WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93099 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

my hijackthis log

Started by jasonwal , Mar 09 2006 04:52 PM

This topic is locked

25 replies to this topic

#1 jasonwal

New Member

Authentic Member
11 posts

Posted 09 March 2006 - 04:52 PM

Hi you guys, thanks in advance for the advice! heres the damage:

Logfile of HijackThis v1.99.1
Scan saved at 9:26:00 AM, on 3/10/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\ViRobot NT\vrmonsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\Explorer.EXE
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\WINNT\system32\LVCOMSX.EXE
C:\Program Files\ViRobot NT\vrmonnt.exe
C:\WINNT\nics\Safecom.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINNT\Nics\Rcsdeamon.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\WINNT\nics\SafeULoader.exe
C:\Documents and Settings\Jason Waldie\Desktop\hijackthis.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = wwwproxy.student.unimelb.edu.au:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = login.wireless.unimelb.edu.au;localhost
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [SafePC Starter] C:\WINNT\safepcstartnt.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [OptusNet DSL Setup] D:\OptusNet.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Vrmon] C:\Program Files\ViRobot NT\vrmonnt.exe Main
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [csr] csrrs.exe
O4 - HKLM\..\RunServices: [csr] csrrs.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [RssReader] C:\Program Files\RssReader\RssReader.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://dsl.optusnet.com.au/
O20 - Winlogon Notify: Uninstall - C:\WINNT\system32\i024lafq1d2e.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: ViRobot Professional Monitoring (vrmonsvc) - HAURI - C:\Program Files\ViRobot NT\vrmonsvc.exe

I tried cleaning obvious thing before with the help of forum advice but the problem doesnt seem to have gone away.

For example: O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe, i tried removing with hijackthis but wasnt successful. A full "idiots version" of the step-by-step would be greatly appreciated.

Thanks,

Jason

Advertisements

Register to Remove

#2 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 09 March 2006 - 05:14 PM

Hello jasonwal, Welcome to the forum.

This is what I suggest you do.

Please do not delete anything unless instructed to.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.

Even if you've already run these, make SURE they're up-to-date and run per instructions.

Make sure you have the up-to-date versions of Spybot V 1.4 and Ad-aware SE Build 1.06 . All are free and available below.

Download Spybot, install and update. Then download Ad-aware, install, and update.

Spybot:

Install the program and launch it.

Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D

Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the RED (RED) entries.

Ad-Aware FULL SCAN:

Install the program and launch it.

1. Launch Ad-Aware SE and run the WebUpdate feature. (Click on the Globe icon > Click connect > Click OK > Click Finish.)
2. Set up the Configurations as follows:
-- Click the Gear wheel at the top of the Ad-Aware window
-- Click General > Safety & Settings: Check (Green) all three.
-- Click Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion".
3. Click "Proceed"
4. Click "Scan Now"
5. Deselect "Search for negligible risk entries" as negligible risk entries (MRU's) are not considered to be a threat.
6. Select "Search for low-risk threats"
7. Run the scanner using the Full Scan (Perform full system scan) mode.
8. When the scan has completed, select Next.
9. In the Scanning Results window, select the "Scan Summary" tab.
10. Check the box next to each "target family" you wish to remove.
11. Click next > Click OK.

Next:

Please download the trial version of ewido anti-malware 3.5 here:
http://www.ewido.net/en/download/
Install it, and update the definitions to the newest files. Do NOT run a scan yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Then please run Ewido, click on the Scanner run a full scan and let it clean everything it finds. Save the logfile from the scan.

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.

Also please describe how your computer behaves at the moment.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#3 jasonwal

New Member

Authentic Member
11 posts

Posted 09 March 2006 - 07:57 PM

Hi again and thanks LD tate for the advice.

I updated and ran both spybot and ad-aware followed by a safemode ewido and finally a new hijackthis log in normal mode. Still experiencing popups.

Here are ewido safemode scan report as well as new hijackthis log.

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 12:29:34 PM, 3/10/2006
+ Report-Checksum: A76C4FE8

+ Scan result:

HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup
[348] C:\WINNT\system32\BWSESRV.DLL -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe -> Dropper.VB.lu : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Cookies\jason waldie@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Cookies\jason waldie@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Cookies\jason waldie@free.wegcash[1].txt -> TrackingCookie.Wegcash : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Cookies\jason waldie@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Cookies\jason waldie@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Desktop\backups\backup-20060307-134746-263-svchost.exe -> Dropper.VB.lu : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Desktop\backups\backup-20060307-140525-857-svchost.exe -> Dropper.VB.lu : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Desktop\backups\backup-20060307-231218-802-svchost.exe -> Dropper.VB.lu : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Shared\Interactive Atlas Of Human Anatomy 3.0.exe -> Dropper.VB.lu : Cleaned with backup
C:\Documents and Settings\Jason Waldie\Shared\Interactive Atlas Of Human Anatomy 3.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\gimmygames12.exe -> Downloader.Adload.v : Cleaned with backup
C:\Program Files\winupdates\a.tmp -> Worm.VB.an : Cleaned with backup
C:\Program Files\winupdates\a.zip/Setup.exe -> Worm.VB.an : Cleaned with backup
C:\Program Files\winupdates\winupdates.exe -> Worm.VB.an : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc1052.exe -> Downloader.VB.xr : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc123.tmp -> Worm.VB.an : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc128.tmp -> Worm.VB.an : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc1349.exe -> Downloader.Adload.v : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc176.tmp -> Adware.SurfSide : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc184.tmp -> Downloader.IstBar : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc239.exe -> Downloader.IstBar.ou : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc273.freb92 -> Adware.Look2Me : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc403.exe -> Downloader.IstBar.ou : Cleaned with backup
C:\RECYCLER\S-1-5-21-1229272821-492894223-842925246-1000\Dc933.exe -> Hijacker.VB.li : Cleaned with backup
C:\unzipped\Interactive Atlas Of Human Anatomy 3.0\Setup.exe -> Worm.VB.an : Cleaned with backup
C:\WINNT\b.exe -> Backdoor.Rbot : Cleaned with backup
C:\WINNT\NDNuninstall7_14.exe -> Adware.NewDotNet : Cleaned with backup
C:\WINNT\NDNuninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup
C:\WINNT\system32\astr.exe -> Downloader.VB.na : Cleaned with backup
C:\WINNT\system32\BWSESRV.DLL -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\csrrs.exe -> Backdoor.Rbot : Cleaned with backup
C:\WINNT\system32\dr.exe -> Downloader.Adload.t : Cleaned with backup
C:\WINNT\system32\hrno0553e.dll -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\hrp4057qe.dll -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\vtInstall.dll -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\wpspdmod.dll -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\XXNROLL.DLL -> Adware.Look2Me : Cleaned with backup
C:\WINNT\system32\xxx.exe -> Dropper.Agent.mf : Cleaned with backup
C:\winsysban12.exe -> Hijacker.VB.li : Cleaned with backup

::Report End

and new hijackthis log...

Logfile of HijackThis v1.99.1
Scan saved at 12:39:35 PM, on 3/10/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\ViRobot NT\vrmonsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\nics\Safecom.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\WINNT\Nics\Rcsdeamon.exe
C:\WINNT\system32\LVCOMSX.EXE
C:\Program Files\ViRobot NT\vrmonnt.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINNT\system32\wuauclt.exe
C:\WINNT\nics\SafeULoader.exe
C:\Documents and Settings\Jason Waldie\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = wwwproxy.student.unimelb.edu.au:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = login.wireless.unimelb.edu.au;localhost
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [SafePC Starter] C:\WINNT\safepcstartnt.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [OptusNet DSL Setup] D:\OptusNet.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Vrmon] C:\Program Files\ViRobot NT\vrmonnt.exe Main
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [RssReader] C:\Program Files\RssReader\RssReader.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://dsl.optusnet.com.au/
O20 - Winlogon Notify: ModuleUsage - C:\WINNT\system32\f0l00a3med.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: ViRobot Professional Monitoring (vrmonsvc) - HAURI - C:\Program Files\ViRobot NT\vrmonsvc.exe

Thanks for the help; please advise.

Jason

#4 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 09 March 2006 - 08:04 PM

Please use the Posted Image

Button below to reply. Don't start a new thread.

Please do not delete anything unless instructed to.

Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!

When the sweep has finished, click Remove. Click Select All and then Next

From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.

Exit Spy Sweeper.

Empty Recycle Bin

Reboot and "copy/paste" a new HJT log as well as the Resullts from Spy Sweeper file into this thread.
Also please describe how your computer behaves at the moment.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#5 jasonwal

New Member

Authentic Member
11 posts

Posted 10 March 2006 - 12:34 AM

Hi again LDTate, Thanks for the earlier help. Included are results of your previous advice to me. The spy sweeper reults are included (ran twice) as well as the new HJT log. I havent had any recent popups but for some reason my system won't shut down and restart; and i dont want to hit the power button til i hear something from you guys. Please view the following 2 spy sweeper results as well as the latest HJT log. ******** 1:15 PM: | Start of Session, Friday, March 10, 2006 | 1:15 PM: Spy Sweeper started 1:15 PM: Sweep initiated using definitions version 630 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: Starting Memory Sweep 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:15 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:16 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:16 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:17 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:22 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:23 PM: Memory Sweep Complete, Elapsed Time: 00:07:21 1:23 PM: Starting Registry Sweep 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:24 PM: Registry Sweep Complete, Elapsed Time:00:01:37 1:24 PM: Starting Cookie Sweep 1:24 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01 1:24 PM: Starting File Sweep 1:25 PM: Found Adware: whenu 1:25 PM: c:\program files\common files\whenu (ID = -2147480379) 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:44 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:49 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:55 PM: Found Adware: ist yoursitebar 1:55 PM: ysb_toolbar.exe (ID = 258153) 1:55 PM: Found Adware: look2me 1:55 PM: f0l00a3med.dll (ID = 159) 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:57 PM: dzsrslvr.dll (ID = 159) 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: Found Adware: command 1:58 PM: maiwvzb0pzipt355.vbs (ID = 185675) 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:58 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 1:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:04 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: Warning: Invalid file - not a PKZip file 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:05 PM: Warning: File not found 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 2:06 PM: Warning: File not found 2:06 PM: Warning: File not found 2:06 PM: Warning: File not found 2:06 PM: Warning: File not found 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 2:07 PM: The Spy Commu

#6 jasonwal

New Member

Authentic Member
11 posts

Posted 10 March 2006 - 12:57 AM

Cont'....

2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: Warning: File not found
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: Warning: Unhandled Archive Type
2:11 PM: Warning: Invalid Stream
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid file - not a PKZip file
2:11 PM: Warning: Invalid Stream
2:11 PM: Warning: Invalid Stream
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:11 PM: File Sweep Complete, Elapsed Time: 00:46:27
2:11 PM: Full Sweep has completed. Elapsed time 00:56:18
2:11 PM: Traces Found: 5
2:11 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:11 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: Removal process initiated
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: Quarantining All Traces: look2me
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: look2me is in use. It will be removed on reboot.
2:12 PM: f0l00a3med.dll is in use. It will be removed on reboot.
2:12 PM: dzsrslvr.dll is in use. It will be removed on reboot.
2:12 PM: Quarantining All Traces: command
2:12 PM: Quarantining All Traces: ist yoursitebar
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
2:12 PM: Quarantining All Traces: whenu
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:12 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:13 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:13 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
2:13 PM: Removal process completed. Elapsed time 00:01:26
********
1:11 PM: | Start of Session, Friday, March 10, 2006 |
1:11 PM: Spy Sweeper started
1:12 PM: Messenger service has been disabled.
1:13 PM: Your spyware definitions have been updated.
1:13 PM: Your definitions are up to date.
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:15 PM: | End of Session, Friday, March 10, 2006 |

The first time i ranspy sweeper it asked me to reboot but i wanted to save the log first and declined the reboot. Saved the log but unable to reboot so ran spysweeper again.

Then i ran a new HJT log ....BUT system wont allow me to reboot,or ctrl-alt-del and i wanted to wait for advice from you before I hit the power switch

Heres the hjt log (without reboot)

Logfile of HijackThis v1.99.1
Scan saved at 3:16:02 PM, on 3/10/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\ViRobot NT\vrmonsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\Nics\Rcsdeamon.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINNT\nics\SafeULoader.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINNT\nics\Safecom.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Documents and Settings\Jason Waldie\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = wwwproxy.student.unimelb.edu.au:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = login.wireless.unimelb.edu.au;localhost
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [SafePC Starter] C:\WINNT\safepcstartnt.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [OptusNet DSL Setup] D:\OptusNet.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Vrmon] C:\Program Files\ViRobot NT\vrmonnt.exe Main
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [RssReader] C:\Program Files\RssReader\RssReader.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://dsl.optusnet.com.au/
O20 - Winlogon Notify: ModuleUsage - C:\WINNT\system32\f0l00a3med.dll
O20 - Winlogon Notify: WRNotifier - C:\WINNT\SYSTEM32\WRLogonNTF.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: ViRobot Professional Monitoring (vrmonsvc) - HAURI - C:\Program Files\ViRobot NT\vrmonsvc.exe

Thanks tons!

Jason

#7 thingol78

New Member

New Member
7 posts

Posted 10 March 2006 - 04:50 AM

hi this the hjt log

Logfile of HijackThis v1.99.0
Scan saved at 11.46.59, on 10/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Programmi\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
D:\Programmi\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
D:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
D:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Media Access\MediaAccK.exe
C:\Programmi\ISTsvc\istsvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Media Access\MediaAccess.exe
D:\Eraser\eraser.exe
C:\Programmi\Messenger\msmsgs.exe
E:\Programmi\BitComet\BitComet.exe
C:\Programmi\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Programmi\Mozilla Firefox\firefox.exe
D:\Programmi\Winamp\Winamp.exe
E:\SalvaAVolo\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com//0seenus/saos01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gw.aliceadsl.it/home
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: FoxieToolbar Class - {432CAE3B-690F-4C3B-BD97-070EBDA210D5} - C:\Programmi\Foxie Suite\foxietoolbaru.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Programmi\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: FoxieSecurityModule Class - {C65185B1-D52B-44A9-861F-8201B50D1F37} - C:\Programmi\Foxie Suite\foxiecoreu.dll
O3 - Toolbar: Foxie - {09C02180-3B46-4CD8-83FF-34DAF442BDEF} - C:\Programmi\Foxie Suite\foxiecoreu.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Programmi\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - (no file)
O4 - HKLM\..\Run: [IST Service] C:\Programmi\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Eraser] D:\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Programmi\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\smmss.exe
O4 - HKCU\..\RunOnce: [FoxeCleaner] C:\Programmi\Foxie Suite\Cleaner.exe /i
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Cerca con Google - res://c:\programmi\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://c:\programmi\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Link a ritroso - res://c:\programmi\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Desktop Search - {306BBB66-D9E4-4481-833E-C1D5FCA06774} - C:\Programmi\Foxie Suite\Resources\HTML\Desktop.htm
O9 - Extra 'Tools' menuitem: Desktop Search - {306BBB66-D9E4-4481-833E-C1D5FCA06774} - C:\Programmi\Foxie Suite\Resources\HTML\Desktop.htm
O9 - Extra button: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Programmi\Foxie Suite\Cleaner.exe
O9 - Extra 'Tools' menuitem: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Programmi\Foxie Suite\Cleaner.exe
O9 - Extra button: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Programmi\Foxie Suite\Sweeper.exe
O9 - Extra 'Tools' menuitem: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Programmi\Foxie Suite\Sweeper.exe
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: The Infinity Button - {E4143585-2688-4EBC-B264-27C774F600D5} - C:\Programmi\Foxie Suite\Resources\HTML\Infinity.htm
O9 - Extra 'Tools' menuitem: The Infinity Button - {E4143585-2688-4EBC-B264-27C774F600D5} - C:\Programmi\Foxie Suite\Resources\HTML\Infinity.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra button: Alice - {B2E4490A-85C5-4A67-957B-2797EAD68F8A} - http://gw.aliceadsl.it/alice (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O15 - Trusted Zone: www.archiviosex.net
O15 - Trusted Zone: www.otherchance.com
O15 - Trusted Zone: www.redfunny.com
O15 - Trusted Zone: www.sgrunt.biz
O15 - Trusted Zone: www.skymasters.biz
O15 - Trusted Zone: www.superspots.biz
O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1437C967-0411-42D2-B1A0-5774AB551EA1}: NameServer = 151.99.125.2,151.99.125.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{D821A1C8-1CCC-4E42-A0F1-64BA49F53411}: NameServer = 85.37.17.9 85.38.28.75
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Unknown - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: Client32 - Unknown - E:\PROGRA~1\NETSUP~1\client32.exe (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Servizio Auto-Protect di Norton AntiVirus - Symantec Corporation - D:\Programmi\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service - Symantec Corporation - D:\Programmi\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - D:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - D:\Programmi\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe

#8 jasonwal

New Member

Authentic Member
11 posts

Posted 10 March 2006 - 07:11 AM

...so i'm kinda at a loss for what to do now. thanks, Jason

#9 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 10 March 2006 - 07:39 AM

First off you have 2 versions of HJT. Delete the v1.99.0 you have and post a new HJT log.

Logfile of HijackThis v1.99.1

Logfile of HijackThis v1.99.0

I'm at my real job now, so it'll be another 8 hrs before I can work your log.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#10 thingol78

New Member

New Member
7 posts

Posted 10 March 2006 - 08:45 AM

is the right logfile?.....i don't know what are the files that i have to delete....

Advertisements

Register to Remove

#11 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 10 March 2006 - 03:28 PM

thingol78 are you also jasonwal?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#12 jasonwal

New Member

Authentic Member
11 posts

Posted 10 March 2006 - 04:17 PM

Thingol is different than jasonwal. Jasonwal's symptoms havnt appeared for a while, but was also running spyweeper at same time. Will observe for a while and update. Jason

#13 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 10 March 2006 - 04:26 PM

Thingol is different than jasonwal.

Jasonwal's symptoms havnt appeared for a while, but was also running spyweeper at same time. Will observe for a while and update.

Jason

We're not going to working 2 seperate logs in the same topic. That gets wat to confusing. We need to finish yours. I'll move Thingol to a new topic.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#14 LDTate

Grand Poobah

Root Admin
57,211 posts

Posted 10 March 2006 - 04:30 PM

Thingol. Your topic is here. Post your replies there.
http://forums.tomcoy...27&t=59603&st=0

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

If you would like to for the help you received.

Proud graduate of TC/WTT Classroom

#15 jasonwal

New Member

Authentic Member
11 posts

Posted 10 March 2006 - 05:47 PM

Hi LDTate, I havent seen any recurring symptoms for quite a few hours so i'm happy about that. Not 100% sure that everythings worked out yet. I think when i pulled power because the restart, ctrl-alt-del, didnt work- that was effective enuf as a reboot. Thanks for help, Jason

Body Background

skin color theme