Possible false positive in hpHost blog
9/17/2008 02:12:53 SYSTEM 1656 Sign of “VBS:SnapshotView-A [Expl]” has been found in “hxxp://hphosts.blogspot.com/2008/09/injection-via-hex-encoded-sql.html\unp262181503” file.
9/17/2008 02:13:04 SYSTEM 1656 Sign of “VBS:SnapshotView-A [Expl]” has been found in “C:\Documents and Settings[my name]\Local Settings\Temporary Internet Files\Content.IE5\6418YZGI\injection-via-hex-encoded-sql[1].htm” file.
9/17/2008 02:15:26 SYSTEM 1656 Sign of “VBS:SnapshotView-A [Expl]” has been found in “http://hphosts.blogspot.com/\unp181734367” file.
9/17/2008 02:16:05 SYSTEM 1656 Sign of “VBS:SnapshotView-A [Expl]” has been found in “C:\Documents and Settings[my name\Local Settings\Temporary Internet Files\Content.IE5\6418YZGI\hphosts_blogspot_com[1].htm” file.