What are the timezones at work here? You see in file /var/ossec/etc/localtime there is string in the end of file EST5EDT,M3.2.0,M11.1.0 There is also a file /usr/share/zoneinfo/EST5DET with EST5EDT,M3.2.0,M11.1.0 in the end. But in the end of file /usr/share/zoneinfo/@localtime there is MSK-4
The command DATE provides the following information: Mon Jul 23 10:13:35 MSK 2012
