Total Commander

[Ciber SLasH]

Нет, ничего кроме AV не было...
На счёт реферера не знаю, вот логи Proxomitron'a, может помогут:

Client opened: total 1

+++GET 254+++
POST /comment.php HTTP/1.1
User-Agent: Opera/8.50 (; U; ru)
Host: wincmd.ru
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: ru,en;q=0.9
Accept-Charset: windows-1251, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1
XXXXXXXXXXXXXXX: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Referer: http://wincmd.ru/comment.php
TE: deflate, gzip, chunked, identity, trailers
Content-Type: application/x-www-form-urlencoded
Content-Length: 115
Connection: keep-alive
Accept-encoding: gzip, deflate
Posting 115 bytes...
name=Ciber+SLasH
email=
comments=%D2%E5%F1%F2...
id=imagine
filename=Imagine
version=Version+0.9.0.0
category=files

+++RESP 254+++
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2005 14:09:52 GMT
Server: Apache
X-Powered-By: PHP/4.4.0
Set-Cookie: username=Ciber+SLasH; expires=Thursday, 16-Feb-06 14:09:52 GMT
Set-Cookie: email=deleted; expires=Thursday, 18-Nov-04 14:09:51 GMT
Set-Cookie: hp=deleted; expires=Thursday, 18-Nov-04 14:09:51 GMT
Content-Type: text/html
Content-Encoding: gzip
Content-Length: 406
Connection stored: 254
+++CLOSE 254+++
Client Connection Reused: 1

+++GET 255+++
GET /comment.php HTTP/1.1
User-Agent: Opera/8.50 (; U; ru)
Host: wincmd.ru
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: ru,en;q=0.9
Accept-Charset: windows-1251, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1
XXXXXXXXXXXXXXX: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Referer: http://wincmd.ru/comment.php
XXXXXX: XXXXXXXXXXXXXXXXXXXX
XXXXXXX: XXXXXXXXXX
Cache-Control: no-cache
TE: deflate, gzip, chunked, identity, trailers
Connection: keep-alive
Accept-encoding: gzip, deflate
Browser reload detected...
Connection Reused: 254->255

+++RESP 255+++
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2005 14:09:53 GMT
Server: Apache
X-Powered-By: PHP/4.4.0
Transfer-Encoding: chunked
Content-Type: text/html
Connection stored: 255
+++CLOSE 255+++
Client Connection Reused: 2

+++GET 256+++
GET /favicon.ico HTTP/1.1
User-Agent: Opera/8.50 (; U; ru)
Host: wincmd.ru
Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1
Accept-Language: ru,en;q=0.9
Accept-Charset: windows-1251, utf-8, utf-16, iso-8859-1;q=0.6, *;q=0.1
XXXXXXXXXXXXXXX: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Referer: http://wincmd.ru/favicon.ico
If-Modified-Since: Mon, 22 Dec 2003 21:11:25 GMT
If-None-Match: "7d4364-13e-3fe75dfd"
TE: deflate, gzip, chunked, identity, trailers
Connection: keep-alive
Accept-encoding: gzip, deflate
Connection Reused: 255->256

+++RESP 256+++
HTTP/1.1 304 Not Modified
Date: Fri, 18 Nov 2005 14:09:54 GMT
Server: Apache
ETag: "7d4364-13e-3fe75dfd"
Connection stored: 256
+++CLOSE 256+++
Client Connection Reused: 3
Client closed: total 0
Connection Time-Out: 256