25:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62281
2012-07-05T20:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62282
2012-07-05T20:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T20:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62283
2012-07-05T20:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62284
2012-07-05T20:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62285
2012-07-05T20:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62286
2012-07-05T20:27:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62287
2012-07-05T20:27:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62288
2012-07-05T20:27:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62289
2012-07-05T20:27:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62290
2012-07-05T20:27:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62291
2012-07-05T20:27:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62292
2012-07-05T20:27:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62293
2012-07-05T20:27:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:27:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:28:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:28:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:30:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:30:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62294
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62295
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50095
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50096
2012-07-05T20:30:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56920
2012-07-05T20:30:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56921
2012-07-05T20:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56922
2012-07-05T20:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56923
2012-07-05T20:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56924
2012-07-05T20:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56925
2012-07-05T20:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56926
2012-07-05T20:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56927
2012-07-05T20:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56928
2012-07-05T20:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56929
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57800
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57801
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56754
2012-07-05T20:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56755
2012-07-05T20:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56756
2012-07-05T20:34:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57373
2012-07-05T20:34:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57374
2012-07-05T20:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57375
2012-07-05T20:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57376
2012-07-05T20:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57377
2012-07-05T20:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57378
2012-07-05T20:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57379
2012-07-05T20:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57380
2012-07-05T20:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57381
2012-07-05T20:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57382
2012-07-05T20:34:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59202
2012-07-05T20:34:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:34:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:34:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:34:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:35:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:35:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59203
2012-07-05T20:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59204
2012-07-05T20:35:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59205
2012-07-05T20:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59206
2012-07-05T20:35:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59207
2012-07-05T20:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59208
2012-07-05T20:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59209
2012-07-05T20:35:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59210
2012-07-05T20:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59211
2012-07-05T20:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59212
2012-07-05T20:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59213
2012-07-05T20:35:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59214
2012-07-05T20:35:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:35:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57176
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57177
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57178
2012-07-05T20:37:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59570
2012-07-05T20:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59571
2012-07-05T20:37:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57174
2012-07-05T20:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57175
2012-07-05T20:37:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52787
2012-07-05T20:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52788
2012-07-05T20:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52789
2012-07-05T20:37:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56061
2012-07-05T20:37:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56062
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56063
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51429
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51430
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50035
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50036
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56735
2012-07-05T20:37:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56736
2012-07-05T20:37:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63342
2012-07-05T20:37:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63343
2012-07-05T20:40:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T20:40:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T20:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63344
2012-07-05T20:40:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:40:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63345
2012-07-05T20:40:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60487
2012-07-05T20:40:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:40:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60488
2012-07-05T20:40:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65015
2012-07-05T20:40:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65016
2012-07-05T20:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65017
2012-07-05T20:40:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65018
2012-07-05T20:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65019
2012-07-05T20:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65020
2012-07-05T20:40:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65021
2012-07-05T20:40:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65022
2012-07-05T20:40:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65023
2012-07-05T20:40:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65024
2012-07-05T20:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:42:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65025
2012-07-05T20:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65026
2012-07-05T20:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65027
2012-07-05T20:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65028
2012-07-05T20:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65029
2012-07-05T20:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65030
2012-07-05T20:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65031
2012-07-05T20:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65032
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65033
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65034
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65035
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65036
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59423
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59424
2012-07-05T20:42:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:42:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59425
2012-07-05T20:42:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59426
2012-07-05T20:42:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59427
2012-07-05T20:42:51-03:00,info,appl
listen,17,0.0.0.0,59428
2012-07-05T20:42:51-03:00,info,appl
listen,17,0.0.0.0,59429
2012-07-05T20:42:51-03:00,info,appl
listen,17,0.0.0.0,59430
2012-07-05T20:42:52-03:00,info,appl
listen,17,0.0.0.0,59431
2012-07-05T20:42:52-03:00,info,appl
listen,17,0.0.0.0,59432
2012-07-05T20:42:52-03:00,info,appl
listen,17,0.0.0.0,59433
2012-07-05T20:42:53-03:00,info,appl
listen,17,0.0.0.0,59434
2012-07-05T20:42:53-03:00,info,appl
listen,17,0.0.0.0,59435
2012-07-05T20:42:53-03:00,info,appl
listen,17,0.0.0.0,59436
2012-07-05T20:43:05-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T20:44:29-03:00,info,appl
w,listen,17,0.0.0.0,64328
2012-07-05T20:44:29-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T20:44:29-03:00,info,appl
listen,17,0.0.0.0,64329
2012-07-05T20:44:29-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T20:44:29-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T20:44:29-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T20:44:29-03:00,info,appl
w,listen,17,0.0.0.0,58564
2012-07-05T20:44:29-03:00,info,appl
listen,17,0.0.0.0,58565
2012-07-05T20:44:29-03:00,info,appl
listen,17,0.0.0.0,58566
2012-07-05T20:44:30-03:00,info,appl
w,listen,17,0.0.0.0,61323
2012-07-05T20:44:30-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T20:44:30-03:00,info,appl
listen,17,0.0.0.0,61324
2012-07-05T20:44:30-03:00,info,appl
listen,17,0.0.0.0,61325
2012-07-05T20:44:31-03:00,info,appl
listen,17,0.0.0.0,61326
2012-07-05T20:44:31-03:00,info,appl
listen,17,0.0.0.0,61327
2012-07-05T20:44:31-03:00,info,appl
listen,17,0.0.0.0,61328
2012-07-05T20:44:31-03:00,info,appl
listen,17,0.0.0.0,61329
2012-07-05T20:44:32-03:00,info,appl
listen,17,0.0.0.0,61330
2012-07-05T20:44:32-03:00,info,appl
listen,17,0.0.0.0,61331
2012-07-05T20:44:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61332
2012-07-05T20:44:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59576
2012-07-05T20:44:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:45:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T20:45:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T20:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59577
2012-07-05T20:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:45:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59578
2012-07-05T20:45:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59579
2012-07-05T20:45:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59580
2012-07-05T20:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59581
2012-07-05T20:45:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59582
2012-07-05T20:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59583
2012-07-05T20:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59584
2012-07-05T20:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59585
2012-07-05T20:45:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59586
2012-07-05T20:45:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59587
2012-07-05T20:45:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59588
2012-07-05T20:49:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:49:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:49:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:50:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:50:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T20:50:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T20:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59589
2012-07-05T20:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59590
2012-07-05T20:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59591
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,61726
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61727
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50296
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T20:50:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50297
2012-07-05T20:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50298
2012-07-05T20:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50299
2012-07-05T20:50:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50300
2012-07-05T20:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50301
2012-07-05T20:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50302
2012-07-05T20:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50303
2012-07-05T20:50:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50304
2012-07-05T20:50:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50305
2012-07-05T20:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50306
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50307
2012-07-05T20:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50308
2012-07-05T20:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50309
2012-07-05T20:52:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50310
2012-07-05T20:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50311
2012-07-05T20:52:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50312
2012-07-05T20:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50313
2012-07-05T20:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50314
2012-07-05T20:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50315
2012-07-05T20:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50316
2012-07-05T20:52:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50317
2012-07-05T20:55:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T20:55:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T20:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50318
2012-07-05T20:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50319
2012-07-05T20:55:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50320
2012-07-05T20:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50321
2012-07-05T20:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50322
2012-07-05T20:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50323
2012-07-05T20:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50324
2012-07-05T20:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50325
2012-07-05T20:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50326
2012-07-05T20:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50327
2012-07-05T20:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50328
2012-07-05T20:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50329
2012-07-05T20:56:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T20:56:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:56:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:57:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T20:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T20:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50330
2012-07-05T20:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T20:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50331
2012-07-05T20:57:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50332
2012-07-05T20:57:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50333
2012-07-05T20:57:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50334
2012-07-05T20:57:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50335
2012-07-05T20:57:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50336
2012-07-05T20:57:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50337
2012-07-05T20:57:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50338
2012-07-05T20:57:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50339
2012-07-05T20:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50340
2012-07-05T20:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50341
2012-07-05T21:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-05T21:00:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:00:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50342
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50343
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62514
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62515
2012-07-05T21:00:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62021
2012-07-05T21:00:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T21:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62022
2012-07-05T21:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62023
2012-07-05T21:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62024
2012-07-05T21:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62025
2012-07-05T21:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62026
2012-07-05T21:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62027
2012-07-05T21:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62028
2012-07-05T21:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62029
2012-07-05T21:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62030
2012-07-05T21:02:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,60054
2012-07-05T21:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:03:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:03:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:04:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T21:05:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:05:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62031
2012-07-05T21:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62032
2012-07-05T21:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62033
2012-07-05T21:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62034
2012-07-05T21:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62035
2012-07-05T21:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62036
2012-07-05T21:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62037
2012-07-05T21:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62038
2012-07-05T21:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62039
2012-07-05T21:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62040
2012-07-05T21:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62041
2012-07-05T21:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62042
2012-07-05T21:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62043
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62044
2012-07-05T21:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62045
2012-07-05T21:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62046
2012-07-05T21:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62047
2012-07-05T21:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62048
2012-07-05T21:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62049
2012-07-05T21:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62050
2012-07-05T21:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62051
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50447
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50448
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57828
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57829
2012-07-05T21:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57830
2012-07-05T21:09:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53634
2012-07-05T21:09:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:09:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51113
2012-07-05T21:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:10:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:10:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51114
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51115
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64258
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64259
2012-07-05T21:10:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54145
2012-07-05T21:10:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T21:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54146
2012-07-05T21:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54147
2012-07-05T21:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54148
2012-07-05T21:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54149
2012-07-05T21:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54150
2012-07-05T21:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54151
2012-07-05T21:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54152
2012-07-05T21:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54153
2012-07-05T21:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54154
2012-07-05T21:11:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:11:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54155
2012-07-05T21:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:12:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54156
2012-07-05T21:12:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54157
2012-07-05T21:12:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54158
2012-07-05T21:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54159
2012-07-05T21:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54160
2012-07-05T21:12:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54161
2012-07-05T21:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54162
2012-07-05T21:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54163
2012-07-05T21:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54164
2012-07-05T21:13:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54165
2012-07-05T21:13:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54166
2012-07-05T21:14:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,49653
2012-07-05T21:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54167
2012-07-05T21:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:15:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:15:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54168
2012-07-05T21:15:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54169
2012-07-05T21:15:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54170
2012-07-05T21:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54171
2012-07-05T21:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54172
2012-07-05T21:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54173
2012-07-05T21:16:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54174
2012-07-05T21:16:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54175
2012-07-05T21:16:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54176
2012-07-05T21:16:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54177
2012-07-05T21:16:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54178
2012-07-05T21:16:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54179
2012-07-05T21:17:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:17:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:18:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:18:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:21:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:21:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54180
2012-07-05T21:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54181
2012-07-05T21:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54182
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59094
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59095
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60852
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T21:21:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60853
2012-07-05T21:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60854
2012-07-05T21:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60855
2012-07-05T21:21:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60856
2012-07-05T21:21:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60857
2012-07-05T21:21:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60858
2012-07-05T21:21:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60859
2012-07-05T21:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60860
2012-07-05T21:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60861
2012-07-05T21:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:22:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.73,58309
2012-07-05T21:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T21:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60862
2012-07-05T21:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60863
2012-07-05T21:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60864
2012-07-05T21:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60865
2012-07-05T21:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60866
2012-07-05T21:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60867
2012-07-05T21:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60868
2012-07-05T21:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60869
2012-07-05T21:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60870
2012-07-05T21:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60871
2012-07-05T21:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60872
2012-07-05T21:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60873
2012-07-05T21:24:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:24:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:25:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:25:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:26:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:26:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60874
2012-07-05T21:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60875
2012-07-05T21:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60876
2012-07-05T21:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60877
2012-07-05T21:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60878
2012-07-05T21:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60879
2012-07-05T21:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60880
2012-07-05T21:26:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60881
2012-07-05T21:26:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60882
2012-07-05T21:26:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60883
2012-07-05T21:26:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60884
2012-07-05T21:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60885
2012-07-05T21:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60886
2012-07-05T21:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60887
2012-07-05T21:28:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60888
2012-07-05T21:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60889
2012-07-05T21:28:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60890
2012-07-05T21:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60891
2012-07-05T21:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60892
2012-07-05T21:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60893
2012-07-05T21:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60894
2012-07-05T21:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60895
2012-07-05T21:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60896
2012-07-05T21:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60897
2012-07-05T21:31:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:31:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60898
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60899
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50619
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.11,53
2012-07-05T21:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50620
2012-07-05T21:31:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65242
2012-07-05T21:31:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T21:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65243
2012-07-05T21:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65244
2012-07-05T21:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65245
2012-07-05T21:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65246
2012-07-05T21:31:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65247
2012-07-05T21:31:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65248
2012-07-05T21:31:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65249
2012-07-05T21:31:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65250
2012-07-05T21:31:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65251
2012-07-05T21:31:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:31:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:32:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-05T21:32:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-05T21:32:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:32:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65252
2012-07-05T21:32:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:32:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65253
2012-07-05T21:32:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65254
2012-07-05T21:32:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65255
2012-07-05T21:32:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65256
2012-07-05T21:32:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65257
2012-07-05T21:32:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65258
2012-07-05T21:32:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65259
2012-07-05T21:32:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65260
2012-07-05T21:32:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65261
2012-07-05T21:32:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65262
2012-07-05T21:32:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65263
2012-07-05T21:32:11-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:11-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:11-03:00,info,appl
listen,17,0.0.0.0,65264
2012-07-05T21:32:11-03:00,info,appl
listen,17,0.0.0.0,65265
2012-07-05T21:32:12-03:00,info,appl
listen,17,0.0.0.0,65266
2012-07-05T21:32:12-03:00,info,appl
listen,17,0.0.0.0,65267
2012-07-05T21:32:13-03:00,info,appl
listen,17,0.0.0.0,65268
2012-07-05T21:32:13-03:00,info,appl
listen,17,0.0.0.0,65269
2012-07-05T21:32:14-03:00,info,appl
listen,17,0.0.0.0,65270
2012-07-05T21:32:14-03:00,info,appl
listen,17,0.0.0.0,65271
2012-07-05T21:32:14-03:00,info,appl
listen,17,0.0.0.0,65272
2012-07-05T21:32:14-03:00,info,appl
listen,17,0.0.0.0,65273
2012-07-05T21:32:15-03:00,info,appl
listen,17,0.0.0.0,65274
2012-07-05T21:32:15-03:00,info,appl
listen,17,0.0.0.0,65275
2012-07-05T21:32:15-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:15-03:00,info,appl
listen,17,0.0.0.0,65276
2012-07-05T21:32:15-03:00,info,appl
listen,17,0.0.0.0,65277
2012-07-05T21:32:15-03:00,info,appl
listen,17,0.0.0.0,65278
2012-07-05T21:32:16-03:00,info,appl
listen,17,0.0.0.0,65279
2012-07-05T21:32:16-03:00,info,appl
listen,17,0.0.0.0,65280
2012-07-05T21:32:17-03:00,info,appl
listen,17,0.0.0.0,65281
2012-07-05T21:32:17-03:00,info,appl
listen,17,0.0.0.0,65282
2012-07-05T21:32:18-03:00,info,appl
listen,17,0.0.0.0,65283
2012-07-05T21:32:18-03:00,info,appl
listen,17,0.0.0.0,65284
2012-07-05T21:32:18-03:00,info,appl
listen,17,0.0.0.0,65285
2012-07-05T21:32:18-03:00,info,appl
listen,17,0.0.0.0,65286
2012-07-05T21:32:19-03:00,info,appl
listen,17,0.0.0.0,65287
2012-07-05T21:32:19-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:19-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T21:32:19-03:00,info,appl
listen,17,0.0.0.0,65288
2012-07-05T21:32:19-03:00,info,appl
listen,17,0.0.0.0,65289
2012-07-05T21:32:19-03:00,info,appl
listen,17,0.0.0.0,65290
2012-07-05T21:32:20-03:00,info,appl
listen,17,0.0.0.0,65291
2012-07-05T21:32:20-03:00,info,appl
listen,17,0.0.0.0,65292
2012-07-05T21:32:21-03:00,info,appl
listen,17,0.0.0.0,65293
2012-07-05T21:32:21-03:00,info,appl
listen,17,0.0.0.0,65294
2012-07-05T21:32:21-03:00,info,appl
listen,17,0.0.0.0,65295
2012-07-05T21:32:22-03:00,info,appl
listen,17,0.0.0.0,65296
2012-07-05T21:32:22-03:00,info,appl
listen,17,0.0.0.0,65297
2012-07-05T21:32:22-03:00,info,appl
listen,17,0.0.0.0,65298
2012-07-05T21:32:22-03:00,info,appl
listen,17,0.0.0.0,65299
2012-07-05T21:32:22-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T21:32:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:23-03:00,info,appl
listen,17,0.0.0.0,65300
2012-07-05T21:32:23-03:00,info,appl
listen,17,0.0.0.0,65301
2012-07-05T21:32:23-03:00,info,appl
listen,17,0.0.0.0,65302
2012-07-05T21:32:24-03:00,info,appl
listen,17,0.0.0.0,65303
2012-07-05T21:32:24-03:00,info,appl
listen,17,0.0.0.0,65304
2012-07-05T21:32:25-03:00,info,appl
listen,17,0.0.0.0,65305
2012-07-05T21:32:25-03:00,info,appl
listen,17,0.0.0.0,65306
2012-07-05T21:32:26-03:00,info,appl
listen,17,0.0.0.0,65307
2012-07-05T21:32:26-03:00,info,appl
listen,17,0.0.0.0,65308
2012-07-05T21:32:26-03:00,info,appl
listen,17,0.0.0.0,65309
2012-07-05T21:32:26-03:00,info,appl
listen,17,0.0.0.0,65310
2012-07-05T21:32:27-03:00,info,appl
listen,17,0.0.0.0,65311
2012-07-05T21:32:27-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:27-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65312
2012-07-05T21:32:27-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T21:32:27-03:00,info,appl
listen,17,0.0.0.0,65313
2012-07-05T21:32:27-03:00,info,appl
listen,17,0.0.0.0,65314
2012-07-05T21:32:28-03:00,info,appl
listen,17,0.0.0.0,65315
2012-07-05T21:32:28-03:00,info,appl
listen,17,0.0.0.0,65316
2012-07-05T21:32:29-03:00,info,appl
listen,17,0.0.0.0,65317
2012-07-05T21:32:29-03:00,info,appl
listen,17,0.0.0.0,65318
2012-07-05T21:32:29-03:00,info,appl
listen,17,0.0.0.0,65319
2012-07-05T21:32:30-03:00,info,appl
listen,17,0.0.0.0,65320
2012-07-05T21:32:30-03:00,info,appl
listen,17,0.0.0.0,65321
2012-07-05T21:32:30-03:00,info,appl
listen,17,0.0.0.0,65322
2012-07-05T21:32:30-03:00,info,appl
listen,17,0.0.0.0,65323
2012-07-05T21:32:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:30-03:00,info,appl
listen,17,0.0.0.0,65324
2012-07-05T21:32:31-03:00,info,appl
listen,17,0.0.0.0,65325
2012-07-05T21:32:31-03:00,info,appl
listen,17,0.0.0.0,65326
2012-07-05T21:32:32-03:00,info,appl
listen,17,0.0.0.0,65327
2012-07-05T21:32:32-03:00,info,appl
listen,17,0.0.0.0,65328
2012-07-05T21:32:32-03:00,info,appl
listen,17,0.0.0.0,65329
2012-07-05T21:32:33-03:00,info,appl
listen,17,0.0.0.0,65330
2012-07-05T21:32:33-03:00,info,appl
listen,17,0.0.0.0,65331
2012-07-05T21:32:33-03:00,info,appl
listen,17,0.0.0.0,65332
2012-07-05T21:32:34-03:00,info,appl
listen,17,0.0.0.0,65333
2012-07-05T21:32:34-03:00,info,appl
listen,17,0.0.0.0,65334
2012-07-05T21:32:34-03:00,info,appl
listen,17,0.0.0.0,65335
2012-07-05T21:32:34-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:34-03:00,info,appl
listen,17,0.0.0.0,65336
2012-07-05T21:32:34-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65337
2012-07-05T21:32:35-03:00,info,appl
listen,17,0.0.0.0,65338
2012-07-05T21:32:35-03:00,info,appl
listen,17,0.0.0.0,65339
2012-07-05T21:32:36-03:00,info,appl
listen,17,0.0.0.0,65340
2012-07-05T21:32:36-03:00,info,appl
listen,17,0.0.0.0,65341
2012-07-05T21:32:37-03:00,info,appl
listen,17,0.0.0.0,65342
2012-07-05T21:32:37-03:00,info,appl
listen,17,0.0.0.0,65343
2012-07-05T21:32:37-03:00,info,appl
listen,17,0.0.0.0,65344
2012-07-05T21:32:37-03:00,info,appl
listen,17,0.0.0.0,65345
2012-07-05T21:32:38-03:00,info,appl
listen,17,0.0.0.0,65346
2012-07-05T21:32:38-03:00,info,appl
listen,17,0.0.0.0,65347
2012-07-05T21:32:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:38-03:00,info,appl
listen,17,0.0.0.0,65348
2012-07-05T21:32:39-03:00,info,appl
listen,17,0.0.0.0,65349
2012-07-05T21:32:39-03:00,info,appl
listen,17,0.0.0.0,65350
2012-07-05T21:32:40-03:00,info,appl
listen,17,0.0.0.0,65351
2012-07-05T21:32:40-03:00,info,appl
listen,17,0.0.0.0,65352
2012-07-05T21:32:40-03:00,info,appl
listen,17,0.0.0.0,65353
2012-07-05T21:32:41-03:00,info,appl
listen,17,0.0.0.0,65354
2012-07-05T21:32:41-03:00,info,appl
listen,17,0.0.0.0,65355
2012-07-05T21:32:41-03:00,info,appl
listen,17,0.0.0.0,65356
2012-07-05T21:32:42-03:00,info,appl
listen,17,0.0.0.0,65357
2012-07-05T21:32:42-03:00,info,appl
listen,17,0.0.0.0,65358
2012-07-05T21:32:42-03:00,info,appl
listen,17,0.0.0.0,65359
2012-07-05T21:32:42-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:42-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:42-03:00,info,appl
listen,17,0.0.0.0,65360
2012-07-05T21:32:42-03:00,info,appl
listen,17,0.0.0.0,65361
2012-07-05T21:32:43-03:00,info,appl
listen,17,0.0.0.0,65362
2012-07-05T21:32:43-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65363
2012-07-05T21:32:44-03:00,info,appl
listen,17,0.0.0.0,65364
2012-07-05T21:32:44-03:00,info,appl
listen,17,0.0.0.0,65365
2012-07-05T21:32:45-03:00,info,appl
listen,17,0.0.0.0,65366
2012-07-05T21:32:45-03:00,info,appl
listen,17,0.0.0.0,65367
2012-07-05T21:32:45-03:00,info,appl
listen,17,0.0.0.0,65368
2012-07-05T21:32:45-03:00,info,appl
listen,17,0.0.0.0,65369
2012-07-05T21:32:46-03:00,info,appl
listen,17,0.0.0.0,65370
2012-07-05T21:32:46-03:00,info,appl
listen,17,0.0.0.0,65371
2012-07-05T21:32:46-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:46-03:00,info,appl
listen,17,0.0.0.0,65372
2012-07-05T21:32:46-03:00,info,appl
listen,17,0.0.0.0,65373
2012-07-05T21:32:46-03:00,info,appl
listen,17,0.0.0.0,65374
2012-07-05T21:32:47-03:00,info,appl
listen,17,0.0.0.0,65375
2012-07-05T21:32:47-03:00,info,appl
send,17,10.88.108.206,389
2012-07-05T21:32:47-03:00,info,appl
listen,17,0.0.0.0,65376
2012-07-05T21:32:48-03:00,info,appl
listen,17,0.0.0.0,65377
2012-07-05T21:32:48-03:00,info,appl
listen,17,0.0.0.0,65378
2012-07-05T21:32:49-03:00,info,appl
listen,17,0.0.0.0,65379
2012-07-05T21:32:49-03:00,info,appl
listen,17,0.0.0.0,65380
2012-07-05T21:32:49-03:00,info,appl
listen,17,0.0.0.0,65381
2012-07-05T21:32:49-03:00,info,appl
listen,17,0.0.0.0,65382
2012-07-05T21:32:49-03:00,info,appl
listen,17,0.0.0.0,65383
2012-07-05T21:32:50-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:50-03:00,info,appl
listen,17,0.0.0.0,65384
2012-07-05T21:32:50-03:00,info,appl
listen,17,0.0.0.0,65385
2012-07-05T21:32:50-03:00,info,appl
listen,17,0.0.0.0,65386
2012-07-05T21:32:51-03:00,info,appl
listen,17,0.0.0.0,65387
2012-07-05T21:32:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65388
2012-07-05T21:32:52-03:00,info,appl
listen,17,0.0.0.0,65389
2012-07-05T21:32:52-03:00,info,appl
listen,17,0.0.0.0,65390
2012-07-05T21:32:52-03:00,info,appl
listen,17,0.0.0.0,65391
2012-07-05T21:32:53-03:00,info,appl
listen,17,0.0.0.0,65392
2012-07-05T21:32:53-03:00,info,appl
listen,17,0.0.0.0,65393
2012-07-05T21:32:53-03:00,info,appl
listen,17,0.0.0.0,65394
2012-07-05T21:32:53-03:00,info,appl
listen,17,0.0.0.0,65395
2012-07-05T21:32:54-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:54-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:54-03:00,info,appl
listen,17,0.0.0.0,65396
2012-07-05T21:32:54-03:00,info,appl
listen,17,0.0.0.0,65397
2012-07-05T21:32:54-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T21:32:54-03:00,info,appl
listen,17,0.0.0.0,65398
2012-07-05T21:32:55-03:00,info,appl
listen,17,0.0.0.0,65399
2012-07-05T21:32:55-03:00,info,appl
listen,17,0.0.0.0,65400
2012-07-05T21:32:56-03:00,info,appl
listen,17,0.0.0.0,65401
2012-07-05T21:32:56-03:00,info,appl
listen,17,0.0.0.0,65402
2012-07-05T21:32:57-03:00,info,appl
listen,17,0.0.0.0,65403
2012-07-05T21:32:57-03:00,info,appl
listen,17,0.0.0.0,65404
2012-07-05T21:32:57-03:00,info,appl
listen,17,0.0.0.0,65405
2012-07-05T21:32:57-03:00,info,appl
listen,17,0.0.0.0,65406
2012-07-05T21:32:58-03:00,info,appl
listen,17,0.0.0.0,65407
2012-07-05T21:32:58-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:32:58-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:32:58-03:00,info,appl
listen,17,0.0.0.0,65408
2012-07-05T21:32:58-03:00,info,appl
listen,17,0.0.0.0,65409
2012-07-05T21:32:58-03:00,info,appl
listen,17,0.0.0.0,65410
2012-07-05T21:32:59-03:00,info,appl
listen,17,0.0.0.0,65411
2012-07-05T21:32:59-03:00,info,appl
listen,17,0.0.0.0,65412
2012-07-05T21:33:00-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65413
2012-07-05T21:33:00-03:00,info,appl
listen,17,0.0.0.0,65414
2012-07-05T21:33:00-03:00,info,appl
listen,17,0.0.0.0,65415
2012-07-05T21:33:01-03:00,info,appl
listen,17,0.0.0.0,65416
2012-07-05T21:33:01-03:00,info,appl
listen,17,0.0.0.0,65417
2012-07-05T21:33:01-03:00,info,appl
listen,17,0.0.0.0,65418
2012-07-05T21:33:01-03:00,info,appl
listen,17,0.0.0.0,65419
2012-07-05T21:33:01-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:33:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:33:01-03:00,info,appl
listen,17,0.0.0.0,65420
2012-07-05T21:33:02-03:00,info,appl
listen,17,0.0.0.0,65421
2012-07-05T21:33:02-03:00,info,appl
listen,17,0.0.0.0,65422
2012-07-05T21:33:03-03:00,info,appl
listen,17,0.0.0.0,65423
2012-07-05T21:33:03-03:00,info,appl
listen,17,0.0.0.0,65424
2012-07-05T21:33:03-03:00,info,appl
listen,17,0.0.0.0,65425
2012-07-05T21:33:04-03:00,info,appl
listen,17,0.0.0.0,65426
2012-07-05T21:33:04-03:00,info,appl
listen,17,0.0.0.0,65427
2012-07-05T21:33:04-03:00,info,appl
listen,17,0.0.0.0,65428
2012-07-05T21:33:05-03:00,info,appl
listen,17,0.0.0.0,65429
2012-07-05T21:33:05-03:00,info,appl
listen,17,0.0.0.0,65430
2012-07-05T21:33:05-03:00,info,appl
listen,17,0.0.0.0,65431
2012-07-05T21:33:05-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T21:33:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:33:05-03:00,info,appl
listen,17,0.0.0.0,65432
2012-07-05T21:33:05-03:00,info,appl
listen,17,0.0.0.0,65433
2012-07-05T21:33:06-03:00,info,appl
listen,17,0.0.0.0,65434
2012-07-05T21:33:06-03:00,info,appl
listen,17,0.0.0.0,65435
2012-07-05T21:33:07-03:00,info,appl
listen,17,0.0.0.0,65436
2012-07-05T21:33:07-03:00,info,appl
send,17,10.201.0.100,389
2012-07-05T21:33:07-03:00,info,appl
listen,17,0.0.0.0,65437
2012-07-05T21:33:08-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65438
2012-07-05T21:33:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65439
2012-07-05T21:33:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65440
2012-07-05T21:33:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65441
2012-07-05T21:33:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65442
2012-07-05T21:33:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65443
2012-07-05T21:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:36:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:36:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65444
2012-07-05T21:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65445
2012-07-05T21:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65446
2012-07-05T21:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65447
2012-07-05T21:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65448
2012-07-05T21:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65449
2012-07-05T21:36:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65450
2012-07-05T21:36:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65451
2012-07-05T21:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65452
2012-07-05T21:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65453
2012-07-05T21:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65454
2012-07-05T21:36:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65455
2012-07-05T21:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54651
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54652
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:37:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54653
2012-07-05T21:37:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51381
2012-07-05T21:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51382
2012-07-05T21:37:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58663
2012-07-05T21:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58664
2012-07-05T21:37:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58665
2012-07-05T21:37:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54581
2012-07-05T21:37:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54582
2012-07-05T21:37:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63253
2012-07-05T21:37:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63254
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63255
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64496
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64497
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57438
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57439
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50536
2012-07-05T21:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50537
2012-07-05T21:37:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50333
2012-07-05T21:37:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50334
2012-07-05T21:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:39:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:40:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:41:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T21:41:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T21:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50335
2012-07-05T21:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50336
2012-07-05T21:41:17-03:00,info,appl
w,listen,17,0.0.0.0,57891
2012-07-05T21:41:17-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T21:41:17-03:00,info,appl
listen,17,0.0.0.0,57892
2012-07-05T21:41:17-03:00,info,appl
w,listen,17,0.0.0.0,62496
2012-07-05T21:41:17-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T21:41:17-03:00,info,appl
listen,17,0.0.0.0,62497
2012-07-05T21:41:18-03:00,info,appl
listen,17,0.0.0.0,62498
2012-07-05T21:41:18-03:00,info,appl
listen,17,0.0.0.0,62499
2012-07-05T21:41:19-03:00,info,appl
listen,17,0.0.0.0,62500
2012-07-05T21:41:19-03:00,info,appl
listen,17,0.0.0.0,62501
2012-07-05T21:41:19-03:00,info,appl
listen,17,0.0.0.0,62502
2012-07-05T21:41:19-03:00,info,appl
listen,17,0.0.0.0,62503
2012-07-05T21:41:20-03:00,info,appl
listen,17,0.0.0.0,62504
2012-07-05T21:41:20-03:00,info,appl
listen,17,0.0.0.0,62505
2012-07-05T21:43:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T21:43:05-03:00,info,appl
listen,17,0.0.0.0,62506
2012-07-05T21:43:05-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T21:43:05-03:00,info,appl
listen,17,0.0.0.0,62507
2012-07-05T21:43:05-03:00,info,appl
listen,17,0.0.0.0,62508
2012-07-05T21:43:06-03:00,info,appl
listen,17,0.0.0.0,62509
2012-07-05T21:43:06-03:00,info,appl
listen,17,0.0.0.0,62510
2012-07-05T21:43:06-03:00,info,appl
listen,17,0.0.0.0,62511
2012-07-05T21:43:07-03:00,info,appl
listen,17,0.0.0.0,62512
2012-07-05T21:43:07-03:00,info,appl
listen,17,0.0.0.0,62513
2012-07-05T21:43:07-03:00,info,appl
listen,17,0.0.0.0,62514
2012-07-05T21:43:08-03:00,info,appl
listen,17,0.0.0.0,62515
2012-07-05T21:43:08-03:00,info,appl
listen,17,0.0.0.0,62516
2012-07-05T21:43:08-03:00,info,appl
listen,17,0.0.0.0,62517
2012-07-05T21:43:20-03:00,info,appl
w,listen,17,0.0.0.0,54966
2012-07-05T21:43:20-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.11,53
2012-07-05T21:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54967
2012-07-05T21:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54968
2012-07-05T21:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54969
2012-07-05T21:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54970
2012-07-05T21:43:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54971
2012-07-05T21:43:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54972
2012-07-05T21:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54973
2012-07-05T21:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54974
2012-07-05T21:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54975
2012-07-05T21:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54976
2012-07-05T21:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54977
2012-07-05T21:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54978
2012-07-05T21:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54979
2012-07-05T21:46:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:46:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:46:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T21:46:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T21:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54980
2012-07-05T21:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54981
2012-07-05T21:46:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54982
2012-07-05T21:46:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54983
2012-07-05T21:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54984
2012-07-05T21:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54985
2012-07-05T21:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54986
2012-07-05T21:46:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54987
2012-07-05T21:46:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54988
2012-07-05T21:46:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54989
2012-07-05T21:46:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54990
2012-07-05T21:46:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54991
2012-07-05T21:46:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:47:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:51:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T21:51:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54992
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54993
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54994
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53111
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T21:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53112
2012-07-05T21:51:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49152
2012-07-05T21:51:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T21:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49153
2012-07-05T21:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49154
2012-07-05T21:51:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49155
2012-07-05T21:51:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49156
2012-07-05T21:51:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49157
2012-07-05T21:51:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49158
2012-07-05T21:51:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49159
2012-07-05T21:51:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49160
2012-07-05T21:51:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49161
2012-07-05T21:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49162
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49163
2012-07-05T21:52:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49164
2012-07-05T21:52:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49165
2012-07-05T21:52:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49166
2012-07-05T21:52:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49167
2012-07-05T21:52:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49168
2012-07-05T21:52:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49169
2012-07-05T21:52:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49170
2012-07-05T21:52:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49171
2012-07-05T21:52:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49172
2012-07-05T21:52:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49173
2012-07-05T21:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T21:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:54:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T21:56:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T21:56:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T21:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49174
2012-07-05T21:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49175
2012-07-05T21:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49176
2012-07-05T21:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49177
2012-07-05T21:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49178
2012-07-05T21:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49179
2012-07-05T21:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49180
2012-07-05T21:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49181
2012-07-05T21:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49182
2012-07-05T21:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49183
2012-07-05T21:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49184
2012-07-05T21:56:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49185
2012-07-05T21:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T21:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49186
2012-07-05T21:58:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T21:58:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49187
2012-07-05T21:58:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49188
2012-07-05T21:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49189
2012-07-05T21:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49190
2012-07-05T21:58:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49191
2012-07-05T21:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49192
2012-07-05T21:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49193
2012-07-05T21:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49194
2012-07-05T21:58:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49195
2012-07-05T21:58:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49196
2012-07-05T21:58:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49197
2012-07-05T22:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:00:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:00:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:01:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:01:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:01:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:01:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:01:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49198
2012-07-05T22:01:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:01:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49199
2012-07-05T22:01:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63616
2012-07-05T22:01:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:01:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63617
2012-07-05T22:01:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,50115
2012-07-05T22:01:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50116
2012-07-05T22:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50117
2012-07-05T22:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50118
2012-07-05T22:01:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50119
2012-07-05T22:01:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50120
2012-07-05T22:01:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50121
2012-07-05T22:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50122
2012-07-05T22:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50123
2012-07-05T22:01:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50124
2012-07-05T22:06:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:06:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50125
2012-07-05T22:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50126
2012-07-05T22:06:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50127
2012-07-05T22:06:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50128
2012-07-05T22:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50129
2012-07-05T22:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50130
2012-07-05T22:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50131
2012-07-05T22:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50132
2012-07-05T22:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50133
2012-07-05T22:06:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50134
2012-07-05T22:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50135
2012-07-05T22:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50136
2012-07-05T22:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50137
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50138
2012-07-05T22:07:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50139
2012-07-05T22:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50140
2012-07-05T22:07:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50141
2012-07-05T22:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50142
2012-07-05T22:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50143
2012-07-05T22:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58261
2012-07-05T22:07:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:07:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58262
2012-07-05T22:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58263
2012-07-05T22:07:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51280
2012-07-05T22:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51281
2012-07-05T22:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51282
2012-07-05T22:07:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51283
2012-07-05T22:07:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:08:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:11:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:11:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51284
2012-07-05T22:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51285
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55190
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55191
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,55868
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55869
2012-07-05T22:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55870
2012-07-05T22:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55871
2012-07-05T22:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55872
2012-07-05T22:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55873
2012-07-05T22:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55874
2012-07-05T22:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55875
2012-07-05T22:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55876
2012-07-05T22:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55877
2012-07-05T22:12:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64844
2012-07-05T22:12:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:12:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50996
2012-07-05T22:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50997
2012-07-05T22:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:13:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50998
2012-07-05T22:13:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50999
2012-07-05T22:13:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51000
2012-07-05T22:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51001
2012-07-05T22:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51002
2012-07-05T22:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51003
2012-07-05T22:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51004
2012-07-05T22:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51005
2012-07-05T22:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51006
2012-07-05T22:13:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51007
2012-07-05T22:13:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51008
2012-07-05T22:14:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:14:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:15:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T22:15:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51009
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-05T22:16:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:16:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51010
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51011
2012-07-05T22:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51012
2012-07-05T22:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51013
2012-07-05T22:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51014
2012-07-05T22:16:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51015
2012-07-05T22:16:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51016
2012-07-05T22:16:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51017
2012-07-05T22:16:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51018
2012-07-05T22:16:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51019
2012-07-05T22:16:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51020
2012-07-05T22:16:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51021
2012-07-05T22:21:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:21:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:21:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:21:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51022
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51023
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51024
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59267
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:21:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59268
2012-07-05T22:21:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50990
2012-07-05T22:21:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:21:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50991
2012-07-05T22:21:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50992
2012-07-05T22:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50993
2012-07-05T22:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50994
2012-07-05T22:21:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50995
2012-07-05T22:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50996
2012-07-05T22:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50997
2012-07-05T22:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50998
2012-07-05T22:21:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50999
2012-07-05T22:22:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:22:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T22:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51000
2012-07-05T22:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:22:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51001
2012-07-05T22:22:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51002
2012-07-05T22:22:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51003
2012-07-05T22:22:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51004
2012-07-05T22:22:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51005
2012-07-05T22:22:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51006
2012-07-05T22:22:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51007
2012-07-05T22:22:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51008
2012-07-05T22:22:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51009
2012-07-05T22:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51010
2012-07-05T22:22:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51011
2012-07-05T22:26:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:26:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51012
2012-07-05T22:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51013
2012-07-05T22:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51014
2012-07-05T22:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51015
2012-07-05T22:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51016
2012-07-05T22:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51017
2012-07-05T22:26:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51018
2012-07-05T22:26:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51019
2012-07-05T22:26:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51020
2012-07-05T22:26:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51021
2012-07-05T22:26:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51022
2012-07-05T22:26:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51023
2012-07-05T22:28:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:28:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51024
2012-07-05T22:28:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:28:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51025
2012-07-05T22:28:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51026
2012-07-05T22:28:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51027
2012-07-05T22:28:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51028
2012-07-05T22:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51029
2012-07-05T22:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51030
2012-07-05T22:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51031
2012-07-05T22:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51032
2012-07-05T22:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51033
2012-07-05T22:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51034
2012-07-05T22:28:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51035
2012-07-05T22:28:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:28:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:29:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:29:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:31:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:31:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51036
2012-07-05T22:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51037
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56382
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56383
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63918
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63919
2012-07-05T22:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63920
2012-07-05T22:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63921
2012-07-05T22:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63922
2012-07-05T22:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63923
2012-07-05T22:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63924
2012-07-05T22:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63925
2012-07-05T22:31:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63926
2012-07-05T22:31:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63927
2012-07-05T22:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:35:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:35:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:36:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:36:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-05T22:36:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:36:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63928
2012-07-05T22:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63929
2012-07-05T22:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63930
2012-07-05T22:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63931
2012-07-05T22:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63932
2012-07-05T22:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63933
2012-07-05T22:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63934
2012-07-05T22:37:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63935
2012-07-05T22:37:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63936
2012-07-05T22:37:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63937
2012-07-05T22:37:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63938
2012-07-05T22:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63939
2012-07-05T22:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52014
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52015
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52016
2012-07-05T22:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49999
2012-07-05T22:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50000
2012-07-05T22:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65214
2012-07-05T22:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65215
2012-07-05T22:37:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65216
2012-07-05T22:37:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54759
2012-07-05T22:37:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-05T22:37:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52329
2012-07-05T22:37:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52330
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62452
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62453
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58375
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58376
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58377
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63094
2012-07-05T22:37:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63096
2012-07-05T22:37:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57499
2012-07-05T22:37:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57500
2012-07-05T22:42:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-05T22:42:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57501
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57502
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50387
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50388
2012-07-05T22:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52938
2012-07-05T22:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52939
2012-07-05T22:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52940
2012-07-05T22:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52941
2012-07-05T22:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52942
2012-07-05T22:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52943
2012-07-05T22:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52944
2012-07-05T22:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52945
2012-07-05T22:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52946
2012-07-05T22:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52947
2012-07-05T22:43:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:43:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:43:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52948
2012-07-05T22:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52949
2012-07-05T22:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52950
2012-07-05T22:43:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52951
2012-07-05T22:43:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52952
2012-07-05T22:43:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52953
2012-07-05T22:43:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52954
2012-07-05T22:43:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52955
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52956
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52957
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52958
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52959
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58769
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58770
2012-07-05T22:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58771
2012-07-05T22:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58772
2012-07-05T22:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58773
2012-07-05T22:43:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58774
2012-07-05T22:43:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58775
2012-07-05T22:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58776
2012-07-05T22:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58777
2012-07-05T22:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58778
2012-07-05T22:43:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58779
2012-07-05T22:43:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58780
2012-07-05T22:43:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58781
2012-07-05T22:43:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58782
2012-07-05T22:44:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:47:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T22:47:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T22:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58783
2012-07-05T22:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58784
2012-07-05T22:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58785
2012-07-05T22:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58786
2012-07-05T22:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58787
2012-07-05T22:47:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58788
2012-07-05T22:47:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58789
2012-07-05T22:47:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58790
2012-07-05T22:47:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58791
2012-07-05T22:47:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58792
2012-07-05T22:47:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58793
2012-07-05T22:47:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58794
2012-07-05T22:50:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:50:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:50:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:51:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:52:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T22:52:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T22:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58795
2012-07-05T22:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58796
2012-07-05T22:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58797
2012-07-05T22:52:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55781
2012-07-05T22:52:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T22:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55782
2012-07-05T22:52:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56240
2012-07-05T22:52:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T22:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56241
2012-07-05T22:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56242
2012-07-05T22:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56243
2012-07-05T22:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56244
2012-07-05T22:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56245
2012-07-05T22:52:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56246
2012-07-05T22:52:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56247
2012-07-05T22:52:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56248
2012-07-05T22:52:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56249
2012-07-05T22:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56250
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56251
2012-07-05T22:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56252
2012-07-05T22:52:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56253
2012-07-05T22:52:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56254
2012-07-05T22:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56255
2012-07-05T22:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56256
2012-07-05T22:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56257
2012-07-05T22:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56258
2012-07-05T22:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56259
2012-07-05T22:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56260
2012-07-05T22:52:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56261
2012-07-05T22:57:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T22:57:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T22:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56262
2012-07-05T22:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56263
2012-07-05T22:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56264
2012-07-05T22:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56265
2012-07-05T22:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56266
2012-07-05T22:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56267
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56268
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56269
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56270
2012-07-05T22:57:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56271
2012-07-05T22:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56272
2012-07-05T22:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56273
2012-07-05T22:57:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:58:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T22:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T22:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56274
2012-07-05T22:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T22:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56275
2012-07-05T22:58:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56276
2012-07-05T22:58:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56277
2012-07-05T22:58:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56278
2012-07-05T22:58:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56279
2012-07-05T22:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56280
2012-07-05T22:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56281
2012-07-05T22:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56282
2012-07-05T22:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56283
2012-07-05T22:58:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56284
2012-07-05T22:58:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56285
2012-07-05T23:02:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:02:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56286
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56287
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57564
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57565
2012-07-05T23:02:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58196
2012-07-05T23:02:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T23:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58197
2012-07-05T23:02:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58198
2012-07-05T23:02:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58199
2012-07-05T23:02:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58200
2012-07-05T23:02:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58201
2012-07-05T23:02:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58202
2012-07-05T23:02:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58203
2012-07-05T23:02:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58204
2012-07-05T23:02:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58205
2012-07-05T23:04:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:04:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:04:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:05:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58206
2012-07-05T23:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58207
2012-07-05T23:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58208
2012-07-05T23:07:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58209
2012-07-05T23:07:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58210
2012-07-05T23:07:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58211
2012-07-05T23:07:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58212
2012-07-05T23:07:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58213
2012-07-05T23:07:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58214
2012-07-05T23:07:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58215
2012-07-05T23:07:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58216
2012-07-05T23:07:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58217
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58218
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58219
2012-07-05T23:07:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58220
2012-07-05T23:07:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60881
2012-07-05T23:07:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:07:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60882
2012-07-05T23:07:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60883
2012-07-05T23:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60884
2012-07-05T23:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60885
2012-07-05T23:08:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57878
2012-07-05T23:08:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57879
2012-07-05T23:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57880
2012-07-05T23:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57881
2012-07-05T23:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57882
2012-07-05T23:08:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57883
2012-07-05T23:11:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:11:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:12:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:12:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:12:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57884
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57885
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49484
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49485
2012-07-05T23:12:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50820
2012-07-05T23:12:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T23:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50821
2012-07-05T23:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50822
2012-07-05T23:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50823
2012-07-05T23:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50824
2012-07-05T23:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50825
2012-07-05T23:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50826
2012-07-05T23:12:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50827
2012-07-05T23:12:28-03:00,info,appl
listen,17,0.0.0.0,50828
2012-07-05T23:12:28-03:00,info,appl
listen,17,0.0.0.0,50829
2012-07-05T23:12:33-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-05T23:13:09-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-05T23:13:09-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:09-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:09-03:00,info,appl
listen,17,0.0.0.0,50830
2012-07-05T23:13:09-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T23:13:09-03:00,info,appl
listen,17,0.0.0.0,50831
2012-07-05T23:13:10-03:00,info,appl
listen,17,0.0.0.0,50832
2012-07-05T23:13:10-03:00,info,appl
listen,17,0.0.0.0,50833
2012-07-05T23:13:11-03:00,info,appl
listen,17,0.0.0.0,50834
2012-07-05T23:13:11-03:00,info,appl
listen,17,0.0.0.0,50835
2012-07-05T23:13:11-03:00,info,appl
listen,17,0.0.0.0,50836
2012-07-05T23:13:12-03:00,info,appl
listen,17,0.0.0.0,50837
2012-07-05T23:13:12-03:00,info,appl
listen,17,0.0.0.0,50838
2012-07-05T23:13:12-03:00,info,appl
listen,17,0.0.0.0,50839
2012-07-05T23:13:12-03:00,info,appl
listen,17,0.0.0.0,50840
2012-07-05T23:13:13-03:00,info,appl
listen,17,0.0.0.0,50841
2012-07-05T23:13:13-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:13-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:13-03:00,info,appl
listen,17,0.0.0.0,50842
2012-07-05T23:13:13-03:00,info,appl
listen,17,0.0.0.0,50843
2012-07-05T23:13:13-03:00,info,appl
listen,17,0.0.0.0,50844
2012-07-05T23:13:14-03:00,info,appl
listen,17,0.0.0.0,50845
2012-07-05T23:13:14-03:00,info,appl
listen,17,0.0.0.0,50846
2012-07-05T23:13:15-03:00,info,appl
listen,17,0.0.0.0,50847
2012-07-05T23:13:15-03:00,info,appl
listen,17,0.0.0.0,50848
2012-07-05T23:13:16-03:00,info,appl
listen,17,0.0.0.0,50849
2012-07-05T23:13:16-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50850
2012-07-05T23:13:16-03:00,info,appl
listen,17,0.0.0.0,50851
2012-07-05T23:13:16-03:00,info,appl
listen,17,0.0.0.0,50852
2012-07-05T23:13:16-03:00,info,appl
listen,17,0.0.0.0,50853
2012-07-05T23:13:17-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:17-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:17-03:00,info,appl
listen,17,0.0.0.0,50854
2012-07-05T23:13:17-03:00,info,appl
listen,17,0.0.0.0,50855
2012-07-05T23:13:17-03:00,info,appl
listen,17,0.0.0.0,50856
2012-07-05T23:13:18-03:00,info,appl
listen,17,0.0.0.0,50857
2012-07-05T23:13:18-03:00,info,appl
listen,17,0.0.0.0,50858
2012-07-05T23:13:18-03:00,info,appl
listen,17,0.0.0.0,50859
2012-07-05T23:13:19-03:00,info,appl
listen,17,0.0.0.0,50860
2012-07-05T23:13:19-03:00,info,appl
listen,17,0.0.0.0,50861
2012-07-05T23:13:19-03:00,info,appl
listen,17,0.0.0.0,50862
2012-07-05T23:13:20-03:00,info,appl
listen,17,0.0.0.0,50863
2012-07-05T23:13:20-03:00,info,appl
listen,17,0.0.0.0,50864
2012-07-05T23:13:20-03:00,info,appl
listen,17,0.0.0.0,50865
2012-07-05T23:13:20-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:20-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:20-03:00,info,appl
listen,17,0.0.0.0,50866
2012-07-05T23:13:20-03:00,info,appl
listen,17,0.0.0.0,50867
2012-07-05T23:13:21-03:00,info,appl
listen,17,0.0.0.0,50868
2012-07-05T23:13:21-03:00,info,appl
listen,17,0.0.0.0,50869
2012-07-05T23:13:22-03:00,info,appl
listen,17,0.0.0.0,50870
2012-07-05T23:13:22-03:00,info,appl
listen,17,0.0.0.0,50871
2012-07-05T23:13:23-03:00,info,appl
listen,17,0.0.0.0,50872
2012-07-05T23:13:23-03:00,info,appl
listen,17,0.0.0.0,50873
2012-07-05T23:13:23-03:00,info,appl
listen,17,0.0.0.0,50874
2012-07-05T23:13:23-03:00,info,appl
listen,17,0.0.0.0,50875
2012-07-05T23:13:24-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50876
2012-07-05T23:13:24-03:00,info,appl
listen,17,0.0.0.0,50877
2012-07-05T23:13:25-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:25-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:25-03:00,info,appl
listen,17,0.0.0.0,50878
2012-07-05T23:13:25-03:00,info,appl
listen,17,0.0.0.0,50879
2012-07-05T23:13:25-03:00,info,appl
listen,17,0.0.0.0,50880
2012-07-05T23:13:26-03:00,info,appl
listen,17,0.0.0.0,50881
2012-07-05T23:13:26-03:00,info,appl
listen,17,0.0.0.0,50882
2012-07-05T23:13:26-03:00,info,appl
listen,17,0.0.0.0,50883
2012-07-05T23:13:27-03:00,info,appl
listen,17,0.0.0.0,50884
2012-07-05T23:13:27-03:00,info,appl
listen,17,0.0.0.0,50885
2012-07-05T23:13:27-03:00,info,appl
listen,17,0.0.0.0,50886
2012-07-05T23:13:28-03:00,info,appl
listen,17,0.0.0.0,50887
2012-07-05T23:13:28-03:00,info,appl
listen,17,0.0.0.0,50888
2012-07-05T23:13:28-03:00,info,appl
listen,17,0.0.0.0,50889
2012-07-05T23:13:28-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:28-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:28-03:00,info,appl
listen,17,0.0.0.0,50890
2012-07-05T23:13:28-03:00,info,appl
listen,17,0.0.0.0,50891
2012-07-05T23:13:29-03:00,info,appl
listen,17,0.0.0.0,50892
2012-07-05T23:13:29-03:00,info,appl
send,17,10.10.0.12,389
2012-07-05T23:13:29-03:00,info,appl
listen,17,0.0.0.0,50893
2012-07-05T23:13:30-03:00,info,appl
listen,17,0.0.0.0,50894
2012-07-05T23:13:30-03:00,info,appl
listen,17,0.0.0.0,50895
2012-07-05T23:13:31-03:00,info,appl
listen,17,0.0.0.0,50896
2012-07-05T23:13:31-03:00,info,appl
listen,17,0.0.0.0,50897
2012-07-05T23:13:31-03:00,info,appl
listen,17,0.0.0.0,50898
2012-07-05T23:13:31-03:00,info,appl
listen,17,0.0.0.0,50899
2012-07-05T23:13:32-03:00,info,appl
listen,17,0.0.0.0,50900
2012-07-05T23:13:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50901
2012-07-05T23:13:32-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:32-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:32-03:00,info,appl
listen,17,0.0.0.0,50902
2012-07-05T23:13:32-03:00,info,appl
listen,17,0.0.0.0,50903
2012-07-05T23:13:33-03:00,info,appl
listen,17,0.0.0.0,50904
2012-07-05T23:13:33-03:00,info,appl
listen,17,0.0.0.0,50905
2012-07-05T23:13:34-03:00,info,appl
listen,17,0.0.0.0,50906
2012-07-05T23:13:34-03:00,info,appl
listen,17,0.0.0.0,50907
2012-07-05T23:13:34-03:00,info,appl
listen,17,0.0.0.0,50908
2012-07-05T23:13:35-03:00,info,appl
listen,17,0.0.0.0,50909
2012-07-05T23:13:35-03:00,info,appl
listen,17,0.0.0.0,50910
2012-07-05T23:13:35-03:00,info,appl
listen,17,0.0.0.0,50911
2012-07-05T23:13:35-03:00,info,appl
listen,17,0.0.0.0,50912
2012-07-05T23:13:36-03:00,info,appl
listen,17,0.0.0.0,50913
2012-07-05T23:13:36-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:36-03:00,info,appl
listen,17,0.0.0.0,50914
2012-07-05T23:13:36-03:00,info,appl
listen,17,0.0.0.0,50915
2012-07-05T23:13:36-03:00,info,appl
listen,17,0.0.0.0,50916
2012-07-05T23:13:37-03:00,info,appl
listen,17,0.0.0.0,50917
2012-07-05T23:13:37-03:00,info,appl
listen,17,0.0.0.0,50918
2012-07-05T23:13:38-03:00,info,appl
listen,17,0.0.0.0,50919
2012-07-05T23:13:38-03:00,info,appl
listen,17,0.0.0.0,50920
2012-07-05T23:13:39-03:00,info,appl
listen,17,0.0.0.0,50921
2012-07-05T23:13:39-03:00,info,appl
listen,17,0.0.0.0,50922
2012-07-05T23:13:39-03:00,info,appl
listen,17,0.0.0.0,50923
2012-07-05T23:13:39-03:00,info,appl
listen,17,0.0.0.0,50924
2012-07-05T23:13:39-03:00,info,appl
listen,17,0.0.0.0,50925
2012-07-05T23:13:40-03:00,info,appl
listen,17,0.0.0.0,50926
2012-07-05T23:13:40-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,1025
2012-07-05T23:13:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:40-03:00,info,appl
listen,17,0.0.0.0,50927
2012-07-05T23:13:40-03:00,info,appl
listen,17,0.0.0.0,50928
2012-07-05T23:13:41-03:00,info,appl
listen,17,0.0.0.0,50929
2012-07-05T23:13:41-03:00,info,appl
listen,17,0.0.0.0,50930
2012-07-05T23:13:42-03:00,info,appl
listen,17,0.0.0.0,50931
2012-07-05T23:13:42-03:00,info,appl
listen,17,0.0.0.0,50932
2012-07-05T23:13:42-03:00,info,appl
listen,17,0.0.0.0,50933
2012-07-05T23:13:43-03:00,info,appl
listen,17,0.0.0.0,50934
2012-07-05T23:13:43-03:00,info,appl
listen,17,0.0.0.0,50935
2012-07-05T23:13:43-03:00,info,appl
listen,17,0.0.0.0,50936
2012-07-05T23:13:44-03:00,info,appl
listen,17,0.0.0.0,50937
2012-07-05T23:13:44-03:00,info,appl
listen,17,0.0.0.0,50938
2012-07-05T23:13:44-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:44-03:00,info,appl
listen,17,0.0.0.0,50939
2012-07-05T23:13:44-03:00,info,appl
listen,17,0.0.0.0,50940
2012-07-05T23:13:44-03:00,info,appl
listen,17,0.0.0.0,50941
2012-07-05T23:13:45-03:00,info,appl
listen,17,0.0.0.0,50942
2012-07-05T23:13:45-03:00,info,appl
listen,17,0.0.0.0,50943
2012-07-05T23:13:46-03:00,info,appl
listen,17,0.0.0.0,50944
2012-07-05T23:13:46-03:00,info,appl
listen,17,0.0.0.0,50945
2012-07-05T23:13:47-03:00,info,appl
listen,17,0.0.0.0,50946
2012-07-05T23:13:47-03:00,info,appl
listen,17,0.0.0.0,50947
2012-07-05T23:13:47-03:00,info,appl
listen,17,0.0.0.0,50948
2012-07-05T23:13:47-03:00,info,appl
listen,17,0.0.0.0,50949
2012-07-05T23:13:47-03:00,info,appl
listen,17,0.0.0.0,50950
2012-07-05T23:13:48-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:48-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:48-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50951
2012-07-05T23:13:48-03:00,info,appl
listen,17,0.0.0.0,50952
2012-07-05T23:13:48-03:00,info,appl
listen,17,0.0.0.0,50953
2012-07-05T23:13:49-03:00,info,appl
listen,17,0.0.0.0,50954
2012-07-05T23:13:49-03:00,info,appl
send,17,10.88.108.206,389
2012-07-05T23:13:49-03:00,info,appl
listen,17,0.0.0.0,50955
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50956
2012-07-05T23:13:50-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50957
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50958
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50959
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50960
2012-07-05T23:13:50-03:00,info,appl
listen,17,0.0.0.0,50961
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50962
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50963
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50964
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50965
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50966
2012-07-05T23:13:51-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:13:51-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50967
2012-07-05T23:13:51-03:00,info,appl
listen,17,0.0.0.0,50968
2012-07-05T23:13:52-03:00,info,appl
listen,17,0.0.0.0,50969
2012-07-05T23:13:52-03:00,info,appl
listen,17,0.0.0.0,50970
2012-07-05T23:13:52-03:00,info,appl
listen,17,0.0.0.0,50971
2012-07-05T23:13:52-03:00,info,appl
listen,17,0.0.0.0,50972
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50973
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50974
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50975
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50976
2012-07-05T23:13:53-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50977
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50978
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50979
2012-07-05T23:13:53-03:00,info,appl
listen,17,0.0.0.0,50980
2012-07-05T23:13:54-03:00,info,appl
listen,17,0.0.0.0,50981
2012-07-05T23:13:54-03:00,info,appl
listen,17,0.0.0.0,50982
2012-07-05T23:13:54-03:00,info,appl
listen,17,0.0.0.0,50983
2012-07-05T23:13:55-03:00,info,appl
listen,17,0.0.0.0,50984
2012-07-05T23:13:55-03:00,info,appl
listen,17,0.0.0.0,50985
2012-07-05T23:13:55-03:00,info,appl
listen,17,0.0.0.0,50986
2012-07-05T23:14:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:14:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:14:00-03:00,info,appl
listen,17,0.0.0.0,50987
2012-07-05T23:14:00-03:00,info,appl
listen,17,0.0.0.0,50988
2012-07-05T23:14:00-03:00,info,appl
listen,17,0.0.0.0,50989
2012-07-05T23:14:01-03:00,info,appl
listen,17,0.0.0.0,50990
2012-07-05T23:14:01-03:00,info,appl
listen,17,0.0.0.0,50991
2012-07-05T23:14:01-03:00,info,appl
listen,17,0.0.0.0,50992
2012-07-05T23:14:02-03:00,info,appl
listen,17,0.0.0.0,50993
2012-07-05T23:14:02-03:00,info,appl
listen,17,0.0.0.0,50994
2012-07-05T23:14:02-03:00,info,appl
listen,17,0.0.0.0,50995
2012-07-05T23:14:03-03:00,info,appl
listen,17,0.0.0.0,50996
2012-07-05T23:14:03-03:00,info,appl
listen,17,0.0.0.0,50997
2012-07-05T23:14:03-03:00,info,appl
listen,17,0.0.0.0,50998
2012-07-05T23:14:03-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:14:03-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:14:03-03:00,info,appl
listen,17,0.0.0.0,50999
2012-07-05T23:14:03-03:00,info,appl
listen,17,0.0.0.0,51000
2012-07-05T23:14:04-03:00,info,appl
listen,17,0.0.0.0,51001
2012-07-05T23:14:04-03:00,info,appl
listen,17,0.0.0.0,51002
2012-07-05T23:14:05-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51003
2012-07-05T23:14:05-03:00,info,appl
listen,17,0.0.0.0,51004
2012-07-05T23:14:06-03:00,info,appl
listen,17,0.0.0.0,51005
2012-07-05T23:14:06-03:00,info,appl
listen,17,0.0.0.0,51006
2012-07-05T23:14:06-03:00,info,appl
listen,17,0.0.0.0,51007
2012-07-05T23:14:06-03:00,info,appl
listen,17,0.0.0.0,51008
2012-07-05T23:14:07-03:00,info,appl
listen,17,0.0.0.0,51009
2012-07-05T23:14:07-03:00,info,appl
listen,17,0.0.0.0,51010
2012-07-05T23:14:07-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:14:07-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:14:07-03:00,info,appl
listen,17,0.0.0.0,51011
2012-07-05T23:14:07-03:00,info,appl
listen,17,0.0.0.0,51012
2012-07-05T23:14:08-03:00,info,appl
listen,17,0.0.0.0,51013
2012-07-05T23:14:08-03:00,info,appl
listen,17,0.0.0.0,51014
2012-07-05T23:14:09-03:00,info,appl
listen,17,0.0.0.0,51015
2012-07-05T23:14:09-03:00,info,appl
listen,17,0.0.0.0,51016
2012-07-05T23:14:09-03:00,info,appl
send,17,10.1.0.197,389
2012-07-05T23:14:09-03:00,info,appl
listen,17,0.0.0.0,51017
2012-07-05T23:14:10-03:00,info,appl
listen,17,0.0.0.0,51018
2012-07-05T23:14:10-03:00,info,appl
listen,17,0.0.0.0,51019
2012-07-05T23:14:10-03:00,info,appl
listen,17,0.0.0.0,51020
2012-07-05T23:14:10-03:00,info,appl
listen,17,0.0.0.0,51021
2012-07-05T23:14:11-03:00,info,appl
listen,17,0.0.0.0,51022
2012-07-05T23:14:11-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-05T23:14:11-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:14:11-03:00,info,appl
listen,17,0.0.0.0,51023
2012-07-05T23:14:11-03:00,info,appl
listen,17,0.0.0.0,51024
2012-07-05T23:14:11-03:00,info,appl
listen,17,0.0.0.0,51025
2012-07-05T23:14:12-03:00,info,appl
listen,17,0.0.0.0,51026
2012-07-05T23:14:12-03:00,info,appl
listen,17,0.0.0.0,51027
2012-07-05T23:14:13-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51028
2012-07-05T23:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51029
2012-07-05T23:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51030
2012-07-05T23:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51031
2012-07-05T23:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51032
2012-07-05T23:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51033
2012-07-05T23:14:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51034
2012-07-05T23:14:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57621
2012-07-05T23:14:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:14:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49494
2012-07-05T23:17:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:17:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49495
2012-07-05T23:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:17:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49496
2012-07-05T23:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49497
2012-07-05T23:17:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49498
2012-07-05T23:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49499
2012-07-05T23:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49500
2012-07-05T23:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49501
2012-07-05T23:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49502
2012-07-05T23:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49503
2012-07-05T23:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49504
2012-07-05T23:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49505
2012-07-05T23:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49506
2012-07-05T23:18:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:18:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:19:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:22:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:22:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49507
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49508
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49509
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49497
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49498
2012-07-05T23:22:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60513
2012-07-05T23:22:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T23:22:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60514
2012-07-05T23:22:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60515
2012-07-05T23:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60516
2012-07-05T23:22:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60517
2012-07-05T23:22:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60518
2012-07-05T23:22:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60519
2012-07-05T23:22:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60520
2012-07-05T23:22:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60521
2012-07-05T23:22:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60522
2012-07-05T23:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T23:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60523
2012-07-05T23:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:23:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60524
2012-07-05T23:23:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60525
2012-07-05T23:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60526
2012-07-05T23:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60527
2012-07-05T23:23:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60528
2012-07-05T23:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60529
2012-07-05T23:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60530
2012-07-05T23:23:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60531
2012-07-05T23:23:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60532
2012-07-05T23:23:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60533
2012-07-05T23:23:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60534
2012-07-05T23:25:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:25:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:26:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:26:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:27:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:27:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60535
2012-07-05T23:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60536
2012-07-05T23:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60537
2012-07-05T23:27:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60538
2012-07-05T23:27:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60539
2012-07-05T23:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60540
2012-07-05T23:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60541
2012-07-05T23:27:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60542
2012-07-05T23:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60543
2012-07-05T23:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60544
2012-07-05T23:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60545
2012-07-05T23:27:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60546
2012-07-05T23:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60547
2012-07-05T23:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T23:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60548
2012-07-05T23:28:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60549
2012-07-05T23:28:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60550
2012-07-05T23:28:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60551
2012-07-05T23:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60552
2012-07-05T23:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60553
2012-07-05T23:28:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60554
2012-07-05T23:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60555
2012-07-05T23:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60556
2012-07-05T23:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60557
2012-07-05T23:28:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60558
2012-07-05T23:32:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:32:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60559
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60560
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63841
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:32:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63842
2012-07-05T23:32:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50978
2012-07-05T23:32:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T23:32:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50979
2012-07-05T23:32:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50980
2012-07-05T23:32:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50981
2012-07-05T23:32:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50982
2012-07-05T23:32:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50983
2012-07-05T23:32:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50984
2012-07-05T23:32:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50985
2012-07-05T23:32:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50986
2012-07-05T23:32:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50987
2012-07-05T23:32:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:32:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:33:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:33:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:37:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:37:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50988
2012-07-05T23:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:37:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50989
2012-07-05T23:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50990
2012-07-05T23:37:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50991
2012-07-05T23:37:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50992
2012-07-05T23:37:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50993
2012-07-05T23:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50994
2012-07-05T23:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50995
2012-07-05T23:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50996
2012-07-05T23:37:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50997
2012-07-05T23:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50998
2012-07-05T23:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54619
2012-07-05T23:37:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:37:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54620
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49251
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49252
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:38:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49253
2012-07-05T23:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49254
2012-07-05T23:38:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49255
2012-07-05T23:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55865
2012-07-05T23:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55866
2012-07-05T23:38:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51609
2012-07-05T23:38:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51610
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56177
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56178
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63376
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63377
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54909
2012-07-05T23:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54910
2012-07-05T23:38:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55543
2012-07-05T23:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55544
2012-07-05T23:38:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57682
2012-07-05T23:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57683
2012-07-05T23:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57684
2012-07-05T23:39:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:39:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:40:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:41:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:42:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:42:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:42:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:42:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57685
2012-07-05T23:42:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-05T23:42:51-03:00,info,appl
listen,17,0.0.0.0,57686
2012-07-05T23:42:52-03:00,info,appl
w,listen,17,0.0.0.0,50232
2012-07-05T23:42:52-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-05T23:42:52-03:00,info,appl
listen,17,0.0.0.0,50233
2012-07-05T23:42:52-03:00,info,appl
w,listen,17,0.0.0.0,50191
2012-07-05T23:42:52-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-05T23:42:52-03:00,info,appl
listen,17,0.0.0.0,50192
2012-07-05T23:42:53-03:00,info,appl
listen,17,0.0.0.0,50193
2012-07-05T23:42:53-03:00,info,appl
listen,17,0.0.0.0,50194
2012-07-05T23:42:53-03:00,info,appl
listen,17,0.0.0.0,50195
2012-07-05T23:42:54-03:00,info,appl
listen,17,0.0.0.0,50196
2012-07-05T23:42:54-03:00,info,appl
listen,17,0.0.0.0,50197
2012-07-05T23:42:54-03:00,info,appl
listen,17,0.0.0.0,50198
2012-07-05T23:42:54-03:00,info,appl
listen,17,0.0.0.0,50199
2012-07-05T23:42:55-03:00,info,appl
listen,17,0.0.0.0,50200
2012-07-05T23:43:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-05T23:43:57-03:00,info,appl
listen,17,0.0.0.0,50201
2012-07-05T23:43:57-03:00,info,appl
send,17,10.10.0.11,389
2012-07-05T23:43:58-03:00,info,appl
listen,17,0.0.0.0,50202
2012-07-05T23:43:58-03:00,info,appl
listen,17,0.0.0.0,50203
2012-07-05T23:43:59-03:00,info,appl
listen,17,0.0.0.0,50204
2012-07-05T23:43:59-03:00,info,appl
listen,17,0.0.0.0,50205
2012-07-05T23:43:59-03:00,info,appl
listen,17,0.0.0.0,50206
2012-07-05T23:44:00-03:00,info,appl
listen,17,0.0.0.0,50207
2012-07-05T23:44:00-03:00,info,appl
listen,17,0.0.0.0,50208
2012-07-05T23:44:00-03:00,info,appl
listen,17,0.0.0.0,50209
2012-07-05T23:44:01-03:00,info,appl
listen,17,0.0.0.0,50210
2012-07-05T23:44:01-03:00,info,appl
listen,17,0.0.0.0,50211
2012-07-05T23:44:01-03:00,info,appl
listen,17,0.0.0.0,50212
2012-07-05T23:44:01-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,54060
2012-07-05T23:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54061
2012-07-05T23:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54062
2012-07-05T23:44:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54063
2012-07-05T23:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54064
2012-07-05T23:44:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54065
2012-07-05T23:44:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54066
2012-07-05T23:44:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54067
2012-07-05T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54068
2012-07-05T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54069
2012-07-05T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54070
2012-07-05T23:44:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54071
2012-07-05T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54072
2012-07-05T23:44:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54073
2012-07-05T23:47:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:47:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:47:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:47:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:47:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:47:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:47:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54074
2012-07-05T23:47:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:47:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54075
2012-07-05T23:47:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54076
2012-07-05T23:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54077
2012-07-05T23:47:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54078
2012-07-05T23:47:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54079
2012-07-05T23:47:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54080
2012-07-05T23:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54081
2012-07-05T23:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54082
2012-07-05T23:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54083
2012-07-05T23:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54084
2012-07-05T23:47:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54085
2012-07-05T23:48:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-05T23:52:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:52:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54086
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54087
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54088
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50101
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-05T23:52:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50102
2012-07-05T23:53:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56724
2012-07-05T23:53:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-05T23:53:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56725
2012-07-05T23:53:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56726
2012-07-05T23:53:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56727
2012-07-05T23:53:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56728
2012-07-05T23:53:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56729
2012-07-05T23:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56730
2012-07-05T23:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56731
2012-07-05T23:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56732
2012-07-05T23:53:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56733
2012-07-05T23:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-05T23:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,88
2012-07-05T23:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56734
2012-07-05T23:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56735
2012-07-05T23:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56736
2012-07-05T23:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56737
2012-07-05T23:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56738
2012-07-05T23:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56739
2012-07-05T23:53:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56740
2012-07-05T23:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56741
2012-07-05T23:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56742
2012-07-05T23:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56743
2012-07-05T23:53:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56744
2012-07-05T23:53:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56745
2012-07-05T23:54:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-05T23:54:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:54:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:55:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-05T23:58:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-05T23:58:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-05T23:58:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:58:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56746
2012-07-05T23:58:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:58:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56747
2012-07-05T23:58:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56748
2012-07-05T23:58:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56749
2012-07-05T23:58:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56750
2012-07-05T23:58:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56751
2012-07-05T23:58:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56752
2012-07-05T23:58:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56753
2012-07-05T23:58:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56754
2012-07-05T23:58:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56755
2012-07-05T23:58:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56756
2012-07-05T23:58:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56757
2012-07-05T23:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-05T23:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56758
2012-07-05T23:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-05T23:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56759
2012-07-05T23:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56760
2012-07-05T23:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56761
2012-07-05T23:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56762
2012-07-05T23:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56763
2012-07-05T23:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56764
2012-07-05T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56765
2012-07-05T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56766
2012-07-05T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56767
2012-07-05T23:59:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56768
2012-07-05T23:59:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56769
2012-07-06T00:01:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:01:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:01:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:02:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56770
2012-07-06T00:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:03:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56771
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60739
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60740
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,59082
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T00:03:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59083
2012-07-06T00:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59084
2012-07-06T00:03:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59085
2012-07-06T00:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59086
2012-07-06T00:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59087
2012-07-06T00:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59088
2012-07-06T00:03:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59089
2012-07-06T00:03:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59090
2012-07-06T00:03:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59091
2012-07-06T00:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:08:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:08:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:08:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:08:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59092
2012-07-06T00:08:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:08:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59093
2012-07-06T00:08:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59094
2012-07-06T00:08:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59095
2012-07-06T00:08:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59096
2012-07-06T00:08:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59097
2012-07-06T00:08:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59098
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59099
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51596
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51597
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51598
2012-07-06T00:08:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51599
2012-07-06T00:08:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,50904
2012-07-06T00:08:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50905
2012-07-06T00:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T00:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50906
2012-07-06T00:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50907
2012-07-06T00:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50908
2012-07-06T00:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50909
2012-07-06T00:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50910
2012-07-06T00:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50911
2012-07-06T00:08:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50912
2012-07-06T00:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50913
2012-07-06T00:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50914
2012-07-06T00:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50915
2012-07-06T00:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50916
2012-07-06T00:08:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50917
2012-07-06T00:08:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:08:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:08:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:09:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:13:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:13:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50918
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50919
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53126
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:13:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53127
2012-07-06T00:13:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59607
2012-07-06T00:13:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.11,53
2012-07-06T00:13:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59608
2012-07-06T00:13:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59609
2012-07-06T00:13:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59610
2012-07-06T00:13:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59611
2012-07-06T00:13:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59612
2012-07-06T00:13:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59613
2012-07-06T00:13:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59614
2012-07-06T00:13:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59615
2012-07-06T00:13:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59616
2012-07-06T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59617
2012-07-06T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59618
2012-07-06T00:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59619
2012-07-06T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59620
2012-07-06T00:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59621
2012-07-06T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59622
2012-07-06T00:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59623
2012-07-06T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59624
2012-07-06T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59625
2012-07-06T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59626
2012-07-06T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59627
2012-07-06T00:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59628
2012-07-06T00:15:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:15:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:16:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:16:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:16:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60125
2012-07-06T00:16:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:16:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,57665
2012-07-06T00:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57666
2012-07-06T00:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:18:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:18:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:18:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57667
2012-07-06T00:18:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57668
2012-07-06T00:18:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57669
2012-07-06T00:18:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57670
2012-07-06T00:18:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57671
2012-07-06T00:18:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57672
2012-07-06T00:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57673
2012-07-06T00:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57674
2012-07-06T00:18:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57675
2012-07-06T00:18:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57676
2012-07-06T00:18:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57677
2012-07-06T00:18:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57678
2012-07-06T00:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:22:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:22:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:23:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57679
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57680
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57681
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55910
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.11,53
2012-07-06T00:23:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55911
2012-07-06T00:23:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64662
2012-07-06T00:23:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T00:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64663
2012-07-06T00:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64664
2012-07-06T00:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64665
2012-07-06T00:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64666
2012-07-06T00:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64667
2012-07-06T00:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64668
2012-07-06T00:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64669
2012-07-06T00:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64670
2012-07-06T00:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64671
2012-07-06T00:23:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:23:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:23:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:23:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64672
2012-07-06T00:23:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64673
2012-07-06T00:23:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64674
2012-07-06T00:23:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64675
2012-07-06T00:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64676
2012-07-06T00:23:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64677
2012-07-06T00:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64678
2012-07-06T00:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64679
2012-07-06T00:23:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64680
2012-07-06T00:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64681
2012-07-06T00:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64682
2012-07-06T00:23:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64683
2012-07-06T00:23:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:28:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:28:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64684
2012-07-06T00:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:28:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64685
2012-07-06T00:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64686
2012-07-06T00:28:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64687
2012-07-06T00:28:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64688
2012-07-06T00:28:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64689
2012-07-06T00:28:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64690
2012-07-06T00:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64691
2012-07-06T00:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64692
2012-07-06T00:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64693
2012-07-06T00:28:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64694
2012-07-06T00:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64695
2012-07-06T00:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64696
2012-07-06T00:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64697
2012-07-06T00:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64698
2012-07-06T00:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64699
2012-07-06T00:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64700
2012-07-06T00:29:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64701
2012-07-06T00:29:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64702
2012-07-06T00:29:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64703
2012-07-06T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64704
2012-07-06T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64705
2012-07-06T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64706
2012-07-06T00:29:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64707
2012-07-06T00:29:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:29:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T00:30:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:30:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:33:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:33:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64708
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64709
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50246
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:33:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50247
2012-07-06T00:33:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61283
2012-07-06T00:33:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T00:33:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61284
2012-07-06T00:33:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61285
2012-07-06T00:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61286
2012-07-06T00:33:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61287
2012-07-06T00:33:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61288
2012-07-06T00:33:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61289
2012-07-06T00:33:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61290
2012-07-06T00:33:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61291
2012-07-06T00:33:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61292
2012-07-06T00:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:36:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:36:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:37:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:37:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:37:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52915
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52916
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52917
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53307
2012-07-06T00:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53308
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65379
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65380
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63120
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63121
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51270
2012-07-06T00:38:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51271
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55566
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55567
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63196
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63197
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56894
2012-07-06T00:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56895
2012-07-06T00:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50494
2012-07-06T00:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50495
2012-07-06T00:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50496
2012-07-06T00:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50497
2012-07-06T00:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50498
2012-07-06T00:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50499
2012-07-06T00:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50500
2012-07-06T00:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50501
2012-07-06T00:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50502
2012-07-06T00:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50503
2012-07-06T00:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50504
2012-07-06T00:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50505
2012-07-06T00:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50506
2012-07-06T00:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50507
2012-07-06T00:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.200.0.5,389
2012-07-06T00:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50508
2012-07-06T00:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50509
2012-07-06T00:43:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T00:43:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T00:43:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:43:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50510
2012-07-06T00:43:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50511
2012-07-06T00:43:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64207
2012-07-06T00:43:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64208
2012-07-06T00:43:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64175
2012-07-06T00:43:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T00:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64176
2012-07-06T00:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64177
2012-07-06T00:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64178
2012-07-06T00:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64179
2012-07-06T00:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64180
2012-07-06T00:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64181
2012-07-06T00:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64182
2012-07-06T00:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64183
2012-07-06T00:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64184
2012-07-06T00:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:44:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:44:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:44:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64185
2012-07-06T00:44:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:44:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64186
2012-07-06T00:44:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64187
2012-07-06T00:44:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64188
2012-07-06T00:44:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64189
2012-07-06T00:44:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64190
2012-07-06T00:44:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64191
2012-07-06T00:44:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64192
2012-07-06T00:44:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64193
2012-07-06T00:44:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64194
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64195
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64196
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58837
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58838
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58839
2012-07-06T00:44:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58840
2012-07-06T00:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58841
2012-07-06T00:44:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58842
2012-07-06T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58843
2012-07-06T00:44:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58844
2012-07-06T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58845
2012-07-06T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58846
2012-07-06T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58847
2012-07-06T00:44:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58848
2012-07-06T00:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58849
2012-07-06T00:44:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58850
2012-07-06T00:44:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:45:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:48:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T00:48:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T00:48:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:48:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58851
2012-07-06T00:48:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:48:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58852
2012-07-06T00:48:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58853
2012-07-06T00:48:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58854
2012-07-06T00:48:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58855
2012-07-06T00:48:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58856
2012-07-06T00:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58857
2012-07-06T00:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58858
2012-07-06T00:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58859
2012-07-06T00:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58860
2012-07-06T00:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58861
2012-07-06T00:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58862
2012-07-06T00:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:51:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:52:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58863
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58864
2012-07-06T00:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58865
2012-07-06T00:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58866
2012-07-06T00:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58867
2012-07-06T00:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58868
2012-07-06T00:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58869
2012-07-06T00:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58870
2012-07-06T00:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58871
2012-07-06T00:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58872
2012-07-06T00:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58873
2012-07-06T00:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58874
2012-07-06T00:53:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58875
2012-07-06T00:53:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T00:53:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58876
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58877
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59888
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T00:53:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59889
2012-07-06T00:53:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54173
2012-07-06T00:53:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T00:53:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54174
2012-07-06T00:53:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54175
2012-07-06T00:53:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54176
2012-07-06T00:53:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54177
2012-07-06T00:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54178
2012-07-06T00:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54179
2012-07-06T00:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54180
2012-07-06T00:53:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54181
2012-07-06T00:53:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54182
2012-07-06T00:58:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T00:58:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:58:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:58:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T00:58:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T00:58:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:58:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54183
2012-07-06T00:58:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:58:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54184
2012-07-06T00:58:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54185
2012-07-06T00:58:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54186
2012-07-06T00:58:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54187
2012-07-06T00:58:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54188
2012-07-06T00:58:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54189
2012-07-06T00:58:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54190
2012-07-06T00:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54191
2012-07-06T00:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54192
2012-07-06T00:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54193
2012-07-06T00:58:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54194
2012-07-06T00:59:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54195
2012-07-06T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54196
2012-07-06T00:59:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54197
2012-07-06T00:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54198
2012-07-06T00:59:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54199
2012-07-06T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54200
2012-07-06T00:59:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54201
2012-07-06T00:59:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54202
2012-07-06T00:59:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54203
2012-07-06T00:59:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54204
2012-07-06T00:59:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54205
2012-07-06T00:59:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54206
2012-07-06T01:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T01:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,54207
2012-07-06T01:00:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-06T01:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.0.13,12110
2012-07-06T01:00:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T01:04:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:04:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54208
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54209
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60530
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:04:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60531
2012-07-06T01:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61621
2012-07-06T01:04:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61622
2012-07-06T01:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61623
2012-07-06T01:04:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61624
2012-07-06T01:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61625
2012-07-06T01:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61626
2012-07-06T01:04:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61627
2012-07-06T01:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61628
2012-07-06T01:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61629
2012-07-06T01:04:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61630
2012-07-06T01:04:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,4830
2012-07-06T01:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:05:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:05:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,1913

2012-07-06T01:05:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:06:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:07:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:07:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T01:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61631
2012-07-06T01:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:08:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61632
2012-07-06T01:08:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61633
2012-07-06T01:08:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61634
2012-07-06T01:08:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61635
2012-07-06T01:08:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61636
2012-07-06T01:08:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62061
2012-07-06T01:08:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:08:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62062
2012-07-06T01:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62063
2012-07-06T01:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62064
2012-07-06T01:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62065
2012-07-06T01:08:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52694
2012-07-06T01:08:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52695
2012-07-06T01:08:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52696
2012-07-06T01:09:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:09:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:09:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:09:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52697
2012-07-06T01:09:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:09:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52698
2012-07-06T01:09:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52699
2012-07-06T01:09:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52700

2012-07-06T01:09:05-03:00,info,appl
listen,17,0.0.0.0,52701
2012-07-06T01:09:05-03:00,info,appl
listen,17,0.0.0.0,52702
2012-07-06T01:09:06-03:00,info,appl
listen,17,0.0.0.0,52703
2012-07-06T01:09:06-03:00,info,appl
listen,17,0.0.0.0,52704
2012-07-06T01:09:06-03:00,info,appl
listen,17,0.0.0.0,52705
2012-07-06T01:09:06-03:00,info,appl
listen,17,0.0.0.0,52706
2012-07-06T01:09:07-03:00,info,appl
listen,17,0.0.0.0,52707
2012-07-06T01:09:07-03:00,info,appl
listen,17,0.0.0.0,52708
2012-07-06T01:10:15-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T01:10:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:15-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:15-03:00,info,appl
listen,17,0.0.0.0,52709
2012-07-06T01:10:15-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T01:10:15-03:00,info,appl
listen,17,0.0.0.0,52710
2012-07-06T01:10:15-03:00,info,appl
listen,17,0.0.0.0,52711
2012-07-06T01:10:16-03:00,info,appl
listen,17,0.0.0.0,52712
2012-07-06T01:10:16-03:00,info,appl
listen,17,0.0.0.0,52713
2012-07-06T01:10:16-03:00,info,appl
listen,17,0.0.0.0,52714
2012-07-06T01:10:17-03:00,info,appl
listen,17,0.0.0.0,52715
2012-07-06T01:10:17-03:00,info,appl
listen,17,0.0.0.0,52716
2012-07-06T01:10:17-03:00,info,appl
listen,17,0.0.0.0,52717
2012-07-06T01:10:18-03:00,info,appl
listen,17,0.0.0.0,52718
2012-07-06T01:10:18-03:00,info,appl
listen,17,0.0.0.0,52719
2012-07-06T01:10:18-03:00,info,appl
listen,17,0.0.0.0,52720
2012-07-06T01:10:18-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:18-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:18-03:00,info,appl
listen,17,0.0.0.0,52721
2012-07-06T01:10:18-03:00,info,appl
listen,17,0.0.0.0,52722
2012-07-06T01:10:19-03:00,info,appl
listen,17,0.0.0.0,52723
2012-07-06T01:10:19-03:00,info,appl
listen,17,0.0.0.0,52724

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:10:20-03:00,info,appl
listen,17,0.0.0.0,52725
2012-07-06T01:10:20-03:00,info,appl
listen,17,0.0.0.0,52726
2012-07-06T01:10:21-03:00,info,appl
listen,17,0.0.0.0,52727
2012-07-06T01:10:21-03:00,info,appl
listen,17,0.0.0.0,52728
2012-07-06T01:10:21-03:00,info,appl
listen,17,0.0.0.0,52729
2012-07-06T01:10:21-03:00,info,appl
listen,17,0.0.0.0,52730
2012-07-06T01:10:22-03:00,info,appl
listen,17,0.0.0.0,52731
2012-07-06T01:10:22-03:00,info,appl
listen,17,0.0.0.0,52732
2012-07-06T01:10:22-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:22-03:00,info,appl
listen,17,0.0.0.0,52733
2012-07-06T01:10:22-03:00,info,appl
listen,17,0.0.0.0,52734
2012-07-06T01:10:23-03:00,info,appl
listen,17,0.0.0.0,52735
2012-07-06T01:10:23-03:00,info,appl
listen,17,0.0.0.0,52736
2012-07-06T01:10:24-03:00,info,appl
listen,17,0.0.0.0,52737
2012-07-06T01:10:24-03:00,info,appl
listen,17,0.0.0.0,52738
2012-07-06T01:10:24-03:00,info,appl
listen,17,0.0.0.0,52739
2012-07-06T01:10:25-03:00,info,appl
listen,17,0.0.0.0,52740
2012-07-06T01:10:25-03:00,info,appl
listen,17,0.0.0.0,52741
2012-07-06T01:10:25-03:00,info,appl
listen,17,0.0.0.0,52742
2012-07-06T01:10:25-03:00,info,appl
listen,17,0.0.0.0,52743
2012-07-06T01:10:26-03:00,info,appl
listen,17,0.0.0.0,52744
2012-07-06T01:10:26-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:26-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:26-03:00,info,appl
listen,17,0.0.0.0,52745
2012-07-06T01:10:26-03:00,info,appl
listen,17,0.0.0.0,52746
2012-07-06T01:10:26-03:00,info,appl
listen,17,0.0.0.0,52747
2012-07-06T01:10:27-03:00,info,appl
listen,17,0.0.0.0,52748
2012-07-06T01:10:27-03:00,info,appl
listen,17,0.0.0.0,52749
2012-07-06T01:10:28-03:00,info,appl
listen,17,0.0.0.0,52750

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:10:28-03:00,info,appl
listen,17,0.0.0.0,52751
2012-07-06T01:10:29-03:00,info,appl
listen,17,0.0.0.0,52752
2012-07-06T01:10:29-03:00,info,appl
listen,17,0.0.0.0,52753
2012-07-06T01:10:29-03:00,info,appl
listen,17,0.0.0.0,52754
2012-07-06T01:10:29-03:00,info,appl
listen,17,0.0.0.0,52755
2012-07-06T01:10:29-03:00,info,appl
listen,17,0.0.0.0,52756
2012-07-06T01:10:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:30-03:00,info,appl
listen,17,0.0.0.0,52757
2012-07-06T01:10:30-03:00,info,appl
listen,17,0.0.0.0,52758
2012-07-06T01:10:31-03:00,info,appl
listen,17,0.0.0.0,52759
2012-07-06T01:10:31-03:00,info,appl
listen,17,0.0.0.0,52760
2012-07-06T01:10:32-03:00,info,appl
listen,17,0.0.0.0,52761
2012-07-06T01:10:32-03:00,info,appl
listen,17,0.0.0.0,52762
2012-07-06T01:10:32-03:00,info,appl
listen,17,0.0.0.0,52763
2012-07-06T01:10:33-03:00,info,appl
listen,17,0.0.0.0,52764
2012-07-06T01:10:33-03:00,info,appl
listen,17,0.0.0.0,52765
2012-07-06T01:10:33-03:00,info,appl
listen,17,0.0.0.0,52766
2012-07-06T01:10:33-03:00,info,appl
listen,17,0.0.0.0,52767
2012-07-06T01:10:34-03:00,info,appl
listen,17,0.0.0.0,52768
2012-07-06T01:10:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:34-03:00,info,appl
listen,17,0.0.0.0,52769
2012-07-06T01:10:34-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T01:10:34-03:00,info,appl
listen,17,0.0.0.0,52770
2012-07-06T01:10:34-03:00,info,appl
listen,17,0.0.0.0,52771
2012-07-06T01:10:35-03:00,info,appl
listen,17,0.0.0.0,52772
2012-07-06T01:10:35-03:00,info,appl
listen,17,0.0.0.0,52773
2012-07-06T01:10:36-03:00,info,appl
listen,17,0.0.0.0,52774
2012-07-06T01:10:36-03:00,info,appl
listen,17,0.0.0.0,52775

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:10:36-03:00,info,appl
listen,17,0.0.0.0,52776
2012-07-06T01:10:37-03:00,info,appl
listen,17,0.0.0.0,52777
2012-07-06T01:10:37-03:00,info,appl
listen,17,0.0.0.0,52778
2012-07-06T01:10:37-03:00,info,appl
listen,17,0.0.0.0,52779
2012-07-06T01:10:37-03:00,info,appl
listen,17,0.0.0.0,52780
2012-07-06T01:10:38-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:38-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:38-03:00,info,appl
listen,17,0.0.0.0,52781
2012-07-06T01:10:38-03:00,info,appl
listen,17,0.0.0.0,52782
2012-07-06T01:10:38-03:00,info,appl
listen,17,0.0.0.0,52783
2012-07-06T01:10:39-03:00,info,appl
listen,17,0.0.0.0,52784
2012-07-06T01:10:39-03:00,info,appl
listen,17,0.0.0.0,52785
2012-07-06T01:10:39-03:00,info,appl
listen,17,0.0.0.0,52786
2012-07-06T01:10:40-03:00,info,appl
listen,17,0.0.0.0,52787
2012-07-06T01:10:40-03:00,info,appl
listen,17,0.0.0.0,52788
2012-07-06T01:10:40-03:00,info,appl
listen,17,0.0.0.0,52789
2012-07-06T01:10:41-03:00,info,appl
listen,17,0.0.0.0,52790
2012-07-06T01:10:41-03:00,info,appl
listen,17,0.0.0.0,52791
2012-07-06T01:10:41-03:00,info,appl
listen,17,0.0.0.0,52792
2012-07-06T01:10:41-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:41-03:00,info,appl
listen,17,0.0.0.0,52793
2012-07-06T01:10:41-03:00,info,appl
listen,17,0.0.0.0,52794
2012-07-06T01:10:42-03:00,info,appl
listen,17,0.0.0.0,52795
2012-07-06T01:10:42-03:00,info,appl
listen,17,0.0.0.0,52796
2012-07-06T01:10:43-03:00,info,appl
listen,17,0.0.0.0,52797
2012-07-06T01:10:43-03:00,info,appl
listen,17,0.0.0.0,52798
2012-07-06T01:10:44-03:00,info,appl
listen,17,0.0.0.0,52799
2012-07-06T01:10:44-03:00,info,appl
listen,17,0.0.0.0,52800
2012-07-06T01:10:44-03:00,info,appl
listen,17,0.0.0.0,52801

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:10:44-03:00,info,appl
listen,17,0.0.0.0,52802
2012-07-06T01:10:45-03:00,info,appl
listen,17,0.0.0.0,52803
2012-07-06T01:10:45-03:00,info,appl
listen,17,0.0.0.0,52804
2012-07-06T01:10:46-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:46-03:00,info,appl
listen,17,0.0.0.0,52805
2012-07-06T01:10:46-03:00,info,appl
listen,17,0.0.0.0,52806
2012-07-06T01:10:46-03:00,info,appl
listen,17,0.0.0.0,52807
2012-07-06T01:10:47-03:00,info,appl
listen,17,0.0.0.0,52808
2012-07-06T01:10:47-03:00,info,appl
listen,17,0.0.0.0,52809
2012-07-06T01:10:47-03:00,info,appl
listen,17,0.0.0.0,52810
2012-07-06T01:10:48-03:00,info,appl
listen,17,0.0.0.0,52811
2012-07-06T01:10:48-03:00,info,appl
listen,17,0.0.0.0,52812
2012-07-06T01:10:48-03:00,info,appl
listen,17,0.0.0.0,52813
2012-07-06T01:10:49-03:00,info,appl
listen,17,0.0.0.0,52814
2012-07-06T01:10:49-03:00,info,appl
listen,17,0.0.0.0,52815
2012-07-06T01:10:49-03:00,info,appl
listen,17,0.0.0.0,52816
2012-07-06T01:10:49-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:49-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:49-03:00,info,appl
listen,17,0.0.0.0,52817
2012-07-06T01:10:49-03:00,info,appl
listen,17,0.0.0.0,52818
2012-07-06T01:10:50-03:00,info,appl
listen,17,0.0.0.0,52819
2012-07-06T01:10:50-03:00,info,appl
listen,17,0.0.0.0,52820
2012-07-06T01:10:51-03:00,info,appl
listen,17,0.0.0.0,52821
2012-07-06T01:10:51-03:00,info,appl
listen,17,0.0.0.0,52822
2012-07-06T01:10:52-03:00,info,appl
listen,17,0.0.0.0,52823
2012-07-06T01:10:52-03:00,info,appl
listen,17,0.0.0.0,52824
2012-07-06T01:10:52-03:00,info,appl
listen,17,0.0.0.0,52825
2012-07-06T01:10:52-03:00,info,appl
listen,17,0.0.0.0,52826
2012-07-06T01:10:53-03:00,info,appl
listen,17,0.0.0.0,52827

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:10:53-03:00,info,appl
listen,17,0.0.0.0,52828
2012-07-06T01:10:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:53-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:53-03:00,info,appl
listen,17,0.0.0.0,52829
2012-07-06T01:10:53-03:00,info,appl
listen,17,0.0.0.0,52830
2012-07-06T01:10:54-03:00,info,appl
listen,17,0.0.0.0,52831
2012-07-06T01:10:54-03:00,info,appl
listen,17,0.0.0.0,52832
2012-07-06T01:10:54-03:00,info,appl
send,17,10.200.0.5,389
2012-07-06T01:10:55-03:00,info,appl
listen,17,0.0.0.0,52833
2012-07-06T01:10:55-03:00,info,appl
listen,17,0.0.0.0,52834
2012-07-06T01:10:55-03:00,info,appl
listen,17,0.0.0.0,52835
2012-07-06T01:10:56-03:00,info,appl
listen,17,0.0.0.0,52836
2012-07-06T01:10:56-03:00,info,appl
listen,17,0.0.0.0,52837
2012-07-06T01:10:56-03:00,info,appl
listen,17,0.0.0.0,52838
2012-07-06T01:10:56-03:00,info,appl
listen,17,0.0.0.0,52839
2012-07-06T01:10:57-03:00,info,appl
listen,17,0.0.0.0,52840
2012-07-06T01:10:57-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:10:57-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:10:57-03:00,info,appl
listen,17,0.0.0.0,52841
2012-07-06T01:10:57-03:00,info,appl
listen,17,0.0.0.0,52842
2012-07-06T01:10:57-03:00,info,appl
listen,17,0.0.0.0,52843
2012-07-06T01:10:58-03:00,info,appl
listen,17,0.0.0.0,52844
2012-07-06T01:10:58-03:00,info,appl
listen,17,0.0.0.0,52845
2012-07-06T01:10:59-03:00,info,appl
listen,17,0.0.0.0,52846
2012-07-06T01:10:59-03:00,info,appl
listen,17,0.0.0.0,52847
2012-07-06T01:11:00-03:00,info,appl
listen,17,0.0.0.0,52848
2012-07-06T01:11:00-03:00,info,appl
listen,17,0.0.0.0,52849
2012-07-06T01:11:00-03:00,info,appl
listen,17,0.0.0.0,52850
2012-07-06T01:11:00-03:00,info,appl
listen,17,0.0.0.0,52851
2012-07-06T01:11:00-03:00,info,appl
listen,17,0.0.0.0,52852

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:11:01-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:11:01-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:11:01-03:00,info,appl
listen,17,0.0.0.0,52853
2012-07-06T01:11:01-03:00,info,appl
listen,17,0.0.0.0,52854
2012-07-06T01:11:02-03:00,info,appl
listen,17,0.0.0.0,52855
2012-07-06T01:11:02-03:00,info,appl
listen,17,0.0.0.0,52856
2012-07-06T01:11:03-03:00,info,appl
listen,17,0.0.0.0,52857
2012-07-06T01:11:03-03:00,info,appl
listen,17,0.0.0.0,52858
2012-07-06T01:11:03-03:00,info,appl
listen,17,0.0.0.0,52859
2012-07-06T01:11:04-03:00,info,appl
listen,17,0.0.0.0,52860
2012-07-06T01:11:04-03:00,info,appl
listen,17,0.0.0.0,52861
2012-07-06T01:11:04-03:00,info,appl
listen,17,0.0.0.0,52862
2012-07-06T01:11:04-03:00,info,appl
listen,17,0.0.0.0,52863
2012-07-06T01:11:05-03:00,info,appl
listen,17,0.0.0.0,52864
2012-07-06T01:11:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:11:05-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T01:11:05-03:00,info,appl
listen,17,0.0.0.0,52865
2012-07-06T01:11:05-03:00,info,appl
listen,17,0.0.0.0,52866
2012-07-06T01:11:05-03:00,info,appl
listen,17,0.0.0.0,52867
2012-07-06T01:11:06-03:00,info,appl
listen,17,0.0.0.0,52868
2012-07-06T01:11:06-03:00,info,appl
listen,17,0.0.0.0,52869
2012-07-06T01:11:07-03:00,info,appl
listen,17,0.0.0.0,52870
2012-07-06T01:11:07-03:00,info,appl
listen,17,0.0.0.0,52871
2012-07-06T01:11:08-03:00,info,appl
listen,17,0.0.0.0,52872
2012-07-06T01:11:08-03:00,info,appl
listen,17,0.0.0.0,52873
2012-07-06T01:11:08-03:00,info,appl
listen,17,0.0.0.0,52874
2012-07-06T01:11:08-03:00,info,appl
listen,17,0.0.0.0,52875
2012-07-06T01:11:08-03:00,info,appl
listen,17,0.0.0.0,52876
2012-07-06T01:11:09-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T01:11:09-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T01:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52877
2012-07-06T01:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52878
2012-07-06T01:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52879
2012-07-06T01:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52880
2012-07-06T01:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52881
2012-07-06T01:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52882
2012-07-06T01:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52883
2012-07-06T01:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52884
2012-07-06T01:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52885
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52886
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52887
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52888
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52889
2012-07-06T01:11:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52890
2012-07-06T01:11:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52891
2012-07-06T01:11:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52892
2012-07-06T01:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52893
2012-07-06T01:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.203.0.11,389
2012-07-06T01:11:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52894
2012-07-06T01:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52895
2012-07-06T01:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52896
2012-07-06T01:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52897
2012-07-06T01:11:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52898
2012-07-06T01:11:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52899
2012-07-06T01:11:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52900
2012-07-06T01:12:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:12:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:13:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-06T01:13:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:14:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:14:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52901
2012-07-06T01:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52902
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65228
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65229
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57334
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57335
2012-07-06T01:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57336
2012-07-06T01:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57337
2012-07-06T01:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57338
2012-07-06T01:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57339
2012-07-06T01:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57340
2012-07-06T01:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57341
2012-07-06T01:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57342
2012-07-06T01:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57343
2012-07-06T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57344
2012-07-06T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57345
2012-07-06T01:14:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57346
2012-07-06T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57347
2012-07-06T01:14:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57348
2012-07-06T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57349
2012-07-06T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57350

2012-07-06T01:14:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57351
2012-07-06T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57352
2012-07-06T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57353
2012-07-06T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57354
2012-07-06T01:14:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57355
2012-07-06T01:15:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,65198
2012-07-06T01:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,61250
2012-07-06T01:17:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,63299
2012-07-06T01:18:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,3074
2012-07-06T01:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,61431
2012-07-06T01:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65191
2012-07-06T01:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:19:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54451
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54452
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T01:19:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:19:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54453
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54454
2012-07-06T01:19:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54455
2012-07-06T01:19:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54456
2012-07-06T01:19:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54457
2012-07-06T01:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54458
2012-07-06T01:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54459
2012-07-06T01:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54460
2012-07-06T01:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54461
2012-07-06T01:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54462
2012-07-06T01:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54463
2012-07-06T01:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54464

2012-07-06T01:19:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:19:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:20:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:20:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,55629
2012-07-06T01:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:22:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,64015
2012-07-06T01:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,4698
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54465
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54466
2012-07-06T01:23:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54467
2012-07-06T01:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54468
2012-07-06T01:23:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54469
2012-07-06T01:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54470
2012-07-06T01:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54471
2012-07-06T01:23:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54472
2012-07-06T01:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54473
2012-07-06T01:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54474
2012-07-06T01:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54475
2012-07-06T01:23:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54476
2012-07-06T01:23:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54477
2012-07-06T01:24:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:24:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54478
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54479
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52946
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:24:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52947
2012-07-06T01:24:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60638
2012-07-06T01:24:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60639
2012-07-06T01:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60640
2012-07-06T01:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60641
2012-07-06T01:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60642
2012-07-06T01:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60643
2012-07-06T01:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60644
2012-07-06T01:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60645
2012-07-06T01:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60646
2012-07-06T01:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60647
2012-07-06T01:26:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.66,4285
2012-07-06T01:26:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:26:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:27:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:27:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.185,2670
2012-07-06T01:27:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:29:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:29:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60648
2012-07-06T01:29:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60649
2012-07-06T01:29:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60650
2012-07-06T01:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60651
2012-07-06T01:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60652

2012-07-06T01:29:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60653
2012-07-06T01:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60654
2012-07-06T01:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60655
2012-07-06T01:29:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60656
2012-07-06T01:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60657
2012-07-06T01:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60658
2012-07-06T01:29:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60659
2012-07-06T01:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60660
2012-07-06T01:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60661
2012-07-06T01:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60662
2012-07-06T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60663
2012-07-06T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60664
2012-07-06T01:29:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60665
2012-07-06T01:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60666
2012-07-06T01:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60667
2012-07-06T01:29:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60668
2012-07-06T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60669
2012-07-06T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60670
2012-07-06T01:29:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60671
2012-07-06T01:31:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,4997
2012-07-06T01:33:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:33:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:34:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,4686
2012-07-06T01:34:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:34:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60672
2012-07-06T01:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389

2012-07-06T01:34:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60673
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63868
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63869
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50557
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:34:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50558
2012-07-06T01:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50559
2012-07-06T01:34:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50560
2012-07-06T01:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50561
2012-07-06T01:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50562
2012-07-06T01:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50563
2012-07-06T01:34:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50564
2012-07-06T01:34:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50565
2012-07-06T01:34:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50566
2012-07-06T01:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:34:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:37:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,2610
2012-07-06T01:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,3634
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63515
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63516
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63517
2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60751

2012-07-06T01:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60752
2012-07-06T01:38:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58218
2012-07-06T01:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58219
2012-07-06T01:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58220
2012-07-06T01:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58221
2012-07-06T01:38:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57767
2012-07-06T01:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57768
2012-07-06T01:38:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49344
2012-07-06T01:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49345
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56057
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56058
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58873
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58874
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65004
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65005
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51158
2012-07-06T01:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51159
2012-07-06T01:39:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.229,58730
2012-07-06T01:39:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:39:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51160
2012-07-06T01:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51161
2012-07-06T01:39:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51162
2012-07-06T01:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51163
2012-07-06T01:39:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51164
2012-07-06T01:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51165
2012-07-06T01:39:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51166
2012-07-06T01:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51167

2012-07-06T01:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51168
2012-07-06T01:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51169
2012-07-06T01:39:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51170
2012-07-06T01:39:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51171
2012-07-06T01:40:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:40:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:41:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:42:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,3559
2012-07-06T01:44:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:44:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51172
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51173
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63023
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63024
2012-07-06T01:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54639
2012-07-06T01:44:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54640
2012-07-06T01:44:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54641
2012-07-06T01:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54642
2012-07-06T01:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54643
2012-07-06T01:44:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54644
2012-07-06T01:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54645
2012-07-06T01:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54646
2012-07-06T01:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54647
2012-07-06T01:44:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54648
2012-07-06T01:44:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-06T01:44:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54649
2012-07-06T01:44:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54650
2012-07-06T01:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54651
2012-07-06T01:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54652
2012-07-06T01:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54653
2012-07-06T01:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54654
2012-07-06T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54655
2012-07-06T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54656
2012-07-06T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54657
2012-07-06T01:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54658
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54659
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54660
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53570
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53571
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53572
2012-07-06T01:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53573
2012-07-06T01:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53574
2012-07-06T01:44:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53575
2012-07-06T01:44:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53576
2012-07-06T01:44:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53577
2012-07-06T01:44:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53578
2012-07-06T01:44:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53579
2012-07-06T01:44:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53580
2012-07-06T01:44:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53581
2012-07-06T01:44:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53582
2012-07-06T01:44:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53583
2012-07-06T01:45:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,2645
2012-07-06T01:46:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,62038
2012-07-06T01:47:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.67,55954

2012-07-06T01:48:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:48:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:48:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,2837
2012-07-06T01:48:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:48:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.142,2130
2012-07-06T01:49:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:49:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:49:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53584
2012-07-06T01:49:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53585
2012-07-06T01:49:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53586
2012-07-06T01:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53587
2012-07-06T01:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53588
2012-07-06T01:49:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53589
2012-07-06T01:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53590
2012-07-06T01:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53591
2012-07-06T01:49:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53592
2012-07-06T01:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53593
2012-07-06T01:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53594
2012-07-06T01:49:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53595
2012-07-06T01:49:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,2238
2012-07-06T01:50:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,59909
2012-07-06T01:51:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,3071
2012-07-06T01:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T01:53:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,56282
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53596

2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53597
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53598
2012-07-06T01:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53599
2012-07-06T01:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53600
2012-07-06T01:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53601
2012-07-06T01:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53602
2012-07-06T01:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53603
2012-07-06T01:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53604
2012-07-06T01:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53605
2012-07-06T01:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53606
2012-07-06T01:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53607
2012-07-06T01:53:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53608
2012-07-06T01:54:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:54:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53609
2012-07-06T01:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:54:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53610
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52442
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52443
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49698
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T01:54:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49699
2012-07-06T01:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49700
2012-07-06T01:54:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49701
2012-07-06T01:54:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49702
2012-07-06T01:54:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49703

2012-07-06T01:54:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49704
2012-07-06T01:54:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49705
2012-07-06T01:54:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49706
2012-07-06T01:54:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49707
2012-07-06T01:55:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T01:55:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:55:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:56:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T01:57:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,53715
2012-07-06T01:57:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.187,55856
2012-07-06T01:59:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T01:59:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49708
2012-07-06T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T01:59:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49709
2012-07-06T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49710
2012-07-06T01:59:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49711
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49712
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49713
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49714
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49715
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49716
2012-07-06T01:59:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49717
2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49718
2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49719
2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49720
2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49721
2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49722

2012-07-06T01:59:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49723
2012-07-06T01:59:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49724
2012-07-06T01:59:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49725
2012-07-06T01:59:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49726
2012-07-06T01:59:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49727
2012-07-06T01:59:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49728
2012-07-06T01:59:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49729
2012-07-06T01:59:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49730
2012-07-06T01:59:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49731
2012-07-06T02:02:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:02:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:02:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:03:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:04:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.151,58848
2012-07-06T02:04:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:04:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49732
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49733
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51606
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:04:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51607
2012-07-06T02:04:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50233
2012-07-06T02:04:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50234
2012-07-06T02:04:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50235
2012-07-06T02:04:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50236
2012-07-06T02:04:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50237
2012-07-06T02:04:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50238

2012-07-06T02:04:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50239
2012-07-06T02:04:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50240
2012-07-06T02:04:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50241
2012-07-06T02:04:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50242
2012-07-06T02:05:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.0,4748
2012-07-06T02:07:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:07:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:07:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,64151
2012-07-06T02:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T02:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50243
2012-07-06T02:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50244
2012-07-06T02:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50245
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50246
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61364
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61365
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59811
2012-07-06T02:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59812
2012-07-06T02:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59813
2012-07-06T02:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59814
2012-07-06T02:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59815
2012-07-06T02:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59816
2012-07-06T02:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59817
2012-07-06T02:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59818
2012-07-06T02:09:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:09:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:09:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:09:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-06T02:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59819
2012-07-06T02:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59820
2012-07-06T02:09:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59821
2012-07-06T02:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59822
2012-07-06T02:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59823
2012-07-06T02:09:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59824
2012-07-06T02:09:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59825
2012-07-06T02:09:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59826
2012-07-06T02:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59827
2012-07-06T02:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59828
2012-07-06T02:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59829
2012-07-06T02:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59830
2012-07-06T02:09:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:10:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:12:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,65150
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59831
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59832
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57026
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:14:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57027
2012-07-06T02:14:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51802
2012-07-06T02:14:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51803
2012-07-06T02:14:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51804
2012-07-06T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51805
2012-07-06T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51806

2012-07-06T02:14:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51807
2012-07-06T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51808
2012-07-06T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51809
2012-07-06T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51810
2012-07-06T02:14:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51811
2012-07-06T02:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51812
2012-07-06T02:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:14:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:14:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51813
2012-07-06T02:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51814
2012-07-06T02:14:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51815
2012-07-06T02:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51816
2012-07-06T02:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51817
2012-07-06T02:14:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51818
2012-07-06T02:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51819
2012-07-06T02:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51820
2012-07-06T02:14:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51821
2012-07-06T02:14:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51822
2012-07-06T02:14:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51823
2012-07-06T02:14:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51824
2012-07-06T02:15:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.237,53448
2012-07-06T02:16:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.122,62160
2012-07-06T02:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:16:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:17:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:17:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:19:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:19:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-06T02:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51825
2012-07-06T02:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:19:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51826
2012-07-06T02:19:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51827
2012-07-06T02:19:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51828
2012-07-06T02:19:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51829
2012-07-06T02:19:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51830
2012-07-06T02:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51831
2012-07-06T02:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51832
2012-07-06T02:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51833
2012-07-06T02:19:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51834
2012-07-06T02:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51835
2012-07-06T02:20:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51836
2012-07-06T02:21:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49681
2012-07-06T02:21:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:21:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55880
2012-07-06T02:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:22:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:23:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:23:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55881
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55882
2012-07-06T02:23:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55883
2012-07-06T02:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55884
2012-07-06T02:23:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55885
2012-07-06T02:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55886
2012-07-06T02:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55887

2012-07-06T02:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55888
2012-07-06T02:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55889
2012-07-06T02:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55890
2012-07-06T02:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55891
2012-07-06T02:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55892
2012-07-06T02:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55893
2012-07-06T02:24:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:24:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,61699
2012-07-06T02:24:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:25:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:25:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55894
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55895
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60514
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:25:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60515
2012-07-06T02:25:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55198
2012-07-06T02:25:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55199
2012-07-06T02:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55200
2012-07-06T02:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55201
2012-07-06T02:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55202
2012-07-06T02:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55203
2012-07-06T02:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55204
2012-07-06T02:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55205
2012-07-06T02:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55206
2012-07-06T02:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55207
2012-07-06T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-06T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55208
2012-07-06T02:29:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:29:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55209
2012-07-06T02:29:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55210
2012-07-06T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55211
2012-07-06T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55212
2012-07-06T02:29:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55213
2012-07-06T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55214
2012-07-06T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55215
2012-07-06T02:29:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55216
2012-07-06T02:29:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55217
2012-07-06T02:29:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55218
2012-07-06T02:29:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55219
2012-07-06T02:30:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:30:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55220
2012-07-06T02:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55221
2012-07-06T02:30:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55222
2012-07-06T02:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55223
2012-07-06T02:30:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55224
2012-07-06T02:30:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55225
2012-07-06T02:30:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55226
2012-07-06T02:30:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55227
2012-07-06T02:30:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55228
2012-07-06T02:30:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55229
2012-07-06T02:30:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55230
2012-07-06T02:30:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55231
2012-07-06T02:30:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:30:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547

2012-07-06T02:31:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:31:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:35:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:35:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55232
2012-07-06T02:35:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:35:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55233
2012-07-06T02:35:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58811
2012-07-06T02:35:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:35:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58812
2012-07-06T02:35:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60924
2012-07-06T02:35:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60925
2012-07-06T02:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60926
2012-07-06T02:35:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60927
2012-07-06T02:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60928
2012-07-06T02:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60929
2012-07-06T02:35:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60930
2012-07-06T02:35:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60931
2012-07-06T02:35:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60932
2012-07-06T02:35:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60933
2012-07-06T02:36:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,1931
2012-07-06T02:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:37:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,4693

2012-07-06T02:38:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,2689
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52944
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52945
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:38:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52946
2012-07-06T02:38:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55624
2012-07-06T02:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55625
2012-07-06T02:38:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:38:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55626
2012-07-06T02:38:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55627
2012-07-06T02:38:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50622
2012-07-06T02:38:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50623
2012-07-06T02:38:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63332
2012-07-06T02:38:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63333
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55646
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55647
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58877
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58878
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52270
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52271
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57142
2012-07-06T02:38:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57143
2012-07-06T02:38:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59546
2012-07-06T02:38:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59547
2012-07-06T02:40:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:40:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025

2012-07-06T02:40:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:40:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59548
2012-07-06T02:40:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:40:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59549
2012-07-06T02:40:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59550
2012-07-06T02:40:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59551
2012-07-06T02:40:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,65026
2012-07-06T02:40:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59552
2012-07-06T02:40:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59553
2012-07-06T02:40:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59554
2012-07-06T02:40:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59555
2012-07-06T02:40:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59556
2012-07-06T02:40:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59557
2012-07-06T02:40:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59558
2012-07-06T02:40:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59559
2012-07-06T02:41:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,3015
2012-07-06T02:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,50482
2012-07-06T02:43:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.159,49801
2012-07-06T02:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:44:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54049
2012-07-06T02:44:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54050
2012-07-06T02:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T02:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54051
2012-07-06T02:44:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60735
2012-07-06T02:44:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60736
2012-07-06T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60737
2012-07-06T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60738
2012-07-06T02:44:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60739

2012-07-06T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60740
2012-07-06T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60741
2012-07-06T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60742
2012-07-06T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60743
2012-07-06T02:44:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60744
2012-07-06T02:44:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,53158
2012-07-06T02:45:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:45:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:45:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51761
2012-07-06T02:45:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54826
2012-07-06T02:45:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:45:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54827
2012-07-06T02:45:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51996
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51997
2012-07-06T02:45:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T02:45:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56414
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56415
2012-07-06T02:45:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56416
2012-07-06T02:45:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54367
2012-07-06T02:45:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54368
2012-07-06T02:45:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54369
2012-07-06T02:45:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54370
2012-07-06T02:45:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54371
2012-07-06T02:45:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54372
2012-07-06T02:45:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54373

2012-07-06T02:45:19-03:00,info,appl
listen,17,0.0.0.0,54374
2012-07-06T02:45:19-03:00,info,appl
listen,17,0.0.0.0,54375
2012-07-06T02:45:19-03:00,info,appl
listen,17,0.0.0.0,54376
2012-07-06T02:45:24-03:00,info,appl
w,listen,17,0.0.0.0,60197
2012-07-06T02:45:24-03:00,info,appl
w,listen,17,0.0.0.0,60111
2012-07-06T02:45:24-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:45:31-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T02:45:36-03:00,info,appl
w,listen,17,0.0.0.0,58682
2012-07-06T02:45:36-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T02:45:36-03:00,info,appl
listen,17,0.0.0.0,58683
2012-07-06T02:45:36-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T02:45:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:45:36-03:00,info,appl
w,listen,17,0.0.0.0,54562
2012-07-06T02:45:36-03:00,info,appl
listen,17,0.0.0.0,54563
2012-07-06T02:45:37-03:00,info,appl
listen,17,0.0.0.0,54564
2012-07-06T02:45:37-03:00,info,appl
w,listen,17,0.0.0.0,53102
2012-07-06T02:45:37-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:45:37-03:00,info,appl
listen,17,0.0.0.0,53103
2012-07-06T02:45:38-03:00,info,appl
listen,17,0.0.0.0,53104
2012-07-06T02:45:38-03:00,info,appl
listen,17,0.0.0.0,53105
2012-07-06T02:45:39-03:00,info,appl
listen,17,0.0.0.0,53106
2012-07-06T02:45:39-03:00,info,appl
listen,17,0.0.0.0,53107
2012-07-06T02:45:39-03:00,info,appl
listen,17,0.0.0.0,53108
2012-07-06T02:45:39-03:00,info,appl
listen,17,0.0.0.0,53109
2012-07-06T02:45:40-03:00,info,appl
listen,17,0.0.0.0,53110
2012-07-06T02:45:40-03:00,info,appl
listen,17,0.0.0.0,53111
2012-07-06T02:46:03-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T02:49:16-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T02:49:16-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:16-03:00,info,appl
connect out,6,10.10.0.11,88

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:49:16-03:00,info,appl
w,listen,17,0.0.0.0,54828
2012-07-06T02:49:16-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T02:49:16-03:00,info,appl
listen,17,0.0.0.0,54829
2012-07-06T02:49:16-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T02:49:16-03:00,info,appl
listen,17,0.0.0.0,54830
2012-07-06T02:49:17-03:00,info,appl
w,listen,17,0.0.0.0,57297
2012-07-06T02:49:17-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:17-03:00,info,appl
listen,17,0.0.0.0,57298
2012-07-06T02:49:18-03:00,info,appl
listen,17,0.0.0.0,57299
2012-07-06T02:49:18-03:00,info,appl
listen,17,0.0.0.0,57300
2012-07-06T02:49:18-03:00,info,appl
listen,17,0.0.0.0,57301
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,57302
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,57303
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,57304
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,57305
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,57306
2012-07-06T02:49:19-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:19-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:19-03:00,info,appl
w,listen,17,0.0.0.0,65531
2012-07-06T02:49:19-03:00,info,appl
listen,17,0.0.0.0,65532
2012-07-06T02:49:20-03:00,info,appl
listen,17,0.0.0.0,65533
2012-07-06T02:49:20-03:00,info,appl
w,listen,17,0.0.0.0,58230
2012-07-06T02:49:20-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:20-03:00,info,appl
listen,17,0.0.0.0,58231
2012-07-06T02:49:21-03:00,info,appl
listen,17,0.0.0.0,58232
2012-07-06T02:49:21-03:00,info,appl
listen,17,0.0.0.0,58233
2012-07-06T02:49:22-03:00,info,appl
listen,17,0.0.0.0,58234
2012-07-06T02:49:22-03:00,info,appl
listen,17,0.0.0.0,58235
2012-07-06T02:49:22-03:00,info,appl
listen,17,0.0.0.0,58236
2012-07-06T02:49:22-03:00,info,appl
listen,17,0.0.0.0,58237

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:49:22-03:00,info,appl
listen,17,0.0.0.0,58238
2012-07-06T02:49:23-03:00,info,appl
listen,17,0.0.0.0,58239
2012-07-06T02:49:23-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:23-03:00,info,appl
w,listen,17,0.0.0.0,54675
2012-07-06T02:49:23-03:00,info,appl
listen,17,0.0.0.0,54676
2012-07-06T02:49:23-03:00,info,appl
listen,17,0.0.0.0,54677
2012-07-06T02:49:24-03:00,info,appl
w,listen,17,0.0.0.0,55013
2012-07-06T02:49:24-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:24-03:00,info,appl
listen,17,0.0.0.0,55014
2012-07-06T02:49:24-03:00,info,appl
listen,17,0.0.0.0,55015
2012-07-06T02:49:25-03:00,info,appl
listen,17,0.0.0.0,55016
2012-07-06T02:49:25-03:00,info,appl
listen,17,0.0.0.0,55017
2012-07-06T02:49:25-03:00,info,appl
listen,17,0.0.0.0,55018
2012-07-06T02:49:25-03:00,info,appl
listen,17,0.0.0.0,55019
2012-07-06T02:49:26-03:00,info,appl
listen,17,0.0.0.0,55020
2012-07-06T02:49:26-03:00,info,appl
listen,17,0.0.0.0,55021
2012-07-06T02:49:26-03:00,info,appl
listen,17,0.0.0.0,55022
2012-07-06T02:49:26-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:26-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:26-03:00,info,appl
w,listen,17,0.0.0.0,55351
2012-07-06T02:49:26-03:00,info,appl
listen,17,0.0.0.0,55352
2012-07-06T02:49:27-03:00,info,appl
listen,17,0.0.0.0,55353
2012-07-06T02:49:27-03:00,info,appl
w,listen,17,0.0.0.0,58525
2012-07-06T02:49:27-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:27-03:00,info,appl
listen,17,0.0.0.0,58526
2012-07-06T02:49:28-03:00,info,appl
listen,17,0.0.0.0,58527
2012-07-06T02:49:28-03:00,info,appl
listen,17,0.0.0.0,58528
2012-07-06T02:49:28-03:00,info,appl
listen,17,0.0.0.0,58529
2012-07-06T02:49:29-03:00,info,appl
listen,17,0.0.0.0,58530

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:49:29-03:00,info,appl
listen,17,0.0.0.0,58531
2012-07-06T02:49:29-03:00,info,appl
listen,17,0.0.0.0,58532
2012-07-06T02:49:29-03:00,info,appl
listen,17,0.0.0.0,58533
2012-07-06T02:49:29-03:00,info,appl
listen,17,0.0.0.0,58534
2012-07-06T02:49:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:30-03:00,info,appl
w,listen,17,0.0.0.0,56963
2012-07-06T02:49:30-03:00,info,appl
listen,17,0.0.0.0,56964
2012-07-06T02:49:30-03:00,info,appl
listen,17,0.0.0.0,56965
2012-07-06T02:49:31-03:00,info,appl
w,listen,17,0.0.0.0,59868
2012-07-06T02:49:31-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:31-03:00,info,appl
listen,17,0.0.0.0,59869
2012-07-06T02:49:31-03:00,info,appl
listen,17,0.0.0.0,59870
2012-07-06T02:49:32-03:00,info,appl
listen,17,0.0.0.0,59871
2012-07-06T02:49:32-03:00,info,appl
listen,17,0.0.0.0,59872
2012-07-06T02:49:32-03:00,info,appl
listen,17,0.0.0.0,59873
2012-07-06T02:49:33-03:00,info,appl
listen,17,0.0.0.0,59874
2012-07-06T02:49:33-03:00,info,appl
listen,17,0.0.0.0,59875
2012-07-06T02:49:33-03:00,info,appl
listen,17,0.0.0.0,59876
2012-07-06T02:49:33-03:00,info,appl
listen,17,0.0.0.0,59877
2012-07-06T02:49:33-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:33-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:33-03:00,info,appl
w,listen,17,0.0.0.0,64970
2012-07-06T02:49:33-03:00,info,appl
listen,17,0.0.0.0,64971
2012-07-06T02:49:34-03:00,info,appl
listen,17,0.0.0.0,64972
2012-07-06T02:49:34-03:00,info,appl
w,listen,17,0.0.0.0,61006
2012-07-06T02:49:34-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:34-03:00,info,appl
listen,17,0.0.0.0,61007
2012-07-06T02:49:35-03:00,info,appl
listen,17,0.0.0.0,61008
2012-07-06T02:49:35-03:00,info,appl
listen,17,0.0.0.0,61009

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:49:36-03:00,info,appl
listen,17,0.0.0.0,61010
2012-07-06T02:49:36-03:00,info,appl
listen,17,0.0.0.0,61011
2012-07-06T02:49:36-03:00,info,appl
send,17,10.102.0.20,389
2012-07-06T02:49:36-03:00,info,appl
listen,17,0.0.0.0,61012
2012-07-06T02:49:36-03:00,info,appl
listen,17,0.0.0.0,61013
2012-07-06T02:49:36-03:00,info,appl
listen,17,0.0.0.0,61014
2012-07-06T02:49:37-03:00,info,appl
listen,17,0.0.0.0,61015
2012-07-06T02:49:37-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:37-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:37-03:00,info,appl
w,listen,17,0.0.0.0,62674
2012-07-06T02:49:37-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T02:49:37-03:00,info,appl
listen,17,0.0.0.0,62675
2012-07-06T02:49:37-03:00,info,appl
listen,17,0.0.0.0,62676
2012-07-06T02:49:38-03:00,info,appl
w,listen,17,0.0.0.0,63717
2012-07-06T02:49:38-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:38-03:00,info,appl
listen,17,0.0.0.0,63718
2012-07-06T02:49:38-03:00,info,appl
listen,17,0.0.0.0,63719
2012-07-06T02:49:39-03:00,info,appl
listen,17,0.0.0.0,63720
2012-07-06T02:49:39-03:00,info,appl
listen,17,0.0.0.0,63721
2012-07-06T02:49:39-03:00,info,appl
listen,17,0.0.0.0,63722
2012-07-06T02:49:39-03:00,info,appl
listen,17,0.0.0.0,63723
2012-07-06T02:49:40-03:00,info,appl
listen,17,0.0.0.0,63724
2012-07-06T02:49:40-03:00,info,appl
listen,17,0.0.0.0,63725
2012-07-06T02:49:40-03:00,info,appl
listen,17,0.0.0.0,63726
2012-07-06T02:49:40-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:40-03:00,info,appl
w,listen,17,0.0.0.0,59833
2012-07-06T02:49:40-03:00,info,appl
listen,17,0.0.0.0,59834
2012-07-06T02:49:40-03:00,info,appl
listen,17,0.0.0.0,59835
2012-07-06T02:49:41-03:00,info,appl
w,listen,17,0.0.0.0,57451

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

2012-07-06T02:49:41-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:41-03:00,info,appl
listen,17,0.0.0.0,57452
2012-07-06T02:49:41-03:00,info,appl
listen,17,0.0.0.0,57453
2012-07-06T02:49:42-03:00,info,appl
listen,17,0.0.0.0,57454
2012-07-06T02:49:42-03:00,info,appl
listen,17,0.0.0.0,57455
2012-07-06T02:49:42-03:00,info,appl
listen,17,0.0.0.0,57456
2012-07-06T02:49:43-03:00,info,appl
listen,17,0.0.0.0,57457
2012-07-06T02:49:43-03:00,info,appl
listen,17,0.0.0.0,57458
2012-07-06T02:49:43-03:00,info,appl
listen,17,0.0.0.0,57459
2012-07-06T02:49:43-03:00,info,appl
listen,17,0.0.0.0,57460
2012-07-06T02:49:44-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:44-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:44-03:00,info,appl
w,listen,17,0.0.0.0,50872
2012-07-06T02:49:44-03:00,info,appl
listen,17,0.0.0.0,50873
2012-07-06T02:49:44-03:00,info,appl
listen,17,0.0.0.0,50874
2012-07-06T02:49:45-03:00,info,appl
w,listen,17,0.0.0.0,62767
2012-07-06T02:49:45-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:45-03:00,info,appl
listen,17,0.0.0.0,62768
2012-07-06T02:49:45-03:00,info,appl
listen,17,0.0.0.0,62769
2012-07-06T02:49:46-03:00,info,appl
listen,17,0.0.0.0,62770
2012-07-06T02:49:46-03:00,info,appl
listen,17,0.0.0.0,62771
2012-07-06T02:49:46-03:00,info,appl
listen,17,0.0.0.0,62772
2012-07-06T02:49:47-03:00,info,appl
listen,17,0.0.0.0,62773
2012-07-06T02:49:47-03:00,info,appl
listen,17,0.0.0.0,62774
2012-07-06T02:49:47-03:00,info,appl
listen,17,0.0.0.0,62775
2012-07-06T02:49:47-03:00,info,appl
listen,17,0.0.0.0,62776
2012-07-06T02:49:47-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:47-03:00,info,appl
w,listen,17,0.0.0.0,53516
2012-07-06T02:49:47-03:00,info,appl
listen,17,0.0.0.0,53517

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:49:48-03:00,info,appl
listen,17,0.0.0.0,53518
2012-07-06T02:49:48-03:00,info,appl
w,listen,17,0.0.0.0,62819
2012-07-06T02:49:48-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:48-03:00,info,appl
listen,17,0.0.0.0,62820
2012-07-06T02:49:49-03:00,info,appl
listen,17,0.0.0.0,62821
2012-07-06T02:49:49-03:00,info,appl
listen,17,0.0.0.0,62822
2012-07-06T02:49:50-03:00,info,appl
listen,17,0.0.0.0,62823
2012-07-06T02:49:50-03:00,info,appl
listen,17,0.0.0.0,62824
2012-07-06T02:49:50-03:00,info,appl
listen,17,0.0.0.0,62825
2012-07-06T02:49:50-03:00,info,appl
listen,17,0.0.0.0,62826
2012-07-06T02:49:50-03:00,info,appl
listen,17,0.0.0.0,62827
2012-07-06T02:49:51-03:00,info,appl
listen,17,0.0.0.0,62828
2012-07-06T02:49:51-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:49:51-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:49:51-03:00,info,appl
w,listen,17,0.0.0.0,62439
2012-07-06T02:49:51-03:00,info,appl
listen,17,0.0.0.0,62440
2012-07-06T02:49:51-03:00,info,appl
listen,17,0.0.0.0,62441
2012-07-06T02:49:52-03:00,info,appl
w,listen,17,0.0.0.0,54454
2012-07-06T02:49:52-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:49:52-03:00,info,appl
listen,17,0.0.0.0,54455
2012-07-06T02:49:52-03:00,info,appl
listen,17,0.0.0.0,54456
2012-07-06T02:49:52-03:00,info,appl
listen,17,0.0.0.0,54457
2012-07-06T02:49:53-03:00,info,appl
listen,17,0.0.0.0,54458
2012-07-06T02:49:53-03:00,info,appl
listen,17,0.0.0.0,54459
2012-07-06T02:49:53-03:00,info,appl
listen,17,0.0.0.0,54460
2012-07-06T02:49:53-03:00,info,appl
listen,17,0.0.0.0,54461
2012-07-06T02:49:54-03:00,info,appl
listen,17,0.0.0.0,54462
2012-07-06T02:49:54-03:00,info,appl
listen,17,0.0.0.0,54463
2012-07-06T02:49:58-03:00,info,appl
w,listen,17,0.0.0.0,57280
2012-07-06T02:49:58-03:00,info,appl
w,send,17,10.10.0.11,53

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-06T02:49:59-03:00,info,appl
w,listen,17,0.0.0.0,64361
2012-07-06T02:49:59-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:06-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T02:50:06-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:50:06-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:50:06-03:00,info,appl
w,listen,17,0.0.0.0,64489
2012-07-06T02:50:06-03:00,info,appl
listen,17,0.0.0.0,64490
2012-07-06T02:50:06-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T02:50:06-03:00,info,appl
listen,17,0.0.0.0,64491
2012-07-06T02:50:07-03:00,info,appl
w,listen,17,0.0.0.0,54141
2012-07-06T02:50:07-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:07-03:00,info,appl
listen,17,0.0.0.0,54142
2012-07-06T02:50:07-03:00,info,appl
listen,17,0.0.0.0,54143
2012-07-06T02:50:07-03:00,info,appl
listen,17,0.0.0.0,54144
2012-07-06T02:50:08-03:00,info,appl
listen,17,0.0.0.0,54145
2012-07-06T02:50:08-03:00,info,appl
listen,17,0.0.0.0,54146
2012-07-06T02:50:08-03:00,info,appl
listen,17,0.0.0.0,54147
2012-07-06T02:50:08-03:00,info,appl
listen,17,0.0.0.0,54148
2012-07-06T02:50:09-03:00,info,appl
listen,17,0.0.0.0,54149
2012-07-06T02:50:09-03:00,info,appl
listen,17,0.0.0.0,54150
2012-07-06T02:50:14-03:00,info,appl
w,listen,17,0.0.0.0,54148
2012-07-06T02:50:14-03:00,info,appl
w,listen,17,0.0.0.0,51577
2012-07-06T02:50:14-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:21-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T02:50:21-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:50:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:50:21-03:00,info,appl
w,listen,17,0.0.0.0,50134
2012-07-06T02:50:21-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T02:50:21-03:00,info,appl
listen,17,0.0.0.0,50135
2012-07-06T02:50:22-03:00,info,appl
listen,17,0.0.0.0,50136

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:50:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60030
2012-07-06T02:50:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60031
2012-07-06T02:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60032
2012-07-06T02:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60033
2012-07-06T02:50:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60034
2012-07-06T02:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60035
2012-07-06T02:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60036
2012-07-06T02:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60037
2012-07-06T02:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60038
2012-07-06T02:50:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60039
2012-07-06T02:50:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53176
2012-07-06T02:50:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55973
2012-07-06T02:50:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T02:50:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T02:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:50:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59196
2012-07-06T02:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59197
2012-07-06T02:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:50:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59198
2012-07-06T02:50:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57346
2012-07-06T02:50:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57347
2012-07-06T02:50:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57348
2012-07-06T02:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57349
2012-07-06T02:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57350
2012-07-06T02:50:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57351
2012-07-06T02:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57352
2012-07-06T02:50:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57353

2012-07-06T02:50:34-03:00,info,appl
listen,17,0.0.0.0,57354
2012-07-06T02:50:34-03:00,info,appl
listen,17,0.0.0.0,57355
2012-07-06T02:50:36-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T02:50:36-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T02:50:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:50:36-03:00,info,appl
w,listen,17,0.0.0.0,60760
2012-07-06T02:50:36-03:00,info,appl
listen,17,0.0.0.0,60761
2012-07-06T02:50:37-03:00,info,appl
listen,17,0.0.0.0,60762
2012-07-06T02:50:37-03:00,info,appl
w,listen,17,0.0.0.0,49576
2012-07-06T02:50:37-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:37-03:00,info,appl
listen,17,0.0.0.0,49577
2012-07-06T02:50:38-03:00,info,appl
listen,17,0.0.0.0,49578
2012-07-06T02:50:38-03:00,info,appl
listen,17,0.0.0.0,49579
2012-07-06T02:50:38-03:00,info,appl
listen,17,0.0.0.0,49580
2012-07-06T02:50:38-03:00,info,appl
listen,17,0.0.0.0,49581
2012-07-06T02:50:39-03:00,info,appl
w,listen,17,0.0.0.0,60065
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,60066
2012-07-06T02:50:39-03:00,info,appl
w,listen,17,0.0.0.0,57270
2012-07-06T02:50:39-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,57271
2012-07-06T02:50:39-03:00,info,appl
w,listen,17,0.0.0.0,63066
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,63067
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,63068
2012-07-06T02:50:39-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T02:50:39-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T02:50:39-03:00,info,appl
w,listen,17,0.0.0.0,59797
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,59798
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,59799
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,59800
2012-07-06T02:50:39-03:00,info,appl
listen,17,0.0.0.0,59801

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:50:40-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T02:50:40-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T02:50:40-03:00,info,appl
w,listen,17,0.0.0.0,55958
2012-07-06T02:50:40-03:00,info,appl
listen,17,0.0.0.0,55959
2012-07-06T02:50:40-03:00,info,appl
listen,17,0.0.0.0,55960
2012-07-06T02:50:40-03:00,info,appl
w,listen,17,0.0.0.0,62246
2012-07-06T02:50:40-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:40-03:00,info,appl
listen,17,0.0.0.0,62247
2012-07-06T02:50:40-03:00,info,appl
listen,17,0.0.0.0,62248
2012-07-06T02:50:41-03:00,info,appl
w,listen,17,0.0.0.0,60650
2012-07-06T02:50:41-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:41-03:00,info,appl
listen,17,0.0.0.0,60651
2012-07-06T02:50:41-03:00,info,appl
listen,17,0.0.0.0,60652
2012-07-06T02:50:41-03:00,info,appl
listen,17,0.0.0.0,60653
2012-07-06T02:50:41-03:00,info,appl
listen,17,0.0.0.0,60654
2012-07-06T02:50:41-03:00,info,appl
listen,17,0.0.0.0,60655
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60656
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60657
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60658
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60659
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60660
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60661
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60662
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60663
2012-07-06T02:50:42-03:00,info,appl
listen,17,0.0.0.0,60664
2012-07-06T02:50:42-03:00,info,appl
w,listen,17,0.0.0.0,62968
2012-07-06T02:50:42-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T02:50:42-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:43-03:00,info,appl
listen,17,0.0.0.0,62969
2012-07-06T02:50:43-03:00,info,appl
listen,17,0.0.0.0,62970

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T02:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T02:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:50:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60676
2012-07-06T02:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60677
2012-07-06T02:50:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60678
2012-07-06T02:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52600
2012-07-06T02:50:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52601
2012-07-06T02:50:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52602
2012-07-06T02:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52603
2012-07-06T02:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52604
2012-07-06T02:50:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52605
2012-07-06T02:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52606
2012-07-06T02:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52607
2012-07-06T02:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52608
2012-07-06T02:50:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52609
2012-07-06T02:50:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50098
2012-07-06T02:50:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53772
2012-07-06T02:50:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:50:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51208
2012-07-06T02:50:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T02:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,2943
2012-07-06T02:52:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:52:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T02:52:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:52:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,61771
2012-07-06T02:53:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389

2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52024
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52025
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52026
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52027
2012-07-06T02:53:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52028
2012-07-06T02:54:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52029
2012-07-06T02:54:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52030
2012-07-06T02:54:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52031
2012-07-06T02:54:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52032
2012-07-06T02:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52033
2012-07-06T02:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52034
2012-07-06T02:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52035
2012-07-06T02:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52036
2012-07-06T02:54:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52037
2012-07-06T02:55:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,55886
2012-07-06T02:55:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T02:55:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T02:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T02:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52038
2012-07-06T02:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T02:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52039
2012-07-06T02:55:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52040
2012-07-06T02:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52041
2012-07-06T02:55:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52042
2012-07-06T02:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52043
2012-07-06T02:55:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52044
2012-07-06T02:55:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52045

2012-07-06T02:55:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52046
2012-07-06T02:55:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52047
2012-07-06T02:55:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,1836
2012-07-06T02:55:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52048
2012-07-06T02:55:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52049
2012-07-06T02:56:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,3823
2012-07-06T02:57:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.5,4253
2012-07-06T02:59:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,4145
2012-07-06T02:59:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T02:59:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T02:59:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:00:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:00:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T03:00:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52050
2012-07-06T03:00:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T03:00:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52051
2012-07-06T03:00:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52052
2012-07-06T03:00:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52053
2012-07-06T03:00:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52054
2012-07-06T03:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52055
2012-07-06T03:00:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52056
2012-07-06T03:00:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:00:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52057
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52058
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52059
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52060
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52061
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52062

2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52063
2012-07-06T03:00:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52064
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50531
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50532
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50533
2012-07-06T03:00:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50534
2012-07-06T03:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50535
2012-07-06T03:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50536
2012-07-06T03:00:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50537
2012-07-06T03:00:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50538
2012-07-06T03:00:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50539
2012-07-06T03:00:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50540
2012-07-06T03:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,58753
2012-07-06T03:01:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,50396
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59910
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,64098
2012-07-06T03:01:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50975
2012-07-06T03:02:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52667
2012-07-06T03:02:01-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80
2012-07-06T03:02:06-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80
2012-07-06T03:02:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61091
2012-07-06T03:02:06-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-06T03:02:09-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80
2012-07-06T03:02:10-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80
2012-07-06T03:02:10-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80

2012-07-06T03:02:26-03:00,info,appl control,C:\Windows\System32\wermgr.exe,allow
,connect out,6,65.55.53.190,80
2012-07-06T03:02:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50998
2012-07-06T03:02:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T03:02:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.25.59,443
2012-07-06T03:02:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,65.55.25.59,443
2012-07-06T03:03:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,68
2012-07-06T03:03:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,255.255.255.255,67
2012-07-06T03:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61421
2012-07-06T03:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T03:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.27.230.126,80
2012-07-06T03:03:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-06T03:03:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.27.230.126,80
2012-07-06T03:03:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.27.230.126,80
2012-07-06T03:03:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.27.230.126,80
2012-07-06T03:03:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,8.27.230.126,80
2012-07-06T03:06:32-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54258
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54485
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61559
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61109
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61111
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61112
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.197,389
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61114
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57893
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57175
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59351
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55472
2012-07-06T03:05:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55473
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,55474
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,50491
2012-07-06T03:05:34-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,63024
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,63025
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,55946
2012-07-06T03:05:34-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,55947
2012-07-06T03:05:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,55948
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,56146
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,65277
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,65278
2012-07-06T03:05:34-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,65279
2012-07-06T03:05:34-03:00,info,appl
w,listen,17,0.0.0.0,59006
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,59007
2012-07-06T03:05:34-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,59008
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,59009
2012-07-06T03:05:34-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-06T03:05:34-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:34-03:00,info,appl
listen,17,0.0.0.0,59010
2012-07-06T03:05:35-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-06T03:05:35-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-06T03:05:35-03:00,info,appl
w,listen,17,::,500
2012-07-06T03:05:35-03:00,info,appl
w,listen,17,::,4500
2012-07-06T03:05:35-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:05:35-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:35-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59011
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59012
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59013
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59014
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59015
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,3702
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59016
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59017
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59018
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59019
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52579
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,59548
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59251
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61232
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61233
2012-07-06T03:05:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61234
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59761
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59762
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49179
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49180
2012-07-06T03:05:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-06T03:05:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-06T03:05:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-06T03:05:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49181
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49182
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61168
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61169
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61170
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50314
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50315
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50316
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,0.0.0.0,60109
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\services.exe,all
ow,listen,6,::,60109
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50317
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64325
2012-07-06T03:05:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64326
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64327
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64328
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64329
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64330
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,53289
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50075
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57230
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57231
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57999
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61857
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61858
2012-07-06T03:05:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T03:05:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61859
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58423
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58424
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58425
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56620
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56621
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56622
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56623
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55806
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55807
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56858
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64157
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64158
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64159
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-06T03:05:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64160
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60010
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60011
2012-07-06T03:05:38-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59745
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60010
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60012
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60013
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60014
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60696
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60697
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56184
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64384
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64385
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63670
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,::,53302
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56304
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56305
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56306
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56307
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,64068
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,64068
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56308
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56309
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64309
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64310
2012-07-06T03:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64311
2012-07-06T03:05:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53784
2012-07-06T03:05:39-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-06T03:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53785
2012-07-06T03:05:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53786
2012-07-06T03:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53787
2012-07-06T03:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53788
2012-07-06T03:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53789
2012-07-06T03:05:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53790
2012-07-06T03:05:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53791
2012-07-06T03:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51504
2012-07-06T03:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,64483
2012-07-06T03:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49244
2012-07-06T03:06:32-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5900
2012-07-06T03:05:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,51054
2012-07-06T03:05:42-03:00,info,appl
w,listen,17,0.0.0.0,51967
2012-07-06T03:05:42-03:00,info,appl
w,listen,17,0.0.0.0,61058
2012-07-06T03:05:42-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:42-03:00,info,appl
w,listen,17,0.0.0.0,54183
2012-07-06T03:05:42-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T03:05:49-03:00,info,appl
w,listen,17,::,123
2012-07-06T03:05:49-03:00,info,appl
w,listen,17,0.0.0.0,123
2012-07-06T03:05:49-03:00,info,appl
connect out,6,10.10.0.12,389
2012-07-06T03:05:49-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:49-03:00,info,appl
listen,17,0.0.0.0,54185
2012-07-06T03:05:49-03:00,info,appl
w,listen,17,0.0.0.0,63272
2012-07-06T03:05:49-03:00,info,appl
listen,17,0.0.0.0,63273
2012-07-06T03:05:49-03:00,info,appl
listen,17,0.0.0.0,63274
2012-07-06T03:05:50-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T03:05:50-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:05:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63275
2012-07-06T03:05:50-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-06T03:05:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63276
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63277
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63278
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63279
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63280
2012-07-06T03:05:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63281
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63282
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63283
2012-07-06T03:05:50-03:00,info,appl
listen,17,0.0.0.0,63284
2012-07-06T03:05:50-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63285
2012-07-06T03:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63286
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63287
2012-07-06T03:06:32-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.12,389
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63288
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63289
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63290
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63291
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63292
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63293
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63294
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63295
2012-07-06T03:05:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63296
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63297
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63298
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63299
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63300
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63301
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57804
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,58544
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52214
2012-07-06T03:05:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52215
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52216
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52217
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52218
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52219
2012-07-06T03:05:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52220
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52221
2012-07-06T03:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52222
2012-07-06T03:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52223
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52224
2012-07-06T03:06:32-03:00,info,appl control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
w,listen,6,0.0.0.0,5800
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52225
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52226
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52227
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52228
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52229
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52230
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52231
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52232
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52233
2012-07-06T03:05:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52234
2012-07-06T03:05:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59946
2012-07-06T03:05:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:05:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T03:05:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57945
2012-07-06T03:05:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57946
2012-07-06T03:05:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T03:05:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57947
2012-07-06T03:06:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60731
2012-07-06T03:06:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60732
2012-07-06T03:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,389
2012-07-06T03:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60733
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60734
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60735
2012-07-06T03:06:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60736
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60737
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60738
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60739
2012-07-06T03:06:05-03:00,info,appl
listen,17,0.0.0.0,60740
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.108.0.153,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.102.0.20,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.200.0.5,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.1.0.197,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.10.0.11,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.1.0.198,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.201.0.100,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,172.16.1.138,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.10.0.12,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.88.108.206,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.203.0.11,389
2012-07-06T03:06:32-03:00,info,appl
ow,connect out,6,10.101.0.11,389
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60741
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60742
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60743
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60744
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60745
2012-07-06T03:06:06-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\taskhost.exe,all
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60746
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60747
2012-07-06T03:06:06-03:00,info,appl
listen,17,0.0.0.0,60748
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60749
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60750
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60751
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60752
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60753
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60754
2012-07-06T03:06:07-03:00,info,appl
listen,17,0.0.0.0,60755
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60756
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60757
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60758
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60759
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60760
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60761
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60762
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60763
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60764
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60765
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60766
2012-07-06T03:06:08-03:00,info,appl
listen,17,0.0.0.0,60767
2012-07-06T03:06:13-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:13-03:00,info,appl
listen,17,0.0.0.0,60768
2012-07-06T03:06:13-03:00,info,appl
listen,17,0.0.0.0,60769
2012-07-06T03:06:14-03:00,info,appl
listen,17,0.0.0.0,60770
2012-07-06T03:06:15-03:00,info,appl
listen,17,0.0.0.0,60771
2012-07-06T03:06:15-03:00,info,appl
listen,17,0.0.0.0,60772
2012-07-06T03:06:15-03:00,info,appl
listen,17,0.0.0.0,60773
2012-07-06T03:06:16-03:00,info,appl
listen,17,0.0.0.0,60774
2012-07-06T03:06:16-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60775
2012-07-06T03:06:16-03:00,info,appl
listen,17,0.0.0.0,60776
2012-07-06T03:06:17-03:00,info,appl
listen,17,0.0.0.0,60777
2012-07-06T03:06:17-03:00,info,appl
listen,17,0.0.0.0,60778
2012-07-06T03:06:17-03:00,info,appl
listen,17,0.0.0.0,60779
2012-07-06T03:06:20-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T03:06:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:06:20-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,60780
2012-07-06T03:06:20-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T03:06:20-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-06T03:06:20-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,60781
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,60782
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,60783
2012-07-06T03:06:20-03:00,info,appl
w,listen,17,0.0.0.0,52896
2012-07-06T03:06:20-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52897
2012-07-06T03:06:20-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52898
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52899
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52900
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52901
2012-07-06T03:06:20-03:00,info,appl
listen,17,0.0.0.0,52902
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52903
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52904
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52905
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52906
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52907
2012-07-06T03:06:21-03:00,info,appl
listen,17,0.0.0.0,52908
2012-07-06T03:06:21-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52909
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52910
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52911
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52912
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52913
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52914
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52915
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52916
2012-07-06T03:06:22-03:00,info,appl
listen,17,0.0.0.0,52917
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52918
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52919
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52920
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52921
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52922
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52923
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52924
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52925
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52926
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52927
2012-07-06T03:06:23-03:00,info,appl
listen,17,0.0.0.0,52928
2012-07-06T03:06:24-03:00,info,appl
listen,17,0.0.0.0,52929
2012-07-06T03:06:32-03:00,info,appl
w,listen,17,0.0.0.0,50740
2012-07-06T03:06:32-03:00,info,appl
w,listen,17,0.0.0.0,64952
2012-07-06T03:06:35-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:06:35-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:35-03:00,info,appl
listen,17,0.0.0.0,64953
2012-07-06T03:06:35-03:00,info,appl
listen,17,0.0.0.0,64954
2012-07-06T03:06:35-03:00,info,appl
listen,17,0.0.0.0,64955
2012-07-06T03:06:36-03:00,info,appl
listen,17,0.0.0.0,64956
2012-07-06T03:06:36-03:00,info,appl
listen,17,0.0.0.0,64957
2012-07-06T03:06:36-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T03:06:36-03:00,info,appl
listen,17,0.0.0.0,64958
2012-07-06T03:06:37-03:00,info,appl
listen,17,0.0.0.0,64959
2012-07-06T03:06:37-03:00,info,appl
listen,17,0.0.0.0,64960
2012-07-06T03:06:37-03:00,info,appl
listen,17,0.0.0.0,64961
2012-07-06T03:06:38-03:00,info,appl
listen,17,0.0.0.0,64962
2012-07-06T03:06:38-03:00,info,appl
listen,17,0.0.0.0,64963
2012-07-06T03:06:38-03:00,info,appl
listen,17,0.0.0.0,64964
2012-07-06T03:06:50-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T03:06:50-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:06:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:50-03:00,info,appl
listen,17,0.0.0.0,64965
2012-07-06T03:06:50-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T03:06:50-03:00,info,appl
listen,17,0.0.0.0,64966
2012-07-06T03:06:50-03:00,info,appl
listen,17,0.0.0.0,64967
2012-07-06T03:06:51-03:00,info,appl
listen,17,0.0.0.0,64968
2012-07-06T03:06:51-03:00,info,appl
listen,17,0.0.0.0,64969
2012-07-06T03:06:51-03:00,info,appl
listen,17,0.0.0.0,64970
2012-07-06T03:06:52-03:00,info,appl
listen,17,0.0.0.0,64971
2012-07-06T03:06:52-03:00,info,appl
listen,17,0.0.0.0,64972
2012-07-06T03:06:53-03:00,info,appl
listen,17,0.0.0.0,64973
2012-07-06T03:06:53-03:00,info,appl
listen,17,0.0.0.0,64974
2012-07-06T03:06:53-03:00,info,appl
listen,17,0.0.0.0,64975
2012-07-06T03:06:53-03:00,info,appl
listen,17,0.0.0.0,64976
2012-07-06T03:06:54-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:06:54-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:54-03:00,info,appl
listen,17,0.0.0.0,64977
2012-07-06T03:06:54-03:00,info,appl
listen,17,0.0.0.0,64978
2012-07-06T03:06:54-03:00,info,appl
listen,17,0.0.0.0,64979
2012-07-06T03:06:55-03:00,info,appl
listen,17,0.0.0.0,64980
2012-07-06T03:06:55-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64981
2012-07-06T03:06:56-03:00,info,appl
listen,17,0.0.0.0,64982
2012-07-06T03:06:56-03:00,info,appl
listen,17,0.0.0.0,64983
2012-07-06T03:06:57-03:00,info,appl
listen,17,0.0.0.0,64984
2012-07-06T03:06:57-03:00,info,appl
listen,17,0.0.0.0,64985
2012-07-06T03:06:57-03:00,info,appl
listen,17,0.0.0.0,64986
2012-07-06T03:06:57-03:00,info,appl
listen,17,0.0.0.0,64987
2012-07-06T03:06:57-03:00,info,appl
listen,17,0.0.0.0,64988
2012-07-06T03:06:58-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:06:58-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:06:58-03:00,info,appl
listen,17,0.0.0.0,64989
2012-07-06T03:06:58-03:00,info,appl
listen,17,0.0.0.0,64990
2012-07-06T03:06:58-03:00,info,appl
listen,17,0.0.0.0,64991
2012-07-06T03:06:59-03:00,info,appl
listen,17,0.0.0.0,64992
2012-07-06T03:06:59-03:00,info,appl
listen,17,0.0.0.0,64993
2012-07-06T03:07:00-03:00,info,appl
listen,17,0.0.0.0,64994
2012-07-06T03:07:00-03:00,info,appl
listen,17,0.0.0.0,64995
2012-07-06T03:07:00-03:00,info,appl
listen,17,0.0.0.0,64996
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,64997
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,64998
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,64999
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,65000
2012-07-06T03:07:01-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:01-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,65001
2012-07-06T03:07:01-03:00,info,appl
listen,17,0.0.0.0,65002
2012-07-06T03:07:02-03:00,info,appl
listen,17,0.0.0.0,65003
2012-07-06T03:07:02-03:00,info,appl
listen,17,0.0.0.0,65004
2012-07-06T03:07:03-03:00,info,appl
listen,17,0.0.0.0,65005
2012-07-06T03:07:03-03:00,info,appl
listen,17,0.0.0.0,65006
2012-07-06T03:07:04-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65007
2012-07-06T03:07:04-03:00,info,appl
listen,17,0.0.0.0,65008
2012-07-06T03:07:04-03:00,info,appl
listen,17,0.0.0.0,65009
2012-07-06T03:07:04-03:00,info,appl
listen,17,0.0.0.0,65010
2012-07-06T03:07:05-03:00,info,appl
listen,17,0.0.0.0,65011
2012-07-06T03:07:05-03:00,info,appl
listen,17,0.0.0.0,65012
2012-07-06T03:07:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:05-03:00,info,appl
listen,17,0.0.0.0,65013
2012-07-06T03:07:05-03:00,info,appl
listen,17,0.0.0.0,65014
2012-07-06T03:07:06-03:00,info,appl
listen,17,0.0.0.0,65015
2012-07-06T03:07:06-03:00,info,appl
listen,17,0.0.0.0,65016
2012-07-06T03:07:07-03:00,info,appl
listen,17,0.0.0.0,65017
2012-07-06T03:07:07-03:00,info,appl
listen,17,0.0.0.0,65018
2012-07-06T03:07:07-03:00,info,appl
listen,17,0.0.0.0,65019
2012-07-06T03:07:08-03:00,info,appl
listen,17,0.0.0.0,65020
2012-07-06T03:07:08-03:00,info,appl
listen,17,0.0.0.0,65021
2012-07-06T03:07:08-03:00,info,appl
listen,17,0.0.0.0,65022
2012-07-06T03:07:08-03:00,info,appl
listen,17,0.0.0.0,65023
2012-07-06T03:07:09-03:00,info,appl
listen,17,0.0.0.0,65024
2012-07-06T03:07:09-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:09-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:09-03:00,info,appl
listen,17,0.0.0.0,65025
2012-07-06T03:07:09-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T03:07:09-03:00,info,appl
listen,17,0.0.0.0,65026
2012-07-06T03:07:10-03:00,info,appl
listen,17,0.0.0.0,65027
2012-07-06T03:07:10-03:00,info,appl
listen,17,0.0.0.0,65028
2012-07-06T03:07:11-03:00,info,appl
listen,17,0.0.0.0,65029
2012-07-06T03:07:11-03:00,info,appl
listen,17,0.0.0.0,65030
2012-07-06T03:07:12-03:00,info,appl
listen,17,0.0.0.0,65031
2012-07-06T03:07:12-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65032
2012-07-06T03:07:12-03:00,info,appl
listen,17,0.0.0.0,65033
2012-07-06T03:07:12-03:00,info,appl
listen,17,0.0.0.0,65034
2012-07-06T03:07:13-03:00,info,appl
listen,17,0.0.0.0,65035
2012-07-06T03:07:13-03:00,info,appl
listen,17,0.0.0.0,65036
2012-07-06T03:07:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:13-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:13-03:00,info,appl
listen,17,0.0.0.0,65037
2012-07-06T03:07:13-03:00,info,appl
listen,17,0.0.0.0,65038
2012-07-06T03:07:14-03:00,info,appl
listen,17,0.0.0.0,65039
2012-07-06T03:07:14-03:00,info,appl
listen,17,0.0.0.0,65040
2012-07-06T03:07:15-03:00,info,appl
listen,17,0.0.0.0,65041
2012-07-06T03:07:15-03:00,info,appl
listen,17,0.0.0.0,65042
2012-07-06T03:07:15-03:00,info,appl
listen,17,0.0.0.0,65043
2012-07-06T03:07:16-03:00,info,appl
listen,17,0.0.0.0,65044
2012-07-06T03:07:16-03:00,info,appl
listen,17,0.0.0.0,65045
2012-07-06T03:07:16-03:00,info,appl
listen,17,0.0.0.0,65046
2012-07-06T03:07:16-03:00,info,appl
listen,17,0.0.0.0,65047
2012-07-06T03:07:17-03:00,info,appl
listen,17,0.0.0.0,65048
2012-07-06T03:07:17-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:17-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:17-03:00,info,appl
listen,17,0.0.0.0,65049
2012-07-06T03:07:17-03:00,info,appl
listen,17,0.0.0.0,65050
2012-07-06T03:07:17-03:00,info,appl
listen,17,0.0.0.0,65051
2012-07-06T03:07:18-03:00,info,appl
listen,17,0.0.0.0,65052
2012-07-06T03:07:18-03:00,info,appl
listen,17,0.0.0.0,65053
2012-07-06T03:07:19-03:00,info,appl
listen,17,0.0.0.0,65054
2012-07-06T03:07:19-03:00,info,appl
listen,17,0.0.0.0,65055
2012-07-06T03:07:20-03:00,info,appl
listen,17,0.0.0.0,65056
2012-07-06T03:07:20-03:00,info,appl
listen,17,0.0.0.0,65057
2012-07-06T03:07:20-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65058
2012-07-06T03:07:20-03:00,info,appl
listen,17,0.0.0.0,65059
2012-07-06T03:07:20-03:00,info,appl
listen,17,0.0.0.0,65060
2012-07-06T03:07:21-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:21-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:21-03:00,info,appl
listen,17,0.0.0.0,65061
2012-07-06T03:07:21-03:00,info,appl
listen,17,0.0.0.0,65062
2012-07-06T03:07:21-03:00,info,appl
listen,17,0.0.0.0,65063
2012-07-06T03:07:22-03:00,info,appl
listen,17,0.0.0.0,65064
2012-07-06T03:07:22-03:00,info,appl
listen,17,0.0.0.0,65065
2012-07-06T03:07:23-03:00,info,appl
listen,17,0.0.0.0,65066
2012-07-06T03:07:23-03:00,info,appl
listen,17,0.0.0.0,65067
2012-07-06T03:07:23-03:00,info,appl
listen,17,0.0.0.0,65068
2012-07-06T03:07:24-03:00,info,appl
listen,17,0.0.0.0,65069
2012-07-06T03:07:24-03:00,info,appl
listen,17,0.0.0.0,65070
2012-07-06T03:07:24-03:00,info,appl
listen,17,0.0.0.0,65071
2012-07-06T03:07:24-03:00,info,appl
listen,17,0.0.0.0,65072
2012-07-06T03:07:25-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:25-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:25-03:00,info,appl
listen,17,0.0.0.0,65073
2012-07-06T03:07:25-03:00,info,appl
listen,17,0.0.0.0,65074
2012-07-06T03:07:25-03:00,info,appl
listen,17,0.0.0.0,65075
2012-07-06T03:07:26-03:00,info,appl
listen,17,0.0.0.0,65076
2012-07-06T03:07:26-03:00,info,appl
listen,17,0.0.0.0,65077
2012-07-06T03:07:27-03:00,info,appl
listen,17,0.0.0.0,65078
2012-07-06T03:07:27-03:00,info,appl
listen,17,0.0.0.0,65079
2012-07-06T03:07:28-03:00,info,appl
listen,17,0.0.0.0,65080
2012-07-06T03:07:28-03:00,info,appl
listen,17,0.0.0.0,65081
2012-07-06T03:07:28-03:00,info,appl
listen,17,0.0.0.0,65082
2012-07-06T03:07:28-03:00,info,appl
listen,17,0.0.0.0,65083
2012-07-06T03:07:28-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65084
2012-07-06T03:07:29-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:29-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:29-03:00,info,appl
listen,17,0.0.0.0,65085
2012-07-06T03:07:29-03:00,info,appl
listen,17,0.0.0.0,65086
2012-07-06T03:07:29-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T03:07:29-03:00,info,appl
listen,17,0.0.0.0,65087
2012-07-06T03:07:30-03:00,info,appl
listen,17,0.0.0.0,65088
2012-07-06T03:07:30-03:00,info,appl
listen,17,0.0.0.0,65089
2012-07-06T03:07:31-03:00,info,appl
listen,17,0.0.0.0,65090
2012-07-06T03:07:31-03:00,info,appl
listen,17,0.0.0.0,65091
2012-07-06T03:07:31-03:00,info,appl
listen,17,0.0.0.0,65092
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65093
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65094
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65095
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65096
2012-07-06T03:07:32-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T03:07:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65097
2012-07-06T03:07:32-03:00,info,appl
listen,17,0.0.0.0,65098
2012-07-06T03:07:33-03:00,info,appl
listen,17,0.0.0.0,65099
2012-07-06T03:07:33-03:00,info,appl
listen,17,0.0.0.0,65100
2012-07-06T03:07:34-03:00,info,appl
listen,17,0.0.0.0,65101
2012-07-06T03:07:34-03:00,info,appl
listen,17,0.0.0.0,65102
2012-07-06T03:07:35-03:00,info,appl
listen,17,0.0.0.0,65103
2012-07-06T03:07:35-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T03:07:35-03:00,info,appl
listen,17,0.0.0.0,65104
2012-07-06T03:07:35-03:00,info,appl
listen,17,0.0.0.0,65105
2012-07-06T03:07:35-03:00,info,appl
listen,17,0.0.0.0,65106
2012-07-06T03:07:35-03:00,info,appl
listen,17,0.0.0.0,65107
2012-07-06T03:07:35-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65108
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65109
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65110
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65111
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65112
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65113
2012-07-06T03:07:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65114
2012-07-06T03:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65115
2012-07-06T03:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65116
2012-07-06T03:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65117
2012-07-06T03:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65118
2012-07-06T03:07:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65119
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65120
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65121
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65122
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65123
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65124
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65125
2012-07-06T03:07:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65126
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65127
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65128
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,65129
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,65131
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,1900
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,10.10.4.146,1900
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,239.255.255.250,1900
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65133
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65134
2012-07-06T03:07:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65135
2012-07-06T03:07:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.254.101,1900
2012-07-06T03:07:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65136
2012-07-06T03:07:50-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-06T03:08:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:08:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65137
2012-07-06T03:08:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:08:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65138
2012-07-06T03:08:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65139
2012-07-06T03:08:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65140
2012-07-06T03:08:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65141
2012-07-06T03:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65142
2012-07-06T03:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65143
2012-07-06T03:08:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65144
2012-07-06T03:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65145
2012-07-06T03:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65146
2012-07-06T03:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65147
2012-07-06T03:08:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65148
2012-07-06T03:09:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,1254
2012-07-06T03:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65149
2012-07-06T03:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65150
2012-07-06T03:09:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65151
2012-07-06T03:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65152
2012-07-06T03:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65153
2012-07-06T03:09:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65154
2012-07-06T03:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65155
2012-07-06T03:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65156
2012-07-06T03:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65157
2012-07-06T03:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65158
2012-07-06T03:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65159
2012-07-06T03:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65160
2012-07-06T03:10:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,52487
2012-07-06T03:10:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,63829
2012-07-06T03:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65161
2012-07-06T03:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:10:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65162
2012-07-06T03:10:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65163
2012-07-06T03:10:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65164
2012-07-06T03:10:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65165
2012-07-06T03:10:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65166
2012-07-06T03:10:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65167
2012-07-06T03:10:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65168
2012-07-06T03:10:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65169
2012-07-06T03:10:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65170
2012-07-06T03:10:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65171
2012-07-06T03:10:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65172
2012-07-06T03:10:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T03:10:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T03:10:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:10:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65173
2012-07-06T03:10:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65174
2012-07-06T03:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65175
2012-07-06T03:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65176
2012-07-06T03:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65177
2012-07-06T03:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65178
2012-07-06T03:10:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65179
2012-07-06T03:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65180
2012-07-06T03:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65181
2012-07-06T03:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65182
2012-07-06T03:10:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65183
2012-07-06T03:10:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65184
2012-07-06T03:12:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:13:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:13:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,51573
2012-07-06T03:13:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:14:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,3367
2012-07-06T03:15:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T03:15:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65185
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65186
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63780
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:15:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63781
2012-07-06T03:15:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61910
2012-07-06T03:15:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61911
2012-07-06T03:15:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61912
2012-07-06T03:15:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61913
2012-07-06T03:15:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61914
2012-07-06T03:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61915
2012-07-06T03:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61916
2012-07-06T03:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61917
2012-07-06T03:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61918
2012-07-06T03:15:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61919
2012-07-06T03:19:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:19:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T03:20:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:20:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.129,54340
2012-07-06T03:20:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64268
2012-07-06T03:20:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64269
2012-07-06T03:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T03:20:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64270
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56852
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56853
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56854
2012-07-06T03:20:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:20:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51046
2012-07-06T03:20:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51047
2012-07-06T03:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51048
2012-07-06T03:20:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51049
2012-07-06T03:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51050
2012-07-06T03:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51051
2012-07-06T03:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51052
2012-07-06T03:20:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51053
2012-07-06T03:20:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:20:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51054
2012-07-06T03:20:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51055
2012-07-06T03:20:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49808
2012-07-06T03:20:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:21:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:21:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:21:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:21:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49809
2012-07-06T03:21:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49810
2012-07-06T03:21:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49811
2012-07-06T03:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49812
2012-07-06T03:21:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49813
2012-07-06T03:21:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49814
2012-07-06T03:21:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49815
2012-07-06T03:21:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49816
2012-07-06T03:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49817
2012-07-06T03:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49818
2012-07-06T03:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49819
2012-07-06T03:21:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49820
2012-07-06T03:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T03:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49821
2012-07-06T03:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49822
2012-07-06T03:21:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49823
2012-07-06T03:21:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49824
2012-07-06T03:21:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49825
2012-07-06T03:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49826
2012-07-06T03:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49827
2012-07-06T03:21:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49828
2012-07-06T03:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49829
2012-07-06T03:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49830
2012-07-06T03:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49831
2012-07-06T03:21:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49832
2012-07-06T03:21:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,56632
2012-07-06T03:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,62880
2012-07-06T03:23:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.187,61064
2012-07-06T03:25:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,3135
2012-07-06T03:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49833
2012-07-06T03:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:25:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49834
2012-07-06T03:25:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49835
2012-07-06T03:25:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49836
2012-07-06T03:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49837
2012-07-06T03:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49838
2012-07-06T03:25:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49839
2012-07-06T03:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49840
2012-07-06T03:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49841
2012-07-06T03:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49842
2012-07-06T03:25:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49843
2012-07-06T03:25:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49844
2012-07-06T03:26:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:26:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49845
2012-07-06T03:26:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49846
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64772
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64773
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60734
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:26:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60735
2012-07-06T03:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60736
2012-07-06T03:26:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60737
2012-07-06T03:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60738
2012-07-06T03:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60739
2012-07-06T03:26:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60740
2012-07-06T03:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60741
2012-07-06T03:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60742
2012-07-06T03:26:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60743
2012-07-06T03:26:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:26:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:27:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:27:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:29:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,4817
2012-07-06T03:30:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,63280
2012-07-06T03:31:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:31:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:31:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:31:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60744
2012-07-06T03:31:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:31:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60745
2012-07-06T03:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60746
2012-07-06T03:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60747
2012-07-06T03:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60748
2012-07-06T03:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60749
2012-07-06T03:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60750
2012-07-06T03:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60751
2012-07-06T03:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60752
2012-07-06T03:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60753
2012-07-06T03:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60754
2012-07-06T03:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60755
2012-07-06T03:34:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:34:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:34:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,58956
2012-07-06T03:34:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T03:34:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.26,3632
2012-07-06T03:35:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:35:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:35:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T03:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60756
2012-07-06T03:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:36:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60757
2012-07-06T03:36:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60758
2012-07-06T03:36:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64247
2012-07-06T03:36:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:36:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64248
2012-07-06T03:36:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50432
2012-07-06T03:36:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:36:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50433
2012-07-06T03:36:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50434
2012-07-06T03:36:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50435
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50436
2012-07-06T03:36:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:36:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50437
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50438
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50439
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50440
2012-07-06T03:36:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50441
2012-07-06T03:36:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50442
2012-07-06T03:36:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50443
2012-07-06T03:36:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50444
2012-07-06T03:36:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50445
2012-07-06T03:36:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50446
2012-07-06T03:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50447
2012-07-06T03:36:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50448
2012-07-06T03:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50449
2012-07-06T03:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50450
2012-07-06T03:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50451
2012-07-06T03:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50452
2012-07-06T03:36:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50453
2012-07-06T03:37:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,3336
2012-07-06T03:38:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,4773
2012-07-06T03:39:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,1699
2012-07-06T03:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50454
2012-07-06T03:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50455
2012-07-06T03:40:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50456
2012-07-06T03:40:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50457
2012-07-06T03:40:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50458
2012-07-06T03:40:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50459
2012-07-06T03:40:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50460
2012-07-06T03:40:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50461
2012-07-06T03:40:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50462
2012-07-06T03:40:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50463
2012-07-06T03:40:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50464
2012-07-06T03:40:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50465
2012-07-06T03:41:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:41:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:41:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:41:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50466
2012-07-06T03:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50467
2012-07-06T03:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50468
2012-07-06T03:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50469
2012-07-06T03:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50470
2012-07-06T03:41:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50471
2012-07-06T03:41:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50472
2012-07-06T03:41:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50473
2012-07-06T03:41:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50474
2012-07-06T03:41:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50475
2012-07-06T03:41:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50476
2012-07-06T03:41:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50477
2012-07-06T03:41:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:42:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:46:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:46:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50478
2012-07-06T03:46:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50479
2012-07-06T03:46:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50419
2012-07-06T03:46:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:46:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50420
2012-07-06T03:46:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58170
2012-07-06T03:46:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58171
2012-07-06T03:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58172
2012-07-06T03:46:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58173
2012-07-06T03:46:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58174
2012-07-06T03:46:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58175
2012-07-06T03:46:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58176
2012-07-06T03:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58177
2012-07-06T03:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58178
2012-07-06T03:46:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58179
2012-07-06T03:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:48:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:48:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:49:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:50:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:50:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60359
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60360
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60361
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63877
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63878
2012-07-06T03:51:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63879
2012-07-06T03:51:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65209
2012-07-06T03:51:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:51:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65210
2012-07-06T03:51:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65211
2012-07-06T03:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65212
2012-07-06T03:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65213
2012-07-06T03:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65214
2012-07-06T03:51:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65215
2012-07-06T03:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65216
2012-07-06T03:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65217
2012-07-06T03:51:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65218
2012-07-06T03:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53862
2012-07-06T03:51:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T03:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53863
2012-07-06T03:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53864
2012-07-06T03:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53865
2012-07-06T03:51:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53866
2012-07-06T03:51:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53867
2012-07-06T03:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53868
2012-07-06T03:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53869
2012-07-06T03:51:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:51:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53870
2012-07-06T03:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53871
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53872
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53873
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53874
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53875
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53876
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53877
2012-07-06T03:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53878
2012-07-06T03:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53879
2012-07-06T03:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.198,389
2012-07-06T03:51:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53880
2012-07-06T03:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53881
2012-07-06T03:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53882
2012-07-06T03:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53883
2012-07-06T03:51:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53884
2012-07-06T03:51:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53885
2012-07-06T03:51:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53886
2012-07-06T03:55:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T03:55:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:55:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53887
2012-07-06T03:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53888
2012-07-06T03:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53889
2012-07-06T03:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53890
2012-07-06T03:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53891
2012-07-06T03:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53892
2012-07-06T03:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53893
2012-07-06T03:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53894
2012-07-06T03:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53895
2012-07-06T03:56:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53896
2012-07-06T03:56:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53897
2012-07-06T03:56:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53898
2012-07-06T03:56:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T03:56:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T03:56:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53899
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53900
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,61684
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T03:56:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61685
2012-07-06T03:56:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56637
2012-07-06T03:56:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T03:56:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56638
2012-07-06T03:56:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56639
2012-07-06T03:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56640
2012-07-06T03:56:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56641
2012-07-06T03:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56642
2012-07-06T03:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56643
2012-07-06T03:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56644
2012-07-06T03:56:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56645
2012-07-06T03:56:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56646
2012-07-06T04:01:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T04:01:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T04:01:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:01:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56647
2012-07-06T04:01:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:01:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56648
2012-07-06T04:01:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56649
2012-07-06T04:01:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56650
2012-07-06T04:01:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56651
2012-07-06T04:01:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56652
2012-07-06T04:01:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56653
2012-07-06T04:01:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56654
2012-07-06T04:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56655
2012-07-06T04:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56656
2012-07-06T04:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56657
2012-07-06T04:01:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56658
2012-07-06T04:02:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:02:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:03:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:03:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56245
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56246
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56247
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56248
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51059
2012-07-06T04:06:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51060
2012-07-06T04:06:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64413
2012-07-06T04:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64414
2012-07-06T04:06:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54592
2012-07-06T04:06:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54593
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55343
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55344
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60014
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60015
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49859
2012-07-06T04:06:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49860
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61653
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61654
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,51495
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51496
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65243
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65244
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62509
2012-07-06T04:06:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62510
2012-07-06T04:06:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T04:06:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T04:06:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:06:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62511
2012-07-06T04:06:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62512
2012-07-06T04:06:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50184
2012-07-06T04:06:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50185
2012-07-06T04:06:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52848
2012-07-06T04:06:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T04:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52849
2012-07-06T04:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52850
2012-07-06T04:06:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52851
2012-07-06T04:06:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52852
2012-07-06T04:06:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52853
2012-07-06T04:06:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52854
2012-07-06T04:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52855
2012-07-06T04:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52856
2012-07-06T04:06:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52857
2012-07-06T04:08:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64379
2012-07-06T04:08:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T04:08:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58195
2012-07-06T04:09:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:09:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:10:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T04:11:01-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:11:01-03:00,info,appl
listen,17,0.0.0.0,58196
2012-07-06T04:11:01-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T04:11:01-03:00,info,appl
listen,17,0.0.0.0,58197
2012-07-06T04:11:02-03:00,info,appl
listen,17,0.0.0.0,58198
2012-07-06T04:11:02-03:00,info,appl
listen,17,0.0.0.0,58199
2012-07-06T04:11:03-03:00,info,appl
listen,17,0.0.0.0,58200
2012-07-06T04:11:03-03:00,info,appl
listen,17,0.0.0.0,58201
2012-07-06T04:11:04-03:00,info,appl
listen,17,0.0.0.0,58202
2012-07-06T04:11:04-03:00,info,appl
listen,17,0.0.0.0,58203
2012-07-06T04:11:04-03:00,info,appl
listen,17,0.0.0.0,58204
2012-07-06T04:11:04-03:00,info,appl
listen,17,0.0.0.0,58205
2012-07-06T04:11:05-03:00,info,appl
listen,17,0.0.0.0,58206
2012-07-06T04:11:05-03:00,info,appl
listen,17,0.0.0.0,58207
2012-07-06T04:11:05-03:00,info,appl
w,listen,17,0.0.0.0,49866
2012-07-06T04:11:05-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-06T04:11:05-03:00,info,appl
listen,17,0.0.0.0,49867
2012-07-06T04:11:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:11:05-03:00,info,appl
listen,17,0.0.0.0,49868
2012-07-06T04:11:05-03:00,info,appl
listen,17,0.0.0.0,49869
2012-07-06T04:11:06-03:00,info,appl
listen,17,0.0.0.0,49870
2012-07-06T04:11:06-03:00,info,appl
listen,17,0.0.0.0,49871
2012-07-06T04:11:07-03:00,info,appl
listen,17,0.0.0.0,49872
2012-07-06T04:11:07-03:00,info,appl
listen,17,0.0.0.0,49873
2012-07-06T04:11:07-03:00,info,appl
listen,17,0.0.0.0,49874
2012-07-06T04:11:08-03:00,info,appl
listen,17,0.0.0.0,49875
2012-07-06T04:11:08-03:00,info,appl
listen,17,0.0.0.0,49876
2012-07-06T04:11:08-03:00,info,appl
listen,17,0.0.0.0,49877
2012-07-06T04:11:09-03:00,info,appl
listen,17,0.0.0.0,49878
2012-07-06T04:11:09-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49879
2012-07-06T04:11:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:11:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49880
2012-07-06T04:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:11:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49881
2012-07-06T04:11:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49882
2012-07-06T04:11:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49883
2012-07-06T04:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49884
2012-07-06T04:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49885
2012-07-06T04:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49886
2012-07-06T04:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49887
2012-07-06T04:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49888
2012-07-06T04:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49889
2012-07-06T04:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49890
2012-07-06T04:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49891
2012-07-06T04:16:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:16:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49892
2012-07-06T04:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:16:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49893
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63226
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63227
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50976
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T04:16:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50977
2012-07-06T04:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50978
2012-07-06T04:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50979
2012-07-06T04:16:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50980
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50981
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50982
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50983
2012-07-06T04:16:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50984
2012-07-06T04:16:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50985
2012-07-06T04:17:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:17:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:20:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:20:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T04:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50986
2012-07-06T04:21:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50987
2012-07-06T04:21:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50988
2012-07-06T04:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50989
2012-07-06T04:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50990
2012-07-06T04:21:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50991
2012-07-06T04:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50992
2012-07-06T04:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50993
2012-07-06T04:21:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50994
2012-07-06T04:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50995
2012-07-06T04:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50996
2012-07-06T04:21:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50997
2012-07-06T04:21:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:21:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T04:21:45-03:00,info,appl
listen,17,0.0.0.0,50998
2012-07-06T04:21:45-03:00,info,appl
listen,17,0.0.0.0,50999
2012-07-06T04:21:45-03:00,info,appl
listen,17,0.0.0.0,51000
2012-07-06T04:21:46-03:00,info,appl
listen,17,0.0.0.0,51001
2012-07-06T04:21:46-03:00,info,appl
listen,17,0.0.0.0,51002
2012-07-06T04:21:47-03:00,info,appl
listen,17,0.0.0.0,51003
2012-07-06T04:21:47-03:00,info,appl
send,17,10.1.0.197,389
2012-07-06T04:21:47-03:00,info,appl
listen,17,0.0.0.0,51004
2012-07-06T04:21:48-03:00,info,appl
listen,17,0.0.0.0,51005
2012-07-06T04:21:48-03:00,info,appl
listen,17,0.0.0.0,51006
2012-07-06T04:21:48-03:00,info,appl
listen,17,0.0.0.0,51007
2012-07-06T04:21:48-03:00,info,appl
listen,17,0.0.0.0,51008
2012-07-06T04:21:48-03:00,info,appl
listen,17,0.0.0.0,51009
2012-07-06T04:21:57-03:00,info,appl
w,listen,17,10.10.4.146,68
2012-07-06T04:21:57-03:00,info,appl
w,send,17,255.255.255.255,67
2012-07-06T04:21:57-03:00,info,appl
w,listen,17,0.0.0.0,58550
2012-07-06T04:21:57-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-06T04:21:57-03:00,info,appl
w,listen,17,::,63706
2012-07-06T04:21:57-03:00,info,appl
w,listen,17,0.0.0.0,56081
2012-07-06T04:21:59-03:00,info,appl
w,listen,17,0.0.0.0,57409
2012-07-06T04:22:00-03:00,info,appl
w,connect out,6,201.6.5.26,80
2012-07-06T04:22:02-03:00,info,appl
w,listen,17,0.0.0.0,57558
2012-07-06T04:22:02-03:00,info,appl
w,connect out,6,65.55.185.26,80
2012-07-06T04:22:08-03:00,info,appl
w,connect out,6,65.55.185.26,443
2012-07-06T04:22:14-03:00,info,appl
w,connect out,6,65.55.185.26,443
2012-07-06T04:22:17-03:00,info,appl
w,listen,17,0.0.0.0,57721
2012-07-06T04:22:17-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-06T04:22:17-03:00,info,appl
w,connect out,6,201.6.5.39,80
2012-07-06T04:22:17-03:00,info,appl
w,send,17,239.255.255.250,1900
2012-07-06T04:22:26-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,52594
2012-07-06T04:22:55-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-06T04:23:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:23:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:24:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:24:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52595
2012-07-06T04:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52596
2012-07-06T04:26:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52597
2012-07-06T04:26:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52598
2012-07-06T04:26:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52599
2012-07-06T04:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52600
2012-07-06T04:26:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52601
2012-07-06T04:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52602
2012-07-06T04:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52603
2012-07-06T04:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52604
2012-07-06T04:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52605
2012-07-06T04:26:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52606
2012-07-06T04:26:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:26:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52607
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52608
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54716
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T04:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54717
2012-07-06T04:26:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62856
2012-07-06T04:26:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.12,53
2012-07-06T04:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62857
2012-07-06T04:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62858
2012-07-06T04:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62859
2012-07-06T04:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62860
2012-07-06T04:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62861
2012-07-06T04:26:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62862
2012-07-06T04:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62863
2012-07-06T04:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62864
2012-07-06T04:26:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62865
2012-07-06T04:30:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:30:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:31:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:31:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:31:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62866
2012-07-06T04:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62867
2012-07-06T04:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62868
2012-07-06T04:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62869
2012-07-06T04:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62870
2012-07-06T04:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62871
2012-07-06T04:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62872
2012-07-06T04:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62873
2012-07-06T04:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62874
2012-07-06T04:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62875
2012-07-06T04:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62876
2012-07-06T04:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62877
2012-07-06T04:32:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:35:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T04:35:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,62878
2012-07-06T04:35:36-03:00,info,appl control,C:\Program
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-06T04:35:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:37-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:38-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:39-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:40-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:41-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.3.85,12110
2012-07-06T04:35:42-03:00,info,appl control,C:\Program
DLL32.EXE,allow,listen,17,0.0.0.0,62879
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:43-03:00,info,appl control,C:\Program
DLL32.EXE,allow,connect out,6,10.10.10.10,12110
2012-07-06T04:35:53-03:00,info,appl control,C:\Program

Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FSH
Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:35:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:36:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T04:36:26-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62880
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62881
2012-07-06T04:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62882
2012-07-06T04:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62883
2012-07-06T04:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62884
2012-07-06T04:36:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.18,3375
2012-07-06T04:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62885
2012-07-06T04:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62886
2012-07-06T04:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62887
2012-07-06T04:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62888
2012-07-06T04:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62889
2012-07-06T04:36:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62890
2012-07-06T04:36:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62891
2012-07-06T04:36:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62892
2012-07-06T04:36:50-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T04:36:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:36:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62893
2012-07-06T04:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62894
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61114
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61115
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,59596
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T04:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59597
2012-07-06T04:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59598
2012-07-06T04:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59599
2012-07-06T04:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59600
2012-07-06T04:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59601
2012-07-06T04:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59602
2012-07-06T04:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59603
2012-07-06T04:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59604
2012-07-06T04:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59605
2012-07-06T04:37:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.161,50072
2012-07-06T04:38:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:38:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:38:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59606
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59607
2012-07-06T04:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59608
2012-07-06T04:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59609
2012-07-06T04:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59610
2012-07-06T04:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59611
2012-07-06T04:38:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59612
2012-07-06T04:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59613
2012-07-06T04:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59614
2012-07-06T04:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59615
2012-07-06T04:38:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59616
2012-07-06T04:38:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59617
2012-07-06T04:38:44-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:38:44-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:38:44-03:00,info,appl
listen,17,0.0.0.0,59618
2012-07-06T04:38:44-03:00,info,appl
listen,17,0.0.0.0,59619
2012-07-06T04:38:44-03:00,info,appl
listen,17,0.0.0.0,59620
2012-07-06T04:38:45-03:00,info,appl
listen,17,0.0.0.0,59621
2012-07-06T04:38:45-03:00,info,appl
listen,17,0.0.0.0,59622
2012-07-06T04:38:46-03:00,info,appl
listen,17,0.0.0.0,59623
2012-07-06T04:38:46-03:00,info,appl
listen,17,0.0.0.0,59624
2012-07-06T04:38:47-03:00,info,appl
listen,17,0.0.0.0,59625
2012-07-06T04:38:47-03:00,info,appl
listen,17,0.0.0.0,59626
2012-07-06T04:38:47-03:00,info,appl
listen,17,0.0.0.0,59627
2012-07-06T04:38:47-03:00,info,appl
listen,17,0.0.0.0,59628
2012-07-06T04:38:47-03:00,info,appl
listen,17,0.0.0.0,59629
2012-07-06T04:38:48-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:38:48-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:38:48-03:00,info,appl
listen,17,0.0.0.0,59630
2012-07-06T04:38:48-03:00,info,appl
listen,17,0.0.0.0,59631
2012-07-06T04:38:48-03:00,info,appl
listen,17,0.0.0.0,59632
2012-07-06T04:38:49-03:00,info,appl
listen,17,0.0.0.0,59633
2012-07-06T04:38:49-03:00,info,appl
listen,17,0.0.0.0,59634
2012-07-06T04:38:49-03:00,info,appl
listen,17,0.0.0.0,59635
2012-07-06T04:38:50-03:00,info,appl
listen,17,0.0.0.0,59636
2012-07-06T04:38:50-03:00,info,appl
listen,17,0.0.0.0,59637
2012-07-06T04:38:50-03:00,info,appl
listen,17,0.0.0.0,59638
2012-07-06T04:38:51-03:00,info,appl
listen,17,0.0.0.0,59639
2012-07-06T04:38:51-03:00,info,appl
listen,17,0.0.0.0,59640
2012-07-06T04:38:51-03:00,info,appl
listen,17,0.0.0.0,59641
2012-07-06T04:38:51-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:38:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T04:38:51-03:00,info,appl
listen,17,0.0.0.0,59642
2012-07-06T04:38:51-03:00,info,appl
listen,17,0.0.0.0,59643
2012-07-06T04:38:52-03:00,info,appl
listen,17,0.0.0.0,59644
2012-07-06T04:38:52-03:00,info,appl
listen,17,0.0.0.0,59645
2012-07-06T04:38:53-03:00,info,appl
listen,17,0.0.0.0,59646
2012-07-06T04:38:53-03:00,info,appl
listen,17,0.0.0.0,59647
2012-07-06T04:38:54-03:00,info,appl
listen,17,0.0.0.0,59648
2012-07-06T04:38:54-03:00,info,appl
listen,17,0.0.0.0,59649
2012-07-06T04:38:54-03:00,info,appl
listen,17,0.0.0.0,59650
2012-07-06T04:38:54-03:00,info,appl
listen,17,0.0.0.0,59651
2012-07-06T04:38:55-03:00,info,appl
listen,17,0.0.0.0,59652
2012-07-06T04:38:55-03:00,info,appl
listen,17,0.0.0.0,59653
2012-07-06T04:38:56-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:38:56-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:38:56-03:00,info,appl
listen,17,0.0.0.0,59654
2012-07-06T04:38:56-03:00,info,appl
listen,17,0.0.0.0,59655
2012-07-06T04:38:56-03:00,info,appl
listen,17,0.0.0.0,59656
2012-07-06T04:38:57-03:00,info,appl
listen,17,0.0.0.0,59657
2012-07-06T04:38:57-03:00,info,appl
listen,17,0.0.0.0,59658
2012-07-06T04:38:57-03:00,info,appl
listen,17,0.0.0.0,59659
2012-07-06T04:38:58-03:00,info,appl
listen,17,0.0.0.0,59660
2012-07-06T04:38:58-03:00,info,appl
listen,17,0.0.0.0,59661
2012-07-06T04:38:58-03:00,info,appl
listen,17,0.0.0.0,59662
2012-07-06T04:38:59-03:00,info,appl
listen,17,0.0.0.0,59663
2012-07-06T04:38:59-03:00,info,appl
listen,17,0.0.0.0,59664
2012-07-06T04:38:59-03:00,info,appl
listen,17,0.0.0.0,59665
2012-07-06T04:38:59-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:38:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:38:59-03:00,info,appl
listen,17,0.0.0.0,59666
2012-07-06T04:38:59-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59667
2012-07-06T04:39:00-03:00,info,appl
listen,17,0.0.0.0,59668
2012-07-06T04:39:00-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T04:39:00-03:00,info,appl
listen,17,0.0.0.0,59669
2012-07-06T04:39:01-03:00,info,appl
listen,17,0.0.0.0,59670
2012-07-06T04:39:01-03:00,info,appl
listen,17,0.0.0.0,59671
2012-07-06T04:39:02-03:00,info,appl
listen,17,0.0.0.0,59672
2012-07-06T04:39:02-03:00,info,appl
listen,17,0.0.0.0,59673
2012-07-06T04:39:02-03:00,info,appl
listen,17,0.0.0.0,59674
2012-07-06T04:39:02-03:00,info,appl
listen,17,0.0.0.0,59675
2012-07-06T04:39:03-03:00,info,appl
listen,17,0.0.0.0,59676
2012-07-06T04:39:03-03:00,info,appl
listen,17,0.0.0.0,59677
2012-07-06T04:39:03-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:03-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:03-03:00,info,appl
listen,17,0.0.0.0,59678
2012-07-06T04:39:03-03:00,info,appl
listen,17,0.0.0.0,59679
2012-07-06T04:39:04-03:00,info,appl
listen,17,0.0.0.0,59680
2012-07-06T04:39:04-03:00,info,appl
listen,17,0.0.0.0,59681
2012-07-06T04:39:05-03:00,info,appl
listen,17,0.0.0.0,59682
2012-07-06T04:39:05-03:00,info,appl
listen,17,0.0.0.0,59683
2012-07-06T04:39:05-03:00,info,appl
listen,17,0.0.0.0,59684
2012-07-06T04:39:06-03:00,info,appl
listen,17,0.0.0.0,59685
2012-07-06T04:39:06-03:00,info,appl
listen,17,0.0.0.0,59686
2012-07-06T04:39:06-03:00,info,appl
listen,17,0.0.0.0,59687
2012-07-06T04:39:06-03:00,info,appl
listen,17,0.0.0.0,59688
2012-07-06T04:39:07-03:00,info,appl
listen,17,0.0.0.0,59689
2012-07-06T04:39:07-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:07-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:07-03:00,info,appl
listen,17,0.0.0.0,59690
2012-07-06T04:39:07-03:00,info,appl
listen,17,0.0.0.0,59691
2012-07-06T04:39:07-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59692
2012-07-06T04:39:08-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T04:39:08-03:00,info,appl
listen,17,0.0.0.0,59693
2012-07-06T04:39:08-03:00,info,appl
listen,17,0.0.0.0,59694
2012-07-06T04:39:09-03:00,info,appl
listen,17,0.0.0.0,59695
2012-07-06T04:39:09-03:00,info,appl
listen,17,0.0.0.0,59696
2012-07-06T04:39:09-03:00,info,appl
listen,17,0.0.0.0,59697
2012-07-06T04:39:10-03:00,info,appl
listen,17,0.0.0.0,59698
2012-07-06T04:39:10-03:00,info,appl
listen,17,0.0.0.0,59699
2012-07-06T04:39:10-03:00,info,appl
listen,17,0.0.0.0,59700
2012-07-06T04:39:10-03:00,info,appl
listen,17,0.0.0.0,59701
2012-07-06T04:39:11-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:11-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:11-03:00,info,appl
listen,17,0.0.0.0,59702
2012-07-06T04:39:11-03:00,info,appl
listen,17,0.0.0.0,59703
2012-07-06T04:39:12-03:00,info,appl
listen,17,0.0.0.0,59704
2012-07-06T04:39:12-03:00,info,appl
listen,17,0.0.0.0,59705
2012-07-06T04:39:13-03:00,info,appl
listen,17,0.0.0.0,59706
2012-07-06T04:39:13-03:00,info,appl
listen,17,0.0.0.0,59707
2012-07-06T04:39:13-03:00,info,appl
listen,17,0.0.0.0,59708
2012-07-06T04:39:14-03:00,info,appl
listen,17,0.0.0.0,59709
2012-07-06T04:39:14-03:00,info,appl
listen,17,0.0.0.0,59710
2012-07-06T04:39:14-03:00,info,appl
listen,17,0.0.0.0,59711
2012-07-06T04:39:14-03:00,info,appl
listen,17,0.0.0.0,59712
2012-07-06T04:39:15-03:00,info,appl
listen,17,0.0.0.0,59713
2012-07-06T04:39:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:15-03:00,info,appl
listen,17,0.0.0.0,59714
2012-07-06T04:39:15-03:00,info,appl
listen,17,0.0.0.0,59715
2012-07-06T04:39:15-03:00,info,appl
listen,17,0.0.0.0,59716
2012-07-06T04:39:16-03:00,info,appl

control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59717
2012-07-06T04:39:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.69,63785
2012-07-06T04:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59718
2012-07-06T04:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59719
2012-07-06T04:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59720
2012-07-06T04:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59721
2012-07-06T04:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59722
2012-07-06T04:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59723
2012-07-06T04:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59724
2012-07-06T04:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59725
2012-07-06T04:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T04:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59726
2012-07-06T04:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59727
2012-07-06T04:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59728
2012-07-06T04:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59729
2012-07-06T04:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59730
2012-07-06T04:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.102.0.20,389
2012-07-06T04:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59731
2012-07-06T04:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59732
2012-07-06T04:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59733
2012-07-06T04:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59734
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59735
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59736
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59737
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59738
2012-07-06T04:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59739
2012-07-06T04:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59740
2012-07-06T04:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59741
2012-07-06T04:39:24-03:00,info,appl
listen,17,0.0.0.0,59742
2012-07-06T04:39:24-03:00,info,appl
listen,17,0.0.0.0,59743
2012-07-06T04:39:25-03:00,info,appl
listen,17,0.0.0.0,59744
2012-07-06T04:39:25-03:00,info,appl
listen,17,0.0.0.0,59745
2012-07-06T04:39:25-03:00,info,appl
listen,17,0.0.0.0,59746
2012-07-06T04:39:25-03:00,info,appl
listen,17,0.0.0.0,59747
2012-07-06T04:39:26-03:00,info,appl
listen,17,0.0.0.0,59748
2012-07-06T04:39:26-03:00,info,appl
listen,17,0.0.0.0,59749
2012-07-06T04:39:27-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:27-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:27-03:00,info,appl
listen,17,0.0.0.0,59750
2012-07-06T04:39:27-03:00,info,appl
listen,17,0.0.0.0,59751
2012-07-06T04:39:27-03:00,info,appl
listen,17,0.0.0.0,59752
2012-07-06T04:39:28-03:00,info,appl
listen,17,0.0.0.0,59753
2012-07-06T04:39:28-03:00,info,appl
listen,17,0.0.0.0,59754
2012-07-06T04:39:28-03:00,info,appl
listen,17,0.0.0.0,59755
2012-07-06T04:39:29-03:00,info,appl
listen,17,0.0.0.0,59756
2012-07-06T04:39:29-03:00,info,appl
listen,17,0.0.0.0,59757
2012-07-06T04:39:29-03:00,info,appl
listen,17,0.0.0.0,59758
2012-07-06T04:39:30-03:00,info,appl
listen,17,0.0.0.0,59759
2012-07-06T04:39:30-03:00,info,appl
listen,17,0.0.0.0,59760
2012-07-06T04:39:30-03:00,info,appl
listen,17,0.0.0.0,59761
2012-07-06T04:39:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:30-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:30-03:00,info,appl
listen,17,0.0.0.0,59762
2012-07-06T04:39:30-03:00,info,appl
listen,17,0.0.0.0,59763
2012-07-06T04:39:31-03:00,info,appl
listen,17,0.0.0.0,59764
2012-07-06T04:39:31-03:00,info,appl
listen,17,0.0.0.0,59765
2012-07-06T04:39:32-03:00,info,appl
listen,17,0.0.0.0,59766
2012-07-06T04:39:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59767
2012-07-06T04:39:33-03:00,info,appl
listen,17,0.0.0.0,59768
2012-07-06T04:39:33-03:00,info,appl
listen,17,0.0.0.0,59769
2012-07-06T04:39:33-03:00,info,appl
listen,17,0.0.0.0,59770
2012-07-06T04:39:33-03:00,info,appl
listen,17,0.0.0.0,59771
2012-07-06T04:39:34-03:00,info,appl
listen,17,0.0.0.0,59772
2012-07-06T04:39:34-03:00,info,appl
listen,17,0.0.0.0,59773
2012-07-06T04:39:34-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:34-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:34-03:00,info,appl
listen,17,0.0.0.0,59774
2012-07-06T04:39:34-03:00,info,appl
listen,17,0.0.0.0,59775
2012-07-06T04:39:35-03:00,info,appl
listen,17,0.0.0.0,59776
2012-07-06T04:39:35-03:00,info,appl
listen,17,0.0.0.0,59777
2012-07-06T04:39:36-03:00,info,appl
listen,17,0.0.0.0,59778
2012-07-06T04:39:36-03:00,info,appl
listen,17,0.0.0.0,59779
2012-07-06T04:39:36-03:00,info,appl
listen,17,0.0.0.0,59780
2012-07-06T04:39:37-03:00,info,appl
listen,17,0.0.0.0,59781
2012-07-06T04:39:37-03:00,info,appl
listen,17,0.0.0.0,59782
2012-07-06T04:39:37-03:00,info,appl
listen,17,0.0.0.0,59783
2012-07-06T04:39:37-03:00,info,appl
listen,17,0.0.0.0,59784
2012-07-06T04:39:38-03:00,info,appl
listen,17,0.0.0.0,59785
2012-07-06T04:39:38-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T04:39:38-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T04:39:38-03:00,info,appl
listen,17,0.0.0.0,59786
2012-07-06T04:39:38-03:00,info,appl
listen,17,0.0.0.0,59787
2012-07-06T04:39:38-03:00,info,appl
listen,17,0.0.0.0,59788
2012-07-06T04:39:39-03:00,info,appl
listen,17,0.0.0.0,59789
2012-07-06T04:39:39-03:00,info,appl
listen,17,0.0.0.0,59790
2012-07-06T04:39:40-03:00,info,appl
listen,17,0.0.0.0,59791
2012-07-06T04:39:40-03:00,info,appl
send,17,10.1.0.197,389
2012-07-06T04:39:40-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59792
2012-07-06T04:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59793
2012-07-06T04:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59794
2012-07-06T04:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59795
2012-07-06T04:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59796
2012-07-06T04:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59797
2012-07-06T04:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59798
2012-07-06T04:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59799
2012-07-06T04:41:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59800
2012-07-06T04:41:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59801
2012-07-06T04:41:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59802
2012-07-06T04:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59803
2012-07-06T04:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59804
2012-07-06T04:41:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59805
2012-07-06T04:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59806
2012-07-06T04:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59807
2012-07-06T04:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59808
2012-07-06T04:41:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59809
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59810
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:42:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:42:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59811
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59812
2012-07-06T04:42:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59813
2012-07-06T04:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59814
2012-07-06T04:42:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59815
2012-07-06T04:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59816
2012-07-06T04:42:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59817
2012-07-06T04:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59818
2012-07-06T04:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59819
2012-07-06T04:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59820
2012-07-06T04:42:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59821
2012-07-06T04:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59822
2012-07-06T04:44:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.124,4200
2012-07-06T04:45:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:45:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:45:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:46:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:47:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T04:47:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59823
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59824
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56027
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T04:47:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56028
2012-07-06T04:47:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56311
2012-07-06T04:47:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T04:47:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56312
2012-07-06T04:47:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56313
2012-07-06T04:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56314
2012-07-06T04:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56315
2012-07-06T04:47:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56316
2012-07-06T04:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56317
2012-07-06T04:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56318
2012-07-06T04:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56319
2012-07-06T04:47:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56320
2012-07-06T04:48:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,59563
2012-07-06T04:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60171
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60172
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60173
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63405
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63406
2012-07-06T04:51:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63407
2012-07-06T04:51:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60161
2012-07-06T04:51:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T04:51:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60162
2012-07-06T04:51:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60163
2012-07-06T04:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60164
2012-07-06T04:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60165
2012-07-06T04:51:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60166
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60167
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60168
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60169
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60170
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58450
2012-07-06T04:51:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T04:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T04:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58451
2012-07-06T04:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58452
2012-07-06T04:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58453
2012-07-06T04:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58454
2012-07-06T04:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58455
2012-07-06T04:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58456
2012-07-06T04:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58457
2012-07-06T04:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58458
2012-07-06T04:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58459
2012-07-06T04:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58460
2012-07-06T04:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58461
2012-07-06T04:51:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58462
2012-07-06T04:52:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T04:52:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T04:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58463
2012-07-06T04:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58464
2012-07-06T04:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58465
2012-07-06T04:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58466
2012-07-06T04:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58467
2012-07-06T04:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58468
2012-07-06T04:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58469
2012-07-06T04:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58470
2012-07-06T04:52:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58471
2012-07-06T04:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58472
2012-07-06T04:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58473
2012-07-06T04:52:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58474
2012-07-06T04:52:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:52:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:52:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T04:53:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:53:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.37,58614
2012-07-06T04:56:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:56:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58475
2012-07-06T04:56:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58476
2012-07-06T04:56:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58477
2012-07-06T04:56:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58478
2012-07-06T04:56:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58479
2012-07-06T04:56:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58480
2012-07-06T04:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58481
2012-07-06T04:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58482
2012-07-06T04:56:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58483
2012-07-06T04:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58484
2012-07-06T04:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58485
2012-07-06T04:56:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58486
2012-07-06T04:57:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T04:57:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T04:57:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T04:57:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58487
2012-07-06T04:57:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T04:57:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58488
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61004
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61005
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54495
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T04:57:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54496
2012-07-06T04:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54497
2012-07-06T04:57:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54498
2012-07-06T04:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54499
2012-07-06T04:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54500
2012-07-06T04:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54501
2012-07-06T04:57:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54502
2012-07-06T04:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54503
2012-07-06T04:57:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54504
2012-07-06T04:59:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T04:59:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T04:59:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:00:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:02:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:02:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:02:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:02:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54505
2012-07-06T05:02:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:02:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54506
2012-07-06T05:02:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54507
2012-07-06T05:02:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54508
2012-07-06T05:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54509
2012-07-06T05:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54510
2012-07-06T05:02:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54511
2012-07-06T05:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54512
2012-07-06T05:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54513
2012-07-06T05:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54514
2012-07-06T05:02:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54515
2012-07-06T05:02:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54516
2012-07-06T05:04:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,2294
2012-07-06T05:05:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,2216
2012-07-06T05:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:05:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55740
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55741
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60629
2012-07-06T05:06:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60630
2012-07-06T05:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60631
2012-07-06T05:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62718
2012-07-06T05:06:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:06:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62719
2012-07-06T05:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62720
2012-07-06T05:06:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62721
2012-07-06T05:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62722
2012-07-06T05:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62723
2012-07-06T05:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62724
2012-07-06T05:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62725
2012-07-06T05:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62726
2012-07-06T05:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62727
2012-07-06T05:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64830
2012-07-06T05:06:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:06:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:06:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62696
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62697
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62698
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62699
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56373
2012-07-06T05:06:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56374
2012-07-06T05:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49698
2012-07-06T05:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49699
2012-07-06T05:06:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54267
2012-07-06T05:06:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54268
2012-07-06T05:06:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62173
2012-07-06T05:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62174
2012-07-06T05:06:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61039
2012-07-06T05:06:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61040
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63180
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63181
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63771
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63772
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63328
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63329
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57192
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57193
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53130
2012-07-06T05:06:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53131
2012-07-06T05:07:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:07:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T05:07:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T05:07:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:07:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53132
2012-07-06T05:07:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T05:07:19-03:00,info,appl
listen,17,0.0.0.0,53133
2012-07-06T05:07:19-03:00,info,appl
w,listen,17,0.0.0.0,50251
2012-07-06T05:07:19-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T05:07:19-03:00,info,appl
listen,17,0.0.0.0,50252
2012-07-06T05:07:20-03:00,info,appl
w,listen,17,0.0.0.0,59568
2012-07-06T05:07:20-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T05:07:20-03:00,info,appl
listen,17,0.0.0.0,59569
2012-07-06T05:07:20-03:00,info,appl
listen,17,0.0.0.0,59570
2012-07-06T05:07:21-03:00,info,appl
listen,17,0.0.0.0,59571
2012-07-06T05:07:21-03:00,info,appl
listen,17,0.0.0.0,59572
2012-07-06T05:07:22-03:00,info,appl
listen,17,0.0.0.0,59573
2012-07-06T05:07:22-03:00,info,appl
listen,17,0.0.0.0,59574
2012-07-06T05:07:22-03:00,info,appl
listen,17,0.0.0.0,59575
2012-07-06T05:07:22-03:00,info,appl
listen,17,0.0.0.0,59576
2012-07-06T05:07:22-03:00,info,appl
listen,17,0.0.0.0,59577
2012-07-06T05:07:36-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T05:11:20-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T05:11:20-03:00,info,appl
listen,17,0.0.0.0,59578
2012-07-06T05:11:20-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T05:11:20-03:00,info,appl
listen,17,0.0.0.0,59579
2012-07-06T05:11:21-03:00,info,appl
listen,17,0.0.0.0,59580
2012-07-06T05:11:21-03:00,info,appl
listen,17,0.0.0.0,59581
2012-07-06T05:11:22-03:00,info,appl
listen,17,0.0.0.0,59582
2012-07-06T05:11:22-03:00,info,appl
listen,17,0.0.0.0,59583
2012-07-06T05:11:23-03:00,info,appl
listen,17,0.0.0.0,59584
2012-07-06T05:11:23-03:00,info,appl
listen,17,0.0.0.0,59585
2012-07-06T05:11:23-03:00,info,appl
listen,17,0.0.0.0,59586
2012-07-06T05:11:23-03:00,info,appl
listen,17,0.0.0.0,59587
2012-07-06T05:11:24-03:00,info,appl
listen,17,0.0.0.0,59588
2012-07-06T05:11:24-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59589
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64907
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64908
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64909
2012-07-06T05:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64910
2012-07-06T05:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64911
2012-07-06T05:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64912
2012-07-06T05:11:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64913
2012-07-06T05:11:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64914
2012-07-06T05:11:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64915
2012-07-06T05:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64916
2012-07-06T05:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64917
2012-07-06T05:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64918
2012-07-06T05:11:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64919
2012-07-06T05:11:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64920
2012-07-06T05:11:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53368
2012-07-06T05:11:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:11:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58889
2012-07-06T05:12:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:12:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58890
2012-07-06T05:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58891
2012-07-06T05:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58892
2012-07-06T05:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58893
2012-07-06T05:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58894
2012-07-06T05:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58895
2012-07-06T05:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58896
2012-07-06T05:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58897
2012-07-06T05:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58898
2012-07-06T05:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58899
2012-07-06T05:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58900
2012-07-06T05:12:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58901
2012-07-06T05:13:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:13:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:14:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:14:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:15:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,54716
2012-07-06T05:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,62113
2012-07-06T05:17:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:17:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:17:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:17:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58902
2012-07-06T05:17:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:17:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58903
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56443
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56444
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51354
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:17:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51355
2012-07-06T05:17:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51356
2012-07-06T05:17:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51357
2012-07-06T05:17:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51358
2012-07-06T05:17:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51359
2012-07-06T05:17:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51360
2012-07-06T05:17:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51361
2012-07-06T05:17:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51362
2012-07-06T05:17:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51363
2012-07-06T05:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,62839
2012-07-06T05:18:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,3807
2012-07-06T05:18:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,61989
2012-07-06T05:20:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:20:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:20:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:20:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:21:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:21:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,54497
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51364
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51365
2012-07-06T05:21:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51366
2012-07-06T05:21:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51367
2012-07-06T05:21:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51368
2012-07-06T05:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51369
2012-07-06T05:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51370
2012-07-06T05:21:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51371
2012-07-06T05:21:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51372
2012-07-06T05:21:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51373
2012-07-06T05:21:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51374
2012-07-06T05:21:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51375
2012-07-06T05:21:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:22:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:22:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51376
2012-07-06T05:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:22:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51377
2012-07-06T05:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51378
2012-07-06T05:22:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,60430
2012-07-06T05:22:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51379
2012-07-06T05:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51380
2012-07-06T05:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51381
2012-07-06T05:22:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51382
2012-07-06T05:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51383
2012-07-06T05:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51384
2012-07-06T05:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51385
2012-07-06T05:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51386
2012-07-06T05:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51387
2012-07-06T05:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,1444
2012-07-06T05:26:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:26:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51388
2012-07-06T05:26:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:26:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51389
2012-07-06T05:26:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51390
2012-07-06T05:26:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51391
2012-07-06T05:26:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51392
2012-07-06T05:26:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51393
2012-07-06T05:26:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51394
2012-07-06T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51395
2012-07-06T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51396
2012-07-06T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51397
2012-07-06T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51398
2012-07-06T05:26:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51399
2012-07-06T05:26:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.66,4464
2012-07-06T05:27:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:27:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51400
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51401
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60700
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:27:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60701
2012-07-06T05:27:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62231
2012-07-06T05:27:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:27:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62232
2012-07-06T05:27:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62233
2012-07-06T05:27:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62234
2012-07-06T05:27:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62235
2012-07-06T05:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62236
2012-07-06T05:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62237
2012-07-06T05:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62238
2012-07-06T05:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62239
2012-07-06T05:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62240
2012-07-06T05:27:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:27:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:28:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:28:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.185,3595
2012-07-06T05:28:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:31:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,1869
2012-07-06T05:32:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:32:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:32:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:32:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62241
2012-07-06T05:32:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T05:32:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62242
2012-07-06T05:32:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62243
2012-07-06T05:32:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62244
2012-07-06T05:32:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62245
2012-07-06T05:32:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62246
2012-07-06T05:32:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62247
2012-07-06T05:32:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62248
2012-07-06T05:32:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62249
2012-07-06T05:32:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62250
2012-07-06T05:32:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62251
2012-07-06T05:32:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62252
2012-07-06T05:34:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,1376
2012-07-06T05:35:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:35:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:35:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:35:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:35:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:36:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T05:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62253
2012-07-06T05:36:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62254
2012-07-06T05:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62255
2012-07-06T05:36:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62256
2012-07-06T05:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62257
2012-07-06T05:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62258
2012-07-06T05:36:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62259
2012-07-06T05:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62260
2012-07-06T05:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62261
2012-07-06T05:36:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62262
2012-07-06T05:36:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62263
2012-07-06T05:36:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62264
2012-07-06T05:36:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62265
2012-07-06T05:37:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.8,2851
2012-07-06T05:37:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:37:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:37:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:37:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62266
2012-07-06T05:37:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:37:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62267
2012-07-06T05:37:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58546
2012-07-06T05:37:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:37:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58547
2012-07-06T05:37:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55708
2012-07-06T05:37:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:37:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55709
2012-07-06T05:37:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55710
2012-07-06T05:37:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55711
2012-07-06T05:37:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55712
2012-07-06T05:37:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55713
2012-07-06T05:37:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55714
2012-07-06T05:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55715
2012-07-06T05:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55716
2012-07-06T05:37:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55717
2012-07-06T05:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,1768
2012-07-06T05:39:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.229,60336
2012-07-06T05:41:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:41:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55718
2012-07-06T05:41:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T05:41:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55719
2012-07-06T05:41:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55720
2012-07-06T05:41:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55721
2012-07-06T05:41:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55722
2012-07-06T05:41:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55723
2012-07-06T05:41:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55724
2012-07-06T05:41:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55725
2012-07-06T05:41:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55726
2012-07-06T05:41:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55727
2012-07-06T05:41:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55728
2012-07-06T05:41:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55729
2012-07-06T05:42:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:42:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:42:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55730
2012-07-06T05:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T05:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55731
2012-07-06T05:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55732
2012-07-06T05:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55733
2012-07-06T05:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55734
2012-07-06T05:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55735
2012-07-06T05:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55736
2012-07-06T05:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55737
2012-07-06T05:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55738
2012-07-06T05:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55739
2012-07-06T05:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55740
2012-07-06T05:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55741
2012-07-06T05:42:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55742
2012-07-06T05:43:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:44:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,4479
2012-07-06T05:45:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,3709
2012-07-06T05:46:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,60494
2012-07-06T05:47:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.67,54397
2012-07-06T05:47:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:47:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55743
2012-07-06T05:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:47:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55744
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60584
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60585
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64254
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:47:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64255
2012-07-06T05:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64256
2012-07-06T05:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64257
2012-07-06T05:47:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64258
2012-07-06T05:47:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64259
2012-07-06T05:47:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64260
2012-07-06T05:47:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64261
2012-07-06T05:47:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64262
2012-07-06T05:47:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64263
2012-07-06T05:48:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,4431
2012-07-06T05:48:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.142,2875
2012-07-06T05:49:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:49:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T05:49:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,2474
2012-07-06T05:49:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:50:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.145,64364
2012-07-06T05:50:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T05:51:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,1111
2012-07-06T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64264
2012-07-06T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64265
2012-07-06T05:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64266
2012-07-06T05:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64267
2012-07-06T05:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64268
2012-07-06T05:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64269
2012-07-06T05:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64270
2012-07-06T05:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64271
2012-07-06T05:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64272
2012-07-06T05:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64273
2012-07-06T05:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64274
2012-07-06T05:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64275
2012-07-06T05:52:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:52:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:52:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:52:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64276
2012-07-06T05:52:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:52:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64277
2012-07-06T05:52:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64278
2012-07-06T05:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64279
2012-07-06T05:52:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64280
2012-07-06T05:52:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64281
2012-07-06T05:52:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64282
2012-07-06T05:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64283
2012-07-06T05:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64284
2012-07-06T05:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64285
2012-07-06T05:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64286
2012-07-06T05:52:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64287
2012-07-06T05:53:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,49502
2012-07-06T05:56:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T05:56:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64288
2012-07-06T05:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:56:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64289
2012-07-06T05:56:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64290
2012-07-06T05:56:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64291
2012-07-06T05:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64292
2012-07-06T05:56:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64293
2012-07-06T05:56:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64294
2012-07-06T05:56:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64295
2012-07-06T05:56:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64296
2012-07-06T05:56:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64297
2012-07-06T05:56:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64298
2012-07-06T05:56:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64299
2012-07-06T05:56:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:57:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,62497
2012-07-06T05:57:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T05:57:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.187,60620
2012-07-06T05:57:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T05:57:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64300
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64301
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54276
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T05:57:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54277
2012-07-06T05:57:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60294
2012-07-06T05:57:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T05:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60295
2012-07-06T05:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60296
2012-07-06T05:57:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60297
2012-07-06T05:57:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60298
2012-07-06T05:57:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60299
2012-07-06T05:57:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60300
2012-07-06T05:58:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60301
2012-07-06T05:58:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60302
2012-07-06T05:58:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60303
2012-07-06T05:58:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,62499
2012-07-06T06:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T06:03:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T06:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60304
2012-07-06T06:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:03:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60305
2012-07-06T06:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60306
2012-07-06T06:03:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60307
2012-07-06T06:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60308
2012-07-06T06:03:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60309
2012-07-06T06:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60310
2012-07-06T06:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60311
2012-07-06T06:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60312
2012-07-06T06:03:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60313
2012-07-06T06:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60314
2012-07-06T06:03:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60315
2012-07-06T06:03:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:03:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:04:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:04:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.151,50840
2012-07-06T06:04:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:05:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.0,1620
2012-07-06T06:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:05:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:05:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50923
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50924
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50925
2012-07-06T06:06:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50926
2012-07-06T06:06:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62312
2012-07-06T06:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62313
2012-07-06T06:06:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63275
2012-07-06T06:06:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63276
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60715
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60716
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51319
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51320
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59661
2012-07-06T06:06:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59662
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59595
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59596
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56459
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56460
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49649
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49650
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60631
2012-07-06T06:06:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60632
2012-07-06T06:06:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59033
2012-07-06T06:06:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59034
2012-07-06T06:07:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,49624
2012-07-06T06:08:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T06:08:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T06:08:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:08:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59035
2012-07-06T06:08:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:08:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59036
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56015
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56016
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59858
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:08:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59859
2012-07-06T06:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59860
2012-07-06T06:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59861
2012-07-06T06:08:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59862
2012-07-06T06:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59863
2012-07-06T06:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59864
2012-07-06T06:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59865
2012-07-06T06:08:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59866
2012-07-06T06:08:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59867
2012-07-06T06:10:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:10:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:11:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:11:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59868
2012-07-06T06:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:11:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59869
2012-07-06T06:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59870
2012-07-06T06:11:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59871
2012-07-06T06:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59872
2012-07-06T06:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59873
2012-07-06T06:11:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59874
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59875
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59876
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59877
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59878
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59879
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59880
2012-07-06T06:11:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59881
2012-07-06T06:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59882
2012-07-06T06:11:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59883
2012-07-06T06:11:43-03:00,info,appl
w,listen,17,0.0.0.0,64624
2012-07-06T06:11:43-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64625
2012-07-06T06:11:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64626
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64627
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64628
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64629
2012-07-06T06:11:43-03:00,info,appl
listen,17,0.0.0.0,64630
2012-07-06T06:11:44-03:00,info,appl
listen,17,0.0.0.0,64631
2012-07-06T06:11:44-03:00,info,appl
listen,17,0.0.0.0,64632
2012-07-06T06:11:44-03:00,info,appl
listen,17,0.0.0.0,64633
2012-07-06T06:11:44-03:00,info,appl
listen,17,0.0.0.0,64634
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64635
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64636
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64637
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64638
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64639
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64640
2012-07-06T06:11:45-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T06:11:45-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:11:45-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64641
2012-07-06T06:11:45-03:00,info,appl
listen,17,0.0.0.0,64642
2012-07-06T06:11:46-03:00,info,appl
listen,17,0.0.0.0,64643
2012-07-06T06:11:46-03:00,info,appl
listen,17,0.0.0.0,64644
2012-07-06T06:11:46-03:00,info,appl
listen,17,0.0.0.0,64645
2012-07-06T06:11:46-03:00,info,appl
listen,17,0.0.0.0,64646
2012-07-06T06:11:46-03:00,info,appl
listen,17,0.0.0.0,64647
2012-07-06T06:11:46-03:00,info,appl

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64648
2012-07-06T06:11:47-03:00,info,appl
listen,17,0.0.0.0,64649
2012-07-06T06:11:47-03:00,info,appl
listen,17,0.0.0.0,64650
2012-07-06T06:11:47-03:00,info,appl
listen,17,0.0.0.0,64651
2012-07-06T06:11:48-03:00,info,appl
listen,17,0.0.0.0,64652
2012-07-06T06:11:48-03:00,info,appl
listen,17,0.0.0.0,64653
2012-07-06T06:11:48-03:00,info,appl
listen,17,0.0.0.0,64654
2012-07-06T06:11:48-03:00,info,appl
listen,17,0.0.0.0,64655
2012-07-06T06:11:49-03:00,info,appl
listen,17,0.0.0.0,64656
2012-07-06T06:11:49-03:00,info,appl
listen,17,0.0.0.0,64657
2012-07-06T06:11:49-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:11:49-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:11:49-03:00,info,appl
listen,17,0.0.0.0,64658
2012-07-06T06:11:49-03:00,info,appl
listen,17,0.0.0.0,64659
2012-07-06T06:11:50-03:00,info,appl
listen,17,0.0.0.0,64660
2012-07-06T06:11:50-03:00,info,appl
listen,17,0.0.0.0,64661
2012-07-06T06:11:51-03:00,info,appl
listen,17,0.0.0.0,64662
2012-07-06T06:11:51-03:00,info,appl
listen,17,0.0.0.0,64663
2012-07-06T06:11:51-03:00,info,appl
listen,17,0.0.0.0,64664
2012-07-06T06:11:52-03:00,info,appl
listen,17,0.0.0.0,64665
2012-07-06T06:11:52-03:00,info,appl
listen,17,0.0.0.0,64666
2012-07-06T06:11:52-03:00,info,appl
listen,17,0.0.0.0,64667
2012-07-06T06:11:52-03:00,info,appl
listen,17,0.0.0.0,64668
2012-07-06T06:11:53-03:00,info,appl
listen,17,0.0.0.0,64669
2012-07-06T06:11:53-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:11:53-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:11:53-03:00,info,appl
listen,17,0.0.0.0,64670
2012-07-06T06:11:53-03:00,info,appl
listen,17,0.0.0.0,64671
2012-07-06T06:11:53-03:00,info,appl
listen,17,0.0.0.0,64672
2012-07-06T06:11:54-03:00,info,appl
listen,17,0.0.0.0,64673
2012-07-06T06:11:54-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64674
2012-07-06T06:11:55-03:00,info,appl
listen,17,0.0.0.0,64675
2012-07-06T06:11:55-03:00,info,appl
listen,17,0.0.0.0,64676
2012-07-06T06:11:56-03:00,info,appl
listen,17,0.0.0.0,64677
2012-07-06T06:11:56-03:00,info,appl
listen,17,0.0.0.0,64678
2012-07-06T06:11:56-03:00,info,appl
listen,17,0.0.0.0,64679
2012-07-06T06:11:56-03:00,info,appl
listen,17,0.0.0.0,64680
2012-07-06T06:11:56-03:00,info,appl
listen,17,0.0.0.0,64681
2012-07-06T06:11:57-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:11:57-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:11:57-03:00,info,appl
listen,17,0.0.0.0,64682
2012-07-06T06:11:57-03:00,info,appl
listen,17,0.0.0.0,64683
2012-07-06T06:11:58-03:00,info,appl
listen,17,0.0.0.0,64684
2012-07-06T06:11:58-03:00,info,appl
listen,17,0.0.0.0,64685
2012-07-06T06:11:59-03:00,info,appl
listen,17,0.0.0.0,64686
2012-07-06T06:11:59-03:00,info,appl
listen,17,0.0.0.0,64687
2012-07-06T06:11:59-03:00,info,appl
send,17,10.101.0.11,389
2012-07-06T06:11:59-03:00,info,appl
listen,17,0.0.0.0,64688
2012-07-06T06:12:00-03:00,info,appl
listen,17,0.0.0.0,64689
2012-07-06T06:12:00-03:00,info,appl
listen,17,0.0.0.0,64690
2012-07-06T06:12:00-03:00,info,appl
listen,17,0.0.0.0,64691
2012-07-06T06:12:00-03:00,info,appl
listen,17,0.0.0.0,64692
2012-07-06T06:12:01-03:00,info,appl
listen,17,0.0.0.0,64693
2012-07-06T06:12:01-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:01-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:01-03:00,info,appl
listen,17,0.0.0.0,64694
2012-07-06T06:12:01-03:00,info,appl
listen,17,0.0.0.0,64695
2012-07-06T06:12:01-03:00,info,appl
listen,17,0.0.0.0,64696
2012-07-06T06:12:02-03:00,info,appl
listen,17,0.0.0.0,64697
2012-07-06T06:12:02-03:00,info,appl
listen,17,0.0.0.0,64698
2012-07-06T06:12:03-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64699
2012-07-06T06:12:03-03:00,info,appl
listen,17,0.0.0.0,64700
2012-07-06T06:12:04-03:00,info,appl
listen,17,0.0.0.0,64701
2012-07-06T06:12:04-03:00,info,appl
listen,17,0.0.0.0,64702
2012-07-06T06:12:04-03:00,info,appl
listen,17,0.0.0.0,64703
2012-07-06T06:12:04-03:00,info,appl
listen,17,0.0.0.0,64704
2012-07-06T06:12:04-03:00,info,appl
listen,17,0.0.0.0,64705
2012-07-06T06:12:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:05-03:00,info,appl
listen,17,0.0.0.0,64706
2012-07-06T06:12:05-03:00,info,appl
listen,17,0.0.0.0,64707
2012-07-06T06:12:05-03:00,info,appl
listen,17,0.0.0.0,64708
2012-07-06T06:12:06-03:00,info,appl
listen,17,0.0.0.0,64709
2012-07-06T06:12:06-03:00,info,appl
listen,17,0.0.0.0,64710
2012-07-06T06:12:07-03:00,info,appl
listen,17,0.0.0.0,64711
2012-07-06T06:12:07-03:00,info,appl
listen,17,0.0.0.0,64712
2012-07-06T06:12:07-03:00,info,appl
listen,17,0.0.0.0,64713
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64714
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64715
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64716
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64717
2012-07-06T06:12:08-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:08-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64718
2012-07-06T06:12:08-03:00,info,appl
listen,17,0.0.0.0,64719
2012-07-06T06:12:09-03:00,info,appl
listen,17,0.0.0.0,64720
2012-07-06T06:12:09-03:00,info,appl
listen,17,0.0.0.0,64721
2012-07-06T06:12:10-03:00,info,appl
listen,17,0.0.0.0,64722
2012-07-06T06:12:10-03:00,info,appl
listen,17,0.0.0.0,64723
2012-07-06T06:12:11-03:00,info,appl
listen,17,0.0.0.0,64724
2012-07-06T06:12:11-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64725
2012-07-06T06:12:11-03:00,info,appl
listen,17,0.0.0.0,64726
2012-07-06T06:12:12-03:00,info,appl
listen,17,0.0.0.0,64727
2012-07-06T06:12:12-03:00,info,appl
listen,17,0.0.0.0,64728
2012-07-06T06:12:12-03:00,info,appl
listen,17,0.0.0.0,64729
2012-07-06T06:12:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:13-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:13-03:00,info,appl
listen,17,0.0.0.0,64730
2012-07-06T06:12:13-03:00,info,appl
listen,17,0.0.0.0,64731
2012-07-06T06:12:13-03:00,info,appl
listen,17,0.0.0.0,64732
2012-07-06T06:12:14-03:00,info,appl
listen,17,0.0.0.0,64733
2012-07-06T06:12:14-03:00,info,appl
listen,17,0.0.0.0,64734
2012-07-06T06:12:15-03:00,info,appl
listen,17,0.0.0.0,64735
2012-07-06T06:12:15-03:00,info,appl
listen,17,0.0.0.0,64736
2012-07-06T06:12:15-03:00,info,appl
listen,17,0.0.0.0,64737
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64738
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64739
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64740
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64741
2012-07-06T06:12:16-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:16-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64742
2012-07-06T06:12:16-03:00,info,appl
listen,17,0.0.0.0,64743
2012-07-06T06:12:17-03:00,info,appl
listen,17,0.0.0.0,64744
2012-07-06T06:12:17-03:00,info,appl
listen,17,0.0.0.0,64745
2012-07-06T06:12:18-03:00,info,appl
listen,17,0.0.0.0,64746
2012-07-06T06:12:18-03:00,info,appl
listen,17,0.0.0.0,64747
2012-07-06T06:12:19-03:00,info,appl
listen,17,0.0.0.0,64748
2012-07-06T06:12:19-03:00,info,appl
send,17,10.1.0.198,389
2012-07-06T06:12:19-03:00,info,appl
listen,17,0.0.0.0,64749
2012-07-06T06:12:19-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64750
2012-07-06T06:12:19-03:00,info,appl
listen,17,0.0.0.0,64751
2012-07-06T06:12:20-03:00,info,appl
listen,17,0.0.0.0,64752
2012-07-06T06:12:20-03:00,info,appl
listen,17,0.0.0.0,64753
2012-07-06T06:12:20-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:20-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:20-03:00,info,appl
listen,17,0.0.0.0,64754
2012-07-06T06:12:20-03:00,info,appl
listen,17,0.0.0.0,64755
2012-07-06T06:12:21-03:00,info,appl
listen,17,0.0.0.0,64756
2012-07-06T06:12:21-03:00,info,appl
listen,17,0.0.0.0,64757
2012-07-06T06:12:22-03:00,info,appl
listen,17,0.0.0.0,64758
2012-07-06T06:12:22-03:00,info,appl
listen,17,0.0.0.0,64759
2012-07-06T06:12:22-03:00,info,appl
listen,17,0.0.0.0,64760
2012-07-06T06:12:23-03:00,info,appl
listen,17,0.0.0.0,64761
2012-07-06T06:12:23-03:00,info,appl
listen,17,0.0.0.0,64762
2012-07-06T06:12:23-03:00,info,appl
listen,17,0.0.0.0,64763
2012-07-06T06:12:23-03:00,info,appl
listen,17,0.0.0.0,64764
2012-07-06T06:12:24-03:00,info,appl
listen,17,0.0.0.0,64765
2012-07-06T06:12:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:24-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:24-03:00,info,appl
listen,17,0.0.0.0,64766
2012-07-06T06:12:24-03:00,info,appl
listen,17,0.0.0.0,64767
2012-07-06T06:12:24-03:00,info,appl
listen,17,0.0.0.0,64768
2012-07-06T06:12:25-03:00,info,appl
listen,17,0.0.0.0,64769
2012-07-06T06:12:25-03:00,info,appl
listen,17,0.0.0.0,64770
2012-07-06T06:12:26-03:00,info,appl
listen,17,0.0.0.0,64771
2012-07-06T06:12:26-03:00,info,appl
listen,17,0.0.0.0,64772
2012-07-06T06:12:27-03:00,info,appl
listen,17,0.0.0.0,64773
2012-07-06T06:12:27-03:00,info,appl
listen,17,0.0.0.0,64774
2012-07-06T06:12:27-03:00,info,appl
listen,17,0.0.0.0,64775
2012-07-06T06:12:27-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64776
2012-07-06T06:12:27-03:00,info,appl
listen,17,0.0.0.0,64777
2012-07-06T06:12:28-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:28-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:28-03:00,info,appl
listen,17,0.0.0.0,64778
2012-07-06T06:12:28-03:00,info,appl
listen,17,0.0.0.0,64779
2012-07-06T06:12:29-03:00,info,appl
listen,17,0.0.0.0,64780
2012-07-06T06:12:29-03:00,info,appl
listen,17,0.0.0.0,64781
2012-07-06T06:12:30-03:00,info,appl
listen,17,0.0.0.0,64782
2012-07-06T06:12:30-03:00,info,appl
listen,17,0.0.0.0,64783
2012-07-06T06:12:30-03:00,info,appl
listen,17,0.0.0.0,64784
2012-07-06T06:12:31-03:00,info,appl
listen,17,0.0.0.0,64785
2012-07-06T06:12:31-03:00,info,appl
listen,17,0.0.0.0,64786
2012-07-06T06:12:31-03:00,info,appl
listen,17,0.0.0.0,64787
2012-07-06T06:12:31-03:00,info,appl
listen,17,0.0.0.0,64788
2012-07-06T06:12:32-03:00,info,appl
listen,17,0.0.0.0,64789
2012-07-06T06:12:32-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T06:12:32-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T06:12:32-03:00,info,appl
listen,17,0.0.0.0,64790
2012-07-06T06:12:32-03:00,info,appl
listen,17,0.0.0.0,64791
2012-07-06T06:12:32-03:00,info,appl
listen,17,0.0.0.0,64792
2012-07-06T06:12:33-03:00,info,appl
listen,17,0.0.0.0,64793
2012-07-06T06:12:33-03:00,info,appl
listen,17,0.0.0.0,64794
2012-07-06T06:12:34-03:00,info,appl
listen,17,0.0.0.0,64795
2012-07-06T06:12:34-03:00,info,appl
listen,17,0.0.0.0,64796
2012-07-06T06:12:35-03:00,info,appl
listen,17,0.0.0.0,64797
2012-07-06T06:12:35-03:00,info,appl
listen,17,0.0.0.0,64798
2012-07-06T06:12:35-03:00,info,appl
listen,17,0.0.0.0,64799
2012-07-06T06:12:35-03:00,info,appl
listen,17,0.0.0.0,64800
2012-07-06T06:12:35-03:00,info,appl
listen,17,0.0.0.0,64801
2012-07-06T06:12:36-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,1025
2012-07-06T06:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64802
2012-07-06T06:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64803
2012-07-06T06:12:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64804
2012-07-06T06:12:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64805
2012-07-06T06:12:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64806
2012-07-06T06:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64807
2012-07-06T06:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64808
2012-07-06T06:12:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64809
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64810
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64811
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.1.0.198,389
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64812
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64813
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64814
2012-07-06T06:12:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64815
2012-07-06T06:12:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64816
2012-07-06T06:12:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64817
2012-07-06T06:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64818
2012-07-06T06:12:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64819
2012-07-06T06:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64820
2012-07-06T06:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64821
2012-07-06T06:12:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64822
2012-07-06T06:12:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64823
2012-07-06T06:12:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64824
2012-07-06T06:12:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64825
2012-07-06T06:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,59788
2012-07-06T06:13:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:13:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64826
2012-07-06T06:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64827
2012-07-06T06:13:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64828
2012-07-06T06:13:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64829
2012-07-06T06:13:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64830
2012-07-06T06:13:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64831
2012-07-06T06:13:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64832
2012-07-06T06:13:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64833
2012-07-06T06:13:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64834
2012-07-06T06:13:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64835
2012-07-06T06:13:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64836
2012-07-06T06:13:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64837
2012-07-06T06:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54705
2012-07-06T06:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57745
2012-07-06T06:15:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.237,58552
2012-07-06T06:16:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.122,58554
2012-07-06T06:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:17:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:18:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:18:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57746
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57747
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53713
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.11,53
2012-07-06T06:18:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53714
2012-07-06T06:18:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56812
2012-07-06T06:18:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56813
2012-07-06T06:18:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56814
2012-07-06T06:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56815
2012-07-06T06:18:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56816
2012-07-06T06:18:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56817
2012-07-06T06:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56818
2012-07-06T06:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56819
2012-07-06T06:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56820
2012-07-06T06:18:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56821
2012-07-06T06:18:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56822
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56823
2012-07-06T06:21:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56824
2012-07-06T06:21:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56825
2012-07-06T06:21:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56826
2012-07-06T06:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56827
2012-07-06T06:22:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56828
2012-07-06T06:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56829
2012-07-06T06:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56830
2012-07-06T06:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56831
2012-07-06T06:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56832
2012-07-06T06:22:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56833
2012-07-06T06:23:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:23:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:23:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:23:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56834
2012-07-06T06:23:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:23:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56835
2012-07-06T06:23:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56836
2012-07-06T06:23:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56837
2012-07-06T06:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56838
2012-07-06T06:23:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56839
2012-07-06T06:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56840
2012-07-06T06:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56841
2012-07-06T06:23:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56842
2012-07-06T06:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56843
2012-07-06T06:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56844
2012-07-06T06:23:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56845
2012-07-06T06:24:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,55024
2012-07-06T06:24:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.100,3229
2012-07-06T06:24:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:24:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:25:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:25:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56846
2012-07-06T06:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56847
2012-07-06T06:26:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56848
2012-07-06T06:26:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56849
2012-07-06T06:26:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56850
2012-07-06T06:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56851
2012-07-06T06:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56852
2012-07-06T06:26:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56853
2012-07-06T06:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56854
2012-07-06T06:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56855
2012-07-06T06:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56856
2012-07-06T06:26:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56857
2012-07-06T06:28:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:28:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56858
2012-07-06T06:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:28:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56859
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62396
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62397
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60157
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:28:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60158
2012-07-06T06:28:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60159
2012-07-06T06:28:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60160
2012-07-06T06:28:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60161
2012-07-06T06:28:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60162
2012-07-06T06:28:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60163
2012-07-06T06:28:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60164
2012-07-06T06:28:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60165
2012-07-06T06:28:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60166
2012-07-06T06:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:32:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T06:33:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:33:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:33:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60167
2012-07-06T06:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60168
2012-07-06T06:33:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60169
2012-07-06T06:33:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60170
2012-07-06T06:33:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60171
2012-07-06T06:33:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60172
2012-07-06T06:33:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60173
2012-07-06T06:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60174
2012-07-06T06:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60175
2012-07-06T06:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60176
2012-07-06T06:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60177
2012-07-06T06:33:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60178
2012-07-06T06:35:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:35:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:36:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,2737
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60179
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60180
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60181
2012-07-06T06:37:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60182
2012-07-06T06:37:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60183
2012-07-06T06:37:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60184
2012-07-06T06:37:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60185
2012-07-06T06:37:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60186
2012-07-06T06:37:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60187
2012-07-06T06:37:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60188
2012-07-06T06:37:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60189
2012-07-06T06:37:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60190
2012-07-06T06:37:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60191
2012-07-06T06:38:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,2416
2012-07-06T06:38:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:38:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60192
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60193
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59820
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:38:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59821
2012-07-06T06:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58387
2012-07-06T06:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58388
2012-07-06T06:38:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58389
2012-07-06T06:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58390
2012-07-06T06:38:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58391
2012-07-06T06:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58392
2012-07-06T06:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58393
2012-07-06T06:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58394
2012-07-06T06:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58395
2012-07-06T06:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58396
2012-07-06T06:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,2436
2012-07-06T06:39:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:39:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T06:39:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:40:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:40:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,55813
2012-07-06T06:40:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.80,63546
2012-07-06T06:41:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,3851
2012-07-06T06:41:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58397
2012-07-06T06:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58398
2012-07-06T06:41:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58399
2012-07-06T06:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58400
2012-07-06T06:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58401
2012-07-06T06:41:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58402
2012-07-06T06:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58403
2012-07-06T06:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58404
2012-07-06T06:41:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58405
2012-07-06T06:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58406
2012-07-06T06:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58407
2012-07-06T06:41:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58408
2012-07-06T06:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,53962
2012-07-06T06:43:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,54182
2012-07-06T06:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58409
2012-07-06T06:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:43:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:43:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:43:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58410
2012-07-06T06:43:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58411
2012-07-06T06:43:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58412
2012-07-06T06:43:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58413
2012-07-06T06:43:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58414
2012-07-06T06:43:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58415
2012-07-06T06:43:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58416
2012-07-06T06:43:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58417
2012-07-06T06:43:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58418
2012-07-06T06:43:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58419
2012-07-06T06:43:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58420
2012-07-06T06:45:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,52062
2012-07-06T06:46:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:46:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:46:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:47:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:48:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:48:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:48:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:48:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58421
2012-07-06T06:48:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:48:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58422
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60266
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60267
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54758
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:48:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54759
2012-07-06T06:48:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-06T06:48:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54761
2012-07-06T06:48:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54762
2012-07-06T06:48:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54763
2012-07-06T06:48:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54764
2012-07-06T06:48:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54765
2012-07-06T06:48:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54766
2012-07-06T06:48:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54767
2012-07-06T06:50:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:50:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58518
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58519
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58520
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61845
2012-07-06T06:51:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61846
2012-07-06T06:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61847
2012-07-06T06:51:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49218
2012-07-06T06:51:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:51:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49219
2012-07-06T06:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49220
2012-07-06T06:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49221
2012-07-06T06:51:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49222
2012-07-06T06:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49223
2012-07-06T06:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49224
2012-07-06T06:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49225
2012-07-06T06:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49226
2012-07-06T06:51:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49227
2012-07-06T06:51:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49629
2012-07-06T06:51:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,3815
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49630
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49631
2012-07-06T06:52:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49632
2012-07-06T06:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49633
2012-07-06T06:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49634
2012-07-06T06:52:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49635
2012-07-06T06:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49636
2012-07-06T06:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49637
2012-07-06T06:52:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49638
2012-07-06T06:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49639
2012-07-06T06:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49640
2012-07-06T06:52:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49641
2012-07-06T06:52:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,65063
2012-07-06T06:53:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T06:53:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:53:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.85,51745
2012-07-06T06:53:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:53:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49642
2012-07-06T06:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49643
2012-07-06T06:53:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49644
2012-07-06T06:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49645
2012-07-06T06:53:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49646
2012-07-06T06:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49647
2012-07-06T06:53:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49648
2012-07-06T06:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49649
2012-07-06T06:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49650
2012-07-06T06:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49651
2012-07-06T06:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49652
2012-07-06T06:53:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49653
2012-07-06T06:53:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:54:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T06:55:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,63790
2012-07-06T06:55:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,2283
2012-07-06T06:56:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,1286
2012-07-06T06:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49654
2012-07-06T06:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T06:56:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49655
2012-07-06T06:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49656
2012-07-06T06:56:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49657
2012-07-06T06:56:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49658
2012-07-06T06:56:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49659
2012-07-06T06:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49660
2012-07-06T06:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49661
2012-07-06T06:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49662
2012-07-06T06:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49663
2012-07-06T06:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49664
2012-07-06T06:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49665
2012-07-06T06:57:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.5,4484
2012-07-06T06:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,4514
2012-07-06T06:57:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,4530
2012-07-06T06:58:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T06:58:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49666
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49667
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49777
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T06:58:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49778
2012-07-06T06:58:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54956
2012-07-06T06:58:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T06:58:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54957
2012-07-06T06:58:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54958
2012-07-06T06:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54959
2012-07-06T06:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54960
2012-07-06T06:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54961
2012-07-06T06:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54962
2012-07-06T06:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54963
2012-07-06T06:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54964
2012-07-06T06:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54965
2012-07-06T06:59:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,1645
2012-07-06T06:59:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,1665
2012-07-06T07:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:00:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:00:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:01:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,51024
2012-07-06T07:01:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:01:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,56305
2012-07-06T07:01:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,62910
2012-07-06T07:03:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T07:03:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T07:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54966
2012-07-06T07:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54967
2012-07-06T07:03:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54968
2012-07-06T07:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54969
2012-07-06T07:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54970
2012-07-06T07:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54971
2012-07-06T07:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54972
2012-07-06T07:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54973
2012-07-06T07:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54974
2012-07-06T07:03:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54975
2012-07-06T07:03:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54976
2012-07-06T07:03:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54977
2012-07-06T07:04:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4535
2012-07-06T07:05:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.49,51628
2012-07-06T07:05:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4503
2012-07-06T07:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:05:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:05:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51920
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51921
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51922
2012-07-06T07:07:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51923
2012-07-06T07:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49591
2012-07-06T07:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49592
2012-07-06T07:07:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53699
2012-07-06T07:07:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53700
2012-07-06T07:07:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,62247
2012-07-06T07:07:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62248
2012-07-06T07:07:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62991
2012-07-06T07:07:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62992
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59362
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59363
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64750
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64751
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58989
2012-07-06T07:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58990
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59721
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59722
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54961
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54962
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65069
2012-07-06T07:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65070
2012-07-06T07:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:08:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:08:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:09:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T07:09:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T07:09:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:09:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65071
2012-07-06T07:09:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65072
2012-07-06T07:09:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64218
2012-07-06T07:09:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64219
2012-07-06T07:09:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50662
2012-07-06T07:09:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.11,53
2012-07-06T07:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50663
2012-07-06T07:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50664
2012-07-06T07:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50665
2012-07-06T07:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50666
2012-07-06T07:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50667
2012-07-06T07:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50668
2012-07-06T07:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50669
2012-07-06T07:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50670
2012-07-06T07:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50671
2012-07-06T07:09:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.5,55015
2012-07-06T07:09:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,2209
2012-07-06T07:10:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,52310
2012-07-06T07:11:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:11:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50672
2012-07-06T07:11:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:11:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50673
2012-07-06T07:11:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50674
2012-07-06T07:11:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50675
2012-07-06T07:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50676
2012-07-06T07:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50677
2012-07-06T07:12:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50678
2012-07-06T07:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50679
2012-07-06T07:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50680
2012-07-06T07:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50681
2012-07-06T07:12:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50682
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50683
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52318
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52319
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52320
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52321
2012-07-06T07:12:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52322
2012-07-06T07:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52323
2012-07-06T07:12:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52324
2012-07-06T07:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52325
2012-07-06T07:12:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52326
2012-07-06T07:12:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52327
2012-07-06T07:12:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52328
2012-07-06T07:12:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52329
2012-07-06T07:12:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52330
2012-07-06T07:12:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52331
2012-07-06T07:13:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,58231
2012-07-06T07:14:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:14:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52332
2012-07-06T07:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52333
2012-07-06T07:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52334
2012-07-06T07:14:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52335
2012-07-06T07:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52336
2012-07-06T07:14:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52337
2012-07-06T07:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52338
2012-07-06T07:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52339
2012-07-06T07:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52340
2012-07-06T07:14:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52341
2012-07-06T07:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52342
2012-07-06T07:14:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52343
2012-07-06T07:14:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:14:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:14:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,3582
2012-07-06T07:15:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:15:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.177,1125
2012-07-06T07:15:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:16:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50916
2012-07-06T07:16:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:16:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55176
2012-07-06T07:19:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:19:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55177
2012-07-06T07:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55178
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60474
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60475
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53251
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:19:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53252
2012-07-06T07:19:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53253
2012-07-06T07:19:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53254
2012-07-06T07:19:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53255
2012-07-06T07:19:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53256
2012-07-06T07:19:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53257
2012-07-06T07:19:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53258
2012-07-06T07:19:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53259
2012-07-06T07:19:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53260
2012-07-06T07:20:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,64897
2012-07-06T07:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:21:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:21:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:22:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T07:22:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:22:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53261
2012-07-06T07:22:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:22:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53262
2012-07-06T07:22:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53263
2012-07-06T07:22:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53264
2012-07-06T07:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53265
2012-07-06T07:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53266
2012-07-06T07:22:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53267
2012-07-06T07:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53268
2012-07-06T07:22:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,52895
2012-07-06T07:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53269
2012-07-06T07:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53270
2012-07-06T07:22:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53271
2012-07-06T07:22:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53272
2012-07-06T07:22:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:22:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:23:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,60822
2012-07-06T07:24:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:24:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53273
2012-07-06T07:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53274
2012-07-06T07:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53275
2012-07-06T07:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53276
2012-07-06T07:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53277
2012-07-06T07:24:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53278
2012-07-06T07:24:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53279
2012-07-06T07:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53280
2012-07-06T07:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53281
2012-07-06T07:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53282
2012-07-06T07:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53283
2012-07-06T07:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53284
2012-07-06T07:25:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,3932
2012-07-06T07:25:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,3950
2012-07-06T07:26:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.186,61792
2012-07-06T07:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53285
2012-07-06T07:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53286
2012-07-06T07:27:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53287
2012-07-06T07:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53288
2012-07-06T07:27:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53289
2012-07-06T07:27:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53290
2012-07-06T07:27:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53291
2012-07-06T07:27:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53292
2012-07-06T07:27:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53293
2012-07-06T07:27:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53294
2012-07-06T07:27:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53295
2012-07-06T07:27:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53296
2012-07-06T07:28:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:28:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:29:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:29:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:29:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53297
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53298
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55994
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:29:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55995
2012-07-06T07:29:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52123
2012-07-06T07:29:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:29:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52124
2012-07-06T07:29:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52125
2012-07-06T07:29:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52126
2012-07-06T07:29:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52127
2012-07-06T07:29:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52128
2012-07-06T07:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52129
2012-07-06T07:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52130
2012-07-06T07:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52131
2012-07-06T07:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52132
2012-07-06T07:29:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,59066
2012-07-06T07:29:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:29:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,1589
2012-07-06T07:30:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.36,53971
2012-07-06T07:32:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,50423
2012-07-06T07:34:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,58022
2012-07-06T07:34:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:34:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:34:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:34:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52133
2012-07-06T07:34:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:34:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52134
2012-07-06T07:34:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52135
2012-07-06T07:34:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52136
2012-07-06T07:34:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52137
2012-07-06T07:34:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52138
2012-07-06T07:34:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52139
2012-07-06T07:34:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52140
2012-07-06T07:34:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52141
2012-07-06T07:34:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52142
2012-07-06T07:34:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52143
2012-07-06T07:34:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52144
2012-07-06T07:34:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.14,51414
2012-07-06T07:35:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:35:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:36:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:36:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:36:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,63479
2012-07-06T07:36:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:37:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52145
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52146
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52147
2012-07-06T07:37:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,3528
2012-07-06T07:37:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52148
2012-07-06T07:37:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52149
2012-07-06T07:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52150
2012-07-06T07:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52151
2012-07-06T07:37:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52152
2012-07-06T07:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52153
2012-07-06T07:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52154
2012-07-06T07:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52155
2012-07-06T07:37:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52156
2012-07-06T07:37:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52157
2012-07-06T07:38:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,1695
2012-07-06T07:39:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:39:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:39:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:39:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52158
2012-07-06T07:39:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:39:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52159
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58489
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58490
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60743
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60744
2012-07-06T07:39:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60745
2012-07-06T07:39:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60746
2012-07-06T07:39:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60747
2012-07-06T07:39:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60748
2012-07-06T07:39:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60749
2012-07-06T07:39:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60750
2012-07-06T07:39:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60751
2012-07-06T07:39:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60752
2012-07-06T07:39:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,3022
2012-07-06T07:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60753
2012-07-06T07:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T07:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60754
2012-07-06T07:42:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60755
2012-07-06T07:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60756
2012-07-06T07:42:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60757
2012-07-06T07:42:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60758
2012-07-06T07:42:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60759
2012-07-06T07:42:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60760
2012-07-06T07:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60761
2012-07-06T07:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60762
2012-07-06T07:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60763
2012-07-06T07:42:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60764
2012-07-06T07:43:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:43:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:43:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:44:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60765
2012-07-06T07:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T07:44:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:44:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60766
2012-07-06T07:44:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60767
2012-07-06T07:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60768
2012-07-06T07:44:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60769
2012-07-06T07:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60770
2012-07-06T07:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60771
2012-07-06T07:44:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60772
2012-07-06T07:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60773
2012-07-06T07:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60774
2012-07-06T07:44:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60775
2012-07-06T07:44:39-03:00,info,appl
listen,17,0.0.0.0,60776
2012-07-06T07:44:40-03:00,info,appl
listen,17,0.0.0.0,60777
2012-07-06T07:44:43-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T07:44:43-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:44:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:44:43-03:00,info,appl
listen,17,0.0.0.0,60778
2012-07-06T07:44:43-03:00,info,appl
listen,17,0.0.0.0,60779
2012-07-06T07:44:44-03:00,info,appl
listen,17,0.0.0.0,60780
2012-07-06T07:44:44-03:00,info,appl
listen,17,0.0.0.0,60781
2012-07-06T07:44:45-03:00,info,appl
listen,17,0.0.0.0,60782
2012-07-06T07:44:45-03:00,info,appl
listen,17,0.0.0.0,60783
2012-07-06T07:44:45-03:00,info,appl
listen,17,0.0.0.0,60784
2012-07-06T07:44:46-03:00,info,appl
listen,17,0.0.0.0,60785
2012-07-06T07:44:46-03:00,info,appl
listen,17,0.0.0.0,60786
2012-07-06T07:44:46-03:00,info,appl
listen,17,0.0.0.0,60787
2012-07-06T07:44:46-03:00,info,appl
listen,17,0.0.0.0,60788
2012-07-06T07:44:47-03:00,info,appl
listen,17,0.0.0.0,60789
2012-07-06T07:44:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:44:47-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:44:47-03:00,info,appl
listen,17,0.0.0.0,60790
2012-07-06T07:44:47-03:00,info,appl
listen,17,0.0.0.0,60791
2012-07-06T07:44:47-03:00,info,appl
listen,17,0.0.0.0,60792
2012-07-06T07:44:48-03:00,info,appl
listen,17,0.0.0.0,60793
2012-07-06T07:44:48-03:00,info,appl
listen,17,0.0.0.0,60794
2012-07-06T07:44:49-03:00,info,appl
listen,17,0.0.0.0,60795
2012-07-06T07:44:49-03:00,info,appl
listen,17,0.0.0.0,60796
2012-07-06T07:44:50-03:00,info,appl
listen,17,0.0.0.0,60797
2012-07-06T07:44:50-03:00,info,appl
listen,17,0.0.0.0,60798
2012-07-06T07:44:50-03:00,info,appl
listen,17,0.0.0.0,60799
2012-07-06T07:44:50-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60800
2012-07-06T07:44:50-03:00,info,appl
listen,17,0.0.0.0,60801
2012-07-06T07:44:51-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:44:51-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:44:51-03:00,info,appl
listen,17,0.0.0.0,60802
2012-07-06T07:44:51-03:00,info,appl
listen,17,0.0.0.0,60803
2012-07-06T07:44:51-03:00,info,appl
listen,17,0.0.0.0,60804
2012-07-06T07:44:52-03:00,info,appl
listen,17,0.0.0.0,60805
2012-07-06T07:44:52-03:00,info,appl
listen,17,0.0.0.0,60806
2012-07-06T07:44:53-03:00,info,appl
listen,17,0.0.0.0,60807
2012-07-06T07:44:53-03:00,info,appl
listen,17,0.0.0.0,60808
2012-07-06T07:44:53-03:00,info,appl
listen,17,0.0.0.0,60809
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60810
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60811
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60812
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60813
2012-07-06T07:44:54-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:44:54-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60814
2012-07-06T07:44:54-03:00,info,appl
listen,17,0.0.0.0,60815
2012-07-06T07:44:55-03:00,info,appl
listen,17,0.0.0.0,60816
2012-07-06T07:44:56-03:00,info,appl
listen,17,0.0.0.0,60817
2012-07-06T07:44:56-03:00,info,appl
listen,17,0.0.0.0,60818
2012-07-06T07:44:56-03:00,info,appl
send,17,10.200.0.5,389
2012-07-06T07:44:56-03:00,info,appl
listen,17,0.0.0.0,60819
2012-07-06T07:44:57-03:00,info,appl
listen,17,0.0.0.0,60820
2012-07-06T07:44:57-03:00,info,appl
listen,17,0.0.0.0,60821
2012-07-06T07:44:57-03:00,info,appl
listen,17,0.0.0.0,60822
2012-07-06T07:44:58-03:00,info,appl
listen,17,0.0.0.0,60823
2012-07-06T07:44:58-03:00,info,appl
listen,17,0.0.0.0,60824
2012-07-06T07:44:58-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60825
2012-07-06T07:44:59-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:44:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:44:59-03:00,info,appl
listen,17,0.0.0.0,60826
2012-07-06T07:44:59-03:00,info,appl
listen,17,0.0.0.0,60827
2012-07-06T07:44:59-03:00,info,appl
listen,17,0.0.0.0,60828
2012-07-06T07:45:00-03:00,info,appl
listen,17,0.0.0.0,60829
2012-07-06T07:45:00-03:00,info,appl
listen,17,0.0.0.0,60830
2012-07-06T07:45:01-03:00,info,appl
listen,17,0.0.0.0,60831
2012-07-06T07:45:01-03:00,info,appl
listen,17,0.0.0.0,60832
2012-07-06T07:45:01-03:00,info,appl
listen,17,0.0.0.0,60833
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60834
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60835
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60836
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60837
2012-07-06T07:45:02-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60838
2012-07-06T07:45:02-03:00,info,appl
listen,17,0.0.0.0,60839
2012-07-06T07:45:03-03:00,info,appl
listen,17,0.0.0.0,60840
2012-07-06T07:45:04-03:00,info,appl
listen,17,0.0.0.0,60841
2012-07-06T07:45:04-03:00,info,appl
listen,17,0.0.0.0,60842
2012-07-06T07:45:04-03:00,info,appl
listen,17,0.0.0.0,60843
2012-07-06T07:45:05-03:00,info,appl
listen,17,0.0.0.0,60844
2012-07-06T07:45:05-03:00,info,appl
listen,17,0.0.0.0,60845
2012-07-06T07:45:05-03:00,info,appl
listen,17,0.0.0.0,60846
2012-07-06T07:45:06-03:00,info,appl
listen,17,0.0.0.0,60847
2012-07-06T07:45:06-03:00,info,appl
listen,17,0.0.0.0,60848
2012-07-06T07:45:06-03:00,info,appl
listen,17,0.0.0.0,60849
2012-07-06T07:45:06-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:06-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T07:45:06-03:00,info,appl
listen,17,0.0.0.0,60850
2012-07-06T07:45:06-03:00,info,appl
listen,17,0.0.0.0,60851
2012-07-06T07:45:07-03:00,info,appl
listen,17,0.0.0.0,60852
2012-07-06T07:45:07-03:00,info,appl
listen,17,0.0.0.0,60853
2012-07-06T07:45:08-03:00,info,appl
listen,17,0.0.0.0,60854
2012-07-06T07:45:08-03:00,info,appl
listen,17,0.0.0.0,60855
2012-07-06T07:45:08-03:00,info,appl
listen,17,0.0.0.0,60856
2012-07-06T07:45:09-03:00,info,appl
listen,17,0.0.0.0,60857
2012-07-06T07:45:09-03:00,info,appl
listen,17,0.0.0.0,60858
2012-07-06T07:45:09-03:00,info,appl
listen,17,0.0.0.0,60859
2012-07-06T07:45:09-03:00,info,appl
listen,17,0.0.0.0,60860
2012-07-06T07:45:10-03:00,info,appl
listen,17,0.0.0.0,60861
2012-07-06T07:45:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:10-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:10-03:00,info,appl
listen,17,0.0.0.0,60862
2012-07-06T07:45:10-03:00,info,appl
listen,17,0.0.0.0,60863
2012-07-06T07:45:10-03:00,info,appl
listen,17,0.0.0.0,60864
2012-07-06T07:45:11-03:00,info,appl
listen,17,0.0.0.0,60865
2012-07-06T07:45:11-03:00,info,appl
listen,17,0.0.0.0,60866
2012-07-06T07:45:12-03:00,info,appl
listen,17,0.0.0.0,60867
2012-07-06T07:45:12-03:00,info,appl
listen,17,0.0.0.0,60868
2012-07-06T07:45:13-03:00,info,appl
listen,17,0.0.0.0,60869
2012-07-06T07:45:13-03:00,info,appl
listen,17,0.0.0.0,60870
2012-07-06T07:45:13-03:00,info,appl
listen,17,0.0.0.0,60871
2012-07-06T07:45:13-03:00,info,appl
listen,17,0.0.0.0,60872
2012-07-06T07:45:13-03:00,info,appl
listen,17,0.0.0.0,60873
2012-07-06T07:45:14-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:14-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:14-03:00,info,appl
listen,17,0.0.0.0,60874
2012-07-06T07:45:14-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60875
2012-07-06T07:45:15-03:00,info,appl
listen,17,0.0.0.0,60876
2012-07-06T07:45:15-03:00,info,appl
listen,17,0.0.0.0,60877
2012-07-06T07:45:16-03:00,info,appl
listen,17,0.0.0.0,60878
2012-07-06T07:45:16-03:00,info,appl
listen,17,0.0.0.0,60879
2012-07-06T07:45:16-03:00,info,appl
send,17,10.1.0.197,389
2012-07-06T07:45:16-03:00,info,appl
listen,17,0.0.0.0,60880
2012-07-06T07:45:17-03:00,info,appl
listen,17,0.0.0.0,60881
2012-07-06T07:45:17-03:00,info,appl
listen,17,0.0.0.0,60882
2012-07-06T07:45:17-03:00,info,appl
listen,17,0.0.0.0,60883
2012-07-06T07:45:17-03:00,info,appl
listen,17,0.0.0.0,60884
2012-07-06T07:45:18-03:00,info,appl
listen,17,0.0.0.0,60885
2012-07-06T07:45:18-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:18-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:18-03:00,info,appl
listen,17,0.0.0.0,60886
2012-07-06T07:45:18-03:00,info,appl
listen,17,0.0.0.0,60887
2012-07-06T07:45:18-03:00,info,appl
listen,17,0.0.0.0,60888
2012-07-06T07:45:19-03:00,info,appl
listen,17,0.0.0.0,60889
2012-07-06T07:45:19-03:00,info,appl
listen,17,0.0.0.0,60890
2012-07-06T07:45:20-03:00,info,appl
listen,17,0.0.0.0,60891
2012-07-06T07:45:20-03:00,info,appl
listen,17,0.0.0.0,60892
2012-07-06T07:45:21-03:00,info,appl
listen,17,0.0.0.0,60893
2012-07-06T07:45:21-03:00,info,appl
listen,17,0.0.0.0,60894
2012-07-06T07:45:21-03:00,info,appl
listen,17,0.0.0.0,60895
2012-07-06T07:45:21-03:00,info,appl
listen,17,0.0.0.0,60896
2012-07-06T07:45:21-03:00,info,appl
listen,17,0.0.0.0,60897
2012-07-06T07:45:22-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:22-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:22-03:00,info,appl
listen,17,0.0.0.0,60898
2012-07-06T07:45:22-03:00,info,appl
listen,17,0.0.0.0,60899
2012-07-06T07:45:22-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60900
2012-07-06T07:45:23-03:00,info,appl
listen,17,0.0.0.0,60901
2012-07-06T07:45:23-03:00,info,appl
listen,17,0.0.0.0,60902
2012-07-06T07:45:24-03:00,info,appl
listen,17,0.0.0.0,60903
2012-07-06T07:45:24-03:00,info,appl
listen,17,0.0.0.0,60904
2012-07-06T07:45:24-03:00,info,appl
listen,17,0.0.0.0,60905
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60906
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60907
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60908
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60909
2012-07-06T07:45:25-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:25-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60910
2012-07-06T07:45:25-03:00,info,appl
listen,17,0.0.0.0,60911
2012-07-06T07:45:26-03:00,info,appl
listen,17,0.0.0.0,60912
2012-07-06T07:45:26-03:00,info,appl
listen,17,0.0.0.0,60913
2012-07-06T07:45:27-03:00,info,appl
listen,17,0.0.0.0,60914
2012-07-06T07:45:27-03:00,info,appl
listen,17,0.0.0.0,60915
2012-07-06T07:45:28-03:00,info,appl
listen,17,0.0.0.0,60916
2012-07-06T07:45:28-03:00,info,appl
listen,17,0.0.0.0,60917
2012-07-06T07:45:28-03:00,info,appl
listen,17,0.0.0.0,60918
2012-07-06T07:45:29-03:00,info,appl
listen,17,0.0.0.0,60919
2012-07-06T07:45:29-03:00,info,appl
listen,17,0.0.0.0,60920
2012-07-06T07:45:29-03:00,info,appl
listen,17,0.0.0.0,60921
2012-07-06T07:45:30-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:30-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:30-03:00,info,appl
listen,17,0.0.0.0,60922
2012-07-06T07:45:30-03:00,info,appl
listen,17,0.0.0.0,60923
2012-07-06T07:45:30-03:00,info,appl
listen,17,0.0.0.0,60924
2012-07-06T07:45:31-03:00,info,appl
listen,17,0.0.0.0,60925
2012-07-06T07:45:31-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60926
2012-07-06T07:45:32-03:00,info,appl
listen,17,0.0.0.0,60927
2012-07-06T07:45:32-03:00,info,appl
listen,17,0.0.0.0,60928
2012-07-06T07:45:32-03:00,info,appl
listen,17,0.0.0.0,60929
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60930
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60931
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60932
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60933
2012-07-06T07:45:33-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:33-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60934
2012-07-06T07:45:33-03:00,info,appl
listen,17,0.0.0.0,60935
2012-07-06T07:45:34-03:00,info,appl
listen,17,0.0.0.0,60936
2012-07-06T07:45:34-03:00,info,appl
listen,17,0.0.0.0,60937
2012-07-06T07:45:35-03:00,info,appl
listen,17,0.0.0.0,60938
2012-07-06T07:45:35-03:00,info,appl
listen,17,0.0.0.0,60939
2012-07-06T07:45:36-03:00,info,appl
listen,17,0.0.0.0,60940
2012-07-06T07:45:36-03:00,info,appl
send,17,10.201.0.100,389
2012-07-06T07:45:36-03:00,info,appl
listen,17,0.0.0.0,60941
2012-07-06T07:45:36-03:00,info,appl
listen,17,0.0.0.0,60942
2012-07-06T07:45:37-03:00,info,appl
listen,17,0.0.0.0,60943
2012-07-06T07:45:37-03:00,info,appl
listen,17,0.0.0.0,60944
2012-07-06T07:45:37-03:00,info,appl
listen,17,0.0.0.0,60945
2012-07-06T07:45:37-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:37-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:37-03:00,info,appl
listen,17,0.0.0.0,60946
2012-07-06T07:45:37-03:00,info,appl
listen,17,0.0.0.0,60947
2012-07-06T07:45:38-03:00,info,appl
listen,17,0.0.0.0,60948
2012-07-06T07:45:38-03:00,info,appl
listen,17,0.0.0.0,60949
2012-07-06T07:45:39-03:00,info,appl
listen,17,0.0.0.0,60950
2012-07-06T07:45:39-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60951
2012-07-06T07:45:39-03:00,info,appl
listen,17,0.0.0.0,60952
2012-07-06T07:45:40-03:00,info,appl
listen,17,0.0.0.0,60953
2012-07-06T07:45:40-03:00,info,appl
listen,17,0.0.0.0,60954
2012-07-06T07:45:40-03:00,info,appl
listen,17,0.0.0.0,60955
2012-07-06T07:45:40-03:00,info,appl
listen,17,0.0.0.0,60956
2012-07-06T07:45:41-03:00,info,appl
listen,17,0.0.0.0,60957
2012-07-06T07:45:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:45:41-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T07:45:41-03:00,info,appl
listen,17,0.0.0.0,60958
2012-07-06T07:45:41-03:00,info,appl
listen,17,0.0.0.0,60959
2012-07-06T07:45:41-03:00,info,appl
listen,17,0.0.0.0,60960
2012-07-06T07:45:42-03:00,info,appl
listen,17,0.0.0.0,60961
2012-07-06T07:45:42-03:00,info,appl
listen,17,0.0.0.0,60962
2012-07-06T07:45:43-03:00,info,appl
listen,17,0.0.0.0,60963
2012-07-06T07:45:43-03:00,info,appl
listen,17,0.0.0.0,60964
2012-07-06T07:45:44-03:00,info,appl
listen,17,0.0.0.0,60965
2012-07-06T07:45:44-03:00,info,appl
listen,17,0.0.0.0,60966
2012-07-06T07:45:44-03:00,info,appl
listen,17,0.0.0.0,60967
2012-07-06T07:45:44-03:00,info,appl
listen,17,0.0.0.0,60968
2012-07-06T07:45:44-03:00,info,appl
listen,17,0.0.0.0,60969
2012-07-06T07:48:49-03:00,info,appl
w,listen,17,0.0.0.0,64039
2012-07-06T07:48:49-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T07:48:49-03:00,info,appl
listen,17,0.0.0.0,64040
2012-07-06T07:48:49-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T07:48:49-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T07:48:49-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T07:48:49-03:00,info,appl
w,listen,17,0.0.0.0,51755
2012-07-06T07:48:49-03:00,info,appl
listen,17,0.0.0.0,51756
2012-07-06T07:48:50-03:00,info,appl
listen,17,0.0.0.0,51757
2012-07-06T07:48:50-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,49829
2012-07-06T07:48:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:48:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49830
2012-07-06T07:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49831
2012-07-06T07:48:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49832
2012-07-06T07:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49833
2012-07-06T07:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49834
2012-07-06T07:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49835
2012-07-06T07:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49836
2012-07-06T07:48:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49837
2012-07-06T07:48:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49838
2012-07-06T07:48:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59096
2012-07-06T07:48:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:49:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:49:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59097
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59098
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62806
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:49:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62807
2012-07-06T07:49:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53434
2012-07-06T07:49:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:49:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53435
2012-07-06T07:49:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53436
2012-07-06T07:49:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53437
2012-07-06T07:49:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53438
2012-07-06T07:49:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53439
2012-07-06T07:49:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53440
2012-07-06T07:49:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53441
2012-07-06T07:49:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53442
2012-07-06T07:49:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53443
2012-07-06T07:50:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:50:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:50:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:50:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:50:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T07:51:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53444
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53445
2012-07-06T07:52:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53446
2012-07-06T07:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53447
2012-07-06T07:52:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53448
2012-07-06T07:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53449
2012-07-06T07:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53450
2012-07-06T07:52:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53451
2012-07-06T07:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53452
2012-07-06T07:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53453
2012-07-06T07:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53454
2012-07-06T07:52:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53455
2012-07-06T07:54:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:54:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53456
2012-07-06T07:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53457
2012-07-06T07:54:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53458
2012-07-06T07:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53459
2012-07-06T07:54:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53460
2012-07-06T07:54:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53461
2012-07-06T07:54:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53462
2012-07-06T07:54:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53463
2012-07-06T07:54:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53464
2012-07-06T07:54:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53465
2012-07-06T07:54:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53466
2012-07-06T07:54:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53467
2012-07-06T07:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T07:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53468
2012-07-06T07:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:57:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53469
2012-07-06T07:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53470
2012-07-06T07:57:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53471
2012-07-06T07:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53472
2012-07-06T07:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53473
2012-07-06T07:57:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53474
2012-07-06T07:57:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53475
2012-07-06T07:57:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53476
2012-07-06T07:57:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53477
2012-07-06T07:57:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53478
2012-07-06T07:57:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T07:57:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:57:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53479
2012-07-06T07:57:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:58:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T07:59:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T07:59:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53480
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53481
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52320
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T07:59:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52321
2012-07-06T07:59:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60456
2012-07-06T07:59:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T07:59:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60457
2012-07-06T07:59:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60458
2012-07-06T07:59:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60459
2012-07-06T07:59:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60460
2012-07-06T07:59:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60461
2012-07-06T07:59:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60462
2012-07-06T07:59:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60463
2012-07-06T07:59:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60464
2012-07-06T07:59:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60465
2012-07-06T08:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:04:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:04:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T08:04:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T08:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60466
2012-07-06T08:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:04:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60467
2012-07-06T08:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60468
2012-07-06T08:04:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60469
2012-07-06T08:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60470
2012-07-06T08:04:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60471
2012-07-06T08:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60472
2012-07-06T08:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60473
2012-07-06T08:04:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60474
2012-07-06T08:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60475
2012-07-06T08:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60476
2012-07-06T08:04:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60477
2012-07-06T08:04:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:05:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:05:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:05:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:05:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58079
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58080
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58081
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58082
2012-07-06T08:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58083
2012-07-06T08:07:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54102
2012-07-06T08:07:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59756
2012-07-06T08:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59757
2012-07-06T08:07:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49558
2012-07-06T08:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49559
2012-07-06T08:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64562
2012-07-06T08:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64563
2012-07-06T08:07:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50437
2012-07-06T08:07:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50438
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,49758
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49759
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52081
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52082
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60409
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60410
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56948
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56949
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60053
2012-07-06T08:07:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60054
2012-07-06T08:09:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T08:09:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T08:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60055
2012-07-06T08:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60056
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52723
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52724
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49559
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49560
2012-07-06T08:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49561
2012-07-06T08:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49562
2012-07-06T08:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49563
2012-07-06T08:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49564
2012-07-06T08:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49565
2012-07-06T08:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49566
2012-07-06T08:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49567
2012-07-06T08:10:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49568
2012-07-06T08:11:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:11:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:12:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49569
2012-07-06T08:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:12:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49570
2012-07-06T08:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49571
2012-07-06T08:12:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49572
2012-07-06T08:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49573
2012-07-06T08:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49574
2012-07-06T08:12:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49575
2012-07-06T08:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49576
2012-07-06T08:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49577
2012-07-06T08:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49578
2012-07-06T08:12:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49579
2012-07-06T08:12:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49580
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53625
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53626
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53627
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53628
2012-07-06T08:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53629
2012-07-06T08:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53630
2012-07-06T08:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53631
2012-07-06T08:12:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53632
2012-07-06T08:12:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53633
2012-07-06T08:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53634
2012-07-06T08:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53635
2012-07-06T08:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53636
2012-07-06T08:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53637
2012-07-06T08:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53638
2012-07-06T08:12:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:15:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:15:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53639
2012-07-06T08:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53640
2012-07-06T08:15:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53641
2012-07-06T08:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53642
2012-07-06T08:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53643
2012-07-06T08:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53644
2012-07-06T08:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53645
2012-07-06T08:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53646
2012-07-06T08:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53647
2012-07-06T08:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53648
2012-07-06T08:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53649
2012-07-06T08:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53650
2012-07-06T08:18:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52085
2012-07-06T08:18:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:18:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55268
2012-07-06T08:18:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:18:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:19:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:19:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:20:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55269
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55270
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65323
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:20:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65324
2012-07-06T08:20:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54328
2012-07-06T08:20:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54329
2012-07-06T08:20:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54330
2012-07-06T08:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54331
2012-07-06T08:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54332
2012-07-06T08:20:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54333
2012-07-06T08:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54334
2012-07-06T08:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54335
2012-07-06T08:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54336
2012-07-06T08:20:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54337
2012-07-06T08:20:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:20:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54338
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54339
2012-07-06T08:22:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54340
2012-07-06T08:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54341
2012-07-06T08:22:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54342
2012-07-06T08:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54343
2012-07-06T08:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54344
2012-07-06T08:22:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54345
2012-07-06T08:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54346
2012-07-06T08:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54347
2012-07-06T08:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54348
2012-07-06T08:22:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54349
2012-07-06T08:25:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:25:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54350
2012-07-06T08:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:25:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54351
2012-07-06T08:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54352
2012-07-06T08:25:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54353
2012-07-06T08:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54354
2012-07-06T08:25:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54355
2012-07-06T08:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54356
2012-07-06T08:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54357
2012-07-06T08:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54358
2012-07-06T08:25:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54359
2012-07-06T08:25:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54360
2012-07-06T08:25:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54361
2012-07-06T08:25:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:25:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:26:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:26:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:27:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:27:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54362
2012-07-06T08:27:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54363
2012-07-06T08:27:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54364
2012-07-06T08:27:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54365
2012-07-06T08:27:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54366
2012-07-06T08:27:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54367
2012-07-06T08:27:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54368
2012-07-06T08:27:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54369
2012-07-06T08:27:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54370
2012-07-06T08:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54371
2012-07-06T08:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54372
2012-07-06T08:27:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54373
2012-07-06T08:30:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:30:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54374
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54375
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60853
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60854
2012-07-06T08:30:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55580
2012-07-06T08:30:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55581
2012-07-06T08:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55582
2012-07-06T08:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55583
2012-07-06T08:30:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55584
2012-07-06T08:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55585
2012-07-06T08:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55586
2012-07-06T08:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55587
2012-07-06T08:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55588
2012-07-06T08:30:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55589
2012-07-06T08:30:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58306
2012-07-06T08:30:33-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.198,80
2012-07-06T08:32:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:32:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:33:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:33:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:35:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:35:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:35:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:35:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58307
2012-07-06T08:35:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:35:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58308
2012-07-06T08:35:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58309
2012-07-06T08:35:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58310
2012-07-06T08:35:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58311
2012-07-06T08:35:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58312
2012-07-06T08:35:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58313
2012-07-06T08:35:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58314
2012-07-06T08:35:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58315
2012-07-06T08:35:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58316
2012-07-06T08:35:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58317
2012-07-06T08:35:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58318
2012-07-06T08:35:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T08:35:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58319
2012-07-06T08:35:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-06T08:35:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:35:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:36:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:36:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T08:36:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58320
2012-07-06T08:36:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:36:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T08:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58321
2012-07-06T08:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:37:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58322
2012-07-06T08:37:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58323
2012-07-06T08:37:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58324
2012-07-06T08:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58325
2012-07-06T08:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58326
2012-07-06T08:37:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58327
2012-07-06T08:37:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58328
2012-07-06T08:37:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58329
2012-07-06T08:37:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58330
2012-07-06T08:37:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58331
2012-07-06T08:37:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58332
2012-07-06T08:37:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58333
2012-07-06T08:37:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.7,64775
2012-07-06T08:37:41-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T08:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.69,12110
2012-07-06T08:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T08:38:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.161,51417
2012-07-06T08:38:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.228,62909
2012-07-06T08:38:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T08:39:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.226,55246
2012-07-06T08:39:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.69,51691
2012-07-06T08:40:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:40:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:40:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:40:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:40:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58334
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58335
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54411
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:40:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54412
2012-07-06T08:40:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63174
2012-07-06T08:40:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:40:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63175
2012-07-06T08:40:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63176
2012-07-06T08:40:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63177
2012-07-06T08:40:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63178
2012-07-06T08:40:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63179
2012-07-06T08:40:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63180
2012-07-06T08:40:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63181
2012-07-06T08:40:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63182
2012-07-06T08:40:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63183
2012-07-06T08:41:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,2315
2012-07-06T08:41:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63184
2012-07-06T08:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63185
2012-07-06T08:42:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63186
2012-07-06T08:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63187
2012-07-06T08:42:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63188
2012-07-06T08:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63189
2012-07-06T08:42:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63190
2012-07-06T08:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63191
2012-07-06T08:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63192
2012-07-06T08:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63193
2012-07-06T08:42:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63194
2012-07-06T08:42:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63195
2012-07-06T08:43:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.197,58502
2012-07-06T08:43:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.126,59006
2012-07-06T08:44:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,52740
2012-07-06T08:44:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.99,3718
2012-07-06T08:44:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.124,4436
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63196
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:45:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:45:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63197
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63198
2012-07-06T08:45:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63199
2012-07-06T08:45:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.165,64415
2012-07-06T08:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63200
2012-07-06T08:45:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63201
2012-07-06T08:45:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63202
2012-07-06T08:45:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63203
2012-07-06T08:45:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63204
2012-07-06T08:45:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63205
2012-07-06T08:45:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63206
2012-07-06T08:45:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63207
2012-07-06T08:45:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63208
2012-07-06T08:46:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.95,63344
2012-07-06T08:47:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:47:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:47:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:48:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:48:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,62061
2012-07-06T08:50:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:50:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:50:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:50:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63209
2012-07-06T08:50:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:50:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63210
2012-07-06T08:50:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64833
2012-07-06T08:50:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:50:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64834
2012-07-06T08:50:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60203
2012-07-06T08:50:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:50:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60204
2012-07-06T08:50:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60205
2012-07-06T08:50:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60206
2012-07-06T08:50:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60207
2012-07-06T08:50:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60208
2012-07-06T08:50:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60209
2012-07-06T08:50:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60210
2012-07-06T08:50:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60211
2012-07-06T08:50:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60212
2012-07-06T08:51:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:51:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T08:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,54068
2012-07-06T08:52:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.122,49678
2012-07-06T08:52:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T08:52:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:52:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60213
2012-07-06T08:52:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:52:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60214
2012-07-06T08:52:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60215
2012-07-06T08:52:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60216
2012-07-06T08:52:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60217
2012-07-06T08:52:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60218
2012-07-06T08:52:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60219
2012-07-06T08:52:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60220
2012-07-06T08:52:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60221
2012-07-06T08:52:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60222
2012-07-06T08:52:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60223
2012-07-06T08:52:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60224
2012-07-06T08:53:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.37,58249
2012-07-06T08:54:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T08:54:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:54:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.192,1448
2012-07-06T08:54:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:55:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T08:55:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.96,1851
2012-07-06T08:55:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T08:55:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T08:55:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:55:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60225
2012-07-06T08:55:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:55:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60226
2012-07-06T08:55:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60227
2012-07-06T08:55:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60228
2012-07-06T08:55:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60229
2012-07-06T08:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60230
2012-07-06T08:55:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60231
2012-07-06T08:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60232
2012-07-06T08:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60233
2012-07-06T08:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60234
2012-07-06T08:55:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60235
2012-07-06T08:56:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60236
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51843
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51844
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59148
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59149
2012-07-06T08:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59150
2012-07-06T08:56:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56060
2012-07-06T08:56:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:56:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56061
2012-07-06T08:56:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56062
2012-07-06T08:56:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56063
2012-07-06T08:56:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.14,61184
2012-07-06T08:56:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56064
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56065
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56066
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56067
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56068
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56069
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65135
2012-07-06T08:56:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T08:56:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.24,2904
2012-07-06T08:56:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.133,58054
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57030
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57031
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T08:57:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T08:57:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.108,52913
2012-07-06T08:57:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T08:57:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57032
2012-07-06T08:57:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T08:57:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57033
2012-07-06T08:57:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57034
2012-07-06T08:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57035
2012-07-06T08:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57036
2012-07-06T08:57:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57037
2012-07-06T08:57:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57038
2012-07-06T08:57:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57039
2012-07-06T08:57:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57040
2012-07-06T08:57:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57041
2012-07-06T08:57:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57042
2012-07-06T08:57:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57043
2012-07-06T08:58:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.108,61057
2012-07-06T08:59:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.10,51356
2012-07-06T08:59:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.235,1144
2012-07-06T09:00:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.6,61905
2012-07-06T09:01:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:01:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57044
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57045
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53972
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:01:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53973
2012-07-06T09:01:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50102
2012-07-06T09:01:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50103
2012-07-06T09:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50104
2012-07-06T09:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50105
2012-07-06T09:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50106
2012-07-06T09:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50107
2012-07-06T09:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50108
2012-07-06T09:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50109
2012-07-06T09:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50110
2012-07-06T09:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50111
2012-07-06T09:01:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:01:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:01:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:02:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:04:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,4242
2012-07-06T09:05:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.21,1990
2012-07-06T09:05:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.29,2602
2012-07-06T09:05:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:05:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:06:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:06:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50112
2012-07-06T09:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50113
2012-07-06T09:06:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50114
2012-07-06T09:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50115
2012-07-06T09:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50116
2012-07-06T09:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50117
2012-07-06T09:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50118
2012-07-06T09:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50119
2012-07-06T09:06:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50120
2012-07-06T09:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50121
2012-07-06T09:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50122
2012-07-06T09:06:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50123
2012-07-06T09:06:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:06:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.25,3870
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64684
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64685
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64686
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64687
2012-07-06T09:07:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64688
2012-07-06T09:07:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51095
2012-07-06T09:07:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64806
2012-07-06T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64807
2012-07-06T09:07:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.19,50153
2012-07-06T09:07:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53217
2012-07-06T09:07:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53218
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58539
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58540
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52242
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52243
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55518
2012-07-06T09:07:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55519
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62959
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62960
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56408
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56409
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63742
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63743
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62553
2012-07-06T09:07:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62554
2012-07-06T09:08:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:08:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:08:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.22,60429
2012-07-06T09:09:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:09:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.97,60088
2012-07-06T09:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:10:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.181,64750
2012-07-06T09:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:11:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62555
2012-07-06T09:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:11:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62556
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62862
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62863
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60010
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:11:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60011
2012-07-06T09:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60012
2012-07-06T09:11:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60013
2012-07-06T09:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60014
2012-07-06T09:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60015
2012-07-06T09:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60016
2012-07-06T09:11:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60017
2012-07-06T09:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60018
2012-07-06T09:11:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60019
2012-07-06T09:11:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.138,2268
2012-07-06T09:11:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,1543
2012-07-06T09:12:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.25,58188
2012-07-06T09:12:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T09:12:55-03:00,info,appl
listen,17,0.0.0.0,60020
2012-07-06T09:12:55-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T09:12:55-03:00,info,appl
listen,17,0.0.0.0,60021
2012-07-06T09:12:56-03:00,info,appl
listen,17,0.0.0.0,60022
2012-07-06T09:12:56-03:00,info,appl
listen,17,0.0.0.0,60023
2012-07-06T09:12:57-03:00,info,appl
listen,17,0.0.0.0,60024
2012-07-06T09:12:57-03:00,info,appl
listen,17,0.0.0.0,60025
2012-07-06T09:12:58-03:00,info,appl
listen,17,0.0.0.0,60026
2012-07-06T09:12:58-03:00,info,appl
listen,17,0.0.0.0,60027
2012-07-06T09:12:58-03:00,info,appl
listen,17,0.0.0.0,60028
2012-07-06T09:12:58-03:00,info,appl
listen,17,0.0.0.0,60029
2012-07-06T09:12:59-03:00,info,appl
listen,17,0.0.0.0,60030
2012-07-06T09:12:59-03:00,info,appl
listen,17,0.0.0.0,60031
2012-07-06T09:12:59-03:00,info,appl
w,listen,17,0.0.0.0,60979
2012-07-06T09:12:59-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T09:12:59-03:00,info,appl
listen,17,0.0.0.0,60980
2012-07-06T09:12:59-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:12:59-03:00,info,appl
listen,17,0.0.0.0,60981
2012-07-06T09:12:59-03:00,info,appl
listen,17,0.0.0.0,60982
2012-07-06T09:13:00-03:00,info,appl
listen,17,0.0.0.0,60983
2012-07-06T09:13:00-03:00,info,appl
listen,17,0.0.0.0,60984
2012-07-06T09:13:01-03:00,info,appl
listen,17,0.0.0.0,60985
2012-07-06T09:13:01-03:00,info,appl
listen,17,0.0.0.0,60986
2012-07-06T09:13:01-03:00,info,appl
listen,17,0.0.0.0,60987
2012-07-06T09:13:02-03:00,info,appl
listen,17,0.0.0.0,60988
2012-07-06T09:13:02-03:00,info,appl
listen,17,0.0.0.0,60989
2012-07-06T09:13:02-03:00,info,appl
listen,17,0.0.0.0,60990
2012-07-06T09:13:02-03:00,info,appl
listen,17,0.0.0.0,60991
2012-07-06T09:13:03-03:00,info,appl
listen,17,0.0.0.0,60992
2012-07-06T09:13:22-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.52,55379
2012-07-06T09:13:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.22,1438
2012-07-06T09:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,53291
2012-07-06T09:15:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:15:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:16:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.197,61317
2012-07-06T09:16:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:16:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:16:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60993
2012-07-06T09:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60994
2012-07-06T09:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60995
2012-07-06T09:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60996
2012-07-06T09:16:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60997
2012-07-06T09:16:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60998
2012-07-06T09:16:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60999
2012-07-06T09:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61000
2012-07-06T09:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61001
2012-07-06T09:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61002
2012-07-06T09:16:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61003
2012-07-06T09:16:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61004
2012-07-06T09:16:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.35,3452
2012-07-06T09:16:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.20,53061
2012-07-06T09:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,55767
2012-07-06T09:18:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,56666
2012-07-06T09:18:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.98,56667
2012-07-06T09:18:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,61455
2012-07-06T09:19:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.4.28,60734
2012-07-06T09:20:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.135,1375
2012-07-06T09:21:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62055
2012-07-06T09:21:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:21:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57211
2012-07-06T09:21:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:21:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:21:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:21:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57212
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57213
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64098
2012-07-06T09:21:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64099
2012-07-06T09:21:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52112
2012-07-06T09:21:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:21:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52113
2012-07-06T09:21:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52114
2012-07-06T09:21:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52115
2012-07-06T09:21:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52116
2012-07-06T09:21:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52117
2012-07-06T09:21:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52118
2012-07-06T09:21:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52119
2012-07-06T09:21:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52120
2012-07-06T09:21:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52121
2012-07-06T09:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,59258
2012-07-06T09:21:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.218,2472
2012-07-06T09:22:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,60603
2012-07-06T09:22:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:22:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T09:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,2180
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52122
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52123
2012-07-06T09:22:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52124
2012-07-06T09:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52125
2012-07-06T09:22:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52126
2012-07-06T09:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52127
2012-07-06T09:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52128
2012-07-06T09:22:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52129
2012-07-06T09:22:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52130
2012-07-06T09:22:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52131
2012-07-06T09:22:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52132
2012-07-06T09:22:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52133
2012-07-06T09:23:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:23:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.75,2110
2012-07-06T09:23:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:23:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.47,51095
2012-07-06T09:24:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.45,1310
2012-07-06T09:25:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.167,2054
2012-07-06T09:25:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.177,65204
2012-07-06T09:26:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:26:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:26:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:26:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52134
2012-07-06T09:26:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:26:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52135
2012-07-06T09:26:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52136
2012-07-06T09:26:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52137
2012-07-06T09:26:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52138
2012-07-06T09:26:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52139
2012-07-06T09:26:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52140
2012-07-06T09:26:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52141
2012-07-06T09:26:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52142
2012-07-06T09:26:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52143
2012-07-06T09:26:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52144
2012-07-06T09:26:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52145
2012-07-06T09:26:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.74,49971
2012-07-06T09:26:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.154,1885
2012-07-06T09:27:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.254,1499
2012-07-06T09:27:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.11,53165
2012-07-06T09:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52146
2012-07-06T09:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52147
2012-07-06T09:28:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52148
2012-07-06T09:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52149
2012-07-06T09:28:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52150
2012-07-06T09:28:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52151
2012-07-06T09:28:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52152
2012-07-06T09:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52153
2012-07-06T09:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52154
2012-07-06T09:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52155
2012-07-06T09:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52156
2012-07-06T09:28:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52157
2012-07-06T09:28:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.42,51742
2012-07-06T09:28:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.5,3270
2012-07-06T09:29:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.4.74,1059
2012-07-06T09:29:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.94,65091
2012-07-06T09:29:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:29:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:30:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.87,57376
2012-07-06T09:30:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:30:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.48,63596
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52158
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52159
2012-07-06T09:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52160
2012-07-06T09:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52161
2012-07-06T09:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52162
2012-07-06T09:30:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52163
2012-07-06T09:30:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52164
2012-07-06T09:30:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52165
2012-07-06T09:30:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52166
2012-07-06T09:30:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52167
2012-07-06T09:30:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52168
2012-07-06T09:30:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52169
2012-07-06T09:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52170
2012-07-06T09:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52171
2012-07-06T09:30:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52172
2012-07-06T09:30:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52173
2012-07-06T09:30:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52174
2012-07-06T09:30:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,52175
2012-07-06T09:30:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52176
2012-07-06T09:30:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:30:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52177
2012-07-06T09:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52178
2012-07-06T09:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52179
2012-07-06T09:30:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.58,2713
2012-07-06T09:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52180
2012-07-06T09:30:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52181
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52182
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52183
2012-07-06T09:31:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52184
2012-07-06T09:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52185
2012-07-06T09:31:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52186
2012-07-06T09:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52187
2012-07-06T09:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52188
2012-07-06T09:31:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52189
2012-07-06T09:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52190
2012-07-06T09:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52191
2012-07-06T09:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52192
2012-07-06T09:31:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52193
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58484
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58485
2012-07-06T09:31:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58486
2012-07-06T09:31:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58487
2012-07-06T09:31:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64421
2012-07-06T09:31:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:31:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64422
2012-07-06T09:31:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64423
2012-07-06T09:31:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64424
2012-07-06T09:31:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64425
2012-07-06T09:31:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64426
2012-07-06T09:31:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64427
2012-07-06T09:31:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64428
2012-07-06T09:31:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64429
2012-07-06T09:31:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64430
2012-07-06T09:31:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:31:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64431
2012-07-06T09:31:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64432
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64433
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64434
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64435
2012-07-06T09:31:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64436
2012-07-06T09:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64437
2012-07-06T09:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64438
2012-07-06T09:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64439
2012-07-06T09:31:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64440
2012-07-06T09:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64441
2012-07-06T09:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64442
2012-07-06T09:31:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64443
2012-07-06T09:31:25-03:00,info,appl
listen,17,0.0.0.0,64444
2012-07-06T09:31:25-03:00,info,appl
listen,17,0.0.0.0,64445
2012-07-06T09:31:25-03:00,info,appl
listen,17,0.0.0.0,64446
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64447
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64448
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64449
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64450
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64451
2012-07-06T09:31:26-03:00,info,appl
listen,17,0.0.0.0,64452
2012-07-06T09:31:27-03:00,info,appl
listen,17,0.0.0.0,64453
2012-07-06T09:31:27-03:00,info,appl
listen,17,0.0.0.0,64454
2012-07-06T09:31:27-03:00,info,appl
send,17,10.102.0.20,389
2012-07-06T09:31:31-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:31:31-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:31:31-03:00,info,appl
listen,17,0.0.0.0,64455
2012-07-06T09:31:31-03:00,info,appl
listen,17,0.0.0.0,64456
2012-07-06T09:31:31-03:00,info,appl
listen,17,0.0.0.0,64457
2012-07-06T09:31:32-03:00,info,appl
listen,17,0.0.0.0,64458
2012-07-06T09:31:32-03:00,info,appl
listen,17,0.0.0.0,64459
2012-07-06T09:31:33-03:00,info,appl
listen,17,0.0.0.0,64460
2012-07-06T09:31:33-03:00,info,appl
listen,17,0.0.0.0,64461
2012-07-06T09:31:34-03:00,info,appl
listen,17,0.0.0.0,64462
2012-07-06T09:31:34-03:00,info,appl
listen,17,0.0.0.0,64463
2012-07-06T09:31:34-03:00,info,appl
listen,17,0.0.0.0,64464
2012-07-06T09:31:34-03:00,info,appl
listen,17,0.0.0.0,64465
2012-07-06T09:31:34-03:00,info,appl
listen,17,0.0.0.0,64466
2012-07-06T09:31:38-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:31:38-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:31:38-03:00,info,appl
listen,17,0.0.0.0,64467
2012-07-06T09:31:38-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64468
2012-07-06T09:31:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64469
2012-07-06T09:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64470
2012-07-06T09:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64471
2012-07-06T09:31:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64472
2012-07-06T09:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64473
2012-07-06T09:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64474
2012-07-06T09:31:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64475
2012-07-06T09:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64476
2012-07-06T09:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64477
2012-07-06T09:31:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64478
2012-07-06T09:31:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.140,3546
2012-07-06T09:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T09:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64479
2012-07-06T09:31:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64480
2012-07-06T09:31:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64481
2012-07-06T09:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64482
2012-07-06T09:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64483
2012-07-06T09:31:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64484
2012-07-06T09:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64485
2012-07-06T09:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64486
2012-07-06T09:31:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64487
2012-07-06T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64488
2012-07-06T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64489
2012-07-06T09:31:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64490
2012-07-06T09:32:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:32:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:32:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64491
2012-07-06T09:32:02-03:00,info,appl
listen,17,0.0.0.0,64492
2012-07-06T09:32:02-03:00,info,appl
listen,17,0.0.0.0,64493
2012-07-06T09:32:03-03:00,info,appl
listen,17,0.0.0.0,64494
2012-07-06T09:32:03-03:00,info,appl
listen,17,0.0.0.0,64495
2012-07-06T09:32:03-03:00,info,appl
listen,17,0.0.0.0,64496
2012-07-06T09:32:04-03:00,info,appl
listen,17,0.0.0.0,64497
2012-07-06T09:32:04-03:00,info,appl
listen,17,0.0.0.0,64498
2012-07-06T09:32:04-03:00,info,appl
listen,17,0.0.0.0,64499
2012-07-06T09:32:05-03:00,info,appl
listen,17,0.0.0.0,64500
2012-07-06T09:32:05-03:00,info,appl
listen,17,0.0.0.0,64501
2012-07-06T09:32:05-03:00,info,appl
listen,17,0.0.0.0,64502
2012-07-06T09:32:05-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:32:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:32:05-03:00,info,appl
listen,17,0.0.0.0,64503
2012-07-06T09:32:05-03:00,info,appl
listen,17,0.0.0.0,64504
2012-07-06T09:32:06-03:00,info,appl
listen,17,0.0.0.0,64505
2012-07-06T09:32:06-03:00,info,appl
listen,17,0.0.0.0,64506
2012-07-06T09:32:07-03:00,info,appl
listen,17,0.0.0.0,64507
2012-07-06T09:32:07-03:00,info,appl
listen,17,0.0.0.0,64508
2012-07-06T09:32:08-03:00,info,appl
listen,17,0.0.0.0,64509
2012-07-06T09:32:08-03:00,info,appl
listen,17,0.0.0.0,64510
2012-07-06T09:32:08-03:00,info,appl
listen,17,0.0.0.0,64511
2012-07-06T09:32:08-03:00,info,appl
listen,17,0.0.0.0,64512
2012-07-06T09:32:09-03:00,info,appl
listen,17,0.0.0.0,64513
2012-07-06T09:32:09-03:00,info,appl
listen,17,0.0.0.0,64514
2012-07-06T09:32:13-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:32:13-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:32:13-03:00,info,appl
listen,17,0.0.0.0,64515
2012-07-06T09:32:13-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T09:32:13-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64516
2012-07-06T09:32:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64517
2012-07-06T09:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64518
2012-07-06T09:32:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64519
2012-07-06T09:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64520
2012-07-06T09:32:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64521
2012-07-06T09:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64522
2012-07-06T09:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64523
2012-07-06T09:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64524
2012-07-06T09:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64525
2012-07-06T09:32:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64526
2012-07-06T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64527
2012-07-06T09:32:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64528
2012-07-06T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64529
2012-07-06T09:32:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64530
2012-07-06T09:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64531
2012-07-06T09:32:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64532
2012-07-06T09:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64533
2012-07-06T09:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64534
2012-07-06T09:32:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64535
2012-07-06T09:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64536
2012-07-06T09:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64537
2012-07-06T09:32:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64538
2012-07-06T09:32:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.101,1957
2012-07-06T09:32:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T09:32:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:32:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:32:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64539
2012-07-06T09:32:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T09:32:36-03:00,info,appl
listen,17,0.0.0.0,64540
2012-07-06T09:32:36-03:00,info,appl
listen,17,0.0.0.0,64541
2012-07-06T09:32:37-03:00,info,appl
listen,17,0.0.0.0,64542
2012-07-06T09:32:37-03:00,info,appl
listen,17,0.0.0.0,64543
2012-07-06T09:32:38-03:00,info,appl
listen,17,0.0.0.0,64544
2012-07-06T09:32:38-03:00,info,appl
listen,17,0.0.0.0,64545
2012-07-06T09:32:39-03:00,info,appl
listen,17,0.0.0.0,64546
2012-07-06T09:32:39-03:00,info,appl
listen,17,0.0.0.0,64547
2012-07-06T09:32:39-03:00,info,appl
listen,17,0.0.0.0,64548
2012-07-06T09:32:39-03:00,info,appl
listen,17,0.0.0.0,64549
2012-07-06T09:32:39-03:00,info,appl
listen,17,0.0.0.0,64550
2012-07-06T09:32:43-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:32:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:32:43-03:00,info,appl
listen,17,0.0.0.0,64551
2012-07-06T09:32:44-03:00,info,appl
listen,17,0.0.0.0,64552
2012-07-06T09:32:44-03:00,info,appl
listen,17,0.0.0.0,64553
2012-07-06T09:32:45-03:00,info,appl
listen,17,0.0.0.0,64554
2012-07-06T09:32:45-03:00,info,appl
listen,17,0.0.0.0,64555
2012-07-06T09:32:45-03:00,info,appl
listen,17,0.0.0.0,64556
2012-07-06T09:32:46-03:00,info,appl
listen,17,0.0.0.0,64557
2012-07-06T09:32:46-03:00,info,appl
listen,17,0.0.0.0,64558
2012-07-06T09:32:46-03:00,info,appl
listen,17,0.0.0.0,64559
2012-07-06T09:32:47-03:00,info,appl
listen,17,0.0.0.0,64560
2012-07-06T09:32:47-03:00,info,appl
listen,17,0.0.0.0,64561
2012-07-06T09:32:47-03:00,info,appl
listen,17,0.0.0.0,64562
2012-07-06T09:32:51-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T09:32:51-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T09:32:51-03:00,info,appl
listen,17,0.0.0.0,64563
2012-07-06T09:32:51-03:00,info,appl
listen,17,0.0.0.0,64564
2012-07-06T09:32:52-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64565
2012-07-06T09:32:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64566
2012-07-06T09:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64567
2012-07-06T09:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64568
2012-07-06T09:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64569
2012-07-06T09:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64570
2012-07-06T09:32:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.37,1559
2012-07-06T09:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64571
2012-07-06T09:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64572
2012-07-06T09:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64573
2012-07-06T09:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64574
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64575
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64576
2012-07-06T09:32:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64577
2012-07-06T09:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64578
2012-07-06T09:33:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64579
2012-07-06T09:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64580
2012-07-06T09:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64581
2012-07-06T09:33:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64582
2012-07-06T09:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64583
2012-07-06T09:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64584
2012-07-06T09:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64585
2012-07-06T09:33:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64586
2012-07-06T09:33:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.156,1283
2012-07-06T09:34:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.81,3177
2012-07-06T09:34:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.93,60784
2012-07-06T09:36:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:36:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:36:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.54,65340
2012-07-06T09:36:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:36:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:36:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:36:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64587
2012-07-06T09:36:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:36:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64588
2012-07-06T09:36:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64589
2012-07-06T09:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64590
2012-07-06T09:36:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64591
2012-07-06T09:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64592
2012-07-06T09:36:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64593
2012-07-06T09:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64594
2012-07-06T09:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64595
2012-07-06T09:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64596
2012-07-06T09:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64597
2012-07-06T09:36:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64598
2012-07-06T09:36:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.3,62956
2012-07-06T09:36:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:36:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:37:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.202,1556
2012-07-06T09:37:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:38:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64599
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64600
2012-07-06T09:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64601
2012-07-06T09:38:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64602
2012-07-06T09:38:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64603
2012-07-06T09:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64604
2012-07-06T09:38:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64605
2012-07-06T09:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64606
2012-07-06T09:38:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.130,1476
2012-07-06T09:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64607
2012-07-06T09:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64608
2012-07-06T09:38:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64609
2012-07-06T09:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64610
2012-07-06T09:38:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64611
2012-07-06T09:38:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.72,2452
2012-07-06T09:38:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.78,61107
2012-07-06T09:39:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.147,64260
2012-07-06T09:40:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,57115
2012-07-06T09:40:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.124,49339
2012-07-06T09:41:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.102,57120
2012-07-06T09:41:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T09:41:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64612
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64613
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63734
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:41:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63735
2012-07-06T09:41:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51664
2012-07-06T09:41:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:41:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51665
2012-07-06T09:41:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51666
2012-07-06T09:41:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51667
2012-07-06T09:41:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51668
2012-07-06T09:41:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51669
2012-07-06T09:41:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51670
2012-07-06T09:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51671
2012-07-06T09:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51672
2012-07-06T09:41:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51673
2012-07-06T09:41:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.212,1370
2012-07-06T09:42:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.220,1508
2012-07-06T09:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51674
2012-07-06T09:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51675
2012-07-06T09:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51676
2012-07-06T09:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51677
2012-07-06T09:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51678
2012-07-06T09:43:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51679
2012-07-06T09:43:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51680
2012-07-06T09:43:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51681
2012-07-06T09:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51682
2012-07-06T09:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51683
2012-07-06T09:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51684
2012-07-06T09:43:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51685
2012-07-06T09:43:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.56,1251
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59081
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59082
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,59545
2012-07-06T09:43:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59546
2012-07-06T09:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59547
2012-07-06T09:43:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50106
2012-07-06T09:43:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:43:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50107
2012-07-06T09:43:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50108
2012-07-06T09:43:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50109
2012-07-06T09:43:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50110
2012-07-06T09:43:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50111
2012-07-06T09:43:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50112
2012-07-06T09:43:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50113
2012-07-06T09:43:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50114
2012-07-06T09:43:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50115
2012-07-06T09:43:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52329
2012-07-06T09:43:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65049
2012-07-06T09:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61767
2012-07-06T09:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57161
2012-07-06T09:43:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:44:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,1580
2012-07-06T09:44:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:44:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:44:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.35,56119
2012-07-06T09:44:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:44:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.123,62652
2012-07-06T09:45:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:45:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.25,2894
2012-07-06T09:46:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,51588
2012-07-06T09:46:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.83,61648
2012-07-06T09:46:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T09:46:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T09:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57162
2012-07-06T09:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:46:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57163
2012-07-06T09:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57164
2012-07-06T09:46:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57165
2012-07-06T09:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57166
2012-07-06T09:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57167
2012-07-06T09:46:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.3,1859
2012-07-06T09:46:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57168
2012-07-06T09:46:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57169
2012-07-06T09:46:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57170
2012-07-06T09:46:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57171
2012-07-06T09:46:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57172
2012-07-06T09:46:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57173
2012-07-06T09:47:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.48,50495
2012-07-06T09:47:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.76,59170
2012-07-06T09:47:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.23,1184
2012-07-06T09:48:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,2132
2012-07-06T09:48:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,52969
2012-07-06T09:49:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.7,54773
2012-07-06T09:49:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.52,4428
2012-07-06T09:50:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.72,2107
2012-07-06T09:50:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.195,53765
2012-07-06T09:50:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.86,56470
2012-07-06T09:51:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:51:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T09:51:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:51:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:51:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,3143
2012-07-06T09:51:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T09:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57174
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57175
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50489
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:51:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50490
2012-07-06T09:51:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53328
2012-07-06T09:51:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53329
2012-07-06T09:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53330
2012-07-06T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53331
2012-07-06T09:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53332
2012-07-06T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53333
2012-07-06T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53334
2012-07-06T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53335
2012-07-06T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53336
2012-07-06T09:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53337
2012-07-06T09:51:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,51188
2012-07-06T09:52:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:52:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.2,51353
2012-07-06T09:52:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,55506
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53338
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53339
2012-07-06T09:53:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53340
2012-07-06T09:53:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53341
2012-07-06T09:53:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53342
2012-07-06T09:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53343
2012-07-06T09:53:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53344
2012-07-06T09:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53345
2012-07-06T09:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53346
2012-07-06T09:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53347
2012-07-06T09:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53348
2012-07-06T09:53:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,63438
2012-07-06T09:53:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53349
2012-07-06T09:53:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,56061
2012-07-06T09:53:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.67,1798
2012-07-06T09:54:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.248,4817
2012-07-06T09:55:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.225,65298
2012-07-06T09:55:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.119,1921
2012-07-06T09:56:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.19,2625
2012-07-06T09:56:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.48,62462
2012-07-06T09:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T09:56:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T09:56:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:56:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53350
2012-07-06T09:56:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53351
2012-07-06T09:56:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53352
2012-07-06T09:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53353
2012-07-06T09:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53354
2012-07-06T09:56:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53355
2012-07-06T09:56:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53356
2012-07-06T09:56:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53357
2012-07-06T09:56:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53358
2012-07-06T09:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53359
2012-07-06T09:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53360
2012-07-06T09:57:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53361
2012-07-06T09:57:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.188,61695
2012-07-06T09:57:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.187,51963
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56731
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56732
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50349
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50350
2012-07-06T09:57:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50351
2012-07-06T09:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51125
2012-07-06T09:57:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51126
2012-07-06T09:57:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51127
2012-07-06T09:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51128
2012-07-06T09:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51129
2012-07-06T09:57:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51130
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51131
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51132
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51133
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51134
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59426
2012-07-06T09:57:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,connect out,6,10.10.0.11,53
2012-07-06T09:57:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59879
2012-07-06T09:57:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54754
2012-07-06T09:57:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:57:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55720
2012-07-06T09:57:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T09:57:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.21,58525
2012-07-06T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55721
2012-07-06T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T09:58:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55722
2012-07-06T09:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55723
2012-07-06T09:58:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55724
2012-07-06T09:58:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55725
2012-07-06T09:58:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55726
2012-07-06T09:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55727
2012-07-06T09:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55728
2012-07-06T09:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55729
2012-07-06T09:58:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55730
2012-07-06T09:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55731
2012-07-06T09:58:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55732
2012-07-06T09:58:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T09:58:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:58:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,62726
2012-07-06T09:58:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:58:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.55,2677
2012-07-06T09:59:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.137,54953
2012-07-06T09:59:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T09:59:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.169,62804
2012-07-06T10:00:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.137,54954
2012-07-06T10:00:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.92,2317
2012-07-06T10:02:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:02:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55733
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55734
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49611
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:02:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49612
2012-07-06T10:02:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52103
2012-07-06T10:02:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:02:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52104
2012-07-06T10:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52105
2012-07-06T10:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52106
2012-07-06T10:02:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52107
2012-07-06T10:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52108
2012-07-06T10:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52109
2012-07-06T10:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52110
2012-07-06T10:02:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52111
2012-07-06T10:02:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52112
2012-07-06T10:02:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.191,2397
2012-07-06T10:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.44,60567
2012-07-06T10:04:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.215,50346
2012-07-06T10:04:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.178,2125
2012-07-06T10:05:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.173,1563
2012-07-06T10:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:05:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:05:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.55,49351
2012-07-06T10:05:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:05:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:05:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:06:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:06:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:06:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.232,2091
2012-07-06T10:06:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:06:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.213,1269
2012-07-06T10:07:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:07:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52113
2012-07-06T10:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52114
2012-07-06T10:07:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52115
2012-07-06T10:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52116
2012-07-06T10:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52117
2012-07-06T10:07:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52118
2012-07-06T10:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52119
2012-07-06T10:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52120
2012-07-06T10:07:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52121
2012-07-06T10:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52122
2012-07-06T10:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52123
2012-07-06T10:07:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52124
2012-07-06T10:07:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.84,3742
2012-07-06T10:07:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,57603
2012-07-06T10:08:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.25,59463
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51885
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51886
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51887
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51888
2012-07-06T10:08:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51889
2012-07-06T10:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62871
2012-07-06T10:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53921
2012-07-06T10:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53922
2012-07-06T10:08:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60524
2012-07-06T10:08:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60525
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58835
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58836
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52948
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52949
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60826
2012-07-06T10:08:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60827
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57816
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57817
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57794
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57795
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53136
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53137
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60255
2012-07-06T10:08:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60256
2012-07-06T10:09:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.25,59464
2012-07-06T10:10:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.229,52465
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49921
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49922
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,135
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49610
2012-07-06T10:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49611
2012-07-06T10:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49612
2012-07-06T10:10:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55392
2012-07-06T10:10:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55393
2012-07-06T10:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55394
2012-07-06T10:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55395
2012-07-06T10:10:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55396
2012-07-06T10:10:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55397
2012-07-06T10:10:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55398
2012-07-06T10:10:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55399
2012-07-06T10:10:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55400
2012-07-06T10:10:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55401
2012-07-06T10:10:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57742
2012-07-06T10:10:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51954
2012-07-06T10:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57840
2012-07-06T10:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52637
2012-07-06T10:10:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:11:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.244,1976
2012-07-06T10:11:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.51,62214
2012-07-06T10:11:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.41,1405
2012-07-06T10:12:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:12:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52638
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52639
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56594
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:12:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56595
2012-07-06T10:12:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50634
2012-07-06T10:12:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:12:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50635
2012-07-06T10:12:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50636
2012-07-06T10:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50637
2012-07-06T10:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50638
2012-07-06T10:12:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50639
2012-07-06T10:12:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.134,54440
2012-07-06T10:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50640
2012-07-06T10:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50641
2012-07-06T10:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50642
2012-07-06T10:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50643
2012-07-06T10:12:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:12:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:12:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,55643
2012-07-06T10:13:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:13:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:13:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50644
2012-07-06T10:13:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:13:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50645
2012-07-06T10:13:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50646
2012-07-06T10:13:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50647
2012-07-06T10:13:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50648
2012-07-06T10:13:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50649
2012-07-06T10:13:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50650
2012-07-06T10:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50651
2012-07-06T10:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50652
2012-07-06T10:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50653
2012-07-06T10:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50654
2012-07-06T10:13:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50655
2012-07-06T10:13:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60800
2012-07-06T10:13:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60801
2012-07-06T10:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:13:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60802
2012-07-06T10:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60803
2012-07-06T10:13:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60804
2012-07-06T10:13:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60805
2012-07-06T10:13:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60806
2012-07-06T10:13:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60807
2012-07-06T10:13:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60808
2012-07-06T10:13:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60809
2012-07-06T10:13:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60810
2012-07-06T10:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60811
2012-07-06T10:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60812
2012-07-06T10:13:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60813
2012-07-06T10:13:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:15:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.144,1128
2012-07-06T10:15:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.40,57381
2012-07-06T10:16:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.115,59512
2012-07-06T10:16:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.122,61673
2012-07-06T10:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60814
2012-07-06T10:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T10:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60815
2012-07-06T10:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60816
2012-07-06T10:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60817
2012-07-06T10:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60818
2012-07-06T10:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60819
2012-07-06T10:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60820
2012-07-06T10:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60821
2012-07-06T10:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60822
2012-07-06T10:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60823
2012-07-06T10:17:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60824
2012-07-06T10:17:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60825
2012-07-06T10:18:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.101,57847
2012-07-06T10:19:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.53,1686
2012-07-06T10:19:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:19:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:20:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,49892
2012-07-06T10:20:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:20:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.112,62426
2012-07-06T10:21:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:21:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:22:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:22:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60826
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60827
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59688
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59689
2012-07-06T10:22:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53293
2012-07-06T10:22:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53294
2012-07-06T10:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53295
2012-07-06T10:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53296
2012-07-06T10:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53297
2012-07-06T10:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53298
2012-07-06T10:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53299
2012-07-06T10:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53300
2012-07-06T10:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53301
2012-07-06T10:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53302
2012-07-06T10:23:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.56,1637
2012-07-06T10:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64732
2012-07-06T10:23:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62046
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62047
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:23:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62048
2012-07-06T10:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62049
2012-07-06T10:23:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62050
2012-07-06T10:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62051
2012-07-06T10:23:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62052
2012-07-06T10:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62053
2012-07-06T10:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62054
2012-07-06T10:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62055
2012-07-06T10:23:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62056
2012-07-06T10:23:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62057
2012-07-06T10:23:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62058
2012-07-06T10:23:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,57574
2012-07-06T10:23:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.32,57516
2012-07-06T10:24:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.100,1568
2012-07-06T10:24:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.59,65506
2012-07-06T10:25:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,63706
2012-07-06T10:26:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,60315
2012-07-06T10:26:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.82,1153
2012-07-06T10:26:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:26:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:27:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:27:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,61480
2012-07-06T10:27:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:27:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:27:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:27:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:27:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62059
2012-07-06T10:27:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:27:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62060
2012-07-06T10:27:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62061
2012-07-06T10:27:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62062
2012-07-06T10:27:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62063
2012-07-06T10:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62064
2012-07-06T10:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62065
2012-07-06T10:27:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62066
2012-07-06T10:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62067
2012-07-06T10:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62068
2012-07-06T10:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62069
2012-07-06T10:28:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62070
2012-07-06T10:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62071
2012-07-06T10:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:28:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62072
2012-07-06T10:28:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62073
2012-07-06T10:28:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62074
2012-07-06T10:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62075
2012-07-06T10:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62076
2012-07-06T10:28:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62077
2012-07-06T10:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62078
2012-07-06T10:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62079
2012-07-06T10:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62080
2012-07-06T10:28:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62081
2012-07-06T10:28:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62082
2012-07-06T10:30:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.254,51294
2012-07-06T10:33:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:33:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62083
2012-07-06T10:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:33:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62084
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59414
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59415
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59040
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:33:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59041
2012-07-06T10:33:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59042
2012-07-06T10:33:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59043
2012-07-06T10:33:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59044
2012-07-06T10:33:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59045
2012-07-06T10:33:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59046
2012-07-06T10:33:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59047
2012-07-06T10:33:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59048
2012-07-06T10:33:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59049
2012-07-06T10:33:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:33:55-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:34:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:34:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.15,3528
2012-07-06T10:34:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.201,64038
2012-07-06T10:34:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:35:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.46,57289
2012-07-06T10:36:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:36:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:36:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,2626
2012-07-06T10:36:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.235,54332
2012-07-06T10:37:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,52327
2012-07-06T10:37:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,52328
2012-07-06T10:38:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:38:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59050
2012-07-06T10:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59051
2012-07-06T10:38:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59052
2012-07-06T10:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59053
2012-07-06T10:38:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59054
2012-07-06T10:38:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59055
2012-07-06T10:38:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59056
2012-07-06T10:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59057
2012-07-06T10:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59058
2012-07-06T10:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59059
2012-07-06T10:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59060
2012-07-06T10:38:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59061
2012-07-06T10:38:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,4455
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59062
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59063
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59064
2012-07-06T10:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59065
2012-07-06T10:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59066
2012-07-06T10:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59067
2012-07-06T10:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59068
2012-07-06T10:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.201.0.100,389
2012-07-06T10:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59069
2012-07-06T10:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59070
2012-07-06T10:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59071
2012-07-06T10:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59072
2012-07-06T10:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59073
2012-07-06T10:38:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59074
2012-07-06T10:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.31,54473
2012-07-06T10:39:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.1,1962
2012-07-06T10:40:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,65225
2012-07-06T10:40:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.81,49512
2012-07-06T10:40:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.80,63352
2012-07-06T10:41:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:41:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:41:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.243,59557
2012-07-06T10:41:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:42:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:42:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.92,59123
2012-07-06T10:42:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,54432
2012-07-06T10:43:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.159,58946
2012-07-06T10:43:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:43:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:43:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:43:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59075
2012-07-06T10:43:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59076
2012-07-06T10:43:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63414
2012-07-06T10:43:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:43:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63415
2012-07-06T10:43:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59246
2012-07-06T10:43:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:43:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59247
2012-07-06T10:43:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59248
2012-07-06T10:43:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59249
2012-07-06T10:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59250
2012-07-06T10:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59251
2012-07-06T10:43:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59252
2012-07-06T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59253
2012-07-06T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59254
2012-07-06T10:43:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59255
2012-07-06T10:43:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,2497
2012-07-06T10:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59256
2012-07-06T10:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59257
2012-07-06T10:43:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59258
2012-07-06T10:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59259
2012-07-06T10:43:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59260
2012-07-06T10:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59261
2012-07-06T10:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59262
2012-07-06T10:43:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59263
2012-07-06T10:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59264
2012-07-06T10:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59265
2012-07-06T10:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59266
2012-07-06T10:43:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59267
2012-07-06T10:44:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,49165
2012-07-06T10:45:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.6,63662
2012-07-06T10:46:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.250,59420
2012-07-06T10:47:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.250,59421
2012-07-06T10:47:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.102,2126
2012-07-06T10:48:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:48:09-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59268
2012-07-06T10:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T10:48:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:48:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59269
2012-07-06T10:48:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59270
2012-07-06T10:48:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59271
2012-07-06T10:48:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59272
2012-07-06T10:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59273
2012-07-06T10:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59274
2012-07-06T10:48:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59275
2012-07-06T10:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59276
2012-07-06T10:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59277
2012-07-06T10:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59278
2012-07-06T10:48:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59279
2012-07-06T10:48:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59280
2012-07-06T10:48:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,57810
2012-07-06T10:48:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:49:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:49:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.1,63222
2012-07-06T10:50:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.71,1736
2012-07-06T10:51:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:51:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T10:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,2463
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51888
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51889
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61998
2012-07-06T10:51:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61999
2012-07-06T10:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62000
2012-07-06T10:51:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58890
2012-07-06T10:51:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:51:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58891
2012-07-06T10:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58892
2012-07-06T10:51:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58893
2012-07-06T10:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58894
2012-07-06T10:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58895
2012-07-06T10:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58896
2012-07-06T10:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58897
2012-07-06T10:51:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58898
2012-07-06T10:51:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58899
2012-07-06T10:51:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,61098
2012-07-06T10:51:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60928
2012-07-06T10:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58276
2012-07-06T10:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57319
2012-07-06T10:51:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:52:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,56905
2012-07-06T10:53:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.85,61232
2012-07-06T10:53:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:53:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57320
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57321
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59208
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T10:53:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59209
2012-07-06T10:53:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51723
2012-07-06T10:53:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T10:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51724
2012-07-06T10:53:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51725
2012-07-06T10:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51726
2012-07-06T10:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51727
2012-07-06T10:53:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51728
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51729
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51730
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51731
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51732
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51733
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51734
2012-07-06T10:53:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51735
2012-07-06T10:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51736
2012-07-06T10:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51737
2012-07-06T10:53:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51738
2012-07-06T10:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51739
2012-07-06T10:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51740
2012-07-06T10:53:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51741
2012-07-06T10:53:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51742
2012-07-06T10:53:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51743
2012-07-06T10:53:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51744
2012-07-06T10:54:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.178,3555
2012-07-06T10:55:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.16,56619
2012-07-06T10:55:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T10:55:16-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:55:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,1483
2012-07-06T10:55:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:56:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.43,4272
2012-07-06T10:56:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T10:56:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.43,53254
2012-07-06T10:57:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,4673
2012-07-06T10:57:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.196,4689
2012-07-06T10:58:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.43,53259
2012-07-06T10:58:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T10:58:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T10:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51745
2012-07-06T10:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T10:58:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51746
2012-07-06T10:58:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51747
2012-07-06T10:58:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51748
2012-07-06T10:58:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51749
2012-07-06T10:58:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51750
2012-07-06T10:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51751
2012-07-06T10:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51752
2012-07-06T10:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51753
2012-07-06T10:58:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51754
2012-07-06T10:58:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51755
2012-07-06T10:58:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51756
2012-07-06T10:58:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T10:58:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51757
2012-07-06T10:58:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51758
2012-07-06T10:58:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51759
2012-07-06T10:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51760
2012-07-06T10:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51761
2012-07-06T10:58:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51762
2012-07-06T10:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51763
2012-07-06T10:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51764
2012-07-06T10:58:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51765
2012-07-06T10:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51766
2012-07-06T10:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51767
2012-07-06T10:58:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51768
2012-07-06T10:59:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,3808
2012-07-06T10:59:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,3827
2012-07-06T11:01:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.121,59676
2012-07-06T11:01:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,55641
2012-07-06T11:01:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.35,51538
2012-07-06T11:02:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:02:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T11:02:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:03:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:03:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:03:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51769
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51770
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53139
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:03:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53140
2012-07-06T11:03:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58450
2012-07-06T11:03:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:03:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58451
2012-07-06T11:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58452
2012-07-06T11:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58453
2012-07-06T11:03:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58454
2012-07-06T11:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58455
2012-07-06T11:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58456
2012-07-06T11:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58457
2012-07-06T11:03:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58458
2012-07-06T11:03:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58459
2012-07-06T11:04:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4968
2012-07-06T11:04:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.44,4984
2012-07-06T11:05:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4555
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\taskhost.exe,all
ow,connect out,6,10.10.0.12,389
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58461
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58462
2012-07-06T11:05:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58463
2012-07-06T11:05:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58464
2012-07-06T11:05:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58465
2012-07-06T11:05:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58466
2012-07-06T11:05:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58467
2012-07-06T11:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58468
2012-07-06T11:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58469
2012-07-06T11:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58470
2012-07-06T11:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58471
2012-07-06T11:05:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58472
2012-07-06T11:06:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:06:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:06:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:06:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50567
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50568
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50569
2012-07-06T11:08:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50570
2012-07-06T11:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61871
2012-07-06T11:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61872
2012-07-06T11:08:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53933
2012-07-06T11:08:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53934
2012-07-06T11:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62790
2012-07-06T11:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62791
2012-07-06T11:08:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57181
2012-07-06T11:08:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57182
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59189
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59190
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50024
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50025
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59225
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59226
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54747
2012-07-06T11:08:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54748
2012-07-06T11:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57172
2012-07-06T11:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57173
2012-07-06T11:08:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58679
2012-07-06T11:08:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58680
2012-07-06T11:08:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:08:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58681
2012-07-06T11:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58682
2012-07-06T11:08:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58683
2012-07-06T11:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58684
2012-07-06T11:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58685
2012-07-06T11:08:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58686
2012-07-06T11:09:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58687
2012-07-06T11:09:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58688
2012-07-06T11:09:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58689
2012-07-06T11:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58690
2012-07-06T11:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58691
2012-07-06T11:09:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58692
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58693
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:09:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58694
2012-07-06T11:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58695
2012-07-06T11:09:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58696
2012-07-06T11:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58697
2012-07-06T11:09:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58698
2012-07-06T11:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58699
2012-07-06T11:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58700
2012-07-06T11:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58701
2012-07-06T11:09:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58702
2012-07-06T11:09:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58703
2012-07-06T11:09:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58704
2012-07-06T11:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58705
2012-07-06T11:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58706
2012-07-06T11:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58707
2012-07-06T11:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58708
2012-07-06T11:09:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.5,49791
2012-07-06T11:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58709
2012-07-06T11:09:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58710
2012-07-06T11:09:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58711
2012-07-06T11:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58712
2012-07-06T11:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58713
2012-07-06T11:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58714
2012-07-06T11:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58715
2012-07-06T11:09:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58716
2012-07-06T11:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58717
2012-07-06T11:09:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58718
2012-07-06T11:09:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58719
2012-07-06T11:09:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58720
2012-07-06T11:09:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58721
2012-07-06T11:09:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58722
2012-07-06T11:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58723
2012-07-06T11:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58724
2012-07-06T11:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58725
2012-07-06T11:09:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58726
2012-07-06T11:09:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58727
2012-07-06T11:09:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58728
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58729
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58730
2012-07-06T11:09:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58731
2012-07-06T11:09:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58732
2012-07-06T11:09:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:09:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:09:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58733
2012-07-06T11:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58734
2012-07-06T11:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58735
2012-07-06T11:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58736
2012-07-06T11:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58737
2012-07-06T11:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58738
2012-07-06T11:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58739
2012-07-06T11:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58740
2012-07-06T11:09:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.2.85,1071
2012-07-06T11:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58741
2012-07-06T11:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58742
2012-07-06T11:09:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58743
2012-07-06T11:09:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58744
2012-07-06T11:09:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58745
2012-07-06T11:09:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58746
2012-07-06T11:09:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58747
2012-07-06T11:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58748
2012-07-06T11:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58749
2012-07-06T11:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58750
2012-07-06T11:09:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58751
2012-07-06T11:09:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58752
2012-07-06T11:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58753
2012-07-06T11:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58754
2012-07-06T11:09:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58755
2012-07-06T11:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58756
2012-07-06T11:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58757
2012-07-06T11:09:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58758
2012-07-06T11:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58759
2012-07-06T11:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58760
2012-07-06T11:09:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58761
2012-07-06T11:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58762
2012-07-06T11:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58763
2012-07-06T11:09:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58764
2012-07-06T11:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58765
2012-07-06T11:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:09:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58766
2012-07-06T11:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58767
2012-07-06T11:09:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58768
2012-07-06T11:09:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58769
2012-07-06T11:09:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58770
2012-07-06T11:09:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58771
2012-07-06T11:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58772
2012-07-06T11:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58773
2012-07-06T11:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58774
2012-07-06T11:09:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58775
2012-07-06T11:09:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58776
2012-07-06T11:09:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.85,1102
2012-07-06T11:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58777
2012-07-06T11:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58778
2012-07-06T11:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58779
2012-07-06T11:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58780
2012-07-06T11:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58781
2012-07-06T11:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58782
2012-07-06T11:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58783
2012-07-06T11:10:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58784
2012-07-06T11:10:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58785
2012-07-06T11:10:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58786
2012-07-06T11:10:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58787
2012-07-06T11:10:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58788
2012-07-06T11:10:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.11,1025
2012-07-06T11:10:08-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T11:10:08-03:00,info,appl
listen,17,0.0.0.0,58789
2012-07-06T11:10:08-03:00,info,appl
listen,17,0.0.0.0,58790
2012-07-06T11:10:08-03:00,info,appl
listen,17,0.0.0.0,58791
2012-07-06T11:10:09-03:00,info,appl
listen,17,0.0.0.0,58792
2012-07-06T11:10:09-03:00,info,appl
listen,17,0.0.0.0,58793
2012-07-06T11:10:10-03:00,info,appl
listen,17,0.0.0.0,58794
2012-07-06T11:10:10-03:00,info,appl
listen,17,0.0.0.0,58795
2012-07-06T11:10:10-03:00,info,appl
listen,17,0.0.0.0,58796
2012-07-06T11:10:11-03:00,info,appl
listen,17,0.0.0.0,58797
2012-07-06T11:10:11-03:00,info,appl
listen,17,0.0.0.0,58798
2012-07-06T11:10:11-03:00,info,appl
listen,17,0.0.0.0,58799
2012-07-06T11:10:11-03:00,info,appl
listen,17,0.0.0.0,58800
2012-07-06T11:10:15-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T11:10:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T11:10:15-03:00,info,appl
listen,17,0.0.0.0,58801
2012-07-06T11:10:15-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T11:10:15-03:00,info,appl
listen,17,0.0.0.0,58802
2012-07-06T11:10:16-03:00,info,appl
listen,17,0.0.0.0,58803
2012-07-06T11:10:16-03:00,info,appl
listen,17,0.0.0.0,58804
2012-07-06T11:10:17-03:00,info,appl
listen,17,0.0.0.0,58805
2012-07-06T11:10:17-03:00,info,appl
listen,17,0.0.0.0,58806
2012-07-06T11:10:18-03:00,info,appl
listen,17,0.0.0.0,58807
2012-07-06T11:10:18-03:00,info,appl
listen,17,0.0.0.0,58808
2012-07-06T11:10:18-03:00,info,appl
listen,17,0.0.0.0,58809
2012-07-06T11:10:18-03:00,info,appl
listen,17,0.0.0.0,58810
2012-07-06T11:10:19-03:00,info,appl
listen,17,0.0.0.0,58811
2012-07-06T11:10:19-03:00,info,appl
listen,17,0.0.0.0,58812
2012-07-06T11:10:23-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T11:10:23-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58813
2012-07-06T11:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58814
2012-07-06T11:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58815
2012-07-06T11:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58816
2012-07-06T11:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58817
2012-07-06T11:10:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58818
2012-07-06T11:10:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58819
2012-07-06T11:10:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58820
2012-07-06T11:10:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58821
2012-07-06T11:10:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58822
2012-07-06T11:10:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58823
2012-07-06T11:10:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58824
2012-07-06T11:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:10:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58825
2012-07-06T11:10:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58826
2012-07-06T11:10:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58827
2012-07-06T11:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58828
2012-07-06T11:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58829
2012-07-06T11:10:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58830
2012-07-06T11:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58831
2012-07-06T11:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58832
2012-07-06T11:10:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:10:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58833
2012-07-06T11:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58834
2012-07-06T11:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58835
2012-07-06T11:10:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58836
2012-07-06T11:10:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,56115
2012-07-06T11:10:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:10:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:10:39-03:00,info,appl
listen,17,0.0.0.0,58837
2012-07-06T11:10:39-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T11:10:39-03:00,info,appl
listen,17,0.0.0.0,58838
2012-07-06T11:10:39-03:00,info,appl
listen,17,0.0.0.0,58839
2012-07-06T11:10:40-03:00,info,appl
listen,17,0.0.0.0,58840
2012-07-06T11:10:40-03:00,info,appl
listen,17,0.0.0.0,58841
2012-07-06T11:10:40-03:00,info,appl
listen,17,0.0.0.0,58842
2012-07-06T11:10:41-03:00,info,appl
listen,17,0.0.0.0,58843
2012-07-06T11:10:41-03:00,info,appl
listen,17,0.0.0.0,58844
2012-07-06T11:10:41-03:00,info,appl
listen,17,0.0.0.0,58845
2012-07-06T11:10:42-03:00,info,appl
listen,17,0.0.0.0,58846
2012-07-06T11:10:42-03:00,info,appl
listen,17,0.0.0.0,58847
2012-07-06T11:10:42-03:00,info,appl
listen,17,0.0.0.0,58848
2012-07-06T11:10:46-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T11:10:46-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T11:10:46-03:00,info,appl
listen,17,0.0.0.0,58849
2012-07-06T11:10:46-03:00,info,appl
listen,17,0.0.0.0,58850
2012-07-06T11:10:47-03:00,info,appl
listen,17,0.0.0.0,58851
2012-07-06T11:10:47-03:00,info,appl
listen,17,0.0.0.0,58852
2012-07-06T11:10:48-03:00,info,appl
listen,17,0.0.0.0,58853
2012-07-06T11:10:48-03:00,info,appl
listen,17,0.0.0.0,58854
2012-07-06T11:10:48-03:00,info,appl
listen,17,0.0.0.0,58855
2012-07-06T11:10:49-03:00,info,appl
listen,17,0.0.0.0,58856
2012-07-06T11:10:49-03:00,info,appl
listen,17,0.0.0.0,58857
2012-07-06T11:10:49-03:00,info,appl
listen,17,0.0.0.0,58858
2012-07-06T11:10:49-03:00,info,appl
listen,17,0.0.0.0,58859
2012-07-06T11:10:50-03:00,info,appl
listen,17,0.0.0.0,58860
2012-07-06T11:10:50-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T11:10:50-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T11:10:50-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58861
2012-07-06T11:10:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58862
2012-07-06T11:10:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58863
2012-07-06T11:10:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58864
2012-07-06T11:10:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58865
2012-07-06T11:10:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58866
2012-07-06T11:10:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58867
2012-07-06T11:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58868
2012-07-06T11:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58869
2012-07-06T11:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58870
2012-07-06T11:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58871
2012-07-06T11:10:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58872
2012-07-06T11:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58873
2012-07-06T11:10:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58874
2012-07-06T11:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58875
2012-07-06T11:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T11:10:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58876
2012-07-06T11:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58877
2012-07-06T11:10:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58878
2012-07-06T11:11:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58879
2012-07-06T11:11:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58880
2012-07-06T11:11:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58881
2012-07-06T11:11:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58882
2012-07-06T11:11:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58883
2012-07-06T11:11:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58884
2012-07-06T11:11:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.190,2160
2012-07-06T11:12:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.18,52096
2012-07-06T11:13:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.45,59787
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58885
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58886
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50281
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:13:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50282
2012-07-06T11:13:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55943
2012-07-06T11:13:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:13:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55944
2012-07-06T11:13:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55945
2012-07-06T11:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55946
2012-07-06T11:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55947
2012-07-06T11:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55948
2012-07-06T11:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55949
2012-07-06T11:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55950
2012-07-06T11:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55951
2012-07-06T11:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55952
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57343
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57344
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57345
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57346
2012-07-06T11:14:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57347
2012-07-06T11:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57348
2012-07-06T11:14:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:14:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57349
2012-07-06T11:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57350
2012-07-06T11:14:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57351
2012-07-06T11:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57352
2012-07-06T11:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57353
2012-07-06T11:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57354
2012-07-06T11:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57355
2012-07-06T11:14:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57356
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57357
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57358
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57359
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57360
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57361
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57362
2012-07-06T11:14:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57363
2012-07-06T11:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57364
2012-07-06T11:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57365
2012-07-06T11:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57366
2012-07-06T11:14:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57367
2012-07-06T11:14:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57368
2012-07-06T11:14:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,1368
2012-07-06T11:15:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.50,4468
2012-07-06T11:15:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.36,58409
2012-07-06T11:16:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:16:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:17:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.60,59333
2012-07-06T11:17:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:17:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:19:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:19:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57369
2012-07-06T11:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T11:19:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57370
2012-07-06T11:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57371
2012-07-06T11:19:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57372
2012-07-06T11:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57373
2012-07-06T11:19:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57374
2012-07-06T11:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57375
2012-07-06T11:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57376
2012-07-06T11:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57377
2012-07-06T11:19:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57378
2012-07-06T11:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57379
2012-07-06T11:19:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57380
2012-07-06T11:20:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,50179
2012-07-06T11:21:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:21:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:21:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.3,1100
2012-07-06T11:22:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,57227
2012-07-06T11:23:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:23:44-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:23:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,49380
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57381
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57382
2012-07-06T11:23:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57383
2012-07-06T11:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57384
2012-07-06T11:23:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57385
2012-07-06T11:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57386
2012-07-06T11:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57387
2012-07-06T11:23:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,57388
2012-07-06T11:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57389
2012-07-06T11:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57390
2012-07-06T11:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57391
2012-07-06T11:23:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57392
2012-07-06T11:24:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58393
2012-07-06T11:24:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:24:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61916
2012-07-06T11:24:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:24:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:24:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:24:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61917
2012-07-06T11:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61918
2012-07-06T11:24:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61919
2012-07-06T11:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61920
2012-07-06T11:24:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61921
2012-07-06T11:24:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61922
2012-07-06T11:24:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61923
2012-07-06T11:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61924
2012-07-06T11:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61925
2012-07-06T11:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61926
2012-07-06T11:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61927
2012-07-06T11:24:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61928
2012-07-06T11:24:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:24:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.177,4312
2012-07-06T11:25:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,1362
2012-07-06T11:25:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54050
2012-07-06T11:25:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,send,17,10.10.0.11,53
2012-07-06T11:25:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59534
2012-07-06T11:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51292
2012-07-06T11:26:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:26:00-03:00,info,appl control,C:\Windows\System32\Macromed\Flash\F
LASHP~1.EXE,allow,connect out,6,23.61.130.70,443
2012-07-06T11:26:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,52860
2012-07-06T11:26:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.186,60343
2012-07-06T11:27:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,52865
2012-07-06T11:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51293
2012-07-06T11:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:29:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51294
2012-07-06T11:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51295
2012-07-06T11:29:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51296
2012-07-06T11:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51297
2012-07-06T11:29:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51298
2012-07-06T11:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51299
2012-07-06T11:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51300
2012-07-06T11:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51301
2012-07-06T11:29:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51302
2012-07-06T11:29:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51303
2012-07-06T11:29:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51304
2012-07-06T11:29:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:29:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:29:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51305
2012-07-06T11:29:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51306
2012-07-06T11:29:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51307
2012-07-06T11:29:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51308
2012-07-06T11:29:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51309
2012-07-06T11:29:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51310
2012-07-06T11:29:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51311
2012-07-06T11:29:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.101.0.11,389
2012-07-06T11:29:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51312
2012-07-06T11:29:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51313
2012-07-06T11:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51314
2012-07-06T11:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51315
2012-07-06T11:29:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51316
2012-07-06T11:29:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.136,64218
2012-07-06T11:29:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.122,2608
2012-07-06T11:30:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.45,50955
2012-07-06T11:30:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.78,4646
2012-07-06T11:30:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:30:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:31:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:31:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:32:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.54,49969
2012-07-06T11:33:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.204,54264
2012-07-06T11:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:34:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51317
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51318
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49989
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:34:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49990
2012-07-06T11:34:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56740
2012-07-06T11:34:37-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:34:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56741
2012-07-06T11:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56742
2012-07-06T11:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56743
2012-07-06T11:34:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56744
2012-07-06T11:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56745
2012-07-06T11:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56746
2012-07-06T11:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56747
2012-07-06T11:34:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56748
2012-07-06T11:34:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56749
2012-07-06T11:34:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.14,59695
2012-07-06T11:36:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:36:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:37:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:37:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:38:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.14,2935
2012-07-06T11:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:39:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T11:39:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56750
2012-07-06T11:39:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:39:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:39:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56751
2012-07-06T11:39:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56752
2012-07-06T11:39:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56753
2012-07-06T11:39:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56754
2012-07-06T11:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56755
2012-07-06T11:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56756
2012-07-06T11:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56757
2012-07-06T11:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56758
2012-07-06T11:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56759
2012-07-06T11:39:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56760
2012-07-06T11:39:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56761
2012-07-06T11:39:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56762
2012-07-06T11:39:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:39:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56763
2012-07-06T11:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56764
2012-07-06T11:39:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56765
2012-07-06T11:39:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56766
2012-07-06T11:39:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56767
2012-07-06T11:39:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56768
2012-07-06T11:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56769
2012-07-06T11:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56770
2012-07-06T11:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56771
2012-07-06T11:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56772
2012-07-06T11:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56773
2012-07-06T11:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56774
2012-07-06T11:39:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,4692
2012-07-06T11:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56775
2012-07-06T11:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:44:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56776
2012-07-06T11:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56777
2012-07-06T11:44:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56778
2012-07-06T11:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56779
2012-07-06T11:44:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56780
2012-07-06T11:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56781
2012-07-06T11:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56782
2012-07-06T11:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56783
2012-07-06T11:44:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56784
2012-07-06T11:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56785
2012-07-06T11:44:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56786
2012-07-06T11:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56787
2012-07-06T11:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T11:44:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:44:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56788
2012-07-06T11:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56789
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58579
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58580
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58086
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58087
2012-07-06T11:44:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58088
2012-07-06T11:44:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58089
2012-07-06T11:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58090
2012-07-06T11:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58091
2012-07-06T11:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58092
2012-07-06T11:44:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58093
2012-07-06T11:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58094
2012-07-06T11:44:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58095
2012-07-06T11:45:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:45:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:45:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:46:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:49:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:49:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:49:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T11:49:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58096
2012-07-06T11:49:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:49:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58097
2012-07-06T11:49:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58098
2012-07-06T11:50:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58099
2012-07-06T11:50:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58100
2012-07-06T11:50:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58101
2012-07-06T11:50:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58102
2012-07-06T11:50:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58103
2012-07-06T11:50:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58104
2012-07-06T11:50:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58105
2012-07-06T11:50:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58106
2012-07-06T11:50:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58107
2012-07-06T11:51:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.166,51949
2012-07-06T11:52:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:52:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:52:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:52:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:52:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.166,51954
2012-07-06T11:53:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:54:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T11:54:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:54:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58108
2012-07-06T11:54:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:54:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58109
2012-07-06T11:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58110
2012-07-06T11:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58111
2012-07-06T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58112
2012-07-06T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58113
2012-07-06T11:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,58114
2012-07-06T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58115
2012-07-06T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58116
2012-07-06T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58117
2012-07-06T11:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58118
2012-07-06T11:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58119
2012-07-06T11:55:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T11:55:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T11:55:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:55:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58120
2012-07-06T11:55:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:55:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58121
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61552
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61553
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64056
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:55:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64057
2012-07-06T11:55:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64058
2012-07-06T11:55:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64059
2012-07-06T11:55:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64060
2012-07-06T11:55:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64061
2012-07-06T11:55:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64062
2012-07-06T11:55:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64063
2012-07-06T11:55:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64064
2012-07-06T11:55:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64065
2012-07-06T11:58:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63417
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63418
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64575
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64576
2012-07-06T11:59:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64577
2012-07-06T11:59:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51784
2012-07-06T11:59:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51785
2012-07-06T11:59:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51786
2012-07-06T11:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51787
2012-07-06T11:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51788
2012-07-06T11:59:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51789
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51790
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51791
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51792
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51793
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53319
2012-07-06T11:59:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:59:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52041
2012-07-06T11:59:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51998
2012-07-06T11:59:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:59:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53479
2012-07-06T11:59:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T11:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T11:59:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T11:59:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T11:59:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53480
2012-07-06T11:59:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T11:59:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53481
2012-07-06T11:59:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53482
2012-07-06T11:59:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53483
2012-07-06T11:59:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53484
2012-07-06T11:59:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53485
2012-07-06T11:59:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53486
2012-07-06T11:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53487
2012-07-06T11:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53488
2012-07-06T11:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53489
2012-07-06T11:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53490
2012-07-06T11:59:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53491
2012-07-06T11:59:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:00:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T12:00:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T12:00:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:00:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53492
2012-07-06T12:00:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:00:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53493
2012-07-06T12:00:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53494
2012-07-06T12:00:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53495
2012-07-06T12:00:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53496
2012-07-06T12:00:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53497
2012-07-06T12:00:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53498
2012-07-06T12:00:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53499
2012-07-06T12:00:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53500
2012-07-06T12:00:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53501
2012-07-06T12:00:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53502
2012-07-06T12:00:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53503
2012-07-06T12:00:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:05:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T12:05:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53504
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53505
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62588
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:05:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62589
2012-07-06T12:05:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53222
2012-07-06T12:05:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:05:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53223
2012-07-06T12:05:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53224
2012-07-06T12:05:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53225
2012-07-06T12:05:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53226
2012-07-06T12:05:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53227
2012-07-06T12:05:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53228
2012-07-06T12:05:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53229
2012-07-06T12:05:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53230
2012-07-06T12:05:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53231
2012-07-06T12:06:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:06:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:06:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:06:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:07:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55296
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55297
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55298
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,55299
2012-07-06T12:09:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55300
2012-07-06T12:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54191
2012-07-06T12:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63954
2012-07-06T12:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63955
2012-07-06T12:09:13-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50725
2012-07-06T12:09:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50726
2012-07-06T12:09:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51058
2012-07-06T12:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51059
2012-07-06T12:09:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61415
2012-07-06T12:09:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61416
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59139
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59140
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50483
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50484
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51479
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51480
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54566
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54567
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51000
2012-07-06T12:09:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51001
2012-07-06T12:10:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T12:10:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T12:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51002
2012-07-06T12:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51003
2012-07-06T12:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51004
2012-07-06T12:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51005
2012-07-06T12:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51006
2012-07-06T12:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51007
2012-07-06T12:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51008
2012-07-06T12:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51009
2012-07-06T12:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51010
2012-07-06T12:10:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51011
2012-07-06T12:10:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51012
2012-07-06T12:10:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51013
2012-07-06T12:10:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:13:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:13:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:14:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:14:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:14:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:14:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51014
2012-07-06T12:14:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:14:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51015
2012-07-06T12:14:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51016
2012-07-06T12:14:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51017
2012-07-06T12:14:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51018
2012-07-06T12:14:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51019
2012-07-06T12:14:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51020
2012-07-06T12:14:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51021
2012-07-06T12:14:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51022
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51023
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51024
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51025
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65228
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65229
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:14:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65230
2012-07-06T12:14:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65231
2012-07-06T12:14:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65232
2012-07-06T12:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65233
2012-07-06T12:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65234
2012-07-06T12:14:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65235
2012-07-06T12:14:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65236
2012-07-06T12:14:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65237
2012-07-06T12:14:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65238
2012-07-06T12:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65239
2012-07-06T12:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65240
2012-07-06T12:14:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65241
2012-07-06T12:15:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:15:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:15:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:15:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65242
2012-07-06T12:15:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:15:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65243
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56034
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56035
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50282
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:15:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50283
2012-07-06T12:15:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50284
2012-07-06T12:15:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50285
2012-07-06T12:15:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50286
2012-07-06T12:15:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50287
2012-07-06T12:15:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50288
2012-07-06T12:15:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50289
2012-07-06T12:15:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50290
2012-07-06T12:15:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50291
2012-07-06T12:20:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:20:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50292
2012-07-06T12:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:20:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50293
2012-07-06T12:20:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50294
2012-07-06T12:20:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50295
2012-07-06T12:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50296
2012-07-06T12:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50297
2012-07-06T12:20:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50298
2012-07-06T12:20:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50299
2012-07-06T12:20:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50300
2012-07-06T12:20:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50301
2012-07-06T12:20:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50302
2012-07-06T12:20:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50303
2012-07-06T12:20:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:20:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:21:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:21:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:23:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50304
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50305
2012-07-06T12:24:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50306
2012-07-06T12:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50307
2012-07-06T12:24:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50308
2012-07-06T12:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50309
2012-07-06T12:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50310
2012-07-06T12:24:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50311
2012-07-06T12:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50312
2012-07-06T12:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50313
2012-07-06T12:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50314
2012-07-06T12:24:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50315
2012-07-06T12:25:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:25:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50316
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50317
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59618
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:25:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59619
2012-07-06T12:25:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56487
2012-07-06T12:25:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:25:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56488
2012-07-06T12:25:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56489
2012-07-06T12:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56490
2012-07-06T12:25:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56491
2012-07-06T12:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56492
2012-07-06T12:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56493
2012-07-06T12:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56494
2012-07-06T12:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56495
2012-07-06T12:25:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56496
2012-07-06T12:27:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:27:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:27:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,62419
2012-07-06T12:27:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:27:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49318
2012-07-06T12:28:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:28:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:29:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:29:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49319
2012-07-06T12:29:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:29:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49320
2012-07-06T12:29:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49321
2012-07-06T12:29:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49322
2012-07-06T12:29:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49323
2012-07-06T12:29:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49324
2012-07-06T12:29:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49325
2012-07-06T12:29:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49326
2012-07-06T12:29:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49327
2012-07-06T12:29:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49328
2012-07-06T12:29:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49329
2012-07-06T12:29:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49330
2012-07-06T12:30:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:30:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49331
2012-07-06T12:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49332
2012-07-06T12:30:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49333
2012-07-06T12:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49334
2012-07-06T12:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49335
2012-07-06T12:30:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49336
2012-07-06T12:30:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49337
2012-07-06T12:30:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49338
2012-07-06T12:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49339
2012-07-06T12:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49340
2012-07-06T12:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49341
2012-07-06T12:30:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49342
2012-07-06T12:34:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:34:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:35:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:35:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.1.0.19,80
2012-07-06T12:35:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:35:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49343
2012-07-06T12:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:35:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49344
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58250
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58251
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62865
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:35:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62866
2012-07-06T12:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62867
2012-07-06T12:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62868
2012-07-06T12:35:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62869
2012-07-06T12:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62870
2012-07-06T12:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62871
2012-07-06T12:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62872
2012-07-06T12:35:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62873
2012-07-06T12:35:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62874
2012-07-06T12:35:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:35:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny

,send,17,FF02::1:2,547
2012-07-06T12:36:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58118
2012-07-06T12:36:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:36:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58071
2012-07-06T12:36:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,65.221.13.144,80
2012-07-06T12:36:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58072
2012-07-06T12:36:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,255.255.255.255,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.1.14,12110
2012-07-06T12:36:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,58073
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:36:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,10.10.4.68,12110
2012-07-06T12:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49949
2012-07-06T12:37:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:37:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,connect out,6,65.221.13.144,80
2012-07-06T12:37:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.18,2660
2012-07-06T12:37:51-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T12:38:11-03:00,info,general,daemon,Policy file has been reloaded.
2012-07-06T12:38:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.161,63620
2012-07-06T12:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T12:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49950
2012-07-06T12:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:39:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49951
2012-07-06T12:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49952
2012-07-06T12:39:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49953
2012-07-06T12:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49954
2012-07-06T12:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49955
2012-07-06T12:39:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49956
2012-07-06T12:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49957
2012-07-06T12:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49958
2012-07-06T12:39:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49959
2012-07-06T12:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49960
2012-07-06T12:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49961
2012-07-06T12:39:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49962
2012-07-06T12:39:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:39:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:39:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:39:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:40:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:40:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49963
2012-07-06T12:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49964
2012-07-06T12:40:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49965
2012-07-06T12:40:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49966
2012-07-06T12:40:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49967
2012-07-06T12:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49968
2012-07-06T12:40:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49969
2012-07-06T12:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49970
2012-07-06T12:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49971
2012-07-06T12:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49972
2012-07-06T12:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49973
2012-07-06T12:40:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49974
2012-07-06T12:41:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.69,61115
2012-07-06T12:41:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.99,2044
2012-07-06T12:42:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:42:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:42:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.12,2473
2012-07-06T12:42:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:42:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.141,1194
2012-07-06T12:43:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:44:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.11,53240
2012-07-06T12:44:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.156,1285
2012-07-06T12:44:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T12:44:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49975
2012-07-06T12:44:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:44:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49976
2012-07-06T12:44:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49977
2012-07-06T12:44:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49978
2012-07-06T12:44:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49979
2012-07-06T12:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49980
2012-07-06T12:44:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49981
2012-07-06T12:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49982
2012-07-06T12:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49983
2012-07-06T12:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49984
2012-07-06T12:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49985
2012-07-06T12:44:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49986
2012-07-06T12:44:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.15,59714
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49987
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:45:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:45:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49988
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49989
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58182
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:45:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58183
2012-07-06T12:45:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56662
2012-07-06T12:45:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56663
2012-07-06T12:45:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56664
2012-07-06T12:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56665
2012-07-06T12:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56666
2012-07-06T12:45:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56667
2012-07-06T12:45:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56668
2012-07-06T12:45:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56669
2012-07-06T12:45:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56670
2012-07-06T12:45:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56671
2012-07-06T12:48:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.106,53157
2012-07-06T12:48:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,57794
2012-07-06T12:49:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.13,57795
2012-07-06T12:49:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:49:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:49:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:50:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:50:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:50:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56672
2012-07-06T12:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56673
2012-07-06T12:50:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56674
2012-07-06T12:50:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56675
2012-07-06T12:50:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56676
2012-07-06T12:50:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56677
2012-07-06T12:50:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56678
2012-07-06T12:50:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56679
2012-07-06T12:50:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56680
2012-07-06T12:50:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56681
2012-07-06T12:50:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56682
2012-07-06T12:50:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56683
2012-07-06T12:51:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,58795
2012-07-06T12:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,389
2012-07-06T12:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56684
2012-07-06T12:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:54:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56685
2012-07-06T12:54:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56686
2012-07-06T12:54:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56687
2012-07-06T12:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56688
2012-07-06T12:54:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56689
2012-07-06T12:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56690
2012-07-06T12:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56691
2012-07-06T12:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56692
2012-07-06T12:54:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56693
2012-07-06T12:54:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56694
2012-07-06T12:54:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56695
2012-07-06T12:55:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:55:05-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.37,64493
2012-07-06T12:56:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T12:56:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T12:56:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:56:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56696
2012-07-06T12:56:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:56:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56697
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49586
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49587
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63284
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T12:56:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63285
2012-07-06T12:56:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63286
2012-07-06T12:56:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63287
2012-07-06T12:56:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63288
2012-07-06T12:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63289
2012-07-06T12:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63290
2012-07-06T12:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63291
2012-07-06T12:56:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63292
2012-07-06T12:56:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63293
2012-07-06T12:56:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T12:56:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:56:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:56:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.96,1165
2012-07-06T12:57:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.14,49668
2012-07-06T12:57:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T12:57:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.24,4491
2012-07-06T12:58:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T12:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T12:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63294
2012-07-06T12:59:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T12:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63295
2012-07-06T12:59:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63296
2012-07-06T12:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63297
2012-07-06T12:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63298
2012-07-06T12:59:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63299
2012-07-06T12:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63300
2012-07-06T12:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63301
2012-07-06T12:59:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63302
2012-07-06T13:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63303
2012-07-06T13:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63304
2012-07-06T13:00:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63305
2012-07-06T13:00:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.6,55480
2012-07-06T13:00:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.1.69,1783
2012-07-06T13:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T13:01:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T13:01:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:01:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63306
2012-07-06T13:01:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:01:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63307
2012-07-06T13:01:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63308
2012-07-06T13:01:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63309
2012-07-06T13:01:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63310
2012-07-06T13:01:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.53,56572
2012-07-06T13:01:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63311
2012-07-06T13:01:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63312
2012-07-06T13:01:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63313
2012-07-06T13:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63314
2012-07-06T13:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63315
2012-07-06T13:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63316
2012-07-06T13:01:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63317
2012-07-06T13:01:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.94,64862
2012-07-06T13:02:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.53,56577
2012-07-06T13:02:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.182,62754
2012-07-06T13:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:03:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:03:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.182,62758
2012-07-06T13:03:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:04:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.39,51160
2012-07-06T13:04:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:04:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.97,1921
2012-07-06T13:05:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.39,51165
2012-07-06T13:05:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.24,54738
2012-07-06T13:06:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,135
2012-07-06T13:06:05-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:05-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:05-03:00,info,appl
listen,17,0.0.0.0,63318
2012-07-06T13:06:05-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T13:06:05-03:00,info,appl
listen,17,0.0.0.0,63319
2012-07-06T13:06:05-03:00,info,appl
w,listen,17,0.0.0.0,61296
2012-07-06T13:06:05-03:00,info,appl
w,send,17,10.10.0.11,53
2012-07-06T13:06:05-03:00,info,appl
listen,17,0.0.0.0,61297
2012-07-06T13:06:06-03:00,info,appl
w,listen,17,0.0.0.0,50864
2012-07-06T13:06:06-03:00,info,appl
w,connect out,6,10.10.0.11,53
2012-07-06T13:06:06-03:00,info,appl
listen,17,0.0.0.0,50865
2012-07-06T13:06:06-03:00,info,appl
listen,17,0.0.0.0,50866
2012-07-06T13:06:07-03:00,info,appl
listen,17,0.0.0.0,50867
2012-07-06T13:06:07-03:00,info,appl
listen,17,0.0.0.0,50868
2012-07-06T13:06:08-03:00,info,appl
listen,17,0.0.0.0,50869
2012-07-06T13:06:08-03:00,info,appl
listen,17,0.0.0.0,50870
2012-07-06T13:06:08-03:00,info,appl
listen,17,0.0.0.0,50871
2012-07-06T13:06:08-03:00,info,appl
listen,17,0.0.0.0,50872
2012-07-06T13:06:09-03:00,info,appl
listen,17,0.0.0.0,50873
2012-07-06T13:06:13-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:13-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:13-03:00,info,appl
listen,17,0.0.0.0,50874
2012-07-06T13:06:13-03:00,info,appl
listen,17,0.0.0.0,50875
2012-07-06T13:06:13-03:00,info,appl
listen,17,0.0.0.0,50876
2012-07-06T13:06:14-03:00,info,appl
listen,17,0.0.0.0,50877
2012-07-06T13:06:14-03:00,info,appl
listen,17,0.0.0.0,50878
2012-07-06T13:06:14-03:00,info,appl
listen,17,0.0.0.0,50879
2012-07-06T13:06:15-03:00,info,appl
listen,17,0.0.0.0,50880
2012-07-06T13:06:15-03:00,info,appl
listen,17,0.0.0.0,50881
2012-07-06T13:06:15-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50882
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50883
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50884
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50885
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50886
2012-07-06T13:06:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50887
2012-07-06T13:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50888
2012-07-06T13:06:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50889
2012-07-06T13:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50890
2012-07-06T13:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50891
2012-07-06T13:06:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T13:06:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T13:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50892
2012-07-06T13:06:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50893
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50894
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50895
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50896
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50897
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50898
2012-07-06T13:06:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50899
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50900
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50901
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50902
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50903
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50904
2012-07-06T13:06:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50905
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50906
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50907
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50908
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50909
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50910
2012-07-06T13:06:21-03:00,info,appl
listen,17,0.0.0.0,50911
2012-07-06T13:06:22-03:00,info,appl
listen,17,0.0.0.0,50912
2012-07-06T13:06:22-03:00,info,appl
listen,17,0.0.0.0,50913
2012-07-06T13:06:22-03:00,info,appl
listen,17,0.0.0.0,50914
2012-07-06T13:06:22-03:00,info,appl
listen,17,0.0.0.0,50915
2012-07-06T13:06:22-03:00,info,appl
listen,17,0.0.0.0,50916
2012-07-06T13:06:23-03:00,info,appl
listen,17,0.0.0.0,50917
2012-07-06T13:06:23-03:00,info,appl
listen,17,0.0.0.0,50918
2012-07-06T13:06:23-03:00,info,appl
listen,17,0.0.0.0,50919
2012-07-06T13:06:23-03:00,info,appl
listen,17,0.0.0.0,50920
2012-07-06T13:06:24-03:00,info,appl
listen,17,0.0.0.0,50921
2012-07-06T13:06:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:24-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:24-03:00,info,appl
listen,17,0.0.0.0,50922
2012-07-06T13:06:24-03:00,info,appl
listen,17,0.0.0.0,50923
2012-07-06T13:06:25-03:00,info,appl
listen,17,0.0.0.0,50924
2012-07-06T13:06:25-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T13:06:25-03:00,info,appl
listen,17,0.0.0.0,50925
2012-07-06T13:06:26-03:00,info,appl
listen,17,0.0.0.0,50926
2012-07-06T13:06:26-03:00,info,appl
listen,17,0.0.0.0,50927
2012-07-06T13:06:27-03:00,info,appl
listen,17,0.0.0.0,50928
2012-07-06T13:06:27-03:00,info,appl
listen,17,0.0.0.0,50929
2012-07-06T13:06:27-03:00,info,appl
listen,17,0.0.0.0,50930
2012-07-06T13:06:27-03:00,info,appl
listen,17,0.0.0.0,50931
2012-07-06T13:06:28-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50932
2012-07-06T13:06:28-03:00,info,appl
listen,17,0.0.0.0,50933
2012-07-06T13:06:28-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:28-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:28-03:00,info,appl
listen,17,0.0.0.0,50934
2012-07-06T13:06:28-03:00,info,appl
listen,17,0.0.0.0,50935
2012-07-06T13:06:29-03:00,info,appl
listen,17,0.0.0.0,50936
2012-07-06T13:06:29-03:00,info,appl
listen,17,0.0.0.0,50937
2012-07-06T13:06:30-03:00,info,appl
listen,17,0.0.0.0,50938
2012-07-06T13:06:30-03:00,info,appl
listen,17,0.0.0.0,50939
2012-07-06T13:06:30-03:00,info,appl
listen,17,0.0.0.0,50940
2012-07-06T13:06:31-03:00,info,appl
listen,17,0.0.0.0,50941
2012-07-06T13:06:31-03:00,info,appl
listen,17,0.0.0.0,50942
2012-07-06T13:06:31-03:00,info,appl
listen,17,0.0.0.0,50943
2012-07-06T13:06:31-03:00,info,appl
listen,17,0.0.0.0,50944
2012-07-06T13:06:32-03:00,info,appl
listen,17,0.0.0.0,50945
2012-07-06T13:06:36-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:36-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:36-03:00,info,appl
listen,17,0.0.0.0,50946
2012-07-06T13:06:36-03:00,info,appl
listen,17,0.0.0.0,50947
2012-07-06T13:06:36-03:00,info,appl
listen,17,0.0.0.0,50948
2012-07-06T13:06:37-03:00,info,appl
listen,17,0.0.0.0,50949
2012-07-06T13:06:37-03:00,info,appl
listen,17,0.0.0.0,50950
2012-07-06T13:06:38-03:00,info,appl
listen,17,0.0.0.0,50951
2012-07-06T13:06:38-03:00,info,appl
listen,17,0.0.0.0,50952
2012-07-06T13:06:38-03:00,info,appl
listen,17,0.0.0.0,50953
2012-07-06T13:06:39-03:00,info,appl
listen,17,0.0.0.0,50954
2012-07-06T13:06:39-03:00,info,appl
listen,17,0.0.0.0,50955
2012-07-06T13:06:39-03:00,info,appl
listen,17,0.0.0.0,50956
2012-07-06T13:06:39-03:00,info,appl
listen,17,0.0.0.0,50957
2012-07-06T13:06:43-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,1025
2012-07-06T13:06:43-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:43-03:00,info,appl
listen,17,0.0.0.0,50958
2012-07-06T13:06:43-03:00,info,appl
listen,17,0.0.0.0,50959
2012-07-06T13:06:44-03:00,info,appl
listen,17,0.0.0.0,50960
2012-07-06T13:06:44-03:00,info,appl
listen,17,0.0.0.0,50961
2012-07-06T13:06:45-03:00,info,appl
listen,17,0.0.0.0,50962
2012-07-06T13:06:45-03:00,info,appl
send,17,10.1.0.198,389
2012-07-06T13:06:45-03:00,info,appl
listen,17,0.0.0.0,50963
2012-07-06T13:06:45-03:00,info,appl
listen,17,0.0.0.0,50964
2012-07-06T13:06:46-03:00,info,appl
listen,17,0.0.0.0,50965
2012-07-06T13:06:46-03:00,info,appl
listen,17,0.0.0.0,50966
2012-07-06T13:06:46-03:00,info,appl
listen,17,0.0.0.0,50967
2012-07-06T13:06:47-03:00,info,appl
listen,17,0.0.0.0,50968
2012-07-06T13:06:47-03:00,info,appl
listen,17,0.0.0.0,50969
2012-07-06T13:06:47-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:47-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:47-03:00,info,appl
listen,17,0.0.0.0,50970
2012-07-06T13:06:48-03:00,info,appl
listen,17,0.0.0.0,50971
2012-07-06T13:06:48-03:00,info,appl
listen,17,0.0.0.0,50972
2012-07-06T13:06:49-03:00,info,appl
listen,17,0.0.0.0,50973
2012-07-06T13:06:49-03:00,info,appl
listen,17,0.0.0.0,50974
2012-07-06T13:06:49-03:00,info,appl
listen,17,0.0.0.0,50975
2012-07-06T13:06:50-03:00,info,appl
listen,17,0.0.0.0,50976
2012-07-06T13:06:50-03:00,info,appl
listen,17,0.0.0.0,50977
2012-07-06T13:06:50-03:00,info,appl
listen,17,0.0.0.0,50978
2012-07-06T13:06:51-03:00,info,appl
listen,17,0.0.0.0,50979
2012-07-06T13:06:51-03:00,info,appl
listen,17,0.0.0.0,50980
2012-07-06T13:06:51-03:00,info,appl
listen,17,0.0.0.0,50981
2012-07-06T13:06:51-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:51-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,88
2012-07-06T13:06:51-03:00,info,appl
listen,17,0.0.0.0,50982
2012-07-06T13:06:51-03:00,info,appl
listen,17,0.0.0.0,50983
2012-07-06T13:06:52-03:00,info,appl
listen,17,0.0.0.0,50984
2012-07-06T13:06:52-03:00,info,appl
listen,17,0.0.0.0,50985
2012-07-06T13:06:53-03:00,info,appl
listen,17,0.0.0.0,50986
2012-07-06T13:06:53-03:00,info,appl
listen,17,0.0.0.0,50987
2012-07-06T13:06:54-03:00,info,appl
listen,17,0.0.0.0,50988
2012-07-06T13:06:54-03:00,info,appl
listen,17,0.0.0.0,50989
2012-07-06T13:06:54-03:00,info,appl
listen,17,0.0.0.0,50990
2012-07-06T13:06:54-03:00,info,appl
listen,17,0.0.0.0,50991
2012-07-06T13:06:55-03:00,info,appl
listen,17,0.0.0.0,50992
2012-07-06T13:06:55-03:00,info,appl
listen,17,0.0.0.0,50993
2012-07-06T13:06:55-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:06:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:06:55-03:00,info,appl
listen,17,0.0.0.0,50994
2012-07-06T13:06:55-03:00,info,appl
listen,17,0.0.0.0,50995
2012-07-06T13:06:55-03:00,info,appl
listen,17,0.0.0.0,50996
2012-07-06T13:06:56-03:00,info,appl
listen,17,0.0.0.0,50997
2012-07-06T13:06:56-03:00,info,appl
listen,17,0.0.0.0,50998
2012-07-06T13:06:57-03:00,info,appl
listen,17,0.0.0.0,50999
2012-07-06T13:06:57-03:00,info,appl
listen,17,0.0.0.0,51000
2012-07-06T13:06:58-03:00,info,appl
listen,17,0.0.0.0,51001
2012-07-06T13:06:58-03:00,info,appl
listen,17,0.0.0.0,51002
2012-07-06T13:06:58-03:00,info,appl
listen,17,0.0.0.0,51003
2012-07-06T13:06:58-03:00,info,appl
listen,17,0.0.0.0,51004
2012-07-06T13:06:58-03:00,info,appl
listen,17,0.0.0.0,51005
2012-07-06T13:07:02-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:07:02-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:07:02-03:00,info,appl
listen,17,0.0.0.0,51006
2012-07-06T13:07:03-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51007
2012-07-06T13:07:03-03:00,info,appl
listen,17,0.0.0.0,51008
2012-07-06T13:07:04-03:00,info,appl
listen,17,0.0.0.0,51009
2012-07-06T13:07:04-03:00,info,appl
listen,17,0.0.0.0,51010
2012-07-06T13:07:04-03:00,info,appl
listen,17,0.0.0.0,51011
2012-07-06T13:07:05-03:00,info,appl
listen,17,0.0.0.0,51012
2012-07-06T13:07:05-03:00,info,appl
send,17,10.203.0.11,389
2012-07-06T13:07:05-03:00,info,appl
listen,17,0.0.0.0,51013
2012-07-06T13:07:05-03:00,info,appl
listen,17,0.0.0.0,51014
2012-07-06T13:07:06-03:00,info,appl
listen,17,0.0.0.0,51015
2012-07-06T13:07:06-03:00,info,appl
listen,17,0.0.0.0,51016
2012-07-06T13:07:06-03:00,info,appl
listen,17,0.0.0.0,51017
2012-07-06T13:07:07-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:07:07-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:07:07-03:00,info,appl
listen,17,0.0.0.0,51018
2012-07-06T13:07:07-03:00,info,appl
listen,17,0.0.0.0,51019
2012-07-06T13:07:07-03:00,info,appl
listen,17,0.0.0.0,51020
2012-07-06T13:07:08-03:00,info,appl
listen,17,0.0.0.0,51021
2012-07-06T13:07:08-03:00,info,appl
listen,17,0.0.0.0,51022
2012-07-06T13:07:09-03:00,info,appl
listen,17,0.0.0.0,51023
2012-07-06T13:07:09-03:00,info,appl
listen,17,0.0.0.0,51024
2012-07-06T13:07:09-03:00,info,appl
listen,17,0.0.0.0,51025
2012-07-06T13:07:10-03:00,info,appl
listen,17,0.0.0.0,51026
2012-07-06T13:07:10-03:00,info,appl
listen,17,0.0.0.0,51027
2012-07-06T13:07:10-03:00,info,appl
listen,17,0.0.0.0,51028
2012-07-06T13:07:10-03:00,info,appl
listen,17,0.0.0.0,51029
2012-07-06T13:07:15-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T13:07:15-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T13:07:15-03:00,info,appl
listen,17,0.0.0.0,51030
2012-07-06T13:07:15-03:00,info,appl
listen,17,0.0.0.0,51031
2012-07-06T13:07:15-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51032
2012-07-06T13:07:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51033
2012-07-06T13:07:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51034
2012-07-06T13:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51035
2012-07-06T13:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51036
2012-07-06T13:07:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51037
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51038
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51039
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51040
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51041
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:07:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51042
2012-07-06T13:07:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51043
2012-07-06T13:07:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51044
2012-07-06T13:07:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51045
2012-07-06T13:07:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51046
2012-07-06T13:07:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51047
2012-07-06T13:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51048
2012-07-06T13:07:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.25,2928
2012-07-06T13:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51049
2012-07-06T13:07:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51050
2012-07-06T13:07:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51051
2012-07-06T13:07:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51052
2012-07-06T13:07:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51053
2012-07-06T13:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T13:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51054
2012-07-06T13:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51055
2012-07-06T13:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51056
2012-07-06T13:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51057
2012-07-06T13:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51058
2012-07-06T13:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51059
2012-07-06T13:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51060
2012-07-06T13:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51061
2012-07-06T13:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51062
2012-07-06T13:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51063
2012-07-06T13:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51064
2012-07-06T13:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51065
2012-07-06T13:08:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.187,49692
2012-07-06T13:08:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.235,3589
2012-07-06T13:09:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.97,59324
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51910
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51911
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51912
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51913
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55054
2012-07-06T13:09:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55055
2012-07-06T13:09:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53236
2012-07-06T13:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53237
2012-07-06T13:09:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56535
2012-07-06T13:09:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56536
2012-07-06T13:09:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62055
2012-07-06T13:09:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62056
2012-07-06T13:09:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60682
2012-07-06T13:09:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60683
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60582
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60583
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54058
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54059
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60860
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60861
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55599
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55600
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56183
2012-07-06T13:09:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56184
2012-07-06T13:10:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:10:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:10:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.7,2765
2012-07-06T13:11:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:11:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.138,4518
2012-07-06T13:11:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T13:11:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T13:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56185
2012-07-06T13:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:11:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56186
2012-07-06T13:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56187
2012-07-06T13:11:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56188
2012-07-06T13:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56189
2012-07-06T13:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56190
2012-07-06T13:11:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56191
2012-07-06T13:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56192
2012-07-06T13:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56193
2012-07-06T13:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56194
2012-07-06T13:11:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56195
2012-07-06T13:11:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56196
2012-07-06T13:11:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:11:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.76,3111
2012-07-06T13:13:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.229,3830
2012-07-06T13:13:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.22,2494
2012-07-06T13:13:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:13:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56197
2012-07-06T13:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:15:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56198
2012-07-06T13:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56199
2012-07-06T13:15:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56200
2012-07-06T13:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56201
2012-07-06T13:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56202
2012-07-06T13:15:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56203
2012-07-06T13:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56204
2012-07-06T13:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56205
2012-07-06T13:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56206
2012-07-06T13:15:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56207
2012-07-06T13:15:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56208
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60825
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60826
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60827
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60828
2012-07-06T13:15:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60829
2012-07-06T13:15:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60830
2012-07-06T13:15:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60831
2012-07-06T13:15:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60832
2012-07-06T13:15:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60833
2012-07-06T13:15:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60834
2012-07-06T13:15:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60835
2012-07-06T13:15:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60836
2012-07-06T13:15:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60837
2012-07-06T13:15:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60838
2012-07-06T13:15:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.66,63080
2012-07-06T13:16:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:16:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60839
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60840
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60033
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:16:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60034
2012-07-06T13:16:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61676
2012-07-06T13:16:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T13:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61677
2012-07-06T13:16:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61678
2012-07-06T13:16:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61679
2012-07-06T13:16:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61680
2012-07-06T13:16:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61681
2012-07-06T13:16:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61682
2012-07-06T13:16:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61683
2012-07-06T13:16:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61684
2012-07-06T13:16:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61685
2012-07-06T13:16:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.35,4271
2012-07-06T13:17:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.20,56233
2012-07-06T13:17:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.64,54339
2012-07-06T13:17:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:17:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:18:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.232,2392
2012-07-06T13:18:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:18:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.210,64288
2012-07-06T13:18:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:20:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.135,2187
2012-07-06T13:21:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.79,51592
2012-07-06T13:21:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:21:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61686
2012-07-06T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:21:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61687
2012-07-06T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61688
2012-07-06T13:21:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61689
2012-07-06T13:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61690
2012-07-06T13:21:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61691
2012-07-06T13:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61692
2012-07-06T13:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61693
2012-07-06T13:21:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61694
2012-07-06T13:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61695
2012-07-06T13:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61696
2012-07-06T13:21:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61697
2012-07-06T13:21:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.218,3574
2012-07-06T13:22:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.45,52031
2012-07-06T13:22:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.97,2771
2012-07-06T13:23:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.75,4365
2012-07-06T13:23:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.47,55878
2012-07-06T13:24:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.45,1732
2012-07-06T13:24:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T13:24:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:24:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61698
2012-07-06T13:24:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:24:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61699
2012-07-06T13:24:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61700
2012-07-06T13:24:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61701
2012-07-06T13:24:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61702
2012-07-06T13:24:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61703
2012-07-06T13:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61704
2012-07-06T13:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61705
2012-07-06T13:24:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61706
2012-07-06T13:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61707
2012-07-06T13:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61708
2012-07-06T13:24:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61709
2012-07-06T13:24:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:24:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:25:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.36,2900
2012-07-06T13:25:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:25:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:25:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.177,50789
2012-07-06T13:26:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.192,2261
2012-07-06T13:26:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.74,59217
2012-07-06T13:26:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:26:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61710
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61711
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64180
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:26:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64181
2012-07-06T13:26:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57070
2012-07-06T13:26:42-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T13:26:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57071
2012-07-06T13:26:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57072
2012-07-06T13:26:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57073
2012-07-06T13:26:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57074
2012-07-06T13:26:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57075
2012-07-06T13:26:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57076
2012-07-06T13:26:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57077
2012-07-06T13:26:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57078
2012-07-06T13:26:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57079
2012-07-06T13:27:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.254,3817
2012-07-06T13:27:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.41,49269
2012-07-06T13:28:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.42,55757
2012-07-06T13:28:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.5,2303
2012-07-06T13:28:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:28:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:29:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.94,49393
2012-07-06T13:30:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.129,1408
2012-07-06T13:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52902
2012-07-06T13:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:30:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49853
2012-07-06T13:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49854
2012-07-06T13:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:30:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49855
2012-07-06T13:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49856
2012-07-06T13:30:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49857
2012-07-06T13:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49858
2012-07-06T13:30:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49859
2012-07-06T13:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49860
2012-07-06T13:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49861
2012-07-06T13:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49862
2012-07-06T13:30:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49863
2012-07-06T13:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49864
2012-07-06T13:30:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49865
2012-07-06T13:30:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.58,4769
2012-07-06T13:31:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.52,59058
2012-07-06T13:31:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:31:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49866
2012-07-06T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49867
2012-07-06T13:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49868
2012-07-06T13:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49869
2012-07-06T13:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49870
2012-07-06T13:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49871
2012-07-06T13:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49872
2012-07-06T13:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49873
2012-07-06T13:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49874
2012-07-06T13:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49875
2012-07-06T13:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49876
2012-07-06T13:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49877
2012-07-06T13:31:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.140,1469
2012-07-06T13:32:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:32:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.113,50767
2012-07-06T13:32:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:32:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.37,3208
2012-07-06T13:33:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.106,52458
2012-07-06T13:33:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,63227
2012-07-06T13:33:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.171,1744
2012-07-06T13:34:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.130,2484
2012-07-06T13:35:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.57,2787
2012-07-06T13:36:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.82,63855
2012-07-06T13:36:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:36:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49878
2012-07-06T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:36:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49879
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,57617
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,57618
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63117
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T13:36:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63118
2012-07-06T13:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63119
2012-07-06T13:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63120
2012-07-06T13:36:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63121
2012-07-06T13:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63122
2012-07-06T13:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63123
2012-07-06T13:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63124
2012-07-06T13:36:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63125
2012-07-06T13:37:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63126
2012-07-06T13:37:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.202,2502
2012-07-06T13:37:43-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.54,58617
2012-07-06T13:38:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.72,2688
2012-07-06T13:38:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:38:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:38:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.78,61839
2012-07-06T13:39:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:39:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.199,1027
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63127
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63128
2012-07-06T13:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63129
2012-07-06T13:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63130
2012-07-06T13:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63131
2012-07-06T13:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63132
2012-07-06T13:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63133
2012-07-06T13:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63134
2012-07-06T13:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63135
2012-07-06T13:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63136
2012-07-06T13:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63137
2012-07-06T13:39:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63138
2012-07-06T13:39:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63139
2012-07-06T13:40:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:40:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:40:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:40:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.13,55026
2012-07-06T13:41:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.133,1035
2012-07-06T13:41:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.212,1581
2012-07-06T13:42:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:42:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63140
2012-07-06T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63141
2012-07-06T13:42:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63142
2012-07-06T13:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63143
2012-07-06T13:42:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63144
2012-07-06T13:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63145
2012-07-06T13:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63146
2012-07-06T13:42:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63147
2012-07-06T13:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63148
2012-07-06T13:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63149
2012-07-06T13:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63150
2012-07-06T13:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63151
2012-07-06T13:42:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.220,3397
2012-07-06T13:43:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.56,3170
2012-07-06T13:43:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:43:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:44:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.71,3133
2012-07-06T13:45:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.47,58020
2012-07-06T13:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63152
2012-07-06T13:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:45:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63153
2012-07-06T13:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63154
2012-07-06T13:45:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63155
2012-07-06T13:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63156
2012-07-06T13:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63157
2012-07-06T13:45:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63158
2012-07-06T13:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63159
2012-07-06T13:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63160
2012-07-06T13:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63161
2012-07-06T13:45:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63162
2012-07-06T13:45:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63163
2012-07-06T13:45:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,52169
2012-07-06T13:46:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:46:05-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:46:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.162,53948
2012-07-06T13:46:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:46:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.7,64825
2012-07-06T13:46:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,64754
2012-07-06T13:47:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63164
2012-07-06T13:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T13:47:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:47:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63165
2012-07-06T13:47:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63166
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53730
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53731
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64530
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T13:47:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64531
2012-07-06T13:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64532
2012-07-06T13:47:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64533
2012-07-06T13:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64534
2012-07-06T13:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64535
2012-07-06T13:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64536
2012-07-06T13:47:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64537
2012-07-06T13:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64538
2012-07-06T13:47:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64539
2012-07-06T13:47:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.67,62127
2012-07-06T13:48:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.17,3974
2012-07-06T13:48:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.229,64962
2012-07-06T13:49:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.109,2309
2012-07-06T13:49:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.7,50279
2012-07-06T13:50:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.88,3564
2012-07-06T13:50:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.86,62035
2012-07-06T13:51:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.118,3424
2012-07-06T13:51:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.251,64638
2012-07-06T13:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:52:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64540
2012-07-06T13:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:52:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64541
2012-07-06T13:52:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64542
2012-07-06T13:52:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64543
2012-07-06T13:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64544
2012-07-06T13:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64545
2012-07-06T13:52:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64546
2012-07-06T13:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64547
2012-07-06T13:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64548
2012-07-06T13:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64549
2012-07-06T13:52:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64550
2012-07-06T13:52:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64551
2012-07-06T13:52:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.153,60083
2012-07-06T13:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T13:53:12-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:53:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,62110
2012-07-06T13:53:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.16,57530
2012-07-06T13:53:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:53:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.120,3391
2012-07-06T13:54:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T13:54:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.33,64820
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64552
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64553
2012-07-06T13:54:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64554
2012-07-06T13:54:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64555
2012-07-06T13:54:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64556
2012-07-06T13:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64557
2012-07-06T13:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64558
2012-07-06T13:54:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64559
2012-07-06T13:54:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64560
2012-07-06T13:54:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64561
2012-07-06T13:54:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64562
2012-07-06T13:54:57-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64563
2012-07-06T13:55:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.225,58473
2012-07-06T13:55:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.119,3548
2012-07-06T13:56:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.19,3259
2012-07-06T13:56:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.166,54513
2012-07-06T13:57:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.19,55405
2012-07-06T13:57:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR

B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T13:57:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64564
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64565
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56242
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T13:57:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56243
2012-07-06T13:57:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53541
2012-07-06T13:57:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T13:57:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53542
2012-07-06T13:57:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53543
2012-07-06T13:57:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53544
2012-07-06T13:57:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53545
2012-07-06T13:57:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53546
2012-07-06T13:57:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53547
2012-07-06T13:57:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53548
2012-07-06T13:57:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53549
2012-07-06T13:57:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53550
2012-07-06T13:57:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.55,3693
2012-07-06T13:58:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.21,59722
2012-07-06T13:58:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.131,61518
2012-07-06T13:59:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:59:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T13:59:22-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.137,50346
2012-07-06T14:00:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:00:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:00:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:00:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53551
2012-07-06T14:00:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.12,389
2012-07-06T14:00:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53552
2012-07-06T14:00:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53553
2012-07-06T14:00:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53554
2012-07-06T14:00:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53555
2012-07-06T14:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53556
2012-07-06T14:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53557
2012-07-06T14:00:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53558
2012-07-06T14:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53559
2012-07-06T14:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53560
2012-07-06T14:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53561
2012-07-06T14:00:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53562
2012-07-06T14:00:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.9,52582
2012-07-06T14:00:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:01:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.195,52931
2012-07-06T14:01:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:01:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.38,51237
2012-07-06T14:02:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.195,52936
2012-07-06T14:02:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:02:23-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53563
2012-07-06T14:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53564
2012-07-06T14:02:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53565
2012-07-06T14:02:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53566
2012-07-06T14:02:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53567
2012-07-06T14:02:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53568
2012-07-06T14:02:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.107,51889
2012-07-06T14:02:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53569
2012-07-06T14:02:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,53570
2012-07-06T14:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53571
2012-07-06T14:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53572
2012-07-06T14:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53573
2012-07-06T14:02:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53574
2012-07-06T14:02:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.191,4467
2012-07-06T14:03:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.44,57629
2012-07-06T14:03:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.2,50221
2012-07-06T14:04:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.152,4335
2012-07-06T14:04:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.246,60478
2012-07-06T14:05:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.173,2047
2012-07-06T14:05:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.193,3348
2012-07-06T14:06:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.238,52407
2012-07-06T14:06:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.119,52608
2012-07-06T14:06:59-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.213,1256
2012-07-06T14:07:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.84,2881
2012-07-06T14:07:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:07:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:07:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:07:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53575
2012-07-06T14:07:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53576
2012-07-06T14:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59466
2012-07-06T14:07:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:07:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59467
2012-07-06T14:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60424
2012-07-06T14:07:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60425
2012-07-06T14:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,60426
2012-07-06T14:07:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60427
2012-07-06T14:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60428
2012-07-06T14:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60429
2012-07-06T14:07:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60430
2012-07-06T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60431
2012-07-06T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60432
2012-07-06T14:07:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60433
2012-07-06T14:07:47-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.219,57681
2012-07-06T14:07:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:08:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:09:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.127,58658
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,64558
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64559
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64560
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64561
2012-07-06T14:09:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64562
2012-07-06T14:09:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54292
2012-07-06T14:09:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54566
2012-07-06T14:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54567
2012-07-06T14:09:59-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50030
2012-07-06T14:09:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50031
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56963
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56964
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49460
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49461
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,51597
2012-07-06T14:10:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51598
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54064
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54065
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58123
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58124
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61170
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61171
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65428
2012-07-06T14:10:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65429
2012-07-06T14:10:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.229,63130
2012-07-06T14:11:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.244,2332
2012-07-06T14:11:36-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.51,56134
2012-07-06T14:12:03-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.244,2350
2012-07-06T14:12:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.5,63698
2012-07-06T14:12:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:12:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65430
2012-07-06T14:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:12:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65431
2012-07-06T14:12:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65432
2012-07-06T14:12:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65433
2012-07-06T14:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65434
2012-07-06T14:12:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65435
2012-07-06T14:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65436
2012-07-06T14:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65437
2012-07-06T14:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65438
2012-07-06T14:12:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65439
2012-07-06T14:12:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65440
2012-07-06T14:12:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,65441
2012-07-06T14:12:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.45,63450
2012-07-06T14:13:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.134,62827
2012-07-06T14:14:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.124,64564
2012-07-06T14:14:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:14:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:14:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:14:57-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.189,51335
2012-07-06T14:15:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:15:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.141,49745
2012-07-06T14:15:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:15:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65442
2012-07-06T14:15:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:15:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65443
2012-07-06T14:15:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65444
2012-07-06T14:15:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65445
2012-07-06T14:15:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:15:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65446
2012-07-06T14:15:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65447
2012-07-06T14:15:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65448
2012-07-06T14:15:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65449
2012-07-06T14:15:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65450
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65451
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65452
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65453
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51537
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51538
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,51539
2012-07-06T14:15:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51540
2012-07-06T14:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51541
2012-07-06T14:15:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51542
2012-07-06T14:15:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51543
2012-07-06T14:15:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51544
2012-07-06T14:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51545
2012-07-06T14:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51546
2012-07-06T14:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51547
2012-07-06T14:15:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51548
2012-07-06T14:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51549
2012-07-06T14:15:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51550
2012-07-06T14:15:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.40,61741
2012-07-06T14:16:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.115,63196
2012-07-06T14:17:17-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.92,3847
2012-07-06T14:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T14:17:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51551
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51552
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61606
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:17:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61607
2012-07-06T14:17:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63629
2012-07-06T14:17:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63630
2012-07-06T14:17:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63631
2012-07-06T14:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63632
2012-07-06T14:17:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63633
2012-07-06T14:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63634
2012-07-06T14:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63635
2012-07-06T14:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63636
2012-07-06T14:17:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63637
2012-07-06T14:17:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63638
2012-07-06T14:19:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.53,4483
2012-07-06T14:20:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.26,50526
2012-07-06T14:20:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.112,59391
2012-07-06T14:21:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:21:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:22:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:22:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T14:22:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T14:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63639
2012-07-06T14:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63640
2012-07-06T14:22:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63641
2012-07-06T14:22:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63642
2012-07-06T14:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63643
2012-07-06T14:22:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63644
2012-07-06T14:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63645
2012-07-06T14:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63646
2012-07-06T14:22:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63647
2012-07-06T14:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63648
2012-07-06T14:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63649
2012-07-06T14:22:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63650
2012-07-06T14:24:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,59588
2012-07-06T14:24:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.22,63937
2012-07-06T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

connect out,6,10.10.0.12,389
2012-07-06T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63651
2012-07-06T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:25:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63652
2012-07-06T14:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63653
2012-07-06T14:25:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63654
2012-07-06T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63655
2012-07-06T14:25:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63656
2012-07-06T14:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63657
2012-07-06T14:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63658
2012-07-06T14:25:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63659
2012-07-06T14:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63660
2012-07-06T14:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63661
2012-07-06T14:25:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63662
2012-07-06T14:25:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.184,59611
2012-07-06T14:26:06-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.164,61562
2012-07-06T14:26:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.82,2091
2012-07-06T14:27:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.75,1200
2012-07-06T14:27:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T14:27:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T14:27:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:27:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63663
2012-07-06T14:27:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:27:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63664
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52284
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52285
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54747
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:27:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54748
2012-07-06T14:27:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54749
2012-07-06T14:27:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54750
2012-07-06T14:27:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54751
2012-07-06T14:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54752
2012-07-06T14:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54753
2012-07-06T14:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54754
2012-07-06T14:27:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54755
2012-07-06T14:27:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54756
2012-07-06T14:28:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:28:47-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:29:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:29:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:29:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:29:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.28,55589
2012-07-06T14:29:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:30:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.254,53402
2012-07-06T14:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54757
2012-07-06T14:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:30:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54758
2012-07-06T14:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54759
2012-07-06T14:30:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54760
2012-07-06T14:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54761
2012-07-06T14:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54762
2012-07-06T14:30:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54763
2012-07-06T14:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54764
2012-07-06T14:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54765
2012-07-06T14:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54766
2012-07-06T14:30:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54767
2012-07-06T14:30:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,54768
2012-07-06T14:30:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,50556
2012-07-06T14:31:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.11,63484
2012-07-06T14:31:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.114,50561
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49660
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49661
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,58347
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58348
2012-07-06T14:31:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,58349
2012-07-06T14:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60585
2012-07-06T14:31:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60586
2012-07-06T14:31:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60587
2012-07-06T14:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60588
2012-07-06T14:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60589
2012-07-06T14:31:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60590
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60591
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60592
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60593
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60594
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51481
2012-07-06T14:31:52-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:31:55-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.11,63489
2012-07-06T14:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55976
2012-07-06T14:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60319
2012-07-06T14:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,56872
2012-07-06T14:31:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:32:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,62405
2012-07-06T14:32:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54094
2012-07-06T14:32:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:32:35-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55480
2012-07-06T14:32:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:32:53-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55481
2012-07-06T14:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55482
2012-07-06T14:32:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55483
2012-07-06T14:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55484
2012-07-06T14:32:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55485
2012-07-06T14:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55486
2012-07-06T14:32:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55487
2012-07-06T14:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55488
2012-07-06T14:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55489
2012-07-06T14:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55490
2012-07-06T14:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55491
2012-07-06T14:32:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55492
2012-07-06T14:33:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.26,55837
2012-07-06T14:34:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.25,49747
2012-07-06T14:34:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.25,1153
2012-07-06T14:35:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.196,53001
2012-07-06T14:35:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.160,62625
2012-07-06T14:35:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:35:54-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:35:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.46,52252
2012-07-06T14:36:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.160,62628
2012-07-06T14:36:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:36:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.169,2872
2012-07-06T14:36:57-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:37:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.10,59105
2012-07-06T14:38:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:38:00-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55493
2012-07-06T14:38:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55494
2012-07-06T14:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59197
2012-07-06T14:38:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:38:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59198
2012-07-06T14:38:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59467
2012-07-06T14:38:02-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59468
2012-07-06T14:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59469
2012-07-06T14:38:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59470
2012-07-06T14:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59471
2012-07-06T14:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59472
2012-07-06T14:38:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59473
2012-07-06T14:38:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59474
2012-07-06T14:38:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59475
2012-07-06T14:38:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.12,2636
2012-07-06T14:38:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59476
2012-07-06T14:38:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.32,3713
2012-07-06T14:39:08-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.117,49892
2012-07-06T14:39:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.124,1302
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59477
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59478
2012-07-06T14:40:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59479
2012-07-06T14:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59480
2012-07-06T14:40:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59481
2012-07-06T14:40:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:40:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59482
2012-07-06T14:40:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59483
2012-07-06T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59484
2012-07-06T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59485
2012-07-06T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59486
2012-07-06T14:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59487
2012-07-06T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59488
2012-07-06T14:40:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59489
2012-07-06T14:40:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.89,61395
2012-07-06T14:40:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.101,58432
2012-07-06T14:41:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.186,1772
2012-07-06T14:41:56-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.55,64336
2012-07-06T14:42:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.152,56909
2012-07-06T14:42:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.158,51495
2012-07-06T14:43:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:43:01-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:43:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:43:04-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T14:43:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62406
2012-07-06T14:43:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62407
2012-07-06T14:43:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62408
2012-07-06T14:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62409
2012-07-06T14:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62410
2012-07-06T14:43:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62411
2012-07-06T14:43:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62412
2012-07-06T14:43:06-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62413
2012-07-06T14:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62414
2012-07-06T14:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62415
2012-07-06T14:43:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62416
2012-07-06T14:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62417
2012-07-06T14:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62418
2012-07-06T14:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62419
2012-07-06T14:43:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62420
2012-07-06T14:43:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:43:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.23,3124
2012-07-06T14:44:04-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:44:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:44:19-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:44:46-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.2.30,1466
2012-07-06T14:45:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,59241
2012-07-06T14:45:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:45:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62421
2012-07-06T14:45:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T14:45:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62422
2012-07-06T14:45:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62423
2012-07-06T14:45:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62424
2012-07-06T14:45:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62425
2012-07-06T14:45:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62426
2012-07-06T14:45:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62427
2012-07-06T14:45:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62428
2012-07-06T14:45:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62429
2012-07-06T14:45:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62430
2012-07-06T14:45:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62431
2012-07-06T14:45:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62432
2012-07-06T14:45:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,52186
2012-07-06T14:46:24-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.133,59246
2012-07-06T14:47:48-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.102,3399
2012-07-06T14:48:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:48:20-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:48:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:48:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62433
2012-07-06T14:48:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T14:48:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62434
2012-07-06T14:48:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62435
2012-07-06T14:48:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63801
2012-07-06T14:48:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:48:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:48:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63802
2012-07-06T14:48:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63803
2012-07-06T14:48:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63804
2012-07-06T14:48:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63805
2012-07-06T14:48:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63806
2012-07-06T14:48:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63807
2012-07-06T14:48:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63808
2012-07-06T14:48:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63809
2012-07-06T14:48:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63810
2012-07-06T14:48:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.149,61525
2012-07-06T14:50:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:50:08-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:50:15-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,60296
2012-07-06T14:50:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:51:11-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:51:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.80,58288
2012-07-06T14:51:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.83,3654
2012-07-06T14:52:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.130,51772
2012-07-06T14:53:25-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.230,1623
2012-07-06T14:53:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T14:53:27-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T14:53:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:53:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63811
2012-07-06T14:53:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T14:53:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63812
2012-07-06T14:53:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63897
2012-07-06T14:53:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63898
2012-07-06T14:53:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63899
2012-07-06T14:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63900
2012-07-06T14:53:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63901
2012-07-06T14:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63902
2012-07-06T14:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63903
2012-07-06T14:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63904
2012-07-06T14:53:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63905
2012-07-06T14:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63906
2012-07-06T14:53:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63907
2012-07-06T14:53:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,135
2012-07-06T14:53:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T14:53:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:53:34-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63908
2012-07-06T14:53:34-03:00,info,appl
listen,17,0.0.0.0,63909
2012-07-06T14:53:34-03:00,info,appl
listen,17,0.0.0.0,63910
2012-07-06T14:53:35-03:00,info,appl
listen,17,0.0.0.0,63911
2012-07-06T14:53:35-03:00,info,appl
listen,17,0.0.0.0,63912
2012-07-06T14:53:36-03:00,info,appl
listen,17,0.0.0.0,63913
2012-07-06T14:53:36-03:00,info,appl
listen,17,0.0.0.0,63914
2012-07-06T14:53:36-03:00,info,appl
listen,17,0.0.0.0,63915
2012-07-06T14:53:37-03:00,info,appl
listen,17,0.0.0.0,63916
2012-07-06T14:53:37-03:00,info,appl
listen,17,0.0.0.0,63917
2012-07-06T14:53:37-03:00,info,appl
listen,17,0.0.0.0,63918
2012-07-06T14:53:37-03:00,info,appl
listen,17,0.0.0.0,63919
2012-07-06T14:53:41-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:53:41-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:53:41-03:00,info,appl
listen,17,0.0.0.0,63920
2012-07-06T14:53:41-03:00,info,appl
listen,17,0.0.0.0,63921
2012-07-06T14:53:42-03:00,info,appl
listen,17,0.0.0.0,63922
2012-07-06T14:53:42-03:00,info,appl
listen,17,0.0.0.0,63923
2012-07-06T14:53:43-03:00,info,appl
listen,17,0.0.0.0,63924
2012-07-06T14:53:43-03:00,info,appl
listen,17,0.0.0.0,63925
2012-07-06T14:53:44-03:00,info,appl
listen,17,0.0.0.0,63926
2012-07-06T14:53:44-03:00,info,appl
listen,17,0.0.0.0,63927
2012-07-06T14:53:44-03:00,info,appl
listen,17,0.0.0.0,63928
2012-07-06T14:53:44-03:00,info,appl
listen,17,0.0.0.0,63929
2012-07-06T14:53:45-03:00,info,appl
listen,17,0.0.0.0,63930
2012-07-06T14:53:45-03:00,info,appl
listen,17,0.0.0.0,63931
2012-07-06T14:53:56-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T14:53:56-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:53:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:53:56-03:00,info,appl
listen,17,0.0.0.0,63932
2012-07-06T14:53:56-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

send,17,10.10.0.11,389
2012-07-06T14:53:56-03:00,info,appl
listen,17,0.0.0.0,63933
2012-07-06T14:53:57-03:00,info,appl
listen,17,0.0.0.0,63934
2012-07-06T14:53:57-03:00,info,appl
listen,17,0.0.0.0,63935
2012-07-06T14:53:58-03:00,info,appl
listen,17,0.0.0.0,63936
2012-07-06T14:53:58-03:00,info,appl
listen,17,0.0.0.0,63937
2012-07-06T14:53:59-03:00,info,appl
listen,17,0.0.0.0,63938
2012-07-06T14:53:59-03:00,info,appl
listen,17,0.0.0.0,63939
2012-07-06T14:53:59-03:00,info,appl
listen,17,0.0.0.0,63940
2012-07-06T14:53:59-03:00,info,appl
listen,17,0.0.0.0,63941
2012-07-06T14:54:00-03:00,info,appl
listen,17,0.0.0.0,63942
2012-07-06T14:54:00-03:00,info,appl
listen,17,0.0.0.0,63943
2012-07-06T14:54:00-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:00-03:00,info,appl
listen,17,0.0.0.0,63944
2012-07-06T14:54:00-03:00,info,appl
listen,17,0.0.0.0,63945
2012-07-06T14:54:00-03:00,info,appl
listen,17,0.0.0.0,63946
2012-07-06T14:54:01-03:00,info,appl
listen,17,0.0.0.0,63947
2012-07-06T14:54:01-03:00,info,appl
listen,17,0.0.0.0,63948
2012-07-06T14:54:02-03:00,info,appl
listen,17,0.0.0.0,63949
2012-07-06T14:54:02-03:00,info,appl
listen,17,0.0.0.0,63950
2012-07-06T14:54:03-03:00,info,appl
listen,17,0.0.0.0,63951
2012-07-06T14:54:03-03:00,info,appl
listen,17,0.0.0.0,63952
2012-07-06T14:54:03-03:00,info,appl
listen,17,0.0.0.0,63953
2012-07-06T14:54:03-03:00,info,appl
listen,17,0.0.0.0,63954
2012-07-06T14:54:03-03:00,info,appl
listen,17,0.0.0.0,63955
2012-07-06T14:54:08-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:08-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:08-03:00,info,appl
listen,17,0.0.0.0,63956
2012-07-06T14:54:08-03:00,info,appl
listen,17,0.0.0.0,63957
2012-07-06T14:54:09-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63958
2012-07-06T14:54:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63959
2012-07-06T14:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63960
2012-07-06T14:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63961
2012-07-06T14:54:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63962
2012-07-06T14:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63963
2012-07-06T14:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63964
2012-07-06T14:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63965
2012-07-06T14:54:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63966
2012-07-06T14:54:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63967
2012-07-06T14:54:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.178,2401
2012-07-06T14:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T14:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63968
2012-07-06T14:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T14:54:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63969
2012-07-06T14:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63970
2012-07-06T14:54:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63971
2012-07-06T14:54:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63972
2012-07-06T14:54:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63973
2012-07-06T14:54:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63974
2012-07-06T14:54:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63975
2012-07-06T14:54:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63976
2012-07-06T14:54:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63977
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63978
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63979
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63980
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63981
2012-07-06T14:54:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,63982
2012-07-06T14:54:21-03:00,info,appl
listen,17,0.0.0.0,63983
2012-07-06T14:54:21-03:00,info,appl
listen,17,0.0.0.0,63984
2012-07-06T14:54:22-03:00,info,appl
listen,17,0.0.0.0,63985
2012-07-06T14:54:22-03:00,info,appl
listen,17,0.0.0.0,63986
2012-07-06T14:54:23-03:00,info,appl
listen,17,0.0.0.0,63987
2012-07-06T14:54:23-03:00,info,appl
listen,17,0.0.0.0,63988
2012-07-06T14:54:23-03:00,info,appl
listen,17,0.0.0.0,63989
2012-07-06T14:54:23-03:00,info,appl
listen,17,0.0.0.0,63990
2012-07-06T14:54:23-03:00,info,appl
listen,17,0.0.0.0,63991
2012-07-06T14:54:27-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:27-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:27-03:00,info,appl
listen,17,0.0.0.0,63992
2012-07-06T14:54:28-03:00,info,appl
listen,17,0.0.0.0,63993
2012-07-06T14:54:28-03:00,info,appl
listen,17,0.0.0.0,63994
2012-07-06T14:54:29-03:00,info,appl
listen,17,0.0.0.0,63995
2012-07-06T14:54:29-03:00,info,appl
listen,17,0.0.0.0,63996
2012-07-06T14:54:29-03:00,info,appl
listen,17,0.0.0.0,63997
2012-07-06T14:54:30-03:00,info,appl
listen,17,0.0.0.0,63998
2012-07-06T14:54:30-03:00,info,appl
listen,17,0.0.0.0,63999
2012-07-06T14:54:30-03:00,info,appl
listen,17,0.0.0.0,64000
2012-07-06T14:54:31-03:00,info,appl
listen,17,0.0.0.0,64001
2012-07-06T14:54:31-03:00,info,appl
listen,17,0.0.0.0,64002
2012-07-06T14:54:31-03:00,info,appl
listen,17,0.0.0.0,64003
2012-07-06T14:54:36-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:36-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:36-03:00,info,appl
listen,17,0.0.0.0,64004
2012-07-06T14:54:36-03:00,info,appl
listen,17,0.0.0.0,64005
2012-07-06T14:54:36-03:00,info,appl
listen,17,0.0.0.0,64006
2012-07-06T14:54:36-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T14:54:37-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64007
2012-07-06T14:54:37-03:00,info,appl
listen,17,0.0.0.0,64008
2012-07-06T14:54:37-03:00,info,appl
listen,17,0.0.0.0,64009
2012-07-06T14:54:38-03:00,info,appl
listen,17,0.0.0.0,64010
2012-07-06T14:54:38-03:00,info,appl
listen,17,0.0.0.0,64011
2012-07-06T14:54:38-03:00,info,appl
listen,17,0.0.0.0,64012
2012-07-06T14:54:39-03:00,info,appl
listen,17,0.0.0.0,64013
2012-07-06T14:54:39-03:00,info,appl
listen,17,0.0.0.0,64014
2012-07-06T14:54:39-03:00,info,appl
listen,17,0.0.0.0,64015
2012-07-06T14:54:43-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:43-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:43-03:00,info,appl
listen,17,0.0.0.0,64016
2012-07-06T14:54:43-03:00,info,appl
listen,17,0.0.0.0,64017
2012-07-06T14:54:44-03:00,info,appl
listen,17,0.0.0.0,64018
2012-07-06T14:54:44-03:00,info,appl
listen,17,0.0.0.0,64019
2012-07-06T14:54:45-03:00,info,appl
listen,17,0.0.0.0,64020
2012-07-06T14:54:45-03:00,info,appl
listen,17,0.0.0.0,64021
2012-07-06T14:54:45-03:00,info,appl
listen,17,0.0.0.0,64022
2012-07-06T14:54:46-03:00,info,appl
listen,17,0.0.0.0,64023
2012-07-06T14:54:46-03:00,info,appl
listen,17,0.0.0.0,64024
2012-07-06T14:54:46-03:00,info,appl
listen,17,0.0.0.0,64025
2012-07-06T14:54:46-03:00,info,appl
listen,17,0.0.0.0,64026
2012-07-06T14:54:47-03:00,info,appl
listen,17,0.0.0.0,64027
2012-07-06T14:54:47-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:54:47-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:54:47-03:00,info,appl
listen,17,0.0.0.0,64028
2012-07-06T14:54:47-03:00,info,appl
listen,17,0.0.0.0,64029
2012-07-06T14:54:47-03:00,info,appl
listen,17,0.0.0.0,64030
2012-07-06T14:54:48-03:00,info,appl
listen,17,0.0.0.0,64031
2012-07-06T14:54:48-03:00,info,appl
listen,17,0.0.0.0,64032
2012-07-06T14:54:49-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64033
2012-07-06T14:54:49-03:00,info,appl
listen,17,0.0.0.0,64034
2012-07-06T14:54:50-03:00,info,appl
listen,17,0.0.0.0,64035
2012-07-06T14:54:50-03:00,info,appl
listen,17,0.0.0.0,64036
2012-07-06T14:54:50-03:00,info,appl
listen,17,0.0.0.0,64037
2012-07-06T14:54:50-03:00,info,appl
listen,17,0.0.0.0,64038
2012-07-06T14:54:50-03:00,info,appl
listen,17,0.0.0.0,64039
2012-07-06T14:55:02-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T14:55:02-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:55:02-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:55:02-03:00,info,appl
listen,17,0.0.0.0,64040
2012-07-06T14:55:02-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T14:55:02-03:00,info,appl
listen,17,0.0.0.0,64041
2012-07-06T14:55:02-03:00,info,appl
listen,17,0.0.0.0,64042
2012-07-06T14:55:03-03:00,info,appl
listen,17,0.0.0.0,64043
2012-07-06T14:55:03-03:00,info,appl
listen,17,0.0.0.0,64044
2012-07-06T14:55:04-03:00,info,appl
listen,17,0.0.0.0,64045
2012-07-06T14:55:04-03:00,info,appl
listen,17,0.0.0.0,64046
2012-07-06T14:55:05-03:00,info,appl
listen,17,0.0.0.0,64047
2012-07-06T14:55:05-03:00,info,appl
listen,17,0.0.0.0,64048
2012-07-06T14:55:05-03:00,info,appl
listen,17,0.0.0.0,64049
2012-07-06T14:55:05-03:00,info,appl
listen,17,0.0.0.0,64050
2012-07-06T14:55:05-03:00,info,appl
listen,17,0.0.0.0,64051
2012-07-06T14:55:10-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:55:10-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:55:10-03:00,info,appl
listen,17,0.0.0.0,64052
2012-07-06T14:55:10-03:00,info,appl
listen,17,0.0.0.0,64053
2012-07-06T14:55:10-03:00,info,appl
listen,17,0.0.0.0,64054
2012-07-06T14:55:11-03:00,info,appl
listen,17,0.0.0.0,64055
2012-07-06T14:55:11-03:00,info,appl
listen,17,0.0.0.0,64056
2012-07-06T14:55:12-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.10.16,53282
2012-07-06T14:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64057
2012-07-06T14:55:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64058
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64059
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64060
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64061
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64062
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64063
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64064
2012-07-06T14:55:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64065
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64066
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64067
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64068
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64069
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64070
2012-07-06T14:55:14-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64071
2012-07-06T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64072
2012-07-06T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64073
2012-07-06T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64074
2012-07-06T14:55:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64075
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64076
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64077
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64078
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64079
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64080
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64081
2012-07-06T14:55:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64082
2012-07-06T14:55:16-03:00,info,appl
listen,17,0.0.0.0,64083
2012-07-06T14:55:17-03:00,info,appl
listen,17,0.0.0.0,64084
2012-07-06T14:55:17-03:00,info,appl
listen,17,0.0.0.0,64085
2012-07-06T14:55:17-03:00,info,appl
listen,17,0.0.0.0,64086
2012-07-06T14:55:17-03:00,info,appl
listen,17,0.0.0.0,64087
2012-07-06T14:55:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:55:21-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:55:21-03:00,info,appl
listen,17,0.0.0.0,64088
2012-07-06T14:55:21-03:00,info,appl
listen,17,0.0.0.0,64089
2012-07-06T14:55:22-03:00,info,appl
listen,17,0.0.0.0,64090
2012-07-06T14:55:22-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T14:55:22-03:00,info,appl
listen,17,0.0.0.0,64091
2012-07-06T14:55:23-03:00,info,appl
listen,17,0.0.0.0,64092
2012-07-06T14:55:23-03:00,info,appl
listen,17,0.0.0.0,64093
2012-07-06T14:55:24-03:00,info,appl
listen,17,0.0.0.0,64094
2012-07-06T14:55:24-03:00,info,appl
listen,17,0.0.0.0,64095
2012-07-06T14:55:24-03:00,info,appl
listen,17,0.0.0.0,64096
2012-07-06T14:55:24-03:00,info,appl
listen,17,0.0.0.0,64097
2012-07-06T14:55:25-03:00,info,appl
listen,17,0.0.0.0,64098
2012-07-06T14:55:25-03:00,info,appl
listen,17,0.0.0.0,64099
2012-07-06T14:55:29-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T14:55:29-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T14:55:29-03:00,info,appl
listen,17,0.0.0.0,64100
2012-07-06T14:55:29-03:00,info,appl
listen,17,0.0.0.0,64101
2012-07-06T14:55:29-03:00,info,appl
listen,17,0.0.0.0,64102
2012-07-06T14:55:30-03:00,info,appl
listen,17,0.0.0.0,64103
2012-07-06T14:55:30-03:00,info,appl
listen,17,0.0.0.0,64104
2012-07-06T14:55:31-03:00,info,appl
listen,17,0.0.0.0,64105
2012-07-06T14:55:31-03:00,info,appl
listen,17,0.0.0.0,64106
2012-07-06T14:55:32-03:00,info,appl

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,64107
2012-07-06T14:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64108
2012-07-06T14:55:32-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.87,4488
2012-07-06T14:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64109
2012-07-06T14:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64110
2012-07-06T14:55:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,64111
2012-07-06T14:55:52-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.5.16,4207
2012-07-06T14:57:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.5,2223
2012-07-06T14:57:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T14:57:15-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:57:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:58:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50369
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50370
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,135
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53433
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53434
2012-07-06T14:58:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53435
2012-07-06T14:58:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50137
2012-07-06T14:58:27-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:58:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50138
2012-07-06T14:58:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50139
2012-07-06T14:58:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50140
2012-07-06T14:58:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50141
2012-07-06T14:58:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50142
2012-07-06T14:58:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50143
2012-07-06T14:58:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50144
2012-07-06T14:58:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,50145
2012-07-06T14:58:29-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,50146
2012-07-06T14:58:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62245
2012-07-06T14:58:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:58:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51155
2012-07-06T14:58:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,54180
2012-07-06T14:58:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:58:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,60468
2012-07-06T14:58:33-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:58:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T14:58:35-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T14:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T14:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60469
2012-07-06T14:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60470
2012-07-06T14:58:35-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60471
2012-07-06T14:58:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63508
2012-07-06T14:58:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T14:58:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63509
2012-07-06T14:58:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63510
2012-07-06T14:58:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63511
2012-07-06T14:58:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63512
2012-07-06T14:58:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63513
2012-07-06T14:58:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63514
2012-07-06T14:58:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63515
2012-07-06T14:58:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63516
2012-07-06T14:58:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63517
2012-07-06T14:59:13-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,2070
2012-07-06T14:59:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:59:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T14:59:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.11,2089
2012-07-06T15:00:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH

DLL32.EXE,allow,send,17,10.10.3.235,49607
2012-07-06T15:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63518
2012-07-06T15:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63519
2012-07-06T15:01:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63520
2012-07-06T15:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63521
2012-07-06T15:01:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63522
2012-07-06T15:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63523
2012-07-06T15:01:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63524
2012-07-06T15:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63525
2012-07-06T15:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63526
2012-07-06T15:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63527
2012-07-06T15:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63528
2012-07-06T15:01:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63529
2012-07-06T15:01:28-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.119,62972
2012-07-06T15:01:51-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.24,65468
2012-07-06T15:02:33-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,63800
2012-07-06T15:02:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,52928
2012-07-06T15:03:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.9,65404
2012-07-06T15:03:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T15:03:42-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T15:03:42-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63530
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63531
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59335
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:03:43-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59336
2012-07-06T15:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59337
2012-07-06T15:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59338
2012-07-06T15:03:44-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59339
2012-07-06T15:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59340
2012-07-06T15:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59341
2012-07-06T15:03:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59342
2012-07-06T15:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59343
2012-07-06T15:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59344
2012-07-06T15:03:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59345
2012-07-06T15:04:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.16,65177
2012-07-06T15:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T15:04:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:04:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:05:01-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.49,64722
2012-07-06T15:05:21-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.0.122,4644
2012-07-06T15:05:25-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:07:34-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.90,64510
2012-07-06T15:08:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T15:08:50-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59346
2012-07-06T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:08:50-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59347
2012-07-06T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59348
2012-07-06T15:08:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62834
2012-07-06T15:08:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:08:51-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T15:08:51-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62835
2012-07-06T15:08:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62836
2012-07-06T15:08:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62837
2012-07-06T15:08:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62838
2012-07-06T15:08:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,62839
2012-07-06T15:08:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62840
2012-07-06T15:08:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62841
2012-07-06T15:08:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62842
2012-07-06T15:08:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,62843
2012-07-06T15:09:18-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.93,61748
2012-07-06T15:09:40-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.10.113,4275
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61125
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,389
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61126
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:10:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61127
2012-07-06T15:10:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61412
2012-07-06T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61413
2012-07-06T15:10:21-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55310
2012-07-06T15:10:21-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55311
2012-07-06T15:10:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55645
2012-07-06T15:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55646
2012-07-06T15:10:22-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63125
2012-07-06T15:10:22-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63126
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,65043
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,65044
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55500
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55501
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,51712
2012-07-06T15:10:23-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,51713
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52056
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52057
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo

w,listen,17,0.0.0.0,54516
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54517
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49839
2012-07-06T15:10:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49840
2012-07-06T15:10:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.92,56630
2012-07-06T15:11:12-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.163,53479
2012-07-06T15:11:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T15:11:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:11:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.190,2013
2012-07-06T15:12:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:12:32-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:12:39-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.18,55179
2012-07-06T15:13:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T15:13:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49841
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49842
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49843
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59415
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:13:58-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59416
2012-07-06T15:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59417
2012-07-06T15:13:59-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59418
2012-07-06T15:14:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59419
2012-07-06T15:14:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59420
2012-07-06T15:14:00-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59421
2012-07-06T15:14:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59422
2012-07-06T15:14:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59423
2012-07-06T15:14:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59424
2012-07-06T15:14:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,59425
2012-07-06T15:14:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:14:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:14:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.36,2335
2012-07-06T15:15:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.36,52616
2012-07-06T15:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59426
2012-07-06T15:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59427
2012-07-06T15:16:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59428
2012-07-06T15:16:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,54667
2012-07-06T15:16:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59429
2012-07-06T15:16:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59430
2012-07-06T15:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59431
2012-07-06T15:16:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59432
2012-07-06T15:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59433
2012-07-06T15:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59434
2012-07-06T15:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59435
2012-07-06T15:16:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59436
2012-07-06T15:16:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,59437
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61955
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61956
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61957
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61958
2012-07-06T15:16:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61959
2012-07-06T15:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61960
2012-07-06T15:16:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61961
2012-07-06T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61962
2012-07-06T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,61963
2012-07-06T15:16:19-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61964
2012-07-06T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61965
2012-07-06T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61966
2012-07-06T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61967
2012-07-06T15:16:20-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61968
2012-07-06T15:16:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.29,54210
2012-07-06T15:16:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.12,54670
2012-07-06T15:17:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.217,57461
2012-07-06T15:17:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.63,64814
2012-07-06T15:18:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T15:18:36-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:18:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.63,59461
2012-07-06T15:19:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T15:19:02-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T15:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61969
2012-07-06T15:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61970
2012-07-06T15:19:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61971
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56477
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.11,53
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56478
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56479
2012-07-06T15:19:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56480
2012-07-06T15:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56481
2012-07-06T15:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56482
2012-07-06T15:19:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56483
2012-07-06T15:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56484
2012-07-06T15:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,56485
2012-07-06T15:19:05-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56486
2012-07-06T15:19:07-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:19:39-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:20:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.253,59581
2012-07-06T15:21:29-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.3,2099
2012-07-06T15:22:14-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.38,58388
2012-07-06T15:22:37-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.69,65099
2012-07-06T15:24:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T15:24:09-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T15:24:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:24:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56487
2012-07-06T15:24:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:24:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,56488
2012-07-06T15:24:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49595
2012-07-06T15:24:10-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.11,53
2012-07-06T15:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49596
2012-07-06T15:24:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49597
2012-07-06T15:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49598
2012-07-06T15:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49599
2012-07-06T15:24:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49600
2012-07-06T15:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49601
2012-07-06T15:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49602
2012-07-06T15:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49603
2012-07-06T15:24:12-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49604
2012-07-06T15:24:13-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49605
2012-07-06T15:24:49-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.177,3707
2012-07-06T15:25:10-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,2269
2012-07-06T15:25:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T15:25:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:25:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,

listen,17,0.0.0.0,49606
2012-07-06T15:25:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:25:24-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49607
2012-07-06T15:25:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49608
2012-07-06T15:25:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49609
2012-07-06T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49610
2012-07-06T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49611
2012-07-06T15:25:26-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49612
2012-07-06T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49613
2012-07-06T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49614
2012-07-06T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49615
2012-07-06T15:25:27-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49616
2012-07-06T15:25:28-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49617
2012-07-06T15:25:31-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.198,2287
2012-07-06T15:25:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,FE80::795C:61A9:680B:AA01,546
2012-07-06T15:25:43-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:26:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,51079
2012-07-06T15:26:14-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:26:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:26:54-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.15,51081
2012-07-06T15:38:33-03:00,info,general,daemon,Firewall Daemon service started.
2012-07-06T15:38:18-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62724
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63209
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,5355
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,5355
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53476
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,59873
2012-07-06T15:38:19-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,62947

2012-07-06T15:38:19-03:00,info,appl
w,listen,17,::,65145
2012-07-06T15:38:19-03:00,info,appl
w,listen,17,0.0.0.0,63203
2012-07-06T15:38:19-03:00,info,appl
listen,17,0.0.0.0,63205
2012-07-06T15:38:19-03:00,info,appl
listen,17,0.0.0.0,63206
2012-07-06T15:38:19-03:00,info,appl
w,listen,17,0.0.0.0,63208
2012-07-06T15:38:21-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T15:38:21-03:00,info,appl
send,17,10.10.0.11,389
2012-07-06T15:38:21-03:00,info,appl
connect out,6,10.10.0.11,135
2012-07-06T15:38:21-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,52907
2012-07-06T15:38:21-03:00,info,appl
listen,17,0.0.0.0,52908
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,500
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,4500
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,::,500
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,::,4500
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,61080
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,56665
2012-07-06T15:38:21-03:00,info,appl
listen,17,0.0.0.0,56666
2012-07-06T15:38:21-03:00,info,appl
listen,17,0.0.0.0,56667
2012-07-06T15:38:21-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-06T15:38:21-03:00,info,appl
w,listen,17,0.0.0.0,56668
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,3702
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,::,3702
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,::,3702
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,56669
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,::,56670
2012-07-06T15:38:22-03:00,info,appl
w,send,17,239.255.255.250,3702
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,51403
2012-07-06T15:38:22-03:00,info,appl
w,connect out,6,10.10.0.12,53

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,55504
2012-07-06T15:38:22-03:00,info,appl
connect out,6,10.10.0.11,1025
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,55505
2012-07-06T15:38:22-03:00,info,appl
listen,6,0.0.0.0,50302
2012-07-06T15:38:22-03:00,info,appl
listen,6,::,50302
2012-07-06T15:38:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,62385
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62386
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62387
2012-07-06T15:38:22-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62388
2012-07-06T15:38:22-03:00,info,appl
w,listen,17,0.0.0.0,62148
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62149
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62150
2012-07-06T15:38:22-03:00,info,appl
listen,17,0.0.0.0,62151
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,62152
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,62153
2012-07-06T15:38:23-03:00,info,appl
w,listen,17,0.0.0.0,52657
2012-07-06T15:38:23-03:00,info,appl
w,listen,17,0.0.0.0,61248
2012-07-06T15:38:23-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:23-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:23-03:00,info,appl
w,listen,17,0.0.0.0,57958
2012-07-06T15:38:23-03:00,info,appl
w,listen,17,0.0.0.0,52611
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,52612
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,52613
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,52614
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,52615
2012-07-06T15:38:23-03:00,info,appl
w,listen,17,0.0.0.0,51777
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,51778

control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,51779
2012-07-06T15:38:23-03:00,info,appl
listen,17,0.0.0.0,51780
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,51781
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,55736
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,::,57639
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,59786
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,64563
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,64564
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,60705
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,60706
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,60707
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,60708
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,49771
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,49772
2012-07-06T15:38:24-03:00,info,appl
ow,listen,6,0.0.0.0,55131
2012-07-06T15:38:24-03:00,info,appl
ow,listen,6,::,55131
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,58000
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,::,50894
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,54524
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,63427
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,63428
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,63429
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,63430
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,63431
2012-07-06T15:38:24-03:00,info,appl
listen,17,0.0.0.0,63432
2012-07-06T15:38:24-03:00,info,appl
w,listen,17,0.0.0.0,55613
2012-07-06T15:38:24-03:00,info,appl
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:25-03:00,info,appl
listen,17,0.0.0.0,55614
2012-07-06T15:38:25-03:00,info,appl
listen,17,0.0.0.0,55615
2012-07-06T15:38:25-03:00,info,appl
listen,17,0.0.0.0,55616

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\services.exe,all
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55617
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55618
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55619
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55620
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55621
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55622
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55623
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55624
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55625
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55626
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55627
2012-07-06T15:38:25-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55628
2012-07-06T15:38:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12111
2012-07-06T15:38:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12111
2012-07-06T15:38:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,17,0.0.0.0,12110
2012-07-06T15:38:26-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,listen,6,0.0.0.0,12110
2012-07-06T15:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,50765
2012-07-06T15:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,56573
2012-07-06T15:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61835
2012-07-06T15:38:28-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.12,53
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,3702
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,3702
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,0.0.0.0,63875
2012-07-06T15:38:29-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,6,::,63875
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61836

2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,49440
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49441
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,49442
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,53032
2012-07-06T15:38:30-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53033
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53034
2012-07-06T15:38:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,135
2012-07-06T15:38:30-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.11,1025
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53035
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,::,123
2012-07-06T15:38:30-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,123
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53036
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53037
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53038
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53039
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,53040
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55092
2012-07-06T15:38:31-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55093
2012-07-06T15:38:31-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55094
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55095
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55096
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55097
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55098
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55099
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55100
2012-07-06T15:38:32-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55101

2012-07-06T15:38:32-03:00,info,appl
listen,17,0.0.0.0,55102
2012-07-06T15:38:32-03:00,info,appl
listen,17,0.0.0.0,55103
2012-07-06T15:38:32-03:00,info,appl
listen,17,0.0.0.0,55104
2012-07-06T15:38:33-03:00,info,appl
w,listen,6,0.0.0.0,5900
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55105
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55106
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55107
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55108
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55109
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55110
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,55111
2012-07-06T15:38:33-03:00,info,appl
w,listen,17,0.0.0.0,62072
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,62073
2012-07-06T15:38:33-03:00,info,appl
,allow,listen,6,0.0.0.0,5800
2012-07-06T15:38:33-03:00,info,appl
listen,17,0.0.0.0,62074
2012-07-06T15:38:34-03:00,info,appl
listen,17,0.0.0.0,62075
2012-07-06T15:38:34-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-06T15:38:34-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:34-03:00,info,appl
listen,17,0.0.0.0,62076
2012-07-06T15:38:34-03:00,info,appl
listen,17,0.0.0.0,62077
2012-07-06T15:38:34-03:00,info,appl
listen,17,0.0.0.0,62078
2012-07-06T15:38:35-03:00,info,appl
listen,17,0.0.0.0,62079
2012-07-06T15:38:35-03:00,info,appl
listen,17,0.0.0.0,62080
2012-07-06T15:38:35-03:00,info,appl
w,listen,17,0.0.0.0,49996
2012-07-06T15:38:35-03:00,info,appl
w,listen,17,::,57767
2012-07-06T15:38:35-03:00,info,appl
w,listen,17,0.0.0.0,60564
2012-07-06T15:38:35-03:00,info,appl
listen,17,0.0.0.0,60565
2012-07-06T15:38:36-03:00,info,appl
listen,17,0.0.0.0,60566
2012-07-06T15:38:36-03:00,info,appl
w,listen,17,::,123
2012-07-06T15:38:36-03:00,info,appl
w,listen,17,0.0.0.0,123

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\PROGRA~1\UltraVNC\winvnc.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Program Files\UltraVNC\winvnc.exe
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo

2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,389
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60567
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60568
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60569
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60570
2012-07-06T15:38:36-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60571
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60572
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60573
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60574
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60575
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:37-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60576
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60577
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,60578
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,52941
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,52942
2012-07-06T15:38:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,63911
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63912
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63913
2012-07-06T15:38:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63914
2012-07-06T15:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63915
2012-07-06T15:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63916
2012-07-06T15:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63917
2012-07-06T15:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63918
2012-07-06T15:38:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63919
2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63920
2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63921

2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63922
2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63923
2012-07-06T15:38:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63924
2012-07-06T15:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:38:41-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.1.0.19,80
2012-07-06T15:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63925
2012-07-06T15:38:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.108.0.153,389
2012-07-06T15:38:44-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.236,54285
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,1025
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,63926
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,55822
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55823
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55824
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55825
2012-07-06T15:38:45-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55826
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55827
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55828
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55829
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55830
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\svchost.exe,deny
,send,17,FF02::1:2,547
2012-07-06T15:38:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55831
2012-07-06T15:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55832
2012-07-06T15:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55833
2012-07-06T15:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55834
2012-07-06T15:38:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55835

2012-07-06T15:38:47-03:00,info,appl
listen,17,0.0.0.0,55836
2012-07-06T15:38:47-03:00,info,appl
listen,17,0.0.0.0,55837
2012-07-06T15:38:47-03:00,info,appl
listen,17,0.0.0.0,55838
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55839
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55840
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55841
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55842
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55843
2012-07-06T15:38:48-03:00,info,appl
listen,17,0.0.0.0,55844
2012-07-06T15:38:49-03:00,info,appl
w,connect out,6,10.10.0.11,389
2012-07-06T15:38:49-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:49-03:00,info,appl
listen,17,0.0.0.0,55845
2012-07-06T15:38:49-03:00,info,appl
listen,17,0.0.0.0,55846
2012-07-06T15:38:50-03:00,info,appl
listen,17,0.0.0.0,55847
2012-07-06T15:38:50-03:00,info,appl
listen,17,0.0.0.0,55848
2012-07-06T15:38:50-03:00,info,appl
listen,17,0.0.0.0,55849
2012-07-06T15:38:51-03:00,info,appl
listen,17,0.0.0.0,55850
2012-07-06T15:38:51-03:00,info,appl
listen,17,0.0.0.0,55851
2012-07-06T15:38:51-03:00,info,appl
listen,17,0.0.0.0,55852
2012-07-06T15:38:51-03:00,info,appl
listen,17,0.0.0.0,55853
2012-07-06T15:38:52-03:00,info,appl
listen,17,0.0.0.0,55854
2012-07-06T15:38:52-03:00,info,appl
listen,17,0.0.0.0,55855
2012-07-06T15:38:52-03:00,info,appl
connect out,6,10.10.0.12,135
2012-07-06T15:38:52-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:38:52-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:52-03:00,info,appl
listen,17,0.0.0.0,55856
2012-07-06T15:38:53-03:00,info,appl
listen,17,0.0.0.0,55857
2012-07-06T15:38:53-03:00,info,appl
listen,17,0.0.0.0,55858
2012-07-06T15:38:54-03:00,info,appl
listen,17,0.0.0.0,55859
2012-07-06T15:38:54-03:00,info,appl
listen,17,0.0.0.0,55860

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:38:54-03:00,info,appl
listen,17,0.0.0.0,55861
2012-07-06T15:38:55-03:00,info,appl
listen,17,0.0.0.0,55862
2012-07-06T15:38:55-03:00,info,appl
listen,17,0.0.0.0,55863
2012-07-06T15:38:55-03:00,info,appl
listen,17,0.0.0.0,55864
2012-07-06T15:38:55-03:00,info,appl
listen,17,0.0.0.0,55865
2012-07-06T15:38:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T15:38:55-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T15:38:55-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:55-03:00,info,appl
listen,17,0.0.0.0,55866
2012-07-06T15:38:56-03:00,info,appl
w,connect out,6,10.10.0.12,389
2012-07-06T15:38:56-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:38:56-03:00,info,appl
listen,17,0.0.0.0,55867
2012-07-06T15:38:56-03:00,info,appl
listen,17,0.0.0.0,55868
2012-07-06T15:38:57-03:00,info,appl
listen,17,0.0.0.0,55869
2012-07-06T15:38:57-03:00,info,appl
listen,17,0.0.0.0,55870
2012-07-06T15:38:58-03:00,info,appl
listen,17,0.0.0.0,55871
2012-07-06T15:38:58-03:00,info,appl
listen,17,0.0.0.0,55872
2012-07-06T15:38:59-03:00,info,appl
listen,17,0.0.0.0,55873
2012-07-06T15:38:59-03:00,info,appl
listen,17,0.0.0.0,55874
2012-07-06T15:38:59-03:00,info,appl
listen,17,0.0.0.0,55875
2012-07-06T15:38:59-03:00,info,appl
listen,17,0.0.0.0,55876
2012-07-06T15:38:59-03:00,info,appl
listen,17,0.0.0.0,55877
2012-07-06T15:39:00-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:39:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:39:00-03:00,info,appl
listen,17,0.0.0.0,55878
2012-07-06T15:39:00-03:00,info,appl
listen,17,0.0.0.0,55879
2012-07-06T15:39:01-03:00,info,appl
listen,17,0.0.0.0,55880
2012-07-06T15:39:01-03:00,info,appl
send,17,10.200.0.5,389
2012-07-06T15:39:01-03:00,info,appl
listen,17,0.0.0.0,55881
2012-07-06T15:39:01-03:00,info,appl
listen,17,0.0.0.0,55882

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55883
2012-07-06T15:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55884
2012-07-06T15:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55885
2012-07-06T15:39:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55886
2012-07-06T15:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55887
2012-07-06T15:39:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55888
2012-07-06T15:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:39:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55889
2012-07-06T15:39:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55890
2012-07-06T15:39:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55891
2012-07-06T15:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55892
2012-07-06T15:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55893
2012-07-06T15:39:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55894
2012-07-06T15:39:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55895
2012-07-06T15:39:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55896
2012-07-06T15:39:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55897
2012-07-06T15:39:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55898
2012-07-06T15:39:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55899
2012-07-06T15:39:11-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.236,54286
2012-07-06T15:39:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:39:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:39:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55900
2012-07-06T15:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55901
2012-07-06T15:39:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55902
2012-07-06T15:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55903
2012-07-06T15:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55904
2012-07-06T15:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55905
2012-07-06T15:39:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88
2012-07-06T15:39:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,88

2012-07-06T15:39:18-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:39:18-03:00,info,appl
listen,17,0.0.0.0,55906
2012-07-06T15:39:18-03:00,info,appl
listen,17,0.0.0.0,55907
2012-07-06T15:39:18-03:00,info,appl
listen,17,0.0.0.0,55908
2012-07-06T15:39:18-03:00,info,appl
listen,17,0.0.0.0,55909
2012-07-06T15:39:18-03:00,info,appl
,send,17,FF02::1:2,547
2012-07-06T15:39:18-03:00,info,appl
listen,17,0.0.0.0,55910
2012-07-06T15:39:23-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:39:23-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:39:23-03:00,info,appl
listen,17,0.0.0.0,55911
2012-07-06T15:39:23-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T15:39:23-03:00,info,appl
listen,17,0.0.0.0,55912
2012-07-06T15:39:24-03:00,info,appl
listen,17,0.0.0.0,55913
2012-07-06T15:39:24-03:00,info,appl
listen,17,0.0.0.0,55914
2012-07-06T15:39:25-03:00,info,appl
listen,17,0.0.0.0,55915
2012-07-06T15:39:25-03:00,info,appl
listen,17,0.0.0.0,55916
2012-07-06T15:39:25-03:00,info,appl
listen,17,0.0.0.0,55917
2012-07-06T15:39:25-03:00,info,appl
listen,17,0.0.0.0,55918
2012-07-06T15:39:26-03:00,info,appl
listen,17,0.0.0.0,55919
2012-07-06T15:39:26-03:00,info,appl
listen,17,0.0.0.0,55920
2012-07-06T15:39:26-03:00,info,appl
listen,17,0.0.0.0,55921
2012-07-06T15:39:30-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:39:30-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:39:30-03:00,info,appl
listen,17,0.0.0.0,55922
2012-07-06T15:39:31-03:00,info,appl
listen,17,0.0.0.0,55923
2012-07-06T15:39:31-03:00,info,appl
listen,17,0.0.0.0,55924
2012-07-06T15:39:32-03:00,info,appl
listen,17,0.0.0.0,55925
2012-07-06T15:39:32-03:00,info,appl
listen,17,0.0.0.0,55926
2012-07-06T15:39:32-03:00,info,appl
listen,17,0.0.0.0,55927
2012-07-06T15:39:33-03:00,info,appl
listen,17,0.0.0.0,55928

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,deny
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55929
2012-07-06T15:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55930
2012-07-06T15:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55931
2012-07-06T15:39:33-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55932
2012-07-06T15:39:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:39:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:39:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55933
2012-07-06T15:39:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55934
2012-07-06T15:39:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55935
2012-07-06T15:39:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55936
2012-07-06T15:39:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55937
2012-07-06T15:39:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55938
2012-07-06T15:39:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55939
2012-07-06T15:39:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55940
2012-07-06T15:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55941
2012-07-06T15:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55942
2012-07-06T15:39:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55943
2012-07-06T15:39:43-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-06T15:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55944
2012-07-06T15:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:39:46-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55945
2012-07-06T15:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55946
2012-07-06T15:39:47-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55947
2012-07-06T15:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55948
2012-07-06T15:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55949
2012-07-06T15:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55950
2012-07-06T15:39:48-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55951
2012-07-06T15:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55952

2012-07-06T15:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55953
2012-07-06T15:39:49-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55954
2012-07-06T15:39:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:39:52-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55955
2012-07-06T15:39:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55956
2012-07-06T15:39:53-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55957
2012-07-06T15:39:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55958
2012-07-06T15:39:54-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55959
2012-07-06T15:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55960
2012-07-06T15:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55961
2012-07-06T15:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55962
2012-07-06T15:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55963
2012-07-06T15:39:55-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55964
2012-07-06T15:39:56-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55965
2012-07-06T15:39:58-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.3.85,3049
2012-07-06T15:40:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:40:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:40:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55966
2012-07-06T15:40:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55967
2012-07-06T15:40:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55968
2012-07-06T15:40:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55969
2012-07-06T15:40:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55970
2012-07-06T15:40:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55971
2012-07-06T15:40:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55972
2012-07-06T15:40:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55973
2012-07-06T15:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55974
2012-07-06T15:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55975
2012-07-06T15:40:04-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,55976
2012-07-06T15:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.12,1025
2012-07-06T15:40:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88

2012-07-06T15:40:08-03:00,info,appl
listen,17,0.0.0.0,55977
2012-07-06T15:40:08-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T15:40:09-03:00,info,appl
listen,17,0.0.0.0,55978
2012-07-06T15:40:09-03:00,info,appl
listen,17,0.0.0.0,55979
2012-07-06T15:40:10-03:00,info,appl
listen,17,0.0.0.0,55980
2012-07-06T15:40:10-03:00,info,appl
listen,17,0.0.0.0,55981
2012-07-06T15:40:11-03:00,info,appl
listen,17,0.0.0.0,55982
2012-07-06T15:40:11-03:00,info,appl
listen,17,0.0.0.0,55983
2012-07-06T15:40:11-03:00,info,appl
listen,17,0.0.0.0,55984
2012-07-06T15:40:11-03:00,info,appl
listen,17,0.0.0.0,55985
2012-07-06T15:40:11-03:00,info,appl
listen,17,0.0.0.0,55986
2012-07-06T15:40:12-03:00,info,appl
listen,17,0.0.0.0,55987
2012-07-06T15:40:16-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:40:16-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:16-03:00,info,appl
listen,17,0.0.0.0,55988
2012-07-06T15:40:16-03:00,info,appl
listen,17,0.0.0.0,55989
2012-07-06T15:40:17-03:00,info,appl
listen,17,0.0.0.0,55990
2012-07-06T15:40:17-03:00,info,appl
listen,17,0.0.0.0,55991
2012-07-06T15:40:18-03:00,info,appl
listen,17,0.0.0.0,55992
2012-07-06T15:40:18-03:00,info,appl
listen,17,0.0.0.0,55993
2012-07-06T15:40:18-03:00,info,appl
listen,17,0.0.0.0,55994
2012-07-06T15:40:18-03:00,info,appl
listen,17,0.0.0.0,55995
2012-07-06T15:40:19-03:00,info,appl
listen,17,0.0.0.0,55996
2012-07-06T15:40:19-03:00,info,appl
listen,17,0.0.0.0,55997
2012-07-06T15:40:19-03:00,info,appl
listen,17,0.0.0.0,55998
2012-07-06T15:40:24-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:40:24-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:24-03:00,info,appl
listen,17,0.0.0.0,55999
2012-07-06T15:40:24-03:00,info,appl
listen,17,0.0.0.0,56000
2012-07-06T15:40:25-03:00,info,appl
listen,17,0.0.0.0,56001

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:40:25-03:00,info,appl
listen,17,0.0.0.0,56002
2012-07-06T15:40:26-03:00,info,appl
listen,17,0.0.0.0,56003
2012-07-06T15:40:26-03:00,info,appl
listen,17,0.0.0.0,56004
2012-07-06T15:40:26-03:00,info,appl
listen,17,0.0.0.0,56005
2012-07-06T15:40:26-03:00,info,appl
listen,17,0.0.0.0,56006
2012-07-06T15:40:27-03:00,info,appl
listen,17,0.0.0.0,56007
2012-07-06T15:40:27-03:00,info,appl
listen,17,0.0.0.0,56008
2012-07-06T15:40:27-03:00,info,appl
listen,17,0.0.0.0,56009
2012-07-06T15:40:29-03:00,info,appl
w,listen,17,0.0.0.0,54897
2012-07-06T15:40:29-03:00,info,appl
w,send,17,10.10.0.12,53
2012-07-06T15:40:29-03:00,info,appl
low,connect out,6,10.1.0.3,80
2012-07-06T15:40:31-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:40:31-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:31-03:00,info,appl
listen,17,0.0.0.0,54898
2012-07-06T15:40:31-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T15:40:32-03:00,info,appl
listen,17,0.0.0.0,54899
2012-07-06T15:40:32-03:00,info,appl
listen,17,0.0.0.0,54900
2012-07-06T15:40:33-03:00,info,appl
listen,17,0.0.0.0,54901
2012-07-06T15:40:33-03:00,info,appl
listen,17,0.0.0.0,54902
2012-07-06T15:40:34-03:00,info,appl
listen,17,0.0.0.0,54903
2012-07-06T15:40:34-03:00,info,appl
listen,17,0.0.0.0,54904
2012-07-06T15:40:34-03:00,info,appl
listen,17,0.0.0.0,54905
2012-07-06T15:40:34-03:00,info,appl
listen,17,0.0.0.0,54906
2012-07-06T15:40:34-03:00,info,appl
listen,17,0.0.0.0,54907
2012-07-06T15:40:35-03:00,info,appl
listen,17,0.0.0.0,54908
2012-07-06T15:40:39-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:40:39-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:39-03:00,info,appl
listen,17,0.0.0.0,54909
2012-07-06T15:40:39-03:00,info,appl
listen,17,0.0.0.0,54910
2012-07-06T15:40:40-03:00,info,appl
listen,17,0.0.0.0,54911

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\svchost.exe,allo
control,C:\Windows\System32\svchost.exe,allo
control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:40:40-03:00,info,appl
listen,17,0.0.0.0,54912
2012-07-06T15:40:41-03:00,info,appl
listen,17,0.0.0.0,54913
2012-07-06T15:40:41-03:00,info,appl
listen,17,0.0.0.0,54914
2012-07-06T15:40:41-03:00,info,appl
listen,17,0.0.0.0,54915
2012-07-06T15:40:42-03:00,info,appl
listen,17,0.0.0.0,54916
2012-07-06T15:40:42-03:00,info,appl
listen,17,0.0.0.0,54917
2012-07-06T15:40:42-03:00,info,appl
listen,17,0.0.0.0,54918
2012-07-06T15:40:42-03:00,info,appl
listen,17,0.0.0.0,54919
2012-07-06T15:40:46-03:00,info,appl
connect out,6,10.10.0.12,1025
2012-07-06T15:40:46-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:46-03:00,info,appl
listen,17,0.0.0.0,54920
2012-07-06T15:40:47-03:00,info,appl
listen,17,0.0.0.0,54921
2012-07-06T15:40:47-03:00,info,appl
listen,17,0.0.0.0,54922
2012-07-06T15:40:48-03:00,info,appl
listen,17,0.0.0.0,54923
2012-07-06T15:40:48-03:00,info,appl
listen,17,0.0.0.0,54924
2012-07-06T15:40:49-03:00,info,appl
listen,17,0.0.0.0,54925
2012-07-06T15:40:49-03:00,info,appl
listen,17,0.0.0.0,54926
2012-07-06T15:40:49-03:00,info,appl
listen,17,0.0.0.0,54927
2012-07-06T15:40:49-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T15:40:49-03:00,info,appl
connect out,6,10.10.0.12,88
2012-07-06T15:40:49-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:40:49-03:00,info,appl
listen,17,0.0.0.0,54928
2012-07-06T15:40:49-03:00,info,appl
listen,17,0.0.0.0,54929
2012-07-06T15:40:50-03:00,info,appl
listen,17,0.0.0.0,54930
2012-07-06T15:41:00-03:00,info,appl
connect out,6,10.10.0.11,88
2012-07-06T15:41:00-03:00,info,appl
listen,17,0.0.0.0,54931
2012-07-06T15:41:00-03:00,info,appl
send,17,10.10.0.12,389
2012-07-06T15:41:00-03:00,info,appl
listen,17,0.0.0.0,54932
2012-07-06T15:41:01-03:00,info,appl
low,connect out,6,10.10.0.25,80
2012-07-06T15:41:01-03:00,info,appl
listen,17,0.0.0.0,54933

control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\Windows\System32\lsass.exe,allow,
control,C:\PROGRA~1\INTERN~1\iexplore.exe,al
control,C:\Windows\System32\lsass.exe,allow,

2012-07-06T15:41:01-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54934
2012-07-06T15:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54935
2012-07-06T15:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54936
2012-07-06T15:41:02-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54937
2012-07-06T15:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54938
2012-07-06T15:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54939
2012-07-06T15:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54940
2012-07-06T15:41:03-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,54941
2012-07-06T15:41:09-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:10-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80

2012-07-06T15:41:12-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:12-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:13-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80

Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i

2012-07-06T15:41:14-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:15-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:16-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:17-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:18-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:18-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80

Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i

2012-07-06T15:41:19-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:21-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:41:50-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:41:53-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:41:56-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:42:00-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,listen,17,0.0.0.0,61307
2012-07-06T15:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,send,17,10.10.0.12,53
2012-07-06T15:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.0.69,80
2012-07-06T15:42:03-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.0.3,80
2012-07-06T15:42:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61308
2012-07-06T15:42:07-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.11,389
2012-07-06T15:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61309
2012-07-06T15:42:08-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61310
2012-07-06T15:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61311
2012-07-06T15:42:09-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61312
2012-07-06T15:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61313
2012-07-06T15:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61314
2012-07-06T15:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61315
2012-07-06T15:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61316
2012-07-06T15:42:10-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61317
2012-07-06T15:42:11-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61318
2012-07-06T15:42:19-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:19-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:20-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:21-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80

2012-07-06T15:42:21-03:00,info,appl control,C:\Program Files\Internet Explorer\i


explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:24-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:28-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:31-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:42:44-03:00,info,appl control,C:\Program Files\F-Secure\ORSP Clien
t\fsorsp.exe,allow,connect out,6,217.110.97.200,80
2012-07-06T15:43:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.10.0.25,80
2012-07-06T15:43:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.0.69,80
2012-07-06T15:43:06-03:00,info,appl control,C:\Windows\System32\svchost.exe,allo
w,connect out,6,10.1.0.3,80
2012-07-06T15:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61319
2012-07-06T15:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T15:43:15-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61320
2012-07-06T15:43:16-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.1.32,53495
2012-07-06T15:43:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61321
2012-07-06T15:43:16-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61322
2012-07-06T15:43:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61323
2012-07-06T15:43:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61324
2012-07-06T15:43:17-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61325
2012-07-06T15:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61326
2012-07-06T15:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61327
2012-07-06T15:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61328
2012-07-06T15:43:18-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61329
2012-07-06T15:43:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,135
2012-07-06T15:43:38-03:00,info,appl control,C:\Program Files\F-Secure\common\FNR
B32.exe,allow,connect out,6,10.10.0.12,1025
2012-07-06T15:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
connect out,6,10.10.0.11,88
2012-07-06T15:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61330
2012-07-06T15:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
send,17,10.10.0.12,389
2012-07-06T15:43:38-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61331
2012-07-06T15:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61332
2012-07-06T15:43:39-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61333

2012-07-06T15:43:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61334
2012-07-06T15:43:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61335
2012-07-06T15:43:40-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61336
2012-07-06T15:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61337
2012-07-06T15:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61338
2012-07-06T15:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61339
2012-07-06T15:43:41-03:00,info,appl control,C:\Windows\System32\lsass.exe,allow,
listen,17,0.0.0.0,61340
2012-07-06T15:43:45-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.196,63770
2012-07-06T15:44:07-03:00,info,appl control,C:\Program Files\F-Secure\common\FSH
DLL32.EXE,allow,send,17,10.10.4.196,63772
2012-07-06T15:44:26-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:26-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:27-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:29-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program Files\Internet Explorer\i
explore.exe,allow,connect out,6,10.10.0.25,80

2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:30-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:31-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:31-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:31-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:33-03:00,info,appl control,C:\Program
DLL32.EXE,allow,send,17,10.10.3.126,54710
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80

Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\F-Secure\common\FSH
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i

2012-07-06T15:44:50-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80
2012-07-06T15:44:51-03:00,info,appl control,C:\Program
explore.exe,allow,connect out,6,10.10.0.25,80

Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i
Files\Internet Explorer\i

You might also like