You may find this interesting

[Lerster]

This is something my isp hid in my program files, how they managed to get it in there not sure as i didn't use any of their install cds.

Eitherway i believe this is what monitored emule and got a complaint filed against me for dling and viewing a film that was in the theatres.

First one is file: Browser.js

/**************************************************************
 *
 *  Copyright (c) 2006 Motive, Inc.
 *  All Rights Reserved. 
 *  Author: Keshu
 **************************************************************/
//function to change IE settings
function ChangeIESecuritySettings()
{
    
    var oMcciAppsIESecuritySetting = new ActiveXObject("McciAppsX.IESecuritySetting");
 var oMcciAppsIESecuritySettingValue = new ActiveXObject("McciAppsX.IESecuritySettingValue");
 var oMcciAppsIESecurityZone = new ActiveXObject("McciAppsX.IESecurityZone");
 var oMcciAppsWBCH = new ActiveXObject("McciAppsX.WebBrowserConfigHelper");
 //Enable Activex run
  
 var zone =  oMcciAppsIESecurityZone.INTERNET;
 var settings = oMcciAppsIESecuritySetting.ACTIVEX_RUN;
 var value = oMcciAppsIESecuritySettingValue.ENABLE;
 oMcciAppsWBCH.SetIESecurityOption(zone, settings, value);
 
 //Enable ActiveX Script safe
 settings = oMcciAppsIESecuritySetting.ACTIVEX_SCRIPT_SAFE;
 oMcciAppsWBCH.SetIESecurityOption(zone, settings, value);
 //Enable Active Scripting 
 settings = oMcciAppsIESecuritySetting.SCRIPTING_ACTIVE_SCRIPTING;
 oMcciAppsWBCH.SetIESecurityOption(zone, settings, value);
 
}
//function to get IE browser exe path
function GetIEBrowserExePath()
{
    var oMcciUtilsIEVersion = new ActiveXObject("McciUtils.McciUtilsIEVersion");
 return oMcciUtilsIEVersion.BrowserExePath;
}
//shut down current browser
function ShutDownCurrentBrowser()
{
    var oMcciSysBrowser = new ActiveXObject("McciSys.McciSysBrowser");
 oMcciSysBrowser.ShutdownCurrentBrowser();
}

Second one is: ReportAgent.js

/**************************************************************
 *
 *  Copyright (c) 2004 Motive, Inc.
 *  All Rights Reserved. 
 *  Author: Keshu
 **************************************************************/
var g_addRemoveDisplayName = "TELUS Merlin Report Agent";
var g_waitAfterRebootInMin = 10; //default value in minutes
var g_webFlowURL = "";
var g_maxTry = 10; //default value
var g_AppId = "TELUS";

//ReportAgent object functions
 
//function to retrieve webflow url from registry
ReportAgent.prototype.GetReportAgentWebFlowURL = function()
{
    try
    {
        var value = g_webFlowURL;
        if ( this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WEBFLOWURL_REG_NAME) )
        {
             value = this.m_pUtilsRegistry.GetStringValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WEBFLOWURL_REG_NAME);
        }                 
        return value;
     }
     catch (oErr)
     {
        McciBase_LogError("ReportAgent::GetReportAgentWebFlowURL() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);         
     }      
}
//function to retrieve Report Agent Maximum allowed try from registry
ReportAgent.prototype.GetReportAgentMaxTry = function()
{
    try
    {
        var value = g_maxTry
        if ( this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.MAXTRY_REG_NAME) )
        {
            value = this.m_pUtilsRegistry.GetDWORDValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.MAXTRY_REG_NAME);
        }           
        return value;
     }
     catch (oErr)
     {
        McciBase_LogError("ReportAgent::GetReportAgentMaxTry() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
     }      
}
//function to increment report counter and return incremented counter value
ReportAgent.prototype.IncrementReportCounter = function()
{
    try
    {
        var value = 0;
        if (this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.COUNTER_REG_NAME))
        {
            value = this.m_pUtilsRegistry.GetDWORDValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.COUNTER_REG_NAME);
        }       
      
        value++; //increment counter by 1
        this.m_pUtilsRegistry.SetDWORDValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.COUNTER_REG_NAME, value);
        
        return value;
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::IncrementReportCounter() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }
}
//function to retrieve Wait After Reboot interval time from registry
ReportAgent.prototype.GetWaitAfterRebootInterval = function()
{
    try
    {
        var value = g_waitAfterRebootInMin;
        if (this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WAIT_AFTER_REBOOT_IN_MIN_REG_NAME))
        {
            value = this.m_pUtilsRegistry.GetDWORDValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WAIT_AFTER_REBOOT_IN_MIN_REG_NAME)
        }
        return value;
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::GetWaitAfterRebootInterval() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }                       
}
//function to write run key in registry
ReportAgent.prototype.WriteRunKey = function()
{
    try
    { 
        var mcciBrowserPath = this.m_pSysModuleInfo.GetModuleFileNameString();     
        
     var localUrlPath = location.href;
     if(parent) //if running under logic frame
     {
      localUrlPath = parent.location.href;
     }     
     
        var runKeyString = "\"" + mcciBrowserPath + "\"" + " ";
        runKeyString += "-appkey=" + this.AppId + " ";
        runKeyString += "-hidden" + " "; 
        runKeyString += "-url=" + localUrlPath;
        
        McciBase_LogDebug("ReportAgent::WriteRunKey() - RunKey = [" + runKeyString + "]");
          
        this.m_pUtilsRegistry.SetStringValue(this.HKeyHive, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", this.REPORTAGENT_RUNKEY_NAME, runKeyString); 
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::WriteRunKey() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }     
}
 
//function to set up Add/Remove Program entry 
ReportAgent.prototype.SetupAddRemoveProgramKey = function()
{
    try
    { 
        var mcciBrowserPath = this.m_pSysModuleInfo.GetModuleFileNameString();     
        var localUrlPath = this.m_pUtilsSpecialFolder.GetProgramFilesDir() + this.AppId + "\\" + this.REPORTAGENT_REMOVE_FILE;    
     
        var runKeyString = "\"" + mcciBrowserPath + "\"" + " ";
        runKeyString += "-appkey=" + this.AppId + " ";
        runKeyString += "-hidden"; 
        runKeyString += "-url=file:///" + localUrlPath;
     
        if ( this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.ADD_REMOVE_DISPLAYNAME_REG_NAME) )
        {     
         g_addRemoveDisplayName = this.m_pUtilsRegistry.GetStringValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.ADD_REMOVE_DISPLAYNAME_REG_NAME);
     }
      
        var reportAgentUninstallKey = "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\UnInstall\\" + this.REPORTAGENT_UNINSTALL_KEY_NAME;    
     
        this.m_pUtilsRegistry.SetStringValue(this.HKeyHive, reportAgentUninstallKey, "DisplayName", g_addRemoveDisplayName);
        this.m_pUtilsRegistry.SetStringValue(this.HKeyHive, reportAgentUninstallKey, "UninstallString", runKeyString);
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::SetupAddRemoveProgramKey() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }     
}
 
//function to clean up Report Agent 
ReportAgent.prototype.ReportAgentCleanup = function()
{
    try
    { 
        //disable report agent, delete run key
        this.m_pUtilsRegistry.DeleteValue(this.HKeyHive, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run",this.REPORTAGENT_RUNKEY_NAME);
     
        //also delete other Report agent keys
        this.m_pUtilsRegistry.DeleteKey(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION);
     
        //remove add/remove program entry
        this.m_pUtilsRegistry.DeleteKey(this.HKeyHive, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\" + this.REPORTAGENT_UNINSTALL_KEY_NAME);
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::ReportAgentCleanup() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }
 
}
//function to set Report Agent WebFlowLaunch key
ReportAgent.prototype.CreateWebFlowLaunchKey = function()
{
    try
    {
        this.m_pUtilsRegistry.SetStringValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WEBFLOW_LAUNCH_REG_NAME, "fail");
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::CreateWebFlowLaunchKey() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }
}
//function to check WebFlowLaunch key
ReportAgent.prototype.CheckWebFlowLaunchKey = function()
{
    try
    {
        return this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.WEBFLOW_LAUNCH_REG_NAME);
    }
    catch (oErr)
    {
        McciBase_LogError("ReportAgent::CheckWebFlowLaunchKey() - exception [" + oErr.description + "]");
        McciBase_LogException(oErr);
        McciBase_ReThrowException(oErr);
    }
}
//Report agent constructor
function ReportAgent()
{    
    this.REPORTAGENT_REGISTRY_LOCATION = "Software\\Motive\\ReportAgent";
    this.APPID_REG_NAME = "AppId";
    this.WEBFLOWURL_REG_NAME = "WebFlowURL";
    this.MAXTRY_REG_NAME = "MaxTry";
    this.WAIT_AFTER_REBOOT_IN_MIN_REG_NAME = "WaitAfterRebootInMin";
    this.ADD_REMOVE_DISPLAYNAME_REG_NAME = "AddRemoveDisplayName";
    this.COUNTER_REG_NAME = "Counter";
    this.WEBFLOW_LAUNCH_REG_NAME = "WebFlowLaunch";
    
    this.REPORTAGENT_RUNKEY_NAME = "MerlinReportAgent";
    this.REPORTAGENT_UNINSTALL_KEY_NAME = "MerlinReportAgent";
      
    this.REPORTAGENT_REMOVE_FILE = "ReportAgent_Remove.html";  
        
    this.m_pUtilsPlatform2 = new ActiveXObject("McciUtils.McciUtilsPlatform2");
    this.m_pUtilsRegistry = new ActiveXObject("McciUtils.McciUtilsRegistry");
    this.m_pUtilsSpecialFolder = new ActiveXObject("McciUtils.McciUtilsSpecialFolder");
    this.m_pSysModuleInfo = new ActiveXObject("McciSys.McciSysModuleInfo");
    
    this.HKeyHive = this.m_pUtilsRegistry.HKEY_LOCAL_MACHINE;
    this.AppId = g_AppId;
    
    this.Initialize = function()
    {                 
        if (this.m_pUtilsPlatform2.IsWinVistaOrLaterFamily)
        {
            //In case of Vista and plus, store registry keys under HKEY_CURRENT_USER
            this.HKeyHive = this.m_pUtilsRegistry.HKEY_CURRENT_USER;
        }
        
        if ( this.m_pUtilsRegistry.DoesValueExist(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.APPID_REG_NAME) )
        {     
   this.AppId = this.m_pUtilsRegistry.GetStringValue(this.HKeyHive, this.REPORTAGENT_REGISTRY_LOCATION, this.APPID_REG_NAME);
     }
    }
    
    this.Initialize(); 
}

I don't know if any of you know Javascript or not.

Anyways, it pisses me off that for dling a musical theatrical drama, i got a complaint filed against me. -_-

[Solecord]

Where was it in your program files? What specific folder (full path)?

[foq]

What ISP?

[Lerster]

It was in program files and if your blind it was the isp "TELUS" and it was also in a folder called TELUS as TELUS is my ISP.

BTW, you could also do a file search with these specific filenames .js extentions in windows to find em anywhere anyways.

[omix2]

That's a privacy lawsuit waiting to happen. And they reported you to save themselves on bandwidth, because its expensive.

[spooker]

welcome to nazi germany. next stop the police state and genocide.
^jk, making fun of ppl who think like this

but seriously, that's stinky

[Fuzznut]

thats another reason why you shouldnt use IE

[R00k]

Is it possible you opened an email from your ISP, and possibly installed something of theirs over then net..? I also use FIREFOX