You are on page 1of 45

Date: Yesterday (events: 312) My Protection (events: 157) 1/2/2010 11:00:53 PM Databases are obsolete Kaspersky Internet Security

1/2/2010 10:44:29 PM Protection is not running Kaspersky Internet Secur ity 1/2/2010 10:43:23 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:43:23 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:43:23 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:43:23 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:43:22 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:42:17 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:42:17 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:42:17 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:42:17 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:42:17 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:41:12 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:41:12 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:41:12 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:41:11 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:41:11 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:40:22 PM Some components are disabled Kaspersky Internet Secur ity 1/2/2010 10:40:06 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:40:05 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:40:05 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office

\POWERPNT.EXE 1/2/2010 10:40:05 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:40:05 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:39:12 PM Deleted: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security D:\I386\APPS\APP14561\src\HPPavillion_Spring06.e xe 1/2/2010 10:39:09 PM Detected: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security D:\I386\APPS\APP14561\src\HPPavillion_Spring06.e xe/WiseSFXDropper/WISE0015.BIN 1/2/2010 10:39:09 PM Deleted: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security D:\I386\APPS\APP14561\src\CompaqPresario_Spring0 6.exe 1/2/2010 10:38:52 PM Detected: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security D:\I386\APPS\APP14561\src\CompaqPresario_Spring0 6.exe/WiseSFXDropper/WISE0015.BIN 1/2/2010 10:38:51 PM Deleted: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security C:\hp\bin\wbug\HPPavillion_Spring06.exe 1/2/2010 10:38:16 PM Detected: not-a-virus:AdWare.Win32.WeatherBug.a Kaspersk y Internet Security C:\hp\bin\wbug\HPPavillion_Spring06.exe/WiseSFXD ropper/WISE0015.BIN 1/2/2010 10:37:54 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:37:54 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:37:54 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:37:54 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:37:54 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:36:49 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:36:49 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:36:49 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:36:48 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:36:48 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:35:43 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:35:43 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe

1/2/2010 10:35:43 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:35:43 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:35:42 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:34:37 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:34:37 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:34:37 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:34:37 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:34:36 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:33:31 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:33:31 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:33:31 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:33:31 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:33:31 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:32:26 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:32:26 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:32:26 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:32:25 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:32:25 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:31:19 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:31:19 PM Detected: Kaspersky Internet Security y.exe

http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla

1/2/2010 10:31:19 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:31:19 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:31:19 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:30:14 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:30:14 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:30:14 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:30:13 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:30:13 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:29:08 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:29:08 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:29:08 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:29:08 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:29:07 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:28:02 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:28:02 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:28:02 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:28:02 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:28:02 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:26:57 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:26:57 PM Detected: Kaspersky Internet Security y.exe

http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla

1/2/2010 10:26:57 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:26:56 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:26:56 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:25:51 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:25:51 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:25:51 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:25:51 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:25:50 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:24:46 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:24:45 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:24:45 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:24:45 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:24:45 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:23:40 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:23:40 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:23:40 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:23:39 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:23:39 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:22:34 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:22:34 PM Detected: Kaspersky Internet Security y.exe

http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla

1/2/2010 10:22:34 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:22:34 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:22:34 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:21:29 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:21:29 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:21:28 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:21:28 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:21:28 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:21:28 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:20:23 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:20:23 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:20:23 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:20:23 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:20:22 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:20:22 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security va.exe

http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja

1/2/2010 10:19:17 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:18:12 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:18:12 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:18:12 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:18:11 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:18:11 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:18:11 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:17:06 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:17:06 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:17:06 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:17:06 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:17:05 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:17:05 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security 32.dll 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security y.exe 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security \POWERPNT.EXE 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security \OUTLLIB.DLL 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security va.exe 1/2/2010 10:16:00 PM Detected: Kaspersky Internet Security \AcroRd32.exe 1/2/2010 10:14:55 PM Detected: Kaspersky Internet Security 32.dll

http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF http://www.viruslist.com/en/advisories/27620 C:\Program Files\Real\RealPlayer\realpla http://www.viruslist.com/en/advisories/34572 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/29320 C:\Program Files\Microsoft Office\Office http://www.viruslist.com/en/advisories/37231 C:\Program Files\Java\jre1.5.0_06\bin\ja http://www.viruslist.com/en/advisories/36983 C:\Program Files\Adobe\Reader 9.0\Reader http://www.viruslist.com/en/advisories/37584 C:\WINDOWS\system32\Macromed\Flash\NPSWF

1/2/2010 10:14:55 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:14:55 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:14:54 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:14:54 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:14:54 PM Detected: http://www.viruslist.com/en/advisories/36983 Kaspersky Internet Security C:\Program Files\Adobe\Reader 9.0\Reader \AcroRd32.exe 1/2/2010 10:14:25 PM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/2/2010 10:14:25 PM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/2/2010 10:14:25 PM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/2/2010 10:14:24 PM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/2/2010 10:14:24 PM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/2/2010 10:14:24 PM Detected: http://www.viruslist.com/en/advisories/36983 Kaspersky Internet Security C:\Program Files\Adobe\Reader 9.0\Reader \AcroRd32.exe 1/2/2010 9:45:10 PM Potentially unwanted software detected Kaspersky Intern et Security 1/2/2010 9:44:08 PM Threats have been detected Kaspersky Internet Secur ity 1/2/2010 9:38:11 PM Potentially unwanted software detected Kaspersky Intern et Security 1/2/2010 9:34:03 PM Threats have been detected Kaspersky Internet Secur ity 1/2/2010 9:22:27 PM Databases are obsolete Kaspersky Internet Security File Anti-Virus (events: 4) 1/2/2010 11:00:38 PM Task started Kaspersky Internet Security File Anti-Virus 1/2/2010 10:40:26 PM Task started Kaspersky Internet Security File Anti-Virus 1/2/2010 10:40:22 PM Task stopped Kaspersky Internet Security File Anti-Virus 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security File Anti-Virus Mail Anti-Virus (events: 2) 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security Mail Anti-Virus 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Mail Anti-Virus Web Anti-Virus (events: 2) 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security Web Anti-Virus 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security

Web Anti-Virus Network Attack Blocker (events: 2) 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security Network Attack Blocker 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Network Attack Blocker Anti-Banner (events: 1) 1/2/2010 10:40:55 PM Task started Kaspersky Internet Security Anti-Banner Anti-Spam (events: 2) 1/2/2010 11:00:38 PM Task started Kaspersky Internet Security Anti-Spam 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Anti-Spam Parental Control (events: 2) 1/2/2010 10:43:24 PM Allowed: http://cds-esd.sun.com/ESD6/JSCDL/jdk/6u17-b04/ jdk-6u17-windows-i586.exe?AuthParam=1262493804_51958aa7df5586d0a38a1416da298dc0& TicketId=B%2Fw4kBuFSFtLQBRBOFZbkgDk&GroupName=CDS&FilePath=/ESD6/JSCDL/jdk/6u17b04/jdk-6u17-windows-i586.exe&File=jdk-6u17-windows-i586.exe Firefox http://cds-esd.sun.com/ESD6/JSCDL/jdk/6u17-b04/jdk-6u17-windows-i586.exe?AuthPar am=1262493804_51958aa7df5586d0a38a1416da298dc0&TicketId=B%2Fw4kBuFSFtLQBRBOFZbkg Dk&GroupName=CDS&FilePath=/ESD6/JSCDL/jdk/6u17-b04/jdk-6u17-windows-i586.exe&Fil e=jdk-6u17-windows-i586.exe Databases 1/2/2010 10:41:11 PM Task started Kaspersky Internet Security Parental Control Application Control (events: 113) 1/2/2010 11:10:22 PM WebToolBar component Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:06:36 PM Max Registry Cleaner Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:06:06 PM Allowed: Using program interfaces of other process DISCover Stream Hub Using program interfaces of other process c:\progr am files\disc\discstreamhub.exe Using program interfaces of other process 1/2/2010 11:06:06 PM Allowed: Using system program interfaces DISCover Stream Hub Use system function for hidden sending of data through the netwo rk Using system program interfaces 1/2/2010 11:06:04 PM Allowed: Access to password storage DISCover Stream Hub Access to protected storage Access to password storage 1/2/2010 11:03:09 PM HP Data Archive Module Placed in group Trusted Known on the database of the known software 1/2/2010 11:02:06 PM Allowed: Using system program interfaces DISCover Drop & Play System Executable Use system function for hidden sending of data t hrough the network Using system program interfaces 1/2/2010 11:02:04 PM Allowed: Setting debug privileges DISCover Drop & Play System Executable Setting debug privileges Setting debug pr ivileges 1/2/2010 11:02:03 PM Allowed: Using program interfaces of other process DISCover Drop & Play System Executable Using program interfaces of other proces s c:\program files\disc\discover.exe Using program interfaces of othe r process 1/2/2010 11:02:03 PM Allowed: Access to critical system objects DISCover Drop & Play System Executable Access to critical system objects Access to critical system objects 1/2/2010 11:01:58 PM Allowed: Using program interfaces of other process InstallShield Update Service Update Manager Using program interfaces of othe r process c:\program files\common files\installshield\updateservice\isuspm .exe Using program interfaces of other process 1/2/2010 11:01:57 PM InstallShield Update Service Agent Placed i n group Trusted Known on the database of the known software 1/2/2010 11:01:57 PM InstallShield Update Service Update Manager

Placed in group Trusted Known on the database of the known software 1/2/2010 11:01:54 PM Allowed: Using program interfaces of other process iTunesHelper Module Using program interfaces of other process c:\progr am files\itunes\ituneshelper.exe Using program interfaces of other proces s 1/2/2010 11:01:51 PM Allowed: Setting debug privileges iTunesHelper Mod ule Setting debug privileges Setting debug privileges 1/2/2010 11:01:45 PM Java(TM) 2 Platform Standard Edition binary Placed in group Trusted Known on the database of the known software 1/2/2010 11:01:27 PM Allowed: Using program interfaces of other process igfxTray Module Using program interfaces of other process c:\windows\syste m32\igfxtray.exe Using program interfaces of other process 1/2/2010 11:01:27 PM igfxsrvc Module Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 11:01:27 PM igfxTray Module Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 11:01:24 PM Allowed: Setting debug privileges Realtek Azalia A udio - Event Monitor Setting debug privileges Setting debug pr ivileges 1/2/2010 11:01:24 PM Realtek Azalia Audio - Event Monitor Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:01:21 PM Allowed: Setting debug privileges KBD EXE Setting debug privileges Setting debug privileges 1/2/2010 11:00:56 PM Adobe Acrobat SpeedLauncher Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:00:55 PM Max Registry Cleaner LU Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:00:55 PM HP Boot Optimizer Placed in group Low Rest ricted High value of threat rating calculated heuristically 1/2/2010 11:00:54 PM Userinit Logon Application Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:00:54 PM Windows Update Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 11:00:54 PM Media Center Host Module Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:00:44 PM Image Mastering API Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security Application Control 1/2/2010 10:43:53 PM Kaspersky Internet Security 2010 Setup Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:43:38 PM Kaspersky Internet Security 2010 Setup Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:35:00 PM Apple Software Update Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:32:55 PM Allowed: Access to password storage Microsoft Outloo k Access to protected storage Access to password storage 1/2/2010 10:32:55 PM Microsoft Outlook Placed in group Trusted 1/2/2010 10:31:26 PM Allowed: Setting debug privileges Microsoft Outloo k Setting debug privileges Setting debug privileges 1/2/2010 10:30:47 PM Adobe Reader 9.2 Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:30:08 PM GSWIN32C.EXE Placed in group Trusted Known on the database of the known software 1/2/2010 10:29:55 PM CutePDF Application Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:26:19 PM OHOTFIX.EXE Placed in group Trusted Known on the database of the known software 1/2/2010 10:26:12 PM Win32 Cabinet Self-Extractor Placed in group Trusted Signed by the digital signature of entrusted manufacturers

1/2/2010 10:23:52 PM Allowed: Setting debug privileges Microsoft PowerP oint for Windows Setting debug privileges Setting debug pr ivileges 1/2/2010 10:23:02 PM Allowed: Setting debug privileges Microsoft PowerP oint for Windows Setting debug privileges Setting debug pr ivileges 1/2/2010 10:22:59 PM Microsoft PowerPoint for Windows Placed i n group Low Restricted High value of threat rating calculated heuristically 1/2/2010 10:20:18 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/2/2010 10:20:18 PM Microsoft Resource File To COFF Object Conversion Utility Placed in group Trusted Known on the database of the known softw are 1/2/2010 10:20:18 PM Visual C# Command Line Compiler Placed in group Trusted Known on the database of the known software 1/2/2010 10:20:18 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/2/2010 10:20:18 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/2/2010 10:20:17 PM myFTP Placed in group Low Restricted High val ue of threat rating calculated heuristically 1/2/2010 10:17:55 PM Adobe Updater Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 10:17:01 PM Adobe Reader 9.2 Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:16:08 PM Java(TM) Quick Starter binary Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:12:00 PM Verify Class ID Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 10:11:32 PM IEEE-1284.4-1999 Network Driver (Windows) Placed in group Trusted Known on the database of the known software 1/2/2010 10:11:30 PM Windows Shell Common Dll Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 10:11:30 PM PRODUCTCONTEXT.MSI Placed in group Trusted Known on the database of the known software 1/2/2010 10:08:08 PM Notepad Placed in group Trusted Signed by the di gital signature of entrusted manufacturers 1/2/2010 9:51:00 PM Microsoft Feeds Synchronization Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:24:53 PM Microsoft Windows Search Filter Host Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:24:51 PM Microsoft Windows Search Protocol Host Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:33 PM Kaspersky Anti-Virus GUI Windows part Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:33 PM Microsoft(C) Register Server Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:33 PM Kaspersky Internet Security Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:33 PM Windows installer Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:33 PM Firefox Placed in group Trusted Signed by the di gital signature of entrusted manufacturers 1/2/2010 9:22:32 PM Microsoft Outlook Placed in group Low Rest ricted High value of threat rating calculated heuristically 1/2/2010 9:22:32 PM DISCover Stream Hub Placed in group Low Rest ricted High value of threat rating calculated heuristically

1/2/2010 9:22:32 PM DISCover Upd. Manager Placed in group Low Rest ricted High value of threat rating calculated heuristically 1/2/2010 9:22:32 PM DISCover Drop & Play System Executable Placed i n group Low Restricted High value of threat rating calculated heuristically 1/2/2010 9:22:32 PM InstallShield Update Service Scheduler Placed i n group Trusted Known on the database of the known software 1/2/2010 9:22:32 PM iPodService Module (32-bit) Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:32 PM iTunesHelper Module Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:32 PM hpsysdrv Placed in group Low Restricted High value of threat rating calculated heuristically 1/2/2010 9:22:32 PM KBD EXE Placed in group Trusted Known on the dat abase of the known software 1/2/2010 9:22:32 PM Windows Search System Tray Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:32 PM HP Digital Imaging Monitor (CUE) Placed i n group Trusted Known on the database of the known software 1/2/2010 9:22:32 PM Main program for Octoshape client Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:32 PM Java(TM) Platform SE binary Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:32 PM RCSystemTray Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM Acronis Scheduler Helper Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM Monitor for Acronis True Image Backup Archive Ex plorer Placed in group Trusted Signed by the digital signature of entrusted man ufacturers 1/2/2010 9:22:31 PM Acronis True Image Monitor Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM Event Monitor User Notification Tool Placed i n group Trusted Known on the database of the known software 1/2/2010 9:22:31 PM persistence Module Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM hkcmd Module Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM Application Layer Gateway Service Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM COM Surrogate Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 9:22:31 PM Windows Explorer Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM Windows Security Center Notification App Placed in group Trusted Signed by the digital signature of entrusted manufacture rs 1/2/2010 9:22:30 PM WMI Placed in group Trusted Signed by the di gital signature of entrusted manufacturers 1/2/2010 9:22:30 PM ELSERVICE.EXE Placed in group Trusted Known on the database of the known software 1/2/2010 9:22:30 PM Microsoft Windows Search Indexer Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM MCRD Device Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM Acronis True Image Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM PML Driver Placed in group Trusted Known on the database of the known software 1/2/2010 9:22:30 PM LSSRVC.EXE Placed in group Trusted Known on the database of the known software

1/2/2010 9:22:30 PM Java(TM) Quick Starter Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM RAID Monitor Placed in group Trusted Known on the database of the known software 1/2/2010 9:22:30 PM Acronis True Image Notify Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM Media Center Scheduler Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM Media Center Receiver Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:30 PM Bonjour Service Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Apple Mobile Device Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Acronis Scheduler 2 Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Spooler SubSystem App Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Generic Host Process for Win32 Services Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM LSA Shell (Export Version) Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Services and Controller app Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Windows NT Logon Application Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Client Server Runtime Process Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:29 PM Windows NT Session Manager Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Application Control Proactive Defense (events: 8) 1/2/2010 11:00:53 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/2/2010 11:00:53 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security Proactive Defense 1/2/2010 10:40:35 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/2/2010 10:40:35 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/2/2010 9:23:10 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/2/2010 9:23:10 PM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Proactive Defense Firewall (events: 2) 1/2/2010 11:00:38 PM Task started Kaspersky Internet Security Firewall 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security Firewall IM Anti-Virus (events: 2) 1/2/2010 11:00:39 PM Task started Kaspersky Internet Security IM Anti-Virus 1/2/2010 9:22:27 PM Task started Kaspersky Internet Security IM Anti-Virus Objects Scan (events: 9)

1/2/2010 11:22:09 PM Task started Kaspersky Internet Security Objects Scan 1/2/2010 11:21:59 PM Task stopped Kaspersky Internet Security Objects Scan 1/2/2010 11:21:50 PM Task started Kaspersky Internet Security Objects Scan 1/2/2010 10:14:49 PM Task completed Kaspersky Internet Security Vulnerability Scan 1/2/2010 10:11:59 PM Task started Kaspersky Internet Security Vulnerability Scan 1/2/2010 10:07:09 PM Task completed Kaspersky Internet Security Rootkit Scan 1/2/2010 10:02:47 PM Task started Kaspersky Internet Security Rootkit Scan 1/2/2010 9:57:13 PM Task completed Kaspersky Internet Security Full Scan 1/2/2010 9:25:22 PM Task started Kaspersky Internet Security Full Scan My Update Center (events: 6) 1/2/2010 11:13:35 PM Task completed Kaspersky Internet Security My Update Center 1/2/2010 11:13:09 PM Task started Kaspersky Internet Security My Update Center 1/2/2010 11:11:11 PM Task completed Kaspersky Internet Security My Update Center 1/2/2010 11:09:34 PM Task started Kaspersky Internet Security My Update Center 1/2/2010 9:24:52 PM Task completed Kaspersky Internet Security My Update Center 1/2/2010 9:22:33 PM Task started Kaspersky Internet Security My Update Center Date: Today (events: 598) My Protection (events: 8) 1/3/2010 1:25:17 AM Protection is not running Kaspersky Internet Secur ity 1/3/2010 8:07:39 AM Detected: http://www.viruslist.com/en/advisories/37231 Kaspersky Internet Security C:\Program Files\Java\jre1.5.0_06\bin\ja va.exe 1/3/2010 8:07:40 AM Detected: http://www.viruslist.com/en/advisories/29320 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \OUTLLIB.DLL 1/3/2010 8:07:40 AM Detected: http://www.viruslist.com/en/advisories/34572 Kaspersky Internet Security C:\Program Files\Microsoft Office\Office \POWERPNT.EXE 1/3/2010 8:07:40 AM Detected: http://www.viruslist.com/en/advisories/27620 Kaspersky Internet Security C:\Program Files\Real\RealPlayer\realpla y.exe 1/3/2010 8:07:40 AM Detected: http://www.viruslist.com/en/advisories/37584 Kaspersky Internet Security C:\WINDOWS\system32\Macromed\Flash\NPSWF 32.dll 1/3/2010 8:14:12 AM Your computer is protected Kaspersky Internet Secur ity 1/3/2010 9:46:11 AM Protection is not running Kaspersky Internet Secur ity File Anti-Virus (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security File Anti-Virus 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security File Anti-Virus 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security

File Anti-Virus Mail Anti-Virus (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Mail Anti-Virus 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Mail Anti-Virus 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Mail Anti-Virus Web Anti-Virus (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Web Anti-Virus 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Web Anti-Virus 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Web Anti-Virus Network Attack Blocker (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Network Attack Blocker 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Network Attack Blocker 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Network Attack Blocker Anti-Banner (events: 328) 1/3/2010 9:17:59 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1401404210@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=5&o=HSW&rsi=not Database s 1/3/2010 9:17:59 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1401404210@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=5&o=HSW&rsi=not Database s 1/3/2010 9:17:59 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1401404210@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=5&o=HSW&rsi=not Database s 1/3/2010 9:17:59 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1401404210@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=5&o=HSW&rsi=not Database s 1/3/2010 9:17:59 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1401404210@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=5&o=HSW&rsi=not Database s 1/3/2010 9:17:52 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1818597818@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=4&o=HSW&rsi=not Database s 1/3/2010 9:17:52 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1818597818@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=4&o=HSW&rsi=not Database s 1/3/2010 9:17:52 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies

/nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1818597818@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=4&o=HSW&rsi=not Database s 1/3/2010 9:17:52 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1818597818@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=4&o=HSW&rsi=not Database s 1/3/2010 9:17:52 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1818597818@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=4&o=HSW&rsi=not Database s 1/3/2010 9:17:45 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1084561308@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=3&o=HSW&rsi=not Database s 1/3/2010 9:17:45 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1084561308@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=3&o=HSW&rsi=not Database s 1/3/2010 9:17:45 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1084561308@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=3&o=HSW&rsi=not Database s 1/3/2010 9:17:45 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1084561308@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=3&o=HSW&rsi=not Database s 1/3/2010 9:17:45 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1084561308@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=3&o=HSW&rsi=not Database s 1/3/2010 9:17:38 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1776191990@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=2&o=HSW&rsi=not Database s 1/3/2010 9:17:38 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1776191990@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=2&o=HSW&rsi=not Database s 1/3/2010 9:17:38 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1776191990@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=2&o=HSW&rsi=not Database s 1/3/2010 9:17:38 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1776191990@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=2&o=HSW&rsi=not Database s 1/3/2010 9:17:38 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies

/nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1776191990@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=2&o=HSW&rsi=not Database s 1/3/2010 9:17:30 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1869670666@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=1&o=HSW&rsi=not Database s 1/3/2010 9:17:30 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1869670666@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=1&o=HSW&rsi=not Database s 1/3/2010 9:17:30 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1869670666@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=1&o=HSW&rsi=not Database s 1/3/2010 9:17:30 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1869670666@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=1&o=HSW&rsi=not Database s 1/3/2010 9:17:30 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1869670666@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=1&o=HSW&rsi=not Database s 1/3/2010 9:17:08 PM Denied: */adiframe* Firefox http://recipes.h owstuffworks.com/adiframe/pixels Databases 1/3/2010 9:17:08 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1570510345@TopBann er,SponLogo,MedRect,Tower,TopRight!Tower?tc=Top10&p=0&o=HSW&rsi=not Database s 1/3/2010 9:17:08 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1570510345@TopBann er,SponLogo,MedRect,Tower,TopRight!MedRect?tc=Top10&p=0&o=HSW&rsi=not Database s 1/3/2010 9:17:08 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1570510345@TopBann er,SponLogo,MedRect,Tower,TopRight!TopRight?tc=Top10&p=0&o=HSW&rsi=not Database s 1/3/2010 9:17:08 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1570510345@TopBann er,SponLogo,MedRect,Tower,TopRight!TopBanner?tc=Top10&p=0&o=HSW&rsi=not Database s 1/3/2010 9:17:08 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/recipes.howstuffworks.com/preempt/ros/recipies /nutrition/lifestyle/5-healthy-foods-that-are-fun-to-make.htm/1570510345@TopBann er,SponLogo,MedRect,Tower,TopRight!SponLogo?tc=Top10&p=0&o=HSW&rsi=not Database s 1/3/2010 9:17:06 PM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases 1/3/2010 9:16:14 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/104 2453123@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!SponLogo?tc=HomePage&

p=0&o=HSW&rsi=not Databases 1/3/2010 9:16:14 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/104 2453123@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!BotBanner?tc=HomePage &p=0&o=HSW&rsi=not Databases 1/3/2010 9:16:14 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/104 2453123@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!VidSponLogo?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 9:16:14 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/104 2453123@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!MedRectHome?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 9:16:14 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/104 2453123@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!TopHome?tc=HomePage&p =0&o=HSW&rsi=not Databases 1/3/2010 9:16:04 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_mjx.ads/adventure.howstuffworks.com/preempt/ros/adven ture/outdoor/ranch-life/extreme-climates-affect-trucks.htm/1017151465@MedRect,To wer,PartnerBox?tc=ToyotaArticle&p=0&o=HSW&rsi=not&aff=TOYOTA Databases 1/3/2010 9:12:40 PM Denied: ad.* Firefox http://ad.yieldmanager.c om/pixel?id=175895&t=2%20width=1 Databases 1/3/2010 9:12:40 PM Denied: ads.*.* Firefox http://ads.yimg.com/a/a/ ch/charles_schwab_123009/h1_1230/schwab_ai_q110_brand-lovetrade_120x60.gif Databases 1/3/2010 9:12:40 PM Denied: ads.*.* Firefox http://ads.yimg.com/a/a/ fi/fidelity09/brokerage_120x60_1.gif Databases 1/3/2010 9:12:40 PM Denied: ad.* Firefox http://ad.wsod.com/embed /8bec9b10877d5d7fd7c0fb6e6a631357/473.0.iframe.120x60/1262574767308734?click=htt p://us.ard.yahoo.com/SIG=15letne67/M=757168.13839813.13858108.4886381/D=fin/S=95 993639:FB2/Y=YAHOO/EXP=1262581967/L=Q34cEEwNclLqwdzJS0EgcQAYS1b8sEtBXK8ABFaH/B=2 lGBY0PDoH8-/J=1262574767308734/K=OPRSCd.UmbLlbZGfQZjcLw/A=5956963/R=0/* Database s 1/3/2010 9:12:40 PM Denied: */ad/* Firefox http://ad.doubleclick.ne t/ad/N6036.Yahoo.com/B4163896.40;sz=1x1;ord=1262574767308734? Databases 1/3/2010 9:12:40 PM Denied: ad.* Firefox http://ad.doubleclick.ne t/adi/N3382.yahoo.comOX2562/B4160537.45;sz=120x60;dcopt=rcl;mtfIFPath=nofile;cli ck=http://us.ard.yahoo.com/SIG=15ln70qvr/M=757214.13840875.13863096.4227981/D=fi n/S=95993639:FB2/Y=YAHOO/EXP=1262581967/L=Q34cEEwNclLqwdzJS0EgcQAYS1b8sEtBXK8ABF aH/B=11GBY0PDoH8-/J=1262574767308734/K=OPRSCd.UmbLlbZGfQZjcLw/A=5958928/R=0/*;or d=1265433069457? Databases 1/3/2010 9:12:40 PM Denied: */ads/* Firefox http://www.tumri.net/ads /mts/5194?YC1_YCT=http://us.ard.yahoo.com/SIG=15mbgmpbc/M=757168.13839844.138577 49.1679323/D=fin/S=95993639:LREC/Y=YAHOO/EXP=1262581967/L=Q34cEEwNclLqwdzJS0EgcQ AYS1b8sEtBXK8ABFaH/B=4FGBY0PDoH8-/J=1262574767308734/K=OPRSCd.UmbLlbZGfQZjcLw/A= 5956585/R=0/SIG=15fb40q9u/*&YC1_LineId=YC1_FINANCEQUOTERESULTS_300x250&YC1_YCG=& YC1_YOB=&YC1_YZ=&YC1_BT2=;&x2_TC_1=http://ad.wsod.com/click/8bec9b10877d5d7fd7c0 fb6e6a631357/689.0.redir.300x250/?redir= Databases 1/3/2010 9:11:54 PM Denied: casalemedia.com Firefox http://as.casale media.com/s?s=110622&u=http%3A//www.topix.com/&f=1&id=4872702391.262005 Database s 1/3/2010 9:11:54 PM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases 1/3/2010 9:11:54 PM Denied: ad.* Firefox http://ad.doubleclick.ne t/adi/tpx.news.special/homepage;gc=1668637532,1551453530;gkwt=h;gkw=thiensville, wi,thiensville,wisconsin;dc_ref=www.topix.com/;sz=728x90;tile=10;ord=333088630? Databases 1/3/2010 9:11:54 PM Denied: ad.* Firefox http://ad.doubleclick.ne t/adj/tpx.news.special/homepage;gc=1668637532;gkwt=h;gkw=thiensville,wi,thiensvi

lle,wisconsin;sz=300x250;dcopt=ist;tile=6;ord=333088630? Databases 1/3/2010 9:11:54 PM Denied: *advert*.gif Firefox http://topix.cac hefly.net/pics/label_advertisment.gif Databases 1/3/2010 9:11:54 PM Denied: *_ad_* Firefox http://topix.cachefly.ne t/pics/hat_ad_label.gif Databases 1/3/2010 9:11:51 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/__utm.gif?utmwv=6.1&utmn=2072516198&utmsr=1280x1024&utmsc=32-bit&utmu l=en-us&utmje=1&utmjv=1.5&utmfl=10.0%20r32&utmdt=Getting%20Started%20with%20Fire fox&utmhn=www.mozilla.com&utmp=/outbound/en-US/www.topix.com/ Databases 1/3/2010 9:11:49 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/content/external-link-large.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/__utm.gif?utmwv=6.1&utmn=713110130&utmsr=1280x1024&utmsc=32-bit&utmul =en-us&utmje=1&utmjv=1.5&utmfl=10.0%20r32&utmdt=Getting%20Started%20with%20Firef ox&utmhn=www.mozilla.com&utmr=-&utmp=/en-US/firefox/central/ Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/footer-portal-border.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/footer-logo.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/mozilla-info.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/firefox-info.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/column-divider.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-shareaholic.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-facebook.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-yelp.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-craigslist.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-cooliris.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-miro.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-hypemachine.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-youtube.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-answers.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-howstuffworks.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-linkedin.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-wikipedia.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-topix.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-clipmarks.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-rtm.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-googledocs.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/feature-background.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil

la.com/img/tignish/template/mozilla-logo.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/header-background.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/background-tile.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/background-gettingstarted.jpg Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/tab-background.png Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/min/min.js?g=js_stats Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/js/mozilla-pager.js Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/utilities/utilities.js Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/container/container_core-min.js Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/yahoo-dom-event/yahoo-dom-event.js Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/template.css Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/getting-started.css Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/content.css Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/reset-fonts-grids/reset-fonts-grids.css Database s 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/portal-page.css Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/js/util.js Databases 1/3/2010 9:11:45 PM Allowed: mozilla.com Firefox http://www.mozil la.com/en-US/firefox/central/ Databases 1/3/2010 9:11:16 PM Denied: *300x250* Firefox http://trvlnet.a dbureau.net/jserver/acc_random=4570537957/SITE=FlightView.FlightViewDestROS/AREA =NA.US.Wisconsin/AAMSZ=300x250/VIEWCOUNTER=03/EXCLUSION=/SI_SITE=/Keyword=%20%20 /pageid=8160149316 Databases 1/3/2010 9:11:16 PM Denied: *728x90* Firefox http://trvlnet.a dbureau.net/jserver/acc_random=3521246224/SITE=FlightView.FlightViewDestROS/AREA =NA.US.Wisconsin/AAMSZ=728x90/VIEWCOUNTER=02/EXCLUSION=/SI_SITE=/Keyword=%20%20/ pageid=8160149316 Databases 1/3/2010 9:11:02 PM Denied: *728x90* Firefox http://trvlnet.a dbureau.net/jserver/acc_random=7436441161/SITE=FlightView.FlightViewDestROS/AREA =NA.US.Wisconsin/AAMSZ=728x90/VIEWCOUNTER=01/EXCLUSION=/SI_SITE=/Keyword=%20%20/ pageid=1025303017 Databases 1/3/2010 9:11:02 PM Denied: *300x250* Firefox http://trvlnet.a dbureau.net/jserver/acc_random=8269745865/SITE=FlightView.FlightViewDestROS/AREA =NA.US.Wisconsin/AAMSZ=300x250/VIEWCOUNTER=02/EXCLUSION=/SI_SITE=/Keyword=%20%20 /pageid=299962802 Databases 1/3/2010 9:11:01 PM Denied: *advert*.gif Firefox http://www.fligh tview.com/res/img/advert_vertical.gif Databases 1/3/2010 9:11:01 PM Denied: *hitbox* Firefox http://stats.hit box.com/js/hbp.js Databases 1/3/2010 9:10:50 PM Denied: *300x250* Firefox http://trvlnet.a dbureau.net/jserver/acc_random=3577611804/SITE=FlightView.FlightViewDestROS/AREA =/AAMSZ=300x250/VIEWCOUNTER=01/EXCLUSION=/SI_SITE=/Keyword=%20%20/pageid=3395651 738 Databases 1/3/2010 9:10:50 PM Denied: ad.* Firefox http://ad.yieldmanager.c om/pixel?id=56856&t=2 Databases

1/3/2010 9:10:50 PM Denied: *fastclick* Firefox http://media.fas tclick.net/rt?cn1=urt61&v1=x Databases 1/3/2010 9:10:12 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=300x250skipass_noel_2.gif&contenttype=gif Databases 1/3/2010 9:10:12 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=1385&clientid=650&zoneid=17&source=&block=0&cappi ng=0&cb=a080ed978153f093caa3564da110852a Databases 1/3/2010 9:10:12 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=banner_skipass2_3.jpg&contenttype=jpeg Database s 1/3/2010 9:10:12 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=1518&clientid=676&zoneid=16&source=&block=0&cappi ng=0&cb=367f59b02c3082669305bec0240b50d0 Databases 1/3/2010 9:09:57 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=1464&clientid=683&zoneid=246&source=&block=0&capp ing=0&cb=9501a4d46c2447001a62ee8e361cdf72 Databases 1/3/2010 9:09:57 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=menuiresskipass728x90px.swf&contenttype=swf&cli ckTAG=http://reclames.skipass.com/adclick.php%3Fbannerid=1510%26zoneid=14%26sour ce=%26dest=http%3A%2F%2Fwww.lesmenuires.com%2Findex_fr.php&clickTag=http://recla mes.skipass.com/adclick.php%3Fbannerid=1510%26zoneid=14%26source=%26dest=http%3A %2F%2Fwww.lesmenuires.com%2Findex_fr.php Databases 1/3/2010 9:09:57 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=1143&clientid=543&zoneid=15&source=&block=0&cappi ng=0&cb=c039482c53f91c4c80e80e3525cef670 Databases 1/3/2010 9:09:57 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=471&clientid=32&zoneid=28&source=&block=0&capping =0&cb=a3bc7bbf9d57681ecfb9eb137f0073a2 Databases 1/3/2010 9:09:57 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=globalpub.jpg&contenttype=jpeg Databases 1/3/2010 9:09:57 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=cat-ski.jpg&contenttype=jpeg Databases 1/3/2010 9:09:57 PM Denied: */adimage* Firefox http://reclames. skipass.com/adimage.php?filename=pavenew.jpg&contenttype=jpeg Databases 1/3/2010 9:09:57 PM Denied: */adlog* Firefox http://reclames. skipass.com/adlog.php?bannerid=1510&clientid=722&zoneid=14&source=&block=0&cappi ng=0&cb=2c8a5d0d2377c02220228e123851c886 Databases 1/3/2010 9:09:54 PM Denied: weborama.fr Firefox http://script.we borama.fr/gold.js Databases 1/3/2010 9:09:54 PM Denied: cybermonitor.com Firefox http://j s.cybermonitor.com/skipass.js Databases 1/3/2010 9:02:33 PM Denied: exponential.com Firefox http://tags.expo 9.exponential.com/tags/TimeAndDatecom/US/tags.js Databases 1/3/2010 9:02:33 PM Denied: *300x250* Firefox http://tag.conte xtweb.com/TagPublish/getjs.aspx?action=VIEWAD&cwrun=200&cwadformat=300X250&cwpid =506245&cwwidth=300&cwheight=250&cwpnet=1&cwtagid=26671 Databases 1/3/2010 9:00:53 PM Denied: */banner/* Firefox http://www.green facts.org/en/_images/banner/digest-top-banner.gif Databases 1/3/2010 9:00:52 PM Denied: *160x600* Firefox http://open.ad.y ieldmanager.net/a1?V=3&pubId=22189117077&site=Mequon%20NOW&cntTy=js&cTopId=20201 001&cSctn=Home%20Page&tagTy=multi_secure&nAdP=13&rFrame=1&flv=10.0%20r32&cb=1262 574052217&url=http%3A%2F%2Fwww.mequonnow.com%2F&sz0=728x90&dlv0=ipatf&conTy0=fn_ news&sltId0=0&sz1=300x100&dlv1=ipatf&conTy1=fn_news&sltId1=1&sz2=160x600&dlv2=ip stf&conTy2=fn_news&sltId2=2&sz3=300x250&dlv3=ipatf&conTy3=fn_news&sltId3=3&sz4=3 00x250&dlv4=ipstf&conTy4=fn_news&sltId4=4&sz5=728x90&dlv5=ipbtf&conTy5=fn_news&s ltId5=5&sz6=88x31&dlv6=ipatf&conTy6=fn_news&sltId6=6&sz7=88x31&dlv7=ipstf&conTy7 =fn_news&sltId7=7&sz8=234x60&dlv8=ipatf&conTy8=fn_news&sltId8=8&sz9=300x100&dlv9 =ipstf&conTy9=fn_news&sltId9=9&sz10=300x100&dlv10=ipbtf&conTy10=fn_news&sltId10= 10&sz11=300x100&dlv11=ipstf&conTy11=fn_news&cCat11=Comm_Watch&sltId11=11&sz12=30

0x600&dlv12=ipstf&conTy12=fn_news&sltId12=12&byt=%3Chead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meta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2F html%3B%20cha Databases 1/3/2010 8:49:22 PM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@Hidden2?keywords=no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@Tile2?keywords=no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@Hidden1?keywords=no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@Tile1?keywords=no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon6?keywords= no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon5?keywords= no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon3?keywords= no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@WxSpon?keywords=no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon4?keywords= no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon2?keywords= no Databases 1/3/2010 8:47:34 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PdSearch?keywords=n o Databases 1/3/2010 8:47:33 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageSpon?keywords=n o Databases 1/3/2010 8:47:33 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@HeaderSpon?keywords =no Databases

1/3/2010 8:47:33 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@WindowShade?keyword s=no Databases 1/3/2010 8:47:33 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1734662751@PageCounter?keyword s=no Databases 1/3/2010 8:47:33 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_mjx.ads/www.weather.com/p/f/r/p/5day/us/wi/617/thiensville /53092./1734662751@PageCounter,HeaderSpon,WindowShade,WxSpon,PageSpon,PageSpon2, PdSearch,PageSpon3,PageSpon4,PageSpon5,PageSpon6,Tile1,Tile2,Hidden1,Hidden2?pro vider=pulse&context=undcl_36hr&pdsrch=300x170&temp=13&uv=0&humid=59&dew=4&wind=1 5&cond=cloud_partly&templ1=9&temph2=21&templ2=10&fcond2=snow_showers&temph3=22&t empl3=15&fcond3=snow_showers&&pollen=0&age=2010&gender=%20&cobrand=undefined&idt ype=zip&vw=2&mode=normal&dec=undcl&cc=us&st=wi&dma=617&ct=thiensville&zip=53092& cid=9 Databases 1/3/2010 8:47:27 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@Hidden1?keywords=no Databases 1/3/2010 8:47:27 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@Hidden2?keywords=no Databases 1/3/2010 8:47:26 PM Denied: 2o7.net Firefox http://survey.112.2o7.ne t/survey/dynamic/suites/126/twciwx/list.js?562366824747 Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PageSpon4?keywords= no Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PageSpon3?keywords= no Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PdSearch?keywords=n o Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PageSpon2?keywords= no Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PageSpon?keywords=n o Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@HeaderSpon?keywords =no Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@Driver1?keywords=no Databases 1/3/2010 8:47:26 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@WindowShade?keyword s=no Databases 1/3/2010 8:47:24 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_nx.ads/nx.weather.com/noads/1245938531@PageCounter?keyword s=no Databases 1/3/2010 8:47:24 PM Denied: */ads/* Firefox http://www.weather.com/R ealMedia/ads/adstream_mjx.ads/www.weather.com/p/f/r/p/5day/us/wi/617/thiensville /53092./1245938531@PageCounter,HeaderSpon,WindowShade,Driver1,PageSpon,PageSpon2 ,PdSearch,PageSpon3,PageSpon4,Hidden1,Hidden2?provider=pulse&context=undcl_tenda y&templ1=9&temph2=21&templ2=10&fcond2=snow_showers&temph3=22&templ3=15&fcond3=sn ow_showers&&pollen=0&age=2010&gender=%20&cobrand=undefined&idtype=zip&vw=1&mode= normal&dec=undcl&cc=us&st=wi&dma=617&ct=thiensville&zip=53092&cid=9 Database s 1/3/2010 8:47:24 PM Denied: *.revsci.net Firefox http://js.revsci .net/gateway/gw.js?csid=K06578 Databases

1/3/2010 8:46:56 PM Denied: *.intellitxt.* Firefox http://geekstogo .us.intellitxt.com/intellitxt/front.asp?ipid=21167 Databases 1/3/2010 8:46:32 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_mjx.ads/adventure.howstuffworks.com/preempt/ros/adven ture/outdoor/ranch-life/extreme-climates-affect-trucks.htm/1295311383@MedRect,To wer,PartnerBox?tc=ToyotaArticle&p=1&o=HSW&rsi=not&aff=TOYOTA Databases 1/3/2010 8:46:06 PM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases 1/3/2010 8:46:06 PM Denied: */adiframe* Firefox http://adventure .howstuffworks.com/adiframe/pixels Databases 1/3/2010 8:46:00 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_mjx.ads/adventure.howstuffworks.com/preempt/ros/adven ture/outdoor/ranch-life/extreme-climates-affect-trucks.htm/1338833275@MedRect,To wer,PartnerBox?tc=ToyotaArticle&p=0&o=HSW&rsi=not&aff=TOYOTA Databases 1/3/2010 8:45:43 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/163 2100993@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!BotBanner?tc=HomePage &p=0&o=HSW&rsi=not Databases 1/3/2010 8:45:43 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/163 2100993@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!TopHome?tc=HomePage&p =0&o=HSW&rsi=not Databases 1/3/2010 8:45:43 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/163 2100993@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!MedRectHome?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 8:45:43 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/163 2100993@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!VidSponLogo?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 8:45:43 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/163 2100993@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!SponLogo?tc=HomePage& p=0&o=HSW&rsi=not Databases 1/3/2010 8:27:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 8:27:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 8:14:48 PM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262571288129&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8494067626122848&slotname =GTG-Forum-Topic&page_slots=GTG-Forum-Topic&cookie_enabled=1&ga_vid=464016353.12 62571288&ga_sid=1262571288&ga_hid=1492015867&ga_fc=true&url=http%3A%2F%2Fwww.gee kstogo.com%2Fforum%2FWorm-Win32-NetSky-virus-t263240.html%26pid%3D1725098%23entr y1725098&lmt=1262571287&dt=1262571288433&cc=100&biw=1164&bih=745&ifi=1&u_tz=-360 &u_his=1&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_n mime=104&flash=10.0.32 Databases 1/3/2010 8:14:48 PM Denied: *.intellitxt.* Firefox http://geekstogo .us.intellitxt.com/intellitxt/front.asp?ipid=21167 Databases 1/3/2010 8:14:48 PM Denied: ad2.*.* Firefox http://ad2.netshelter.ne t/adj/ns.geekstogo/general;kw=;tile=1;sz=300x250,336x280;ord=9291936854002310? Databases 1/3/2010 8:14:48 PM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases 1/3/2010 7:00:41 PM Allowed: windowsupdate.com Generic Host Process for Win32 Services http://download.windowsupdate.com/v9/windowsupdate/redir /muv4wuredir.cab?1001040100 Databases 1/3/2010 7:00:35 PM Allowed: windowsupdate.com Generic Host Process for Win32 Services http://download.windowsupdate.com/v9/windowsupdate/redir /muv4wuredir.cab?1001040100 Databases

1/3/2010 7:00:34 PM Allowed: windowsupdate.com Generic Host Process for Win32 Services http://download.windowsupdate.com/v9/windowsupdate/a/sel fupdate/WSUS3/x86/Other/wsus3setup.cab?1001040100 Databases 1/3/2010 7:00:34 PM Allowed: windowsupdate.com Generic Host Process for Win32 Services http://download.windowsupdate.com/v9/windowsupdate/a/sel fupdate/WSUS3/x86/Other/wsus3setup.cab?1001040100 Databases 1/3/2010 7:00:34 PM Allowed: update.microsoft.com Generic Host Process for Win32 Services http://www.update.microsoft.com/v9/windowsupdate/selfupd ate/wuident.cab?1001040100 Databases 1/3/2010 7:00:29 PM Allowed: windowsupdate.com Generic Host Process for Win32 Services http://download.windowsupdate.com/v9/windowsupdate/redir /muv4wuredir.cab?1001040100 Databases 1/3/2010 5:12:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 5:12:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 4:57:08 PM Denied: *a.tribalfusion.* Firefox http://a .tribalfusion.com/i.ad?site=bluekai&adSpace=ros&size=0x0&bksrc=jhPqF9&bkcat=[359 2] Databases 1/3/2010 4:56:44 PM Denied: *fastclick* Firefox http://cdn.fastc lick.net/fastclick.net/pub_defaults/pid21540/ebay_160.html Databases 1/3/2010 4:56:08 PM Allowed: *country* Firefox http://frame.eba y.com/ws/eBayISAPI.dll?NextGenGetItemShippingCost&country=1&zipCode=null&quantit y=1&item=250555913437&mode=0&cb=vjo.dsf.assembly.VjClientAssembler._callback1&_v rdm=1262559368438 Databases 1/3/2010 4:55:42 PM Denied: *a.tribalfusion.* Firefox http://a .tribalfusion.com/i.ad?site=bluekai&adSpace=ros&size=0x0&bksrc=jhPqF9&bkcat=[19, 3589,3591] Databases 1/3/2010 4:55:42 PM Allowed: *country* Firefox http://frame.eba y.com/ws/eBayISAPI.dll?NextGenGetItemShippingCost&country=1&zipCode=null&quantit y=1&item=290385479295&mode=0&cb=vjo.dsf.assembly.VjClientAssembler._callback1&_v rdm=1262559342646 Databases 1/3/2010 4:55:42 PM Denied: advertising.com Firefox http://leadback. advertising.com/adcedge/lb?site=695501&srvc=1&betr=ebayus_cs=1&betq=7847=399109 Databases 1/3/2010 4:55:38 PM Denied: *160x600* Firefox http://ad.yieldm anager.com/st?ad_type=iframe&ad_size=160x600&site=140065&section_code=13870155&c b=1262559345819629&ycg=&yyob=&promote_sizes=0&pub_redirect_unencoded=1&pub_redir ect=http://pn1.ard.yahoo.com/SIG=16762rsc3/M=621216.13870155.13858936.12225385/D =eb_vdo-gms/S=97553775:SKY/Y=EBAY_US/E=ebay:/EXP=1262566545/L=HaWZckWTSCtBUWgcrJ 7shymPS1b8sEtBIHEADHAc/B=AL4yHEWTSVM-/J=1262559345819629/K=N3Yzt2UX0t66BP1iyrvcs w/A=5334052/R=0/* Databases 1/3/2010 4:54:20 PM Allowed: *advanced* Firefox http://stats.gam estop.com/dcsi583rp10000oevcqz9y4us_6l6d/dcs.gif?&dcsdat=1262559260543&dcssip=ww w.ebgames.com&dcsuri=/Catalog/ProductDetails.aspx&dcsqry=%3FProduct%5FID=17133&d csref=http://www.ebgames.com/Catalog/ProductDetails.aspx%3Fproduct_id=29889&WT.t z=-6&WT.bh=16&WT.ul=en-US&WT.cd=32&WT.sr=1280x1024&WT.jo=Yes&WT.ti=EBGames.com%2 0-%20Buy%20Microsoft%20XBox%20Advanced%20AV%20Pack%20-%20Xbox&WT.js=Yes&WT.jv=1. 5&WT.bs=1164x745&WT.fi=Yes&WT.fv=10.0&WT.sp=EB&WT.seg_1=EB&WT.sv=172.20.202.46&W T.si_p=CartView&WT.cg_s=Accessories&WT.pc=Accessories&WT.pn=Microsoft%20XBox%20A dvanced%20AV%20Pack&WT.pn_fa=Used&WT.pn_gr=Xbox&WT.pn_ma=Microsoft&WT.pn_sc=Micr osoft&WT.pn_sku=900498&WT.tx_u=1&WT.tx_e=v&WT.cg_n=Xbox;Microsoft;Used&WT.co_f=7 5.86.252.176-1448593600.30051525&WT.vt_f_s=1&WT.vt_f_d=1&WT.vt_sid=75.86.252.176 -1448593600.30051525.1262559260546 Databases 1/3/2010 4:54:20 PM Allowed: *advanced* Firefox http://www.googl e-analytics.com/__utm.gif?utmwv=4.6.5&utmn=594765518&utmhn=www.ebgames.com&utmcs =UTF-8&utmsr=1280x1024&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=10.0%20r32&utmdt=E BGames.com%20-%20Buy%20Microsoft%20XBox%20Advanced%20AV%20Pack%20-%20Xbox&utmhid =996900842&utmr=0&utmp=%2FCatalog%2FProductDetails.aspx%3FProduct%25255FID%3D171 33&utmac=UA-10897913-2&utmcc=__utma%3D244082129.2047125292.1262558273.1262558273

.1262558273.1%3B%2B__utmz%3D244082129.1262558273.1.1.utmcsr%3D(direct)%7Cutmccn% 3D(direct)%7Cutmcmd%3D(none)%3B Databases 1/3/2010 4:40:53 PM Denied: information.com Firefox http://searchpor tal.information.com/?epl=01340059VGsLXARUCgJUBkQHVwgHWg9aB1oGCFIDBlRQSxZXXggTUw1 XZhdWUgRCBxEFQxJAXAVUAVEAAllVAwUeUUduCFpWC1RcWAMSAFMBBkgROVYPVwlTCltQXAZPXEgUUFQ DWVUWXQ Databases 1/3/2010 4:40:41 PM Denied: domainsponsor.com Firefox http://s pi.domainsponsor.com/skins/favicon/mi_favicon.ico Databases 1/3/2010 4:40:40 PM Denied: information.com Firefox http://searchpor tal.information.com/?epl=01340009VGsLXARUCgJUBkQHVwgHWg9aB1oGCFIDBlRQSxZXXggTUw1 XZhdWUgRCBxEFQxJAXAVUAVEAAllVAQIeUUduCFpWC1RcWAMSAFMBBkgROVYPVwlTCltQXAZPXEgUUFQ DWVUWXQ Databases 1/3/2010 3:57:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 3:57:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 3:55:02 PM Denied: *160x600* Firefox http://ad.double click.net/adi/wiki.food/;kw=How_do_you_cook_a_turkey;csrc=unanswered;pos=1;answ= ad;tile=1;dcopt=ist;sz=160x600;ord=721287570? Databases 1/3/2010 3:55:01 PM Denied: addthis.com Firefox http://s7.addthi s.com/js/250/addthis_widget.js Databases 1/3/2010 3:55:01 PM Denied: *.revsci.net Firefox http://js.revsci .net/gateway/gw.js?csid=L09857 Databases 1/3/2010 3:55:01 PM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases 1/3/2010 3:44:34 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/__utm.gif?utmwv=6.1&utmn=708539243&utmsr=1280x1024&utmsc=32-bit&utmul =en-us&utmje=1&utmjv=1.5&utmfl=10.0%20r32&utmdt=Getting%20Started%20with%20Firef ox&utmhn=www.mozilla.com&utmp=/outbound/en-US/www.rememberthemilk.com/ Database s 1/3/2010 3:44:32 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/content/external-link-large.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/favicon.ico Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/__utm.gif?utmwv=6.1&utmn=884508472&utmsr=1280x1024&utmsc=32-bit&utmul =en-us&utmje=1&utmjv=1.5&utmfl=10.0%20r32&utmcn=1&utmdt=Getting%20Started%20with %20Firefox&utmhn=www.mozilla.com&utmr=-&utmp=/en-US/firefox/central/ Database s 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/footer-logo.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/mozilla-info.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/footer-portal-border.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/firefox-info.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/column-divider.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-shareaholic.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-facebook.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-yelp.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-craigslist.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-cooliris.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil

la.com/img/tignish/gettingstarted/sites-miro.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-hypemachine.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-youtube.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-answers.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-howstuffworks.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-topix.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-wikipedia.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-clipmarks.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-linkedin.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-rtm.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/sites-googledocs.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/feature-background.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/mozilla-logo.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/background-gettingstarted.jpg Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/gettingstarted/tab-background.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/background-tile.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/img/tignish/template/header-background.png Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/min/min.js?g=js_stats Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/js/mozilla-pager.js Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/utilities/utilities.js Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/getting-started.css Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/template.css Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/content.css Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/container/container_core-min.js Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/style/tignish/portal-page.css Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/yahoo-dom-event/yahoo-dom-event.js Databases 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/includes/yui/2.5.1/reset-fonts-grids/reset-fonts-grids.css Database s 1/3/2010 3:44:08 PM Allowed: mozilla.com Firefox http://www.mozil la.com/js/util.js Databases 1/3/2010 3:44:07 PM Allowed: mozilla.com Firefox http://www.mozil la.com/en-US/firefox/central/ Databases 1/3/2010 3:43:23 PM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases

1/3/2010 3:12:17 PM Denied: *_ad_* Firefox http://d5mbci7bo0gog.clo udfront.net/a/ref/err/referral_ad_1_728_90.gif Databases 1/3/2010 3:12:14 PM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases 1/3/2010 3:12:14 PM Allowed: *advanced* Firefox http://s3.worldc hanging.com/siteimages/advancedsearch.gif Databases 1/3/2010 3:09:55 PM Denied: *125x125* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552995671&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =Right125x125&page_slots=AboveFold728x60%2CRight125x125&cookie_enabled=1&ga_vid= 664061039.1262552459&ga_sid=1262552459&ga_hid=304804204&ga_fc=true&url=http%3A%2 F%2Fwww.sustainablebusiness.com%2F&lmt=1262552995&dt=1262552995761&cc=100&biw=11 64&bih=745&ifi=2&u_tz=-360&u_his=2&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1 280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:09:55 PM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552995671&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =AboveFold728x60&page_slots=AboveFold728x60&cookie_enabled=1&ga_vid=664061039.12 62552459&ga_sid=1262552459&ga_hid=304804204&ga_fc=true&url=http%3A%2F%2Fwww.sust ainablebusiness.com%2F&lmt=1262552995&dt=1262552995672&biw=1164&bih=745&ifi=1&u_ tz=-360&u_his=2&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug =20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:06:03 PM Denied: */adiframe* Firefox http://www.howst uffworks.com/adiframe/pixels Databases 1/3/2010 3:06:01 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/169 2706449@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!MedRectHome?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 3:06:01 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/169 2706449@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!BotBanner?tc=HomePage &p=0&o=HSW&rsi=not Databases 1/3/2010 3:06:01 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/169 2706449@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!TopHome?tc=HomePage&p =0&o=HSW&rsi=not Databases 1/3/2010 3:06:01 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/169 2706449@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!VidSponLogo?tc=HomePa ge&p=0&o=HSW&rsi=not Databases 1/3/2010 3:06:01 PM Denied: */ads/* Firefox http://ad.howstuffworks. com/RealMedia/ads/adstream_sx.ads/www.howstuffworks.com/preempt/ros/homepage/169 2706449@TopHome,SponLogo,MedRectHome,VidSponLogo,BotBanner!SponLogo?tc=HomePage& p=0&o=HSW&rsi=not Databases 1/3/2010 3:01:07 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552466748&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =Right160x600&page_slots=AboveFold728x60%2CRight125x125%2CRight160x600&cookie_en abled=1&ga_vid=664061039.1262552459&ga_sid=1262552459&ga_hid=1360501830&ga_fc=tr ue&url=http%3A%2F%2Fwww.sustainablebusiness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt =1262552466&dt=1262552466944&cc=100&biw=1154&bih=745&ifi=3&u_tz=-360&u_his=15&u_ java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&fl ash=10.0.32 Databases 1/3/2010 3:01:06 PM Denied: *125x125* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552466748&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =Right125x125&page_slots=AboveFold728x60%2CRight125x125&cookie_enabled=1&ga_vid= 664061039.1262552459&ga_sid=1262552459&ga_hid=1360501830&ga_fc=true&url=http%3A% 2F%2Fwww.sustainablebusiness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt=1262552466&dt= 1262552466851&cc=100&biw=1154&bih=745&ifi=2&u_tz=-360&u_his=15&u_java=true&u_h=1

024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:01:06 PM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552466748&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =AboveFold728x60&page_slots=AboveFold728x60&cookie_enabled=1&ga_vid=664061039.12 62552459&ga_sid=1262552459&ga_hid=1360501830&ga_fc=true&url=http%3A%2F%2Fwww.sus tainablebusiness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt=1262552466&dt=126255246674 9&biw=1171&bih=745&ifi=1&u_tz=-360&u_his=15&u_java=true&u_h=1024&u_w=1280&u_ah=9 90&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:00:59 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552459126&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =Right160x600&page_slots=AboveFold728x60%2CRight125x125%2CRight160x600&cookie_en abled=1&ga_vid=664061039.1262552459&ga_sid=1262552459&ga_hid=571609285&url=http% 3A%2F%2Fwww.sustainablebusiness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt=1262552458& dt=1262552459407&cc=100&biw=1154&bih=745&ifi=3&u_tz=-360&u_his=1&u_java=true&u_h =1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:00:59 PM Denied: *125x125* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552459126&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =Right125x125&page_slots=AboveFold728x60%2CRight125x125&cookie_enabled=1&ga_vid= 664061039.1262552459&ga_sid=1262552459&ga_hid=571609285&url=http%3A%2F%2Fwww.sus tainablebusiness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt=1262552458&dt=126255245930 9&cc=100&biw=1154&bih=745&ifi=2&u_tz=-360&u_his=1&u_java=true&u_h=1024&u_w=1280& u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:00:59 PM Denied: */banner/* Firefox http://www.susta inablebusiness.com/_assets/banner/top10greenjobs.jpg Databases 1/3/2010 3:00:59 PM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552459126&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8704410470036300&slotname =AboveFold728x60&page_slots=AboveFold728x60&cookie_enabled=1&ga_vid=664061039.12 62552459&ga_sid=1262552459&ga_hid=571609285&url=http%3A%2F%2Fwww.sustainablebusi ness.com%2Findex.cfm%2Fgo%2Fnews.main&lmt=1262552458&dt=1262552459127&biw=1171&b ih=745&ifi=1&u_tz=-360&u_his=1&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280& u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 3:00:58 PM Denied: quantserve.com Firefox http://secure.qu antserve.com/quant.js Databases 1/3/2010 2:53:31 PM Denied: tacoda.net Firefox http://an.tacoda .net/an/15111/slf.js Databases 1/3/2010 2:53:30 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_FinanceBTFbotleder728x90&page_slots=CA_Homeo wnersATFtopleder728x90%2CCA_HomePageATFLeftSky160x600%2CCA_HomeBTFSky%2CCA_HomeP ageATFRightRect300x250%2CCA_HomePageBTFRightRect300x250%2CCA_FinanceBTFbotleder7 28x90&cookie=ID%3Db708c7217d633878%3AT%3D1262552014%3AS%3DALNI_Mab0eb6AKpRNEQ6vS 5VUj78hf3qoA&cookie_enabled=1&ga_vid=1575252783.1262552008&ga_sid=1262552008&ga_ hid=1498019674&url=http%3A%2F%2Fwww.consumeraffairs.com%2F&lmt=1262552007&dt=126 2552010580&cc=100&biw=1154&bih=745&ifi=6&u_tz=-360&u_his=13&u_java=true&u_h=1024 &u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 2:53:30 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_HomePageBTFRightRect300x250&page_slots=CA_Ho meownersATFtopleder728x90%2CCA_HomePageATFLeftSky160x600%2CCA_HomeBTFSky%2CCA_Ho mePageATFRightRect300x250%2CCA_HomePageBTFRightRect300x250&cookie=ID%3Db708c7217 d633878%3AT%3D1262552014%3AS%3DALNI_Mab0eb6AKpRNEQ6vS5VUj78hf3qoA&cookie_enabled =1&ga_vid=1575252783.1262552008&ga_sid=1262552008&ga_hid=1498019674&url=http%3A% 2F%2Fwww.consumeraffairs.com%2F&lmt=1262552007&dt=1262552010572&cc=100&biw=1154&

bih=745&ifi=5&u_tz=-360&u_his=13&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=128 0&u_cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 2:53:30 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_HomePageATFRightRect300x250&page_slots=CA_Ho meownersATFtopleder728x90%2CCA_HomePageATFLeftSky160x600%2CCA_HomeBTFSky%2CCA_Ho mePageATFRightRect300x250&cookie=ID%3Db708c7217d633878%3AT%3D1262552014%3AS%3DAL NI_Mab0eb6AKpRNEQ6vS5VUj78hf3qoA&cookie_enabled=1&ga_vid=1575252783.1262552008&g a_sid=1262552008&ga_hid=1498019674&url=http%3A%2F%2Fwww.consumeraffairs.com%2F&l mt=1262552007&dt=1262552010330&cc=100&biw=1154&bih=745&ifi=4&u_tz=-360&u_his=13& u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104& flash=10.0.32 Databases 1/3/2010 2:53:30 PM Denied: *300x250* Firefox http://www.aster pix.com/tagcloudframe/2416931_300x250/?bd=31090&url=http%3A%2F%2Fwww.consumeraff airs.com%2F&fmt=300x250&id=2416931&fv=1&fo=json&mt=ConsumerAffairs.com%3A%20Know ledge%20is%20Power!%20Consumer%20news%2C%20reviews%2C%20complaints%2C%20resource s%2C%20safety%20recalls Databases 1/3/2010 2:53:28 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_HomeBTFSky&page_slots=CA_HomeownersATFtopled er728x90%2CCA_HomePageATFLeftSky160x600%2CCA_HomeBTFSky&cookie=ID%3Db708c7217d63 3878%3AT%3D1262552014%3AS%3DALNI_Mab0eb6AKpRNEQ6vS5VUj78hf3qoA&cookie_enabled=1& ga_vid=1575252783.1262552008&ga_sid=1262552008&ga_hid=1498019674&url=http%3A%2F% 2Fwww.consumeraffairs.com%2F&lmt=1262552007&dt=1262552008117&cc=100&biw=1154&bih =745&ifi=3&u_tz=-360&u_his=13&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u _cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 2:53:28 PM Denied: advertising.com Firefox http://uac.adver tising.com/wrapper/aceUAC.js Databases 1/3/2010 2:53:28 PM Denied: *160x600* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_HomePageATFLeftSky160x600&page_slots=CA_Home ownersATFtopleder728x90%2CCA_HomePageATFLeftSky160x600&cookie=ID%3Db708c7217d633 878%3AT%3D1262552014%3AS%3DALNI_Mab0eb6AKpRNEQ6vS5VUj78hf3qoA&cookie_enabled=1&g a_vid=1575252783.1262552008&ga_sid=1262552008&ga_hid=1498019674&url=http%3A%2F%2 Fwww.consumeraffairs.com%2F&lmt=1262552007&dt=1262552008036&cc=100&biw=1171&bih= 745&ifi=2&u_tz=-360&u_his=13&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_ cd=32&u_nplug=20&u_nmime=104&flash=10.0.32 Databases 1/3/2010 2:53:27 PM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262552007744&output=html&impl=ifr&client= ca-pub-0200629403145096&slotname=CA_HomeownersATFtopleder728x90&page_slots=CA_Ho meownersATFtopleder728x90&cookie=ID%3Db708c7217d633878%3AT%3D1262552014%3AS%3DAL NI_Mab0eb6AKpRNEQ6vS5VUj78hf3qoA&cookie_enabled=1&ga_vid=1575252783.1262552008&g a_sid=1262552008&ga_hid=1498019674&url=http%3A%2F%2Fwww.consumeraffairs.com%2F&l mt=1262552007&dt=1262552007814&cc=100&biw=1171&bih=745&ifi=1&u_tz=-360&u_his=13& u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_nmime=104& flash=10.0.32 Databases 1/3/2010 2:53:27 PM Denied: tynt.com Firefox http://tcr.tynt. com/javascripts/Tracer.js?user=bgZDP0pbWr3OFXacn9QLxW&s=52 Databases 1/3/2010 2:53:23 PM Allowed: *advanced* Firefox http://www.googl e-analytics.com/__utm.gif?utmwv=4.6.5&utmn=1692545140&utmhn=www.chopperexchange. com&utmcs=UTF-8&utmsr=1280x1024&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=10.0%20r3 2&utmdt=ChopperExchange%20-%20Buy%20and%20Sell%20Used%20Harley-Davidson%20Motorc ycles%201%2F3%2F2010&utmhid=2107566912&utmr=-&utmp=%2Fbuyers%2Fsearch%2Fadvanced .asp%3Fpointer%3D2%26state%3D%26year1%3D2005%26year2%3D2008%26searchId%3D41%26ma keId%3D1%26maximum%3Dnull%26R1%3D2%26zipcode%3D53092%26radius%3D900&utmac=UA-229 179-6&utmcc=__utma%3D8949223.1949559610.1262552004.1262552004.1262552004.1%3B%2B __utmz%3D8949223.1262552004.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3 D(none)%3B Databases 1/3/2010 2:53:23 PM Allowed: *advanced* Firefox http://www.googl e-analytics.com/__utm.gif?utmwv=4.6.5&utmn=1266672049&utmhn=www.chopperexchange.

com&utmcs=UTF-8&utmsr=1280x1024&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=10.0%20r3 2&utmcn=1&utmdt=ChopperExchange%20-%20Buy%20and%20Sell%20Used%20Harley-Davidson% 20Motorcycles%201%2F3%2F2010&utmhid=2107566912&utmr=-&utmp=%2Fbuyers%2Fsearch%2F advanced.asp%3Fpointer%3D2%26state%3D%26year1%3D2005%26year2%3D2008%26searchId%3 D41%26makeId%3D1%26maximum%3Dnull%26R1%3D2%26zipcode%3D53092%26radius%3D900&utma c=UA-10677173-1&utmcc=__utma%3D8949223.1949559610.1262552004.1262552004.12625520 04.1%3B%2B__utmz%3D8949223.1262552004.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)% 7Cutmcmd%3D(none)%3B Databases 1/3/2010 2:53:23 PM Allowed: *advanced* Firefox http://www.googl e-analytics.com/__utm.gif?utmwv=4.6.5&utmn=1618077413&utmhn=www.chopperexchange. com&utmcs=UTF-8&utmsr=1280x1024&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=10.0%20r3 2&utmdt=ChopperExchange%20-%20Buy%20and%20Sell%20Used%20Harley-Davidson%20Motorc ycles%201%2F3%2F2010&utmhid=2107566912&utmr=-&utmp=%2Fbuyers%2Fsearch%2Fadvanced .asp%3Fpointer%3D2%26state%3D%26year1%3D2005%26year2%3D2008%26searchId%3D41%26ma keId%3D1%26maximum%3Dnull%26R1%3D2%26zipcode%3D53092%26radius%3D900&utmac=UA-107 10992-1&utmcc=__utma%3D8949223.1949559610.1262552004.1262552004.1262552004.1%3B% 2B__utmz%3D8949223.1262552004.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd %3D(none)%3B Databases 1/3/2010 2:53:22 PM Allowed: *advanced* Firefox http://www.chopp erexchange.com/buyers/search/advanced.asp?pointer=2&state=&year1=2005&year2=2008 &searchId=41&makeId=1&maximum=null&R1=2&zipcode=53092&radius=900 Database s 1/3/2010 2:53:17 PM Denied: *advert*.gif Firefox http://www.motor fietsweb.nl/img/webadverts/shirtshowmfw4.gif Databases 1/3/2010 2:53:08 PM Denied: */ad/* Firefox http://altfarm.mediaplex .com/ad/bn/9700-82020-2821-5?mpt=20100103125316156 Databases 1/3/2010 2:53:08 PM Denied: *.adjuggler.* Firefox http://img1.cdn. adjuggler.com/banners/ajtg.js Databases 1/3/2010 2:53:03 PM Denied: advertising.com Firefox http://leadback. advertising.com/adcedge/lb?site=695501&srvc=1&betr=rcn_cs=1&betq=3275=373709 Databases 1/3/2010 2:51:54 PM Denied: *160x600* Firefox http://adserving .cpxinteractive.com/st?ad_type=iframe&ad_size=160x600,120x600&section=227074 Databases 1/3/2010 2:49:44 PM Denied: *468x60* Firefox http://adserving .cpxinteractive.com/st?ad_type=iframe&ad_size=728x90,468x60&section=317771&posit ion=1 Databases 1/3/2010 2:49:44 PM Denied: chitika.net Firefox http://scripts.c hitika.net/eminimalls/amm.js Databases 1/3/2010 2:49:44 PM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases 1/3/2010 2:49:32 PM Allowed: *adres* Firefox http://www.motor fietsweb.nl/img/menu_adressengids_on.gif Databases 1/3/2010 2:49:32 PM Allowed: *adres* Firefox http://www.motor fietsweb.nl/img/menu_adressengids_pick.gif Databases 1/3/2010 2:49:31 PM Allowed: *adres* Firefox http://www.motor fietsweb.nl/img/menu_adressengids_off.gif Databases 1/3/2010 2:49:17 PM Denied: mediaplex.com Firefox http://img-cdn.m ediaplex.com/0/711/53200/1x1_for_Impressions.gif Databases 1/3/2010 2:49:17 PM Denied: mediaplex.com Firefox http://img.media plex.com/0/711/53200/eBayCustomBannerLoader.swf Databases 1/3/2010 2:49:12 PM Denied: *advert*.jpg Firefox http://www.dropb ears.com/images/adverts/classic_fibreglass_125.jpg Databases 1/3/2010 2:49:12 PM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases 1/3/2010 2:47:15 PM Denied: smartname.com Firefox http://images.sm artname.com/images/template/2column/small/2col_sm_map_directions_road.jpg Databases 1/3/2010 2:47:15 PM Denied: smartname.com Firefox http://images.sm artname.com/images/template/2column/small/2col_sm_us_map_globe.jpg Database

s 1/3/2010 2:47:15 PM Denied: smartname.com Firefox http://images.sm artname.com/images/template/2column/small/2col_sm_gps_handheld_map.jpg Database s 1/3/2010 2:47:15 PM Denied: smartname.com Firefox http://images.sm artname.com/images/template/2column/large/2col_lg_map_with_compass.jpg Database s 1/3/2010 2:47:13 PM Denied: smartname.com Firefox http://images.sm artname.com/scripts/jquery-1.3.2.min.js Databases 1/3/2010 2:47:13 PM Denied: smartname.com Firefox http://images.sm artname.com/smartname/images/favicon.ico Databases 1/3/2010 2:42:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 2:42:30 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 2:36:33 PM Allowed: *country* Quicken Launcher http://qw2010.quicken.com/desktop/qw2010/histquotes/?version=2010&sku=deluxe&os= win&country=us&build=19003 Databases 1/3/2010 2:35:58 PM Allowed: *country* Quicken Launcher http://qw2010.quicken.com/desktop/qw2010/quotes/?version=2010&sku=deluxe&os=win& country=us&build=19003 Databases 1/3/2010 2:16:32 PM Allowed: *country* Quicken Launcher http://qw2010.quicken.com/desktop/qw2010/histquotes/?version=2010&sku=deluxe&os= win&country=us&build=19003 Databases 1/3/2010 2:16:13 PM Allowed: *country* Quicken Launcher http://qw2010.quicken.com/desktop/qw2010/quotes/?version=2010&sku=deluxe&os=win& country=us&build=19003 Databases 1/3/2010 1:49:14 PM Denied: *ssl-hints.netflame.cc* Firefox http://s sl-hints.netflame.cc/service/hint?report=3/u/%7Di%7Dhttp%3A//store.digitalriver. com/servlet/ControllerServlet%3FAction%3Dbuy%26Locale%3Den_US%26SiteID%3Dkasperu s%26offerID%3D3514903209%26productID%3D147122700%7Dhttp%3A//usa.kaspersky.com/st ore/%3Ficid%3D50000034%7D%7DC1178709917%7D0%7DtKaspersky%20Labs%20US%20Online%20 Store%20-%20Products%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D%7D350708%7D %7D%7D0%7D%7Dfc_segment%3Dkasperus/en_US/ThemeID5035800%26fc_uid%3D1178709917%7D -2%7D1280x1024%7D32%7D1%7D%7D1%7D10&r=0.5333364938220588 Databases 1/3/2010 1:46:31 PM Denied: *ssl-hints.netflame.cc* Firefox http://s sl-hints.netflame.cc/service/script/Moz.js Databases 1/3/2010 1:46:31 PM Denied: *popup*.js Firefox http://drh1.img. digitalriver.com/DRHM/Storefront/Library/scripts/jquery/plugins/jquery.draggable .popUp.min.js Databases 1/3/2010 1:46:31 PM Denied: 2o7.net Firefox http://kaspersky.122.2o7 .net/b/ss/kaspersky-usa/1/H.20.3/s25664852071740?AQB=1&ndh=1&t=3/0/2010%2013%3A4 6%3A31%200%20360&ce=ISO-8859-1&ns=kaspersky&pageName=Shopping%20Cart%20%3E%20Spe cial%20Offer&g=http%3A//store.digitalriver.com/servlet/ControllerServlet%3FActio n%3Dbuy%26Locale%3Den_US%26SiteID%3Dkasperus%26offerID%3D3514903209%26productID% 3D147122700&r=http%3A//usa.kaspersky.com/store/%3Ficid%3D50000034&cc=USD&ch=Shop ping%20Cart&server=store.digitalriver.com&c1=Home%20%7C%20Shopping%20Cart&h1=Sho pping%20Cart%20%7C%20Special%20Offer&c2=Home%20%7C%20Shopping%20Cart%20%7C%20Spe cial%20Offer&c3=Home%20%7C%20Shopping%20Cart%20%7C%20Special%20Offer&v3=Shopping %20Cart%20%3E%20Special%20Offer&c4=Home%20%7C%20Shopping%20Cart%20%7C%20Special% 20Offer&c49=New%20%3A%20Shopping%20Cart%20%3E%20Special%20Offer&c50=New&v50=New& s=1280x1024&c=32&j=1.7&v=Y&k=Y&bw=1171&bh=745&p=Octoshape%20Streaming%20Services %3BJava%20Deployment%20Toolkit%206.0.170.4%3BMozilla%20Default%20Plug-in%3BgetPl usPlus%20for%20Adobe%2016249%3BQuickTime%20Plug-in%207.6.4%3BDivX%20Player%20Net scape%20Plugin%3BDivX%20Web%20Player%3BAdobe%20Acrobat%3BShockwave%20Flash%3BiTu nes%20Application%20Detector%3BRealJukebox%20NS%20Plugin%3BRealPlayer%28tm%29%20 G2%20LiveConnect-Enabled%20Plug-In%20%2832-bit%29%20%3BRealPlayer%20Version%20Pl ugin%3BJava%28TM%29%20Platform%20SE%206%20U17%3B&AQE=1 Databases 1/3/2010 1:45:58 PM Denied: 2o7.net Firefox http://kaspersky.122.2o7 .net/b/ss/kaspersky-usa/1/H.20.3/s22836093186100?AQB=1&ndh=1&t=3/0/2010%2013%3A4

5%3A58%200%20360&ce=ISO-8859-1&ns=kaspersky&pageName=eStore%20%7C%20Home%20Users &g=http%3A//usa.kaspersky.com/store/%3Ficid%3D50000034&r=http%3A//usa.kaspersky. com/getkaspersky2010/%3Ficid%3D50000038&cc=USD&ch=eStore&server=usa.kaspersky.co m&events=prodView%20%2Cevent7%3B&products=Home%3B150481400%3B%3B%3B%3Bevar10%3DP roducts%20%3E%20kis%2CHome%3B147122700%3B%3B%3B%3Bevar10%3DProducts%20%3E%20kis% 2CHome%3B147123000%3B%3B%3B%3Bevar10%3DProducts%20%3E%20kis%2CHome%3B147123300%3 B%3B%3B%3Bevar10%3DProducts%20%3E%20kis%2CHome%3B%3B%3B%3B%3Bevar10%3DProducts%2 0%3E%20kav%2CHome%3B147121400%3B%3B%3B%3Bevar10%3DProducts%20%3E%20kav%2CHome%3B 147121800%3B%3B%3B%3Bevar10%3DProducts%20%3E%20kav%2CHome%3B147122200%3B%3B%3B%3 Bevar10%3DProducts%20%3E%20kav%2CHome%3B134569600%3B%3B%3B%3Bevar10%3DProducts%2 0%3E%20kms%2CHome%3B134569700%3B%3B%3B%3Bevar10%3DProducts%20%3E%20kms%2C&c1=eSt ore&h1=eStore%20%7C%20Home%20Users&c2=eStore%20%7C%20Home%20Users&c3=eStore%20%7 C%20Home%20Users&v3=eStore%20%7C%20Home%20Users&c4=eStore%20%7C%20Home%20Users&v 4=50000034&v44=eStore%20%7C%20Home%20Users&c49=New%20%3A%20eStore%20%7C%20Home%2 0Users&c50=New&v50=New&s=1280x1024&c=32&j=1.7&v=Y&k=Y&bw=1171&bh=604&p=Octoshape %20Streaming%20Services%3BJava%20Deployment%20Toolkit%206.0.170.4%3BMozilla%20De fault%20Plug-in%3BgetPlusPlus%20for%20Adobe%2016249%3BQuickTime%20Plug-in%207.6. 4%3BDivX%20Player%20Netscape%20Plugin%3BDivX%20Web%20Player%3BAdobe%20Acrobat%3B Shockwave%20Flash%3BiTunes%20Application%20Detector%3BRealJukebox%20NS%20Plugin% 3BRealPlayer%28tm%29%20G2%20LiveConnect-Enabled%20Plug-In%20%2832-bit%29%20%3BRe alPlayer%20Version%20Plugin%3BJava%28TM%29%20Platform%20SE%206%20U17%3B&pid=Land ing%20Pages%20%7C%20Get%20Kaspersky%202010&pidt=1&oid=http%3A//usa.kaspersky.com /store/%3Ficid%3D50000034&ot=A&AQE=1 Databases 1/3/2010 1:45:58 PM Denied: *doubleclick* Firefox http://fls.doubl eclick.net/activityj;src=2342885;type=bbtom354;cat=foote902;ord=4259133047672.96 5? Databases 1/3/2010 1:45:58 PM Denied: *doubleclick* Firefox http://fls.doubl eclick.net/activityj;src=2342885;type=bbtom354;cat=e-sto245;ord=6368581506080.16 3? Databases 1/3/2010 1:41:33 PM Denied: *doubleclick* Firefox http://fls.doubl eclick.net/activityj;src=2342885;type=bbtom354;cat=foote902;ord=6772562146169.8? Databases 1/3/2010 1:41:33 PM Denied: 2o7.net Firefox http://kaspersky.122.2o7 .net/b/ss/kaspersky-usa/1/H.20.3/s22081186943425?AQB=1&ndh=1&t=3/0/2010%2013%3A4 1%3A33%200%20360&ce=ISO-8859-1&ns=kaspersky&pageName=Landing%20Pages%20%7C%20Get %20Kaspersky%202010&g=http%3A//usa.kaspersky.com/getkaspersky2010/%3Ficid%3D5000 0038&r=http%3A//www.kaspersky.com/&cc=USD&ch=Landing%20Pages&server=usa.kaspersk y.com&c1=Landing%20Pages&h1=Landing%20Pages%20%7C%20Get%20Kaspersky%202010&c2=La nding%20Pages%20%7C%20Get%20Kaspersky%202010&c3=Landing%20Pages%20%7C%20Get%20Ka spersky%202010&v3=Landing%20Pages%20%7C%20Get%20Kaspersky%202010&c4=Landing%20Pa ges%20%7C%20Get%20Kaspersky%202010&v4=50000038&v44=Landing%20Pages%20%7C%20Get%2 0Kaspersky%202010&c49=New%20%3A%20Landing%20Pages%20%7C%20Get%20Kaspersky%202010 &c50=New&v50=New&s=1280x1024&c=32&j=1.7&v=Y&k=Y&bw=1171&bh=604&p=Octoshape%20Str eaming%20Services%3BJava%20Deployment%20Toolkit%206.0.170.4%3BMozilla%20Default% 20Plug-in%3BgetPlusPlus%20for%20Adobe%2016249%3BQuickTime%20Plug-in%207.6.4%3BDi vX%20Player%20Netscape%20Plugin%3BDivX%20Web%20Player%3BAdobe%20Acrobat%3BShockw ave%20Flash%3BiTunes%20Application%20Detector%3BRealJukebox%20NS%20Plugin%3BReal Player%28tm%29%20G2%20LiveConnect-Enabled%20Plug-In%20%2832-bit%29%20%3BRealPlay er%20Version%20Plugin%3BJava%28TM%29%20Platform%20SE%206%20U17%3B&pid=Homepage&p idt=1&oid=http%3A//usa.kaspersky.com/getkaspersky2010/%3Ficid%3D50000038&ot=A&AQ E=1 Databases 1/3/2010 1:40:51 PM Denied: *doubleclick* Firefox http://fls.doubl eclick.net/activityj;src=2342885;type=bbtom354;cat=foote902;ord=9162614681474.50 2? Databases 1/3/2010 1:40:50 PM Denied: 2o7.net Firefox http://kaspersky.122.2o7 .net/b/ss/kaspersky-usa/1/H.20.3/s29984027163733?AQB=1&ndh=1&t=3/0/2010%2013%3A4 0%3A50%200%20360&ce=ISO-8859-1&ns=kaspersky&pageName=Homepage&g=http%3A//www.kas persky.com/&cc=USD&ch=Homepage&server=www.kaspersky.com&c1=Homepage&h1=Homepage& c2=Homepage&c3=Homepage&v3=Homepage&c4=Homepage&v44=Homepage&c49=New%20%3A%20Hom epage&c50=New&v50=New&s=1280x1024&c=32&j=1.7&v=Y&k=Y&bw=1171&bh=604&p=Octoshape%

20Streaming%20Services%3BJava%20Deployment%20Toolkit%206.0.170.4%3BMozilla%20Def ault%20Plug-in%3BgetPlusPlus%20for%20Adobe%2016249%3BQuickTime%20Plug-in%207.6.4 %3BDivX%20Player%20Netscape%20Plugin%3BDivX%20Web%20Player%3BAdobe%20Acrobat%3BS hockwave%20Flash%3BiTunes%20Application%20Detector%3BRealJukebox%20NS%20Plugin%3 BRealPlayer%28tm%29%20G2%20LiveConnect-Enabled%20Plug-In%20%2832-bit%29%20%3BRea lPlayer%20Version%20Plugin%3BJava%28TM%29%20Platform%20SE%206%20U17%3B&AQE=1 Databases 1/3/2010 1:40:44 PM Denied: */ad/* Firefox http://altfarm.mediaplex .com/ad/bk/10800-66267-3840-0?KUSA_Home=1 Databases 1/3/2010 1:40:44 PM Denied: atdmt.com Firefox http://switch.at dmt.com/action/Drvpm_Kaspersky_Homepage Databases 1/3/2010 1:40:44 PM Denied: *doubleclick* Firefox http://fls.doubl eclick.net/activityj;src=2342885;type=bbtom354;cat=homep123;ord=4779641509482.49 8? Databases 1/3/2010 1:40:43 PM Allowed: images.kaspersky.com Firefox http://i mages.kaspersky.com/en/newdesign/sel_dw.gif Databases 1/3/2010 1:40:23 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 1:40:23 PM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 10:03:04 AM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262534584055&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8494067626122848&slotname =GTG-Forum-Topic&page_slots=GTG-Forum-Topic&cookie_enabled=1&ga_vid=1887942861.1 262534562&ga_sid=1262534562&ga_hid=791129165&ga_fc=true&url=http%3A%2F%2Fwww.gee kstogo.com%2Fforum%2FWorm-Win32-NetSky-virus-t263240.html%26pid%3D1722065%23entr y1722065&lmt=1262534584&dt=1262534584190&cc=100&biw=1154&bih=448&ifi=1&u_tz=-360 &u_his=2&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_n mime=104&flash=10.0.32 Databases 1/3/2010 10:03:04 AM Denied: ad2.*.* Firefox http://ad2.netshelter.ne t/adj/ns.geekstogo/general;kw=;tile=1;sz=300x250,336x280;ord=306580049160313? Databases 1/3/2010 10:02:45 AM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 10:02:45 AM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 10:02:43 AM Denied: *doubleclick* Firefox http://pubads.g. doubleclick.net/gampad/ads?correlator=1262534561463&output=json_html&callback=GA _googleSetAdContentsBySlotForSync&impl=s&client=ca-pub-8494067626122848&slotname =GTG-Forum-Topic&page_slots=GTG-Forum-Topic&cookie_enabled=1&ga_vid=1887942861.1 262534562&ga_sid=1262534562&ga_hid=671051286&ga_fc=true&url=http%3A%2F%2Fwww.gee kstogo.com%2Fforum%2FWorm-Win32-NetSky-virus-t263240.html%26pid%3D1722065%23entr y1722065&lmt=1262534560&dt=1262534563035&cc=100&biw=1154&bih=448&ifi=1&u_tz=-360 &u_his=1&u_java=true&u_h=1024&u_w=1280&u_ah=990&u_aw=1280&u_cd=32&u_nplug=20&u_n mime=104&flash=10.0.32 Databases 1/3/2010 10:02:42 AM Denied: ad2.*.* Firefox http://ad2.netshelter.ne t/adj/ns.geekstogo/general;kw=;tile=1;sz=300x250,336x280;ord=2851886908895311? Databases 1/3/2010 10:02:42 AM Denied: *.intellitxt.* Firefox http://geekstogo .us.intellitxt.com/intellitxt/front.asp?ipid=21167 Databases 1/3/2010 10:02:42 AM Denied: edge.quantserve.com Firefox http://e dge.quantserve.com/quant.js Databases 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Anti-Banner 1/3/2010 8:30:59 AM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/firefox/headlines.xml Databases 1/3/2010 8:30:59 AM Allowed: mozilla.com Firefox http://fxfeeds.m ozilla.com/en-US/firefox/headlines.xml Databases 1/3/2010 8:16:57 AM Denied: */pagead/* Firefox http://pagead2.g ooglesyndication.com/pagead/show_ads.js Databases

1/3/2010 8:14:11 AM Task started Kaspersky Internet Security Anti-Banner 1/3/2010 8:02:04 AM Task started Kaspersky Internet Security Anti-Banner Anti-Spam (events: 6) 1/3/2010 10:08:42 AM Spam message Microsoft Outlook [From:Ne w York Life][Subject:The Gift of Life Insurance][Time:2010/01/03 08:47:27] Empty 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Anti-Spam 1/3/2010 8:14:11 AM Task started Kaspersky Internet Security Anti-Spam 1/3/2010 7:34:46 AM Spam message Microsoft Outlook [From:Jo se (7.5)][Subject:greinders, Coverage For 60% OFF Dealers Prices][Time: 384/3276 8/372 2900] Training 1/3/2010 7:34:37 AM Spam message Microsoft Outlook [From:Ma cy's][Subject:Ends today! Get Free Shipping & savings on Bed & Bath now!][Time:2 010/01/03 05:57:55] Training 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Anti-Spam Application Control (events: 192) 1/3/2010 9:08:01 PM Volume Control Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 8:49:39 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 8:49:36 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 8:49:36 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 7:49:32 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 7:49:31 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 7:49:31 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 6:49:31 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 6:49:30 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 6:49:30 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 5:49:32 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 5:49:31 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 5:49:31 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 4:49:31 PM Allowed: Using system program interfaces (DNS) myFTP

Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 4:49:30 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 4:49:30 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 3:55:26 PM Windows Calculator application file Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 3:49:31 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 3:49:30 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 3:49:30 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 2:49:30 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 2:49:30 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 2:49:30 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 2:47:14 PM Java(TM) Platform SE binary Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:49:29 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 1:49:29 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 1:49:29 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 1:49:26 PM Windows Picture and Fax Viewer Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:35:55 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:10:56 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:10:15 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:06:21 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:04:02 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:01:49 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:01:32 PM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 12:49:29 PM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 12:49:28 PM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my

ftp.exe Using program interfaces of other process 1/3/2010 12:49:28 PM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 11:49:29 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 11:49:28 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 11:49:28 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 10:49:28 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 10:49:28 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 10:49:28 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 10:49:26 AM Allowed: Setting debug privileges DISCover Upd. Ma nager Setting debug privileges Setting debug privileges 1/3/2010 10:29:24 AM DaVinci Screen Saver Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 9:49:38 AM Denied: Access to password storage DISCover Stream Hub Access to protected storage Access to password storage 1/3/2010 9:49:28 AM Allowed: Using system program interfaces DISCover Drop & Play System Executable Use system function for hidden sending of data t hrough the network Using system program interfaces 1/3/2010 9:49:24 AM Allowed: Setting debug privileges DISCover Drop & Play System Executable Setting debug privileges Setting debug pr ivileges 1/3/2010 9:49:22 AM Allowed: Using program interfaces of other process DISCover Drop & Play System Executable Using program interfaces of other proces s c:\program files\disc\discover.exe Using program interfaces of othe r process 1/3/2010 9:49:22 AM Allowed: Access to critical system objects DISCover Drop & Play System Executable Access to critical system objects Access to critical system objects 1/3/2010 9:49:16 AM Allowed: Using program interfaces of other process InstallShield Update Service Update Manager Using program interfaces of othe r process c:\program files\common files\installshield\updateservice\isuspm .exe Using program interfaces of other process 1/3/2010 9:49:16 AM Allowed: Using program interfaces of other process iTunesHelper Module Using program interfaces of other process c:\progr am files\itunes\ituneshelper.exe Using program interfaces of other proces s 1/3/2010 9:49:10 AM Allowed: Setting debug privileges iTunesHelper Mod ule Setting debug privileges Setting debug privileges 1/3/2010 9:48:44 AM Allowed: Using program interfaces of other process igfxTray Module Using program interfaces of other process c:\windows\syste m32\igfxtray.exe Using program interfaces of other process 1/3/2010 9:48:18 AM Allowed: Setting debug privileges Realtek Azalia A udio - Event Monitor Setting debug privileges Setting debug pr ivileges 1/3/2010 9:48:05 AM Allowed: Setting debug privileges KBD EXE Setting debug privileges Setting debug privileges 1/3/2010 9:47:49 AM Allowed: Low level disk access HP Boot Optimizer

Low level disk access Device\Harddisk1\DP(1)0-0+9 Low level disk access 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Application Control 1/3/2010 9:16:13 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 9:16:13 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 9:16:13 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 9:16:11 AM Allowed: Setting debug privileges DISCover Upd. Ma nager Setting debug privileges Setting debug privileges 1/3/2010 9:09:42 AM CD recording backend Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 9:08:00 AM Acronis True Image Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:34:30 AM Disk Defragmenter NTFS Module Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:34:25 AM dfrg.msc Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 8:31:36 AM Allowed: Start driver Absent Start driver C:\WINDO WS\SYSTEM32\DRIVERS\SR.SYS Start driver 1/3/2010 8:31:36 AM System Restore Application Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:30:20 AM Office Data Provider for WBEM Placed in group Trusted Known on the database of the known software 1/3/2010 8:28:20 AM Microsoft Help Center Service Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:28:19 AM Allowed: Using program interfaces of other process $$.JS Using program interfaces of other process c:\documents and setting s\hp_administrator\local settings\temp\$$.js Using program interfaces of othe r process 1/3/2010 8:28:19 AM Allowed: Access to critical system objects $$.JS Access to critical system objects Access to critical system object s 1/3/2010 8:28:19 AM $$.JS Placed in group Low Restricted Known on the database of the known software 1/3/2010 8:28:17 AM Microsoft Help and Support Center Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:28:16 AM System Information Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:27:55 AM Microsoft Excel for Windows Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 8:26:59 AM SMTP Mail Sender Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:26:24 AM Denied: Access to password storage DISCover Stream Hub Access to protected storage Access to password storage 1/3/2010 8:24:35 AM Allowed: Using program interfaces of other process DISCover Stream Hub Using program interfaces of other process c:\progr am files\disc\discstreamhub.exe Using program interfaces of other process 1/3/2010 8:24:35 AM Allowed: Using system program interfaces DISCover Stream Hub Use system function for hidden sending of data through the netwo rk Using system program interfaces 1/3/2010 8:16:12 AM Allowed: Using system program interfaces DISCover Drop & Play System Executable Use system function for hidden sending of data t hrough the network Using system program interfaces 1/3/2010 8:16:10 AM Allowed: Setting debug privileges DISCover Drop & Play System Executable Setting debug privileges Setting debug pr

ivileges 1/3/2010 8:16:09 AM Allowed: Using program interfaces of other process DISCover Drop & Play System Executable Using program interfaces of other proces s c:\program files\disc\discover.exe Using program interfaces of othe r process 1/3/2010 8:16:09 AM Allowed: Access to critical system objects DISCover Drop & Play System Executable Access to critical system objects Access to critical system objects 1/3/2010 8:16:03 AM Allowed: Using program interfaces of other process InstallShield Update Service Update Manager Using program interfaces of othe r process c:\program files\common files\installshield\updateservice\isuspm .exe Using program interfaces of other process 1/3/2010 8:15:48 AM Allowed: Using program interfaces of other process iTunesHelper Module Using program interfaces of other process c:\progr am files\itunes\ituneshelper.exe Using program interfaces of other proces s 1/3/2010 8:15:45 AM Allowed: Setting debug privileges iTunesHelper Mod ule Setting debug privileges Setting debug privileges 1/3/2010 8:15:30 AM Allowed: Using program interfaces of other process igfxTray Module Using program interfaces of other process c:\windows\syste m32\igfxtray.exe Using program interfaces of other process 1/3/2010 8:15:27 AM Allowed: Setting debug privileges Realtek Azalia A udio - Event Monitor Setting debug privileges Setting debug pr ivileges 1/3/2010 8:15:22 AM Allowed: Setting debug privileges KBD EXE Setting debug privileges Setting debug privileges 1/3/2010 8:14:38 AM Allowed: Low level disk access HP Boot Optimizer Low level disk access Device\Harddisk1\DP(1)0-0+9 Low level disk access 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Application Control 1/3/2010 8:12:33 AM Allowed: Exiting Microsoft Windows TFC.exe Windows shutdown Exiting Microsoft Windows 1/3/2010 8:12:24 AM Allowed: Setting debug privileges TFC.exe Setting debug privileges Setting debug privileges 1/3/2010 8:03:59 AM Windows Shell Extension Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 8:03:36 AM Allowed: Setting debug privileges TFC.exe Setting debug privileges Setting debug privileges 1/3/2010 8:03:36 AM TFC.exe Placed in group Low Restricted High val ue of threat rating calculated heuristically 1/3/2010 7:59:28 AM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 7:46:15 AM Internet Explorer Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 7:38:03 AM Allowed: Start driver Absent Start driver C:\WINDO WS\SYSTEM32\DRIVERS\MBAMSWISSARMY.SYS Start driver 1/3/2010 7:37:47 AM Malwarebytes' Anti-Malware Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 7:29:11 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 7:29:11 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 7:29:11 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 6:29:11 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS)

1/3/2010 6:29:10 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 6:29:10 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 5:29:11 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 5:29:11 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 5:29:11 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 4:29:10 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 4:29:10 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 4:29:10 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 3:29:11 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 3:29:11 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 3:29:11 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 2:29:11 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 2:29:11 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 2:29:11 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 2:29:09 AM Allowed: Setting debug privileges DISCover Upd. Ma nager Setting debug privileges Setting debug privileges 1/3/2010 2:14:26 AM Allowed: Using program interfaces of other process Roxio MyDVD Using program interfaces of other process c:\program files \sonic\mydvd\mydvd.exe Using program interfaces of other process 1/3/2010 2:14:21 AM Allowed: Using program interfaces of other process Sonic Product Registration Using program interfaces of other process c:\program files\common files\sonic shared\sonic central\main\leaderreg.exe Using program interfaces of other process 1/3/2010 2:14:21 AM Allowed: Access to critical system objects Sonic Pr oduct Registration Access to critical system objects Access t o critical system objects 1/3/2010 2:14:21 AM Allowed: Setting debug privileges Sonic Product Re gistration Setting debug privileges Setting debug privileges 1/3/2010 2:14:19 AM Allowed: Setting debug privileges Roxio MyDVD Setting debug privileges Setting debug privileges 1/3/2010 1:57:16 AM YahooSync Placed in group Trusted Signed b y the digital signature of entrusted manufacturers

1/3/2010 1:54:06 AM AppleMobileSync Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 1:53:57 AM MDCrashReportTool.exe Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:53:29 AM Allowed: Setting debug privileges Roxio MyDVD Setting debug privileges Setting debug privileges 1/3/2010 1:53:17 AM Allowed: Using program interfaces of other process Roxio MyDVD Using program interfaces of other process c:\program files \sonic\mydvd\mydvd.exe Using program interfaces of other process 1/3/2010 1:50:33 AM Allowed: Using program interfaces of other process Sonic Product Registration Using program interfaces of other process c:\program files\common files\sonic shared\sonic central\main\leaderreg.exe Using program interfaces of other process 1/3/2010 1:50:33 AM Allowed: Access to critical system objects Sonic Pr oduct Registration Access to critical system objects Access t o critical system objects 1/3/2010 1:50:33 AM Allowed: Setting debug privileges Sonic Product Re gistration Setting debug privileges Setting debug privileges 1/3/2010 1:50:33 AM Sonic Product Registration Placed in group Trusted Known on the database of the known software 1/3/2010 1:50:31 AM Allowed: Setting debug privileges Roxio MyDVD Setting debug privileges Setting debug privileges 1/3/2010 1:50:28 AM Roxio MyDVD Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 1:40:33 AM AppleMobileBackup.exe Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:38:10 AM gconsync.exe Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 1:38:05 AM SyncServer Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 1:38:04 AM distnoted.exe Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 1:38:03 AM AppleMobileDeviceHelper Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:37:48 AM Add Hardware Device Library Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:37:39 AM iTunes Placed in group Trusted Signed by the di gital signature of entrusted manufacturers 1/3/2010 1:34:15 AM Allowed: Using program interfaces of other process DISCover Stream Hub Using program interfaces of other process c:\progr am files\disc\discstreamhub.exe Using program interfaces of other process 1/3/2010 1:34:15 AM Allowed: Using system program interfaces DISCover Stream Hub Use system function for hidden sending of data through the netwo rk Using system program interfaces 1/3/2010 1:34:12 AM Allowed: Access to password storage DISCover Stream Hub Access to protected storage Access to password storage 1/3/2010 1:29:10 AM Allowed: Using system program interfaces DISCover Drop & Play System Executable Use system function for hidden sending of data t hrough the network Using system program interfaces 1/3/2010 1:29:07 AM Allowed: Setting debug privileges DISCover Drop & Play System Executable Setting debug privileges Setting debug pr ivileges 1/3/2010 1:29:06 AM Allowed: Using program interfaces of other process DISCover Drop & Play System Executable Using program interfaces of other proces s c:\program files\disc\discover.exe Using program interfaces of othe r process 1/3/2010 1:29:06 AM Allowed: Access to critical system objects DISCover Drop & Play System Executable Access to critical system objects Access to critical system objects 1/3/2010 1:29:01 AM Allowed: Using program interfaces of other process

InstallShield Update Service Update Manager Using program interfaces of othe r process c:\program files\common files\installshield\updateservice\isuspm .exe Using program interfaces of other process 1/3/2010 1:28:58 AM Allowed: Using program interfaces of other process iTunesHelper Module Using program interfaces of other process c:\progr am files\itunes\ituneshelper.exe Using program interfaces of other proces s 1/3/2010 1:28:55 AM Allowed: Setting debug privileges iTunesHelper Mod ule Setting debug privileges Setting debug privileges 1/3/2010 1:28:39 AM Allowed: Using program interfaces of other process igfxTray Module Using program interfaces of other process c:\windows\syste m32\igfxtray.exe Using program interfaces of other process 1/3/2010 1:28:35 AM Allowed: Setting debug privileges Realtek Azalia A udio - Event Monitor Setting debug privileges Setting debug pr ivileges 1/3/2010 1:28:29 AM Allowed: Setting debug privileges KBD EXE Setting debug privileges Setting debug privileges 1/3/2010 1:27:51 AM Adobe Reader and Acrobat Manager Placed i n group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:27:49 AM Windows Error Reporting Dump Reporting Tool Placed in group Trusted Signed by the digital signature of entrusted manufacture rs 1/3/2010 1:27:33 AM Allowed: Low level disk access HP Boot Optimizer Low level disk access Device\Harddisk1\DP(1)0-0+9 Low level disk access 1/3/2010 1:27:32 AM ftutil2 DLL Placed in group Trusted Known on the database of the known software 1/3/2010 1:27:27 AM Recguard Application Placed in group Trusted Known on the database of the known software 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Application Control 1/3/2010 1:24:53 AM Windows Logon UI Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:18:13 AM Allowed: Setting debug privileges Microsoft Word f or Windows Setting debug privileges Setting debug privileges 1/3/2010 1:18:12 AM Microsoft Word for Windows Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 1:17:24 AM Quicken Launcher Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 1:09:33 AM Allowed: Using system program interfaces (DNS) Firefox Use DNS caching system for conversion java.sun.com Using system program int erfaces (DNS) 1/3/2010 1:09:33 AM Allowed: Using program interfaces of other process Firefox Using program interfaces of other process c:\program files\mozilla firefox\firefox.exe Using program interfaces of other process 1/3/2010 1:09:32 AM Allowed: Setting debug privileges Firefox Setting debug privileges Setting debug privileges 1/3/2010 1:09:16 AM JavaRa.exe Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 1:02:07 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 1:02:07 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 1:02:07 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 12:46:09 AM WAITANDDELETE.JSE Placed in group Low Rest ricted Known on the database of the known software 1/3/2010 12:46:09 AM MsgAction.exe Placed in group Trusted Known on

the database of the known software 1/3/2010 12:46:09 AM Registry Console Tool Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 12:46:08 AM CLEAN.BAT Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 12:46:08 AM commands Placed in group Trusted Known on the database of the known software 1/3/2010 12:46:08 AM Cloaker Placed in group Trusted Known on the dat abase of the known software 1/3/2010 12:43:57 AM Allowed: Using program interfaces of other process HPCEE.exe Using program interfaces of other process c:\program files \hewlett-packard\sdp\ceement\hpcee.exe Using program interfaces of other proces s 1/3/2010 12:43:57 AM Allowed: Using system program interfaces HPCEE.ex e Use system function for hidden sending of data through the network Using system program interfaces 1/3/2010 12:43:57 AM HPCEE.exe Placed in group Low Restricted High value of threat rating calculated heuristically 1/3/2010 12:43:52 AM IDriverT Module Placed in group Trusted Known on the database of the known software 1/3/2010 12:43:05 AM InstallDriver Module Placed in group Trusted Known on the database of the known software 1/3/2010 12:42:53 AM uninshlp.dll Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 12:42:48 AM g2aservice.exe Placed in group Trusted Signed b y the digital signature of entrusted manufacturers 1/3/2010 12:42:46 AM G2AUninstaller.exe Placed in group Trusted Signed by the digital signature of entrusted manufacturers 1/3/2010 12:02:08 AM Allowed: Using system program interfaces (DNS) myFTP Use DNS caching system for conversion rockford.discoverconsole.com Using sy stem program interfaces (DNS) 1/3/2010 12:02:06 AM Allowed: Using program interfaces of other process myFTP Using program interfaces of other process c:\program files\disc\my ftp.exe Using program interfaces of other process 1/3/2010 12:02:06 AM Allowed: Access to critical system objects myFTP Access to critical system objects Access to critical system object s 1/3/2010 12:02:05 AM Allowed: Setting debug privileges DISCover Upd. Ma nager Setting debug privileges Setting debug privileges Proactive Defense (events: 9) 1/3/2010 9:48:03 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/3/2010 9:48:03 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Proactive Defense 1/3/2010 8:14:37 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/3/2010 8:14:37 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Proactive Defense 1/3/2010 1:27:23 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS Action selected by user 1/3/2010 1:27:23 AM Detected: PDM.Keylogger Absent Keylogger activity C:\WINDOWS\SYSTEM32\DRIVERS\ELKBD.SYS 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Proactive Defense License manager (events: 4) 1/3/2010 9:47:35 AM License validity period expires soon Kaspersky Intern

et Security 1/3/2010 8:14:09 AM License validity period expires soon Kaspersky Intern et Security 1/3/2010 1:26:52 AM License validity period expires soon Kaspersky Intern et Security 1/3/2010 12:00:43 AM License validity period expires soon Kaspersky Intern et Security Firewall (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security Firewall 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security Firewall 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security Firewall IM Anti-Virus (events: 3) 1/3/2010 9:47:37 AM Task started Kaspersky Internet Security IM Anti-Virus 1/3/2010 8:14:12 AM Task started Kaspersky Internet Security IM Anti-Virus 1/3/2010 1:27:01 AM Task started Kaspersky Internet Security IM Anti-Virus Objects Scan (events: 15) 1/3/2010 9:17:08 PM Task completed Kaspersky Internet Security Full Scan 1/3/2010 8:15:09 PM Task started Kaspersky Internet Security Full Scan 1/3/2010 10:22:16 AM Task completed Kaspersky Internet Security Rootkit Scan 1/3/2010 10:17:49 AM Task started Kaspersky Internet Security Rootkit Scan 1/3/2010 8:51:58 AM Task completed Kaspersky Internet Security Rootkit Scan 1/3/2010 8:44:23 AM Task started Kaspersky Internet Security Rootkit Scan 1/3/2010 8:08:00 AM Task completed Kaspersky Internet Security Vulnerability Scan 1/3/2010 8:03:59 AM Task started Kaspersky Internet Security Vulnerability Scan 1/3/2010 2:02:14 AM Task completed Kaspersky Internet Security Rootkit Scan 1/3/2010 1:57:04 AM Task started Kaspersky Internet Security Rootkit Scan 1/3/2010 12:35:56 AM Task completed Kaspersky Internet Security Rootkit Scan 1/3/2010 12:30:57 AM Task started Kaspersky Internet Security Rootkit Scan 1/3/2010 12:28:45 AM Task completed Kaspersky Internet Security Objects Scan 1/3/2010 12:07:53 AM Task started Kaspersky Internet Security Objects Scan 1/3/2010 12:07:48 AM Task stopped Kaspersky Internet Security Objects Scan My Update Center (events: 18) 1/3/2010 7:43:52 PM Task completed Kaspersky Internet Security My Update Center 1/3/2010 7:42:49 PM Task started Kaspersky Internet Security My Update Center 1/3/2010 5:23:53 PM Task completed Kaspersky Internet Security My Update Center 1/3/2010 5:22:49 PM Task started Kaspersky Internet Security

My Update Center 1/3/2010 3:03:55 PM My Update Center 1/3/2010 3:02:49 PM My Update Center 1/3/2010 12:44:20 PM My Update Center 1/3/2010 12:42:49 PM My Update Center 1/3/2010 10:23:52 AM My Update Center 1/3/2010 10:22:49 AM My Update Center 1/3/2010 8:03:21 AM My Update Center 1/3/2010 8:02:05 AM My Update Center 1/3/2010 5:42:52 AM My Update Center 1/3/2010 5:42:05 AM My Update Center 1/3/2010 3:22:49 AM My Update Center 1/3/2010 3:22:05 AM My Update Center 1/3/2010 1:17:19 AM My Update Center 1/3/2010 1:15:57 AM My Update Center

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security

Task completed Kaspersky Internet Security Task started Kaspersky Internet Security