********
12:20 AM: | Start of Session, Sunday, December 11, 2005 |
12:20 AM: Spy Sweeper started
12:20 AM: Sweep initiated using definitions version 582
12:20 AM: Starting Memory Sweep
12:20 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:20 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:20 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:20 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:21 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:21 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:21 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:21 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:22 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:23 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:23 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:23 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:23 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:24 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:25 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: Found Adware: icannnews
12:26 AM: Detected running threat: C:\WINDOWS\SYSTEM32\ehent.dll (ID = 83)
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: Found Adware: adtech
12:26 AM: Detected running threat: C:\WINDOWS\adtech2005.exe (ID = 194580)
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: HKLM\Software\Microsoft\Windows\CurrentVersion\Run || adtech2005 (ID = 0)
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:26 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:27 AM: Detected running threat: C:\WINDOWS\SYSTEM32\k4js0e17eh.dll (ID = 83)
12:27 AM: Found Adware: quicklink search toolbar
12:27 AM: Detected running threat: C:\WINDOWS\SYSTEM32\pgws.exe (ID = 200314)
12:27 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:27 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:27 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:27 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:28 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:29 AM: Found Adware: targetsaver
12:29 AM: Detected running threat: C:\Program Files\Common Files\ifuo\ifuom.exe (ID = 195131)
12:29 AM: HKU\S-1-5-21-156640315-2731309904-3410288154-1003\Software\Microsoft\Windows\CurrentVersion\Run || ifuo (ID = 0)
12:29 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:29 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: Detected running threat: C:\Program Files\Common Files\ifuo\ifuoa.exe (ID = 195128)
12:30 AM: Detected running threat: C:\Program Files\Common Files\ifuo\ifuod\ifuoc.dll (ID = 195129)
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:30 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: Detected running threat: C:\Program Files\QL\qlink32.dll (ID = 200308)
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:31 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:32 AM: Memory Sweep Complete, Elapsed Time: 00:11:18
12:32 AM: Starting Registry Sweep
12:32 AM: Found Adware: altnet
12:32 AM: HKCR\clsid\{3646c2bd-3554-49ca-8125-44deefb881de}\ (1 subtraces) (ID = 103462)
12:32 AM: Found Adware: apropos
12:32 AM: HKLM\software\aprps\ (2 subtraces) (ID = 103741)
12:32 AM: Found Adware: blazefind
12:32 AM: HKLM\software\microsoft\windows\currentversion\run\ || mswspl (ID = 104532)
12:32 AM: Found Adware: comet cursor
12:32 AM: HKCR\appid\dmserver.exe\ (1 subtraces) (ID = 106303)
12:32 AM: HKCR\appid\{bac984c9-78c8-4105-9e97-1675a4052686}\ (1 subtraces) (ID = 106304)
12:32 AM: HKCR\interface\{4a0f42b7-a61b-4131-bf41-bf05a2635bfd}\ (8 subtraces) (ID = 106455)
12:32 AM: HKCR\interface\{9dbdd71c-0a7f-48ac-9ffa-e102b3750b9d}\ (8 subtraces) (ID = 106461)
12:32 AM: HKCR\interface\{c2e56e18-2f04-4ab9-9333-b2db3c350956}\ (8 subtraces) (ID = 106489)
12:32 AM: HKCR\interface\{e9cbbeed-20b6-456c-8589-cf364d9d2370}\ (8 subtraces) (ID = 106503)
12:32 AM: HKCR\interface\{f8c5ea77-7d72-405c-b90a-093655b0f544}\ (8 subtraces) (ID = 106509)
12:32 AM: HKLM\software\classes\appid\dmserver.exe\ (1 subtraces) (ID = 106525)
12:32 AM: HKLM\software\classes\appid\{bac984c9-78c8-4105-9e97-1675a4052686}\ (1 subtraces) (ID = 106526)
12:32 AM: HKLM\software\classes\interface\{4a0f42b7-a61b-4131-bf41-bf05a2635bfd}\ (8 subtraces) (ID = 106636)
12:32 AM: HKLM\software\classes\interface\{9dbdd71c-0a7f-48ac-9ffa-e102b3750b9d}\ (8 subtraces) (ID = 106642)
12:32 AM: HKLM\software\classes\interface\{c2e56e18-2f04-4ab9-9333-b2db3c350956}\ (8 subtraces) (ID = 106667)
12:32 AM: HKLM\software\classes\interface\{e9cbbeed-20b6-456c-8589-cf364d9d2370}\ (8 subtraces) (ID = 106680)
12:32 AM: HKLM\software\classes\interface\{f8c5ea77-7d72-405c-b90a-093655b0f544}\ (8 subtraces) (ID = 106687)
12:32 AM: Found Adware: cws-aboutblank
12:32 AM: HKCR\protocols\filter\text/html\ (2 subtraces) (ID = 114343)
12:32 AM: HKLM\software\classes\protocols\filter\text/html\ (2 subtraces) (ID = 115907)
12:32 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:32 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:32 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:32 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:32 AM: Found Adware: keenvalue/perfectnav
12:32 AM: HKLM\software\perfectnav\ (1 subtraces) (ID = 129516)
12:32 AM: Found Adware: linkmaker
12:32 AM: HKLM\software\classes\typelib\{423550e9-2f83-4678-9929-c1774088b180}\ (9 subtraces) (ID = 129743)
12:32 AM: HKCR\typelib\{423550e9-2f83-4678-9929-c1774088b180}\ (9 subtraces) (ID = 129750)
12:32 AM: Found Adware: odysseus marketing
12:32 AM: HKCR\appid\actsetup.dll\ (1 subtraces) (ID = 136317)
12:32 AM: HKLM\software\classes\appid\actsetup.dll\ (1 subtraces) (ID = 136323)
12:32 AM: Found Adware: purityscan
12:32 AM: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/mediaticketsinstaller.ocx\ (2 subtraces) (ID = 137986)
12:32 AM: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\mediaticketsinstaller.ocx (ID = 139077)
12:32 AM: Found Adware: elitemediagroup-mediamotor
12:32 AM: HKLM\software\microsoft\code store database\distribution units\{e0ce16cb-741c-4b24-8d04-a817856e07f4}\ (12 subtraces) (ID = 140141)
12:32 AM: Found Adware: screensavers
12:32 AM: HKCR\clsid\{722d2939-a14a-41a9-9eac-ab8f4e295819}\ (14 subtraces) (ID = 140550)
12:32 AM: HKCR\clsid\{88d758a3-d33b-45fd-91e3-67749b4057fa}\ (14 subtraces) (ID = 140551)
12:32 AM: HKCR\interface\{760aca60-79c3-4875-9d19-b14a5b3fea77}\ (8 subtraces) (ID = 140552)
12:32 AM: HKCR\interface\{883ea659-ed80-46f9-9ed2-83327f67789f}\ (8 subtraces) (ID = 140553)
12:32 AM: HKCR\interface\{b64c73d7-459e-4816-91f9-1348f8e36984}\ (8 subtraces) (ID = 140554)
12:32 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:32 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:32 AM: HKLM\software\classes\clsid\{722d2939-a14a-41a9-9eac-ab8f4e295819}\ (14 subtraces) (ID = 140555)
12:32 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:32 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:32 AM: HKLM\software\classes\clsid\{88d758a3-d33b-45fd-91e3-67749b4057fa}\ (14 subtraces) (ID = 140556)
12:32 AM: HKLM\software\classes\interface\{760aca60-79c3-4875-9d19-b14a5b3fea77}\ (8 subtraces) (ID = 140557)
12:32 AM: HKLM\software\classes\interface\{883ea659-ed80-46f9-9ed2-83327f67789f}\ (8 subtraces) (ID = 140558)
12:32 AM: HKLM\software\classes\interface\{b64c73d7-459e-4816-91f9-1348f8e36984}\ (8 subtraces) (ID = 140559)
12:32 AM: HKLM\software\classes\screensaversinstaller.installer.1\ (3 subtraces) (ID = 140560)
12:32 AM: HKLM\software\classes\screensaversinstaller.installer\ (5 subtraces) (ID = 140561)
12:32 AM: HKLM\software\classes\screensaversinstaller.sinstaller.1\ (3 subtraces) (ID = 140562)
12:32 AM: HKLM\software\classes\screensaversinstaller.sinstaller.1\clsid\ (1 subtraces) (ID = 140563)
12:32 AM: HKLM\software\classes\screensaversinstaller.sinstaller\ (5 subtraces) (ID = 140564)
12:32 AM: HKLM\software\classes\typelib\{0ab5b0d8-2b74-4c1c-8fa4-e52550b8b45b}\ (9 subtraces) (ID = 140565)
12:32 AM: HKLM\software\microsoft\windows\currentversion\uninstall\screensaversinstaller\ (2 subtraces) (ID = 140568)
12:32 AM: HKLM\software\screensavers.com\ (14 subtraces) (ID = 140569)
12:32 AM: HKCR\screensaversinstaller.installer.1\ (3 subtraces) (ID = 140570)
12:32 AM: HKCR\screensaversinstaller.installer\ (5 subtraces) (ID = 140571)
12:32 AM: HKCR\screensaversinstaller.sinstaller.1\ (3 subtraces) (ID = 140572)
12:32 AM: HKCR\screensaversinstaller.sinstaller.1\clsid\ (1 subtraces) (ID = 140573)
12:32 AM: HKCR\screensaversinstaller.sinstaller\ (5 subtraces) (ID = 140574)
12:32 AM: HKCR\typelib\{0ab5b0d8-2b74-4c1c-8fa4-e52550b8b45b}\ (9 subtraces) (ID = 140575)
12:32 AM: HKLM\software\microsoft\windows\currentversion\uninstall\tsa\ (2 subtraces) (ID = 143607)
12:33 AM: HKCR\clsid\{8b6da27e-7f64-4694-8f8f-dc87ab8c6b22}\ (8 subtraces) (ID = 359437)
12:33 AM: HKLM\software\classes\clsid\{8b6da27e-7f64-4694-8f8f-dc87ab8c6b22}\ (8 subtraces) (ID = 359440)
12:33 AM: HKCR\quicklinks.linktracker.1\ (3 subtraces) (ID = 359448)
12:33 AM: HKCR\quicklinks.linktracker\ (3 subtraces) (ID = 359449)
12:33 AM: HKCR\quicklinks.quicklinksfilter.1\ (3 subtraces) (ID = 359450)
12:33 AM: HKCR\quicklinks.quicklinksfilter\ (3 subtraces) (ID = 359451)
12:33 AM: HKLM\software\classes\quicklinks.linktracker.1\ (3 subtraces) (ID = 359452)
12:33 AM: HKLM\software\classes\quicklinks.linktracker\ (3 subtraces) (ID = 359453)
12:33 AM: HKLM\software\classes\quicklinks.quicklinksfilter.1\ (3 subtraces) (ID = 359454)
12:33 AM: HKLM\software\classes\quicklinks.quicklinksfilter\ (3 subtraces) (ID = 359455)
12:33 AM: HKLM\software\ql\ (3 subtraces) (ID = 359458)
12:33 AM: Found Adware: clientman
12:33 AM: HKCR\appid\urlcli.dll\ (1 subtraces) (ID = 701476)
12:33 AM: HKLM\software\classes\appid\urlcli.dll\ (1 subtraces) (ID = 701492)
12:33 AM: HKCR\clsid\{3551784b-e99a-474f-b782-3ec814442918}\ (10 subtraces) (ID = 727328)
12:33 AM: HKLM\software\classes\clsid\{3551784b-e99a-474f-b782-3ec814442918}\ (10 subtraces) (ID = 727357)
12:33 AM: HKLM\software\microsoft\windows\currentversion\uninstall\quicklinks\ (2 subtraces) (ID = 909558)
12:33 AM: Found Adware: dollarrevenue
12:33 AM: HKLM\software\microsoft\drsmartload\ (1 subtraces) (ID = 916795)
12:33 AM: Found Adware: command
12:33 AM: HKLM\system\currentcontrolset\services\cmdservice\ (10 subtraces) (ID = 958670)
12:33 AM: HKLM\software\microsoft\windows\currentversion\run\ || timessquare (ID = 1004206)
12:33 AM: HKLM\software\microsoft\windows\currentversion\run\ || adtech2005 (ID = 1005415)
12:33 AM: HKLM\system\currentcontrolset\enum\root\legacy_cmdservice\0000\ (6 subtraces) (ID = 1016064)
12:33 AM: HKLM\system\currentcontrolset\enum\root\legacy_cmdservice\ (8 subtraces) (ID = 1016072)
12:33 AM: HKLM\software\microsoft\windows\currentversion\run\ || lspins (ID = 1027202)
12:33 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:33 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:33 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:33 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:33 AM: Found Adware: sidesearch
12:33 AM: HKU\S-1-5-21-156640315-2731309904-3410288154-1003\software\microsoft\internet explorer\extensions\cmdmapping\ || {000007c6-17df-4438-92a4-de5537471ba3} (ID = 530423)
12:33 AM: Registry Sweep Complete, Elapsed Time:00:01:32
12:33 AM: Starting Cookie Sweep
12:33 AM: Found Spy Cookie: about cookie
12:33 AM: owner@about[1].txt (ID = 2037)
12:33 AM: Found Spy Cookie: reunion cookie
12:33 AM:
[email protected][1].txt (ID = 3256)
12:33 AM: Found Spy Cookie: yieldmanager cookie
12:33 AM:
[email protected][2].txt (ID = 3751)
12:33 AM: Found Spy Cookie: adecn cookie
12:33 AM: owner@adecn[2].txt (ID = 2063)
12:33 AM: Found Spy Cookie: adknowledge cookie
12:33 AM: owner@adknowledge[1].txt (ID = 2072)
12:33 AM: Found Spy Cookie: hbmediapro cookie
12:33 AM:
[email protected][2].txt (ID = 2768)
12:33 AM: Found Spy Cookie: specificclick.com cookie
12:33 AM:
[email protected][1].txt (ID = 3400)
12:33 AM: Found Spy Cookie: atwola cookie
12:33 AM:
[email protected][1].txt (ID = 2256)
12:33 AM: Found Spy Cookie: ask cookie
12:33 AM: owner@ask[1].txt (ID = 2245)
12:33 AM: Found Spy Cookie: belnk cookie
12:33 AM:
[email protected][1].txt (ID = 2293)
12:33 AM: owner@atwola[1].txt (ID = 2255)
12:33 AM: Found Spy Cookie: banner cookie
12:33 AM: owner@banner[1].txt (ID = 2276)
12:33 AM: owner@belnk[1].txt (ID = 2292)
12:33 AM:
[email protected][2].txt (ID = 2038)
12:33 AM: Found Spy Cookie: coolsavings cookie
12:33 AM: owner@coolsavings[1].txt (ID = 2465)
12:33 AM: Found Spy Cookie: 360i cookie
12:33 AM:
[email protected][2].txt (ID = 1962)
12:33 AM: Found Spy Cookie: did-it cookie
12:33 AM: owner@did-it[1].txt (ID = 2523)
12:33 AM:
[email protected][1].txt (ID = 2293)
12:33 AM: Found Spy Cookie: 2o7.net cookie
12:33 AM:
[email protected][1].txt (ID = 1958)
12:33 AM: Found Spy Cookie: exitexchange cookie
12:33 AM: owner@exitexchange[1].txt (ID = 2633)
12:33 AM: Found Spy Cookie: go.com cookie
12:33 AM: owner@go[1].txt (ID = 2728)
12:33 AM: Found Spy Cookie: clickandtrack cookie
12:33 AM:
[email protected][1].txt (ID = 2397)
12:33 AM: Found Spy Cookie: howstuffworks cookie
12:33 AM: owner@howstuffworks[1].txt (ID = 2805)
12:33 AM: Found Spy Cookie: infospace cookie
12:33 AM: owner@infospace[2].txt (ID = 2865)
12:33 AM: Found Spy Cookie: mashka cookie
12:33 AM: owner@mashka[1].txt (ID = 2949)
12:33 AM:
[email protected][1].txt (ID = 1958)
12:33 AM: Found Spy Cookie: military cookie
12:33 AM: owner@military[1].txt (ID = 2996)
12:33 AM:
[email protected][1].txt (ID = 1958)
12:33 AM:
[email protected][1].txt (ID = 2866)
12:33 AM: Found Spy Cookie: realmedia cookie
12:33 AM:
[email protected][1].txt (ID = 3236)
12:33 AM: Found Spy Cookie: nextag cookie
12:33 AM: owner@nextag[2].txt (ID = 5014)
12:33 AM:
[email protected][1].txt (ID = 2729)
12:33 AM: owner@reunion[2].txt (ID = 3255)
12:33 AM: Found Spy Cookie: tracking cookie
12:33 AM: owner@tracking[2].txt (ID = 3571)
12:33 AM: owner@tracking[3].txt (ID = 3571)
12:33 AM:
[email protected][1].txt (ID = 3256)
12:33 AM: owner@yieldmanager[1].txt (ID = 3749)
12:33 AM: Cookie Sweep Complete, Elapsed Time: 00:00:07
12:33 AM: Starting File Sweep
12:34 AM: c:\program files\screensavers.com (11 subtraces) (ID = -2147480365)
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: Found Adware: 404search
12:34 AM: c:\program files\404search (1 subtraces) (ID = -2147481533)
12:34 AM: Found Adware: bullguard popup ad
12:34 AM: c:\windows\temp\bullguard (1 subtraces) (ID = -2147476409)
12:34 AM: c:\program files\incredifind (2 subtraces) (ID = -2147480783)
12:34 AM: c:\program files\common files\updater (2 subtraces) (ID = -2147480788)
12:34 AM: c:\program files\lycos\sidesearch (ID = -2147480322)
12:34 AM: c:\program files\perfectnav (1 subtraces) (ID = -2147480782)
12:34 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145731.exe". Access is denied
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:34 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145724.exe". Access is denied
12:34 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145726.exe". Access is denied
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:35 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:36 AM: tsupdate2[1].ini (ID = 193498)
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145733.exe". Access is denied
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146902.exe". Access is denied
12:36 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146745.dll". Access is denied
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146900.exe". Access is denied
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145722.exe". Access is denied
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145725.exe". Access is denied
12:36 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:36 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145736.exe". Access is denied
12:36 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145721.exe". Access is denied
12:37 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145734.exe". Access is denied
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:37 AM: timessquare[1].exe (ID = 194150)
12:37 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145738.dll". Access is denied
12:37 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145737.exe". Access is denied
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:37 AM: a0142280.exe (ID = 193501)
12:37 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145735.exe". Access is denied
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:37 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:38 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145741.exe". Access is denied
12:38 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0146707.exe". Access is denied
12:38 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:38 AM: adtech2005[1].exe (ID = 194580)
12:38 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:38 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:39 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0146729.dll". Access is denied
12:39 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:39 AM: tsupdate2[1].ini (ID = 193498)
12:39 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145746.exe". Access is denied
12:39 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:39 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:39 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145723.exe". Access is denied
12:39 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145732.exe". Access is denied
12:39 AM: Found Adware: dssagent
12:39 AM: a0142164.exe (ID = 59327)
12:40 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146879.exe". Access is denied
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:40 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145727.exe". Access is denied
12:40 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145748.dll". Access is denied
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:40 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:41 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:42 AM: a0145728.exe (ID = 195132)
12:42 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:42 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:43 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:43 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:43 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:43 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: roing18.inf (ID = 74136)
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:44 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:45 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146899.exe". Access is denied
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:46 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:47 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:48 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145729.exe". Access is denied
12:48 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:48 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:49 AM: tsupdate2[2].ini (ID = 193498)
12:49 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:49 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:49 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:49 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:49 AM: Found Adware: tvmedia
12:49 AM: tvmknwrd.dll (ID = 81726)
12:49 AM: Found Adware: look2me
12:49 AM: k4js0e17eh.dll (ID = 159)
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:50 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1262\a0147915.dll". Access is denied
12:50 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146744.dll". Access is denied
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:51 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1263\a0147950.exe". Access is denied
12:52 AM: mvnsl9571.dll (ID = 159)
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:52 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:53 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0145747.dll". Access is denied
12:53 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1263\a0147951.exe". Access is denied
12:53 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:53 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:53 AM: bhackbox.dll (ID = 159)
12:53 AM: a0147995.dll (ID = 159)
12:54 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:54 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:54 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:54 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:56 AM: inst43.exe (ID = 53579)
12:57 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0147856.dll". Access is denied
12:58 AM: wingenerics.dll (ID = 50187)
12:59 AM: swpstart.exe (ID = 74759)
12:59 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1199\a0136121.exe". Access is denied
12:59 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:59 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
12:59 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
12:59 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:00 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:01 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: f60olgd3160.dll (ID = 159)
1:02 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146901.exe". Access is denied
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:02 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:03 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:04 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:04 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1262\a0147925.dll". Access is denied
1:04 AM: uninstall.exe (ID = 200309)
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:05 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0146701.dll". Access is denied
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:05 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:06 AM: stub_113_4_0_4_0.exe (ID = 193995)
1:06 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:06 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:07 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:08 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:08 AM: ir64l5jq1.dll (ID = 159)
1:08 AM: exec.exe (ID = 50118)
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: mqvbvm60(2).dll (ID = 159)
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1260\a0146719.dll". Access is denied
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:09 AM: bulldownload.exe (ID = 52017)
1:10 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:10 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1192\a0133379.exe". Access is denied
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:11 AM: k0nola531d.dll (ID = 159)
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:12 AM: Found Adware: great net downloadware
1:12 AM: webinstall.exe (ID = 59312)
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:12 AM: a0148992.dll (ID = 159)
1:12 AM: ehent.dll (ID = 159)
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:12 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:13 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:13 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:13 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 AM: k0lq0a35ed.dll (ID = 159)
1:14 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
1:14 AM: Warning: Failed to open file "c:\system volume information\_restore{0a438c3b-a487-4c6d-850c-c76cc3327fd0}\rp1261\a0146863.dll". Access is denied
1:14 AM: wfbcheck.dll (ID = 159)
1:14 AM: Warning: