Infection not found

K

Kevin Stowe

********* Spyware Nuker Log File **********
- Version: 3.04.18.16 Build 16
- Definition Database Date: 4/7/2005 03:43:27 PM (9300
entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Default Browser: IExplore (C:\Program Files\Internet
Explorer\iexplore.exe)
- Browser Versions: IE:6.0.2900.2180;
- User ID: S-1-5-21-977234511-3685282460-3489796552-1005
= 04/26/2005 23:16:31 - Definition Database Date:
4/7/2005 03:43:27 PM (9300 entries)

= 04/26/2005 23:16:31 initialized exe engine with 588
signatures
= 04/26/2005 23:16:31 initialized bin engine with 32
signatures
********* Spyware Nuker Log File **********
- Version: 3.04.20.1 Build 1
- Definition Database Date: 5/4/2005 11:05:44 AM (9452
entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Default Browser: IExplore (C:\Program Files\Internet
Explorer\iexplore.exe)
- Browser Versions: IE:6.0.2900.2180;
- User ID: S-1-5-21-977234511-3685282460-3489796552-1005
= 05/15/2005 11:48:38 - Definition Database Date:
5/4/2005 11:05:44 AM (9452 entries)

= 05/15/2005 11:48:38 initialized exe engine with 762
signatures
= 05/15/2005 11:48:38 initialized bin engine with 37
signatures
= 05/15/2005 11:48:46 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 05/15/2005 11:48:48 LSP Scan: "Tcpip" => "Tcpip"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 11:48:48 LSP Scan: "NTDS" => "NTDS"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\System32
\winrnr.dll" => "C:\WINDOWS\System32\winrnr.dll"
= 05/15/2005 11:48:48 LSP Scan: "Network Location
Awareness (NLA) Namespace" => "Network Location Awareness
(NLA) Namespace"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 11:48:48 LSP Scan: "Bluetooth Namespace"
=> "Bluetooth Namespace"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\system32
\wshbth.dll" => "C:\WINDOWS\system32\wshbth.dll"
= 05/15/2005 11:48:48 LSP Scan: "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol" => "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\System32
\nwprovau.dll" => "C:\WINDOWS\System32\nwprovau.dll"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:48 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:48:49 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 11:50:41 process list begins (scan)
= 05/15/2005 11:50:41 000000001372 \SystemRoot\System32
\smss.exe
= 05/15/2005 11:50:41 000000001608 \??\C:\WINDOWS\system32
\winlogon.exe
= 05/15/2005 11:50:41 000000001652 C:\WINDOWS\system32
\services.exe
= 05/15/2005 11:50:41 000000001664 C:\WINDOWS\system32
\lsass.exe
= 05/15/2005 11:50:41 000000001828 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 11:50:41 000000001840 C:\WINDOWS\system32
\svchost.exe
= 05/15/2005 11:50:41 000000000128 C:\WINDOWS\System32
\svchost.exe
= 05/15/2005 11:50:41 000000000956 C:\WINDOWS\system32
\spoolsv.exe
= 05/15/2005 11:50:41 000000001504 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 11:50:41 000000001628 C:\WINDOWS\Explorer.EXE
= 05/15/2005 11:50:41 000000000684 C:\Program
Files\Apoint\Apoint.exe
= 05/15/2005 11:50:41 000000000692 C:\Program Files\ATI
Technologies\ATI Control Panel\atiptaxx.exe
= 05/15/2005 11:50:41 000000000700 C:\WINDOWS\system32
\ICO.EXE
= 05/15/2005 11:50:41 000000000728 C:\WINDOWS\system32
\rundll32.exe
= 05/15/2005 11:50:41 000000000740 C:\Program
Files\Sony\HotKey Utility\HKserv.exe
= 05/15/2005 11:50:41 000000000776 C:\Program
Files\sony\vaio power management\SPMgr.exe
= 05/15/2005 11:50:41 000000000788 C:\Program
Files\Sony\Wireless Switch Setting Utility\Switcher.exe
= 05/15/2005 11:50:41 000000000896 C:\Program
Files\Sony\ISB Utility\ISBMgr.exe
= 05/15/2005 11:50:41 000000001084 C:\Program
Files\Command Software\Command AntiVirus\untray.exe
= 05/15/2005 11:50:41 000000001088 C:\Program
Files\Apoint\Apntex.exe
= 05/15/2005 11:50:41 000000001116 C:\Program
Files\Sony\HotKey Utility\HKWnd.exe
= 05/15/2005 11:50:41 000000001456 C:\Program
Files\Sony\VAIO Media Integrated
Server\Platform\VMConsole.exe
= 05/15/2005 11:50:41 000000001272 C:\Program
Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
= 05/15/2005 11:50:41 000000001540 C:\Program
Files\Sony\VAIO Update 2\VAIOUpdt.exe
= 05/15/2005 11:50:41 000000001496 C:\WINDOWS\ATK0100
\Hcontrol.exe
= 05/15/2005 11:50:41 000000001552 C:\Program Files\Error
Nuker\bin\ErrorNuker.exe
= 05/15/2005 11:50:41 000000001988 C:\Program
Files\Microsoft AntiSpyware\gcasServ.exe
= 05/15/2005 11:50:41 000000002000 C:\Program
Files\NetSwitcher for Windows\NetSwTray.exe
= 05/15/2005 11:50:41 000000000244 C:\Program
Files\Messenger\msmsgs.exe
= 05/15/2005 11:50:41 000000000260 C:\WINDOWS\system32
\ctfmon.exe
= 05/15/2005 11:50:41 000000000288 C:\Program
Files\Motorola\A925 Desktop Suite\ConnMngmntBox.exe
= 05/15/2005 11:50:41 000000000364 C:\Program
Files\Microsoft AntiSpyware\gcasDtServ.exe
= 05/15/2005 11:50:41 000000000532 C:\WINDOWS\system32
\rcomsrv30\rcomsrv.exe
= 05/15/2005 11:50:41 000000001560 C:\WINDOWS\ATK0100
\ATKOSD.exe
= 05/15/2005 11:50:41 000000002008 C:\Program
Files\Intuwave
Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
= 05/15/2005 11:50:41 000000002352 C:\WINDOWS\system32
\r_server.exe
= 05/15/2005 11:50:41 000000002420 C:\Program
Files\Motorola\A925 Desktop Suite\ECTaskScheduler.exe
= 05/15/2005 11:50:41 000000002488 C:\Program
Files\Motorola\A925 Desktop Suite\Elogerr.exe
= 05/15/2005 11:50:41 000000002560 C:\Program
Files\sony\sonicstage mastering studio\audio
filter\SSMSFilter.exe
= 05/15/2005 11:50:41 000000002640 C:\WINDOWS\System32
\snmp.exe
= 05/15/2005 11:50:41 000000002680 C:\Program
Files\sony\VAIO Media Integrated Server\VMISrv.exe
= 05/15/2005 11:50:41 000000002720 C:\Program
Files\WinZip\WZQKPICK.EXE
= 05/15/2005 11:50:41 000000002880 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.exe
= 05/15/2005 11:50:41 000000002884 C:\Program
Files\sony\VAIO Launcher\Launcher.exe
= 05/15/2005 11:50:41 000000002920 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.BIN
= 05/15/2005 11:50:41 000000002976 C:\Program
Files\Motorola\A925 Desktop Suite\BroadcastProxy.exe
= 05/15/2005 11:50:41 000000003012 C:\Program
Files\Motorola\A925 Desktop Suite\SCRFS.exe
= 05/15/2005 11:50:41 000000003132 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
= 05/15/2005 11:50:41 000000003296 C:\WINDOWS\system32
\fxssvc.exe
= 05/15/2005 11:50:41 000000003404 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\SV_Httpd.exe
= 05/15/2005 11:50:41 000000003452 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
= 05/15/2005 11:50:41 000000003520 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\UPnPFramework.exe
= 05/15/2005 11:50:41 000000003608 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzFw.exe
= 05/15/2005 11:50:41 000000000832 C:\Program
Files\Common Files\Sony Shared\VAIO
Entertainment\VzRs\VzRs.exe
= 05/15/2005 11:50:41 000000003772 C:\Program
Files\Command Software\Command AntiVirus\avinitnt.exe
= 05/15/2005 11:50:41 000000000448 C:\Program
Files\Common Files\Command Software\dvpapi.exe
= 05/15/2005 11:50:41 000000003096 C:\Program
Files\Command Software\Command AntiVirus\schscnt.exe
= 05/15/2005 11:50:41 000000002436 C:\Program
Files\Command Software\Command AntiVirus\dvprpt.exe
= 05/15/2005 11:50:41 000000002632 C:\Program
Files\Command Software\Command AntiVirus\avtray.exe
= 05/15/2005 11:50:41 000000002916 C:\Program
Files\Microsoft Office\OFFICE11\EXCEL.EXE
= 05/15/2005 11:50:41 000000002588 C:\Program
Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
= 05/15/2005 11:50:41 000000002120 C:\Program
Files\Microsoft Office\OFFICE11\WINWORD.EXE
= 05/15/2005 11:50:41 000000001820 C:\Program
Files\Internet Explorer\iexplore.exe
= 05/15/2005 11:50:41 000000003560 C:\Program
Files\Spyware Nuker 2004\swn2.exe
= 05/15/2005 11:50:41 process list ends (scan)
= 05/15/2005 11:51:02 Scan result:

622-57240: File: C:\WINDOWS\Downloaded Program
Files\ClientAX.inf

960-55877: Cookie: kevin stowe@247realmedia
[1].txt: gmtv111604

669-33236: Cookie: kevin stowe@2o7[1].txt:
s_vi_bzbx7Bmfehkf

969-55888: Cookie: kevin stowe@adtech[2].txt: CfP

679-1710: Cookie: kevin (e-mail address removed)
[2].txt: 94705381
679-1710: Cookie: kevin stowe@advertising[1].txt:
ACID

978-55897: Cookie: kevin stowe@roiservice[1].txt:
msid930982107098220
978-2354: Cookie: kevin stowe@atdmt[2].txt: AA002

681-33251: Cookie: kevin stowe@atwola[1].txt:
badsrfi

682-33252: Cookie: kevin stowe@bfast[2].txt: UID

819-49880: Cookie: kevin stowe@bluestreak[1].txt:
id

966-55884: Cookie: kevin (e-mail address removed)[2].txt:
dMS

539-53426: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46499: Registry Value:
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46496: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

446-2378: Cookie: kevin stowe@doubleclick[1].txt:
id

846-53116: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Tech & gadgets.lnk
846-53115: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\PC Cleaner.lnk
846-53114: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Anti-Virus.lnk
846-53113: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Adware Remover.lnk
846-53112: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Sleepwear.lnk
846-53111: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Perfume.lnk
846-53110: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Online Store.lnk
846-53109: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Music.lnk
846-53108: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Movies.lnk
846-53107: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Jewelry.lnk
846-53106: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Golf.lnk
846-53105: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Flowers.lnk
846-53104: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Discount.lnk
846-53103: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Computers.lnk
846-53102: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Books.lnk
846-53101: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Auctions.lnk
846-53100: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Insurance.lnk
846-53099: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Home.lnk
846-53098: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a job.lnk
846-53097: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a Degree.lnk
846-53096: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Dating.lnk

979-55898: Cookie: kevin stowe@serving-sys
[1].txt: CampaignOnPublisherInfo

441-2262: Cookie: kevin (e-mail address removed)
[2].txt: VISID

670-33239: Cookie: kevin (e-mail address removed)
[1].txt: HumanClickID
670-33239: Cookie: kevin
(e-mail address removed)[2].txt: HumanClickID
670-33238: Cookie: kevin (e-mail address removed)
[2].txt: HumanClickID
670-33239: Cookie: kevin stowe@76560009[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@29105253[1].txt:
HumanClickKEY
670-33238: Cookie: kevin stowe@28781733[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@26633198[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@2608941[1].txt:
HumanClickKEY

973-55892: Cookie: kevin stowe@insightexpressai
[2].txt: IXAICampaignCounter191

635-18914: Cookie: kevin stowe@lycos[1].txt: lubid
635-18914: Cookie: kevin (e-mail address removed)[1].txt:
lubid2

448-2383: Cookie: kevin stowe@mediaplex[2].txt:
svid

457-55663: Cookie: kevin (e-mail address removed)[2].txt:
USER

1005-56787: Cookie: kevin stowe@e-
2dj6wjnyohc5kbp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Dx0Cx2Ax0Cx3Cx3Bx0C0fx0C8x0C1x23x24x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyemczacp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Ex0C0x0Cx292x0C0x23x0Cx22x2A79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyelajedo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Fx0C2x0C96x0C7x3C4x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyencpelp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A6x3Dx0C0x236x0Cx3Fx23x0Cx22x0Cx2479ex2Bjx3Dx0
Cx2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyajdjgko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A29x0C7x0C9x0C4x0C8x3C4x2679ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyahczgco.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
8x0Bx2D5x3Cx0B7x0Bx2Ex0B3x0B7x3Bx0B5x2D0x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjliohazgkq.stats.esomniture[1].txt:
s_vi_0xxx3Bx7Bx0Ax2Cxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0Ax3F9x0Ax3Cx0Ax3Ax3Dx0A4x0Ax2Fx0A2x0Ax3Ex24x0A4g1x3Fcx2Dl
x3Bx0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wjlieldzebo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx3A6x3Fx0C7x0Cx296x0C1x3Cx0Cx22x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjl4qhd5kdo.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Dex209x0E5dx0Ex3Ax0E5x3E6x285x3Bgx29hx3Fx0Ex
28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wjkoeocpcko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3C6x3Cx0C0x23x0C0x0C8x3Cx0C2x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjkococzkep.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3Cx0C0x3Cx0C0x0Cx29x0C8x0C6x234x2679ex2Bjx3Dx0Cx2Ax7
Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ugdzwko.stats.esomniture[2].txt:
s_vi_1yx3Ax0Bx2Dzyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
x3Fx60x213x0B0x0Bx2Ex0Bx23x0Bx3Fx3Bx0Bx25ye0x3Ebx2Cmx3Ax0B
x2Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ehd5kfo.stats.esomniture[1].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Ae49x0E5dx0Ex3Ax0E7x3Ex26c5x3Bgx29hx3Fx0Ex28
x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfmyqhdzwcq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx2Dx25x3Cx0B0x0Bx2Ex0Bx23x0B7x25x0B5x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfmiwjcjgdo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx3Dx0Bx23x3Ex0B7x0Bx3Ex0B3x0B0x3Bx23x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wflyulc5wlp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx2Ax26x3Fx0C0fx0Cx24x0Cx3Fx234x7Eb79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfloepcjkfo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B28x
3B1x24x0B7x0Bx3Ex0Bx3Fx0B2x3Bx0Bx25x0Bx270x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfliolazebp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx3Ax0Cx3Cx3Fx0C2x0Cx296x0C1x23x24e79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkywldjieo.stats.esomniture[2].txt:
s_vi_0xxx3Bx0Ax2Cx7Bxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0A3x3Ex0Ax2Cx0Ax229x0A1x0Ax3Fx3Cx0A0x3Ax0A4xxd1x3Fcx2Dlx3B
x0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wfkyelazwfq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx2D18x0B5x0Bx2Ex0Bx23x0B2x25x0B5x210x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfkoupcpkdp.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0E7x3Ax3Ex24x21x0E2x21x0Ex3Ax0E5x21x26x3C5x3Bgx29hx
3Fx0Ex28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfkocic5skp.stats.esomniture[2].txt:
s_vi_7x7Fx3Cx7Cx0Dx2Bx7Fcx21x0Dx3Ax0Dx28x60x0Dx22x20x0D0x3
F68dx25x0Dx24x3Cx0Dx2Bx7Fcx21x0D7x0Dx28x60x0Dx22x20x0D3x60
68dx25x0D49x3Dx0D1x3Bx0D1gx0Dx21x0D9x225x2368dx2Akx3Cx0Dx2
Bx7Fcx217x0Dx23x7Fx60x7Fx60
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiqjczwbo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C58x0Cx3Ax229x0C0x0Cx29x0Cx24x0C1x3Cx24e79ex2Bjx3Dx0Cx2A
x7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiagczckp.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx3D53x0B7x0Bx2Ex0B7x0Bx3Fx24x0Bx25x250x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf

630-21885: File: C:\Documents and Settings\Kevin
Stowe\Local Settings\Temp\shortcuts.txt

709-31025: Host: 127.0.0.1 status.qckads.com
709-31024: Host: 127.0.0.1 sds-qckads.com
709-31023: Host: 127.0.0.1 clr-sch.com
709-31022: Host: 127.0.0.1 www.clrsch.com
709-31021: Host: 127.0.0.1 status.clrsch.com
709-31020: Host: 127.0.0.1 sds.clrsch.com
709-31019: Host: 127.0.0.1 r1.clrsch.com
709-31018: Host: 127.0.0.1 clear-search.com
709-31017: Host: 127.0.0.1 code.ignphrases.com
709-31016: Host: 127.0.0.1 www.igetnet.com

= 05/15/2005 12:17:36 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 05/15/2005 12:17:37 LSP Scan: "Tcpip" => "Tcpip"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "NTDS" => "NTDS"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\System32
\winrnr.dll" => "C:\WINDOWS\System32\winrnr.dll"
= 05/15/2005 12:17:37 LSP Scan: "Network Location
Awareness (NLA) Namespace" => "Network Location Awareness
(NLA) Namespace"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "Bluetooth Namespace"
=> "Bluetooth Namespace"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\wshbth.dll" => "C:\WINDOWS\system32\wshbth.dll"
= 05/15/2005 12:17:37 LSP Scan: "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol" => "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\System32
\nwprovau.dll" => "C:\WINDOWS\System32\nwprovau.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:17:37 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 12:18:50 process list begins (scan)
= 05/15/2005 12:18:50 000000001372 \SystemRoot\System32
\smss.exe
= 05/15/2005 12:18:50 000000001608 \??\C:\WINDOWS\system32
\winlogon.exe
= 05/15/2005 12:18:50 000000001652 C:\WINDOWS\system32
\services.exe
= 05/15/2005 12:18:50 000000001664 C:\WINDOWS\system32
\lsass.exe
= 05/15/2005 12:18:50 000000001828 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 12:18:50 000000001840 C:\WINDOWS\system32
\svchost.exe
= 05/15/2005 12:18:50 000000000128 C:\WINDOWS\System32
\svchost.exe
= 05/15/2005 12:18:50 000000000956 C:\WINDOWS\system32
\spoolsv.exe
= 05/15/2005 12:18:50 000000001504 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 12:18:50 000000001628 C:\WINDOWS\Explorer.EXE
= 05/15/2005 12:18:50 000000000684 C:\Program
Files\Apoint\Apoint.exe
= 05/15/2005 12:18:50 000000000692 C:\Program Files\ATI
Technologies\ATI Control Panel\atiptaxx.exe
= 05/15/2005 12:18:50 000000000700 C:\WINDOWS\system32
\ICO.EXE
= 05/15/2005 12:18:50 000000000728 C:\WINDOWS\system32
\rundll32.exe
= 05/15/2005 12:18:50 000000000740 C:\Program
Files\Sony\HotKey Utility\HKserv.exe
= 05/15/2005 12:18:50 000000000776 C:\Program
Files\sony\vaio power management\SPMgr.exe
= 05/15/2005 12:18:50 000000000788 C:\Program
Files\Sony\Wireless Switch Setting Utility\Switcher.exe
= 05/15/2005 12:18:50 000000000896 C:\Program
Files\Sony\ISB Utility\ISBMgr.exe
= 05/15/2005 12:18:50 000000001084 C:\Program
Files\Command Software\Command AntiVirus\untray.exe
= 05/15/2005 12:18:50 000000001088 C:\Program
Files\Apoint\Apntex.exe
= 05/15/2005 12:18:50 000000001116 C:\Program
Files\Sony\HotKey Utility\HKWnd.exe
= 05/15/2005 12:18:50 000000001456 C:\Program
Files\Sony\VAIO Media Integrated
Server\Platform\VMConsole.exe
= 05/15/2005 12:18:50 000000001272 C:\Program
Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
= 05/15/2005 12:18:50 000000001540 C:\Program
Files\Sony\VAIO Update 2\VAIOUpdt.exe
= 05/15/2005 12:18:50 000000001496 C:\WINDOWS\ATK0100
\Hcontrol.exe
= 05/15/2005 12:18:50 000000001552 C:\Program Files\Error
Nuker\bin\ErrorNuker.exe
= 05/15/2005 12:18:50 000000001988 C:\Program
Files\Microsoft AntiSpyware\gcasServ.exe
= 05/15/2005 12:18:50 000000002000 C:\Program
Files\NetSwitcher for Windows\NetSwTray.exe
= 05/15/2005 12:18:50 000000000244 C:\Program
Files\Messenger\msmsgs.exe
= 05/15/2005 12:18:50 000000000260 C:\WINDOWS\system32
\ctfmon.exe
= 05/15/2005 12:18:50 000000000288 C:\Program
Files\Motorola\A925 Desktop Suite\ConnMngmntBox.exe
= 05/15/2005 12:18:50 000000000364 C:\Program
Files\Microsoft AntiSpyware\gcasDtServ.exe
= 05/15/2005 12:18:50 000000000532 C:\WINDOWS\system32
\rcomsrv30\rcomsrv.exe
= 05/15/2005 12:18:50 000000001560 C:\WINDOWS\ATK0100
\ATKOSD.exe
= 05/15/2005 12:18:50 000000002008 C:\Program
Files\Intuwave
Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
= 05/15/2005 12:18:50 000000002352 C:\WINDOWS\system32
\r_server.exe
= 05/15/2005 12:18:50 000000002420 C:\Program
Files\Motorola\A925 Desktop Suite\ECTaskScheduler.exe
= 05/15/2005 12:18:50 000000002488 C:\Program
Files\Motorola\A925 Desktop Suite\Elogerr.exe
= 05/15/2005 12:18:50 000000002560 C:\Program
Files\sony\sonicstage mastering studio\audio
filter\SSMSFilter.exe
= 05/15/2005 12:18:50 000000002640 C:\WINDOWS\System32
\snmp.exe
= 05/15/2005 12:18:50 000000002680 C:\Program
Files\sony\VAIO Media Integrated Server\VMISrv.exe
= 05/15/2005 12:18:50 000000002720 C:\Program
Files\WinZip\WZQKPICK.EXE
= 05/15/2005 12:18:50 000000002880 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.exe
= 05/15/2005 12:18:50 000000002884 C:\Program
Files\sony\VAIO Launcher\Launcher.exe
= 05/15/2005 12:18:50 000000002920 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.BIN
= 05/15/2005 12:18:50 000000002976 C:\Program
Files\Motorola\A925 Desktop Suite\BroadcastProxy.exe
= 05/15/2005 12:18:50 000000003012 C:\Program
Files\Motorola\A925 Desktop Suite\SCRFS.exe
= 05/15/2005 12:18:50 000000003132 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
= 05/15/2005 12:18:50 000000003296 C:\WINDOWS\system32
\fxssvc.exe
= 05/15/2005 12:18:50 000000003404 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\SV_Httpd.exe
= 05/15/2005 12:18:50 000000003452 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
= 05/15/2005 12:18:50 000000003520 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\UPnPFramework.exe
= 05/15/2005 12:18:50 000000003608 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzFw.exe
= 05/15/2005 12:18:50 000000000832 C:\Program
Files\Common Files\Sony Shared\VAIO
Entertainment\VzRs\VzRs.exe
= 05/15/2005 12:18:50 000000003772 C:\Program
Files\Command Software\Command AntiVirus\avinitnt.exe
= 05/15/2005 12:18:50 000000000448 C:\Program
Files\Common Files\Command Software\dvpapi.exe
= 05/15/2005 12:18:50 000000003096 C:\Program
Files\Command Software\Command AntiVirus\schscnt.exe
= 05/15/2005 12:18:50 000000002436 C:\Program
Files\Command Software\Command AntiVirus\dvprpt.exe
= 05/15/2005 12:18:50 000000002632 C:\Program
Files\Command Software\Command AntiVirus\avtray.exe
= 05/15/2005 12:18:50 000000002916 C:\Program
Files\Microsoft Office\OFFICE11\EXCEL.EXE
= 05/15/2005 12:18:50 000000003560 C:\Program
Files\Spyware Nuker 2004\swn2.exe
= 05/15/2005 12:18:50 process list ends (scan)
= 05/15/2005 12:19:07 Scan result:

622-57240: File: C:\WINDOWS\Downloaded Program
Files\ClientAX.inf

978-55897: Cookie: kevin stowe@roiservice[1].txt:
msid930982107098220

681-33251: Cookie: kevin stowe@atwola[1].txt:
badsrfi

682-33252: Cookie: kevin stowe@bfast[2].txt: UID

683-33253: Cookie: kevin stowe@casalemedia
[1].txt: CMID

966-55884: Cookie: kevin (e-mail address removed)[2].txt:
dMS

539-53426: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46499: Registry Value:
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46496: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

846-53116: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Tech & gadgets.lnk
846-53115: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\PC Cleaner.lnk
846-53114: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Anti-Virus.lnk
846-53113: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Adware Remover.lnk
846-53112: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Sleepwear.lnk
846-53111: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Perfume.lnk
846-53110: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Online Store.lnk
846-53109: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Music.lnk
846-53108: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Movies.lnk
846-53107: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Jewelry.lnk
846-53106: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Golf.lnk
846-53105: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Flowers.lnk
846-53104: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Discount.lnk
846-53103: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Computers.lnk
846-53102: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Books.lnk
846-53101: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Auctions.lnk
846-53100: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Insurance.lnk
846-53099: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Home.lnk
846-53098: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a job.lnk
846-53097: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a Degree.lnk
846-53096: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Dating.lnk

979-55898: Cookie: kevin stowe@serving-sys
[1].txt: CampaignOnPublisherInfo

441-2262: Cookie: kevin (e-mail address removed)
[2].txt: VISID

670-33239: Cookie: kevin (e-mail address removed)
[1].txt: HumanClickID
670-33239: Cookie: kevin stowe@76560009[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@29105253[1].txt:
HumanClickKEY
670-33238: Cookie: kevin stowe@28781733[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@26633198[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@2608941[1].txt:
HumanClickKEY

973-55892: Cookie: kevin stowe@insightexpressai
[2].txt: IXAICampaignCounter191

635-18914: Cookie: kevin stowe@lycos[1].txt: lubid
635-18914: Cookie: kevin (e-mail address removed)[1].txt:
lubid2

457-55663: Cookie: kevin (e-mail address removed)[2].txt:
USER

1005-56787: Cookie: kevin stowe@e-
2dj6wjnyohc5kbp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Dx0Cx2Ax0Cx3Cx3Bx0C0fx0C8x0C1x23x24x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyemczacp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Ex0C0x0Cx292x0C0x23x0Cx22x2A79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyelajedo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Fx0C2x0C96x0C7x3C4x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyencpelp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A6x3Dx0C0x236x0Cx3Fx23x0Cx22x0Cx2479ex2Bjx3Dx0
Cx2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyajdjgko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A29x0C7x0C9x0C4x0C8x3C4x2679ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyahczgco.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
8x0Bx2D5x3Cx0B7x0Bx2Ex0B3x0B7x3Bx0B5x2D0x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjliohazgkq.stats.esomniture[1].txt:
s_vi_0xxx3Bx7Bx0Ax2Cxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0Ax3F9x0Ax3Cx0Ax3Ax3Dx0A4x0Ax2Fx0A2x0Ax3Ex24x0A4g1x3Fcx2Dl
x3Bx0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wjlieldzebo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx3A6x3Fx0C7x0Cx296x0C1x3Cx0Cx22x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjl4qhd5kdo.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Dex209x0E5dx0Ex3Ax0E5x3E6x285x3Bgx29hx3Fx0Ex
28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wjkoeocpcko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3C6x3Cx0C0x23x0C0x0C8x3Cx0C2x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjkococzkep.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3Cx0C0x3Cx0C0x0Cx29x0C8x0C6x234x2679ex2Bjx3Dx0Cx2Ax7
Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ugdzwko.stats.esomniture[2].txt:
s_vi_1yx3Ax0Bx2Dzyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
x3Fx60x213x0B0x0Bx2Ex0Bx23x0Bx3Fx3Bx0Bx25ye0x3Ebx2Cmx3Ax0B
x2Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ehd5kfo.stats.esomniture[1].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Ae49x0E5dx0Ex3Ax0E7x3Ex26c5x3Bgx29hx3Fx0Ex28
x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfmyqhdzwcq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx2Dx25x3Cx0B0x0Bx2Ex0Bx23x0B7x25x0B5x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfmiwjcjgdo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx3Dx0Bx23x3Ex0B7x0Bx3Ex0B3x0B0x3Bx23x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wflyulc5wlp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx2Ax26x3Fx0C0fx0Cx24x0Cx3Fx234x7Eb79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfloepcjkfo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B28x
3B1x24x0B7x0Bx3Ex0Bx3Fx0B2x3Bx0Bx25x0Bx270x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfliolazebp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx3Ax0Cx3Cx3Fx0C2x0Cx296x0C1x23x24e79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkywldjieo.stats.esomniture[2].txt:
s_vi_0xxx3Bx0Ax2Cx7Bxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0A3x3Ex0Ax2Cx0Ax229x0A1x0Ax3Fx3Cx0A0x3Ax0A4xxd1x3Fcx2Dlx3B
x0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wfkyelazwfq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx2D18x0B5x0Bx2Ex0Bx23x0B2x25x0B5x210x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfkoupcpkdp.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0E7x3Ax3Ex24x21x0E2x21x0Ex3Ax0E5x21x26x3C5x3Bgx29hx
3Fx0Ex28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfkocic5skp.stats.esomniture[2].txt:
s_vi_7x7Fx3Cx7Cx0Dx2Bx7Fcx21x0Dx3Ax0Dx28x60x0Dx22x20x0D0x3
F68dx25x0Dx24x3Cx0Dx2Bx7Fcx21x0D7x0Dx28x60x0Dx22x20x0D3x60
68dx25x0D49x3Dx0D1x3Bx0D1gx0Dx21x0D9x225x2368dx2Akx3Cx0Dx2
Bx7Fcx217x0Dx23x7Fx60x7Fx60
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiqjczwbo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C58x0Cx3Ax229x0C0x0Cx29x0Cx24x0C1x3Cx24e79ex2Bjx3Dx0Cx2A
x7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiagczckp.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx3D53x0B7x0Bx2Ex0B7x0Bx3Fx24x0Bx25x250x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf

630-21885: File: C:\Documents and Settings\Kevin
Stowe\Local Settings\Temp\shortcuts.txt

709-31025: Host: 127.0.0.1 status.qckads.com
709-31024: Host: 127.0.0.1 sds-qckads.com
709-31023: Host: 127.0.0.1 clr-sch.com
709-31022: Host: 127.0.0.1 www.clrsch.com
709-31021: Host: 127.0.0.1 status.clrsch.com
709-31020: Host: 127.0.0.1 sds.clrsch.com
709-31019: Host: 127.0.0.1 r1.clrsch.com
709-31018: Host: 127.0.0.1 clear-search.com
709-31017: Host: 127.0.0.1 code.ignphrases.com
709-31016: Host: 127.0.0.1 www.igetnet.com

********* Spyware Nuker Log File **********
- Version: 3.04.20.1 Build 1
- Definition Database Date: 5/4/2005 11:05:44 AM (9452
entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Default Browser: IExplore (C:\Program Files\Internet
Explorer\iexplore.exe)
- Browser Versions: IE:6.0.2900.2180;
- User ID: S-1-5-21-977234511-3685282460-3489796552-1005
= 05/15/2005 17:47:32 - Definition Database Date:
5/4/2005 11:05:44 AM (9452 entries)

= 05/15/2005 17:47:33 initialized exe engine with 762
signatures
= 05/15/2005 17:47:33 initialized bin engine with 37
signatures
= 05/15/2005 17:47:39 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 05/15/2005 17:47:40 LSP Scan: "Tcpip" => "Tcpip"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "NTDS" => "NTDS"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\System32
\winrnr.dll" => "C:\WINDOWS\System32\winrnr.dll"
= 05/15/2005 17:47:40 LSP Scan: "Network Location
Awareness (NLA) Namespace" => "Network Location Awareness
(NLA) Namespace"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\System32
\mswsock.dll" => "C:\WINDOWS\System32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "Bluetooth Namespace"
=> "Bluetooth Namespace"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\wshbth.dll" => "C:\WINDOWS\system32\wshbth.dll"
= 05/15/2005 17:47:40 LSP Scan: "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol" => "NWLink IPX/SPX/NetBIOS
Compatible Transport Protocol"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\System32
\nwprovau.dll" => "C:\WINDOWS\System32\nwprovau.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\rsvpsp.dll" => "C:\WINDOWS\system32\rsvpsp.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:40 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:47:41 LSP Scan: "%SystemRoot%\system32
\mswsock.dll" => "C:\WINDOWS\system32\mswsock.dll"
= 05/15/2005 17:48:56 process list begins (scan)
= 05/15/2005 17:48:56 000000001372 \SystemRoot\System32
\smss.exe
= 05/15/2005 17:48:56 000000001608 \??\C:\WINDOWS\system32
\winlogon.exe
= 05/15/2005 17:48:56 000000001652 C:\WINDOWS\system32
\services.exe
= 05/15/2005 17:48:56 000000001664 C:\WINDOWS\system32
\lsass.exe
= 05/15/2005 17:48:56 000000001828 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 17:48:56 000000001840 C:\WINDOWS\system32
\svchost.exe
= 05/15/2005 17:48:56 000000000128 C:\WINDOWS\System32
\svchost.exe
= 05/15/2005 17:48:56 000000000956 C:\WINDOWS\system32
\spoolsv.exe
= 05/15/2005 17:48:56 000000001504 C:\WINDOWS\system32
\Ati2evxx.exe
= 05/15/2005 17:48:56 000000001628 C:\WINDOWS\Explorer.EXE
= 05/15/2005 17:48:56 000000000684 C:\Program
Files\Apoint\Apoint.exe
= 05/15/2005 17:48:56 000000000692 C:\Program Files\ATI
Technologies\ATI Control Panel\atiptaxx.exe
= 05/15/2005 17:48:56 000000000700 C:\WINDOWS\system32
\ICO.EXE
= 05/15/2005 17:48:56 000000000728 C:\WINDOWS\system32
\rundll32.exe
= 05/15/2005 17:48:56 000000000740 C:\Program
Files\Sony\HotKey Utility\HKserv.exe
= 05/15/2005 17:48:56 000000000776 C:\Program
Files\sony\vaio power management\SPMgr.exe
= 05/15/2005 17:48:56 000000000788 C:\Program
Files\Sony\Wireless Switch Setting Utility\Switcher.exe
= 05/15/2005 17:48:56 000000000896 C:\Program
Files\Sony\ISB Utility\ISBMgr.exe
= 05/15/2005 17:48:56 000000001084 C:\Program
Files\Command Software\Command AntiVirus\untray.exe
= 05/15/2005 17:48:56 000000001088 C:\Program
Files\Apoint\Apntex.exe
= 05/15/2005 17:48:56 000000001116 C:\Program
Files\Sony\HotKey Utility\HKWnd.exe
= 05/15/2005 17:48:56 000000001456 C:\Program
Files\Sony\VAIO Media Integrated
Server\Platform\VMConsole.exe
= 05/15/2005 17:48:56 000000001272 C:\Program
Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
= 05/15/2005 17:48:56 000000001540 C:\Program
Files\Sony\VAIO Update 2\VAIOUpdt.exe
= 05/15/2005 17:48:56 000000001496 C:\WINDOWS\ATK0100
\Hcontrol.exe
= 05/15/2005 17:48:56 000000001552 C:\Program Files\Error
Nuker\bin\ErrorNuker.exe
= 05/15/2005 17:48:56 000000001988 C:\Program
Files\Microsoft AntiSpyware\gcasServ.exe
= 05/15/2005 17:48:56 000000002000 C:\Program
Files\NetSwitcher for Windows\NetSwTray.exe
= 05/15/2005 17:48:56 000000000244 C:\Program
Files\Messenger\msmsgs.exe
= 05/15/2005 17:48:56 000000000260 C:\WINDOWS\system32
\ctfmon.exe
= 05/15/2005 17:48:56 000000000288 C:\Program
Files\Motorola\A925 Desktop Suite\ConnMngmntBox.exe
= 05/15/2005 17:48:56 000000000364 C:\Program
Files\Microsoft AntiSpyware\gcasDtServ.exe
= 05/15/2005 17:48:56 000000000532 C:\WINDOWS\system32
\rcomsrv30\rcomsrv.exe
= 05/15/2005 17:48:56 000000001560 C:\WINDOWS\ATK0100
\ATKOSD.exe
= 05/15/2005 17:48:56 000000002008 C:\Program
Files\Intuwave
Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
= 05/15/2005 17:48:56 000000002352 C:\WINDOWS\system32
\r_server.exe
= 05/15/2005 17:48:56 000000002420 C:\Program
Files\Motorola\A925 Desktop Suite\ECTaskScheduler.exe
= 05/15/2005 17:48:56 000000002488 C:\Program
Files\Motorola\A925 Desktop Suite\Elogerr.exe
= 05/15/2005 17:48:56 000000002560 C:\Program
Files\sony\sonicstage mastering studio\audio
filter\SSMSFilter.exe
= 05/15/2005 17:48:56 000000002640 C:\WINDOWS\System32
\snmp.exe
= 05/15/2005 17:48:56 000000002680 C:\Program
Files\sony\VAIO Media Integrated Server\VMISrv.exe
= 05/15/2005 17:48:56 000000002720 C:\Program
Files\WinZip\WZQKPICK.EXE
= 05/15/2005 17:48:56 000000002880 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.exe
= 05/15/2005 17:48:56 000000002884 C:\Program
Files\sony\VAIO Launcher\Launcher.exe
= 05/15/2005 17:48:56 000000002920 C:\Program
Files\OpenOffice.org 1.9.79\program\soffice.BIN
= 05/15/2005 17:48:56 000000002976 C:\Program
Files\Motorola\A925 Desktop Suite\BroadcastProxy.exe
= 05/15/2005 17:48:56 000000003012 C:\Program
Files\Motorola\A925 Desktop Suite\SCRFS.exe
= 05/15/2005 17:48:56 000000003132 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
= 05/15/2005 17:48:56 000000003296 C:\WINDOWS\system32
\fxssvc.exe
= 05/15/2005 17:48:56 000000003404 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\SV_Httpd.exe
= 05/15/2005 17:48:56 000000003452 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
= 05/15/2005 17:48:56 000000003520 C:\Program
Files\sony\VAIO Media Integrated
Server\Platform\UPnPFramework.exe
= 05/15/2005 17:48:56 000000003608 C:\Program
Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzFw.exe
= 05/15/2005 17:48:56 000000000832 C:\Program
Files\Common Files\Sony Shared\VAIO
Entertainment\VzRs\VzRs.exe
= 05/15/2005 17:48:56 000000003772 C:\Program
Files\Command Software\Command AntiVirus\avinitnt.exe
= 05/15/2005 17:48:56 000000000448 C:\Program
Files\Common Files\Command Software\dvpapi.exe
= 05/15/2005 17:48:56 000000003096 C:\Program
Files\Command Software\Command AntiVirus\schscnt.exe
= 05/15/2005 17:48:57 000000002436 C:\Program
Files\Command Software\Command AntiVirus\dvprpt.exe
= 05/15/2005 17:48:57 000000002632 C:\Program
Files\Command Software\Command AntiVirus\avtray.exe
= 05/15/2005 17:48:57 000000003788 C:\Program
Files\Spyware Nuker 2004\SWN2.exe
= 05/15/2005 17:48:57 process list ends (scan)
= 05/15/2005 17:49:21 Scan result:

622-57240: File: C:\WINDOWS\Downloaded Program
Files\ClientAX.inf

978-55897: Cookie: kevin stowe@roiservice[1].txt:
msid930982107098220

681-33251: Cookie: kevin stowe@atwola[1].txt:
badsrfi

682-33252: Cookie: kevin stowe@bfast[2].txt: UID

683-33253: Cookie: kevin stowe@casalemedia
[1].txt: CMID

966-55884: Cookie: kevin (e-mail address removed)[2].txt:
dMS

539-53426: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46499: Registry Value:
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46496: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

846-53116: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Tech & gadgets.lnk
846-53115: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\PC Cleaner.lnk
846-53114: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Anti-Virus.lnk
846-53113: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Adware Remover.lnk
846-53112: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Sleepwear.lnk
846-53111: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Perfume.lnk
846-53110: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Online Store.lnk
846-53109: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Music.lnk
846-53108: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Movies.lnk
846-53107: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Jewelry.lnk
846-53106: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Golf.lnk
846-53105: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Flowers.lnk
846-53104: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Discount.lnk
846-53103: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Computers.lnk
846-53102: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Books.lnk
846-53101: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Auctions.lnk
846-53100: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Insurance.lnk
846-53099: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Home.lnk
846-53098: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a job.lnk
846-53097: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a Degree.lnk
846-53096: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Dating.lnk

979-55898: Cookie: kevin stowe@serving-sys
[1].txt: CampaignOnPublisherInfo

441-2262: Cookie: kevin (e-mail address removed)
[2].txt: VISID

670-33239: Cookie: kevin (e-mail address removed)
[1].txt: HumanClickID
670-33239: Cookie: kevin stowe@76560009[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@29105253[1].txt:
HumanClickKEY
670-33238: Cookie: kevin stowe@28781733[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@26633198[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@2608941[1].txt:
HumanClickKEY

973-55892: Cookie: kevin stowe@insightexpressai
[2].txt: IXAICampaignCounter191

635-18914: Cookie: kevin stowe@lycos[1].txt: lubid
635-18914: Cookie: kevin (e-mail address removed)[1].txt:
lubid2

457-55663: Cookie: kevin (e-mail address removed)[2].txt:
USER

1005-56787: Cookie: kevin stowe@e-
2dj6wjnyohc5kbp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Dx0Cx2Ax0Cx3Cx3Bx0C0fx0C8x0C1x23x24x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyemczacp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Ex0C0x0Cx292x0C0x23x0Cx22x2A79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyelajedo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Fx0C2x0C96x0C7x3C4x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyencpelp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A6x3Dx0C0x236x0Cx3Fx23x0Cx22x0Cx2479ex2Bjx3Dx0
Cx2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyajdjgko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A29x0C7x0C9x0C4x0C8x3C4x2679ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyahczgco.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
8x0Bx2D5x3Cx0B7x0Bx2Ex0B3x0B7x3Bx0B5x2D0x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjliohazgkq.stats.esomniture[1].txt:
s_vi_0xxx3Bx7Bx0Ax2Cxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0Ax3F9x0Ax3Cx0Ax3Ax3Dx0A4x0Ax2Fx0A2x0Ax3Ex24x0A4g1x3Fcx2Dl
x3Bx0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wjlieldzebo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx3A6x3Fx0C7x0Cx296x0C1x3Cx0Cx22x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjl4qhd5kdo.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Dex209x0E5dx0Ex3Ax0E5x3E6x285x3Bgx29hx3Fx0Ex
28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wjkoeocpcko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3C6x3Cx0C0x23x0C0x0C8x3Cx0C2x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjkococzkep.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3Cx0C0x3Cx0C0x0Cx29x0C8x0C6x234x2679ex2Bjx3Dx0Cx2Ax7
Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ugdzwko.stats.esomniture[2].txt:
s_vi_1yx3Ax0Bx2Dzyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
x3Fx60x213x0B0x0Bx2Ex0Bx23x0Bx3Fx3Bx0Bx25ye0x3Ebx2Cmx3Ax0B
x2Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ehd5kfo.stats.esomniture[1].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Ae49x0E5dx0Ex3Ax0E7x3Ex26c5x3Bgx29hx3Fx0Ex28
x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfmyqhdzwcq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx2Dx25x3Cx0B0x0Bx2Ex0Bx23x0B7x25x0B5x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfmiwjcjgdo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx3Dx0Bx23x3Ex0B7x0Bx3Ex0B3x0B0x3Bx23x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wflyulc5wlp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx2Ax26x3Fx0C0fx0Cx24x0Cx3Fx234x7Eb79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfloepcjkfo.stats.esomniture[1].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B28x
3B1x24x0B7x0Bx3Ex0Bx3Fx0B2x3Bx0Bx25x0Bx270x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfliolazebp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx3Ax0Cx3Cx3Fx0C2x0Cx296x0C1x23x24e79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkywldjieo.stats.esomniture[2].txt:
s_vi_0xxx3Bx0Ax2Cx7Bxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0A3x3Ex0Ax2Cx0Ax229x0A1x0Ax3Fx3Cx0A0x3Ax0A4xxd1x3Fcx2Dlx3B
x0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wfkyelazwfq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx2D18x0B5x0Bx2Ex0Bx23x0B2x25x0B5x210x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfkoupcpkdp.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0E7x3Ax3Ex24x21x0E2x21x0Ex3Ax0E5x21x26x3C5x3Bgx29hx
3Fx0Ex28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfkocic5skp.stats.esomniture[2].txt:
s_vi_7x7Fx3Cx7Cx0Dx2Bx7Fcx21x0Dx3Ax0Dx28x60x0Dx22x20x0D0x3
F68dx25x0Dx24x3Cx0Dx2Bx7Fcx21x0D7x0Dx28x60x0Dx22x20x0D3x60
68dx25x0D49x3Dx0D1x3Bx0D1gx0Dx21x0D9x225x2368dx2Akx3Cx0Dx2
Bx7Fcx217x0Dx23x7Fx60x7Fx60
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiqjczwbo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C58x0Cx3Ax229x0C0x0Cx29x0Cx24x0C1x3Cx24e79ex2Bjx3Dx0Cx2A
x7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiagczckp.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx3D53x0B7x0Bx2Ex0B7x0Bx3Fx24x0Bx25x250x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf

630-21885: File: C:\Documents and Settings\Kevin
Stowe\Local Settings\Temp\shortcuts.txt

709-31025: Host: 127.0.0.1 status.qckads.com
709-31024: Host: 127.0.0.1 sds-qckads.com
709-31023: Host: 127.0.0.1 clr-sch.com
709-31022: Host: 127.0.0.1 www.clrsch.com
709-31021: Host: 127.0.0.1 status.clrsch.com
709-31020: Host: 127.0.0.1 sds.clrsch.com
709-31019: Host: 127.0.0.1 r1.clrsch.com
709-31018: Host: 127.0.0.1 clear-search.com
709-31017: Host: 127.0.0.1 code.ignphrases.com
709-31016: Host: 127.0.0.1 www.igetnet.com

= 05/15/2005 17:51:37 Scan result:

622-57240: File: C:\WINDOWS\Downloaded Program
Files\ClientAX.inf

978-55897: Cookie: kevin stowe@roiservice[1].txt:
msid930982107098220

681-33251: Cookie: kevin stowe@atwola[1].txt:
badsrfi

682-33252: Cookie: kevin stowe@bfast[2].txt: UID

683-33253: Cookie: kevin stowe@casalemedia
[1].txt: CMID

966-55884: Cookie: kevin (e-mail address removed)[2].txt:
dMS

539-53426: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46499: Registry Value:
HKEY_CURRENT_USER\Software\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
539-46496: Registry Value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Main:Search Bar:res://C:\Program Files\Copernic
Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML

846-53116: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Tech & gadgets.lnk
846-53115: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\PC Cleaner.lnk
846-53114: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Anti-Virus.lnk
846-53113: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Technology\Adware Remover.lnk
846-53112: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Sleepwear.lnk
846-53111: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Perfume.lnk
846-53110: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Online Store.lnk
846-53109: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Music.lnk
846-53108: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Movies.lnk
846-53107: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Jewelry.lnk
846-53106: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Golf.lnk
846-53105: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Flowers.lnk
846-53104: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Discount.lnk
846-53103: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Computers.lnk
846-53102: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Books.lnk
846-53101: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Shop\Auctions.lnk
846-53100: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Insurance.lnk
846-53099: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Home.lnk
846-53098: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a job.lnk
846-53097: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Find a Degree.lnk
846-53096: File: C:\Documents and Settings\Kevin
Stowe\Favorites\Living\Dating.lnk

979-55898: Cookie: kevin stowe@serving-sys
[1].txt: CampaignOnPublisherInfo

441-2262: Cookie: kevin (e-mail address removed)
[2].txt: VISID

670-33239: Cookie: kevin (e-mail address removed)
[1].txt: HumanClickID
670-33239: Cookie: kevin stowe@76560009[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@29105253[1].txt:
HumanClickKEY
670-33238: Cookie: kevin stowe@28781733[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@26633198[1].txt:
HumanClickKEY
670-33239: Cookie: kevin stowe@2608941[1].txt:
HumanClickKEY

973-55892: Cookie: kevin stowe@insightexpressai
[2].txt: IXAICampaignCounter191

635-18914: Cookie: kevin stowe@lycos[1].txt: lubid
635-18914: Cookie: kevin (e-mail address removed)[1].txt:
lubid2

457-55663: Cookie: kevin (e-mail address removed)[2].txt:
USER

1005-56787: Cookie: kevin stowe@e-
2dj6wjnyohc5kbp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Dx0Cx2Ax0Cx3Cx3Bx0C0fx0C8x0C1x23x24x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyemczacp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Ex0C0x0Cx292x0C0x23x0Cx22x2A79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjmyelajedo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Ex0Cx2A6x3Fx0C2x0C96x0C7x3C4x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyencpelp.stats.esomniture[1].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A6x3Dx0C0x236x0Cx3Fx23x0Cx22x0Cx2479ex2Bjx3Dx0
Cx2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyajdjgko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx2A29x0C7x0C9x0C4x0C8x3C4x2679ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjlyahczgco.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
8x0Bx2D5x3Cx0B7x0Bx2Ex0B3x0B7x3Bx0B5x2D0x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjliohazgkq.stats.esomniture[1].txt:
s_vi_0xxx3Bx7Bx0Ax2Cxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0Ax3F9x0Ax3Cx0Ax3Ax3Dx0A4x0Ax2Fx0A2x0Ax3Ex24x0A4g1x3Fcx2Dl
x3Bx0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wjlieldzebo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C9x3Fx0Cx3A6x3Fx0C7x0Cx296x0C1x3Cx0Cx22x3E79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjl4qhd5kdo.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Dex209x0E5dx0Ex3Ax0E5x3E6x285x3Bgx29hx3Fx0Ex
28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wjkoeocpcko.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3C6x3Cx0C0x23x0C0x0C8x3Cx0C2x7Eb79ex2Bjx3Dx0Cx2Ax7Eb
x206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjkococzkep.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C98x3Cx0C0x3Cx0C0x0Cx29x0C8x0C6x234x2679ex2Bjx3Dx0Cx2Ax7
Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ugdzwko.stats.esomniture[2].txt:
s_vi_1yx3Ax0Bx2Dzyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0Bx3E
x3Fx60x213x0B0x0Bx2Ex0Bx23x0Bx3Fx3Bx0Bx25ye0x3Ebx2Cmx3Ax0B
x2Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wjk4ehd5kfo.stats.esomniture[1].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0Ex3Bx3Ae49x0E5dx0Ex3Ax0E7x3Ex26c5x3Bgx29hx3Fx0Ex28
x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfmyqhdzwcq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx2Dx25x3Cx0B0x0Bx2Ex0Bx23x0B7x25x0B5x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfmiwjcjgdo.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B29x
0Bx3Dx0Bx23x3Ex0B7x0Bx3Ex0B3x0B0x3Bx23x3D0x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wflyulc5wlp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx0Cx2Ax7Dx7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx2Ax26x3Fx0C0fx0Cx24x0Cx3Fx234x7Eb79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfloepcjkfo.stats.esomniture[1].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B28x
3B1x24x0B7x0Bx3Ex0Bx3Fx0B2x3Bx0Bx25x0Bx270x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfliolazebp.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C5x3Fx0Cx3Ax0Cx3Cx3Fx0C2x0Cx296x0C1x23x24e79ex2Bjx3Dx0Cx
2Ax7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkywldjieo.stats.esomniture[2].txt:
s_vi_0xxx3Bx0Ax2Cx7Bxxdx26x0Ax3Dx0Ax2Fgx0Ax25x27x0A781x3Fc
x22x0Ax23x3Bx0Ax2Cxxdx26x0A0x0Ax2Fgx0Ax25x27x0A4g1x3Fcx22x
0A3x3Ex0Ax2Cx0Ax229x0A1x0Ax3Fx3Cx0A0x3Ax0A4xxd1x3Fcx2Dlx3B
x0Ax2Cxxdx260x0Ax24xxgxxg
1005-56787: Cookie: kevin stowe@e-
2dj6wfkyelazwfq.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx2D18x0B5x0Bx2Ex0Bx23x0B2x25x0B5x210x3Ebx2Cmx3Ax0Bx2Dy
ex271x0Bx25yfyf
1005-56787: Cookie: kevin stowe@e-
2dj6wfkoupcpkdp.stats.esomniture[2].txt:
s_vi_4x7Cx3Fx7Fx0Ex28x7Cx60x22x0E9x0Ex2Bcx0Ex21x23x0E3x3C5
x3Bgx26x0Ex27x3Fx0Ex28x7Cx60x22x0E4x0Ex2Bcx0Ex21x23x0E0c5x
3Bgx26x0E7x3Ax3Ex24x21x0E2x21x0Ex3Ax0E5x21x26x3C5x3Bgx29hx
3Fx0Ex28x7Cx60x224x0Ex20x7Ccx7Cc
1005-56787: Cookie: kevin stowe@e-
2dj6wfkocic5skp.stats.esomniture[2].txt:
s_vi_7x7Fx3Cx7Cx0Dx2Bx7Fcx21x0Dx3Ax0Dx28x60x0Dx22x20x0D0x3
F68dx25x0Dx24x3Cx0Dx2Bx7Fcx21x0D7x0Dx28x60x0Dx22x20x0D3x60
68dx25x0D49x3Dx0D1x3Bx0D1gx0Dx21x0D9x225x2368dx2Akx3Cx0Dx2
Bx7Fcx217x0Dx23x7Fx60x7Fx60
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiqjczwbo.stats.esomniture[2].txt:
s_vi_6x7Ex3Dx7Dx0Cx2Ax7Ebx20x0Cx3Bx0Cx29ax0Cx23x21x0C1x3E7
9ex24x0Cx25x3Dx0Cx2Ax7Ebx20x0C6x0Cx29ax0Cx23x21x0C2a79ex24
x0C58x0Cx3Ax229x0C0x0Cx29x0Cx24x0C1x3Cx24e79ex2Bjx3Dx0Cx2A
x7Ebx206x0Cx22x7Eax7Ea
1005-56787: Cookie: kevin stowe@e-
2dj6wfkiagczckp.stats.esomniture[2].txt:
s_vi_1yx3Azx0Bx2Dyex27x0Bx3Cx0Bx2Efx0Bx24x26x0B690x3Ebx23x
0Bx22x3Ax0Bx2Dyex27x0B1x0Bx2Efx0Bx24x26x0B5f0x3Ebx23x0B2x3
Fx0Bx3D53x0B7x0Bx2Ex0B7x0Bx3Fx24x0Bx25x250x3Ebx2Cmx3Ax0Bx2
Dyex271x0Bx25yfyf

630-21885: File: C:\Documents and Settings\Kevin
Stowe\Local Settings\Temp\shortcuts.txt

709-31025: Host: 127.0.0.1 status.qckads.com
709-31024: Host: 127.0.0.1 sds-qckads.com
709-31023: Host: 127.0.0.1 clr-sch.com
709-31022: Host: 127.0.0.1 www.clrsch.com
709-31021: Host: 127.0.0.1 status.clrsch.com
709-31020: Host: 127.0.0.1 sds.clrsch.com
709-31019: Host: 127.0.0.1 r1.clrsch.com
709-31018: Host: 127.0.0.1 clear-search.com
709-31017: Host: 127.0.0.1 code.ignphrases.com
709-31016: Host: 127.0.0.1 www.igetnet.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Repeatedly attempting to delete same adwares 1
Just need a quick check by a pro. 2
Ad-aware Scan 1
WCG Stats Sunday 31 May 2020 1
WCG Stats Tuesday 11 August 2020 1
WCG Stats Thursday 25 March 2021 2
WCG Stats Monday 08 March 2021 2
WCG Stats Wednesday 17 February 2021 1

Top