SWEET!!It does a nice job in parsing Panda ActiveScan logs also. Maybe you can see some tweaking to be done in this area also. The logs are fairly easy to read but all of the extra characters can make it confusing. Note that nothing in this log is actually malicious. Those are all Smitfraudfix files.
The main thing is it separates out all of the cookies and extra text and read the actual executables. Although I do wish it would show the entire file path. ntp.exe isn't malicious, but when you see the entire file path it becomes clear why it was flagged. C:\ComboFix\ntp.exe.
Another log is attached.
ANALYSIS: 2008-12-06 15:00:15
PROTECTIONS: 1
MALWARE: 23
SUSPECTS: 9
;****************************************************************************
PROTECTIONS
Description Version Active Updated
;===========================================================================
AVG Anti-Virus 8.0 Yes Yes
;===========================================================================
Id Description Type Active Severity Disinfectable Disinfected Location
;===========================================================================
00039204 adware/cws Adware No 0 Yes No c:\documents and settings\don pc\favorites\insurance
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@tradedoubler[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@fastclick[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@mediaplex[1].txt
00147806 Cookie/7search TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@7search[1].txt
00147824 Cookie/Clickbank TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@clickbank[1].txt
00159881 Application/Pskill.A HackTools No 0 Yes No C:\System Volume Information\_restore{F07A53C8-B184-416E-84DF-091CF0822230}\RP157\A0025744.exe
00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@statcounter[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\
[email protected][1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@apmebf[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\
[email protected][2].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@adtech[1].txt
00168110 Cookie/Server.iad.Liveperson TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\
[email protected][1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@advertising[1].txt
00169287 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\
[email protected][3].txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\
[email protected][1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@overture[1].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@adrevolver[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Documents and Settings\Don PC\Cookies\don_pc@adviva[2].txt
03477235 Application/SmithFraudFix.A HackTools No 0 Yes No C:\Documents and Settings\Don PC\Desktop\SmitfraudFix.exe
;===============================================================================
Sent Location j
;==============================================================================
Yes C:\Documents and Settings\Don PC\Desktop\SmitfraudFix\404Fix.exe j
Yes C:\Documents and Settings\Don PC\Desktop\SmitfraudFix\IEDFix.C.exe j
Yes C:\Documents and Settings\Don PC\Desktop\SmitfraudFix\VACFix.exe j
No C:\Documents and Settings\Don PC\Local Settings\Temp\~tmpb.exe j
Yes C:\RECYCLER\S-1-5-21-796845957-299502267-839522115-1004\Dc1.exe j
Yes C:\WINDOWS\system32\404Fix.exe j
Yes C:\WINDOWS\system32\IEDFix.C.exe j
Yes C:\WINDOWS\system32\o4Patch.exe j
Yes C:\WINDOWS\system32\VACFix.exe j
;=============================================================================
VULNERABILITIES
Id Severity Description j
;============================================================================
;=============================================================================
[Saving space - attachment deleted by admin]
