44 replies to this topic

[toscane]

Yes, Lucallbackproxy.exe is part of the Live Update process of Norton anti-virus. Did you remove that entry in safe mode as well?

[mstanley]

I didn't remove anything in safe mode. What specifically are you refering to when you say entry? I didn't touch the Lucallbackproxy file.

[toscane]

Still can't Fix O18 - Protocol: pcncdf - (no CLSID) - (no file) and keep it from coming back.

Did you try to remove it in safe mode? If this also failed, I would not take much attention to this entry since there is no CLSID and no active file running.

Can you run AdAware safely now?
I suggest to use Spybot as well:

Download Spybot Search & Destroy
Spybot S&D tutorial

Install the program and launch it.

Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D
Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the (RED) entries.

Edited by toscane, 11 February 2006 - 11:37 AM.

[mstanley]

That entry remains even after attempted Fix in Safe Mode. Ran Spybot didn't find anything. Ad-Aware will run. Is there a untility to remove Suggestor.o, MDH.e, and Runner.h ???

[toscane]

In postnr. #27# I asked you to remove those files that belong to the virusses Escan found. The other files were found in System Restore and I already asked you to clear that. You may run the Escan once more and lets see what it finds now.

Edited by toscane, 12 February 2006 - 02:14 PM.

[mstanley]

I completed the tasks outlined in Post# 27 when instructed. I know titno.exe is still on the system. Thanks for your assitance. I'll run the scan again and advise.

[toscane]

Please sow the exact path of titno.exe

Download WinPFind.zip

Extract WinPFind.zip to your c:\ folder.
Please print these instructions as you will be going into safe mode.
Reboot your computer into Safe Mode by following the following steps:

Reboot.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode

Then open c:\WinPFind and double-click on WinPFind.exe. When the program is open, click on the Start Scan button to scart scanning your computer. Be patient as this scan may take a while. When it is done, it will show a log and tell you the scan is completed. Reboot your computer back to normal mode and and post the contents of c:\WinPFind\WinPFind.txt as a reply to this topic.

[mstanley]

titno.exe is found at: C:\windows\system\titno.exe

[mstanley]

WinPFind.log WARNING: not all files found by this scanner are bad. Consult with a knowledgable person before proceeding. If you see a message in the titlebar saying "Not responding..." you can ignore it. Windows somethimes displays this message due to the high volume of disk I/O. As long as the hard disk light is flashing, the program is still working properly. »»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Product Name: Windows Millennium Edition Version: 4.90.3000 Internet Explorer Version: 6.0.2800.1106 »»»»»»»»»»»»»»»»» Checking Selected Standard Folders »»»»»»»»»»»»»»»»»»»» Checking %SystemDrive% folder... Checking %ProgramFilesDir% folder... Checking %WinDir% folder... PECompact2 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185 qoologic 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185 SAHAgent 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185 PECompact2 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185 qoologic 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185 SAHAgent 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185 UPX! 1/31/2006 10:16:50 AM 1077328 C:\WINDOWS\vsapi32.dll aspack 1/31/2006 10:16:50 AM 1077328 C:\WINDOWS\vsapi32.dll UPX! 1/31/2006 10:16:52 AM 176709 C:\WINDOWS\tsc.exe Checking %System% folder... WinShutDown 8/8/1997 8:00:00 AM 72192 C:\WINDOWS\SYSTEM\WPAUTO8.DLL WinShutDown 8/8/1997 8:00:00 AM 68096 C:\WINDOWS\SYSTEM\PRAUTO8.DLL PTech 8/22/1998 12:24:08 AM 74460 C:\WINDOWS\SYSTEM\OLFAXDRV.DRV WinShutDown 8/8/1997 8:00:00 AM 64000 C:\WINDOWS\SYSTEM\PFAUTO8.DLL WinShutDown 8/8/1997 8:00:00 AM 68096 C:\WINDOWS\SYSTEM\QPAUTO8.DLL PTech 11/9/1999 3:55:54 PM 88571 C:\WINDOWS\SYSTEM\MDACRDME.HTM PTech 11/4/2005 4:27:24 PM 534280 C:\WINDOWS\SYSTEM\LegitCheckControl.DLL Checking %System%\Drivers folder and sub-folders... Checking the Windows folder and sub-folders for system and hidden files within the last 60 days... 2/14/2006 7:43:02 AM RH 6246432 C:\WINDOWS\CLASSES.DAT 2/14/2006 8:15:46 AM RH 4067360 C:\WINDOWS\SYSTEM.DAT 2/14/2006 8:17:28 AM RH 1703968 C:\WINDOWS\USER.DAT 2/12/2006 12:16:44 PM H 39203 C:\WINDOWS\ttfCache 2/14/2006 7:57:26 AM H 1008164 C:\WINDOWS\ShellIconCache 2/12/2006 1:38:10 PM H 425 C:\WINDOWS\TEMP\ffastlog.txt 2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\desktop.ini 2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\4TAR0H67\desktop.ini 2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\WPOWY9SJ\desktop.ini 2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\SVDCB71N\desktop.ini 2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\M96TX5HP\desktop.ini 2/8/2006 6:26:38 AM HS 113 C:\WINDOWS\TEMP\History\History.IE5\desktop.ini 2/1/2006 8:52:20 PM HS 67 C:\WINDOWS\Temporary Internet Files\desktop.ini 2/6/2006 7:52:08 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\desktop.ini 2/6/2006 7:52:46 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\XJJNLHOE\desktop.ini 2/6/2006 9:51:04 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\CRX3EQ3T\desktop.ini 2/6/2006 9:51:04 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\OHO1ANG9\desktop.ini 2/6/2006 9:52:38 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\JY473D85\desktop.ini 2/6/2006 10:10:20 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\T7QRYH61\desktop.ini 2/6/2006 10:37:26 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\0H27SDMV\desktop.ini 2/6/2006 10:37:26 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\1K6OJ9UY\desktop.ini 2/6/2006 9:24:58 PM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\0JKRGZIV\desktop.ini 2/14/2006 8:17:12 AM H 143488 C:\WINDOWS\PCHEALTH\HELPCTR\Database\HelpSessionHistory.stream 2/14/2006 8:15:00 AM HS 2226 C:\WINDOWS\Application Data\Microsoft\Internet Explorer\Desktop.htt 2/14/2006 8:15:00 AM HS 94 C:\WINDOWS\Application Data\Microsoft\Internet Explorer\Pattern.bmp 2/7/2006 11:28:10 AM HS 4096 C:\WINDOWS\All Users\DRM\drmv2.sst 2/7/2006 11:28:08 AM HS 48 C:\WINDOWS\All Users\DRM\v2ks.sec 2/7/2006 11:28:08 AM HS 400 C:\WINDOWS\All Users\DRM\v2ks.bla 2/7/2006 11:28:08 AM HS 48 C:\WINDOWS\All Users\DRM\v2ks.sec.bak 2/7/2006 11:28:08 AM HS 400 C:\WINDOWS\All Users\DRM\v2ks.bla.bak 2/14/2006 8:01:34 AM H 6 C:\WINDOWS\Tasks\SA.DAT 1/22/2006 3:12:46 PM RHS 227 C:\WINDOWS\assembly\Desktop.ini Checking for CPL files... Microsoft Corporation 6/8/2000 5:00:00 PM 408576 C:\WINDOWS\SYSTEM\MMSYS.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 111616 C:\WINDOWS\SYSTEM\MAIN.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 104368 C:\WINDOWS\SYSTEM\MODEM.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 61200 C:\WINDOWS\SYSTEM\POWERCFG.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 47104 C:\WINDOWS\SYSTEM\PASSWORD.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 221280 C:\WINDOWS\SYSTEM\DESK.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 41232 C:\WINDOWS\SYSTEM\ODBCCP32.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 62464 C:\WINDOWS\SYSTEM\INTL.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 14448 C:\WINDOWS\SYSTEM\NETCPL.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 389872 C:\WINDOWS\SYSTEM\SYSDM.CPL Microsoft Corporation 9/16/2002 9:37:16 AM 28672 C:\WINDOWS\SYSTEM\WUAUCPL.CPL Microsoft Corporation 8/24/1996 11:11:10 AM 45968 C:\WINDOWS\SYSTEM\MLCFG32.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 79872 C:\WINDOWS\SYSTEM\APPWIZ.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 36864 C:\WINDOWS\SYSTEM\TIMEDATE.CPL Microsoft Corporation 2/10/1999 11:48:48 AM 40960 C:\WINDOWS\SYSTEM\FINDFAST.CPL Microsoft Corporation 8/29/2002 7:07:38 AM 292352 C:\WINDOWS\SYSTEM\INETCPL.CPL Microsoft Corporation 6/8/2000 5:00:00 PM 15360 C:\WINDOWS\SYSTEM\TELEPHON.CPL Microsoft Corporation 10/30/2001 8:10:00 AM 442368 C:\WINDOWS\SYSTEM\JOY.CPL »»»»»»»»»»»»»»»»» Checking Selected Startup Folders »»»»»»»»»»»»»»»»»»»»» Checking files in %ALLUSERSPROFILE%\Startup folder... Checking files in %ALLUSERSPROFILE%\Application Data folder... Checking files in %USERPROFILE%\Startup folder... 11/25/2005 9:49:38 PM 560 C:\WINDOWS\Start Menu\Programs\StartUp\Microsoft Office.lnk Checking files in %USERPROFILE%\Application Data folder... 11/28/2005 8:50:56 AM 0 C:\WINDOWS\Application Data\dm.ini 1/29/2006 3:28:36 PM 1534 C:\WINDOWS\Application Data\dw.log 1/22/2006 3:13:14 PM 75 C:\WINDOWS\Application Data\fusioncache.dat 5/25/2001 10:28:34 AM 26838 C:\WINDOWS\Application Data\Personal Address Book.ADR »»»»»»»»»»»»»»»»» Checking Selected Registry Keys »»»»»»»»»»»»»»»»»»»»»»» [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] {FEF10FA2-355E-4e06-9381-9B24D7F7CC88} = C:\WINDOWS\SYSTEM\SHELL32.DLL {53C74826-AB99-4d33-ACA4-3117F51D3788} = C:\WINDOWS\SYSTEM\SHELL32.DLL {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL {BD472F60-27FA-11cf-B8B4-444553540000} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] [HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers] HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\BriefcaseMenu {85BBD920-42A0-1069-A2E4-08002B30309D} = syncui.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinZip {E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With {09799AFB-AD67-11d1-ABCD-00C04FC30936} = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{B95057E0-44DB-11CE-A5D1-00608C83BD3F} = shellwp.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu {5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2} = C:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\BriefcaseMenu {85BBD920-42A0-1069-A2E4-08002B30309D} = syncui.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZip {E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\QuickFinderMenu {C0E10002-0028-0001-C0E1-C0E1C0E1C0E1} = C:\COREL\SUITE8\PROGRAMS\PFSE80.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu {5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2} = C:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZip {E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\QuickFinderMenu {C0E10002-0028-0001-C0E1-C0E1C0E1C0E1} = C:\COREL\SUITE8\PROGRAMS\PFSE80.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\SharingMenu {6D78EC20-5AA6-101B-8681-366FBD64CEB9} = msshrui.dll <<< WARNING! - NOT A VALID WIN98 KEY! (ME is Ok) >>> [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F01-7B1C-11d1-838f-0000F80461CF} = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F02-7B1C-11d1-838f-0000F80461CF} = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{0D2E74C4-3C34-11d2-A27E-00C04FC30871} = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{7ab770c7-0e23-4d7a-8aa2-19bfad479829} = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{884EA37B-37C0-11d2-BE3F-00A0C9A83DA1} = C:\WINDOWS\SYSTEM\DOCPROP2.DLL [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872} CNavExtBho Class = C:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376} &Tip of the Day = C:\WINDOWS\SYSTEM\SHDOCVW.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar] {8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} MenuText = : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} ButtonText = AOL Instant Messenger (SM) : C:\PROGRAM FILES\AIM95\AIM.EXE [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E} Explorer Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E61-B078-11D0-89E4-00C04FC9E26E} Favorites Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{30D02401-6A81-11D0-8274-00C04FD5AE38} Search Band = C:\WINDOWS\SYSTEM\BROWSEUI.DLL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E} History Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} File and Folders Search ActiveX Control = C:\WINDOWS\SYSTEM\SHELL32.DLL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} Media Band = C:\WINDOWS\SYSTEM\BROWSEUI.DLL [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Links HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : C:\WINDOWS\SYSTEM\BROWSEUI.DLL {0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : C:\WINDOWS\SYSTEM\BROWSEUI.DLL {8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} = Yahoo! Toolbar : HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : C:\WINDOWS\SYSTEM\BROWSEUI.DLL {0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : C:\WINDOWS\SYSTEM\BROWSEUI.DLL {8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Symantec Core LC C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" Advanced Tools Check C:\PROGRA~1\NORTON~1\ADVTOOLS\ADVCHK.EXE NPROTECT C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE SystemTray SysTray.Exe ScanRegistry C:\WINDOWS\scanregw.exe /autorun PCHealth C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme EM_EXEC C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE TaskMonitor C:\WINDOWS\taskmon.exe AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe" HPDJ Taskbar Utility C:\WINDOWS\SYSTEM\hpztsb04.exe $EnterNet C:\PROGRA~1\EFFICI~1\ENTERN~1\APP\ENTERNET.EXE -AutoStart Symantec NetDriver Monitor C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents] MSFS Installed = 1 MAPI Installed = 1 IMAIL Installed = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] *StateMgr C:\WINDOWS\System\Restore\StateMgr.exe ccEvtMgr "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" ccSetMgr "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe" NPFMonitor C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe ScriptBlocking "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg NPROTECT C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE ALU Scheduler Service C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe SchedulingAgent mstask.exe SSDPSRV C:\WINDOWS\SYSTEM\ssdpsrv.exe LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme KB891711 C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce-] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx-] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices-] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce-] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce-] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices-] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce-] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ratings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network HideSharePwds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\WinOldApp NoRealMode 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum {BDEADF00-C265-11D0-BCED-00A0C90AB50F} = C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL {6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} = {0DF44EAA-FF21-4412-828E-260A8728E7F1} = [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies] HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer NoDriveTypeAutoRun • NoSaveSettings NoStartBanner
CDRAutoRun NoDrives àÿÿ HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\comdlg32 NoBackButton 0 NoFileMru 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = C:\WINDOWS\SYSTEM\WEBCHECK.DLL AUHook {BCBCD383-3E06-11D3-91A9-00C04F68105C} = C:\WINDOWS\SYSTEM\AUHOOK.DLL UPnPMonitor {e57ce738-33e8-4c51-8354-bb4de9d215d1} = C:\WINDOWS\SYSTEM\UPNPUI.DLL <<< WARNING! - NOT A VALID WIN98/ME KEY! >>> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] AppInit_DLLs Interceptor.dll »»»»»»»»»»»»»»»»»»»»»»»» Scan Complete »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» WinPFind v1.4.1 - Log file written to "WinPFind.Txt" in the WinPFind folder. Scan completed on 2/14/2006 8:34:03 AM

[toscane]

You can delelte this file: titno.exe because it is known as Adware.MDH.

For the files WinPFind found please follow this advice:

Download the trial version of Spy Sweeper

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)
You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
Click on Sweep and allow it to fully scan your system.

When the sweep has finished, click Remove. Click Select All and then Next
From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.

Exit Spy Sweeper.

Restart your computer.

[mstanley]

Ran Spy Sweeper Found 20 and 121 traces However, it would not remove or Save a Log without purchasing.

[toscane]

Well, since it removed malware from your computer quit well you can use it for as long as the trial periode goes How is the computer running now?

[mstanley]

I didn't purchase. The work around was that I manually deleted the items identified and ran it again in safe mode. In safe mode it gave me the session log for both scans which is attached. The logs are in reverse order. This file has been identified as malware O20 - AppInit_DLLs: Interceptor.dll. Can it be deleted? ******** 2:34 PM: | Start of Session, Sunday, February 19, 2006 | 2:34 PM: Spy Sweeper started 2:34 PM: Sweep initiated using definitions version 617 2:34 PM: Starting Memory Sweep 2:41 PM: Memory Sweep Complete, Elapsed Time: 00:06:23 2:41 PM: Starting Registry Sweep 2:46 PM: Registry Sweep Complete, Elapsed Time:00:04:55 2:46 PM: Starting Cookie Sweep 2:46 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01 2:46 PM: Starting File Sweep 2:46 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs823823c5-15d5-4203-9f37-966a4ae134d3.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf892c839-9ed8-4128-afc6-908b4d7028f8.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3ad07933-5efc-4902-901c-3819813d8782.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef5a5508-8ad1-425b-8e99-2ff974d7b842.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs52ecaec6-c778-46a8-9de4-e26378b61941.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5f4e436-68b1-4594-add5-94dc37d1c12a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3944d686-0054-420c-9c78-9c82d5e07f7a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf1b1619-683a-4eab-8c08-b33bea582483.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1b859366-5937-48c3-a49e-6eebcae11fa2.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse56ad5da-8b62-423b-bff9-4384b75c6735.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9de44a33-b8c9-4569-81fb-38ad940a15bc.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs70783b30-0583-4cdd-9e5a-913b9dd61d26.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs694c09fa-ed65-4f72-ab44-f4ea6c7f8801.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs216212c5-cd51-4618-ad47-dab4c49ffc27.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs836f2e61-ff70-4d56-933e-3b91f48aecf1.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs491f7e77-a563-40a6-a098-e36c4b9e8ed3.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf200305-5afe-4e94-8a92-b6a2f65cc010.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfdb543c8-dea0-452a-8efa-a444b72c2fca.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3edc338e-49db-4825-b944-21df90c15946.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f9407a4-a24d-44ee-96b6-d2534b1c2216.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs00185c9a-a2d6-45bf-8f9b-4000824a2e0f.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd0f1706-8d81-4221-b698-2b50060b8403.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7536cc10-52bd-46d2-9aec-e5fb8a52d666.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6bcb4e66-df12-46b4-ba5e-9d37ca7b37dc.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9e233e0b-a1d3-4ce1-b1de-d7c47448c1d8.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb10258a-16b5-46aa-a2d2-35ede5d77a0e.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs93b5949c-46a8-45e7-bffd-de83a4de95ed.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cf43bc5-c0a0-4fc2-a474-b4361a016224.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4345bcb9-be1a-4a2d-b3c9-059fdba09e8f.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1f42aa72-622f-4e2f-adc1-519ebfec9e01.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3308aefe-b459-4057-a66c-930471a797e9.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsaf8ba453-79c3-460c-b6b6-bd429b797e2d.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5f9f8d6d-6f52-4cf8-9d92-1f25bfc923e7.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6b32cb22-2363-4aa5-9b64-af390edef6ea.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7c61fcfb-b203-4f19-9b8e-c5d50e920fd2.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb315e7a7-f9f3-4f6c-bd7b-0e69de37ed62.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdba14735-ae75-4483-ab64-de261bbc930d.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbb7670fc-c150-4168-82f8-699fb72c67e9.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2b187c42-f1c3-448f-9ed2-b8bcc4103fb9.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82d7a36a-0ae6-4bc9-904c-e2f7f0f32bf8.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa6f3db49-61dc-4985-a6c2-fe7c5487bd23.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0bc1f74b-e875-451c-aaf5-079db1fe535a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsda52b68a-2f4f-4931-acf0-fcb99afb67ff.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdba09d40-da58-4b63-b02f-a50770c1f29b.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs580b8f5c-2434-4763-aa85-84e10a9859bb.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7652830b-13c0-4a0f-94c8-2439eb04f530.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86f28732-2903-4b11-b3d1-7c120699fb41.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6acf94e0-38c9-4c9d-85e8-607b5a727477.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs440c9826-c792-430d-af82-e93a85a7b899.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa6428948-dec4-4128-9719-5f97141360a9.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2ec7a9ea-063d-4825-a269-78da329eea23.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa667094c-68ed-4894-a45a-d4657c21b457.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4da28bcc-962c-41fb-a911-f49bcf000ec0.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs445eab0a-bf6a-4045-b447-5443f87c10f1.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d38f686-4949-4099-a1c4-8e10c762d95f.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e7f075b-4f82-45e7-b128-96c18780386d.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5c6ba0d0-0a12-4cfc-ab76-0a2c0b4f9a88.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa048a316-64cd-442b-82e3-625bea1101a3.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs568190a9-54ef-4f5d-9c7f-81707573e0c7.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs242f97ce-2fa9-4c20-9c6c-b623af992afc.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs769de801-ca37-4a35-89f2-bd36396ddcd4.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs58fdf5a6-797e-4171-8d4a-98e274b6d138.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs32b45331-0b53-45db-9730-56d92d351710.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa7571d4a-6a9d-4b96-bacc-bc2f61f84ced.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb26d834-0b89-47f2-876e-3ca621726402.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4bd07284-e7ba-442a-8007-ce7046203363.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f8392c6-6bf2-4140-b61b-2ad079becd12.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9e03a199-221f-4500-8f7f-a4602087383a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb94e8bd0-798f-4599-be1b-744475593760.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsad47439d-61e5-44d3-9c02-cf3c5d8c7ae1.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs289fc0eb-31ae-4d01-ba95-40aca96c6405.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1ba6480f-fa33-4135-86e5-68522795c535.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs634aacb3-0cfd-4d9a-b116-3fda47a31631.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd02922aa-f50e-4e3a-9f29-0b7ed5758825.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf2b49fc5-2334-4ae0-8e6c-50599f379658.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs60f2a473-8c76-4604-80f8-6120b848f126.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa74546e3-aa57-452b-a8dc-0bf195818c60.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs734a746e-4a32-4c76-b984-4c56c886566e.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs483374e1-06b5-4137-bb49-41a75ae334bd.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2ce211f5-2920-4866-ab1f-930632db9533.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs51b11852-3d2f-4702-bca5-d307d56be072.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3388bf66-a1cc-4b34-91ad-d2855a927189.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse1171eb4-df10-4376-b6be-a3bd3d61841b.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs063034f2-1d62-40ec-8179-4e86374fad23.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf84301af-b809-4739-9f31-e643cedb45f8.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4c8e4652-3189-4146-8dce-0b49e50b218a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs516cb609-4687-4da4-ba7e-dcd05135f31a.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9b191d1b-bf48-4e89-884c-61ab569e5f8e.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9220eae5-5e0f-436b-b8cf-346dd85d2206.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa10443b5-82d5-4b8d-9d65-b7b91630aad2.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs556ce187-26b6-4e01-a9ef-6d623983a84e.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5fede4c-2480-4e39-b9e1-06af4f964dd5.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs74bdae3e-a649-4c6d-8ea4-ca2a9c311a23.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs73fc0d3e-8d5b-43da-94f6-7e8b3f761bc3.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4daf7bf2-7841-460f-a8c4-652c45b7eeb9.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs46f1e528-7ef8-4374-a800-0c9e885ec98d.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse641d570-38a2-4e7c-83f5-ed2757848677.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3dfb2292-3e0d-424b-8427-f41d32692c00.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs948fe6b6-b489-4dd8-b7a9-6fa0f9c9d3da.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7deb36f8-44e7-435c-a93c-3369ab1956f4.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30392373-78a3-4ede-a2d9-0d7cc9c05585.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs709f5ca3-1e74-4f25-ab29-32e3ddb152b3.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse61b08d1-3336-484c-b880-ead18cee5954.tmp". The process cannot access the file because it is being used by another process 3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs429fa599-edfb-4b72-823a-1213f6c806cc.tmp". The process cannot access the file because it is being used by another process 3:40 PM: File Sweep Complete, Elapsed Time: 00:54:22 3:40 PM: Full Sweep has completed. Elapsed time 01:05:46 3:40 PM: Traces Found: 0 2:34 PM: Program Version 4.5.9 (Build 711) Using Spyware Definitions 617 2:34 PM: | End of Session, Sunday, February 19, 2006 | ******** 10:29 AM: | Start of Session, Sunday, February 19, 2006 | 10:29 AM: Spy Sweeper started 10:29 AM: Sweep initiated using definitions version 617 10:29 AM: Starting Memory Sweep 10:42 AM: Memory Sweep Complete, Elapsed Time: 00:12:56 10:42 AM: Starting Registry Sweep 10:43 AM: Found Adware: brilliant digital 10:43 AM: HKCR\.s3d\ (1 subtraces) (ID = 104924) 10:43 AM: HKLM\software\classes\.s3d\ (1 subtraces) (ID = 104956) 10:46 AM: Found Adware: gozilla 10:46 AM: HKCR\gozilla.netscape.protocol\ (3 subtraces) (ID = 126953) 10:46 AM: HKCR\clsid\{7486d4f4-8fbd-11d2-bbbe-00609419f467}\ (7 subtraces) (ID = 126956) 10:46 AM: HKCR\clsid\{8a9aefe1-924a-11d1-91bf-bc1505c10000}\ (7 subtraces) (ID = 126957) 10:49 AM: Found Adware: quicklink search toolbar 10:49 AM: HKCR\permeation.permeater\ (3 subtraces) (ID = 1133968) 10:49 AM: HKCR\permeation.permeater.1\ (3 subtraces) (ID = 1133972) 10:49 AM: HKCR\permeation.trecker\ (3 subtraces) (ID = 1133976) 10:49 AM: HKCR\permeation.trecker.1\ (3 subtraces) (ID = 1133980) 10:49 AM: HKCR\clsid\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (10 subtraces) (ID = 1133998) 10:49 AM: HKCR\typelib\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (9 subtraces) (ID = 1134093) 10:49 AM: HKLM\software\classes\permeation.permeater\ (3 subtraces) (ID = 1134157) 10:49 AM: HKLM\software\classes\permeation.permeater.1\ (3 subtraces) (ID = 1134161) 10:49 AM: HKLM\software\classes\permeation.trecker\ (3 subtraces) (ID = 1134165) 10:49 AM: HKLM\software\classes\permeation.trecker.1\ (3 subtraces) (ID = 1134169) 10:49 AM: HKLM\software\classes\clsid\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (10 subtraces) (ID = 1134187) 10:49 AM: HKLM\software\classes\typelib\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (9 subtraces) (ID = 1134251) 10:50 AM: Found Trojan Horse: dp trojan 10:50 AM: HKU\.DEFAULT\software\freeverse\viagra\ (ID = 125365) 10:50 AM: Registry Sweep Complete, Elapsed Time:00:07:52 10:50 AM: Starting Cookie Sweep 10:50 AM: Found Spy Cookie: 2o7.net cookie 10:50 AM: mwozniak@msnportal.112.2o7[1].txt (ID = 1958) 10:50 AM: mwozniak@microsofteup.112.2o7[1].txt (ID = 1958) 10:50 AM: Found Spy Cookie: go.com cookie 10:50 AM: mwozniak@rsi.abcnews.go[1].txt (ID = 2729) 10:50 AM: Found Spy Cookie: statcounter cookie 10:50 AM: mwozniak@statcounter[1].txt (ID = 3447) 10:50 AM: Found Spy Cookie: bluestreak cookie 10:50 AM: mwozniak@bluestreak[1].txt (ID = 2314) 10:50 AM: Found Spy Cookie: questionmarket cookie 10:50 AM: mwozniak@questionmarket[1].txt (ID = 3217) 10:50 AM: Found Spy Cookie: server.iad.liveperson cookie 10:50 AM: mwozniak@server.iad.liveperson[1].txt (ID = 3341) 10:50 AM: Found Spy Cookie: tribalfusion cookie 10:50 AM: mwozniak@tribalfusion[2].txt (ID = 3589) 10:50 AM: Found Spy Cookie: 360i cookie 10:50 AM: mwozniak@ct.360i[2].txt (ID = 1962) 10:50 AM: mwozniak@go[1].txt (ID = 2728) 10:50 AM: Found Spy Cookie: tacoda cookie 10:50 AM: mwozniak@tacoda[1].txt (ID = 6444) 10:50 AM: mwozniak@abcnews.go[1].txt (ID = 2729) 10:50 AM: Found Spy Cookie: pointroll cookie 10:50 AM: mwozniak@ads.pointroll[1].txt (ID = 3148) 10:50 AM: Found Spy Cookie: addynamix cookie 10:50 AM: mwozniak@ads.addynamix[1].txt (ID = 2062) 10:50 AM: Found Spy Cookie: trafficmp cookie 10:50 AM: mwozniak@trafficmp[1].txt (ID = 3581) 10:50 AM: mwozniak@2o7[1].txt (ID = 1957) 10:50 AM: Found Spy Cookie: nextag cookie 10:50 AM: mwozniak@nextag[1].txt (ID = 5014) 10:50 AM: Found Spy Cookie: overture cookie 10:50 AM: mwozniak@perf.overture[1].txt (ID = 3106) 10:50 AM: mwozniak@data3.perf.overture[1].txt (ID = 3106) 10:50 AM: Cookie Sweep Complete, Elapsed Time: 00:00:11 10:50 AM: Starting File Sweep 10:50 AM: Warning: Failed to open file "c:\win386.swp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a710ab7-0684-4c12-a352-054b94afdf4e.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7cd772f4-7f21-4abb-9a43-4eb02156b7ee.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs939164d4-f4db-41a1-97c6-e23c7bad0004.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsea099f6b-708d-4fb8-98d3-4ba0fe9b5883.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs29ff25cf-f798-4dd2-b956-8cec76df7fbe.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc207d581-6f79-4453-9c0f-9b780bee02e7.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs096d11bf-6633-40fa-a400-c40b60c20797.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97638816-60d4-4c42-82db-4f9586520475.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs25d279a0-406a-4949-adbf-165898f7ab3d.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0c75c2c9-204b-4c5e-bad6-85240d8cbb93.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs215e5feb-3963-425f-8277-321fa3d4675d.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6c19bef7-00e0-4f90-8515-082964df7b99.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs143dfb84-bd4a-44e5-951a-3ec25c70fb8a.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86dbecce-c572-441f-99aa-12dfc4328a9d.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7acfccef-84b6-4bce-9b71-260973c5ef47.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseab3810f-ee85-4035-90df-fe484dae8b36.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf60aec67-b2d9-493e-b392-1b67defb3d2b.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs05851080-7130-4972-86cf-8d66110d5bd3.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34bab8e3-2af2-4c82-b901-a7ae0b21f5bc.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs71e0e31e-d966-47af-9fdc-f65e2194baad.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc232dbef-ea12-45e1-bf9c-3af0154f3314.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs51d20c64-41d2-46be-8ad3-dc4768693a11.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd29821a1-9745-4f37-9036-3354dd121585.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs02c2d685-be95-4eb7-a20d-dc2c8110d606.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb311857b-f324-43af-8ae8-52ded6ac58e1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs06b2fe7d-eed3-4008-9b4e-56a92b09161c.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6c44c177-e4fa-4024-a24b-4306dea21e78.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs163c735d-79b6-46d8-b1a7-63b56debd8c1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cc65d84-ab2a-4c75-9e28-6c1a3e0985a0.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbba45fda-2cdb-49d6-82a8-cf86982219db.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs28da88f5-9f3b-4751-a8fc-70fa1313fecb.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3beacde7-0dbc-40b7-94c8-21071018d984.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf717208f-4164-45f9-9bdf-1a1d3638b905.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd2700c34-6080-4d84-9389-09eaf6d5fe1c.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsefe6f3c3-42a0-4e1a-9bd4-e2f469562109.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9f6edf60-ec88-4b4d-8c9c-6f0628a0c443.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8ff8b8a5-5716-410f-8754-a891491d3e2c.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e4da74e-7c7e-4405-b57b-89cd61ac7a68.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs89ba7dae-4c92-416f-a0c7-c19580b87367.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse1380175-8fd2-4887-bfd5-b24be90416f0.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5a728e2e-0844-4166-b917-39cee19ef7df.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0da23566-1269-4a71-b071-6e11d1e3502c.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsea7bbc87-f79a-4aee-bc15-06523c434b3f.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs94bb1f3f-c868-47a6-bf9d-3cf0f2219759.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8c81e9db-acd4-445a-9ecc-041e2e720cd4.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5bcf042-7bad-4d0f-8aad-b968de5236fe.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef635f4c-1839-49fe-bf01-67507e27f9d8.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs799f3380-3df7-4a6f-a098-a8a6dff0ec3e.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa8aa37d1-ab40-440b-a314-fbe8b58de061.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0fbd8ffc-6137-48bf-a326-3f92951ed01b.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs191494a8-eea6-4706-89b1-86073f27e174.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs123eacde-54a9-4729-a51b-e8608937f3bf.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7e06cd2e-39da-44cb-93a5-cbd57f445524.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd1def87f-ba66-4c95-b706-cbe5233931c5.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3fa6bcb5-ec63-4ec1-b0b3-47db99956bde.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf98f58ac-529b-46eb-aec8-dfb15df51bce.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc2356e69-9f2f-4ed5-8da2-5e8ae5831f04.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse2eed6c3-5560-4e2e-bb55-b53414a694aa.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs41c83f1a-f585-451b-8f58-06aa66f891ce.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd1f9b99a-eac1-4d1e-84c0-85888bade54c.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs96242f35-2c37-43dc-89aa-cea9d3180d97.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6ef7aeb1-ac24-47ed-976c-e94a9554286f.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3b49fa96-eb00-4711-99af-6141122677e3.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs56fd5ec5-53d1-4435-8763-9ece6a142802.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5acda695-ccf6-469b-a232-297508280605.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse8ddf49a-9960-444b-a93e-845182696525.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7d491b59-ad1e-4556-8212-4c90d54ada2f.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4c84c163-bc8d-462d-9490-6ae72292dc8d.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86d2dff1-92a0-479a-bc0f-b8936f7f57ec.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4020de52-aaea-4743-b225-95c0b232ddf1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0fa89bed-59cd-4744-a629-ff48cea071ab.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d874e11-e2a8-409c-85fb-866be2984f4b.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs423ca0df-cb8f-470a-b231-9e9dc5d104b6.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf874d23a-eba2-40c9-b3ae-2ce56d2dfe21.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse7160da0-ed41-47e8-85c5-15898bb2f8f4.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5f79dc65-f2fa-44bf-843d-45bc15ed20dd.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs61e09c7e-c602-405a-9cfd-220cf8d076cc.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs72bddbc5-fb0b-44b0-b950-d2d411fd21ef.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs487f6b47-85b4-49ca-b638-ff5153358e17.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs046de0e9-7b93-4d9d-951d-e659228c8e02.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82eb4687-144e-4c29-ab76-37b5cb9f7209.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a3c1e7a-ac3d-4ff6-9a62-2081ed1d0319.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse28311c1-0d85-439a-89da-b43c13103f56.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs900dd0b4-7557-42fc-9a40-9e646cbbaca1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9521377-47c2-44ad-b841-6f87cfce1ac1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs89c53e6c-555e-4947-8eac-519be0f35f32.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7e583d80-7945-41a7-adb1-0173ab1903e9.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2c599558-f482-4d48-9641-5cabea969178.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb0e1a7d7-2138-46ea-b007-a6a3415f693d.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa58dda46-83cf-44f4-b5bd-5926c85fbdde.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf5a6ce64-8741-47e6-9763-216a36866c99.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7352e829-3d35-4b1b-98a8-829a038977b1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsffa1f798-8979-4b76-b843-5e64235857e1.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9067c24e-0320-4733-a0e1-3bc08c828667.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82fc12de-23de-425e-a323-9f1df5da0d44.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e82b582-d725-46b5-a56c-44373746dc56.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfed20898-fbe5-4387-919e-d046f56d2b9e.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2036f8df-2a31-49c6-8317-e593ba0da1a8.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs66a3db5f-f78c-43a7-86b8-89c9ae49f877.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscba8d78e-8834-4c1b-94b9-6d880756244f.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs42bd0a14-457b-47b8-ab0d-1f902cbd6ba9.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd31f4da-9c4a-4276-8c59-8eccc51fffdc.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa46773ae-fd73-4932-90ea-437835e150ed.tmp". The process cannot access the file because it is being used by another process 11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30df88be-9f44-4ae1-ad03-d3c93ef6d67c.tmp". The process cannot access the file because it is being used by another process 12:17 PM: Traces Found: 121

[toscane]

According to the very trustworthy site CastleCops this is a legit file:
http://castlecops.com/o20list-154.html

However, some malware camouflages themselves as Interceptor:
http://www.file.net/...ceptor.dll.html

You can always download and find out if it is malware or not:
http://www.neuber.co...ml?ref=file.net

Please post back those results.

Edited by toscane, 22 February 2006 - 05:08 PM.

[toscane]

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php