OK so I ran SpySweeper in Safe Mode and it quarantined morpheus adware from HKLM\software\classes\windowsie\ (a registry item I think)
For some reason the log never saved so I had to run it again to get another log. This time it found nothing. Here it is:
I've also included another HijackThis log after the SpySweeper log.
********
8:57 PM: | Start of Session, Sunday, November 27, 2005 |
8:57 PM: Spy Sweeper started
8:57 PM: Sweep initiated using definitions version 575
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anyusr
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: ShorTees
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anyuer
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: KaY-o-Ree
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anuyser
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anyuse4r
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anyone
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: anyuse
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: amyuser
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: ShorTe
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: An I/O operation initiated by the Registry failed unrecoverably.
The Registry could not read in, or write out, or flush, one of the files
that contain the system's image of the Registry
8:57 PM: Warning: TIdentify2700Obj.Identify: Unable to map user: ShorTeee
8:57 PM: Starting Memory Sweep
9:02 PM: Memory Sweep Complete, Elapsed Time: 00:05:32
9:02 PM: Starting Registry Sweep
9:08 PM: Registry Sweep Complete, Elapsed Time:00:05:05
9:08 PM: Starting Cookie Sweep
9:08 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
9:08 PM: Starting File Sweep
9:08 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1001-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1002-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1003-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1004-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1005-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1006-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1007-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1008-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1009-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd100f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1010-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1011-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1012-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1013-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1014-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1015-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1016-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1017-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1018-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1019-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd101f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1020-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1021-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1022-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1023-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1024-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1025-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1026-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1027-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1028-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1029-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd102f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1030-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1031-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1032-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1033-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1034-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1035-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1036-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1037-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1038-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1039-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd103f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1040-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1041-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1042-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1043-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1044-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1045-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1046-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1047-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1048-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1049-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd104f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1050-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1051-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1052-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1053-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1054-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1055-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1056-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1057-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1058-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1059-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105a-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105b-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105c-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105d-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105e-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd105f-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1060-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1061-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1062-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1063-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1064-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1065-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1066-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1067-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:13 PM: Warning: Failed to open file "c:\windows\profiles\shortee\application data\webroot\spy sweeper\temp\sscs46dd1068-5f86-11da-bc4b-00d0097e3c34.tmp". The process cannot access the file because
it is being used by another process
9:50 PM: File Sweep Complete, Elapsed Time: 00:42:38
9:50 PM: Full Sweep has completed. Elapsed time 00:53:27
9:50 PM: Traces Found: 0
********
Logfile of HijackThis v1.99.1
Scan saved at 9:57:14 PM, on 11/27/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\PTSNOOP.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NORTON CRASHGUARD\CGMENU.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\NORTON CRASHGUARD\CG16EH.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.gmail.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.library.ubc.ca:8000
F1 - win.ini: load=ptsnoop.exe
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: MSEvents Object - {B313D637-F405-4052-AC37-E2119AB3C8F8} - C:\WINDOWS\SYSTEM\HGGEB.DLL (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Norton CrashGuard Monitor] C:\PROGRAM FILES\NORTON CRASHGUARD\CGMENU.EXE
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: OpenOffice.org 1.1.4.lnk = C:\Util\OpenOffice.org1.1.4\program\quickstart.exe
O4 - User Startup: OpenOffice.org 1.1.4.lnk = C:\Util\OpenOffice.org1.1.4\program\quickstart.exe
O8 - Extra context menu item: Open Frame in &New Window - C:\WINDOWS\WEB\frm2new.htm
O8 - Extra context menu item: &Highlight - C:\WINDOWS\WEB\highlight.htm
O8 - Extra context menu item: &Web Search - C:\WINDOWS\WEB\selsearch.htm
O8 - Extra context menu item: &Links List - C:\WINDOWS\WEB\urllist.htm
O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
O8 - Extra context menu item: I&mages List - C:\WINDOWS\Web\imglist.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQ\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQ\ICQLite.exe (file missing)
O9 - Extra button: Browser Adjustment - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {9A5DF5E1-6EA9-494C-98A8-8A0534C5D03F} (TMSCTL.SSDLoad) -
http://broadcast.mic...a/tmsct2000.CAB
O16 - DPF: {F7A42F5D-C82A-4680-B2C1-4E530BC72C23} (PostalCodePicker Control) -
http://broadcast.mic...ata/tbpcctl.cab
O16 - DPF: {0FAB1B8C-5AEA-4A46-A4A8-06611412D675} (tsettask Class) -
http://broadcast.mic...ta/TSetTask.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) -
http://download.mcaf...ed/MGBrwFld.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) -
http://security.syma...n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.syma...bin/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://a1540.g.akama...meInstaller.exe
O16 - DPF: {F0E42D60-368C-11D0-AD81-00A0C90DC8D9} (Snapshot Viewer Control 8.0) -
http://activex.micro...ss/Snapview.ocx
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -
http://gisweb7.city....ad/mgaxctrl.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) -
https://www-secure.s.../ActiveData.cab
O16 - DPF: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_01) -
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) -
https://msevents.web...bex/ieatgpc.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zon...StatsClient.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zon...MineSweeper.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) -
http://by99fd.bay99....ex/HMAtchmt.ocx
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) -
http://www.pestscan....r/axscanner.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.c...nst20040510.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?linkid=39204
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn...pDownloader.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.co...ad/MsnPUpld.cab
O16 - DPF: {D57262F5-9637-4E67-BC59-88C53EA76FC3} -
http://www.easypix.ca/en/ulcontrol.cab
O16 - DPF: {266B9238-31A5-4B53-9039-272FE846DF9D} (DiameterTransfer Control) -
http://www.sis.com/d...SISTransfer.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = lynx.net
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 216.18.70.248,216.18.70.233
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
