Stopped

Proceeded with

Ejected

Mounted

Learned

Denied

Allowed

^0 the open of a Desktop file which contained a code resource of type ^1.

^0 the launch of the file ^2 which had an innoculation discrepancy.

^0 the launch/open of the file ^2 infected with the virus ^3.

Found the virus ^3 in folder ^2.

Cancelled scan of folder ^2.

^0 volume ^2 after finding the virus ^3.

Cancelled scan of volume ^2.

Skipped scan of volume ^2.

 The active application or INIT was ^3.

^0 an attempt to modify SAM Intercept.

^0 an attempt to add the “special” file ^2.

^0 an attempt to modify the “special” file ^2.

^0 an attempt to bypass SAM Intercept.

^0 an attempt to bypass the file system on volume ^2.

^0 an attempt to bypass the resource manager on file ^2.

^0 an attempt to move the startup document ^2 to a system folder.

^0 an attempt to create the startup document ^2.

^0 an attempt to add a resource of type ^1 in file ^2.

^0 an attempt to change a resource of type ^1 in file ^2.

MSWD

SAM Audit Trail