toscane
Yes, Lucallbackproxy.exe is part of the Live Update process of Norton anti-virus.
Did you remove that entry in safe mode as well?
Spyware / Malware / Virus Removal
Can't delete windows\hosts
44 min read
mstanley
I didn't remove anything in safe mode. What specifically are you refering to when you say entry? I didn't touch the Lucallbackproxy file.
toscane
Still can't Fix O18 - Protocol: pcncdf - (no CLSID) - (no file) and keep it from coming back.
Did you try to remove it in safe mode? If this also failed, I would not take much attention to this entry since there is no CLSID and no active file running.
Can you run AdAware safely now?
I suggest to use Spybot as well:
Download Spybot Search & Destroy
Spybot S&D tutorial
Install the program and launch it.
Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D
Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the (RED) entries.
mstanley
That entry remains even after attempted Fix in Safe Mode.
Ran Spybot didn't find anything.
Ad-Aware will run.
Is there a untility to remove Suggestor.o, MDH.e, and Runner.h ???
toscane
In postnr. #27# I asked you to remove those files that belong to the virusses Escan found. The other files were found in System Restore and I already asked you to clear that.
You may run the Escan once more and lets see what it finds now.
mstanley
I completed the tasks outlined in Post# 27 when instructed.
I know titno.exe is still on the system.
Thanks for your assitance.
I'll run the scan again and advise.
toscane
Please sow the exact path of titno.exe
Download WinPFind.zip
Extract WinPFind.zip to your c:\ folder.
Please print these instructions as you will be going into safe mode.
Reboot your computer into Safe Mode by following the following steps:
Reboot.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
Then open c:\WinPFind and double-click on WinPFind.exe. When the program is open, click on the Start Scan button to scart scanning your computer. Be patient as this scan may take a while. When it is done, it will show a log and tell you the scan is completed. Reboot your computer back to normal mode and and post the contents of c:\WinPFind\WinPFind.txt as a reply to this topic.
Download WinPFind.zip
Extract WinPFind.zip to your c:\ folder.
Please print these instructions as you will be going into safe mode.
Reboot your computer into Safe Mode by following the following steps:
Reboot.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
Then open c:\WinPFind and double-click on WinPFind.exe. When the program is open, click on the Start Scan button to scart scanning your computer. Be patient as this scan may take a while. When it is done, it will show a log and tell you the scan is completed. Reboot your computer back to normal mode and and post the contents of c:\WinPFind\WinPFind.txt as a reply to this topic.
mstanley
titno.exe is found at:
C:\windows\system\titno.exe
mstanley
WinPFind.log
WARNING: not all files found by this scanner are bad. Consult with a knowledgable person before proceeding.
If you see a message in the titlebar saying "Not responding…" you can ignore it. Windows somethimes displays this message due to the high volume of disk I/O. As long as the hard disk light is flashing, the program is still working properly.
»»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Product Name: Windows Millennium Edition Version: 4.90.3000
Internet Explorer Version: 6.0.2800.1106
»»»»»»»»»»»»»»»»» Checking Selected Standard Folders »»»»»»»»»»»»»»»»»»»»
Checking %SystemDrive% folder…
Checking %ProgramFilesDir% folder…
Checking %WinDir% folder…
PECompact2 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185
qoologic 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185
SAHAgent 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\VPTNFILE.185
PECompact2 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185
qoologic 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185
SAHAgent 1/31/2006 10:16:48 AM 17563435 C:\WINDOWS\LPT$VPN.185
UPX! 1/31/2006 10:16:50 AM 1077328 C:\WINDOWS\vsapi32.dll
aspack 1/31/2006 10:16:50 AM 1077328 C:\WINDOWS\vsapi32.dll
UPX! 1/31/2006 10:16:52 AM 176709 C:\WINDOWS\tsc.exe
Checking %System% folder…
WinShutDown 8/8/1997 8:00:00 AM 72192 C:\WINDOWS\SYSTEM\WPAUTO8.DLL
WinShutDown 8/8/1997 8:00:00 AM 68096 C:\WINDOWS\SYSTEM\PRAUTO8.DLL
PTech 8/22/1998 12:24:08 AM 74460 C:\WINDOWS\SYSTEM\OLFAXDRV.DRV
WinShutDown 8/8/1997 8:00:00 AM 64000 C:\WINDOWS\SYSTEM\PFAUTO8.DLL
WinShutDown 8/8/1997 8:00:00 AM 68096 C:\WINDOWS\SYSTEM\QPAUTO8.DLL
PTech 11/9/1999 3:55:54 PM 88571 C:\WINDOWS\SYSTEM\MDACRDME.HTM
PTech 11/4/2005 4:27:24 PM 534280 C:\WINDOWS\SYSTEM\LegitCheckControl.DLL
Checking %System%\Drivers folder and sub-folders…
Checking the Windows folder and sub-folders for system and hidden files within the last 60 days…
2/14/2006 7:43:02 AM RH 6246432 C:\WINDOWS\CLASSES.DAT
2/14/2006 8:15:46 AM RH 4067360 C:\WINDOWS\SYSTEM.DAT
2/14/2006 8:17:28 AM RH 1703968 C:\WINDOWS\USER.DAT
2/12/2006 12:16:44 PM H 39203 C:\WINDOWS\ttfCache
2/14/2006 7:57:26 AM H 1008164 C:\WINDOWS\ShellIconCache
2/12/2006 1:38:10 PM H 425 C:\WINDOWS\TEMP\ffastlog.txt
2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\desktop.ini
2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\4TAR0H67\desktop.ini
2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\WPOWY9SJ\desktop.ini
2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\SVDCB71N\desktop.ini
2/8/2006 6:26:38 AM HS 67 C:\WINDOWS\TEMP\Temporary Internet Files\Content.IE5\M96TX5HP\desktop.ini
2/8/2006 6:26:38 AM HS 113 C:\WINDOWS\TEMP\History\History.IE5\desktop.ini
2/1/2006 8:52:20 PM HS 67 C:\WINDOWS\Temporary Internet Files\desktop.ini
2/6/2006 7:52:08 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\desktop.ini
2/6/2006 7:52:46 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\XJJNLHOE\desktop.ini
2/6/2006 9:51:04 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\CRX3EQ3T\desktop.ini
2/6/2006 9:51:04 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\OHO1ANG9\desktop.ini
2/6/2006 9:52:38 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\JY473D85\desktop.ini
2/6/2006 10:10:20 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\T7QRYH61\desktop.ini
2/6/2006 10:37:26 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\0H27SDMV\desktop.ini
2/6/2006 10:37:26 AM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\1K6OJ9UY\desktop.ini
2/6/2006 9:24:58 PM HS 67 C:\WINDOWS\Temporary Internet Files\Content.IE5\0JKRGZIV\desktop.ini
2/14/2006 8:17:12 AM H 143488 C:\WINDOWS\PCHEALTH\HELPCTR\Database\HelpSessionHistory.stream
2/14/2006 8:15:00 AM HS 2226 C:\WINDOWS\Application Data\Microsoft\Internet Explorer\Desktop.htt
2/14/2006 8:15:00 AM HS 94 C:\WINDOWS\Application Data\Microsoft\Internet Explorer\Pattern.bmp
2/7/2006 11:28:10 AM HS 4096 C:\WINDOWS\All Users\DRM\drmv2.sst
2/7/2006 11:28:08 AM HS 48 C:\WINDOWS\All Users\DRM\v2ks.sec
2/7/2006 11:28:08 AM HS 400 C:\WINDOWS\All Users\DRM\v2ks.bla
2/7/2006 11:28:08 AM HS 48 C:\WINDOWS\All Users\DRM\v2ks.sec.bak
2/7/2006 11:28:08 AM HS 400 C:\WINDOWS\All Users\DRM\v2ks.bla.bak
2/14/2006 8:01:34 AM H 6 C:\WINDOWS\Tasks\SA.DAT
1/22/2006 3:12:46 PM RHS 227 C:\WINDOWS\assembly\Desktop.ini
Checking for CPL files…
Microsoft Corporation 6/8/2000 5:00:00 PM 408576 C:\WINDOWS\SYSTEM\MMSYS.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 111616 C:\WINDOWS\SYSTEM\MAIN.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 104368 C:\WINDOWS\SYSTEM\MODEM.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 61200 C:\WINDOWS\SYSTEM\POWERCFG.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 47104 C:\WINDOWS\SYSTEM\PASSWORD.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 221280 C:\WINDOWS\SYSTEM\DESK.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 41232 C:\WINDOWS\SYSTEM\ODBCCP32.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 62464 C:\WINDOWS\SYSTEM\INTL.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 14448 C:\WINDOWS\SYSTEM\NETCPL.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 389872 C:\WINDOWS\SYSTEM\SYSDM.CPL
Microsoft Corporation 9/16/2002 9:37:16 AM 28672 C:\WINDOWS\SYSTEM\WUAUCPL.CPL
Microsoft Corporation 8/24/1996 11:11:10 AM 45968 C:\WINDOWS\SYSTEM\MLCFG32.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 79872 C:\WINDOWS\SYSTEM\APPWIZ.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 36864 C:\WINDOWS\SYSTEM\TIMEDATE.CPL
Microsoft Corporation 2/10/1999 11:48:48 AM 40960 C:\WINDOWS\SYSTEM\FINDFAST.CPL
Microsoft Corporation 8/29/2002 7:07:38 AM 292352 C:\WINDOWS\SYSTEM\INETCPL.CPL
Microsoft Corporation 6/8/2000 5:00:00 PM 15360 C:\WINDOWS\SYSTEM\TELEPHON.CPL
Microsoft Corporation 10/30/2001 8:10:00 AM 442368 C:\WINDOWS\SYSTEM\JOY.CPL
»»»»»»»»»»»»»»»»» Checking Selected Startup Folders »»»»»»»»»»»»»»»»»»»»»
Checking files in %ALLUSERSPROFILE%\Startup folder…
Checking files in %ALLUSERSPROFILE%\Application Data folder…
Checking files in %USERPROFILE%\Startup folder…
11/25/2005 9:49:38 PM 560 C:\WINDOWS\Start Menu\Programs\StartUp\Microsoft Office.lnk
Checking files in %USERPROFILE%\Application Data folder…
11/28/2005 8:50:56 AM 0 C:\WINDOWS\Application Data\dm.ini
1/29/2006 3:28:36 PM 1534 C:\WINDOWS\Application Data\dw.log
1/22/2006 3:13:14 PM 75 C:\WINDOWS\Application Data\fusioncache.dat
5/25/2001 10:28:34 AM 26838 C:\WINDOWS\Application Data\Personal Address Book.ADR
»»»»»»»»»»»»»»»»» Checking Selected Registry Keys »»»»»»»»»»»»»»»»»»»»»»»
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
{FEF10FA2-355E-4e06-9381-9B24D7F7CC88} = C:\WINDOWS\SYSTEM\SHELL32.DLL
{53C74826-AB99-4d33-ACA4-3117F51D3788} = C:\WINDOWS\SYSTEM\SHELL32.DLL
{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL
{BD472F60-27FA-11cf-B8B4-444553540000} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL
{888DCA60-FC0A-11CF-8F0F-00C04FD7D062} = C:\WINDOWS\SYSTEM\ZIPFLDR.DLL
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers]
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\BriefcaseMenu
{85BBD920-42A0-1069-A2E4-08002B30309D} = syncui.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinZip
{E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With
{09799AFB-AD67-11d1-ABCD-00C04FC30936} = C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{B95057E0-44DB-11CE-A5D1-00608C83BD3F}
= shellwp.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu
{5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2} = C:\Program Files\Norton AntiVirus\NavShExt.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\BriefcaseMenu
{85BBD920-42A0-1069-A2E4-08002B30309D} = syncui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZip
{E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\QuickFinderMenu
{C0E10002-0028-0001-C0E1-C0E1C0E1C0E1} = C:\COREL\SUITE8\PROGRAMS\PFSE80.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\Symantec.Norton.Antivirus.IEContextMenu
{5345A4D5-41EB-4A2F-9616-CE1D4F6C35B2} = C:\Program Files\Norton AntiVirus\NavShExt.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZip
{E0D79300-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\wzshlext.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\QuickFinderMenu
{C0E10002-0028-0001-C0E1-C0E1C0E1C0E1} = C:\COREL\SUITE8\PROGRAMS\PFSE80.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\SharingMenu
{6D78EC20-5AA6-101B-8681-366FBD64CEB9} = msshrui.dll
<<< WARNING! - NOT A VALID WIN98 KEY! (ME is Ok) >>>
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F01-7B1C-11d1-838f-0000F80461CF}
= C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F02-7B1C-11d1-838f-0000F80461CF}
= C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{0D2E74C4-3C34-11d2-A27E-00C04FC30871}
= C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{7ab770c7-0e23-4d7a-8aa2-19bfad479829}
= C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{884EA37B-37C0-11d2-BE3F-00A0C9A83DA1}
= C:\WINDOWS\SYSTEM\DOCPROP2.DLL
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}
CNavExtBho Class = C:\Program Files\Norton AntiVirus\NavShExt.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
&Tip of the Day = C:\WINDOWS\SYSTEM\SHDOCVW.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
{8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
MenuText = :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AC9E2541-2814-11d5-BC6D-00B0D0A1DE45}
ButtonText = AOL Instant Messenger (SM) : C:\PROGRAM FILES\AIM95\AIM.EXE
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}
Explorer Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E61-B078-11D0-89E4-00C04FC9E26E}
Favorites Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{30D02401-6A81-11D0-8274-00C04FD5AE38}
Search Band = C:\WINDOWS\SYSTEM\BROWSEUI.DLL
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E}
History Band = C:\WINDOWS\SYSTEM\SHDOCVW.DLL
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}
File and Folders Search ActiveX Control = C:\WINDOWS\SYSTEM\SHELL32.DLL
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}
Media Band = C:\WINDOWS\SYSTEM\BROWSEUI.DLL
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Links
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
{01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
{0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
{8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll
{EF99BD32-C1FB-11D2-892F-0090271D4F88} = Yahoo! Toolbar :
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
{01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
{0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : C:\WINDOWS\SYSTEM\BROWSEUI.DLL
{8E718888-423F-11D2-876E-00A0C9082467} = &Radio : C:\WINDOWS\SYSTEM\MSDXM.OCX
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} = Norton AntiVirus : C:\Program Files\Norton AntiVirus\NavShExt.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Symantec Core LC C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
Advanced Tools Check C:\PROGRA~1\NORTON~1\ADVTOOLS\ADVCHK.EXE
NPROTECT C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE
SystemTray SysTray.Exe
ScanRegistry C:\WINDOWS\scanregw.exe /autorun
PCHealth C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
EM_EXEC C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
TaskMonitor C:\WINDOWS\taskmon.exe
AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
HPDJ Taskbar Utility C:\WINDOWS\SYSTEM\hpztsb04.exe
$EnterNet C:\PROGRA~1\EFFICI~1\ENTERN~1\APP\ENTERNET.EXE -AutoStart
Symantec NetDriver Monitor C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
MSFS Installed = 1
MAPI Installed = 1
IMAIL Installed = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
*StateMgr C:\WINDOWS\System\Restore\StateMgr.exe
ccEvtMgr "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
ccSetMgr "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
NPFMonitor C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
ScriptBlocking "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
NPROTECT C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE
ALU Scheduler Service C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
SchedulingAgent mstask.exe
SSDPSRV C:\WINDOWS\SYSTEM\ssdpsrv.exe
LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
KB891711 C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce-]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx-]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices-]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce-]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run-]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce-]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices-]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce-]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ratings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network
HideSharePwds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\WinOldApp
NoRealMode 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} = C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} =
{0DF44EAA-FF21-4412-828E-260A8728E7F1} =
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
NoDriveTypeAutoRun •
NoSaveSettings
NoStartBanner
CDRAutoRun
NoDrives àÿÿ
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Network
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\comdlg32
NoBackButton 0
NoFileMru 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = C:\WINDOWS\SYSTEM\WEBCHECK.DLL
AUHook {BCBCD383-3E06-11D3-91A9-00C04F68105C} = C:\WINDOWS\SYSTEM\AUHOOK.DLL
UPnPMonitor {e57ce738-33e8-4c51-8354-bb4de9d215d1} = C:\WINDOWS\SYSTEM\UPNPUI.DLL
<<< WARNING! - NOT A VALID WIN98/ME KEY! >>>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLs Interceptor.dll
»»»»»»»»»»»»»»»»»»»»»»»» Scan Complete »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
WinPFind v1.4.1 - Log file written to "WinPFind.Txt" in the WinPFind folder.
Scan completed on 2/14/2006 8:34:03 AM
toscane
You can delelte this file: titno.exe because it is known as Adware.MDH.
For the files WinPFind found please follow this advice:
Download the trial version of Spy Sweeper
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)
You will be prompted to check for updated definitions, please do so.
(This may take several minutes)
Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
Click on Sweep and allow it to fully scan your system.
When the sweep has finished, click Remove. Click Select All and then Next
From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
Exit Spy Sweeper.
Restart your computer.
For the files WinPFind found please follow this advice:
Download the trial version of Spy Sweeper
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)
You will be prompted to check for updated definitions, please do so.
(This may take several minutes)
Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
Click on Sweep and allow it to fully scan your system.
When the sweep has finished, click Remove. Click Select All and then Next
From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
Exit Spy Sweeper.
Restart your computer.
mstanley
Ran Spy Sweeper
Found 20
and 121 traces
However, it would not remove or Save a Log without purchasing.
toscane
Well, since it removed malware from your computer quit well you can use it for as long as the trial periode goes 
How is the computer running now?
How is the computer running now?
mstanley
I didn't purchase. The work around was that I manually deleted the items identified and ran it again in safe mode. In safe mode it gave me the session log for both scans which is attached. The logs are in reverse order.
This file has been identified as malware O20 - AppInit_DLLs: Interceptor.dll. Can it be deleted?
********
2:34 PM: | Start of Session, Sunday, February 19, 2006 |
2:34 PM: Spy Sweeper started
2:34 PM: Sweep initiated using definitions version 617
2:34 PM: Starting Memory Sweep
2:41 PM: Memory Sweep Complete, Elapsed Time: 00:06:23
2:41 PM: Starting Registry Sweep
2:46 PM: Registry Sweep Complete, Elapsed Time:00:04:55
2:46 PM: Starting Cookie Sweep
2:46 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
2:46 PM: Starting File Sweep
2:46 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs823823c5-15d5-4203-9f37-966a4ae134d3.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf892c839-9ed8-4128-afc6-908b4d7028f8.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3ad07933-5efc-4902-901c-3819813d8782.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef5a5508-8ad1-425b-8e99-2ff974d7b842.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs52ecaec6-c778-46a8-9de4-e26378b61941.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5f4e436-68b1-4594-add5-94dc37d1c12a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3944d686-0054-420c-9c78-9c82d5e07f7a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf1b1619-683a-4eab-8c08-b33bea582483.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1b859366-5937-48c3-a49e-6eebcae11fa2.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse56ad5da-8b62-423b-bff9-4384b75c6735.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9de44a33-b8c9-4569-81fb-38ad940a15bc.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs70783b30-0583-4cdd-9e5a-913b9dd61d26.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs694c09fa-ed65-4f72-ab44-f4ea6c7f8801.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs216212c5-cd51-4618-ad47-dab4c49ffc27.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs836f2e61-ff70-4d56-933e-3b91f48aecf1.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs491f7e77-a563-40a6-a098-e36c4b9e8ed3.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbf200305-5afe-4e94-8a92-b6a2f65cc010.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfdb543c8-dea0-452a-8efa-a444b72c2fca.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3edc338e-49db-4825-b944-21df90c15946.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f9407a4-a24d-44ee-96b6-d2534b1c2216.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs00185c9a-a2d6-45bf-8f9b-4000824a2e0f.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd0f1706-8d81-4221-b698-2b50060b8403.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7536cc10-52bd-46d2-9aec-e5fb8a52d666.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6bcb4e66-df12-46b4-ba5e-9d37ca7b37dc.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9e233e0b-a1d3-4ce1-b1de-d7c47448c1d8.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb10258a-16b5-46aa-a2d2-35ede5d77a0e.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs93b5949c-46a8-45e7-bffd-de83a4de95ed.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cf43bc5-c0a0-4fc2-a474-b4361a016224.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4345bcb9-be1a-4a2d-b3c9-059fdba09e8f.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1f42aa72-622f-4e2f-adc1-519ebfec9e01.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3308aefe-b459-4057-a66c-930471a797e9.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsaf8ba453-79c3-460c-b6b6-bd429b797e2d.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5f9f8d6d-6f52-4cf8-9d92-1f25bfc923e7.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6b32cb22-2363-4aa5-9b64-af390edef6ea.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7c61fcfb-b203-4f19-9b8e-c5d50e920fd2.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb315e7a7-f9f3-4f6c-bd7b-0e69de37ed62.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdba14735-ae75-4483-ab64-de261bbc930d.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbb7670fc-c150-4168-82f8-699fb72c67e9.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2b187c42-f1c3-448f-9ed2-b8bcc4103fb9.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82d7a36a-0ae6-4bc9-904c-e2f7f0f32bf8.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa6f3db49-61dc-4985-a6c2-fe7c5487bd23.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0bc1f74b-e875-451c-aaf5-079db1fe535a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsda52b68a-2f4f-4931-acf0-fcb99afb67ff.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdba09d40-da58-4b63-b02f-a50770c1f29b.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs580b8f5c-2434-4763-aa85-84e10a9859bb.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7652830b-13c0-4a0f-94c8-2439eb04f530.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86f28732-2903-4b11-b3d1-7c120699fb41.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6acf94e0-38c9-4c9d-85e8-607b5a727477.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs440c9826-c792-430d-af82-e93a85a7b899.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa6428948-dec4-4128-9719-5f97141360a9.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2ec7a9ea-063d-4825-a269-78da329eea23.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa667094c-68ed-4894-a45a-d4657c21b457.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4da28bcc-962c-41fb-a911-f49bcf000ec0.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs445eab0a-bf6a-4045-b447-5443f87c10f1.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d38f686-4949-4099-a1c4-8e10c762d95f.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e7f075b-4f82-45e7-b128-96c18780386d.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5c6ba0d0-0a12-4cfc-ab76-0a2c0b4f9a88.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa048a316-64cd-442b-82e3-625bea1101a3.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs568190a9-54ef-4f5d-9c7f-81707573e0c7.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs242f97ce-2fa9-4c20-9c6c-b623af992afc.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs769de801-ca37-4a35-89f2-bd36396ddcd4.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs58fdf5a6-797e-4171-8d4a-98e274b6d138.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs32b45331-0b53-45db-9730-56d92d351710.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa7571d4a-6a9d-4b96-bacc-bc2f61f84ced.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdb26d834-0b89-47f2-876e-3ca621726402.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4bd07284-e7ba-442a-8007-ce7046203363.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7f8392c6-6bf2-4140-b61b-2ad079becd12.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9e03a199-221f-4500-8f7f-a4602087383a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb94e8bd0-798f-4599-be1b-744475593760.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsad47439d-61e5-44d3-9c02-cf3c5d8c7ae1.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs289fc0eb-31ae-4d01-ba95-40aca96c6405.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1ba6480f-fa33-4135-86e5-68522795c535.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs634aacb3-0cfd-4d9a-b116-3fda47a31631.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd02922aa-f50e-4e3a-9f29-0b7ed5758825.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf2b49fc5-2334-4ae0-8e6c-50599f379658.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs60f2a473-8c76-4604-80f8-6120b848f126.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa74546e3-aa57-452b-a8dc-0bf195818c60.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs734a746e-4a32-4c76-b984-4c56c886566e.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs483374e1-06b5-4137-bb49-41a75ae334bd.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2ce211f5-2920-4866-ab1f-930632db9533.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs51b11852-3d2f-4702-bca5-d307d56be072.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3388bf66-a1cc-4b34-91ad-d2855a927189.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse1171eb4-df10-4376-b6be-a3bd3d61841b.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs063034f2-1d62-40ec-8179-4e86374fad23.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf84301af-b809-4739-9f31-e643cedb45f8.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4c8e4652-3189-4146-8dce-0b49e50b218a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs516cb609-4687-4da4-ba7e-dcd05135f31a.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9b191d1b-bf48-4e89-884c-61ab569e5f8e.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9220eae5-5e0f-436b-b8cf-346dd85d2206.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa10443b5-82d5-4b8d-9d65-b7b91630aad2.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs556ce187-26b6-4e01-a9ef-6d623983a84e.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5fede4c-2480-4e39-b9e1-06af4f964dd5.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs74bdae3e-a649-4c6d-8ea4-ca2a9c311a23.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs73fc0d3e-8d5b-43da-94f6-7e8b3f761bc3.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4daf7bf2-7841-460f-a8c4-652c45b7eeb9.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs46f1e528-7ef8-4374-a800-0c9e885ec98d.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse641d570-38a2-4e7c-83f5-ed2757848677.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3dfb2292-3e0d-424b-8427-f41d32692c00.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs948fe6b6-b489-4dd8-b7a9-6fa0f9c9d3da.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7deb36f8-44e7-435c-a93c-3369ab1956f4.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30392373-78a3-4ede-a2d9-0d7cc9c05585.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs709f5ca3-1e74-4f25-ab29-32e3ddb152b3.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse61b08d1-3336-484c-b880-ead18cee5954.tmp". The process cannot access the file because it is being used by another process
3:02 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs429fa599-edfb-4b72-823a-1213f6c806cc.tmp". The process cannot access the file because it is being used by another process
3:40 PM: File Sweep Complete, Elapsed Time: 00:54:22
3:40 PM: Full Sweep has completed. Elapsed time 01:05:46
3:40 PM: Traces Found: 0
2:34 PM: Program Version 4.5.9 (Build 711) Using Spyware Definitions 617
2:34 PM: | End of Session, Sunday, February 19, 2006 |
********
10:29 AM: | Start of Session, Sunday, February 19, 2006 |
10:29 AM: Spy Sweeper started
10:29 AM: Sweep initiated using definitions version 617
10:29 AM: Starting Memory Sweep
10:42 AM: Memory Sweep Complete, Elapsed Time: 00:12:56
10:42 AM: Starting Registry Sweep
10:43 AM: Found Adware: brilliant digital
10:43 AM: HKCR\.s3d\ (1 subtraces) (ID = 104924)
10:43 AM: HKLM\software\classes\.s3d\ (1 subtraces) (ID = 104956)
10:46 AM: Found Adware: gozilla
10:46 AM: HKCR\gozilla.netscape.protocol\ (3 subtraces) (ID = 126953)
10:46 AM: HKCR\clsid\{7486d4f4-8fbd-11d2-bbbe-00609419f467}\ (7 subtraces) (ID = 126956)
10:46 AM: HKCR\clsid\{8a9aefe1-924a-11d1-91bf-bc1505c10000}\ (7 subtraces) (ID = 126957)
10:49 AM: Found Adware: quicklink search toolbar
10:49 AM: HKCR\permeation.permeater\ (3 subtraces) (ID = 1133968)
10:49 AM: HKCR\permeation.permeater.1\ (3 subtraces) (ID = 1133972)
10:49 AM: HKCR\permeation.trecker\ (3 subtraces) (ID = 1133976)
10:49 AM: HKCR\permeation.trecker.1\ (3 subtraces) (ID = 1133980)
10:49 AM: HKCR\clsid\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (10 subtraces) (ID = 1133998)
10:49 AM: HKCR\typelib\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (9 subtraces) (ID = 1134093)
10:49 AM: HKLM\software\classes\permeation.permeater\ (3 subtraces) (ID = 1134157)
10:49 AM: HKLM\software\classes\permeation.permeater.1\ (3 subtraces) (ID = 1134161)
10:49 AM: HKLM\software\classes\permeation.trecker\ (3 subtraces) (ID = 1134165)
10:49 AM: HKLM\software\classes\permeation.trecker.1\ (3 subtraces) (ID = 1134169)
10:49 AM: HKLM\software\classes\clsid\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (10 subtraces) (ID = 1134187)
10:49 AM: HKLM\software\classes\typelib\{2f6e85dc-8d2d-4896-8a4f-7df8a7b1749d}\ (9 subtraces) (ID = 1134251)
10:50 AM: Found Trojan Horse: dp trojan
10:50 AM: HKU\.DEFAULT\software\freeverse\viagra\ (ID = 125365)
10:50 AM: Registry Sweep Complete, Elapsed Time:00:07:52
10:50 AM: Starting Cookie Sweep
10:50 AM: Found Spy Cookie: 2o7.net cookie
10:50 AM: mwozniak@msnportal.112.2o7[1].txt (ID = 1958)
10:50 AM: mwozniak@microsofteup.112.2o7[1].txt (ID = 1958)
10:50 AM: Found Spy Cookie: go.com cookie
10:50 AM: [removed][1].txt (ID = 2729)
10:50 AM: Found Spy Cookie: statcounter cookie
10:50 AM: mwozniak@statcounter[1].txt (ID = 3447)
10:50 AM: Found Spy Cookie: bluestreak cookie
10:50 AM: mwozniak@bluestreak[1].txt (ID = 2314)
10:50 AM: Found Spy Cookie: questionmarket cookie
10:50 AM: mwozniak@questionmarket[1].txt (ID = 3217)
10:50 AM: Found Spy Cookie: server.iad.liveperson cookie
10:50 AM: [removed][1].txt (ID = 3341)
10:50 AM: Found Spy Cookie: tribalfusion cookie
10:50 AM: mwozniak@tribalfusion[2].txt (ID = 3589)
10:50 AM: Found Spy Cookie: 360i cookie
10:50 AM: mwozniak@ct.360i[2].txt (ID = 1962)
10:50 AM: mwozniak@go[1].txt (ID = 2728)
10:50 AM: Found Spy Cookie: tacoda cookie
10:50 AM: mwozniak@tacoda[1].txt (ID = 6444)
10:50 AM: [removed][1].txt (ID = 2729)
10:50 AM: Found Spy Cookie: pointroll cookie
10:50 AM: [removed][1].txt (ID = 3148)
10:50 AM: Found Spy Cookie: addynamix cookie
10:50 AM: [removed][1].txt (ID = 2062)
10:50 AM: Found Spy Cookie: trafficmp cookie
10:50 AM: mwozniak@trafficmp[1].txt (ID = 3581)
10:50 AM: mwozniak@2o7[1].txt (ID = 1957)
10:50 AM: Found Spy Cookie: nextag cookie
10:50 AM: mwozniak@nextag[1].txt (ID = 5014)
10:50 AM: Found Spy Cookie: overture cookie
10:50 AM: [removed][1].txt (ID = 3106)
10:50 AM: [removed][1].txt (ID = 3106)
10:50 AM: Cookie Sweep Complete, Elapsed Time: 00:00:11
10:50 AM: Starting File Sweep
10:50 AM: Warning: Failed to open file "c:\win386.swp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a710ab7-0684-4c12-a352-054b94afdf4e.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7cd772f4-7f21-4abb-9a43-4eb02156b7ee.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs939164d4-f4db-41a1-97c6-e23c7bad0004.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsea099f6b-708d-4fb8-98d3-4ba0fe9b5883.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs29ff25cf-f798-4dd2-b956-8cec76df7fbe.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc207d581-6f79-4453-9c0f-9b780bee02e7.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs096d11bf-6633-40fa-a400-c40b60c20797.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97638816-60d4-4c42-82db-4f9586520475.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs25d279a0-406a-4949-adbf-165898f7ab3d.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0c75c2c9-204b-4c5e-bad6-85240d8cbb93.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs215e5feb-3963-425f-8277-321fa3d4675d.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6c19bef7-00e0-4f90-8515-082964df7b99.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs143dfb84-bd4a-44e5-951a-3ec25c70fb8a.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86dbecce-c572-441f-99aa-12dfc4328a9d.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7acfccef-84b6-4bce-9b71-260973c5ef47.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseab3810f-ee85-4035-90df-fe484dae8b36.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf60aec67-b2d9-493e-b392-1b67defb3d2b.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs05851080-7130-4972-86cf-8d66110d5bd3.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34bab8e3-2af2-4c82-b901-a7ae0b21f5bc.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs71e0e31e-d966-47af-9fdc-f65e2194baad.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc232dbef-ea12-45e1-bf9c-3af0154f3314.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs51d20c64-41d2-46be-8ad3-dc4768693a11.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd29821a1-9745-4f37-9036-3354dd121585.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs02c2d685-be95-4eb7-a20d-dc2c8110d606.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb311857b-f324-43af-8ae8-52ded6ac58e1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs06b2fe7d-eed3-4008-9b4e-56a92b09161c.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6c44c177-e4fa-4024-a24b-4306dea21e78.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs163c735d-79b6-46d8-b1a7-63b56debd8c1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4cc65d84-ab2a-4c75-9e28-6c1a3e0985a0.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbba45fda-2cdb-49d6-82a8-cf86982219db.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs28da88f5-9f3b-4751-a8fc-70fa1313fecb.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3beacde7-0dbc-40b7-94c8-21071018d984.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf717208f-4164-45f9-9bdf-1a1d3638b905.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd2700c34-6080-4d84-9389-09eaf6d5fe1c.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsefe6f3c3-42a0-4e1a-9bd4-e2f469562109.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9f6edf60-ec88-4b4d-8c9c-6f0628a0c443.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8ff8b8a5-5716-410f-8754-a891491d3e2c.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e4da74e-7c7e-4405-b57b-89cd61ac7a68.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs89ba7dae-4c92-416f-a0c7-c19580b87367.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse1380175-8fd2-4887-bfd5-b24be90416f0.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5a728e2e-0844-4166-b917-39cee19ef7df.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0da23566-1269-4a71-b071-6e11d1e3502c.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsea7bbc87-f79a-4aee-bc15-06523c434b3f.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs94bb1f3f-c868-47a6-bf9d-3cf0f2219759.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8c81e9db-acd4-445a-9ecc-041e2e720cd4.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd5bcf042-7bad-4d0f-8aad-b968de5236fe.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsef635f4c-1839-49fe-bf01-67507e27f9d8.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs799f3380-3df7-4a6f-a098-a8a6dff0ec3e.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa8aa37d1-ab40-440b-a314-fbe8b58de061.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0fbd8ffc-6137-48bf-a326-3f92951ed01b.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs191494a8-eea6-4706-89b1-86073f27e174.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs123eacde-54a9-4729-a51b-e8608937f3bf.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7e06cd2e-39da-44cb-93a5-cbd57f445524.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd1def87f-ba66-4c95-b706-cbe5233931c5.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3fa6bcb5-ec63-4ec1-b0b3-47db99956bde.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf98f58ac-529b-46eb-aec8-dfb15df51bce.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc2356e69-9f2f-4ed5-8da2-5e8ae5831f04.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse2eed6c3-5560-4e2e-bb55-b53414a694aa.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs41c83f1a-f585-451b-8f58-06aa66f891ce.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd1f9b99a-eac1-4d1e-84c0-85888bade54c.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs96242f35-2c37-43dc-89aa-cea9d3180d97.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6ef7aeb1-ac24-47ed-976c-e94a9554286f.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3b49fa96-eb00-4711-99af-6141122677e3.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs56fd5ec5-53d1-4435-8763-9ece6a142802.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5acda695-ccf6-469b-a232-297508280605.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse8ddf49a-9960-444b-a93e-845182696525.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7d491b59-ad1e-4556-8212-4c90d54ada2f.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4c84c163-bc8d-462d-9490-6ae72292dc8d.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs86d2dff1-92a0-479a-bc0f-b8936f7f57ec.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4020de52-aaea-4743-b225-95c0b232ddf1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0fa89bed-59cd-4744-a629-ff48cea071ab.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d874e11-e2a8-409c-85fb-866be2984f4b.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs423ca0df-cb8f-470a-b231-9e9dc5d104b6.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf874d23a-eba2-40c9-b3ae-2ce56d2dfe21.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse7160da0-ed41-47e8-85c5-15898bb2f8f4.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5f79dc65-f2fa-44bf-843d-45bc15ed20dd.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs61e09c7e-c602-405a-9cfd-220cf8d076cc.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs72bddbc5-fb0b-44b0-b950-d2d411fd21ef.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs487f6b47-85b4-49ca-b638-ff5153358e17.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs046de0e9-7b93-4d9d-951d-e659228c8e02.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82eb4687-144e-4c29-ab76-37b5cb9f7209.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a3c1e7a-ac3d-4ff6-9a62-2081ed1d0319.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse28311c1-0d85-439a-89da-b43c13103f56.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs900dd0b4-7557-42fc-9a40-9e646cbbaca1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse9521377-47c2-44ad-b841-6f87cfce1ac1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs89c53e6c-555e-4947-8eac-519be0f35f32.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7e583d80-7945-41a7-adb1-0173ab1903e9.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2c599558-f482-4d48-9641-5cabea969178.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb0e1a7d7-2138-46ea-b007-a6a3415f693d.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa58dda46-83cf-44f4-b5bd-5926c85fbdde.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf5a6ce64-8741-47e6-9763-216a36866c99.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7352e829-3d35-4b1b-98a8-829a038977b1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsffa1f798-8979-4b76-b843-5e64235857e1.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9067c24e-0320-4733-a0e1-3bc08c828667.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82fc12de-23de-425e-a323-9f1df5da0d44.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2e82b582-d725-46b5-a56c-44373746dc56.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfed20898-fbe5-4387-919e-d046f56d2b9e.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2036f8df-2a31-49c6-8317-e593ba0da1a8.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs66a3db5f-f78c-43a7-86b8-89c9ae49f877.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscba8d78e-8834-4c1b-94b9-6d880756244f.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs42bd0a14-457b-47b8-ab0d-1f902cbd6ba9.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd31f4da-9c4a-4276-8c59-8eccc51fffdc.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa46773ae-fd73-4932-90ea-437835e150ed.tmp". The process cannot access the file because it is being used by another process
11:25 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30df88be-9f44-4ae1-ad03-d3c93ef6d67c.tmp". The process cannot access the file because it is being used by another process
12:17 PM: Traces Found: 121
toscane
According to the very trustworthy site CastleCops this is a legit file:
http://castlecops.com/o20list-154.html
However, some malware camouflages themselves as Interceptor:
http://www.file.net/process/interceptor.dll.html
You can always download and find out if it is malware or not:
http://www.neuber.com/taskmanager/index.html?ref=file.net
Please post back those results.
http://castlecops.com/o20list-154.html
However, some malware camouflages themselves as Interceptor:
http://www.file.net/process/interceptor.dll.html
You can always download and find out if it is malware or not:
http://www.neuber.com/taskmanager/index.html?ref=file.net
Please post back those results.
toscane
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI