EVIDENCE OF MY COMPUTER STALKERS - REMOTE IP ADDRESS
TO: ALAMEDA POLICE
ATTN: OFFICER ABENOJA #63
510 337-8311
FROM : CAROLINE E. KENNEDY
DATE: FEB 15, 2008
RE: COMPUTER ID THEFT
STALKERS
OF CAROLINE E. KENNEDY
REMOTE IP ADDRESS 192. 168.1.101
MY COMPUTER WAS SERVICED AT FRY'S IN
CONCORD, CA HERE IS MY SRO#640395 FROM
FRY'S PURCHASED UNDER THE NAME OF
DOUGAL C. MACDONALD....
CAROLINE KENNEDY
SRO #64095
Category: Firewall activities Date Time,Message,Details 6/15/2007
5:44:07 AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to
""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/15/2007 5:44:07 AM,"This one time, the user has chosen to ""permit"" communications.","This
one time, the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process
name is ""N/A""." 6/15/2007 5:41:54 AM,"This one time, the user has chosen to ""permit"" communications.","This one time,
the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/15/2007 5:41:54
AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications.
Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message
type is ""Echo Request"". Process name is ""N/A""." 6/15/2007 5:41:36 AM,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/15/2007
5:30:16 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccLgView.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Common Files\Symantec Shared\ccLgView.exe" is preparing to access the Internet. 6/15/2007
5:11:29 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet. 6/15/2007 5:11:29
AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance
of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/15/2007 5:09:59 AM,An
instance of "C:\Program Files\Norton Internet Security\Norton AntiVirus\navw32.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Norton Internet Security\Norton AntiVirus\navw32.exe" is preparing to access the Internet. 6/15/2007
5:09:59 AM,An instance of "c:\WINDOWS\system32\rundll32.exe" is preparing to access the Internet.,An instance of "c:\WINDOWS\system32\rundll32.exe"
is preparing to access the Internet. 6/15/2007 5:09:59 AM,An instance of "c:\WINDOWS\system32\rundll32.exe" is preparing
to access the Internet.,An instance of "c:\WINDOWS\system32\rundll32.exe" is preparing to access the Internet. 6/15/2007
5:08:18 AM,The following Symantec application was implicitly allowed outbound TCP connection:,"The following Symantec application
was implicitly allowed outbound TCP connection: Application: C:\Program Files\Common Files\Symantec
Shared\ccSvcHst.exe Local IP address,port: KENNEDY-83ADFBD,1031 Remote IP
address,port: avpg.crsi.symantec.com,https(443)" 6/15/2007 5:08:18 AM,The following Symantec application was implicitly
allowed to communicate:,"The following Symantec application was implicitly allowed to communicate:
Application: C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe Protocol: UDP
Local IP address,port: KENNEDY-83ADFBD,0 Remote IP address,port: 24.143.128.68,domain(53)" 6/15/2007
5:08:18 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" is preparing to access the Internet. 6/15/2007
5:08:18 AM,An instance of "C:\Program Files\Norton Internet Security\Norton AntiVirus\navw32.exe" is preparing to access the
Internet.,An instance of "C:\Program Files\Norton Internet Security\Norton AntiVirus\navw32.exe" is preparing to access the
Internet. 6/15/2007 5:08:17 AM,An instance of "c:\WINDOWS\system32\rundll32.exe" is preparing to access the Internet.,An
instance of "c:\WINDOWS\system32\rundll32.exe" is preparing to access the Internet. 6/15/2007 5:08:17 AM,An instance of
"c:\WINDOWS\system32\rundll32.exe" is preparing to access the Internet.,An instance of "c:\WINDOWS\system32\rundll32.exe"
is preparing to access the Internet. 6/15/2007 5:06:36 AM,A rule for "C:\WINDOWS\system32\WgaTray.exe" was automatically
created using a preconfigured rule.,A rule for "C:\WINDOWS\system32\WgaTray.exe" was automatically created using a preconfigured
rule. 6/15/2007 5:06:36 AM,Firewall configuration updated: 57 rules.,Firewall configuration updated: 57 rules. 6/15/2007
5:06:36 AM,An instance of "C:\WINDOWS\system32\WgaTray.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\WgaTray.exe"
is preparing to access the Internet. 6/15/2007 5:06:34 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing
to access the Internet. 6/15/2007 5:06:34 AM,The following Symantec application was implicitly allowed to listen:,"The
following Symantec application was implicitly allowed to listen: Application: C:\Program Files\Common
Files\Symantec Shared\ccApp.exe Local IP address,port: 1027,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb
1e d7 83 38 cf 76 1f" 6/15/2007 5:06:33 AM,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the
Internet.,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet. 6/15/2007 5:06:31 AM,An
instance of "C:\WINDOWS\System32\alg.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\alg.exe"
is preparing to access the Internet. 6/15/2007 5:06:26 AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/15/2007
5:06:26 AM,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe"
is preparing to access the Internet. 6/15/2007 5:06:19 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is
preparing to access the Internet. 6/15/2007 5:06:16 AM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet. 6/15/2007 5:06:16
AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/15/2007 5:06:13 AM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/15/2007
5:06:13 AM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/15/2007 5:04:52 AM,An
instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program
Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/15/2007 5:04:47 AM,An instance of "C:\WINDOWS\system32\wgatray.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\wgatray.exe" is preparing to access the Internet. 6/15/2007
5:04:01 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/15/2007 5:03:18
AM,"At the user's request, the network has been disconnected from this machine.","At the user's request, the network has been
disconnected from this machine." 6/15/2007 4:52:29 AM,The following Symantec application was implicitly allowed to communicate:,"The
following Symantec application was implicitly allowed to communicate: Application: C:\Program Files\Common
Files\Symantec Shared\ccSvcHst.exe Protocol: UDP Local IP address,port: KENNEDY-83ADFBD,0
Remote IP address,port: 24.143.128.68,domain(53)" 6/15/2007 4:52:29 AM,An instance of "C:\Program Files\Common Files\Symantec
Shared\ccSvcHst.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe"
is preparing to access the Internet. 6/15/2007 4:08:10 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/15/2007 4:00:35 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/15/2007 3:07:30 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing
to access the Internet. 6/15/2007 3:07:30 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/15/2007 3:02:39 AM,The following Symantec application was implicitly allowed to listen:,"The
following Symantec application was implicitly allowed to listen: Application: C:\Program Files\Common
Files\Symantec Shared\ccApp.exe Local IP address,port: 1028,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb
1e d7 83 38 cf 76 1f" 6/15/2007 3:02:39 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is
preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to
access the Internet. 6/15/2007 3:02:37 AM,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet.,An
instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet. 6/15/2007 3:02:34 AM,An instance of
"C:\WINDOWS\System32\alg.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\alg.exe" is preparing
to access the Internet. 6/15/2007 3:02:29 AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the
Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/15/2007 3:02:29 AM,An
instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe"
is preparing to access the Internet. 6/15/2007 3:02:23 AM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is
preparing to access the Internet. 6/15/2007 3:02:19 AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/15/2007 3:02:20
AM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe"
is preparing to access the Internet. 6/15/2007 3:02:16 AM,Firewall configuration updated: 55 rules.,Firewall configuration
updated: 55 rules. 6/15/2007 3:02:16 AM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/15/2007 2:50:15 AM,An
instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet.,An instance of
"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet. 6/15/2007 2:50:15 AM,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of
"C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/15/2007 2:45:25 AM,The
following Symantec application was implicitly allowed to listen:,"The following Symantec application was implicitly allowed
to listen: Application: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Local IP address,port: 1028,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/15/2007 2:45:25 AM,An instance
of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet.,An instance of "C:\Program
Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet. 6/15/2007 2:45:22 AM,An instance of
"C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\spoolsv.exe" is
preparing to access the Internet. 6/15/2007 2:45:20 AM,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access
the Internet.,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access the Internet. 6/15/2007 2:45:15 AM,An
instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/15/2007 2:45:15 AM,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet. 6/15/2007 2:45:09
AM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet. 6/15/2007
2:45:05 AM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe"
is preparing to access the Internet. 6/15/2007 2:45:05 AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/15/2007
2:45:02 AM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/15/2007 2:45:02 AM,Firewall configuration updated: 55
rules.,Firewall configuration updated: 55 rules. 6/15/2007 1:36:41 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/15/2007 1:21:12 AM,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe" is preparing to access
the Internet.,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe" is preparing to access the Internet. 6/15/2007 1:21:00
AM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule.,A rule
for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule. 6/15/2007 1:21:00
AM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/15/2007 1:20:59 AM,An instance
of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Internet
Explorer\iexplore.exe" is preparing to access the Internet. 6/15/2007 1:19:51 AM,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe" is preparing to access the Internet. 6/15/2007
12:38:30 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/15/2007 12:32:03
AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance
of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/14/2007 11:37:27 PM,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of
"C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/14/2007 11:30:57 PM,An
instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" is preparing to access
the Internet.,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" is preparing
to access the Internet. 6/14/2007 10:32:23 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/14/2007 9:36:33 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/14/2007 9:28:58 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/14/2007 8:45:52 PM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" is preparing
to access the Internet. 6/14/2007 8:45:52 PM,The following Symantec application was implicitly allowed to communicate:,"The
following Symantec application was implicitly allowed to communicate: Application: C:\Program Files\Common
Files\Symantec Shared\ccSvcHst.exe Protocol: UDP Local IP address,port: KENNEDY-83ADFBD,0
Remote IP address,port: 24.143.128.68,domain(53)" 6/14/2007 8:35:52 PM,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/14/2007
8:35:52 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet. 6/14/2007 8:35:52
PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance
of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/14/2007 8:31:00 PM,The
following Symantec application was implicitly allowed to listen:,"The following Symantec application was implicitly allowed
to listen: Application: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Local IP address,port: 1027,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/14/2007 8:31:00 PM,An instance
of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet.,An instance of "C:\Program
Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet. 6/14/2007 8:31:00 PM,The following Symantec
application was implicitly allowed to listen:,"The following Symantec application was implicitly allowed to listen:
Application: C:\Program Files\Common Files\Symantec Shared\ccApp.exe Local IP address,port: 1026,98
73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/14/2007 8:30:59 PM,An instance of "C:\WINDOWS\system32\spoolsv.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet. 6/14/2007
8:30:57 PM,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\alg.exe"
is preparing to access the Internet. 6/14/2007 8:30:52 PM,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet. 6/14/2007 8:30:47
PM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet. 6/14/2007
8:30:43 PM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe"
is preparing to access the Internet. 6/14/2007 8:30:42 PM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/14/2007
8:30:39 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/14/2007 8:30:39 PM,NDIS
filtering is enabled.,NDIS filtering is enabled. 6/14/2007 8:20:35 PM,Firewall configuration updated: 55 rules.,Firewall
configuration updated: 55 rules. 6/14/2007 8:20:00 PM,Firewall configuration updated: 55 rules.,Firewall configuration
updated: 55 rules. 6/14/2007 8:20:00 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/14/2007
8:19:40 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet. 6/14/2007 8:19:40
PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance
of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/14/2007 8:14:50 PM,An
instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/14/2007 8:14:50 PM,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
is preparing to access the Internet. 6/14/2007 8:14:47 PM,The following Symantec application was implicitly allowed to
listen:,"The following Symantec application was implicitly allowed to listen: Application: C:\Program
Files\Common Files\Symantec Shared\ccApp.exe Local IP address,port: 1027,98 73 42 b3 e4 45 e6 3b 86
7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/14/2007 8:14:47 PM,The following Symantec application was implicitly allowed to listen:,"The
following Symantec application was implicitly allowed to listen: Application: C:\Program Files\Common
Files\Symantec Shared\ccApp.exe Local IP address,port: 1026,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb
1e d7 83 38 cf 76 1f" 6/14/2007 8:14:47 PM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is
preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to
access the Internet. 6/14/2007 8:14:46 PM,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet.,An
instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet. 6/14/2007 8:14:45 PM,An instance of
"C:\WINDOWS\System32\alg.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\alg.exe" is preparing
to access the Internet. 6/14/2007 8:14:39 PM,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the
Internet.,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet. 6/14/2007 8:14:34 PM,An instance
of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet.,An instance of
"C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet. 6/14/2007 8:14:29
PM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe"
is preparing to access the Internet. 6/14/2007 8:14:29 PM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/14/2007
8:14:26 PM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/14/2007 8:14:26 PM,Firewall configuration updated: 55
rules.,Firewall configuration updated: 55 rules. 6/9/2007 9:37:43 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/9/2007 8:31:21 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is
preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to
access the Internet. 6/9/2007 7:33:09 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the
Internet. 6/9/2007 7:26:43 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to
access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the
Internet. 6/9/2007 6:32:09 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to
access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the
Internet. 6/9/2007 6:30:21 PM,The following Symantec application was implicitly allowed to communicate:,"The following
Symantec application was implicitly allowed to communicate: Application: C:\Program Files\Common Files\Symantec
Shared\ccSvcHst.exe Protocol: UDP Local IP address,port: KENNEDY-83ADFBD,0
Remote IP address,port: 24.143.128.68,domain(53)" 6/9/2007 6:30:21 PM,An instance of "C:\Program Files\Common Files\Symantec
Shared\ccSvcHst.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe"
is preparing to access the Internet. 6/9/2007 5:43:37 PM,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
is preparing to access the Internet. 6/9/2007 5:27:05 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/9/2007 4:59:45 PM,"This one time, the user has chosen to ""permit"" communications.","This one
time, the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.1). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 4:59:45
PM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications.
Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.1). Message type
is ""Echo Request"". Process name is ""N/A""." 6/9/2007 4:59:45 PM,"This one time, the user has chosen to ""permit""
communications.","This one time, the user has chosen to ""permit"" communications. Outbound ICMP request.
Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.1). Message type is ""Echo Request"". Process
name is ""N/A""." 6/9/2007 4:31:12 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the
Internet. 6/9/2007 4:23:35 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to
access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the
Internet. 6/9/2007 3:31:18 PM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using
a preconfigured rule.,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured
rule. 6/9/2007 3:31:18 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007
3:31:17 PM,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance
of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007 3:30:22 PM,An instance
of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/9/2007 3:30:22 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing
to access the Internet. 6/9/2007 3:30:22 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is
preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to
access the Internet. 6/9/2007 3:25:29 PM,The following Symantec application was implicitly allowed to listen:,"The following
Symantec application was implicitly allowed to listen: Application: C:\Program Files\Common Files\Symantec
Shared\ccApp.exe Local IP address,port: 1026,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf
76 1f" 6/9/2007 3:25:29 PM,The following Symantec application was implicitly allowed to listen:,"The following Symantec
application was implicitly allowed to listen: Application: C:\Program Files\Common Files\Symantec
Shared\ccApp.exe Local IP address,port: 1027,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf
76 1f" 6/9/2007 3:25:29 PM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access
the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet. 6/9/2007
3:25:28 PM,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\spoolsv.exe"
is preparing to access the Internet. 6/9/2007 3:25:27 PM,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access
the Internet.,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access the Internet. 6/9/2007 3:25:21 PM,An
instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe"
is preparing to access the Internet. 6/9/2007 3:25:17 PM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is
preparing to access the Internet. 6/9/2007 3:25:12 PM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet. 6/9/2007 3:25:12
PM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/9/2007 3:25:07 PM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/9/2007
3:25:07 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007 3:19:50 PM,An instance
of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of "C:\Program
Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/9/2007 3:13:23 PM,An instance of
"C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of "C:\Program
Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/9/2007 3:05:13 PM,A rule for "C:\Program
Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule.,A rule for "C:\Program Files\Internet
Explorer\iexplore.exe" was automatically created using a preconfigured rule. 6/9/2007 3:05:13 PM,Firewall configuration
updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007 3:05:12 PM,An instance of "C:\Program Files\Internet
Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Internet Explorer\iexplore.exe"
is preparing to access the Internet. 6/9/2007 2:35:55 PM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was
automatically created using a preconfigured rule.,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically
created using a preconfigured rule. 6/9/2007 2:35:55 PM,Firewall configuration updated: 55 rules.,Firewall configuration
updated: 55 rules. 6/9/2007 2:35:55 PM,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to
access the Internet.,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007
2:18:50 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/9/2007 2:12:06
PM,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" is preparing to
access the Internet.,An instance of "C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
is preparing to access the Internet. 6/9/2007 1:48:48 PM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was
automatically created using a preconfigured rule.,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically
created using a preconfigured rule. 6/9/2007 1:48:48 PM,Firewall configuration updated: 55 rules.,Firewall configuration
updated: 55 rules. 6/9/2007 1:48:47 PM,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to
access the Internet.,An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007
1:13:45 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/9/2007 12:50:26
PM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule.,A rule
for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule. 6/9/2007 12:50:26
PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007 12:50:26 PM,An instance
of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Internet
Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007 12:40:01 PM,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe" is preparing to access
the Internet. 6/9/2007 12:39:45 PM,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" was automatically created
using a preconfigured rule.,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" was automatically created using
a preconfigured rule. 6/9/2007 12:39:45 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55
rules. 6/9/2007 12:39:43 PM,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" is preparing to access the
Internet.,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" is preparing to access the Internet. 6/9/2007
12:38:59 PM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule.,A
rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule. 6/9/2007
12:38:59 PM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007 12:38:58 PM,An
instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program
Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007 12:17:55 PM,An instance of "C:\Program
Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet. 6/9/2007 12:10:18 PM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/9/2007 11:47:23 AM,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe" was automatically
created using a preconfigured rule.,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe" was automatically created
using a preconfigured rule. 6/9/2007 11:47:23 AM,Firewall configuration updated: 55 rules.,Firewall configuration updated:
55 rules. 6/9/2007 11:47:22 AM,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe" is preparing to access
the Internet.,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe" is preparing to access the Internet. 6/9/2007
11:25:40 AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit""
communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101).
Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 11:25:40 AM,"This one time, the user has chosen
to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications. Outbound ICMP request.
Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message type is ""Echo Request"". Process
name is ""N/A""." 6/9/2007 11:19:08 AM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created
using a preconfigured rule.,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a
preconfigured rule. 6/9/2007 11:19:08 AM,Firewall configuration updated: 49 rules.,Firewall configuration updated: 49 rules. 6/9/2007
11:19:08 AM,A rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule.,A
rule for "C:\Program Files\Internet Explorer\iexplore.exe" was automatically created using a preconfigured rule. 6/9/2007
11:19:08 AM,Firewall configuration updated: 49 rules.,Firewall configuration updated: 49 rules. 6/9/2007 11:19:08 AM,An
instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program
Files\Internet Explorer\iexplore.exe" is preparing to access the Internet. 6/9/2007 11:19:08 AM,An instance of "C:\Program
Files\Internet Explorer\iexplore.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Internet Explorer\iexplore.exe"
is preparing to access the Internet. 6/9/2007 11:18:16 AM,"This one time, the user has chosen to ""permit"" communications.","This
one time, the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 11:18:16
AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications.
Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message
type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 11:18:15 AM,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/9/2007
11:17:37 AM,Firewall configuration updated: 49 rules.,Firewall configuration updated: 49 rules. 6/9/2007 11:17:01 AM,An
instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet.,An instance of
"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing to access the Internet. 6/9/2007 11:17:01 AM,An
instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet.,An instance of
"C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing to access the Internet. 6/9/2007 11:16:17 AM,A
rule has been created to "permit" communications.,"A rule has been created to ""permit"" communications. Local address:
All local network adapters(3389). Process name is ""C:\WINDOWS\system32\svchost.exe""." 6/9/2007 11:16:17 AM,Firewall
configuration updated: 49 rules.,Firewall configuration updated: 49 rules. 6/9/2007 11:16:16 AM,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/9/2007
11:16:09 AM,A rule has been created to "permit" communications.,"A rule has been created to ""permit"" communications.
Outbound TCP connection. Remote address, service is (192.168.1.1,2869). Process name is ""C:\WINDOWS\system32\sessmgr.exe""." 6/9/2007
11:16:09 AM,Firewall configuration updated: 55 rules.,Firewall configuration updated: 55 rules. 6/9/2007 11:16:05 AM,A
rule for "C:\WINDOWS\system32\sessmgr.exe" was automatically created using a preconfigured rule.,A rule for "C:\WINDOWS\system32\sessmgr.exe"
was automatically created using a preconfigured rule. 6/9/2007 11:16:05 AM,Firewall configuration updated: 54 rules.,Firewall
configuration updated: 54 rules. 6/9/2007 11:16:05 AM,An instance of "C:\WINDOWS\system32\sessmgr.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\system32\sessmgr.exe" is preparing to access the Internet. 6/9/2007 11:14:48
AM,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" was automatically created using a preconfigured rule.,A
rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" was automatically created using a preconfigured rule. 6/9/2007
11:14:48 AM,Firewall configuration updated: 52 rules.,Firewall configuration updated: 52 rules. 6/9/2007 11:14:46 AM,An
instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/9/2007 11:14:46 AM,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe"
was automatically created using a preconfigured rule.,A rule for "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" was automatically
created using a preconfigured rule. 6/9/2007 11:14:46 AM,Firewall configuration updated: 52 rules.,Firewall configuration
updated: 52 rules. 6/9/2007 11:14:45 AM,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe" is preparing to access the Internet. 6/9/2007
11:13:10 AM,A rule for "C:\WINDOWS\system32\usmt\migwiz.exe" was automatically created using a preconfigured rule.,A rule
for "C:\WINDOWS\system32\usmt\migwiz.exe" was automatically created using a preconfigured rule. 6/9/2007 11:13:10 AM,Firewall
configuration updated: 50 rules.,Firewall configuration updated: 50 rules. 6/9/2007 11:13:09 AM,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\usmt\migwiz.exe" is preparing to access the Internet. 6/9/2007
11:12:08 AM,The following Symantec application was implicitly allowed to listen:,"The following Symantec application was implicitly
allowed to listen: Application: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Local IP address,port: 1027,98 73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/9/2007 11:12:08 AM,The following
Symantec application was implicitly allowed to listen:,"The following Symantec application was implicitly allowed to listen:
Application: C:\Program Files\Common Files\Symantec Shared\ccApp.exe Local IP address,port: 1026,98
73 42 b3 e4 45 e6 3b 86 7d ad c6 eb 1e d7 83 38 cf 76 1f" 6/9/2007 11:12:08 AM,An instance of "C:\Program Files\Common
Files\Symantec Shared\ccApp.exe" is preparing to access the Internet.,An instance of "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe" is preparing to access the Internet. 6/9/2007 11:12:08 AM,An instance of "C:\WINDOWS\system32\spoolsv.exe"
is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\spoolsv.exe" is preparing to access the Internet. 6/9/2007
11:12:05 AM,An instance of "C:\WINDOWS\System32\alg.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\alg.exe"
is preparing to access the Internet. 6/9/2007 11:12:00 AM,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to
access the Internet.,An instance of "C:\WINDOWS\system32\lsass.exe" is preparing to access the Internet. 6/9/2007 11:11:54
AM,An instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet.,An
instance of "C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe" is preparing to access the Internet. 6/9/2007
11:11:51 AM,An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\System32\svchost.exe"
is preparing to access the Internet. 6/9/2007 11:11:51 AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing
to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet. 6/9/2007
11:11:46 AM,NDIS filtering is enabled.,NDIS filtering is enabled. 6/9/2007 11:11:47 AM,Firewall configuration updated:
45 rules.,Firewall configuration updated: 45 rules. 6/9/2007 11:06:09 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE" is preparing
to access the Internet. 6/9/2007 10:46:43 AM,"This one time, the user has chosen to ""permit"" communications.","This one
time, the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:46:43
AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications.
Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message
type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:46:21 AM,"This one time, the user has chosen to ""permit""
communications.","This one time, the user has chosen to ""permit"" communications. Outbound ICMP request.
Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message type is ""Echo Request"". Process
name is ""N/A""." 6/9/2007 10:46:21 AM,"This one time, the user has chosen to ""permit"" communications.","This one time,
the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:23:00
AM,An instance of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" is preparing to access the Internet.,An instance
of "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" is preparing to access the Internet. 6/9/2007 10:23:00
AM,The following Symantec application was implicitly allowed to communicate:,"The following Symantec application was implicitly
allowed to communicate: Application: C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
Protocol: UDP Local IP address,port: KENNEDY-83ADFBD,0 Remote IP address,port:
24.143.128.68,domain(53)" 6/9/2007 10:22:04 AM,"This one time, the user has chosen to ""permit"" communications.","This
one time, the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:22:04
AM,"This one time, the user has chosen to ""permit"" communications.","This one time, the user has chosen to ""permit"" communications.
Outbound ICMP request. Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message
type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:19:59 AM,"This one time, the user has chosen to ""permit""
communications.","This one time, the user has chosen to ""permit"" communications. Outbound ICMP request.
Local address (KENNEDY-83ADFBD). Remote address is (192.168.1.101). Message type is ""Echo Request"". Process
name is ""N/A""." 6/9/2007 10:19:59 AM,"This one time, the user has chosen to ""permit"" communications.","This one time,
the user has chosen to ""permit"" communications. Outbound ICMP request. Local address (KENNEDY-83ADFBD).
Remote address is (192.168.1.101). Message type is ""Echo Request"". Process name is ""N/A""." 6/9/2007 10:19:59
AM,An instance of "C:\WINDOWS\system32\svchost.exe" is preparing to access the Internet.,An instance of "C:\WINDOWS\system32\svchost.exe"
is preparing to access the Internet. 6/9/2007 10:13:00 AM,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
is preparing to access the Internet.,An instance of "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" is preparing
to access the Internet.
JUDGEMENTS & NOTES
COMPUTER ID THEFT
JUDGEMENTS & NOTES
EVIDENCE OF STALKING OF CAROLINE E. KENNEDY - CAROLINA KENNEDIA
|