Seems to be acting the same
ogfile of HijackThis v1.99.1
Scan saved at 6:25:27 PM, on 09/11/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\PROGRAM FILES\MOTIVE\MOTMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\ALIANT\NET ASSISTANT\BIN\MPBTN.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\WINDOWS\SYSTEM\LEXPPS.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\ALIANT\HIGH-SPEED CONNECTION\APP\ENTERNET.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\DESKTOP\DOWNLOADED STUFF\VSCAN\HIJACKTHIS\HIJACKTHIS\HIJACKTHIS\HIJACKTHIS.EXE
C:\WINDOWS\NOTEPAD.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.canoe.ca/CanoeClassic/home.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YCOMP.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YCOMP.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Delay] C:\WINDOWS\delayrun.exe
O4 - HKLM\..\Run: [MotiveMonitor] C:\Program Files\Motive\motmon.exe
O4 - HKLM\..\Run: [LexStart] Lexstart.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ALIANT\NETASS~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - Startup: Net Assistant.lnk = C:\Program Files\Aliant\Net Assistant\bin\matcli.exe
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra button: ICQ 4.0 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…StatsClient.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: Yahoo! Freecell Solitaire -
http://yog55.games.scd.yahoo.com/yog/y/fs10_x.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409
O16 - DPF: TruePass EPF 7,0,100,684 -
https://blrscr3.egs-seg.gc.ca/applets/entru…sapplet-epf.cab
O16 - DPF: Yahoo! Klondike Solitaire -
http://presence.games.yahoo.com/yog/y/ks12_x.cab
O16 - DPF: Yahoo! Pyramids -
http://download.games.yahoo.com/games/clients/y/pyt1_x.cab
O16 - DPF: Tornado 21 -
http://download.games.yahoo.com/games/clients/y/t21t0_x.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://appldnld.m7z.net/qtinstall.info.app…llInstaller.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://download.games.yahoo.com/games/popc…aploader_v6.cab
O16 - DPF: {CA797B15-445F-4AA9-9828-8A88502F560F} (Uninstall Control) - http://www.worldwinner.com/games/shared/uninstall.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {E0FEE963-BB53-4215-81AD-B28C77384644} (WebBrowserType Class) -
http://nsprdnacw-vip.aliant.net/motivedocs…aller_4-0-0.cab
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) -
http://h20270.www2.hp.com/ediags/gmn/insta…staller_gmn.cab
5:22 PM: | Start of Session, November 9, 2005 |
5:22 PM: Spy Sweeper started
5:22 PM: Sweep initiated using definitions version 569
5:22 PM: Starting Memory Sweep
5:31 PM: Memory Sweep Complete, Elapsed Time: 00:08:43
5:31 PM: Starting Registry Sweep
5:33 PM: Found Adware: searchexe
5:33 PM: HKLM\software\microsoft\windows\currentversion\uninstall\ie help\ (1 subtraces) (ID = 140920)
5:34 PM: Found Adware: sidesearch
5:34 PM: HKU\.DEFAULT\software\microsoft\internet explorer\extensions\cmdmapping\ || {000007c6-17df-4438-92a4-de5537471ba3} (ID = 530423)
5:34 PM: Registry Sweep Complete, Elapsed Time:00:03:28
5:34 PM: Starting Cookie Sweep
5:34 PM: Found Spy Cookie: belnk cookie
5:34 PM: mcinnis@belnk[1].txt (ID = 2292)
5:34 PM: [removed][2].txt (ID = 2293)
5:34 PM: Found Spy Cookie: adknowledge cookie
5:34 PM: mcinnis@adknowledge[2].txt (ID = 2072)
5:34 PM: Found Spy Cookie: atwola cookie
5:34 PM: mcinnis@atwola[1].txt (ID = 2255)
5:34 PM: Found Spy Cookie: banner cookie
5:34 PM: mcinnis@banner[1].txt (ID = 2276)
5:34 PM: Found Spy Cookie: yieldmanager cookie
5:34 PM: [removed][2].txt (ID = 3751)
5:34 PM: Cookie Sweep Complete, Elapsed Time: 00:00:02
5:34 PM: Starting File Sweep
5:34 PM: Found Adware: kudd.com adware
5:34 PM: dressturkey.exe (ID = 65423)
5:35 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdcdb16ac-4078-4d8f-a697-a945b0737da7.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs03842d07-f720-45c9-82a1-e2eb1158c9ab.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs57d2bcbd-db09-4591-8432-813657d9475f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse3da3903-7dbe-48d3-9980-07c51b9c2d50.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsacb44580-73c5-45be-9f8d-0895ec6c8cf6.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11074664-41d4-4384-a7cb-e0e20c193da3.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfc7cad1d-36ac-40b2-9325-b9dff38175fd.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6bb63294-a1e9-45db-bab0-0b5bf4d6836f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdae6b8b2-fafe-4431-9951-eeed4e9d0f59.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb69178aa-42d2-42b9-916e-ef32b52bab15.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa82a7833-52c8-42f6-b9d2-8518e0f2e506.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef7b1722-922d-4afc-84fd-09ce18a4131e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs32345f7a-dece-46f2-8b1b-5313258f9c85.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9f101f90-d49c-4657-ad9d-8327f71b684b.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cf13e40-a047-4582-a83f-986e60464a87.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa28d3133-4c48-4b20-8799-c5932115c7e6.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1a04eadc-da0c-4a63-b37d-2679ab441126.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8d1da0eb-f4b0-4b56-9658-c90d83ce2c43.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs537c5f86-7f32-4612-9cbd-404ce8ac1062.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc92bac7a-6165-4e55-bd3a-37d397f9f301.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2759733c-acbc-4942-9f9d-34548d3f487e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs981722d2-e514-4565-8d61-918fe78ce533.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbb144c2a-4fc3-4bc9-b3e5-d28a140960b2.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfb1225ef-c0fd-4152-8277-3b057e743c43.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1e6ae752-d16f-400a-9f9a-f851ba53dbae.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf464c6a5-dc7e-4982-837f-ac093c3b23d9.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs02f2edac-073e-4d28-9a39-d2b0d4410bbc.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5af8f24b-cb89-405d-a5e2-19adb109c64e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd8ef2d7a-d94f-4223-b24e-3db8bf1f245a.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4b642b2a-9904-4c63-bc42-2fb295f1a80c.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0dcb8730-b92d-43d6-b155-64952c9c919c.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs88494562-39e5-49a7-849e-9ddfdd9552f2.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd9b85229-f678-42da-ba59-757fd66cc2c8.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs52122b17-a197-43ba-ac62-a77133e38f2d.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsba77a322-af48-44bd-b934-6c9607250342.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd99e3741-6ac5-4c5e-b448-f154f1e91fe4.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfebe8357-7814-49e6-ba2d-7f23b6b2bfed.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd8ac1d81-8e4c-4f07-8de2-62e27d75e9d5.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse8875ed4-cd88-487e-bd07-90fe52aa07f7.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs386ed3de-a3b1-4eb9-9005-3b4278e5450a.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb57740cd-318f-4bc8-9f37-c9bd97fd98b9.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb9fb549c-62e1-44d4-993f-70729ca7b86f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9ee88f25-73ae-4f13-a178-df18358eb4d9.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsca0be024-0f3f-49f0-9a93-2a2c4488e37e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseac1f16a-2e75-4c9c-872c-b7c671f34321.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1350e670-0327-4f41-8245-bffe4d006769.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs81c2d59d-151c-4a65-b82a-5941412f138e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfb90511b-7156-4fa1-904a-44bf45457285.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs44ad67c3-93c5-4a3c-be4f-1afd26f9bb1f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf38c5e8e-c331-4172-9930-89e0234e9597.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsad65987f-0153-4918-8bb5-ca8bd9ec343e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs16dae630-36d1-4b11-a08b-bb59a2ef3979.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscffe2963-9df3-4259-8669-87f7d6b4a5e7.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsec467d24-879f-45c9-b339-87ebdffb665b.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3b612e8e-fd7d-4655-b036-79e53eb1527c.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfbfeb4cc-3902-44f4-8d62-94d866ae3913.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs35944ba4-004f-4be6-9356-84e848d612f8.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf95132fc-53a2-4539-8d44-9792c04c5f16.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa0070126-119b-4f3a-b8aa-2f2c86ec5c6c.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse7689233-4ebc-42a3-ab74-449ba8c240e4.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs828713dd-f333-4807-9826-de686e1124ee.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc02a8c16-0f39-430b-9db3-2c66e6bc0479.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2640ace8-1d98-4982-8c69-f3ab02ca5d8f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5b00d1c7-c400-4209-ac4b-7d024456071b.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc068230f-39c5-408b-8ed5-f7d374f05c57.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs93be720c-4370-4cd8-96ce-fee57ac88cc2.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs421bd483-685e-4739-b458-a9fba45edb7a.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf7a2a030-1b64-420a-897b-08d19ddcaef5.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfa594ee4-2768-44a7-aef1-2d29d0a6a54e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc33f7c1b-d12e-4597-9976-59b7f4fd8b93.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs24f7c5aa-71ac-49d9-bd0a-9391bffd4d62.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6ec82769-8d17-438b-be10-9937a9b6c98e.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4676a5bc-455e-4623-bdfd-77aa470f8893.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8775eea9-ac89-4f67-9efd-557dd4e82caf.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscc700ada-77f8-4066-ab9e-2d916702d700.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf30acc20-0d0a-46d4-b2a2-6ef5bb41eed7.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5a1f082e-90aa-434b-9818-abe0599dfce4.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf2d1df5e-a8d5-4780-9a38-933f694ecea2.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd45ee58d-51fb-402d-b22d-559936cf8874.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb594c14a-fa04-4389-a220-0de1368f1680.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97a43e03-ee82-4bac-8628-de7d066ece54.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6aefaac0-f3d7-47b1-a782-b5fa5e77f98a.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs368c539f-5544-44e7-ae50-9a08a7a06835.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7b3fd2bf-1761-498f-8884-932434179459.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs72d7d1ce-df0d-4355-9909-7b6288c2a811.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs70fa0f6c-8885-4ec8-8faa-6507b3191396.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2d0e7a9b-e80e-436a-a801-e9db1aaeae5b.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs47a7b6af-7943-4b38-a7f7-540edf496490.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9350c47c-5969-4dfe-ae8e-3af6d5ef2944.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9365e32f-b691-40f9-ab9f-8c92511e41d6.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3981778d-2e52-4576-9b1d-bbcbe674d3aa.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfb7dba7e-916e-4fbc-959b-d0e91e97142f.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsddbc0ea5-5f48-4a2b-bd61-551e2b5ac1cc.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs83b8ecc6-1a0c-487e-a96b-30cfa644f3cb.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11102076-2bb3-4f8f-b16c-70331b83ab08.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa7a96230-dce9-49e2-84f7-8c4f206d87fd.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9830e18e-5ddc-4c36-99eb-19fdcadfb48d.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc7dc0321-bde4-4a7f-a597-1674fd0eda4c.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs392e6f89-a926-49a7-8f8f-8cbbcae16196.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse3c35000-1845-4735-b249-cf81c7548274.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs681191bf-b4f4-468a-a7d0-d064d449a5e9.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb7e6e6d3-5d5f-4698-a499-474a1569ee23.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs341a8337-5c38-4acc-a933-a3281c4a4fb9.tmp". The process cannot access the file because it is being used by another process
5:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11d304d0-dede-4658-87d0-35c9f19e9918.tmp". The process cannot access the file because it is being used by another process
5:46 PM: Found Adware: blazefind
5:46 PM: bridge.inf (ID = 51437)
5:46 PM: bridge.inf (ID = 51437)
5:51 PM: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcrst.dll". The process cannot access the file because it is being used by another process
6:06 PM: File Sweep Complete, Elapsed Time: 00:31:36
6:06 PM: Full Sweep has completed. Elapsed time 00:42:02
6:06 PM: Traces Found: 12
6:10 PM: Removal process initiated
6:10 PM: Quarantining All Traces: blazefind
6:10 PM: Quarantining All Traces: searchexe
6:10 PM: Quarantining All Traces: sidesearch
6:10 PM: Quarantining All Traces: kudd.com adware
6:10 PM: Quarantining All Traces: adknowledge cookie
6:10 PM: Quarantining All Traces: atwola cookie
6:10 PM: Quarantining All Traces: banner cookie
6:10 PM: Quarantining All Traces: belnk cookie
6:10 PM: Quarantining All Traces: yieldmanager cookie
6:11 PM: Removal process completed. Elapsed time 00:00:38
********
5:19 PM: | Start of Session, November 9, 2005 |
5:19 PM: Spy Sweeper started
5:21 PM: Updating spyware definitions
5:21 PM: Your spyware definitions have been updated.
5:22 PM: | End of Session, November 9, 2005 |
