Here's the Spy Sweeper session log i saved after i ran it,
*****
12:09 PM: | Start of Session, Monday, November 14, 2005 |
12:09 PM: Spy Sweeper started
12:09 PM: Sweep initiated using definitions version 572
12:09 PM: Starting Memory Sweep
12:12 PM: Memory Sweep Complete, Elapsed Time: 00:02:27
12:12 PM: Starting Registry Sweep
12:13 PM: Registry Sweep Complete, Elapsed Time:00:00:43
12:13 PM: Starting Cookie Sweep
12:13 PM: Found Spy Cookie: fastclick cookie
12:13 PM: will@fastclick[1].txt (ID = 2651)
12:13 PM: Found Spy Cookie: 2o7.net cookie
12:13 PM: will@msnportal.112.2o7[1].txt (ID = 1958)
12:13 PM: Found Spy Cookie: advertising cookie
12:13 PM: will@advertising[1].txt (ID = 2175)
12:13 PM: Found Spy Cookie: servedby advertising cookie
12:13 PM: [removed][2].txt (ID = 3335)
12:13 PM: Found Spy Cookie: atlas dmt cookie
12:13 PM: will@atdmt[2].txt (ID = 2253)
12:13 PM: Found Spy Cookie: tribalfusion cookie
12:13 PM: will@tribalfusion[1].txt (ID = 3589)
12:13 PM: Found Spy Cookie: casalemedia cookie
12:13 PM: will@casalemedia[1].txt (ID = 2354)
12:13 PM: Found Spy Cookie: coremetrics cookie
12:13 PM: [removed][1].txt (ID = 2472)
12:13 PM: Found Spy Cookie: bravenet cookie
12:13 PM: will@bravenet[2].txt (ID = 2322)
12:13 PM: jon@fastclick[1].txt (ID = 2651)
12:13 PM: jon@casalemedia[1].txt (ID = 2354)
12:13 PM: jon@atdmt[2].txt (ID = 2253)
12:13 PM: jon@advertising[2].txt (ID = 2175)
12:13 PM: jon@msnportal.112.2o7[1].txt (ID = 1958)
12:13 PM: [removed][2].txt (ID = 3335)
12:13 PM: Found Spy Cookie: realmedia cookie
12:13 PM: dave&judy@realmedia[1].txt (ID = 3235)
12:13 PM: Found Spy Cookie: gamespy cookie
12:13 PM: dave&judy@gamespy[1].txt (ID = 2719)
12:13 PM: Found Spy Cookie: 66.230.183 cookie
12:13 PM: dave&judy@66.230.183[1].txt (ID = 1993)
12:13 PM: dave&judy@bravenet[2].txt (ID = 2322)
12:13 PM: Found Spy Cookie: mygeek cookie
12:13 PM: dave&judy@mygeek[1].txt (ID = 3041)
12:13 PM: Found Spy Cookie: enhance cookie
12:13 PM: dave&[removed][1].txt (ID = 2614)
12:13 PM: Found Spy Cookie: morwillsearch cookie
12:13 PM: dave&judy@morwillsearch[2].txt (ID = 3008)
12:13 PM: Found Spy Cookie: goclick cookie
12:13 PM: dave&[removed][2].txt (ID = 2733)
12:13 PM: Found Spy Cookie: xren_cj cookie
12:13 PM: dave&judy@xren_cj[1].txt (ID = 3723)
12:13 PM: dave&judy@xren_cj[3].txt (ID = 3723)
12:13 PM: dave&judy@66.230.183[2].txt (ID = 1993)
12:13 PM: Found Spy Cookie: yieldmanager cookie
12:13 PM: dave&[removed][2].txt (ID = 3751)
12:13 PM: Found Spy Cookie: aa cookie
12:13 PM: dave&judy@aa[2].txt (ID = 2029)
12:13 PM: Cookie Sweep Complete, Elapsed Time: 00:00:02
12:13 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
12:13 PM: Starting File Sweep
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
12:14 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
12:16 PM: Warning: Failed to open file "c:\windows\softwaredistribution\eventcache\{4c6a9fc3-711c-40a2-ad16-74fc8b8aa019}.bin". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs971a2bc2-e448-4e38-95d1-f2962ac17e0c.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6e70d28a-df5f-4e0a-9f76-72e1ac76fec0.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8a49f045-89a1-49db-83ec-1af13540fb35.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3d1582f1-7b80-4cd7-a35e-9d7f56451133.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsab44a6e8-48ae-43af-b0a2-6f1581b9ea02.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs24f5efff-1153-49d0-a15d-09b44959f1dc.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs191f9ac7-9c7e-465b-93ff-3af52ca49885.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0fa8e621-cdeb-4922-ba0f-c2a7b621ea98.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9007d315-d334-47ec-816e-0adad240148a.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse0c0242a-30de-4838-8775-5ea8fb404bba.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs48b18cfb-7a04-4474-8ff1-df6f4b6e40f5.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ac2a9f3-40e7-4de6-b413-9e57d20badeb.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3668709c-e3ea-405f-9ab3-38e25fe8c090.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8291f901-6399-4a25-b579-613f734c56da.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa7a991eb-f8da-48fe-9508-d2aff693c3f5.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbb54964d-d41f-417f-85b6-5529d62f7beb.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf23ccfe4-7c98-427f-afd5-f3df609642b6.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs316e732a-2339-477f-8c46-fe6e3191398e.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs884b3a67-0c30-41fb-8fb7-be4c33d14c82.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbc38c7f4-5793-48a3-9f51-f6bb8a94a4dd.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs08ad2252-cf75-4c29-a6e7-101679711aa1.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2eef4c0d-99b0-47e9-ba11-7d8c56cfbcd4.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs363192ce-315e-4e77-9aff-9c44614bfc8d.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd81774fc-8698-437b-92c5-87c4df6bdb4b.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf16e48c9-675e-49de-adea-1d9a9e42875d.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1f0de8f1-8918-44ba-80f6-4b67b676962a.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs15ebbccf-6a2f-4ba1-aaf6-58f155f186d8.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2752e997-bc50-459e-9fd7-72231c66d7c2.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfc98f8f5-1952-46ad-a93d-114c726af667.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsecf51442-4be0-475e-83bc-59507de1d9b5.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7615d248-5bc3-4f17-8b5f-48f37d5637ba.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8a5adff2-ede8-4e4e-b5c4-d802371ca5bf.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd40dda7b-cf10-46ad-97ee-4bf5cedad3ce.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs71cb7477-f3c0-42de-b06a-585e3bba5033.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ad4c84b-abb7-49f7-b3a5-4157049ed645.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc414321d-bae0-4459-8190-9d6963415c80.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs45ce0841-a032-4cb7-a800-5e98b1606304.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs78ebe530-b50f-4570-9f81-887570467606.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5469938b-68d8-475f-b922-e43a4c2b0a64.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7b367ed2-f964-419b-bc5a-d89f35c6ac15.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs27daf5f2-18f4-4171-858d-7e4476857bcd.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0954049b-ee17-4805-86a9-dc6b6375b5f7.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc2f8a229-4985-4c72-961b-5ea5c23d5699.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa4f4123f-efb2-44dc-983f-4aab06a4db63.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68b30ade-ea55-48a9-bdb5-53340098a699.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs18addc1b-bb09-4891-abb8-6fdcc881a4e7.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs917f51bb-77f8-44a7-9833-2494636b12e3.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3e2644cb-e5d5-403d-83f2-d4fceaba893f.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs90ae750e-99aa-4a3b-968f-d26b752fee8e.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb6be1565-799e-4419-a17e-15fda5cbe258.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1cb5a473-d2c0-4962-938e-7beda32be644.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc13dc5de-9f24-483e-97f6-496688db0472.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e634f2a-9199-4810-9f66-914c3a31e051.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5cbb0276-a645-4676-8891-e589c46f68e7.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs12ee8543-bb19-43dd-8a3b-1bc254cf8b7f.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs051e38e3-3962-4ed3-8ce0-1989c2cad361.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfc4a01e2-9fe9-417d-85f4-b2c65f200e43.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbeae8d70-3ecb-486a-9254-9dca1c39d14b.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1c436385-4f79-40c0-b50d-c58fc07d6de7.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7607f957-ac0b-4f05-955b-c3e4e7a84ca9.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2541b2c2-9b50-4d8d-b63a-52cb764b9930.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc8d4c263-9a22-41e5-81da-05f1084b0f7e.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs554154ae-1aea-425a-a9f7-39a45ecada7c.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs081f1ed5-1280-46ad-ae5f-d818936ce255.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse1e7e2a3-0733-402b-a63d-94c1555d1fbb.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs25d9685b-e950-4be9-b3cd-e938bd193b30.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9d97aaf0-3531-4d13-9ee2-55f060304ff4.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8e3c4c6e-41cb-495b-a9cb-b0d22c8c6bbb.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbc039e33-0160-4263-bbc5-3f6372b663ba.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6a29906b-5bcb-413c-8e0d-7e7bdeeae09c.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs13470931-0858-4ac6-9c2b-13a2da8c5026.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsda9f4685-ffdf-4d9c-900c-b2f62a374145.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs57814592-e744-4460-ba28-640c3fbd1c53.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs441c04fd-814e-4f1d-aa06-c280453043d6.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd42e38fa-bcb7-4536-8c02-26b29553a328.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2b62ace8-39ff-4e9f-85f6-694c44d29f36.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdead1b9d-ed55-4ce4-8194-67f5d8e0928b.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs351559c2-e29b-4017-ac5b-aac8884d9e7d.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68093794-8632-430f-96f9-99e2a8c9406d.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs27f49392-43b1-4287-905f-473c93c97949.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa61536d2-db34-4523-8bde-62aa39e1643a.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseea053be-8291-40a2-87de-bb90f32a9254.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0fe3c8a3-1cf2-4974-81a1-dd086bf6af5e.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa2268bab-817f-4ada-ab3b-12be8d4a72c3.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5690943d-f331-4374-bef8-043b5de84d10.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs78d0680f-ec64-4719-be36-2f816db77567.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4a6bcad-7f1c-4f7c-a511-eb3f47f10a68.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse0b4159c-f793-4185-8221-f435e7463fc8.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4a07cd2-a5e6-4b51-bafa-995ef2d9971f.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs37fea87c-a3bc-43ef-9f14-65357b2a6c6d.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs46f58271-3d34-4d6c-b763-0317b15f0deb.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd15bba5c-1998-447d-85a3-03cd0218ba89.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc2580bb2-c796-46ab-ae51-5c8ddab583ec.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd1e112b7-7185-4a9f-8616-6250edd3f466.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscd906128-3690-4e5b-9761-336f3258bb8e.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa1ff241c-1b73-4caf-9c57-6e87e3dfe320.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa85b5923-173a-422c-b078-0821da616b9b.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf5d3fbfa-06c0-4314-a784-2f439b988fc9.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs72e38688-4e43-4566-a8e7-db974bd2ead0.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfe0b3774-30a2-46e5-a0ba-50e02842f900.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3e91f720-9c1b-43a6-b65b-8e4a82cee676.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse87bfb9d-6e19-4c22-8573-3136a8f883f4.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa01fde06-bd5f-4f9e-8bea-872f121f19af.tmp". The process cannot access the file because it is being used by another process
12:19 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9c0f4644-39de-4729-a912-8ff176c66b80.tmp". The process cannot access the file because it is being used by another process
12:22 PM: Found Adware: whenu savenow
12:22 PM: vvsninst.exe (ID = 74460)
12:23 PM: Warning: Failed to open file "c:\documents and settings\dave&judy\ntuser.dat". The process cannot access the file because it is being used by another process
12:23 PM: Warning: Failed to open file "c:\documents and settings\dave&judy\ntuser.dat.log". The process cannot access the file because it is being used by another process
12:24 PM: Warning: Failed to open file "c:\documents and settings\dave&judy\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
12:24 PM: Warning: Failed to open file "c:\documents and settings\dave&judy\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
12:27 PM: File Sweep Complete, Elapsed Time: 00:14:08
12:27 PM: Full Sweep has completed. Elapsed time 00:17:25
12:27 PM: Traces Found: 29
12:28 PM: Removal process initiated
12:28 PM: Quarantining All Traces: whenu savenow
12:28 PM: Quarantining All Traces: 2o7.net cookie
12:28 PM: Quarantining All Traces: 66.230.183 cookie
12:28 PM: Quarantining All Traces: aa cookie
And here is the new HJT log,
Logfile of HijackThis v1.99.1
Scan saved at 12:36:04 PM, on 11/14/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\DAVE&J~1\LOCALS~1\Temp\Temporary Directory 4 for hijackthis[1].zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {702EA91C-1ACF-4772-8078-18F2B2EE1031} - (no file)
O2 - BHO: Bho Class - {C04BA419-E55F-4cc7-944C-21C039F9F170} - C:\WINDOWS\system32\qpnnlwrh.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineS…er.cab30149.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.com/download.yahoo.com/…nst20040510.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdat…b?1129730179046
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messe…nt.cab30149.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O20 - Winlogon Notify: ddccc - ddccc.dll (file missing)
O20 - Winlogon Notify: jkhhe - jkhhe.dll (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Thanks again for helping me out!
