[27/Nov/2006 15:21:31] Virus: External AV verdict: probably unknown STEALTH.CRYPT.TSR.DRIVER virus, client user@domain.local 192.168.1.121, http://imho.ws/image.php?u=22745&dateline=1157028271 [27/Nov/2006 15:21:31] Virus: Suspicious file http://imho.ws/image.php?u=22745&dateline=1157028271 stored into quarantine as c:\program files\kerio\winroute firewall\quarantine\http_061127_152131-122041.tmp