Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Trojan-spy.HTML.smitfraud.c infestation-LauraM[RESOLVED]

Started by LauraannM , May 16 2005 07:48 PM

  • This topic is locked This topic is locked

#16
Metallica
Posted 25 May 2005 - 08:46 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Copy the part in bold below into notepad and save it as seeqgone.reg

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{34A44FCF-50E3-63A5-A8DA-7835752B9571}"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{34A44FCF-50E3-63A5-A8DA-7835752B9571}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FABBB49A-4D7B-415B-8250-15C3B854E9FF}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F5869236-978B-4034-83B5-94915156A26C}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XBTB05013.IEToolbar]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XBTB05013.IEToolbar.1]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XBTB05013.XBTB05013]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\XBTB05013.XBTB05013.1]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XBTB05013.XBTB05013IEToolbar]

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{34A44FCF-50E3-63A5-A8DA-7835752B9571}]

[-HKEY_CURRENT_USER\Software\XBTB05013]

Doubleclick that file and confirm you want to merge it with the registry.

Then see if you have a folder:
C:\Program Files\Seeq Toolbar
Delete it if it exists.

Reboot and let me know.

Regards,
  • 0

Advertisements

#17
LauraannM
Posted 25 May 2005 - 11:34 AM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Done. Searched for folder

C:\Program Files\Seeq Toolbar

not found. Computer rebooted, loaded. I opened IE and again typed in www.mcaffee.com, and got the same results.

LauraM
  • 0

#18
Metallica
Posted 25 May 2005 - 11:54 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
The advancedsearchbar you have, is that something you installed or your son?

Oh, and does this happen only in IE?

Can you tell I'm getting desperate? :tazz:

Regards,
  • 0

#19
LauraannM
Posted 25 May 2005 - 04:00 PM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Hi Pieter,

Sorry to not be able to offer much to help your desperation.

I have no idea where the advancedsearchbar came from...it's just "there" so I guess my son could have downloaded it with something else he was looking for.

Do you think that has anything to do with the seeq.com stuff?

I only seem to have the toolbar in IE....however, I get sent to the same page no matter what browser I use when I type in www.mcaffee.com

Does that help?

LauraM :tazz:
  • 0

#20
Metallica
Posted 26 May 2005 - 12:18 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
If you don't know where it came from, let's eliminate that option.

Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

O2 - BHO: PosHelp - {CDEEC43D-3572-4E95-A2A5-F519D29F00C0} - C:\PROGRA~1\ADVANC~1\ADVANC~1.DLL

O3 - Toolbar: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRA~1\ADVANC~1\advancedsearchbar.dll

Then reboot and try again.

Regards,
  • 0

#21
LauraannM
Posted 26 May 2005 - 03:59 PM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
OK, toolbar removed as requested, via Hijack This. Rebooted, and checked IE and Netscape. No change (type in www.mcaffee.com and get sent to the seeq.com page)

Latest log:

Logfile of HijackThis v1.99.1
Scan saved at 5:55:30 PM, on 5/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\THEWEA~1\The Weather Channel.exe
C:\PROGRA~1\THEWEA~1\DWHeartbeatMonitor.exe
C:\Program Files\America Online 9.0d\aoltray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Screenshot Utility\ScreenshotUtility.exe
C:\WINDOWS\system32\msiexec.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Netscape\Netscape\Netscp.exe
C:\Program Files\Hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\mcupdate.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
O4 - HKCU\..\Run: [Desktop Weather 3] C:\PROGRA~1\THEWEA~1\The Weather Channel.exe
O4 - HKCU\..\Run: [DWHeartbeatMonitor] C:\PROGRA~1\THEWEA~1\DWHeartbeatMonitor.exe
O4 - Startup: Screenshot Utility.lnk = C:\Program Files\Screenshot Utility\ScreenshotUtility.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0d\aoltray.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O9 - Extra button: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRA~1\ADVANC~1\advancedsearchbar.dll (file missing)
O9 - Extra 'Tools' menuitem: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRA~1\ADVANC~1\advancedsearchbar.dll (file missing)
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: Bump by pogo - http://playweb02.pog...p-ob-assets.cab
O16 - DPF: Canasta by pogo - http://game1.pogo.co...a-ob-assets.cab
O16 - DPF: First Class Solitaire by pogo - http://game1.pogo.co...2-ob-assets.cab
O16 - DPF: Harvest Mania by pogo - http://game1.pogo.co...t-ob-assets.cab
O16 - DPF: Heavy Cannon by pogo - http://playweb04.pog...n-ob-assets.cab
O16 - DPF: Jigsaw Detective by pogo - http://game1.pogo.co...w-ob-assets.cab
O16 - DPF: Pebble Beach 3 Hole Challenge by pogo - http://game1.pogo.co...e-ob-assets.cab
O16 - DPF: Pirate's Gold by pogo - http://game1.pogo.co...d-ob-assets.cab
O16 - DPF: Pop Fu by pogo - http://game1.pogo.co...u-ob-assets.cab
O16 - DPF: Poppit by pogo - http://game1.pogo.co...2-ob-assets.cab
O16 - DPF: Ricochet by pogo - http://game1.pogo.co...t-ob-assets.cab
O16 - DPF: Tank Hunter by pogo - http://playweb06.pog...k-ob-assets.cab
O16 - DPF: The Sims Pinball by pogo - http://game1.pogo.co...l-ob-assets.cab
O16 - DPF: Tube Runner by pogo - http://playweb14.pog...e-ob-assets.cab
O16 - DPF: Tumble Bees by pogo - http://game1.pogo.co...e-ob-assets.cab
O16 - DPF: Word Whomp Whackdown by pogo - http://game1.pogo.co...n-ob-assets.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - https://objects.aol....83/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1116524475265
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai....23/cpbrkpie.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1....loadManager.ocx
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - https://objects.aol....,20/McGDMgr.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Networks Associates Technology, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

What next?

LauraM :tazz:
  • 0

#22
Metallica
Posted 27 May 2005 - 12:31 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Can you repeat the Agent Ransack search we did, but this time after you cleared all the caches?

We must be missing something, but it'll take some searching.

Regards,
  • 0

#23
LauraannM
Posted 27 May 2005 - 06:31 PM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
C:\Documents and Settings\All Users.WINDOWS\Application Data\AOL\C_America Online 9.0d\storage\cache.db (65536 KB, 5/27/2005 6:46:16 PM)
16725 f 02 429171c2|http://www.geekstogo.com/forum/style_images/1/spacer.gif 02 42b5805b|http://www.geekstogo.com/misc/grid.gif 02 4297b49a|http://www.geekstogo.com/forum/style_images/1/p_offline.gif 02 42b5e15c|http://www.geekstogo.com/misc/Powered_by_Geeks.gif 02 429a310a|http://www.geekstogo.com/forum/style_images/1/p_card.gif 02 42b5cc6e|http://www.geekstogo.com/forum/style_images/1/p_pm.gif 02 42b5cc71|http://www.geekstogo.com/forum/style_images/1/p_up.gif 02 42b5cc71|http://www.geekstogo.com/forum/style_images/1/p_quote.gif 02 42b5cc71|http://www.geekstogo.com/forum/style_images/1/p_mq_add.gif 02 42b5cc71|http://www.geekstogo.com/forum/style_images/1/pip.gif 02 42b2575f|http://www.geekstogo.com/forum/style_images/1/t_qr.gif 02 42b2219e|http://www.geekstogo.com/forum/style_images/1/exp_plus.gif 02 42b601fd|http://www.geekstogo.com/forum/style_images/1/t_options.gif 02 42b5cc77|http://www.geekstogo.com/forum/style_images/1/exp_minus.gif 02 42b60202|http://www.geekstogo.com/forum/style_emoticons/default/smile.gif 02 42a5ca60|http://www.geekstogo.com/forum/jscripts/ipb_global.js 02 428fb23a|http://www.geekstogo.com/images/blue/Left.gif 02 428fb23a|http://www.geekstogo.com/forum/style_images/1/background.gif 02 428fb23a|http://www.geekstogo.com/forum/style_images/1/folder_post_icons/icon14.gif 02 428fb23a|http://www.geekstogo.com/forum/style_images/1/nav.gif 02 428fb23a|http://www.geekstogo.com/forum/style_images/1/icon13.gif 02 428fb23a|http://www.geekstogo.com/misc/hosting.gif 02 428fb23a|http://www.geekstogo.com/forum/jscripts/ipb_forum.js 02 428fb23a|0 ߝߝҞߓϏϏߒ߄ϏϏߏܒ߄Ϗ͏ܒߛ߄Κ͚͚ΚՒ _"h i 6jXY.i\'`F FM ~c2 H#޺F FM ~c2 pїї nhnB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM i sP3PP=" Wh h h- h: D ATh!S3S2y?SESy `\їlї2p C2p ` z'`@CV@Content-Encodinggzip@ @ip8& H&/ `GETAcceptimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*Accept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)X-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.compopupwrapper.jspdomain=mcaffee.com&referrer=&pop=falseX @@[ x i B sP3PP=" !! y,=?p`' - :`3 6 :`p } l ` }`p ` ` CV`dk p6 < |`S W {`épH H ip8& `@Content-Length-1Ok5915Transfer-EncodingchunkedDateSat, 21 May 2005 21:16:06 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Cache-ControlprivateContent-Typeapplication/IDCX-TSD0FE03A6~6204Content-EncodingidcX-IWX1Age0ViaHTTP/1.1 dtc-ab04 (Traffic-Server/5.3.8 [cMsSf ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]X-CTYPEtext/htmlX-BaseDataCenter-0-1116548896X-IMgzip, chunked, vdeltatext/htmlContent-EncodinggzipHTTP/1.1 236 !<Via_AOL_TurboWeb_Cache> OK
16728 ĂѝҜĂѝҜܽĂѝҜܺĂЌЗÌߓݕ׌ߋߐߖ߉ߌ݋†Ӓ†ӌ†ӌ†ӓ†ӓӌӋӌӍߖ׈ь߄߉ߞߌў߉ߞߌўߌӗߞߌӖߞߌӈߞߌӖߞ߂߇ѝ߈љ߈љ߈љЖכіߋѓэ׈ѓїКߋѓї߈ѓїЌÌߓݕ߉ߛ›߉ߛ‘߻ߛќؗߏĉߝ›јߖכќіؚ“ߛќі߄ߛшÌؖߓݕߌݗВљёߛшЈЏќًْىٜԝЌؖߛьכјߛќؗ“ߏߚߛы߂ЌÙߍߌ‘ߙߙ‘ߑߝߙÙߑߌНѕ’ߙݑߑÙߑŒߌќߒߒߙݑߑЙЗߝܝ߄ϏߒɏĂܝߞ߄Ăܝߞŗ߄̺̺ܽĂܝ߄ܹďǏߏĂН܏ߊ߄ߍҌҖߊחЖіќќМΛЖБЙЙЍ _Cp 37O$ V.iQ!Q Ųr=뮱^) Ϟ޺ Ųr=뮱^)37p8**hB BX p_0 height=width="141">> </tr> 5> <t H qx p s CP$07 2:16 Wh 6KhB Q hV ` hp  h ATh̘̘y̘̘2y h `t2pC2p7 ; `G L z'`-javascriptX-TSCDB45 0EContent-EncodinggzipX IWX-Len Hs w `GETAcceptimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*Refererhttp://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=falseAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=lloX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comhome.jspdomain=mcaffee.comX B $ xj B w ch 5 yii?p`( . :`4 7 :`q ~ jj;fp `}`k)kp/ 4 `5 8 `9 < CV`kk p |` {`H H ip8& kkp ```588.Html
16733 Cookie:XCLGFcgversion=1; XCLGFBrowser=zhAACkKMy21KAQAAFxw; s_c1 0 / . , * ( ) + imagContent-Length-1Ok14131Transfer-EncodingchunkedDateSat, 21 May 2005 21:16:07 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Cache-ControlprivateSet-Cookieguid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZ; domain=.Seeq.com; path=/; expires=Sun, 21-May-2006 21:16:07 GMTContent-Typeapplication/IDCX-TSD0FE03A6Content-EncodingidcX-IWX1Age0ViaHTTP/1.1 dtc-ac10 (Traffic-Server/5.3.8 [cMsSf ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]X-CTYPEtext/htmlX-BaseDataCenter-0-1116695996X-IMgzip, chunked, vdeltatext/htmlContent-EncodinggzipHTTP/1.1 236 !<Via_AOL_TurboWeb_Cache> OK
16736 ѳќߜݙќО߃ÞߗݗЈѳќߜݙќО߃ÞߗݗЈѲќߜݙќО߃ÞߗݗЈѲќߜݙќО߃ÞߗݗЈѲќߜݙќО߃ÞߗݗЈѰќߜݙќО߃ÞߗݗЈѰќߜݙќОÝÞߗݗЈѬќߜݙќО߃ÞߗݗЈѬќߜݙќО߃ÞߗݗЈѬќߜݙќО߃ÞߗݗЈѬќߜݙќО߃ÞߗݗЈѫќߜݙќО߃ÞߗݗЈѫќߜݙќОÝÞߗݗЈѫќߜݙќО߃ÞߗݗЈѫќߜݙќО߃ÞߗݗЈѫќߜݙќО߃ÞߗݗЈѨќߜݙќО߃ÞߗݗЈѨќߜݙќОЋЋЋЋЋËËߜߞœߌݒҋȏÞߗݗЈјѐߋݠÖߌݖИјߞݘߝОЋЋËËߜߞݜߌݒҋȏߜ݌߬ќّّÞߗОѕٛŒќߜ݌ОّّăّّÞߗЗѕٛŒќߜ݌ОّّăّّÞߗݗЈѝќЏѕߜ݌ߋݠ߯ОЋЋЋЋЋЋÝÝНЗ VӬ,\dq^E" > & _ % P 9{ .i)M fy yc.KzY ! ޺ yc.KzYP pp nhnB BX p_0 { height=width="141">> </tr> E> <t H qx $ h 6/h h hh& AThUUyUU2yz 3h `T(d(2p C2p ` z'`H` g t `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comcoremetrics/v40/eluminate.jsX-IWX1GET http://www.seeq.com/...40/eluminate.js HTTP/1.1
16738 Referer: http://www.seeq.com/...ain=mcaffee.com
16743 Host: www.seeq.com
16753 {lJ S- wQP|N E _@'\ŲI z{s_wҿ\[ LZ -1RЦ Ɍ @47x) T4HX :QvF8޻ t ?,*h v9* X[y'# | f5}9; ib n?y u. #g3βٸ ,b" `=)fszW$O C .( q B/+v&Z=\(Nu )Qӽ`# )$ 'Uy5" z"k 5+w^?N5ޔ XG/ 2Hx˷x-p + u BC /%T v h ` l ^2P.$PÕ@ v;NTK h P8L1W7 c;(*0?%Wg2Z=6Zԃ <պy nsAg,\I. ~%- )#ۿ4 8)q t ތ<# \ Pj` ^*>ܥ3IQ(`$ ©eܺ @ y!J 5 K= -GR(4~ D7G .p d} Q t/ pҽ{0E m>A"O F} !4 = K` <‚|^W [ {*, APe]j$!Q_ 0ŞrAq >A v] e <Hb E+\`нsmq8̞Gx̺/ U^x]-lN+ZE "n@Va3wD|!! -: 9Nm ^BX 4O9* @ \7 #!AJ˄`ݛ4󏖟 S] t٥i 3S5m] 5s䶓qyAz [q -LTyɼ@P# p >#B6JWF*څ- xk]~ q? f 6PON=7#9˜#ij F±F8T ީL~. qA*NYW.ǁ dt;Т/: 0 nB=ɟ1qB b &x| _Р -u . 69TO z;n؍wF,jK` + 7o* R&i! zj{ < K[g! jltl+ݡ xa+sAI RlԪ RQaO ڜ \RA2 7N*OIU v #a)Ǜ ÐF@c L 2Ƙ BҔ1`>T5p5hp W= xq p a } { dp*v@a> tE2 F "sfP#wUU r͡d\S( B x4wPb'<i\Grь7Xg Di]=xG/ SỷK ߋ!y 7 FA xp?PF U ]๦ +𘱣σ4-; % [@ aUX+ ] (f@HV5|p{Y,lbZ/ L]< :\^=K xOÊ W胼Sjo*0 > "`d~ 9._ B\ ࣐ RX&s \_ !ط8` .'vb5^ . Q< u>G A} plķ $\8Z oC ˔[/ik΁}CV ;\# o@ GM^5Q[*~&R F-ߟI'&=w NI Nղ2C +; K%կy s9tBW U { /wAY*R> jXβSnX~ vJ UY0 C@%f). @2! sЋЋЋЋËߞݍߌݏҍϏߑÞߗݗЈьќߜݓߜߋ߬ОÝÞߗݗЈьќБї _J >1 Hu.i79KA ɜ rJ8 "Ϭ޺A ɜ rJ8>p(( Pj0jB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM $ h 6/h h hh& AThUUyUU2yz 3h `T(d(2p C2p ` z'`H* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comcoremetrics/v40/eluminate.jsX-X w.s J eluminat HTTP/1.1
16760 քšїїĜšёёĂœёלӋĖלל‹քߛ‘߻Ĝ›јĜלӜӜӜәĂĂߜ׏քĉߖӓӖӋӋĖœċזіݬċזіݭęזĖÜѓѓĖքœѓĖ޼քѐœדݐӓѐݜךӜĂߖޓќքўݜӜәēќĂ׏ݐքדїӋӋĂĂߜךքߛ‘߻Ĝ›јļלӜӜәĖޜלփքќݐĜÑĂߜךք‘ļĖלքݪĂļלӜӜәļļĖלќքߏšללļݜ݋ԜُԏĂלѐ֜ѐĖלޜوяˆ֜ќ‘ĚޜքזĖÜќѓĖքќѐ‘Ĝќѐ‘Ă߼יքߛ‘߻ĉߜ›јĖלל΃΃לҜքלӜӜӜәÜĂ߼քלքߜӜӏӜӜĜœًԜĜלٓԜٓԚלٗԚלď‘߰ļ׏ӜĜًԜًԜًԜԜԜٙԜٙԚלٞԜٙԚלيԚלٙԚלُԚ׏яٗԚלٜԚלĖ׏ъُэُъѓԏэѓÜ֜يԚ׏ъٍԚ׏эĖ޼ݜӜԜ֖޼ݜӜּݜ݋ԜُԚ׏яĂx Kȋ{ Nw8؏#h F%׊ nQ ") J 9pVcEa` r X%\UW{u[Sy KZ% fX WPX U V ْ WXl6d7Z9;|= W3PF[{`WPV 84}`f|`aq[ ;7 H `&bhW \vk} Fn{Y`WU Yy[fmuqwinN`VnbՕڅpGhs%j h [ y&Viu oUdh PtKI0)beZ}i< U}× q _ < *N~ -̗.i` _ Y} j #2޺_ Y} j< p˘p˘ ϘϘB BX p_0 } height=width="141">> </tr> E> <t H qx cT$ DSPCOR h 6/h h hh& AThwQ}QyQQ2yz 3h `\їlї2p C2p ` z'` @Ɓ|@428f Ha h u `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comcoremetrics/cmdatatagutils.jsX-IWX1GET http://www.seeq.com/...datatagutils.js HTTP/1.1
16762 Referer: http://www.seeq.com/...ain=mcaffee.com
16767 Host: www.seeq.com
16776 {3ȭ ^,`W\) YB Ʀ#S\2P Z d#r- E \bp4©& S e %V (k pb pbP KOnFRI dǀr|ә Y,O 63u&UVH /u} X $Z_v]O7 ]3lZ *;( NЙ EV ɸE~k~ [ : A o 6 YA=QjwQ?c gA eOdYL> > oq;j;- _ea0Daq*,2t3 Tz R Rc0U㕽 . d <L*D hqm :tazz:.zQjVŖV ց lI«#|N3 U i!kW/ }OUønF75j U 5p H\KA1 w枞}ŀ]k@G&t50Ɓ- ])|Xzy Yg3 3FyLD˔2 ЦVMW*p S2gb u I *8٘S& F ekaih 7N"cyˣR@LVi^@ p:$4*"B!!㱞 :Yиl qpY\ %](<j#T lvcT $ c1CVoМ(6*7 3XT +$Ie( +|h\\ = |+0` % }"<~]D D h½ ;R ;~wg 54 n l i`^ Ji` R Z ̆<]< qE gRb '?m}͑. ڀn YP}L{_ B㒴 d 9 8S(Eu PHD.B p cnHVʹVyh .| W['nQxQ6͠B.ݵ g r ^c:vHF¿ee kuSJ*N;dt y P xz v= S@ R *v /4pm# yۆ 5nd;s^G%#W !5賹g=! d'= Z 뼫A |m(D"wA2<^,_r x rMSIZTFޢ {wc) sȃuWJ_$C&p ಆ }v<S oo1:; U ا!^r]̚K @;SѼWTCr.h b`3kE<ΑP1n I e[ k-qG]QF+= ԌxCPџ[y wB 6 3l9 ]^r + \Vpۦs hNy Nk}2 +BvfuMz#g W xؙr{Z{yNb}4dCDWV =8 2l5 ]BҀ5B,9 .݀L 0 8m $qK/+SX J5!m? )h j x|% G^\iu<P 9 4GYN j= # | mA ! ` <včߜĂ߼בքלքלќٜќ֜ќќ‹ĜќĖלѐ֜ѐבĂ߼בքלքќĉߖ‘ĖלќٜќքœќĖќ‹Ăלѐޖޖќ֜ѐӖĂߜחӑքל̤֜‹ļבĂ߼בքלٜќٜќלќќքߖœќĖќ–ьĖьĖלѐ֜ѐӖќĂ _hG 8;1F a.i_n&ҝA $`޺&ҝA8;pїї nhnB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM cT$ DSPCOR h 6/h h hh& AThwQ}QyQQ2yz 3h `\їlї2p C2p ` z'` @Ɓ|@428f H* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comcoremetrics/cmdatatagutils.jsXX ww. K atatagutjs HTTP/1.1 ept: */* fere x cT0@4 _ DSPCOR `4e4 y,=?p`( . :`4 7 :`q ~ &` ` ` ` }`1Ap ``CV` p |`H H 428f {`&p `MSIE 6.0; AOL 9. ؗ8sE5(|Y nnection: Keep-A pؗ8sE 5M Z CDq=
16781 ߏі׋߄ߏьߋߌߏѓ׌ߏѓ߄ߏݛў߬߫߻߻߱׏і߄ߏьӏѓ׏כߑ߄߉ߛߑ߂߫ߑߙߋߞߓߐߏߞߏߐߞߊߏߋ߾ߖߋߓ߫ߐߗߋߌߜߐߝߊߏߖߋߎߌߒ׊ߖ߄߉ߑߊߖז߄߉ߝߤݛݏݞݍݢ߉ߏ߉ߏߑі߉ߏ߉ߔߑ߾߉ߘߖ׏߄ߑь׏ߑьߏߏь׉ߖߖÏѓߖ߄ߋ׉ߕߕÝѓߕ߄׏іם߄ߙטߋ߄ѓߏߔѕ߂ߖכߑ߄ߑߛבߖ߂ߍߑߖߑכќߑ߄߉ߙߛќёߖיіؒ߄ߛߛќёߛќёߒ߂ĚޜքזĖÜќѓĖքќѐ‘Ĝќѐ‘Ă߼יքߛ‘߻ĉߜ›ј _O p 9 d .it,m#W`s <oQx %I޺m#W`s <oQx pїї nhnB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM CP$07 2:16 h 6/h h hh& AThvQ|QyQQ2yz 3h `\їlї2p C2p ` z'`-javascriptX-TSCDB45 0EContent-EncodinggzipX IWX-Len H* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comcoremetrics/v40/techprops.jssXXH ww.H ` atatagutjs HTTP/1.1 ept: */*fere x CP0@4 O07 2:16 99 yH L `i o :`u x :` &` ` ``+ / }`; I `L O `T W CV`її@їїz'@,@/@ h@ontent-EncodinggzipX IWX-LenDateSat, 21 May 2005 16:46:27 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Last-ModifiedTue, 19 Apr 2005 22:18:58 GMTETag"14b887-39f-426583d2"Accept-RangesbytesContent-Typeapplication/x-javascriptX-TSD0FE03A6~927Content-Length927Age16181ViaHTTP/1.1 dtc-aa09 (Traffic-Server/5.3.8 [cHs f ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]HTTP/1.1 200 !<Via_AOL_TurboWeb_Cache> OK
16784 ߼ӼۭРяў™քߋ‘ߜבߜę׉ߐߖߋք׋‘݃ыіݙ֜ċœל׋ĂߋĂęߜքߑ‘ӝ‘ўӜ‹Ėםݱքѝݑ݂ߖםݲ߶ߺքѝݖ݂ѝщבўĂߜלքߑ‘ӈˆьċѕœĖלѝݑٜщ֙׉ߖĖÑяѓĖ֚؋ёԖ‘яԖآёĖלщքלщלѝݑ݃ѝݖքѕבѕ‹݆ݑĂלѝݖքќ‘ќċќ‘ќĂьˆшċьˆїċяˆќĖ׋яքяˆяĂߙˆљĖיքљ™݆ݑĂߋ‘߻ċы‹јĂ߼ߋߙߏߋߋߋߏߛߜք݈ьќК _ 0K3:}T.iܲsכwͬXjF rqŤk &޺wͬXjF rqŤk pX_8_ `@B BX p_0 height=width="141">> </tr> 5> <t H qx-AIM Q$"14b87- h 6/h h hh& AThI̘O̘y]̘o̘2yz 3h `^_2pMPC2p ` z'`nggzipH* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comimages/seeq.gif/techprXH H H ` agutjs H1.1 */* x52J Q0@4 O"14b87- yH L `i o :`u x :` &` ` ` ` }`- 5 $`Y g `k n `s v CV`S_X_z'@tZwZ h@DateSat, 21 May 2005 16:50:33 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Last-ModifiedTue, 19 Apr 2005 22:18:50 GMTETag"11b8ce-bc8-426583ca"Accept-RangesbytesContent-Typeimage/gifX-TSD0FE03A6~3016X-REPLAYkey=3fa522a8c8b7132732aadaf18ddb1b4bContent-Length3016Age15935ViaHTTP/1.1 dtc-ae09 (Traffic-Server/5.3.8 [cHs f ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]HTTP/1.1 200 !<Via_AOL_TurboWeb_Cache> OK
16787 GIF89aG=硧i߇/..癙ܳߕIC֛ϣœUם333988MMM۲yyy@@@FDC???VSOYYYƬטb`_qqq_\WllkQOJwusLICfff~zeb`dddhhh! ,G =χ # = h۰] \# P p CD 4 3 Nj ,Ab @ LiH c$mV "DI G<kTbI$ ,eEM P ̚ Uv,kvŎ%LPQA .8(͋ "ZXA ^M̛( X# "kXD rpn f" " 0 $!J \e V z=P\ 3u1 Q l;J(hLf DZm4" MG ds>53h/m] WdAiqF q a LSSV! G _ 8v@ @ >5D ?DQBl!i s!:Ȥ`4:H8 X Xt! [\` Ti% > XF L tt!i W6<Q(Pq4@ t VP l b9H t .ڕei`Ȧ[%H^,BO# `\ J@ "j( Z "Akw fOg$ O 돲\=WH { l0 " J B##KkE8 _qVK󢆬 T Q \L A K% : <l ] /W *%\M* "& ڢ $HV: Cp( @ `bH7 wSkXX 2s5 ڞ <[sB ]4 \ bƣ udP`ThK*5k s׈m hvUF A C`ӅЃ.k S1u^ B D>y l_6FS @ B@*8 ܙ> ~H6b፴sf" bq8k -۹ X @M7y ; քB0l! \pJmcߡL> ?=^"F >8 ?֝ &% cX@ $9 `` ?{7] 2؛#.p, 2 .C$S "X;A*-0 ػ x#W o Fx 1G { # ; F E :4Z 5s QXب)-@ ը3 1R c? p l@3 i 4DrHV RX4+D(`5'@y t co K ( k g 0 ^YB:`e,p9"ۋT ̎B%mZ ="H 1Y 9 i l.p,%װ/> Q/؀ 5 ); AZ%X \G3 $szɌ5x Mp Z-<֕Fe(%Tq, !1>A ^IH vgjkM tA ׁĻJ-G'H[oT ӊ 4% p89p i 4XϹ$ =@ r ) V ZXVM+ m6Tp1 ]W] A >miڄ 6 $ 7ऋ3``8tM{Z zwh 빒|w #` (XoLMP] [ Lp_* # P x-pBݻrt h0Af qsc1 @ d <d 4 A~ 6 ޷ X ت | ܱ A~ 3HAtu < 8~ f; q @qq0; , X9av*g ~ tXY%݀ ^(D ⶀ_ ]D L\ gV @DL > $ p 8Br A|H $ P; > NlL(A i{ 8 1 p-- H ^[ } [ h b`n (@ 8 @ o_ a 9 ; srf` ` Rv 6fRqB|` 4 @ B@ ` { @ 5 oT Cr7 M2[ "d P ) c :7J/ [a n{[Tw=fr\ 5Qnv; -BcP p'W M <|ԭtt ,`<9+ @ >_" 8vBiˀ L oB\ 9p `?ަ ֿ 0?>Nw'` 'pp l\ T 8 &b .f 60lk .kX 4t@C tk& kVZ 1XQ3 P% ,0n@ B8DXFxHJL؄N ;Ѫߖߏߗߒ߉ߞߋ _ X k %}.iB%3]`cA+ ԳZ| L ` ' ޺]`cA+ ԳZ| L `k p hB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM cT$3A0~9Ag h 6/h h hh& AThppypp2yz 3h ` 2p C2p ` z'`ww h@H* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comimages/button.gifechprXH H P H ` agutjs H1.1 */* x w.mc0@4 OUserAge yH L `i o :`u x :` &` ` ``$ `- 1 }`= @ `E H CV`eE32aIlSI'/+u_9g[E2> lVm^_#^L4H!Uail<`fML0T9FLHBak4\Q_E`qi<[slp+,QWt S=".,_E$,&E/e.?@dXLCN*j ?:A!@l1DateSat, 21 May 2005 16:47:31 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Last-ModifiedTue, 19 Apr 2005 22:18:50 GMTETag"11b8c8-16b-426583ca"Accept-RangesbytesContent-Length363Content-Typeimage/gifX-TSD0FE03A6~363Age16117ViaHTTP/1.1 dtc-af09 (Traffic-Server/5.3.8 [cHs f ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]HTTP/1.1 200 !<Via_AOL_TurboWeb_Cache> OK
16792 H* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comimages/search.gifechprXH H O H ` agutjs H1.1 */* xM NA cT0@4 O3A0~9Ag ԘԘ yH L `i o :`u x :` &` ` ``$ `- 1 }`= @ `E H CV` @ z'@ h@DateSat, 21 May 2005 16:47:31 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Last-ModifiedTue, 19 Apr 2005 22:18:59 GMTETag"1cb49a-1ab-426583d3"Accept-RangesbytesContent-Length427Content-Typeimage/gifX-TSD0FE03A6~427Age16117ViaHTTP/1.1 dtc-aa01 (Traffic-Server/5.3.8 [cHs f ]), HTTP/1.1 Turboweb [dtc-td111 8.3.0]HTTP/1.1 200 !<Via_AOL_TurboWeb_Cache> OK
16795 GIF89a@fffpppyyy⣣σ! ,@ Bpͻ n )Py0w U d CG / 7\8эb 0 ˅9p I ^@Ib/ $&, n )J %- iQ k E # Qb #i l =(- lr O G Q Q a-z )I OY I I l յo R> $H V^ O֘ @ #X ?E#mQ K l Gf b @p zx O x,( ` U$, u + XQLB 񭈸4 X `ͱA ;ddhhh! ,G =χ # _' h  efDuE]k.iI ՀbJah )ϝ޺I ՀbJah  pDD pcPcB BX p_0 height=width="141">> </tr> 5> <t H qx-AIM Q$"14b87- h 6/h h hh& ATh͘͘y ΘΘ2yz 3h `DDTD2p C2p ` z'`nggzipH* . : `GETAccept*/*Refererhttp://www.seeq.com/home.jsp?domain=mcaffee.comAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieh2=o; he=llo; guid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comimages/grassroots_new.gifXH H Q agutjs H1.1 */* xM NA View0@4 Oeflae
16807 Host: www.seeq.com
16965 /+GIF89a ! ,D ; ŵȔo = <> d]h X[<fZQL~ac>tvqLV uc &f E 3>lD p0̚T 4\ɲ˗. I̚8sTyӦ R i蹳ѣH M i\JJիXjݵ׫ n hӪ]˶- po#n n˷o TJ:a +N ] <Ȗ `s Ë uLҌM 5; 6Ӎ Q7 1 #ñ. HDa -Z [{m koH j kƮ-u5Ğ]8;; ؍C 0G ( . v@ ywG 0 > lp`Z "l cX 0P Q *@€ AikMH]96|X ( @@x  vWz(A .~P Иpq@x _Z (dQM.i.| / F _JB E:޺ F _JB p((@ hX ݐ 9ݬߐ߫ߨߘߍ H qx \ 6/`hl@C2@I I̔I۔甌ATI=CIVh2It|I<A @t w @|  CV@SS@SSz'@ TT @HGETRefererhttp://www.seeq.com/home.jsp?domain=mcaffee.com.aspAccXH X-PH /Accept-dinggzip, deeUser-Agozil H x U! J N `SS6*ISSITT I!T2TIATMTATITTITT2ITT# I$n)n @̄Ԅ I)) @ @CV@ @&,|@OkX-PLhttp://www.seeq.com/coremetrics/v40/eluminate.js 02 42980d28|http://www.seeq.com/coremetrics/cmdatatagutils.js 02 429029cc|http://www.seeq.com/coremetrics/v40/techprops.js 02 429747e3|http://www.seeq.com/images/seeq.gif 02 42974af8|http://www.seeq.com/images/button.gif 02 429748b2|http://www.seeq.com/images/search.gif 02 429748b0|http://www.seeq.com/images/grassroots_new.gif 02 4297d1b3H 0 ` } xnb mcaf0@4 _h=17WT. pu ͛ _`WH J+ bUP/וǂV-CP;5|td= FE޺ǂV-CP;5|td=Jp8** ((;B;BX ݐ ݬߐ߫ߨߘ5ߍ H qx<( U!$ Wh 6*h! 0 h5 ? hQ ` hm w ATh5c;cyJc\c2y h `LP\P2p뷘C2p ` |` z'`&,|@H' < `GETAcceptimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*Refererhttp://us.mcafee.com/virusInfo/default.aspAccept-Languageen-usX-PageViewwww.us.mcafee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)CookiePassportSignIn=http%3A%2F%2Fus%2Emcafee%2Ecom; PassportSignOut=http%3A%2F%2Fus%2Emcafee%2Ecom; campaignid=10529; langid=1; lUsrCtxSession=%3CUserContext%3E%3CAffID%3E0%3C%2FAffID%3E%3C%2FUserContext%3E%0D%0A; SiteID=1; lBounceURL=http%3A%2F%2Fus%2Emcafee%2Ecom%2FvirusInfo%2Fdefault%2Easp%3F; ASPSESSIONIDSQBCQQSD=AIHPIIOBDBJPEDLGKLJBGOBC; ASPSESSIONIDCARCSQQD=NBJPPLECMDOFMCLCHADDCGPN; ASPSESSIONIDCATATQQC=LMAGKFIAGEEPFAAMIMJENFGGX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostus.mcafee.comX-BaseDataCenter-0-1116428152X-AIMvdelta, inverse, chunked, gzip, deflatehttpus.mcafee.comvirusInfo/default.aspid=description&virus_k=133409.gif 02X www ots_new.02 4297d1b30 o x fo/d BT cAccet-E =7B7 yii?p :``, 8 `? K `h o `jj;opkk;pkk;#pkk;Ipl#l;Hp }`llp `H H h31p ` CV`mm p|`2 6 {`p_ q `>0IjTAA%So@r8bQ$JbSs $h<T)qu
16972 GIF89a ! ,D ; H *\ȰÇ #J mW4H 3jȱǏ C Iɓ(Q ˗0cIsh r2S \ wㆱH1)D) lPirU XUjW¢ BVRJV ap C] _$ 2ADZ̘ "G C >\_h~A3,1 OӨU 䦵װaGRΞ@ -4RONz5+׮_EYk۾ nx"/` #Vxc 'WysgrC. fSgO@ EQ SNE% UݒV\%Xd% Zj uՅvW` V bg _ ޺;bU , [B] QI I:޺, [B] QI pp8 hX ݐ 4ݬߐ߫ߨߘߍ H qx zSifieFri 6*`6HI:KIR^ IrIATII&2Il q @mm2@mmC2@nn@7n<nz'@M&Z&a&e&}@s&&@if ( HGETRefererhttp://us.mcafee.com/default.asp?cid=10529faulXH ionH # nguageen-PageViewwwwmcafee.cccep H x<( *% J N `FbOb6*I{bbIbb IbbIbbATI5c;cIJc\c2Ihcpc I @̄Ԅ I)) @ @CV@ @&,|@OkX-PLhttp://images.mcafee.com/common/dash_horizontal_3x1.gif 02 42b72a86|http://images.mcafee.com/en-us/homepage/hpImage_woman5_364x194.jpg 02 429260fe|http://images.mcafee.com/en-us/homepage/promoText.gif 02 42915054|http://images.mcafee.com/promos/2945_holiday/hpFeaturedTitle_324x34.gif 02 42b5580c|http://images.mcafee.com/common/boxshots/box_mis_89x115.gif 02 42b57b7c|http://images.mcafee.com/common/buttons/backgrounds/btn_red_plus_90x16.gif 02 42b69fba|http://images.mcafee.com/common/buttons/backgrounds/btn_dkGrey_arrowRight_80x16.gif 02 42b5580d|http://images.mcafee.com/common/buttons/backgrounds/btn_dkGrey_arrowRight_70x16.gif 02 42b60c4b|http://images.mcafee.com/common/headers/hdr_mis_nobox_220x35.gif 02 42a4545b|http://images.mcafee.com/en-us/homepage/icn_i_grey_12x12.gif 02 42b5580e 0 ` &` ` ` D`@ D }`O R `S V CV` @ z'@ ` @ll _b D+bU. v$f ao` J:޺$f ao` p0nn8 X ݐ 4ݬߐ߫ߨߘߍ H qxndsl comXty/1 6*`C# $GMTEag" MӗEӗiZӗCӗ6*iӗӗiӗӗ iӗӗiӗӗATiIԗOԗyiԗKԗ2i, ` CV@ӕӕ@͌ ͌ @͌͌HGETRefererhttp://us.mcafee.com/virusInfo/default.aspfaulXH ionH nguageen-PageViewwwwmcafee.cccep / x) )emetics 1 H `tp://www.seeq.com/imAges/seeq.gif 02 42974af |http://www.seeq.com/imAges/button.gif 02 42974 b2|http://www.seeq.com/Images/search.gif 02 429 48b0|http://www.seeq.coM/images/grassroots_new.Gif 02 4297d1b3 @nd@odC@))2@C2@̷з@ݷ㷘|@http://us.mcafee.com/common/scripts/openWindow.js 02 42b41c9d|http://us.mcafee.com/common/scripts/pricePlan.js 02 42b41d9d|http://us.mcafee.com/common/scripts/frameRemoval.js 02 42b3f105|http://us.mcafee.com/common/scripts/validateEmail.js 02 42b2ed9c|http://us.mcafee.com/common/scripts/execute_selection.js 02 42b2ed9e|http://us.mcafee.com/common/scripts/navSelector.js 02 42b3c319|http://us.mcafee.com/common/scripts/virusSearchForm.js 02 42b03b7a|http://us.mcafee.com/common/scripts/externalMapWin.js 02 42b04444|http://us.mcafee.com/common/scripts/siteSelector.js 02 42938687|http://images.mcafee.com/common/heading_curve_12x12.gif 02 42b3d3c5|http://images.mcafee.com/common/buttons/backgrounds/btn_dkGrey_arrowRight_65x16.gif 02 42b1255b|http://images.mcafee.com/common/dash_vertical_1x3.gif 02 42b3f10b|http://images.mcafee.com/en-us/homepage/icn_arrow_green_11x11.gif 02 42b22797|http://images.mcafee.com/common/bullet_risk_medium_7x7.gif 02 42b3f10e|http://images.mcafee.com/common/icons/icn_arrow_black_11x11.gif 02 42b420fe|http://images.mcafee.com/common/buttons/backgrounds/btn_dkGrey_arrowRight_90x16.gif 02 42b2a1f2|http://images.mcafee.com/common/headers/hdr_vs_169x51.gif 02 429fda97|http://www.nai.com/us/js/Sitewise.js 02 42aa0fda|http://images.mcafee.com/common/logo_whiteOnRed_170x75.gif 02 42b20ffb|http://images.mcafee.com/common/tabs/left_both.gif 02 42b1a905|http://images.mcafee.com/common/tabs/right_both.gif 02 42b1a905|http://images.mcafee.com/en-us/homepage/corner_top_left_13x14.gif 02 42b420fd|http://images.mcafee.com/en-us/homepage/callOut-CornerTopRight_11x11.gif 02 42b3d141|http://images.mcafee.com/common/pageTitle_right_10x20.gif 02 42b3d10b|http://images.mcafee.com/common/pageTitle_left_10x20.gif 02 42b3d10b|http://images.mcafee.com/en-us/homepage/callOut-CornerTopLeft_11x11.gif 02 42b420ff|http://images.mcafee.com/en-us/homepage/callOut-CornerBottomRight_11x11.gif 02 42b3d140|http://images.mcafee.com/en-us/homepage/callOut-CornerBottomLeft_11x11.gif 02 42b420ff|http://images.mcafee.com/en-us/homepage/corner_bottom_left_13x14.gif 02 42b3d0e9|http://images.mcafee.com/en-us/homepage/corner_top_right_13x14.gif 02 42b420fc|http://images.mcafee.com/en-us/homepage/corner_bottom_right_13x14.gif 02 42b3d106|http://images.mcafee.com/common/dash_horizontal_1x3.gif 02 42b420ff|http://images.mcafee.com/common/clear.gif 02 42b7303d|http://images.mcafee.com/common/icons/icn_arrow_4x7.gif 02 42b38565|ht
22119 5 !;$ 1QW1*T ,k0* aC Ldr u ٖ+(nRK\B h%!]jeU\f2}D% Hz|Kͯ~ L N w ǵ L Wap+ 7 m<| B q#ٍ 3Cgf5 H qUc" eI )ÄY Ф%yTJà sh cS #)- j,+~ q g2 .z `":cu g|HA ( !: ImFEόJ'u BF TdP)wE |JҿC I{"TOLs-` ?T qQ dIA; DMFK Izx=&( ;<e f > #}3 F Cs N RW<X ^`c B`54 e" P [E4rS _5󆮳oZ hK.}Sx9 M9Ct = Y Oquir`k|.{uZf // t#\݂ v酸.: v~ h@HǙɦ]+0 tb77-: vINZ73xLh D~xr`l~άO f>X/Z ] QB{◗Ӓ F o~ P1Ǽl#*HI Or Rq?3$ ͺ6 z6N N @' wrsæ^18W뎷FǺ xY3bT/ / zm'z)w}vg / t{C5 q4 7 v Leo{d g c l +FbS}+&) Nw2G Q~W :|C.'A G 3 P| fspcf7 dƒ0 DަBi s \uiTuP G { *R _.& p@& &Y( FWtb k`%Tz7v Sv" :ҁVA^d| /UD`Px%8Oyh' }4x@!V/ mx ]R+1 J؊3 1 `6} _ cC'}Oh{Դ 4 "Q{<8F0CŢ hxXS'v{; H_n Wv@5tи ^(wN 0|wX? )s@Pyȏd'!ƀ 9_ mh$ i H) 'z%&6+%В' Wh7 |<pxn3R ^E6 Pj zUyA裈 &vȁ qy &u y ] ` q>TS sC4$ шU^B u`RQy5ghd4 (tbąyRp 0 错 iE C6 Q%PvZ xQ 2 tŘFD-Z8-<pɖ<Ca-0łmHB s؍ @ &KeQl1tw */=Q <X{W!L ys Y I 'YPU! @ % W 5[ g2X %t pPZ) % (EB[Q.5 *^$ !Z#j łar V % ;zѩ 0sGi Jq |>HZ5M {ߛV ۼ޽ s| dG^Go jy[ x.E w}ԇ \# $[W>h@Ihjћ΂IQv|_ |_< ?X^r}=O\;+Kk9(SZ5)#l( E ğDg _d"` i 6jXY.i\'`u2b)IqE d;޺u2b)Iq pPz0z ԗԗrB rBX gQ L5 H qx-Bas -HEA _ h h h h AThD J %h" 2y. 4 yo t `yy2p挴C2p ` |` z'` H&# `GETAccept*/*Accept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieguid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-BaseDataCenter-0-1116548896X-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.compopupwrapper.jspdomain=mcaffee.com&referrer=&pop=false RX wP R P n] r x i pt-E B 4.0 com 3@8@ y$ 5 ?p`' - :`3 6 :`p } l ` }` p ` ` CV`\!c! p6 < |`S W {`!!pH H 1000 `3A%20welcome%20screeN&c2=wel%20%3A%209.0&c3= &c4=776572364&c6=z%B3h%Cd%B0B%05%03%E5%1Ek9%u214K%0C&c7=r%0C_%u2018P% 1%B1%E33%u2020%90%A5%A8B%C6%25&c8=6&c10=4148&c1 =General&c12=aol%3A//43 4%3A851.th_ws_02.282057 5.783786881&c13=authentIcated&c16=english&c17=sMall_business&c18=12&c19 5038&c20=unknown&s=1024H768&c=32&j=1.3&v=Y&k=N&Bw=557&bh=224&ct=modem&h@=N&]
22123 ΏߌĂђээΏߌܼĂѝҝΏߌܹĂыҋΏߌܹĂёҋŏߌϼĂёҝŏߌϼĂїҋΏߌϼĝғΏߌϼďғˏĂћҝϏĂѝҜܹĂѝҜĂѝҜܽĂѝҜܺĂЌЗÌߓݕ׌ߋߐߖ߉ߌ݋†Ӓ†ӌ†ӌ†ӓ†ӓӌӋӌӍߖ׈ь߄߉ߞߌў߉ߞߌўߌӗߞߌӖߞߌӈߞߌӖߞ߂߇ѝ߈љ߈љ߈љЖכіߋѓэ׈ѓїКߋѓї߈ѓїЌÌߓݕ߉ߛ›߉ߛ‘߻ߛќؗߏĉߝ›јߖכќіؚ“ߛќі߄ߛшÌؖߓݕߌݗВљёߛьכјߛќؗ“ߏߚߛы߂ЌÙߍߌ‘ߙߙ‘ߑߝߙÙߑߌНѕ’ߙݑߑÙߑŒќߒߒߙݑߑЙЗ _E 8O$ V.iQ!QHv f-E b޺Hv f-8pyxP ddrB rBX ame O Your SouFor mcafee -ffee - m5ee.c H qx-Bas } $privte, Wh 6KhB Q hV ` hp  h AThY_ym2y %h `xx2pόόC2pP T `` f |`} z'`wODF0FXgUAzAyNDQxNisGATV4D6c H `GETAcceptimage/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, */*Refererhttp://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=falseAccept-Languageen-usX-PageViewwww.mcaffee.com/Accept-Encodinggzip, deflateUser-AgentMozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; SV1; Advanced Searchbar)Cookieguid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZX-IWX1ViaHTTP/1.1 (Velocity/1.0.5 [uScMs f p eN:t cCMp s ])Hostwww.seeq.comX-BaseDataCenter-0-1116695996X-AIMvdelta, inverse, chunked, gzip, deflatehttpwww.seeq.comhome.jspportal_id=1&domain=mcaffee.com X -he n:underl}
22124 .relatedltitle{fo$ orma xM NA in=m B www.caf EE 5 yvv?p`( . :`4 7 :`q ~ JwTw;fp `}`wwp/ 4 `5 8 `9 < CV`Wx^x p |` {`H H xxp `ooteContent-Length-1Ok14526Transfer-EncodingchunkedDateWed, 25 May 2005 12:39:51 GMTServerApacheP3PCP="NOI CURa ADMa OUR NOR BUS PHY ONL UNI PUR COM NAV STA"Cache-ControlprivateSet-Cookieguid=BCBSO88LM3ET1866B4HDM1RZ63UMYYDZ; domain=.Seeq.com; path=/; expires=Thu, 25-May-2006 12:39:51 GMTContent-Typeapplication/IDCX-TSD0FE03A6Content-EncodingidcX-IWX1Age2ViaHTTP/1.1 rtc-aa06 (Traffic-Server/5.3.8 [cMsSf ]), HTTP/1.1 Turboweb [rtc-tc072 8.3.0]X-CTYPEtext/htmlX-BaseDataCenter-0-1116898632X-IMgzip, chunked, vdeltatext/htmlContent-EncodinggzipHTTP/1.1 236 !<Via_AOL_TurboWeb_Cache> OK

C:\Documents and Settings\Owner.LAURAANNM\Application Data\Mozilla\Profiles\default\injbsy59.slt\cookies.txt (12 KB, 5/27/2005 6:46:49 PM)
1 # HTTP Cookie File # http://www.netscape....ookie_spec.html # This is a generated file! Do not edit. # To delete cookies, use the Cookie Manager. .yahoo.com TRUE / FALSE 1271361598 B 62vsqll18hm5u&b=2 .yahoo.com TRUE / FALSE 1271361602 T z=8uSiCB80niCBQwizvf59pd7MjUxBk42TjA2NzcwTw--&a=4EE&sk=DAAjPiCFf.ZzVi&d=c2wBTlRJMkFUa3hPVGN4TURBM09BLS0BYQE0RUUBaWcBQTVOZEJBAW9rAVpXMC0BdGlwAXNPcGNUQQF6egE4dVNpQ0JnV0E-&af=QUFBQ0FDQUQmdHM9MTExNjI4NTg4NCZwcz1fR25ZMVVJcVcuZWV5VGM4LkJTTEZ3LS0- .www.yahoo.com TRUE / FALSE 1149188399 FPB vo0i7vcgi118pj4t .www.yahoo.com TRUE / FALSE 1117246303 CRZY3 t=5 .yahoo.com TRUE / FALSE 1118100285 I ir=eg&in=15513b45&i1=AAAeASAUA8CHCICwCyDjD/ECFfFjFmGAGNGYGdIbJDJ8KNMUMiQBisoxoyo0pApCBJAJSzS0S1S8TKTQTWcWeQBhABqHCqAH5s5v516C6I6P6TCxAMLJLULVLgLhL0L1MGMHMOM1NuDDACkolP .yahoo.com TRUE / FALSE 1117363604 PH phl=3ywcMCciyTBpyDZlK9cb9eKglfDjoOakmlwK8bqDvu0qUZr_Sg-- .yahoo.com TRUE / FALSE 1271361602 Y v=1&n=6bkavbv1ga66t&l=i07_cec/o&p=f1t0vdg3d3000900&jb=30|130|&r=7d&lg=us&intl=us .yahoo.com TRUE / FALSE 1271361602 F a=NasxtDUsvRMFIeSlip2BbqGaXrXaTGse47m_9qYTaysLREPrrOW_RPMvVc02&b=2THh .seeq.com TRUE / FALSE 1148680454 guid FZOM08M683M23RD49L7BR9VREPWTPKG8 www48.seeq.com FALSE / FALSE 1589592769 CoreID6 40091116293571000106896 .revenue.net TRUE / FALSE 1654837540 Train0 .CAAt2OjE6MToxMzk4OToyMDYyNzg6MzA1OjgxOTM3NnABAAI6NDAwMjM3OjExMTcyMzA4NTU6MZABBTE0NDQ1NTotKAYAfHZoAzAwAQcyOTI1ODE3MDoxKjABBDE0NDUzMzqwCQ8wNTgxMzM6LTotOi06LTotOi0RAAA= .pogo.com TRUE / FALSE 1274047221 com.pogo.unid 6312949090107233 .ea.rpts.net TRUE / FALSE 1210975239 id 9f537f7428a6987 .pogo.com TRUE /rooms FALSE 1274047261 com.pogo.roomtabs jigsaw=5: .2o7.net TRUE / FALSE 1274817080 s_vi_lhyfnfjfd [CS]v4|428A69760000191F-A000B8400000001|429628AF[CE] .2o7.net TRUE / FALSE 1274042965 s_vi_jlx7Bjx7Cx7Bx7Fx7Cx7Bx60x7Dnhjx3D [CS]v4|428A5309000028B2-A000BA600000001|428A5309[CE] .2o7.net TRUE / FALSE 1274817080 s_vi_okmfehkfx7Fy [CS]v4|428A69760000191F-A000B8400000001|429628AF[CE] .pogo.com TRUE /home FALSE 1274064086 com.pogo.hp.ls.cfg 0 .pogo.com TRUE /login FALSE 1274047221 com.pogo.site pogo .pogo.com TRUE /login FALSE 1274047240 com.pogo.info 8A682BA1920DADC1F11F74C0646EEEE1906A29557A07429990FBEF92C35ECAA95CFB60706BC4812F www.geekstogo.com FALSE / FALSE 1147801277 pass_hash 002786e0327ed5fe6fed15f6615c7101 www.geekstogo.com FALSE / FALSE 1147801277 member_id 50884 www.geekstogo.com FALSE / FALSE 1148148876 theme_1 1 www.whitepussyblackcocks.com FALSE / FALSE 1117515855 revid 1000 .decideinteractive.com TRUE /n/4842 FALSE 1119503003 %2edecideinteractive%2ecom/%2fn%2f4842/2/e 1116911003/4842/5870/1/0//4/search.yahoo.com/black+and+white+[bleep]/38248094/30300/0/0/0/0/0/1116911003/ct%2c/3238 www.sybian.com FALSE /cgi-bin/ FALSE 1130111998 SiteSponsor Ssp392 www.sybian.com FALSE /cgi-bin/ FALSE 2556057598 SSPLCD 1116997245 www.stallionmen.com FALSE / FALSE 2062988548 CFID 6005006 www.stallionmen.com FALSE / FALSE 2062988548 CFTOKEN 53920980 www.stallionmen.com FALSE / FALSE 2062988548 REF_ID 5759 www.stallionmen.com FALSE / FALSE 2062988548 VISITED 96871 .fastclick.net TRUE / FALSE 1117514484 m2 28420:1:63355:24:1116909687| .fastclick.net TRUE / FALSE 1119501684 vt 947:28420:63355:19401:0:1116909687| .fastclick.net TRUE / FALSE 1179117684 pluto b760079d-633d-4e18-b508-edf277e9f6a4 .centrport.net TRUE / FALSE 1893456000 C4087 67240192 .centrport.net TRUE / FALSE 1893456000 CPID CA-00000000332918475 www.movieerotica.com FALSE / FALSE 1117257163 revid 1000 .paypal.com TRUE / FALSE 1747061698 KHcl0EuY7AKSMgfvHl7J5E7hPtK ztm3fSGQ_fzUDUbT70e_uJ9Kdh2Dn7Se3NqJBCr4r7tzA9ildxEwFN4csKF_1X1vKvFcNWG_btrlG_wW .paypal.com TRUE / FALSE 1132075730 login_email lamcash2003%40yahoo.com .paypal.com TRUE / FALSE 1431701678 cookie_check yes .paypal.com TRUE / FALSE 1124117678 sc_lucky_value 7373F11B www.paypal.com FALSE / FALSE 2062373739 Apache 70.118.83.159.155601116293742289 forums.tomcoyote.org FALSE / FALSE 1148148539 TCforum_read a%3A1%3A%7Bi%3A27%3Bi%3A1116612653%3B%7D web4.realtracker.com FALSE / FALSE 1167605760 RTID %2D17452 .missdaytonabeachteen.com TRUE / FALSE 1148094074 phsViewerID 70.118.83.159.1116558070.30985 .missdaytonabeachteen.com TRUE / FALSE 2051222400 SITESERVER ID=fbf4232931e0934862c07430a79db343 .homestead.com TRUE / FALSE 1148094069 phsViewerID 70.118.83.159.1116558068.1388 .missdaytonausa.com TRUE / FALSE 1148094924 phsViewerID 70.118.83.159.1116558923.445 .kendrawaller.com TRUE / FALSE 1148094623 phsViewerID 70.118.83.159.1116558623.5147 .netscape.com TRUE /ns/ FALSE 1147885092 abtesting 40 .atwola.com TRUE / FALSE 1147885093 badsrfi V0649e14418baed34a428a22a86cbd forum.malwareremoval.com FALSE / FALSE 1148087255 phpbb2mysql_data a%3A0%3A%7B%7D data.coremetrics.com FALSE / FALSE 1589847559 CoreID6 40081116548359000337913 .bankofamerica.com TRUE / FALSE 1431909515 BA_0021 OLB .bankofamerica.com TRUE / FALSE 2137622400 BOA_0020 20050517%3A0%3AN%3A0001A36E%2D516B%2D128A%2D88868349012F4552 www.bankofamerica.com FALSE / FAL

C:\Documents and Settings\Owner.LAURAANNM\Application Data\Mozilla\Profiles\default\injbsy59.slt\history.dat (13 KB, 5/27/2005 6:48:36 PM)
13 =http://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=fal\
14 se)(52A=www.seeq.com)(52F
18 =http://www.seeq.com/bookmark.jsp?domain=mcaffee.com&pop=false&referrer=&p\
20 =http://www.seeq.com/home.jsp?portal_id=1&domain=mcaffee.com)(537

C:\Documents and Settings\Owner.LAURAANNM\Cookies\index.dat (64 KB, 5/27/2005 2:33:00 PM)
0 ] !P`h2 2 Cookie:[email protected]/[email protected][1].txt URL ƁT] ƁT] 2 I`h2 2 Cookie:[email protected]/owner@pizzahut[1].txt URL n] n] !P`h2d 2d Cookie:[email protected]/[email protected][2].txtURL O_ O_ 2"J`h2B# 2B#Cookie:[email protected]/ [email protected][2].txt URL ] ] 2 `h2 2 Cookie:[email protected]/phorders/owner@phorders[1].txtURL O_ O_ 2 U`h2" 2" Cookie:[email protected]/ [email protected][1].txt URL PYm>] @o>] 2 q`h2 2 Cookie:[email protected]/[email protected][2].txtURL k` k` FYrh`h2Xr 2Xr Cookie:[email protected]/ owner@lendingtree[1].txt URL N ] oQ ] F M`h2 2 Cookie:[email protected]/ owner@ask[1].txt URL J] J] 2BM`h2 2 Cookie:[email protected]/[email protected][1].txt URL ~uq` ЌJu8a Fu `h2.x 2.x Cookie:[email protected]/owner@overture[1].txt URL 1] 1] ]`h2 2 Cookie:[email protected]/ [email protected][1].txt URL Pvb9a Pvb9a `h2vT2{v Cookie:[email protected]/owner@about[1].txt URL Pl^ pb < `h2 2 Cookie:[email protected]/loginowner@login[2].txt URL +B?_ +B?_ nq `h2 2 Cookie:[email protected]/[email protected][1].txt URL זPa זPa 6Ԍ `h2Ռ 2Ԍ Cookie:[email protected]/ [email protected][1].txt URL MJ^ k=b P _`h2 2 Cookie:[email protected]/[email protected][1].txtURL @QJ^ 08QJ^ 4 N`h2 2 Cookie:[email protected]/[email protected][1].txtURL P 6a P 6a !n]`h2s 2s Cookie:[email protected]/ owner@ew[2].txt URL Č^ ^ 4ui`h2u 2uCookie:[email protected]/owner@homestead[1].txtURL ^ ^ 5R`h2v 2v Cookie:[email protected]/[email protected][1].txt URL p7a p7a Ft= `h2tù20 Cookie:[email protected]/owner@ebay[2].txt URL ֺ:_ :_ < P `h2 2 Cookie:[email protected]/[email protected][2].txtURL DG?_ DG?_ 2 `h2 2 Cookie:[email protected]/ [email protected][1].txt URL sE_ sE_ 6 Q`h24 24 Cookie:[email protected]/ owner@pbskids[1].txt URL 0jvZA_ 0jvZA_ 2 D `h2 2 Cookie:[email protected]/[email protected][1].txt URL 0 F_ 0 F_ 6x `h2U 2U Cookie:[email protected]/ owner@pbs[2].txt URL |G?_ |G?_ 2 ^`h2 2 Cookie:[email protected]/[email protected][1].txtURL f@_ f@_ < Y `h2 2 Cookie:[email protected]/ [email protected][1].txt URL k=b k=b 4_`h2 2Cookie:[email protected]/owner@seeq[1].txt URL u-i` a} c ;s`h2Fp 2Fp Cookie:[email protected]/[email protected][1].txt URL _;b _;b Fs`h2 2 Cookie:owner@bluestreak.

1 ouCookie:[email protected]/[email protected][1].txt URL e8\8a pza 2Hu`h2u 2u Cookie:[email protected]/pagead/conversion/1072734640/owner@1072734640[1].txt URL #lb P2 b < i`h2 2 Cookie:[email protected]/rating owner@rating[1].txt URL P:UQ8a Dza 2Hu`h2u 2uCookie:[email protected]/pagead/conversion/1071720270/owner@1071720270[1].txtURL Q8a Q8a !r`h2u 2u Cookie:[email protected]/[email protected][2].txtURL 08a 08a !ne`h2u 2u Cookie:[email protected]/ owner@gp[1].txt URL e\8a e\8a ;s`h2u 2uCookie:[email protected]/[email protected][2].txtURL t8a A t8a Zu`h2u 2u Cookie:[email protected]/[email protected][2].txtURL 18a 18a si`h2u 2uCookie:[email protected]/[email protected][1].txtURL `~8a `~8a 4u]`h2u 2u Cookie:[email protected]/ owner@scrippsnetworksprivacy[1].txt URL ? 9a ? 9a 2RvJ`h2Sv 2Sv Cookie:[email protected]/ owner@diynetwork[1].txt URL ɟ8a ̟8a 4u`h2u 2uCookie:[email protected]/ owner@scripps[2].txt URL 8a J 8a !d`h2 v 2 v Cookie:[email protected]/owner@centrport[2].txt URL Ш8a 8a Q( `h2 v 2 v Cookie:[email protected]/owner@insightexpressai[2].txt URL U 9a U 9a 2@v: `h2@v 2@v Cookie:[email protected]/linkowner@link[2].txtURL p{ 9a p{ 9a F&v `h2Tv 2TvCookie:[email protected]/ [email protected][2].txt URL v9a v9a :vP`h2v 2v Cookie:[email protected]/[email protected][1].txt URL @r8Oa p j=b 2+C`h2 2 Cookie:[email protected]/[email protected][1].txt URL b Pyb 4`h2 L2 Cookie:[email protected]/[email protected][2].txt URL iPa iPa Zٌt`h2ٌ 2ٌ Cookie:[email protected]/ owner@roiservice[1].txt URL pPa pPa 4ٌ|`h2ٌ 2ٌCookie:[email protected]/owner@discovercard[1].txtURL @k=b @k=b T( `h2 2 Cookie:[email protected]/ owner@revenue[2].txt

Edited by LauraannM, 27 May 2005 - 06:35 PM.

  • 0

#24
LauraannM
Posted 27 May 2005 - 06:59 PM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
C:\Documents and Settings\Owner.LAURAANNM\Cookies\owner@seeq[1].txt (1 KB, 5/26/2005 5:53:58 PM)
1 guid BCBSO88LM3ET1866B4HDM1RZ63UMYYDZ seeq.com/ 1024 3823836928 29786382 1804575728 29712957 *

C:\Documents and Settings\Owner.LAURAANNM\Cookies\[email protected][1].txt (1 KB, 5/25/2005 1:31:41 PM)
1 he llo www.seeq.com/ 1088 838065280 29712820 2637722176 29712719 *

C:\Documents and Settings\Owner.LAURAANNM\Cookies\[email protected][1].txt (1 KB, 5/21/2005 5:16:07 PM)
1 CoreID6 40081116710168000060547 www48.seeq.com/ 1024 3773799424 30813931 1306041984 29711946 *

C:\Documents and Settings\Owner.LAURAANNM\Local Settings\History\History.IE5\index.dat (512 KB, 5/27/2005 2:33:00 PM)
0 URL { 2b { 2b 2 `h T2 Visited: Owner@http://reservations.uhaul.com/(vrg1uavekpinj5vlp0xa0055)/movingsupplies.aspx?referenceNumber=1015787162@U-Haul Rates & Reservations URL a= b a= b 2p`h P2p Visited: Owner@http://www.myflorida.com<MyFlorida.com - Home Page URL w b w b 2Zm`h 2An Visited: Owner@https://www.abim.org/online/newaddr.aspx URL Sdb Sdb 2`h 2 Visited: Owner@http://www.emove.com/leaving_uhaul.html URL pG2b pG2b 2ͣ`h p2 Visited: Owner@http://reservations.uhaul.com/(cj2xf1bhapvojczlnxbm1k55)/Default.aspx\U-Haul: Equipment rates and reservationsURL pUs;b pUs;b 2`h 2 Visited: Owner@http://aolsvc.video.aol.com/pre90Redir.adp?x=1&_aolform=w742.h400.R URL Йrwb Йrwb 2`h \2 Visited: Owner@http://www.uhaul.com/finder/map.aspx?lat=29.2917&long=-81.1148&trk=1&trl=0&stg=0&rpc=0&htc=0&bxs=0&prp=0&cpc=0&record=1&dist=0 HU-Haul Location Finder: Results URL ` hxb ` hxb 2`h L2 Visited: Owner@http://www.uhaul.com/finder8U-Haul Location Finder URL Аb Аb 2`h 2 Visited: Owner@http://reservations.uhaul.comURL `A b `A b 2 `h X2 Visited: Owner@https://reservations.uhaul.com/(h143ocmdygrmtbeddvzkjp23)/checkout.aspx?referenceNumber=1015831065 DU-Haul Rates and Reservations URL Pb Pb 2`h T2 Visited: Owner@http://reservations.uhaul.com/(h143ocmdygrmtbeddvzkjp23)/moveinfo.aspx?move=intown @U-Haul Rates & Reservations URL rXb rXb 2`h T2 Visited: Owner@http://reservations.uhaul.com/(h143ocmdygrmtbeddvzkjp23)/quote.aspx?referenceNumber=1015831065@U-Haul Rates & ReservationsURL )ys;b )ys;b 2`h 2 Visited: Owner@http://aolsvc.video.aol.com/incoming.adp?pid=319&_aolform=w742.h400.R URL `s;b `s;b 2`h 2 Visited: Owner@http://aolsvc.video.aol.com/main.adp URL l=b l=b 2`h |2 Visited: Owner@http://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=falsehYour Source For mcafee - mcaffee - mcaffee.com URL 0bb 0bb 2m `h Ԕ2m Visited: Owner@http://www.pogo.com/home/home-pogop.jsp?sls=3&site=pogop&lkey=QpRFuge5MJ4LEmZECmb3ogAAKDw. Club Pogo - Exclusive Games! Big Prizes! More Ways to Win! URL P7!=b P7!=b 2 `h ܨ2 Visited: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=15Geeks To Go Forums -> Trojan-spy.HTML.smitfraud.c infestation-LauraMURL p >b p >b 2``h 2` Visited: Owner@java script:emoticon(':blink:') URL !>b !>b 2c`h 2c Visited: Owner@http://www.geekstogo.com/forum/index.php?Geeks To Go Forums -> Replying in Trojan-spy.HTML.smitfraud.c infestation-LauraM URL PH`bb PH`bb 2u `h 2u Visited: Owner@http://game1.pogo.com/room/gf2-game/frameset.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf237&anam=Mystery+Monkeys&apid&rspt=4227&ahst=game1.pogo.com&lkey=QpRFuge5MJ4LEmZECmb3ogAAKDw.&rhst=playweb05.pogo.com&game=jigsaw&auto=PlayNow&size=l&install=true&msvm=truetLauraannM in Jigsaw Detective > 40s >


C:\Documents and Settings\Owner.LAURAANNM\Local Settings\History\History.IE5\MSHist012005051620050523\index.dat (160 KB, 5/23/2005 12:21:36 AM)
0 m/forum/LauraannM-m50884.html URL ] TN_ 2g\Q `h 2" :2005051620050523: Owner@http://game1.pogo.com/room/loading/init.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf034&anam=Insane+Genius&apid&rspt=4203&ahst=game1.pogo.com&lkey=QoCiEDAXmkxz8GyeCmb30QAAKDw.&rhst=playweb11.pogo.com&game=jigsaw&auto=PlayNow&size=lURL P$2^ TN_ Q `h 2" :2005051620050523: Owner@:Host: www.cartoonnetwork.comURL pF'^ TN_ Q `h 2" :2005051620050523: Owner@:Host: login.yahoo.comURL i(_ VN_ Q `h 2" :2005051620050523: Owner@:Host: playweb11.pogo.com URL @㯋 ^ TN_ 23Q `h 2" :2005051620050523: Owner@https://www.pods.com/orderapp/(0et4awfzdc3vqjymt25h5cbo)/reviewdetail.aspx?lineitem=1URL / ^ TN_ Q `h 2" :2005051620050523: Owner@:Host: www.anywho.comURL ӓ(^ TN_ 2֩Q `h 2" :2005051620050523: Owner@http://news.com.com/2100-7349_3-5708588.htmlURL p{sL^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://game1.pogo.com/room/loading/init.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf333&anam=Charlie+Chan&apid&rspt=4247&ahst=game1.pogo.com&lkey=QoCiEDLjRb9GM2UiCmb3ogAAKDw.&rhst=playweb13.pogo.com&game=jigsaw&auto=PlayNow&size=lURL %(^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://us.mcafee.com/default.asp?cid=10529URL PP] TN_ 2OqQ `h 2" :2005051620050523: Owner@http://pogoweb09.pogo.com/home/home-pogop.jsp?site=pogop&sls=3&lkey=QoCiEDCAyd5kstQ8Cmb3owAAKDw.URL r(^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://www.us.mcafee.comURL r(^ TN_ Q `h 2" :2005051620050523: Owner@:Host: www.us.mcafee.comURL [H^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/Sober_Worm-t22261.htmlURL @ vH^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://www.f-secure.comURL @@] TN_ 2#Q `h 2" :2005051620050523: Owner@http://game1.pogo.com/room/gf2-game/frameset.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf237&anam=Mystery+Monkeys&apid&rspt=4227&ahst=game1.pogo.com&lkey=QoCiEC8pexlXHATsCmb3ogAAKDw.&rhst=playweb05.pogo.com&game=jigsaw&auto=PlayNow&size=l&install=true&msvm=trueURL f] TN_ 2`\Q `h 2" :2005051620050523: Owner@http://www.pogo.com/home/home-pogop.jsp?sls=3&site=pogop&lkey=QoCiEDAXmkxz8GyeCmb30QAAKDw.URL (^ TN_ Q `h 2" :2005051620050523: Owner@:Host: www.seeq.comURL |h_] TN_ 2[qQ `h 2" :2005051620050523: Owner@http://play.pogo.com/rooms/roomtabs.jsp?game=ricochet&sls=3&site=pogop&lkey=QoCiEDCAyd5kstQ8Cmb3owAAKDw.URL #(^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://us.mcafee.com/virusInfo/default.aspURL p9za(^ TN_ 2ŨQ `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26565&hl=SoberURL K7H^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/Sober_N-t22854.htmlURL `q _ XN_ 2 Q `h 2" :2005051620050523: Owner@file:///C:/Program%20Files/Advanced%20Searchbar/Cache/container_MARQUEE.htm URL a] TN_ 2`qQ `h 2" :2005051620050523: Owner@http://game1.pogo.com/room/loading/init.jsp?site=pogop&scrn=LauraannM&rkey=ricochet-plcfsf017&anam=Digital+Dreams&apid&rspt=6925&ahst=game1.pogo.com&lkey=QoCiEDCAyd5kstQ8Cmb3owAAKDw.&rhst=playweb05.pogo.com&game=ricochet&auto=PlayNow&size=lURL G^ VN_ Q `h 2" :2005051620050523: Owner@:Host: www.aspiring-arts.com URL pS9(^ TN_ 2Q `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/index.php?act=Search&CODE=show&searchid=0c2d74e8e2e08c6e933336f222046a84&search_in=posts&result_type=topics&highlite=Sober+virusURL P$2^ TN_ 2OQ `h 2" :2005051620050523: Owner@http://www.cartoonnetwork.comURL H^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/index.php?showtopic=22261&hl=soberURL H^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://193.110.109.62/search?q=sober&site=f-secure_com&client=f-secure_com&proxystylesheet=f-secure_com&output=xml_no_dtdURL l '^ TN_ 2 Q `h 2" :2005051620050523: Owner@http://photos.groups.yahoo.com/group/bbb-bartering/vwp?.dir=/E13+-+Elizabet&.src=gr&.dnm=chinese+lampwork.jpg&.view=t&.done=http%3a//photos.groups.yahoo.com/group/bbb-bartering/lst%3f%26.dir=/E13%2b-%2bElizabet%26.src=gr%26.view=tURL @,] TN_ 2H(Q `h 2" :2005051620050523: Owner@http://www.geekstogo.com/forum/index.php?showtopic=27203URL %(^ TN_ Q `h 2" :2005051620050523: Owner@:Host: us.mcafee.comURL H^ TN_ Q `h 2" :2005051620050523: Owner@:Host: 193.110.109.62URL 01I^ TN_ 2! Q `h 2" :2005051620050523:

C:\Documents and Settings\Owner.LAURAANNM\Local Settings\History\History.IE5\MSHist012005052420050525\index.dat (80 KB, 5/24/2005 11:03:21 PM)
0 Client UrlCache MMF Ver 5.2@ @ s   HASH ϝ P] . @۫u$ ԀSd ؀k^pL @9}8{x! . @)@ZA〗w%v @U w~dp Xۿ9 rM΀|@ y wfr倵*, PS@u7 ڀCQ :4X@3.[1n @C몀 @Ӓ@߆]h ]SÁ4 [4b@.ŭ x2G! c h@ 怡k ,>Ā2 PCы|_$c. ^@V'Mm|{Y_BoqĈ@ yw{v@cǀ˞ 9# ~nE[]TVG Z>D t@@|c "S fU@F*@28"@cBRoE djPA ]ͯ exR PUv4l#Q@'2 |ɀ,>΀~b5 ]/)0 wWe>݀x8 g@N ]&9`rv@" @h;׀Ρ!@iHѵh K/W @ꯁpU jt " @?RaY X@ (*5 @r@ o@AcJ{ Ҁf5\m1 P uـ 3@ &x) ~-" џ̀1 @ޢJxzcے V@ s ΀ @e @= @BX}Ԁ 0\@S[i@ 3 URL 4 <` Ԫ]` 2dQ `h 2d :2005052420050525: Owner@http://metallica.geekstogo.com URL p ;` p+x]` Q `h 2d :2005052420050525: Owner@:Host: My ComputerURL KP` tq` 2 wQ `h 2x :2005052420050525: Owner@http://www.bankofamerica.com URL ;` z]` Q `h 2d :2005052420050525: Owner@:Host: www.yahoo.comURL |O` vq` 2/xQ `h 2/x :2005052420050525: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=0&p=138989& URL Q;` |]` Q `h 2d :2005052420050525: Owner@:Host: www.geekstogo.comURL <` X ^` 2YeQ `h 2Ye :2005052420050525: Owner@http://www.geekstogo.com/forum/index.php?act=Post&CODE=02&f=37&t=26098 URL <` ]` Q `h 2d :2005052420050525: Owner@:Host: metallica.geekstogo.comURL pXQ ` pb` 2Q `h 2 :2005052420050525: Owner@http://www.mythicsoft.com/agentransack URL O` w Fq` 2 xQ `h 2 x :2005052420050525: Owner@http://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=false URL @M<` @H^` Q `h 2e :2005052420050525: Owner@:Host: www.seeq.comURL @=` %^` 2 eQ `h 2e :2005052420050525: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=0&p=138817&URL 0kFH` 0q}i` 2ooQ `h 2p :2005052420050525: Owner@http://www.bankofamerica.com/signoff/?state=model URL -G` %i` Q `h 2=p :2005052420050525: Owner@:Host: www.bankofamerica.comURL ` jH` `3+i` 2 pQ `h 2p :2005052420050525: Owner@http://www.nationalcity.com/about/contactus/default.asp URL `E [H` ` i` 2 pQ `h 2p :2005052420050525: Owner@http://www.nationalcity.com/about/provident/default.aspURL `E [H` ` i` Q `h 2p :2005052420050525: Owner@:Host: www.nationalcity.comURL ,I` ̠ik` 2ErQ `h 2Er :2005052420050525: Owner@http://search.yahoo.com/search?p=provident+bank&ei=UTF-8&fr=ieas-dns&fl=0&x=wrt URL 0 wH` 0i` 2 pQ `h 2 q :2005052420050525: Owner@http://www.nationalcity.com/about/contactus/personal/default.aspURL gsI` yj` 2pQ `h 2q :2005052420050525: Owner@http://search.yahoo.com/search?p=www.provident.com&fr=ieas-dnsURL gsI` yj` Q `h 2q :2005052420050525: Owner@:Host: search.yahoo.comURL @KI` @o]Gk` 2'rQ `h 2'r :2005052420050525: Owner@http://rds.yahoo.com/S=2766679/K=www.provident.com/v=2/SID=w/TID=DFX5_30/l=WS1/R=9/DUI=1/QT=dq/IPC=us/SHE=0/H=0/SIG=11u27lrv3/EXP=1117030505/*-https%3A//pfloans.provident.com/feedback.aspURL @KI` @o]Gk` Q `h 2'r :2005052420050525: Owner@:Host: rds.yahoo.comURL PX M` P%o` Q `h 2u :2005052420050525: Owner@:Host: www.eloan.com URL ,I` Sk` Q `h 21r :2005052420050525: Owner@:Host: pmtreit.provident.comURL _I` Tk` 22rQ `h 22r :2005052420050525: Owner@https://pmtreit.provident.com/ourAffiliates.aspxURL ? J` Pk` 2arQ `h 2ar :2005052420050525: Owner@http://www.wizardofloan.com/pages/provident_review.htm URL I` k` 2YrQ `h 2Yr :2005052420050525: Owner@http://1000bestlenders.com/100bestlenders.htmlURL I` k` Q `h 2Yr :2005052420050525: Owner@:Host: 1000bestlenders.comURL J` l` 2rQ `h 2r :2005052420050525: Owner@http://banks.tofind.org/?state=fl URL ? J` Pk` Q `h 2ar :2005052420050525: Owner@:Host: www.wizardofloan.comURL J` B$ l` 2rQ `h 2r :2005052420

C:\Documents and Settings\Owner.LAURAANNM\Local Settings\History\History.IE5\MSHist012005052520050526\index.dat (112 KB, 5/25/2005 1:29:34 PM)
1 =1&o=6143&c=DC&p=fA79g0WS&xpsp=xpsp2 URL ` ` @ }` Q `h 2f' :2005052520050526: Owner@:Host: My ComputerURL X a 6a 2nsQ `h 2Rt :2005052520050526: Owner@http://www.geekstogo.com/forum/index.php?showuser=50884 URL %x` ʼn~` Q `h 2g' :2005052520050526: Owner@:Host: www.yahoo.comURL p ` p` 2n'Q `h 2n' :2005052520050526: Owner@http://www.dietcoke.com/splendacoupon.jspURL p ` p` Q `h 2n' :2005052520050526: Owner@:Host: www.dietcoke.comURL e r a &%a 2NcQ `h 23d :2005052520050526: Owner@http://ads1.revenue.net/load/206278/page.html?O_R_NUM=41412180&O_RANK=1&O_CREATIVE_ID=206278&O_SITE_ID=13989& URL PP ` P b` Q `h 2t' :2005052520050526: Owner@:Host: bricks.coupons.comURL & ` ` 2 (Q `h 2 ( :2005052520050526: Owner@http://bricks.coupons.com/Brun.asp?tqnm=uexvcxj75405442 URL ` 4 ` 2u'Q `h 2u' :2005052520050526: Owner@http://bricks.coupons.com/BloadA.asp?tqnm=uexvcxj75405442&bt=wi&eb=1&o=6143&c=DC&p=fA79g0WS&xpsp=xpsp2&xpc=1&rdo=yURL ` B̡` 2 (Q `h 2 ( :2005052520050526: Owner@http://bricks.coupons.com/Bstart.asp?tqnm=uexvcxj75405442&bt=wi&eb=1&o=6143&c=DC&p=fA79g0WS&xpsp=xpsp2&xpc=1&rdo=yURL A ` ᙤ` 2 (Q `h 2 ( :2005052520050526: Owner@http://bricks.coupons.com/TAF.asp?tqnm=uexvcxj75405442&o=6143&c=DC&p=fA79g0WS&cl=&cp=&eb=1&ci=&bq=&r=&cista=0URL p[q a p&a 23dQ `h 2 e :2005052520050526: Owner@http://aolsearch.aol.com/aol/search?encquery=1ab02d188bc35723aca730e145ea7682&invocationType=keyword_rollover&ie=UTF-8 URL [P` ` Q `h 26( :2005052520050526: Owner@:Host: www.geekstogo.comURL V a g %a 2ZcQ `h 2Zc :2005052520050526: Owner@http://support.shaw.ca/browsers/mozillacache.htm URL V a g %a Q `h 2Zc :2005052520050526: Owner@:Host: support.shaw.caURL ` V` 2 (Q `h 2 ( :2005052520050526: Owner@http://bricks.coupons.com/Bprint.asp?UID=29391804&tqnm=uexvcxj75405442&bt=wi&eb=1&o=6143&c=DC&p=fA79g0WS&xpsp=xpsp2&xpc=1&rdo=yURL a f &a 2PdQ `h 2Pd :2005052520050526: Owner@http://www.geekstogo.com/forum/index.php?act=Post&CODE=02&f=37&t=26098 URL `5y) a `Պ%a Q `h 2c :2005052520050526: Owner@:Host: www.seeq.comURL LSa =ta 2\Q `h 2C :2005052520050526: Owner@http://www.geekstogo.com/forum/index.php?act=Post&CODE=02&f=37&t=26098 URL e r a &%a Q `h 23d :2005052520050526: Owner@:Host: ads1.revenue.netURL = a ݾ5a 28sQ `h 28s :2005052520050526: Owner@http://search.yahoo.com/search?p=screen+shot&fr=FP-tab-web-t&toggle=1&ei=UTF-8 URL @\l.a @ Oa 2]Q `h 2C :2005052520050526: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=15&p=141001& URL p a p!'a Q `h 2<e :2005052520050526: Owner@:Host: nsvapp-prod-rr.stream.aol.com URL p[q a p&a Q `h 2 e :2005052520050526: Owner@:Host: aolsearch.aol.com URL 4 w a E &a Q `h 2 e :2005052520050526: Owner@:Host: tv.channel.aol.com URL Xa uza 2ʹQ `h 2ʹ :2005052520050526: Owner@http://search.cartoonnetwork.com/search/?sp-q=cybertron&sp-a=00033c73-sp00000000 URL Sv a 'a 21eQ `h 21e :2005052520050526: Owner@http://tv.channel.aol.com/franchise/top5.adpURL p a p!'a 2<eQ `h 2<e :2005052520050526: Owner@http://nsvapp-prod-rr.stream.aol.com/fugu?t=oldlarge&nsvid=/aol/us/aolentertainment/tv/2005/tvstop5/tvstop5_052405_clip3;bitrates:700,460,320,120,28&s1=AOL%20Television&s2=TVs%20Top%205%21&live=0&restartUrl=http%3A//tv.channel.aol.com/franchise/top5.adp&locale=US&autoplay=true&logourl=http%3A//cdn.digitalcity.com/tv/player-logo&gender=&age=&daypart=&dma=&genre=&surfacePoint=&playlistGroup=&cpid=&sync=1&title=TV%27s%20Top%205%21&_aolform=w390.h380.p7.R10URL a  J'a 2beQ `h 2be :2005052520050526: Owner@http://nsva
1 RL c a tv8a Q `h 2u :2005052520050526: Owner@:Host: auctions.overstock.comURL 0I a 0a8a 2+uQ `h 2 v :2005052520050526: Owner@http://www.hgtv.com/hgtv/dc_windows_valances_swags/article/0,1793,HGTV_3544_1394037,00.html URL a gz8a Q `h 2u :2005052520050526: Owner@:Host: www.windowdesigner.comURL `\ a `qn}8a 2uQ `h 2u :2005052520050526: Owner@http://www.windowdesigner.com/valances.htmlURL a 8a 2uQ `h 2u :2005052520050526: Owner@http://www.windowdesigner.com/cornices.htmlURL a .8a Q `h 2u :2005052520050526: Owner@:Host: www.hgtv.comURL `~$ a ` 6 9a 2OvQ `h 2Ov :2005052520050526: Owner@http://www.ca-bc.com/pamperedwindows/cornices.html URL a 8a Q `h 2u :2005052520050526: Owner@:Host: web.hgtv.comURL p " a 8a 2uQ `h 2u :2005052520050526: Owner@http://www.hgtv.com/hgtv/decorating/article/0,,HGTV_3545_2048403,00.htmlURL Y a 8a 28uQ `h 2 v :2005052520050526: Owner@http://www.hgtv.com/hgtv/dc_windows_valances_swags/article/0,,HGTV_3544_1381891,00.html URL Pw b a P !8a 2AuQ `h 2&v :2005052520050526: Owner@http://www.hgtv.com/hgtv/dc_windows_valances_swags/article/0,,HGTV_3544_1389556,00.html URL Gi a 8a 2HuQ `h 2,v :2005052520050526: Owner@http://www.hgtv.com/hgtv/dc_windows_valances_swags/article/0,1793,HGTV_3544_2264149,00.html URL `7e a `YI8a 2DuQ `h 2)v :2005052520050526: Owner@http://web.hgtv.com/hgtv/web/searchResults?site=HGTV&searchType=site&searchString=swag+cornicesURL 3m a ӻ8a Q `h 20v :2005052520050526: Owner@:Host: www.bobvila.comURL v a _8a 2RuQ `h 27v :2005052520050526: Owner@http://www.bobvila.com/~search/sandn.php?http://clickserve.cc-dt.com/link/ddiprod?lid=41000000002801192&pid=80058URL `  a ` 9a 2@vQ `h 2@v :2005052520050526: Owner@http://www.smithandnoble.com/sn/product_detail.jsp?ProductID=80057&SRC=AF429&aid=4&src=AF704 URL 0jw a 0 8a Q `h 28v :2005052520050526: Owner@:Host: www.smithandnoble.comURL `~ a ` 9a 2@vQ `h 2@v :2005052520050526: Owner@http://www.bobvila.com/~search/sandn.php?http://clickserve.cc-dt.com/link/ddiprod?lid=41000000002801192&pid=80057URL @W .a @iOa 2Q `h 2 :2005052520050526: Owner@http://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=false URL f% a 7 9a 2TvQ `h 2Tv :2005052520050526: Owner@http://www.diynetwork.com/diy/wa_conrices/article/0,2037,DIY_14405_2270121,00.html URL `~$ a ` 6 9a Q `h 2Ov :2005052520050526: Owner@:Host: www.ca-bc.comURL U~ a p9a 2vQ `h 2v :2005052520050526: Owner@http://www.fabricandhomebonanza.com/how_to/index.asp URL f% a 7 9a Q `h 2Tv :2005052520050526: Owner@:Host: www.diynetwork.comURL @x a @ .@9a 2svQ `h 2sv :2005052520050526: Owner@http://www.dwcdesignet.com/DWC/May'97/GuestEditorial.html URL ' a Y9&9a Q `h 2[v :2005052520050526: Owner@:Host: www.greatwindows.comURL a @'=9a 2pvQ `h 2pv :2005052520050526: Owner@http://www.greatwindows.com URL a <9a 2pvQ `h 2pv :2005052520050526: Owner@http://www.greatwindows.com/catalog/catalog.asp?page=0&cat=4 URL ` a `;9a 2ovQ `h 2ov :2005052520050526: Owner@http://www.greatwindows.com/products/cornices/wood_cornices_description.asp URL ˭ a ]49a 2ivQ `h 2iv :2005052520050526: Owner@http://www.greatwindows.com/products/fabric/ft_fabric_description.asp?operation_type=valanceURL p a p8:9a 2nvQ `h 2nv :2005052520050526: Owner@http://www.greatwindows.com/products/fabric/ft_fabric_options.aspURL @x a @ .@9a Q `h 2sv :2005052520050526: Owner@:Host: www.dwcdesignet.comURL @ a /F9a 2xvQ `h 2xv :2005052520050526: Owner@http://www.alltheinternet.com/texis/open/all?q=fabric+cornicesURL a >c9a 2vQ `h 2v :2005052520050526: Owner@http://www.alltheinternet.com/texis/open/all?start=10&more=y&page=2&q=fabric+cornices URL a QK9a Q `h 2}v :2005052520050526: Owner@:Host: interiordec.about.comURL P5 a P՝S9a 2vQ `h 2v :2005052520050526: Owner@http://interiordec.about.com/gi/dynamic/offsite.htm?zi=1/XJ&sdn=interiordec&zu=http%3A%2F%2Fwww.fabricworkshop.com%2Fcornice.htmURL a 1W9a 2vQ `h 2v :2005052520050526: Owner@http://interiordec.about.com/od/valancesURL U~ a p9a Q `h 2v :2005052520050526: Owner@:Host: ww

C:\Documents and Settings\Owner.LAURAANNM\Local Settings\History\History.IE5\MSHist012005052620050527\index.dat (48 KB, 5/26/2005 11:31:40 PM)
1 `h 2 :2005052620050527: Owner@:Host: www.pogo.comURL o b ,b 27Q `h 27 :2005052620050527: Owner@http://play.pogo.com/rooms/roomtabs.jsp?game=jigsaw&sls=3&site=pogop&lkey=QpRFugXx5BMNxjWqCmb30QAAKDw.URL o b ,b Q `h 27 :2005052620050527: Owner@:Host: play.pogo.comURL ' b Ǭ ,b 2EQ `h 2E :2005052620050527: Owner@file:///C:/Program%20Files/Advanced%20Searchbar/Cache/container_MARQUEE.htmURL `gߘ b P ,b 2FQ `h 2F :2005052620050527: Owner@http://game1.pogo.com/room/loading/init.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf304&anam=North+by+Northwest&apid&rspt=4245&ahst=game1.pogo.com&lkey=QpRFugXx5BMNxjWqCmb30QAAKDw.&rhst=playweb05.pogo.com&game=jigsaw&auto=PlayNow&size=lURL b v1b 2Q `h 2 :2005052620050527: Owner@http://reservations.uhaul.com/(vrg1uavekpinj5vlp0xa0055)/Default.aspx URL А7 b 0I[1b Q `h 2s :2005052620050527: Owner@:Host: www.uhaul.comURL ' b Ǭa1b 2yQ `h 2y :2005052620050527: Owner@http://www.uhaul.com/trucksURL @cLE b @ ^1b 2Q `h 2أ :2005052620050527: Owner@http://reservations.uhaul.com/(ofuu0i55jokec455hwvssa45)/equipmentDetail.aspx?rentalDesignator=BE URL 0 b 0 2b 2%Q `h 2% :2005052620050527: Owner@file:///C:/Documents%20and%20Settings/All%20Users.WINDOWS/Application%20Data/AOL/C_America%20Online%209.0d/ShopAssist/Apps/core/main.html URL b v1b Q `h 2 :2005052620050527: Owner@:Host: reservations.uhaul.comURL ԇ b t/2b 21Q `h 21 :2005052620050527: Owner@http://www.uhaul.com/finder URL pe+ b pw1b 2ܢQ `h 2£ :2005052620050527: Owner@http://reservations.uhaul.com/(vrg1uavekpinj5vlp0xa0055)/moveinfo.aspx?move=intown URL nTD b f1b 2Q `h 2ף :2005052620050527: Owner@http://reservations.uhaul.com/equipmentDetail.aspx?rentalDesignator=BEURL > b 2b 2ңQ `h 2 :2005052620050527: Owner@http://www.uhaul.com/finder/location_map.aspx?entity=039304 URL p7 b pG2b 2ͣQ `h 2 :2005052620050527: Owner@http://reservations.uhaul.com/(cj2xf1bhapvojczlnxbm1k55)/Default.aspxURL [ b l=b 2Q `h 2 :2005052620050527: Owner@http://www.seeq.com/popupwrapper.jsp?domain=mcaffee.com&referrer=&pop=false URL @MT b @t_2b 2磀Q `h 2ˤ :2005052620050527: Owner@http://www.uhaul.com/finder/map.aspx?lat=29.2917&long=-81.1148&trk=1&trl=0&stg=0&rpc=0&htc=0&bxs=0&prp=0&cpc=0&record=1&dist=0URL ЏH b /Zs;b Q `h 2 :2005052620050527: Owner@:Host: aolsvc.video.aol.comURL AT b 1b 2 Q `h 2 :2005052620050527: Owner@http://reservations.uhaul.com/(vrg1uavekpinj5vlp0xa0055)/quote.aspx?referenceNumber=1015787162URL @" b @j4 2b 2$Q `h 2$ :2005052620050527: Owner@http://www.uhaul.com URL @z b R 2b 2 Q `h 2 :2005052620050527: Owner@http://reservations.uhaul.com/(vrg1uavekpinj5vlp0xa0055)/movingsupplies.aspx?referenceNumber=1015787162URL pn b pUs;b 2Q `h 2 :2005052620050527: Owner@http://aolsvc.video.aol.com/pre90Redir.adp?x=1&_aolform=w742.h400.RURL 0 b H=b 2Q `h 2 :2005052620050527: Owner@http://desktop3.weather.com/weather/desktop/vi/32174?vi=4&par=Desktopvertical4&cobrand=netscape&site=netscape&area=drv&dwiam=320&prod=desktop3URL [ b l=b Q `h 2 :2005052620050527: Owner@:Host: www.seeq.comURL )@b ;kbb 2Y Q `h 2Y :2005052620050527: Owner@http://www.geekstogo.com/forum/Trojan_spyHTMLsmitfraudc_infestation_LauraM-t26098.html URL P - b P7!=b 2 Q `h 2 :2005052620050527: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=15URL Y4 b ۻ=b 2"Q `h 2 :2005052620050527: Owner@http://www.geekstogo.com/forum/index.php?act=Post&CODE=02&f=37&t=26098URL ş b e#>b 2dQ `h 2d :2005052620050527: Owner@http://www.geekstogo.com/forum/index.php?showtopic=26098&st=15&p=143220&URL P@b P gbb 2V Q `h 2V :2005052620050527: Owner@http://www.yahoo.comURL @b 0bb 2m Q `h 2m :2005052620050527: Owner@http://www.pogo.com/home/home-pogop.jsp?sls=3&site=pogop&lkey=QpRFuge5MJ4LEmZECmb3ogAAKDw.URL p@b pUbb 2r Q `h 2r :2005052620050527: Owner@http://play.pogo.com/rooms/roomtabs.jsp?game=jigsaw&sls=3&site=pogop&lkey=QpRFuge5MJ4LEmZECmb3ogAAKDw.URL m Ab ~bb 2t Q `h 2t :2005052620050527: Owner@http://game1.pogo.com/room/loading/init.jsp?site=pogop&scrn=LauraannM&rkey=jigsaw-pljigsawsf237&anam=Mystery+Monkeys&apid&rspt=4227&ahst=game1.pogo.com&lkey=QpRFuge5MJ4LEmZEC

C:\Documents and Settings\Owner.LAURAANNM\Local Settings\Temporary Internet Files\Content.IE5\C9IR05YR\index[1].htm (61 KB, 5/27/2005 6:48:35 PM)
20 XP <br /> </span><br /> <img src="style_images/1/spacer.gif" alt="" width="160" height="1" /><br /> </td> <td width="100%" valign="top" class="post1"> <!-- THE POST 141502 --> <div class="postcolor">Hi Pieter,<br /><br />Sorry to not be able to offer much to help your desperation.<br /><br />I have no idea where the advancedsearchbar came from...it's just &quot;there&quot; so I guess my son could have downloaded it with something else he was looking for. <br /><br />Do you think that has anything to do with the seeq.com stuff? <br /><br />I only seem to have the toolbar in IE....however, I get sent to the same page no matter what browser I use when I type in www.mcaffee.com<br /><br />Does that help?<br /><br />LauraM <!--emo&:tazz:--><img src='style_emoticons/default/confused1.gif' border='0' style='vertical-align:middle' alt='confused1.gif' /><!--endemo--> <!--IBF.ATTACHMENT_141502--></div> <!-- THE POST --> </td> </tr> <tr> <td class="formbuttonrow" nowrap="nowrap"> <div style='text-align:left'><img src='style_images/1/p_online.gif' border='0' alt='User is online!' /><a href="java script:PopUp('http://www.geekstogo.com/forum/index.php?act=Profile&amp;CODE=showcard&amp;MID=50884','AddressCard','600','300','0','1','1','1')" title="Show Contact Card"><img src='style_images/1/p_card.gif' border='0' alt='Profile Card' /></a><a href="http://www.geekstogo...MID=50884"><img src='style_images/1/p_pm.gif' border='0' alt='PM' /></a><!----></div> </td> <td class="formbuttonrow" nowrap="nowrap"> <!-- PM / EMAIL / WWW / MSGR --> <div style="float: left;"> <a href="java script:scroll(0,0);"><img src='style_images/1/p_up.gif' border='0' alt='Go to the top of the page' /></a> </div> <!-- REPORT / UP --> <div align="right"> <a href="http://www.geekstogo...#38;st=15"><img src='style_images/1/p_edit.gif' border='0' alt='Edit Post' /></a><a href="#" onclick="multiquote_add(141502); return false;" title="Toggle multiquote addition"><img src="style_images/1/p_mq_add.gif" name="mad_141502" alt="+" /></a><a href="http://www.geekstogo...38;qpid=141502" title="Reply directly to this post"><img src='style_images/1/p_quote.gif' border='0' alt='Quote Post' /></a> </div> </td> </tr><tr> <td class="catend" colspan="2"><!-- no content --></td> </tr> </table><!--Begin Msg Number 142113--> <table cellspacing="1"> <tr> <td valign="middle" class="row2" width="1%"><a name="entry142113"></a><span class="normalname"><a href='http://www.geekstogo.com/forum/Metallica-m7027.html'>Metallica</a></span></td> <td class="row2" valign="top" width="99%"> <!-- POSTED DATE DIV --> <div style="float: left;"> <span class="postdetails"> <img src='style_images/1/to_post_off.gif' alt='post' border='0' style='padding-bottom:2px' /> Yesterday, 02:18 AM</span> </div> <!-- REPORT / DELETE / EDIT / QUOTE DIV --> <div align="right"> <span class="postdetails"> Post <a title="Show the link to this post" href="#" onclick="link_to_post(142113); return false;">#20</a> </span> </div> </td> </tr> <tr> <td valign="top" class="post2"> <span class="postdetails"> <img src='http://www.geekstogo.com/forum/uploads/av-7027.gif' border='0' width='60' height='23' alt='' /><br /><br /> Malware Expert<br /> <img src="staff.gif" alt="Group Icon" /><br /><br /> Group: Global Moderator<br /> Posts: 3,421<br /> Joined: 23-November 04<br /> Member No.: 7,027<br /> Operating System:<br />
22 XP <br /> </span><br /> <img src="style_images/1/spacer.gif" alt="" width="160" height="1" /><br /> </td> <td width="100%" valign="top" class="post1"> <!-- THE POST 143220 --> <div class="postcolor">OK, toolbar removed as requested, via Hijack This. Rebooted, and checked IE and Netscape. No change (type in www.mcaffee.com and get sent to the seeq.com page)<br /><br />Latest log:<br /><br />Logfile of HijackThis v1.99.1<br />Scan saved at 5:55:30 PM, on 5/26/2005<br />Platform: Windows XP SP2 (WinNT 5.01.2600)<br />MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)<br /><br />Running processes:<br />C:\WINDOWS\System32\smss.exe<br />C:\WINDOWS\system32\winlogon.exe<br />C:\WINDOWS\system32\services.exe<br />C:\WINDOWS\system32\lsass.exe<br />C:\WINDOWS\system32\svchost.exe<br />C:\WINDOWS\System32\svchost.exe<br />C:\WINDOWS\Explorer.EXE<br />C:\WINDOWS\system32\spoolsv.exe<br />C:\PROGRA~1\COMMON~1\aol\ACS\acsd.exe<br />C:\Program Files\ewido\security suite\ewidoctrl.exe<br />C:\Program Files\ewido\security suite\ewidoguard.exe<br />C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe<br />C:\WINDOWS\wanmpsvc.exe<br />C:\Program Files\Real\RealPlayer\RealPlay.exe<br />C:\WINDOWS\system32\hkcmd.exe<br />C:\Program Files\QuickTime\qttask.exe<br />C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe<br />C:\PROGRA~1\mcafee.com\agent\mcagent.exe<br />C:\Program Files\Messenger\msmsgs.exe<br />C:\WINDOWS\system32\ctfmon.exe<br />c:\progra~1\mcafee.com\vso\mcvsescn.exe<br />C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe<br />C:\PROGRA~1\THEWEA~1\The Weather Channel.exe<br />C:\PROGRA~1\THEWEA~1\DWHeartbeatMonitor.exe<br />C:\Program Files\America Online 9.0d\aoltray.exe<br />C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe<br />C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe<br />C:\Program Files\Screenshot Utility\ScreenshotUtility.exe<br />C:\WINDOWS\system32\msiexec.exe<br />c:\progra~1\mcafee.com\vso\mcvsftsn.exe<br />C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe<br />C:\WINDOWS\system32\HPZipm12.exe<br />C:\WINDOWS\system32\wuauclt.exe<br />C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe<br />C:\WINDOWS\system32\wuauclt.exe<br />C:\PROGRA~1\Netscape\Netscape\Netscp.exe<br />C:\Program Files\Hijack this\HijackThis.exe<br /><br />R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href='http://www.yahoo.com/' target='_blank'>http://www.yahoo.com/</a><br />R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1<br />O1 - Hosts: 64.91.255.87 www.dcsresearch.com<br />O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll<br />O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll<br />O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER<br />O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe<br />O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe<br />O4 - HKLM\..\Run: [QuickTime Task] &quot;C:\Program Files\QuickTime\qttask.exe&quot; -atboottime<br />O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe<br />O4 - HKLM\..\Run: [VSOCheckTask] &quot;c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe&quot; /checktask<br />O4 - HKLM\..\Run: [VirusScan Online] &quot;c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe&quot;<br />O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe<br />O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\mcupdate.exe<br />O4 - HKCU\..\Run: [MSMSGS] &quot;C:\Program Files\Messenger\msmsgs.exe&quot; /background<br />O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe<br />O4 - HKCU\..\Run: [Mozilla Quick Launch] &quot;C:\Program Files\Netscape\Netscape\Netscp.exe&quot; -turbo<br />O4 - HKCU&#09

C:\System Volume Information\_restore{6D33B769-509F-4428-B9AA-DC08714C4160}\RP45\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1123561945-1844237615-839522115-1003 (1932 KB, 5/25/2005 11:08:59 AM)
2 ev`" vk D" eColInfo vk eMinPos1024x768(1).xopvk WFlags # vk stMinPos1024x768(1).y4vk lMaxPos1024x768(1).x(5 vk WinPos1024x768(1).topj vk sShowCmdnk 2H0S @ 8$ 83 *cCommentingvk lf X cFil cFil cHig cInk cStax cSyn cTex zip_nk HG}&N P1 y \phone:StringData Windows|4 ; O5DL!vk \@% Item Data Q,zJb QYspTL"t^h'8\O:E0 …[ ]9 'I Z>o? {89f/Y Nun!'Ink &N P1 y lstate:StringIndexvk 4(& Behavior Windows )Z67> Db . vk l& Item Data *_c (xc v{H"ia_pJ\ > 9eeVU1_io`1 ^J2 - 15rOl'nk &N P1 " y Lstate:StringDatavk 4x' Behavior WindowspE EJN @ěvk L' Item Data 8?jc8} C6]Щ $(\-GX"@B IonNm֧ Bn 3* MuY MFIuXw _Êp >|e ( t:ZĚd u 4_ 0%ڎ^Su% l<`U+ A p1Z ihx W "J9 ЊO [ՈPH`<K(]$BЎ-X@"щ z{9ߩ( mwLh#c Ȫ$㚡A*U'` 4Dh ,/,: =4= Yr0ҹH# ;π _UMܳa>5K "X9j_ YO%ev݌Uw_@)y TEގ1)ŶЦ oyM{@G'S\)s ĮX v- E h ]2 l9V +R.Zb/K] Xi)q8 \oꗚ mdyωy 0i P ?2~ ^;6 ]7=q ro ,B~' .nk ui N P1 h+ y \f_to:StringData WindowsC.M1 3u34( Aw0٣WNNrF曗E+M|8lh&L/.FQy<M Bi EL tXV9} $ SNnk 2H0S @ 83 cCommentPanelToolbared@11SG39P4X(1SG39P4Xovk-( IHRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax0lf x 0vk icShowAgainPOWERPNR1Local Settings4Local Settings0 P List C:\Documents and Settings\Owner.LAURAANNM\My Documents\who, what, when, where of craft shows, etc\bodhikt.htmlC:\Documents and Settings\Owner.LAURAANNM\My Documents\Screen01.JPGsa.exeindows Explorer.lnktc\bodhikt.htmlvk FFlags vk ` MRUListEx c bodhikt.htmlH2bodhikt.lnk.bodhikt.lnknk f q` x C 83 rof4pplvk oModeReis-84PV2vk 46 Behaviorhbin0 http://www.mcaffee.com/.com/nect.com/V / ! ! ! " " `" " # P# Hj (5 # 2 1 @" " # A 8 8 [ [ 0] lf 0 1 102M 3X 4 58 60 7 n 8 9nk /_ W : 83 ~ 107P nk /_ W H1 83 Shell vk i WinPos1024x768(1).bottomseeq.comvkIh HRZR_EHACNGU:P:\Cebtenz Svyrf\ZpNsrr.pbz\Crefbany Sverjnyy\ZcsPbafbyr.rkr vk WinPos1024x768(1).rights ServicesDocumentsY nk )O P1 | y laddressline1:StringIndex ֩#зS >u l,3&/H> Xb`Bbf)pHj ɀ *T N #xA3o*L lnk )O P1 y taddressline1:StringData WindowsÌ R 4\vk t4 Item Data oT R0t3i P 秷 K~ + Y"ie4 O8o ԉIݴ  [ =Ac(7%K & :<o!3Rvk ` WinPos1024x768(1).left`g vk ivk ax5 nk )O P1 Ⱥ y lmaskedccnumber:StringIndex AF7Zn"n^emluHeo$ɽeU i !L13 Y2~@ЪI:!d<t{W&Y.`o vnk )O P1 x y dmaskedccnumbe


C:\System Volume Information\_restore{6D33B769-509F-4428-B9AA-DC08714C4160}\RP46\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1123561945-1844237615-839522115-1003 (2000 KB, 5/26/2005 5:04:03 PM)
2 vk D" eColInfo vk eMinPos1024x768(1).xopvk WFlags # vk stMinPos1024x768(1).y4vk lMaxPos1024x768(1).x(5 vk WinPos1024x768(1).topj vk sShowCmdnk 2H0S @ 8$ 83 *cCommentingvk lf X cFil cFil cHig cInk cStax cSyn cTex zip_nk HG}&N P1 y \phone:StringData Windows|4 ; O5DL!vk \@% Item Data Q,zJb QYspTL"t^h'8\O:E0 …[ ]9 'I Z>o? {89f/Y Nun!'Ink &N P1 y lstate:StringIndexvk 4(& Behavior Windows )Z67> Db . vk l& Item Data *_c (xc v{H"ia_pJ\ > 9eeVU1_io`1 ^J2 - 15rOl'nk &N P1 " y Lstate:StringDatavk 4x' Behavior WindowspE EJN @ěvk L' Item Data 8?jc8} C6]Щ $(\-GX"@B IonNm֧ Bn 3* MuY MFIuXw _Êp >|e ( t:ZĚd u 4_ 0%ڎ^Su% l<`U+ A p1Z ihx W "J9 ЊO [ՈPH`<K(]$BЎ-X@"щ z{9ߩ( mwLh#c Ȫ$㚡A*U'` 4Dh ,/,: =4= Yr0ҹH# ;π _UMܳa>5K "X9j_ YO%ev݌Uw_@)y TEގ1)ŶЦ oyM{@G'S\)s ĮX v- E h ]2 l9V +R.Zb/K] Xi)q8 \oꗚ mdyωy 0i P ?2~ ^;6 ]7=q ro ,B~' .nk ui N P1 h+ y \f_to:StringData WindowsC.M1 3u34( Aw0٣WNNrF曗E+M|8lh&L/.FQy<M Bi EL tXV9} $ SNnk 2H0S @ 83 cCommentPanelToolbared@11SG39P4X(1SG39P4Xovk-( IHRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax0lf x 0vk icShowAgainPOWERPNR1Local Settings4Local Settings0 P List C:\Documents and Settings\Owner.LAURAANNM\My Documents\who, what, when, where of craft shows, etc\bodhikt.htmlC:\Documents and Settings\Owner.LAURAANNM\My Documents\Screen01.JPGsa.exeindows Explorer.lnktc\bodhikt.htmlvk FFlags vk ` MRUListEx c bodhikt.htmlH2bodhikt.lnk.bodhikt.lnknk f q` x C 83 rof4pplvk oModeReWMF Imagevk 46 Behaviorhbin0 http://www.mcaffee.com//vices.com/om/V / ! ! ! " " `" " # P# Hj (5 # 2 1 @" " # A 8 8 [ [ 0] lf 0 1 102M 3X 4 58 60 7 n 8 9nk /_ W : 83 ~ 107P nk /_ W H1 83 Shell vk i WinPos1024x768(1).bottomseeq.comvkIh HRZR_EHACNGU:P:\Cebtenz Svyrf\ZpNsrr.pbz\Crefbany Sverjnyy\ZcsPbafbyr.rkr vk WinPos1024x768(1).rightsMana&geX DocumentsY nk )O P1 | y laddressline1:StringIndex ֩#зS >u l,3&/H> Xb`Bbf)pHj ɀ *T N #xA3o*L lnk )O P1 y taddressline1:StringData WindowsÌ R 4\vk t4 Item Data oT R0t3i P 秷 K~ + Y"ie4 O8o ԉIݴ  [ =Ac(7%K & :<o!3Rvk ` WinPos1024x768(1).leftXQ vk ivk ax5 nk )O P1 Ⱥ y lmaskedccnumber:StringIndex AF7Zn"n^emluHeo$ɽeU i !L13 Y2~@ЪI:!d<t{W&Y.`o vnk )O P1 x y dmaskedc


C:\System Volume Information\_restore{6D33B769-509F-4428-B9AA-DC08714C4160}\RP47\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1123561945-1844237615-839522115-1003 (2000 KB, 5/27/2005 3:00:15 AM)
2 vk D" eColInfo vk eMinPos1024x768(1).xopvk WFlags # vk stMinPos1024x768(1).y4vk lMaxPos1024x768(1).x(5 vk WinPos1024x768(1).topj vk sShowCmdnk 2H0S @ 8$ 83 *cCommentingvk lf X cFil cFil cHig cInk cStax cSyn cTex zip_nk HG}&N P1 y \phone:StringData Windows|4 ; O5DL!vk \@% Item Data Q,zJb QYspTL"t^h'8\O:E0 …[ ]9 'I Z>o? {89f/Y Nun!'Ink &N P1 y lstate:StringIndexvk 4(& Behavior Windows )Z67> Db . vk l& Item Data *_c (xc v{H"ia_pJ\ > 9eeVU1_io`1 ^J2 - 15rOl'nk &N P1 " y Lstate:StringDatavk 4x' Behavior WindowspE EJN @ěvk L' Item Data 8?jc8} C6]Щ $(\-GX"@B IonNm֧ Bn 3* MuY MFIuXw _Êp >|e ( t:ZĚd u 4_ 0%ڎ^Su% l<`U+ A p1Z ihx W "J9 ЊO [ՈPH`<K(]$BЎ-X@"щ z{9ߩ( mwLh#c Ȫ$㚡A*U'` 4Dh ,/,: =4= Yr0ҹH# ;π _UMܳa>5K "X9j_ YO%ev݌Uw_@)y TEގ1)ŶЦ oyM{@G'S\)s ĮX v- E h ]2 l9V +R.Zb/K] Xi)q8 \oꗚ mdyωy 0i P ?2~ ^;6 ]7=q ro ,B~' .nk ui N P1 h+ y \f_to:StringData WindowsC.M1 3u34( Aw0٣WNNrF曗E+M|8lh&L/.FQy<M Bi EL tXV9} $ SNnk 2H0S @ 83 cCommentPanelToolbared@11SG39P4X(1SG39P4Xovk-( IHRZR_EHACVQY:%pfvqy2%\Npprffbevrf\Abgrcnq.yax0lf x 0vk icShowAgainPOWERPNR1Local Settings4Local Settings0 P List C:\Documents and Settings\Owner.LAURAANNM\My Documents\who, what, when, where of craft shows, etc\bodhikt.htmlC:\Documents and Settings\Owner.LAURAANNM\My Documents\Screen01.JPGsa.exeindows Explorer.lnktc\bodhikt.htmlvk FFlags vk ` MRUListEx c bodhikt.htmlH2bodhikt.lnk.bodhikt.lnknk f q` x C 83 rof4pplvk oModeReWMF Imagevk 46 Behaviorhbin0 http://www.broward.org/revenue.com/om/V / ! ! ! " " `" " # P# Hj (5 # 2 1 @" " # A 8 8 [ [ 0] lf 0 1 102M 3X 4 58 60 7 n 8 9nk /_ W : 83 ~ 107P nk /_ W H1 83 Shell vk i WinPos1024x768(1).bottomseeq.comvkIh HRZR_EHACNGU:P:\Cebtenz Svyrf\ZpNsrr.pbz\Crefbany Sverjnyy\ZcsPbafbyr.rkr vk WinPos1024x768(1).rightsMana&geX DocumentsY nk )O P1 | y laddressline1:StringIndex ֩#зS >u l,3&/H> Xb`Bbf)pHj ɀ *T N #xA3o*L lnk )O P1 y taddressline1:StringData WindowsÌ R 4\vk t4 Item Data oT R0t3i P 秷 K~ + Y"ie4 O8o ԉIݴ  [ =Ac(7%K & :<o!3Rvk ` WinPos1024x768(1).leftXQ vk ivk ax5 nk )O P1 Ⱥ y lmaskedccnumber:StringIndex AF7Zn"n^emluHeo$ɽeU i !L13 Y2~@ЪI:!d<t{W&Y.`o vnk )O P1 x y dmaskedc
  • 0

#25
Metallica
Posted 28 May 2005 - 07:25 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
What I'd like you to do is cerate a new Mozilla profile:
Follow instructions here:
http://www.mozilla.o...rofile.html#new

Then download and install SuperCleaner http://www.southbayp...m/SuperCleaner/
and use it for all your browsers.

Let me know if that helps.

Regards,
  • 0

Advertisements

#26
LauraannM
Posted 28 May 2005 - 09:27 AM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Done. I also rebooted. Still being sent to seeq.com (same search page) when I type in www.mcaffee.com.

I am able to get to all other pages I've tried, with the exception of mcaffee.

LauraM
  • 0

#27
Metallica
Posted 28 May 2005 - 10:23 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Can you do me a favor?

I think the McAfee firewall has been affected by this hijacker in some way.
I do not know enough about their software to help you with that, but you should be able to get that help here:
http://forums.mcafeehelp.com/
I also think they should know if their software is vulnerable to some sort of hijack.

Can you keep us informed of your progress?

Regards,
  • 0

#28
LauraannM
Posted 28 May 2005 - 04:19 PM

LauraannM

    Member

  • Topic Starter
  • Member
  • PipPip
  • 19 posts
Thanks, Pieter. I will try them, and when (if) I get a resolution, I'll let you know.

LauraM
  • 0

#29
Metallica
Posted 29 May 2005 - 02:11 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
I just thought of something that might matter.

When you go to the McAfee site do you always use the same way?
(A shortcut or a button in a program)

Regards,
  • 0

#30
Metallica
Posted 29 May 2005 - 07:54 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Try writing mcafee with one "f" instead of two and you will go to the correct site.

:tazz:

seeq has claimed some popular "typo"domains.

Regards,
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP