Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdateMode' = '<SYSTEM32>\wumd.exe'
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-33 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-35 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-32 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-28 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-30 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-36 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-40 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-42 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-39 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-37 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-38 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-27 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-15 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-14 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-12 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-13 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-17 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-25 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-26 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-24 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-18 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-22 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-06 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-10 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-05 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-02 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-04 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-31 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-32 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-29 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-27 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-28 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-01 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-46 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-48 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-45 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-43 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-44 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-50 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-59 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-00 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-58 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-52 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-55 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-10 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-33 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-34 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-32 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-29 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-31 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-35 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-39 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-40 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-38 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-36 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-37 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-25 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-17 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-13 PM.html
- <SYSTEM32>\wumd.exe
- <SYSTEM32>\UpdateLog.dll
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-18 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-23 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-24 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-22 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-19 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-21 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-00 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-02 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-59 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-56 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-57 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-03 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-08 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-09 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-07 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-04 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-06 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-55 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-45 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-46 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-44 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-42 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-43 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-48 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-52 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-53 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-51 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-49 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-50 PM.html
- <SYSTEM32>\wumd.exe
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-32 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-33 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-30 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-27 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-28 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-35 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-39 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-40 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-38 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-36 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-37 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-15 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-14 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-12 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-13 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-17 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-25 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-26 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-24 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-18 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-22 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-42 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-05 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-06 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-04 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-01 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-02 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-10 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-29 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-31 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-28 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-27 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-46 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-48 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-45 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-43 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-44 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-50 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-59 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-52-00 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-58 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-52 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-55 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-34 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-35 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-33 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-31 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-32 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-36 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-40 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-42 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-39 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-37 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-38 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-18 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-19 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-17 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-13 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-16 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-21 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-25 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-29 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-24 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-22 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-23 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-43 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-02 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-03 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-00 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-57 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-59 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-04 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-09 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-10 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-08 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-06 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-51-07 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-48 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-49 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-46 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-44 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-45 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-50 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-55 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-56 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-53 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-51 PM.html
- <SYSTEM32>\NOVO_INFO-CC_%USERNAME%_6-27-2013 6-50-52 PM.html
- 'sm##.gmail.com':587
- DNS ASK sm##.gmail.com
- ClassName: '(null)' WindowName: '<Auxiliary name>'