Status: Deleted   (events: 4)	
12/2/2011 10:47:50 PM	Deleted	Trojan program Trojan-FakeAV.Win32.FakeRecovery.ah	C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\LocalCopy\{0A4F5514-F4FA-43E1-04E3-DF9A1631E76E}-IXuqQyFQGstQ7X.exe	High	
12/2/2011 10:47:50 PM	Deleted	Trojan program Trojan-FakeAV.Win32.FakeRecovery.ah	C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\LocalCopy\{0A4F5514-F4FA-43E1-04E3-DF9A1631E76E}-IXuqQyFQGstQ7X.exe//PE-Crypt.XorPE	High	
12/3/2011 12:12:24 AM	Deleted	Trojan program Trojan-FakeAV.Win32.FakeRecovery.ah	C:\System Volume Information\_restore{5E1E728D-A4B3-4D29-82BE-B6655430320A}\RP1029\A0076786.exe//PE-Crypt.XorPE	High	
12/3/2011 12:12:24 AM	Deleted	Trojan program Trojan-FakeAV.Win32.FakeRecovery.ah	C:\System Volume Information\_restore{5E1E728D-A4B3-4D29-82BE-B6655430320A}\RP1029\A0076786.exe	High