An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
HELP! Files are being erased randomly!
#13254 12/09/10 11:34 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
Last few months files on my Mac are disappearing without obvious reason. Most oftenly mp3 and avi documents but also sometimes system files (prefs, history, etc.). I have found a log saying there's been log-in under my username but I did not do that! And then files were erased. Here is an example:


IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "Login user" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork SystemVersion.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:43:57 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:05 0100] "OpenFork cups-pdf" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:05 0100] "OpenFork cups-pdf" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:09 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:11 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:11 0100] "OpenFork cups-pdf" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-net.teevio.widget.ColourMod.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-it.com.palple.widget.currencyconverter.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.orange.widgets.Sudoku.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.worldclock.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.W2ihT8E" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.u8W9MLg" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.QrVufFN" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.cjjhz0t" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.ajvHf57" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.0vzY3ZR" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.unitconverter.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.translation.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.dictionary.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.calendar.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete uk.co.markallan.clamxav.plist" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:08:44:16 0100] "Delete system.iUtils.prefs" 0 0 0
.
.
.
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete cache" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete Java" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete Cache.db" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete com.apple.systempreferences" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete Cache.db" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:10 0100] "Delete com.adobe.ARM" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:11 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:11 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:11 0100] "OpenFork cups-pdf" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:49 0100] "OpenFork .DS_Store" 0 0 0
IP xxx.xxx.x.xxx - - [08/Dec/2010:09:14:49 0100] "Logout user" 0 0 0



It "sounds" like virus problem but I have checked my Mac with several different anti-virus tools and nothing was found. By the way, IP in log is NOT mine! Does it means someone in my office network is doing that, purposely or not, whatever?
I would appreciate any idea for solving this because it's at least very anoying. Not to mention I'm out of ideas...
Thank's!

Re: HELP! Files are being erased randomly!
bruces #13255 12/09/10 01:49 PM
Joined: Sep 2009
Offline

Joined: Sep 2009
Hmm, apparently whatever it is is also editing the log file (to remove process names and numbers).

Very interesting.

Re: HELP! Files are being erased randomly!
bruces #13257 12/09/10 02:26 PM
Joined: Aug 2009
Likes: 5
Moderator
Offline
Moderator

Joined: Aug 2009
Likes: 5
By your description, you have an intruder on your system.......a hacker, if you will. One who knows your current login password and who has some level of understanding of the Mac OS (and Unix). Disconnect your computer from the network immediately.

You should contact your IT manager with copies of the above log from your computer so that the security breach is known there too.....and let him take any further actions to try to locate the intruder.

There are several courses of action you might take, but for your own security the first should be to stop using your current user account and migrate your use of the computer onto a new account with a totally different password. If your current account has admin privileges, it should be downgraded to a standard account level.....and all sensitive data scrubbed.

It may be possible that the intruder has collected your banking and financial information, so it would be prudent to contact your account holders to inform them as well.....and see if they advise closing your accounts and opening new ones that are known to be secure.

Let us know how it goes.


Freedom is never free....thank a Service member today.
Re: HELP! Files are being erased randomly!
Hal Itosis #13272 12/10/10 09:09 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
no, it was me! i've changed IP address in xxx and username in "user". call me paranoid but i don't like to share such informations all over the net :-)
but the original IP address is definitely not mine! and now when you have mentioned it, what if that "unknown someone" really changed IP address in log to the one of our office addresses?
yes, that would be interesting!

Re: HELP! Files are being erased randomly!
MacManiac #13273 12/10/10 09:17 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
well, there's nothing critically important on this mac i'm working at. but it's pretty annoying if files such as apps preferences or finder and system preferences are disappearing! i have to create whole new setup and workspace every time. thou, i've stored most of apps prefs on stick but can't store the whole system! for instance, last time it happened my e-mail accounts were deleted, safari history and bookmarks also, finder prefs...
just can't figure out why would one do something like that??? ok, mp3, avi, divx... but system files???
now i have created password and turned off all of file sharing options and lat's see what happens next...
thank you guys for helping me solve this and have a nice weekend!

Re: HELP! Files are being erased randomly!
bruces #13275 12/10/10 04:05 PM
Joined: Sep 2009
Offline

Joined: Sep 2009
Originally Posted By: bruces
no, it was me! i've changed IP address in xxx and username in "user". call me paranoid but i don't like to share such informations all over the net :-)
but the original IP address is definitely not mine!

Well why hide it then? Knowing that IP address might provide a useful clue.


Originally Posted By: bruces
well, there's nothing critically important on this mac i'm working at. but it's pretty annoying if files such as apps preferences or finder and system preferences are disappearing! i have to create whole new setup and workspace every time. thou, i've stored most of apps prefs on stick but can't store the whole system! for instance, last time it happened my e-mail accounts were deleted, safari history and bookmarks also, finder prefs...
just can't figure out why would one do something like that??? ok, mp3, avi, divx... but system files???
now i have created password and turned off all of file sharing options and lat's see what happens next...
thank you guys for helping me solve this and have a nice weekend!

I don't see anything truly malicious there. "System" prefs get deleted all the time... that's how OSX does it (instead of writing over a file, it makes a new copy and swaps out the old one). And stuff like this:

"Delete widget-com.apple.widget.weather.plist.ajvHf57" 0 0 0

That junk at the end shows it was only a temp pref anyway.

--

So then, you're running Mac OS X *Server* are you? Which version?
[else tell us exactly how/where you're reading/finding that log file]




Last edited by Hal Itosis; 12/10/10 04:07 PM.
Re: HELP! Files are being erased randomly!
Hal Itosis #13283 12/11/10 08:33 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
Hi Hal!
Well, the IP address belongs to our office network and I have no experience with problems like this so I'm not sure what kind of information could be used for, let's say, another attack.
I'm running on regular Snow Leopard, not server. And it doesn't feel like a usual system self-maintenance or something similar. More like a routine executed from another computer under my identity. Last time, as I've mentioned before, Mail and Safari were reset to initial point - no accounts and mailboxes in Mail, no bookmarks or history in Safari. Finder too, back to initial OSX desktop picture, visible Dock, big icons, no monitor profile... Whole Adobe CS package prefs deleted - no My Workspace, My Keyboard Shortcuts, even asked me to register at Adobe again! Like I've never started any of CS apps before!
Day before that a bunch of mp3 files were deleted. Couple a weeks ago avi files too. Interesting detail: no aiff, flac, mpeg or VIDEO_TS was erased. And this "game" started couple of months ago! I was thinking of malware, virus even thought of somebody doing that when I'm not around. One day I was listening (quietly) to my iTunes playlist and suddenly it stopped with a message "can't find file". Doesn't seem like maintenance to me. And more, why there was no message "can't delete file because it is in use"?
However, maybe it's nothing malicious but it's really annoying. At least.
Now I have created a password so I guess there's nothing left but to wait for monday and see what happens next.
Nice weekend to all!

Re: HELP! Files are being erased randomly!
bruces #13285 12/11/10 11:54 PM
Joined: Aug 2009
Moderator
Offline
Moderator

Joined: Aug 2009
Hello, bruces

Is the Macintosh your personal computer which is joining the office network or is is owned by your office and provided for your business use?


Back up everything you can't afford to lose: documents, mail, movies, music, photos, and other data and settings.
Re: HELP! Files are being erased randomly!
bruces #13288 12/12/10 02:24 AM
Joined: Sep 2009
Offline

Joined: Sep 2009
Originally Posted By: Hal Itosis
So then, you're running Mac OS X *Server* are you? Which version?
[else tell us exactly how/where you're reading/finding that log file]

Originally Posted By: bruces
I'm running on regular Snow Leopard, not server.

Okay, then (as per my previous request):
  • Where is that log file located? (full pathname if possible)

  • How are you reading it? (with Console.app or Terminal?)

Kindly provide enough detail so that i can reproduce the steps on my Mac.
I.e., i'd kinda like to view the same log on a "normal" machine... ya know?

Re: HELP! Files are being erased randomly!
dianne #13290 12/12/10 03:46 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
hello dianne!
it's an office mac but our policy is, let's say, liberal about such things. basically, we can use our computers for browsing, downloading, etc... even for some things we can't do at home (for whatever reason it may be) as long as it doesn't interfere with the job we're paid for. beside, there's only four of us in the same office, sitting next to eachother including owner of the firm and there's no chance to hide something even if you want it to.
as I said in one of the previous posts, none of erased items are crucially important but the way they are being deleted and what's being deleted is really f***** up!
it would be nice to find out who (or what) is doing that. that kind of information would explain a lot and then I could decide what to do next.

Re: HELP! Files are being erased randomly!
Hal Itosis #13291 12/12/10 04:17 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
hello hal!
sorry, I forgot to answer on this in previous reply! it's 10.6.5 I'm using. log was found in Console. don't know the exact path right now, I'm writing this from my home Mac but I believe it's something like this:
FILES/AppleFileService/AppleFileServiceAccess/AppleFileServiceAccess.log
I have entire log (7.5 MB) with me if it helps - logs from august till december showing everything what was goin' on. oh yes, because of this I have completely wiped out my HD with "write zeroes" in august because I was thinking my system was seriously corrupted. turned out nothing's changed with reinstalling. then I've started to "digg under the hood" to see if I can find something useful. at least to ask good people like you with a lot more experience with unix.
if you need more information I could create complete system overview tomorrow at work and send it to you. right now I can provide log for dec 8th and 9th if you think you can figure out something out of it. in PM perhaps?

Re: HELP! Files are being erased randomly!
bruces #13292 12/12/10 05:06 PM
Joined: Sep 2009
Offline

Joined: Sep 2009
Originally Posted By: bruces
log was found in Console. don't know the exact path right now, I'm writing this from my home Mac but I believe it's something like this: FILES/AppleFileService/AppleFileServiceAccess/AppleFileServiceAccess.log

Next chance you get —while viewing the log in Console.app —command-click on that "AppleFileServiceAccess.log" name in the window's titlebar. A popup menu will appear showing the full path... which will (probably) be either /private/var/log/something or /Library/Logs/something.

Interestingly enough, i don't find any files with the string "AppleFileServiceAccess" in their name on any of my client machines (some of which are acting as file servers).


Originally Posted By: bruces
now i have created password and turned off all of file sharing options and lat's see what happens next...

Well, if you had some sort of sharing turned on then that's pretty much par for the course. I don't suppose you recall which service(s) you needed to disable [?].


Originally Posted By: bruces
in PM perhaps?

Nope... we prefer to share solutions (and troubleshooting) around here.

Last edited by Hal Itosis; 12/12/10 05:09 PM.
Re: HELP! Files are being erased randomly!
Hal Itosis #13293 12/12/10 05:30 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
I don't have that log on my home Mac either. Checked two more Macs in office, one running on 10.6, other on 10.5 and none have that log. Only "printer sharing", "file sharing" and "CD/DVD sharing" were turned on.
I've asked for PM just because this log is loooooooooooooong! Anyway, here it is (remember, only oct 8th and 9th are here, no attachment option on this forum so complete log folder is on www.studioides.com/outgoing/AppleFileService.zip):

**** - - [08/Dec/2010:08:43:51 0100] "Mounted Volume 5M-04 system" 0 0 0
**** - - [08/Dec/2010:08:43:51 0100] "Mounted Volume 5M-04 afp" 1 0 0
**** - - [08/Dec/2010:08:43:51 0100] "DiskArbStart -" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "Login vinko" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork SystemVersion.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork .DS_Store" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork .DS_Store" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork DOLAZNE PRIPREME" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "OpenFork bruces.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:43:57 0100] "OpenFork .DS_Store" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:05 0100] "OpenFork cups-pdf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:05 0100] "OpenFork cups-pdf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:09 0100] "OpenFork .DS_Store" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:11 0100] "OpenFork .DS_Store" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:11 0100] "OpenFork cups-pdf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-net.teevio.widget.ColourMod.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-it.com.palple.widget.currencyconverter.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.orange.widgets.Sudoku.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.worldclock.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.W2ihT8E" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.u8W9MLg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.QrVufFN" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.cjjhz0t" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.ajvHf57" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist.0vzY3ZR" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.weather.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.unitconverter.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.translation.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.dictionary.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete widget-com.apple.widget.calendar.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete uk.co.markallan.clamxav.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete system.iUtils.prefs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete Subs Factory.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete Roxio Toast Prefs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete QuickTime Preferences" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete PreÃÅfeÃÅrences Subs Factory.xml" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete pbs.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.videolan.vlc.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.videolan.vlc.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete vlcrc" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.videolan.vlc" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.openoffice.script.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.openoffice.script.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:16 0100] "Delete org.m0k.transmission.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete org.m0k.transmission.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete net.sourceforge.audacity.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete MacScan Statistics.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #zadovoljna.hr" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.youtube.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.sweethome3d.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.maratonist.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.makeupforever.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.live365.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.limba.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.chordbook.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #www.adobe.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #tiff.net" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #static.wix.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #skype.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #s.ytimg.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #pfiles.5min.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #msnbcmedia.msn.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #media.mtvnservices.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #mail.google.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #listen.grooveshark.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #inplay.tubemogul.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #img.ultimate-guitar.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #ia.media-imdb.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #gallery.me.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #g-ecx.images-amazon.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #flickr.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #doug1izaerwt3.cloudfront.net" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #cdn-v5.biokoda.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete settings.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete images-na.ssl-images-amazon.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ##" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete sys" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flashplayer" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete support" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete macromedia.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete cookie.popplayer.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete zadovoljna.hr" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete videostats.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.youtube.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flowplayer-3.1.5.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flowplayer" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.sweethome3d.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.maratonist.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.live365.com.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.live365.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete evercookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete evercookie.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.limba.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete chordbook_ucache.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete chordbook_prefs.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.chordbook.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete s_br.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www.adobe.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flowplayer.commercial-3.2.3.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete templates" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete tiff.net" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete xJldqGDik4k-a_rulersCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete wixtestdata.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete WixComputerID.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ShoppingCart.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete rpodcdizW2o-a_rulersCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete publishConfirm.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete O1tKK3ID8AE-a_rulersCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete noPremiumBalloon.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete m5GsfwIQOUc-a_rulersCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete cookiesPerUser.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete colorPresetsCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete editorApp.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete app.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete client" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 91CMGaIdlXQ-a_rulersCookie.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete static.wix.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #ui" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete skype.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete videostats.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete soundData.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete s.ytimg.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete www#" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete SmartPlayer_146.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ionTracker_www.fretplay.com.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 5minSess#" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ExtLibViewsBusiness_146.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete modules" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete FlexPlayers" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete analytics.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete pfiles.5min.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete varo_varoDefault.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete s_br.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete playerV2.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete msnbcmedia.msn.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete userPrefs4.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete qcDemoVal.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete MetadataHistory.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete release" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete loaderLogging.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete loader" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete fps.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ffGUILogging.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete gui" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete player" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete media.mtvnservices.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete wakeup.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete mail.google.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete userLib.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete userAuth.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete lastQueue.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete gslite.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete main.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete userAuth.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete JSQueue.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete gsGlobal.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete listen.grooveshark.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete InPlayInfo.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete inplay.tubemogul.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete com.quantserve.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete acudeoSession.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete img.ultimate-guitar.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete mercury.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete images-na.ssl-images-amazon.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete IMDBTEST.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete ia.media-imdb.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete Gallery.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete uploader.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flash" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete g" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete gallery.me.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete AlbumSampler.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete Localized_Prod._V229814129_.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete AlbumSampler_#" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete swfs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete music" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete digital" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 02" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete apnUserId.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flash" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete uts" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete personalization" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete x-locale" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete AlbumSampler.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete Localized_Prod._V228929840_.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete AlbumSampler_#" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete swfs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete music" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete digital" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 01" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete G" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete images" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete g-ecx.images-amazon.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete slideShowMS.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete slideShow.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete slideShow" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete flickr.com" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete e1cba277956695ba2e6c6476ff0.sol" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 9b3ad2c8597e1#" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete doug1izaerwt3.cloudfront.net" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 64NFZD8P" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete #SharedObjects" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete Flash Player" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete Macromedia" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete loginwindow.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iSerial Reader Preferences.ini" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Windows" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Window Restore" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Registration" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Preferences3" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Logfile" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Kiosk" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Global History" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab FilterManager" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab DL-Manager" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete iCab Cookies" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B5.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000009B.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000081.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000067.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000004D.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000033.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000019.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete z" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B4.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000009A.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000080.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000066.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000004C.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000032.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000018.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete y" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B3.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000099.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007F.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000065.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000004B.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000031.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000017.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete x" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B2.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000098.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000064.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000004A" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000030" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000016.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete w" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B1.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000097.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007D.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000063.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000049.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002F.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000015.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete v" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000B0.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000096.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007C.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000062.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000048.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000014.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete u" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AF.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000095.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007B.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000061.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000047.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002D.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000013.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete t" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AE.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000094.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000007A.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000060.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000046.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002C.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000012.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete s" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AD.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000093.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000079.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000005F.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000045.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002B.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000011.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete r" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AC.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000092.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000078.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000005E.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000044.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000002A.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000010.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete q" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000C5.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AB.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000091.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000077.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000005D.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000043.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000029.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 0000000F.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete p" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000C4.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 000000AA.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000090.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:17 0100] "Delete 00000076.jpg" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000005C.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000042.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000028.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000000E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete o" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000C3.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A9.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008F.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000075.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000005B.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000041.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000027.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000000D.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete n" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000C2.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A8.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008E.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000074.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000005A.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000040.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000026.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000000C.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete m" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000C1.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A7.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008D" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000073.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000059.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003F.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000025.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000000B.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete l" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000C0.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A6.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008C.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000072.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000058.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000024.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000000A.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete k" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BF" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A5.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008B.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000071.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000057.jsp" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003D.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000023.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000009.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete j" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete iCab Cache 2" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BE.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A4.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000008A.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000070.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000056" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003C.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000022.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000008.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete i" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BD" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A3.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000089.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006F.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000055.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003B.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000021.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000007.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete h" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BC.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A2.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000088" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006E.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000054" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000003A.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000020.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000006.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete g" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BB" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A1.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000087.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006D.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000053.swf" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000039.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001F.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000005.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete f" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000BA.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000A0.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000086.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006C" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000052.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000038.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000004" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete e" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000B9.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000009F.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000085.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006B" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000051.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000037.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001D.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000003.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete d" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000B8.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000009E.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000084.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000006A" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000050" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000036.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001C.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000002.ico" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete c" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000B7.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000009D.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000083.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000069.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000004F.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000035.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001B.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000001" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete b" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 000000B6.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000009C.css" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000082.php" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000068.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000004E.gif" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 00000034.js" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete 0000001A.png" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete a" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete iCab Cache" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete Hotlist3.html" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete iCab Preferences" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete Eye-One Match" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.xilisoft.video-converter-ultimate.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.titanium.OnyX.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.securemac.MacScan.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.roxio.Toast.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.prosofteng.DRRegistration.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.prosofteng.DRBackend.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.omnigroup.OmniDiskSweeper.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.mrrsoftware.NameChanger.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.microsoft.rdc.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.microsoft.rdc.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.microsoft.error_reporting.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.microsoft.autoupdate2.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.macromedia.freehand.11.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.linotype.FontExplorerX.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.google.Keystone.Agent.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.google.GoogleEarthPlus.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.google.GECommonSettings.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.GoGoalSoft.goSecure.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.freemacsoft.AppCleaner.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.fontlab.licenses.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.fontlab.fontlab5.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.elgato.VideoPlayer.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.divx.divxprefs.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.avast.MacAvast.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.artwork-systems.ArtView.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.artwork-systems.ArtPrinter.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.WebKit.PluginHost.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.universalaccess.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.typographypanel.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.TextEdit.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.TextEdit.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Terminal.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.systemuiserver.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.systemsound.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.SystemProfiler.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.systempreferences.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.symbolichotkeys.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.spotlight.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.soundpref.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.SoftwareUpdate.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.sidebarlists.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.screencapture.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Safari.RSS.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Safari.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.recentitems.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.QuickTimePlayerX.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.quicktime.plugin.preferences.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.QuickLookDaemon.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.PubSubAgent.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.print.PrintingPrefs.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.print.PrinterProxy.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.print.custompresets.forprinter.CUPS_PDF.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.print.custompapers.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.print.add.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Preview.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Preview.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.Preview.bookmarks.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.PreferenceSync.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.preference.desktopscreeneffect.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.NetworkUtility.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.NetAuthAgent.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.menuextra.clock.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.MassStorageCamera.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:18 0100] "Delete com.apple.mail.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.loginitems.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.LaunchServices.QuarantineEvents" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.LaunchServices.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.keychainaccess.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.java.security.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.java.JavaPreferences.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iWeb.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunesHelper.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.Gracenote.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.eq.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iPhoto.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iPhoto.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.internetconfigpriv.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iCal.helper.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iApps.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.helpviewer.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.help.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.garageband.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.garageband.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.garageband.cs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.frameworks.diskimages.uiagent.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.frameworks.diskimages.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.finder.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.DVDPlayer.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.driver.AppleBluetoothMultitouch.trackpad.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.dock.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.dock.db" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.DiskUtility.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.diskimages.fsck" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.digihub.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.desktop.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.dashboard.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.dashboard.client.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.Console.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.Console.LSSharedFileList.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.BluetoothFileExchange.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.BezelServices.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.archiveutility.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.AppleShareClient.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.AddressBook.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.AddressBook.abd.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.Photoshop.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.mediabrowser.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.InDesign.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.illustrator.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.distiller9.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.CSXSPreferences.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.crashreporter.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.ARM.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.AdobeOnlineHelp.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.Acrobat.Pro_x86_9.0.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.Acrobat.Pro.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.acrobat.90.sh.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.327.en_GB.registration" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete ch.sudo.cyberduck.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CDFinder.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CDFinder QuickLaunch Cache" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CDFinder Preferences" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CD Remote Programs Plus" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CD Remote Programs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete CD Info.cidb" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.systemuiserver.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.systempreferences.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.SubmitDiagInfo.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.SoftwareUpdate.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.screensaver.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.scheduler.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.print.Cache.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.MIDI.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.mail.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iWeb.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.ykbifbN" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.XNtGce8" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.vUqGYky" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.U1S9BzB" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.T9xmDXE" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.rGgW3dZ" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.nLIgGFc" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.mHpJDLv" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.m5WsIFo" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.KO9WAvG" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.Ioa3RFT" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.eb0HV8F" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.ClavdeG" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.AACF1OF" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist.6TGVmL0" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iTunes.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.ImageCaptureExtension2.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.ImageCapture2.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.iCal.helper.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.HIToolbox.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.Bluetooth.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.airport.agent.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.apple.AddressBook.sync.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete com.adobe.headlights.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete .GlobalPreferences.2DD70136-6137-565D-8FB8-5045C2CA0FCE.plist" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete ByHost" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete JobSizes" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete ArtView 8.1 Preferences" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete ArtPro Recent Files" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete ArtPrinter 8.1 Preferences" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete Artpro" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete Adobe Save For Web AI 14.0 Prefs" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete MyWorkspace" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete WorkSpaces" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete Swatches.psp" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete PluginCache.psp" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete New Doc Sizes.psp" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete LaunchEndFlag.psp" 0 0 0
IP 192.168.0.101 - - [08/Dec/2010:08:44:19 0100] "Delete Gradients.psp" 0 0 0
IP 192.168.0.101 - - [08/D

Re: HELP! Files are being erased randomly!
bruces #13295 12/12/10 05:34 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
Guess it's too big for message frame. Anyway, there's a link for entire log in previous post so you can download it from there.

Re: HELP! Files are being erased randomly!
Hal Itosis #13298 12/12/10 10:11 PM
Joined: Aug 2009
Offline

Joined: Aug 2009
Originally Posted By: Hal Itosis
Interestingly enough, i don't find any files with the string "AppleFileServiceAccess" in their name on any of my client machines (some of which are acting as file servers).

I have /Library/Logs/AppleFileService/AppleFileServiceError.log on my machine. Its entire content consists of:
Code:
!!Log File Created On: 6/8/2006 20:37:19 158:4:1 GMT
20/Jun/2006:19:06:53 -0800: Server shut down.
20/Jun/2006:19:09:10 -0800: Server shut down.
06/Oct/2009:21:57:25 -0800: Server shut down.
06/Oct/2009:22:25:52 -0800: Server shut down.
01/Dec/2009:12:35:13 -0800: Server shut down.
22/Jan/2010:03:38:48 -0800: Server shut down.
25/Jan/2010:13:44:42 -0800: Server shut down.
14/Feb/2010:19:35:39 -0800: Server shut down.
10/Mar/2010:13:29:36 -0800: Server shut down.
07/Apr/2010:15:05:16 -0800: Server shut down.
24/Apr/2010:19:44:47 -0800: Server shut down.
19/May/2010:12:09:51 -0800: Server shut down.
21/May/2010:09:51:04 -0800: Server shut down.
13/Jul/2010:19:49:15 -0800: Server shut down.
01/Aug/2010:16:11:04 -0800: Server shut down.
30/Nov/2010:11:21:01 -0800: Server shut down.
30/Nov/2010:12:00:19 -0800: Server shut down.
12/Dec/2010:14:28:10 -0800: Server shut down.

The file creation date corresponds roughly with the purchase date of the machine, at which time it was running 10.4.6. The last line was added today, (now running 10.6.5) after logging on (using AFP file sharing) from another machine to see what would be logged. From the other machine I duplicated a file, deleted a file, and deleted a folder containing several files. The only log message from the session came when I unmounted the shared volume.

Apparently I don't use AFP a lot, at least not in that direction. I usually copy files using scp, or AFP in the other direction.

I wonder if the OP has changed the log level, so that it's saving debugging messages that would normally be discarded. It might be interesting to see the output from
Code:
cat /etc/syslog.conf


That's the first half of the puzzle: why are these messages being logged?
The second half is: what do they mean?

I think the answer to that is pretty obvious. Someone else in the office has used Apple File Sharing to mount the user's volume (or a shared folder on it), with sufficient privilege to delete files from it, and did so.

To keep them from doing it again, take away their privilege to do so. At the least, change passwords. A talk with the boss might be in order, too.

Re: HELP! Files are being erased randomly!
ganbustein #13299 12/12/10 10:53 PM
Joined: Sep 2009
Offline

Joined: Sep 2009
Originally Posted By: ganbustein
I think the answer to that is pretty obvious. Someone else in the office has used Apple File Sharing to mount the user's volume (or a shared folder on it), with sufficient privilege to delete files from it, and did so.

Odd how almost 90% of what's being deleted is related to a pref... and many of those seem related to networking or browsing (such as a ton of Flash cookie items). Also noteworthy are the times involved. There is a login at 08:43:52 and by 08:44:19 (i.e., 27 seconds later) hundreds of deletions are logged. Not exactly some user casually poking around, but more like some sort of automated cleanup program gone wild.


Originally Posted By: ganbustein
To keep them from doing it again, take away their privilege to do so. At the least, change passwords. A talk with the boss might be in order, too.

In that endeavor, this line might be useful:
IP 192.168.0.101 - - [08/Dec/2010:08:43:52 0100] "Login vinko" 0 0 0


BTW, we seem to have spawned a sister:
http://discussions.apple.com/thread.jspa?threadID=2678017

[or actually, we seem to be the spawn. wink ]

Re: HELP! Files are being erased randomly!
Hal Itosis #13300 12/13/10 06:30 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
@hal
@ganbustein

here's complete path:

System/Library/Logs/AppleFileService/AppleFileServiceAccess.log

haven't found similar log on other computers. I have spoked with my boss and we've agreed to wait for a couple of days before taking any further steps. now the password's been set and we know what to watch, it's a good beginning I guess.
I haven't installed any third-party maintenance software until recently so I don't believe I or anything on my computer have caused this. and if it's one of "his" programs, how come it mounts only my Mac and not the rest of the office?

no, we are not a spawn, more like a clone grin I've asked about this on couple of forums and only here we've gone this far! congrats to all!

I'm not sure but it seems like I'm alone today in the office, maybe I could do some research on suspected machine but don't know exactly what to look for. let's wait for awhile to be sure he won't come after all.

Re: HELP! Files are being erased randomly!
bruces #13304 12/13/10 11:26 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
nope. not alone today.

Re: HELP! Files are being erased randomly!
bruces #13314 12/14/10 08:26 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
still no new "breaking and entry". seems like password was helpful so far. but I still won't "call a round on me" yet! at least for awhile. just to be sure.
have a nice day everyone and thank you once again!

Re: HELP! Files are being erased randomly!
bruces #13320 12/15/10 01:36 AM
Joined: Aug 2009
Offline

Joined: Aug 2009
Originally Posted By: bruces
here's complete path:

System/Library/Logs/AppleFileService/AppleFileServiceAccess.log

Are you sure? /System is an odd place for logs.

On my system, it's
/Library/Logs/AppleFileService/AppleFileServiceError.log

But then, I suppose /etc/syslog.conf could have been edited to log detailed AFP information to anywhere.

The access doesn't need to be malicious. It could be as simple as a co-worker who has your disk mounted on his machine using File Sharing, and then trying to delete some of his own preference files but getting the folders confused and accidentally deleting yours instead.

Re: HELP! Files are being erased randomly!
ganbustein #13321 12/15/10 06:28 AM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
that's the path where specific log really is (when you command-click on log's name in console that's exactly what you get).
in console itself is slightly different and it goes like this:
FILES/Library/Logs/AppleFileService/AppleFileServiceAccess.log

I'm not accusing anyone for this. might be an accident, might be not. I really don't know but it happened too many times and I just want it to stop. and to make it happend I've got to find out what/who is causing this. the answer on "why" will come along.

Re: HELP! Files are being erased randomly!
bruces #13344 12/16/10 01:05 PM
Joined: Dec 2010
bruces Offline OP
OP Offline

Joined: Dec 2010
seems like there was an intruder after all. setting up password stopped him so far. let's say this thread is solved. thank's everyone for helping me deal with this and best regards!
p.s. hope I won't be back with same BS again!

Re: HELP! Files are being erased randomly!
bruces #13357 12/17/10 02:17 PM
Joined: Aug 2009
Likes: 5
Moderator
Offline
Moderator

Joined: Aug 2009
Likes: 5
Thanks for "closing the loop" with us on your issue. You are welcome to come back any time (we'll help you decide if BS is what you bring)...... blush grin

Perhaps you might pop into our Lounge thread and you can tell us a bit about how you are using the Macintosh in your business there?

I might suggest you do a little research on Google to follow-up with some of the lessons that you've discovered as a result of this issue.....perhaps one such as This Link....that could possibly open a fresh topic for discussion.


Freedom is never free....thank a Service member today.

Moderated by  alternaut, dkmarsh, joemikeb 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.4.33 Page Time: 0.040s Queries: 60 (0.026s) Memory: 0.7655 MB (Peak: 0.9999 MB) Data Comp: Zlib Server Time: 2024-03-28 13:36:29 UTC
Valid HTML 5 and Valid CSS