http://www.spywareinfo.com/~merijn/cwschronicles.html
The log refernce is from the log you get when you run the hijackthis program
http://mjc1.com/mirror/hjt/