Thnaks LD below are the new HJT Log and Spy Sweeper results
Logfile of HijackThis v1.99.1
Scan saved at 11:24:10, on 01/01/2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\S4TSR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\AOL SPYWARE PROTECTION\AOLSP SCHEDULER.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\BLUEYONDER\PCGUARD\RPS.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\AOL 9.0B\AOLTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\PROGRAM FILES\COMMON FILES\COMMAND SOFTWARE\DVPAPI9X.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://search.blueyo...arch/search.jsp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.blueyonde...onder/index.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.blueyonder.co.uk
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by blueyonder
R3 - URLSearchHook: (no name) - {1095190F-9F6E-E872-ED6B-CD602BE08C60} - forces_elite.dll (file missing)
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - (no file)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\PROGRAM FILES\BLUEYONDER\PCGUARD\FBHR.DLL
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\PROGRAM FILES\BLUEYONDER\PCGUARD\PKR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\PROGRAM FILES\CANON\EASY-WEBPRINT\TOOLBAND.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SiSAudio] C:\WINDOWS\SYSTEM\MP_S3.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [DisableEHCI] C:\WINDOWS\S4TSR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\RPS.exe"
O4 - HKLM\..\Run: [NukeSpan] TorontoMail.exe
O4 - HKLM\..\Run: [syspanel] WTFCTF.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [AolAcsDaemon1] "C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE"
O4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe"
O4 - HKCU\..\Run: [atl_helper] progmen.exe
O4 - HKCU\..\Run: [vxdman] prcmon.exe
O4 - Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0b\aoltray.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\PROGRAM FILES\CANON\EASY-WEBPRINT\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\PROGRAM FILES\CANON\EASY-WEBPRINT\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\PROGRAM FILES\CANON\EASY-WEBPRINT\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\PROGRAM FILES\CANON\EASY-WEBPRINT\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: &Search -
http://ka.bar.need2f...earch.html?p=KA
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.blueyonder.co.uk
O16 - DPF: {4FAE30E1-EE9C-477D-8D06-BF8D3429B60F} (WebIQ Technology Client) -
http://webiq001.webi...Q/bin/WebIQ.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) -
http://www.freedom.n...cabs/cssweb.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} -
http://download.ewid...oOnlineScan.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = aoldsl.net
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.114.55,85.255.112.126
********
11:03: | Start of Session, 01 January 2006 |
11:03: Spy Sweeper started
11:03: Sweep initiated using definitions version 594
11:03: Starting Memory Sweep
11:05: Memory Sweep Complete, Elapsed Time: 00:01:53
11:05: Starting Registry Sweep
11:06: Found Adware: altnet
11:06: HKLM\altnet\ (2 subtraces) (ID = 103447)
11:06: Found Adware: coolwebsearch (cws)
11:06: HKLM\software\microsoft\code store database\distribution units\{10003000-1000-0000-1000-000000000000}\ (7 subtraces) (ID = 109815)
11:06: Found Adware: cws-aboutblank
11:06: HKLM\software\microsoft\code store database\distribution units\{10003000-1000-0000-1000-000000000000}\ (7 subtraces) (ID = 109815)
11:11: Found Trojan Horse: trojan-downloader-ruin
11:11: HKLM\software\microsoft\windows\currentversion\urls\ (10 subtraces) (ID = 605127)
11:11: Found Adware: trojan-downloader-linkschain
11:11: HKLM\software\microsoft\windows\currentversion\run\ || vmcleaner (ID = 712882)
11:11: Found Adware: 180search assistant/zango
11:11: HKLM\software\microsoft\code store database\distribution units\{8fcdf9d9-a28b-480f-8c3d-581f119a8ab8}\ (7 subtraces) (ID = 832871)
11:12: HKU\.DEFAULT\software\microsoft\windows\currentversion\run\ || nsyscplstr (ID = 605131)
11:12: Found Adware: unspypc
11:12: HKU\.DEFAULT\software\unspypc\ (6 subtraces) (ID = 1059779)
11:12: Registry Sweep Complete, Elapsed Time:00:06:08
11:12: Starting Cookie Sweep
11:12: Found Spy Cookie: firstchoice cookie
11:12: anyuser@firstchoice[1].txt (ID = 2678)
11:12: Found Spy Cookie: a cookie
11:12: anyuser@a[1].txt (ID = 2027)
11:12: Found Spy Cookie: touchclarity cookie
11:12: anyuser@easyjet.touchclarity[2].txt (ID = 3566)
11:12: Found Spy Cookie: banners cookie
11:12: 72-underwood@banners[1].txt (ID = 2282)
11:12: 72-underwood@easyjet.touchclarity[1].txt (ID = 3566)
11:12: Found Spy Cookie: 2o7.net cookie
11:12: 72-underwood@112.2o7[2].txt (ID = 1958)
11:12: Found Spy Cookie: tracking cookie
11:12: 72-underwood@tracking[2].txt (ID = 3571)
11:12: 72-underwood@tracking[3].txt (ID = 3571)
11:12: Found Spy Cookie: ic-live cookie
11:12: anyuser@ic-live[1].txt (ID = 2821)
11:12: Found Spy Cookie: aa cookie
11:12: 72-underwood@aa[1].txt (ID = 2029)
11:12: Found Spy Cookie: ask cookie
11:12: anyuser@ask[1].txt (ID = 2245)
11:12: 72-underwood@a[1].txt (ID = 2027)
11:12: Found Spy Cookie: myaffiliateprogram.com cookie
11:12: anyuser@www.myaffiliateprogram[1].txt (ID = 3032)
11:12: anyuser@propertyfinderltd.122.2o7[2].txt (ID = 1958)
11:12: Found Spy Cookie: yieldmanager cookie
11:12: 72-underwood@ad.yieldmanager[1].txt (ID = 3751)
11:12: anyuser@a[2].txt (ID = 2027)
11:12: 72-underwood@marksandspencer.122.2o7[1].txt (ID = 1958)
11:12: anyuser@firstchoice[2].txt (ID = 2678)
11:12: Found Spy Cookie: yadro cookie
11:12: 72-undepavanrwood@yadro[2].txt (ID = 3743)
11:12: Found Spy Cookie: co cookie
11:12: anyuser@www.firstchoice.co[3].txt (ID = 2428)
11:12: 72-undepavanrwood@112.2o7[1].txt (ID = 1958)
11:12: anyuser@www.firstchoice.co[2].txt (ID = 2428)
11:12: anyuser@firstchoice[5].txt (ID = 2678)
11:12: anyuser@firstchoice[6].txt (ID = 2678)
11:12: Found Spy Cookie: xiti cookie
11:12: 72-undepavanrwood@xiti[1].txt (ID = 3717)
11:12: anyuser@thomascook.122.2o7[2].txt (ID = 1958)
11:12: Found Spy Cookie: associated new media cookie
11:12: anyuser@anm.co[2].txt (ID = 2223)
11:12: Found Spy Cookie: server.iad.liveperson cookie
11:12: anyuser@server.iad.liveperson[2].txt (ID = 3341)
11:12: anyuser@a[3].txt (ID = 2027)
11:12: 72-undepavanrwood@rs0.co[2].txt (ID = 2430)
11:12: 72-undepavanrwood@112.2o7[2].txt (ID = 1958)
11:12: anyuser@112.2o7[1].txt (ID = 1958)
11:12: anyuser@ad.yieldmanager[1].txt (ID = 3751)
11:12: anyuser@firstchoice[3].txt (ID = 2678)
11:12: anyuser@firstchoice[4].txt (ID = 2678)
11:12: anyuser@www.firstchoice.co[1].txt (ID = 2428)
11:12: anyuser@rs0.co[2].txt (ID = 2430)
11:12: Found Spy Cookie: abcsearch cookie
11:12: anyuser@www.abcsearch[2].txt (ID = 2034)
11:12: anyuser@marksandspencer.122.2o7[1].txt (ID = 1958)
11:12: 72-undepavanrwood@www.firstchoice.co[1].txt (ID = 2428)
11:12: 72-undepavanrwood@firstchoice[1].txt (ID = 2678)
11:12: 72-undepavanrwood@firstchoice[2].txt (ID = 2678)
11:12: 72-undepavanrwood@thomascook.122.2o7[1].txt (ID = 1958)
11:12: 72-undepavanrwood@a[1].txt (ID = 2027)
11:12: Found Spy Cookie: goclick cookie
11:12: anyuser@c.goclick[1].txt (ID = 2733)
11:12: anyuser@112.2o7[3].txt (ID = 1958)
11:12: Cookie Sweep Complete, Elapsed Time: 00:00:02
11:12: Starting File Sweep
11:12: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
11:13: Found Adware: idesk
11:13: idemlog.exe (ID = 205677)
11:13: filesafer23.exe (ID = 209443)
11:13: Found Adware: bullguard popup ad
11:13: c:\windows\temp\bullguard (1 subtraces) (ID = -2147476409)
11:13: bulldownload.exe (ID = 52017)
11:13: Warning: Failed to open file "c:\windows\application data\blueyonder\pcguard\logs\safetyconsolelog01-01-2006--10-56-47.log". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a7ac064-aac7-457a-9d90-830e56615202.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5cdc17aa-4855-4bb3-a0a7-a4f32a5a8044.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3576d3c8-d840-4d85-aa12-abeb0199043f.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0e021c7f-f851-4e45-b46b-18bcd04ce94d.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdbcda2ce-2da3-4162-97d4-63985426929d.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6badcef1-4aa9-47b9-9b54-9be82d6841a4.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs251a91e8-b19d-4fbf-b589-2c3b510e7097.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2169404a-4ddb-47bb-9742-e3ce5e83c4ae.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf580f350-8023-46b8-b4e5-b485dd35a8b3.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs152a3709-11e6-4da2-b6f6-c303463f9ea5.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfe3b6644-4543-476a-96df-59f9921d1082.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf75df81-0a0b-4245-a34a-39d0600d2071.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd7e9aa52-bdfe-4a12-9382-85b77e0f0da5.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsadfc37de-f71f-45a6-a49b-ab2e16d8a4b3.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3479d9fa-c886-4e58-9592-3a5f225986fa.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs88e9a0a3-53ac-4af9-affb-de5273b06aea.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs53558f3e-5529-420c-b477-27e1eae1c285.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsde96d76b-3676-43ba-9b46-67ba5e658e38.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs449b77e6-4c41-4b2f-b409-8fa50bcb3adc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs66560ddf-7de4-4122-9f23-66d81b008063.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb6e4d799-d667-4312-9674-36a338040851.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs56da62f3-3b41-4bcf-b60e-4cc0dfc98664.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa49f9d7b-c8ea-4ea1-b78d-c87a0abe0ba1.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc63bcd07-a188-4fb4-bee1-a34fc14044d6.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse580bbd2-572e-47f7-b985-bb5afc001b52.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs951ba704-16c7-45a6-a0e5-b257642f78f2.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0200f01e-31d0-4f7a-b77e-ac0ab5058195.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs65465789-1fa5-41ec-bb58-fd7b90a5eea8.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc3980b39-351b-4621-b736-d7c9857afd60.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse1c72ea5-50ed-4697-bbc0-2a1c408fc8fc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30457fbe-3192-4ac4-a987-cda3c40020bf.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs70e75c75-ef8a-4db5-98be-be921b0e3b39.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf5cf87bc-6b50-4305-9089-0f16e75604b1.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsad39c376-130b-4fbc-9182-3f7b65e7c4c5.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse575bc28-0caf-4991-b932-7e5f39e7598b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf1ab6428-17f9-4989-94aa-883bfb379f19.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs440e42fa-f292-4375-b2b5-ba261c73256b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs03815f20-77ea-42bb-afba-a842cd5680b8.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb1579ede-9914-42af-9a58-83b46f5cf336.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfb3f706c-aaf5-4793-9743-463b60b643c9.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6ae134b4-40ff-4777-ae3c-b715b3154759.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb57a3877-33f9-4e68-8071-0edf3289f622.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5283ac70-db70-4b43-913b-0264969767bb.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs25b263a7-9442-40cf-88ff-4d70b995d189.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3ce5b861-9586-44ea-987b-5e78951cc8a1.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs130ce737-c52d-47e9-8113-9ac04e72030b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2fdb5cdb-f4fc-4b33-8d99-195872d5e925.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd7e63a48-ccc8-4b8b-bf16-57ee7b2e7b37.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs709de6f2-74d1-4a52-aff9-198efbf1820b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e3f99fe-4354-4243-b9bc-93bdfe1d8458.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs46eeef0e-f38e-4d91-85a7-52fe3f1dc8c6.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf4f092a5-c443-44a1-8e9f-614535e4e953.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf71b5ff2-4d32-48f8-978a-73cbb5e9f9c8.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse63c86a9-e6b6-4180-ae00-078d466c78a4.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9c8fc6c3-1c69-4bc1-80c2-4ac46f206fdc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4553f57a-ff7f-4a3a-923e-25f846ec0eba.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb8cc1c1f-51ab-4d1a-b2e3-3e0729caaa49.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa07a2857-e4ac-48c2-959a-c2b3114a95a5.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0abe3b1e-390d-46df-b39a-a628828c5a8d.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9a894edb-138e-49e4-8603-3fe9a8ba7c10.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef5ae6c7-2a78-4d92-93ce-75e1b00d847e.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseddf411e-f796-4551-8643-e92bc762c0d3.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf38475f1-d7a5-463e-8b3b-f5c4ec4639c1.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs79b31223-6e88-4023-b0d1-aa0f6020a4a7.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs35c62aa5-1923-45a2-b1d9-28678139a74d.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs12d31123-ccca-45b5-9c46-d28dafbc1c72.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5ef96c87-ab13-4449-8696-87dcad1c4b07.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd46121bf-933b-434b-879f-677f5840d1dc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1c5fd742-870d-4d76-8564-7d1464490d37.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9ff5b7b-161c-46f2-b6a8-0d3a6cbdd6bb.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs803b4a31-e693-4500-816b-1ccc9cc626fc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1e16c262-4ee5-4126-ae7d-7ba862c1413f.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2b505632-268c-4d88-9d19-e326143b32cc.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb1ed9e77-bc1d-46b5-a4be-34a63a2c1f37.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2062ad8b-ea3e-4247-8c67-953661c1f970.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs49c0a6e8-0068-4b2a-98ee-e65c9f2ae4a4.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs79123bdf-9631-4929-bdcb-4d920bca2756.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9fa69853-de9f-4d20-b4ec-d470893fd587.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1c420ad7-db0a-4bfa-9f81-fecf80cbcd7f.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9fd312d7-bda7-4a7b-8a80-815e263d79c7.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsed2e19e1-0992-4288-b6fa-17c45441777b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2cfc36fe-393d-48f1-95c5-b0f6d4b301c0.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs723d929d-6508-4eb6-9b7a-4fea721a6a5f.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs71edfcb0-da9a-40c8-84a2-2715044a8667.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0369f891-6c12-4e8c-a8f5-796a63a12c64.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5a107156-18fc-4ea4-baaa-6cc6854bccc3.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb807a027-cd3e-4cc8-8893-065ed96dda23.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd50b317f-65a2-4af1-8d8e-1cffe88877b2.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs361d7321-98bc-479d-adc2-7c9e5c07125e.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs970be41f-7452-4935-a81d-75b9b12ef8df.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs141eb043-e399-472b-93e4-232c3bd2ed12.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs78cb8900-6efc-4168-82aa-fe8e668a3fba.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8fb634f6-f067-4988-a92f-270eeee82616.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsca22fe26-8dc7-4f5f-b494-ba0c37382a07.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse0698785-864a-4b04-9635-12ffe930ca3f.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1850e5b4-80ad-4678-82a8-f4d9db4052cf.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsddc2d843-2a25-4136-a89c-bf7b9ab7c01b.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs99d3f529-3143-4fa3-beba-3d01db4ee88c.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscd11d99f-9c18-4abf-b52e-1ba6e22257ee.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs55f686f1-4cc9-4ff2-8a8b-3663ff0dcd91.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs69849371-2348-4b58-bbc6-cb8211938590.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2b6d9c7a-00f7-4fe6-87e0-4e68933e3d0e.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs33478462-96da-4052-9632-821f912f1da4.tmp". The process cannot access the file because it is being used by another process
11:13: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs54720abc-dd96-4dcc-867c-9a6a011dba34.tmp". The process cannot access the file because it is being used by another process
11:16: File Sweep Complete, Elapsed Time: 00:04:32
11:16: Full Sweep has completed. Elapsed time 00:12:36
11:16: Traces Found: 98
11:17: Removal process initiated
11:17: Quarantining All Traces: 180search assistant/zango
11:17: Quarantining All Traces: cws-aboutblank
11:17: Quarantining All Traces: trojan-downloader-ruin
11:17: Quarantining All Traces: coolwebsearch (cws)
11:17: Quarantining All Traces: altnet
11:17: Quarantining All Traces: bullguard popup ad
11:17: Quarantining All Traces: idesk
11:17: Quarantining All Traces: trojan-downloader-linkschain
11:17: Quarantining All Traces: unspypc
11:17: Quarantining All Traces: 2o7.net cookie
11:17: Quarantining All Traces: a cookie
11:17: Quarantining All Traces: aa cookie
11:17: Quarantining All Traces: abcsearch cookie
11:17: Quarantining All Traces: ask cookie
11:17: Quarantining All Traces: associated new media cookie
11:17: Quarantining All Traces: banners cookie
11:17: Quarantining All Traces: co cookie
11:17: Quarantining All Traces: firstchoice cookie
11:18: Quarantining All Traces: goclick cookie
11:18: Quarantining All Traces: ic-live cookie
11:18: Quarantining All Traces: myaffiliateprogram.com cookie
11:18: Quarantining All Traces: server.iad.liveperson cookie
11:18: Quarantining All Traces: touchclarity cookie
11:18: Quarantining All Traces: tracking cookie
11:18: Quarantining All Traces: xiti cookie
11:18: Quarantining All Traces: yadro cookie
11:18: Quarantining All Traces: yieldmanager cookie
11:19: Removal process completed. Elapsed time 00:01:56
********
11:01: | Start of Session, 01 January 2006 |
11:01: Spy Sweeper started
11:02: Your spyware definitions have been updated.
11:03: | End of Session, 01 January 2006 |