Alllllriiiiighty then…..
I uninstalled the version of Spy Sweeper and looked for a trial version download and that seemed to be my problem there.
CWShredder did not find anything.
Spybot S&D; did not find anything.
Ad-Aware was completed and items were quarantined.
I re-ran Spy Sweeper (the new download). During the step where I was to remove all, something went wrong and the S.S. asked I send them an error report, which I did so they would have any details. Here is my S. S. log:
********
10:20 AM: | Start of Session, Tuesday, April 11, 2006 |
10:20 AM: Spy Sweeper started
10:20 AM: Sweep initiated using definitions version 654
10:20 AM: Starting Memory Sweep
10:25 AM: Memory Sweep Complete, Elapsed Time: 00:05:07
10:25 AM: Starting Registry Sweep
10:25 AM: Found Adware: bingofun games
10:25 AM: HKCR\clsid\{aaa8135f-d41a-4e85-a40f-58e6be393e6f}\ (2 subtraces) (ID = 104416)
10:25 AM: HKLM\software\classes\clsid\{aaa8135f-d41a-4e85-a40f-58e6be393e6f}\ (2 subtraces) (ID = 104417)
10:26 AM: Found Adware: surfsidekick
10:26 AM: HKLM\software\surfsidekick3\ (2 subtraces) (ID = 143413)
10:26 AM: Found Adware: dollarrevenue
10:26 AM: HKLM\software\policies\ || {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} (ID = 916803)
10:26 AM: HKLM\software\policies\ || {6bf52a52-394a-11d3-b153-00c04f79faa6} (ID = 967836)
10:26 AM: HKLM\software\policies\ || {645ff040-5081-101b-9f08-00aa002f954e} (ID = 1036890)
10:26 AM: Found Adware: seekmo search assistant
10:26 AM: HKU\.DEFAULT\software\microsoft\cryptography\userkeys\one8tsolutionscont@in3rn@me\ (4 subtraces) (ID = 782153)
10:26 AM: Registry Sweep Complete, Elapsed Time:00:01:23
10:26 AM: Starting Cookie Sweep
10:26 AM: Found Spy Cookie: 2o7.net cookie
10:26 AM: default@microsofteup.112.2o7[1].txt (ID = 1958)
10:26 AM: default@msnportal.112.2o7[1].txt (ID = 1958)
10:26 AM: Found Spy Cookie: atwola cookie
10:26 AM: default@atwola[1].txt (ID = 2255)
10:26 AM: default@bookspan.122.2o7[1].txt (ID = 1958)
10:26 AM: Found Spy Cookie: pch cookie
10:26 AM: [removed][1].txt (ID = 3124)
10:26 AM: Found Spy Cookie: ask cookie
10:26 AM: default@ask[1].txt (ID = 2245)
10:26 AM: Found Spy Cookie: yieldmanager cookie
10:26 AM: [removed][1].txt (ID = 3751)
10:26 AM: Found Spy Cookie: directtrack cookie
10:26 AM: [removed][2].txt (ID = 2528)
10:26 AM: default@stubhub.122.2o7[1].txt (ID = 1958)
10:26 AM: Found Spy Cookie: stamps.com cookie
10:26 AM: [removed][1].txt (ID = 3438)
10:26 AM: Found Spy Cookie: burstbeacon cookie
10:26 AM: [removed][1].txt (ID = 2335)
10:26 AM: [removed][2].txt (ID = 2528)
10:26 AM: Found Spy Cookie: dealtime cookie
10:26 AM: [removed][2].txt (ID = 2506)
10:26 AM: Found Spy Cookie: specificclick.com cookie
10:26 AM: [removed][2].txt (ID = 3400)
10:26 AM: Found Spy Cookie: columbiahouse cookie
10:26 AM: default@columbiahouse[2].txt (ID = 2443)
10:26 AM: default@ford.112.2o7[1].txt (ID = 1958)
10:26 AM: [removed][3].txt (ID = 3751)
10:26 AM: default@redcats.122.2o7[1].txt (ID = 1958)
10:26 AM: default@columbiahouse[1].txt (ID = 2443)
10:26 AM: [removed][3].txt (ID = 2528)
10:26 AM: Found Spy Cookie: gostats cookie
10:26 AM: [removed][2].txt (ID = 2748)
10:26 AM: [removed][1].txt (ID = 3400)
10:26 AM: Found Spy Cookie: tacoda cookie
10:26 AM: default@tacoda[1].txt (ID = 6444)
10:26 AM: Found Spy Cookie: adknowledge cookie
10:26 AM: default@adknowledge[2].txt (ID = 2072)
10:26 AM: [removed][2].txt (ID = 2335)
10:26 AM: default@dealtime[1].txt (ID = 2505)
10:26 AM: Found Spy Cookie: adecn cookie
10:26 AM: default@adecn[2].txt (ID = 2063)
10:26 AM: Found Spy Cookie: overture cookie
10:26 AM: [removed][1].txt (ID = 3106)
10:26 AM: Found Spy Cookie: about cookie
10:26 AM: [removed][2].txt (ID = 2038)
10:26 AM: Found Spy Cookie: adlegend cookie
10:26 AM: default@adlegend[1].txt (ID = 2074)
10:26 AM: default@about[1].txt (ID = 2037)
10:26 AM: [removed][1].txt (ID = 2506)
10:26 AM: [removed][1].txt (ID = 2506)
10:26 AM: [removed][2].txt (ID = 3751)
10:26 AM: Cookie Sweep Complete, Elapsed Time: 00:00:05
10:26 AM: Starting File Sweep
10:26 AM: Found Trojan Horse: lzio
10:26 AM: real.exe (ID = 254866)
10:26 AM: Found Trojan Horse: trojan downloader matcash
10:26 AM: new_pop.exe (ID = 252852)
10:27 AM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because
it is being used by another process
10:27 AM: Found Adware: enbrowser
10:27 AM: checks02.exe (ID = 251279)
10:34 AM: Found Adware: zenosearchassistant
10:34 AM: msnav32.ax (ID = 220229)
10:34 AM: pre2.exe (ID = 250773)
10:34 AM: setup95.exe (ID = 251313)
10:39 AM: Found Adware: effective-i toolbar
10:39 AM: glb71b4.tmp (ID = 253666)
10:39 AM: explorer.exe (ID = 247512)
10:39 AM: Found Adware: elitemediagroup-mediamotor
10:39 AM: mcspy.exe (ID = 251295)
10:39 AM: glb8100.tmp (ID = 253666)
10:39 AM: Found Adware: bullguard popup ad
10:39 AM: c:\windows\temp\bullguard (1 subtraces) (ID = -2147476409)
10:39 AM: bulldownload.exe (ID = 52017)
10:41 AM: Found System Monitor: win-spy monitor
10:41 AM: c:\windows\dll (1 subtraces) (ID = -2147480025)
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0cecde79-3612-44f1-b14b-71daed4320aa.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscfc5dfc9-43f2-49b7-9939-1ed9975e0491.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs838b16fb-479c-41ee-9f6a-390d242181cb.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd4e865b5-d00d-4646-82c4-cc5b520dbfbe.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7d1f3afb-aefb-47fa-ac14-f4a890509d1b.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0297b563-3fb5-4c9d-a22e-9c542a42e534.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc07a8b77-6005-4144-adab-bba5374d6d4a.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscb27eafa-9cd0-4ca4-92f6-de40b47eb331.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs768cbcab-af93-4c04-aafd-509500ead6b1.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa2c5b059-3115-49d5-8440-9aee5acdeb0d.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscc987c51-cf3b-4a9f-96e1-443070b04fc4.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97159dea-5c05-44e0-9706-2cc45d8d6857.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd7c28354-97d0-4d93-bf1b-994cfb7f9db9.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4a953a58-d536-4787-8bbc-891fdd55f590.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdc753eb1-4cd9-4f8f-833f-e7431ae84eb4.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb179aaa4-209b-452d-9816-ded91dce391e.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse3d3f108-ad84-4d42-b7e5-9795c1a8a497.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf0f11049-2130-433d-8cf0-36bc799581f6.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7a0b7d71-72a0-40b6-9d70-687ce6ed57a0.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf4194589-4d58-4866-9aa9-594b408918d5.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7c9d8bbb-3258-4fae-850e-a001d13886fe.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsea94f3f5-043d-47b3-92be-d6783acec7cf.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs998260a7-749b-4f10-a2d9-f7e0c513a5fb.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1c8678d5-9663-4655-a0c5-80ca52ae0621.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfe27b179-6345-4ec8-bfb4-220914ef90e2.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa8e20721-ea45-4d1e-8ee5-be1befe67fb8.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa3c3d32b-0029-40e2-bc8d-5c6b96dac054.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa7f55d62-2755-4242-bdba-a0b59879c128.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3fdf7702-e80a-4cf0-a068-ecefed492a0a.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8d97bf40-c66c-431f-baab-31f6f3b99e5d.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1695eb8b-9d1c-4bb1-b53f-22ecff3a0004.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb601016d-1d5d-4e33-a18a-413898533e5e.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs708ccd5c-138e-404f-84d8-be2c6d01a91b.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7bcf6681-d1e0-4a3e-a3bb-ca39239440d1.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3c0f14b3-6d4d-4d32-b88b-cc66209129bd.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs76e17a96-3071-42e6-9fb7-80e244581627.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5289fd33-2c3c-4faf-bde2-93205188fdc0.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs20baa46f-60c3-42a2-90a3-0346dedfb912.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc7aa2d35-ccd0-49a9-91a6-e589e5bb55d9.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs212dea77-c7ed-4fb4-a000-13be20802306.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7ccabc8b-9761-44e8-91ff-32e991384597.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9f63a66f-cbaf-4424-86c2-bf4ac153493e.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs636cc465-4dd0-48b2-ba39-8ba29c2e0c11.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs57f320ce-8f43-4396-9773-6fa7ef578521.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa93bbd28-434b-47cd-986a-df6ba9e4e9cd.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsba89781b-efad-452b-8add-85e407e5273c.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa93020f8-0a13-4ab2-8481-83b07d1e0791.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse8cf3587-b9ad-4dae-a427-d1b8827a571a.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs54c89d73-3daf-4eb9-99a6-cf5e0dc49dc9.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd4c5082-938b-4a1f-b9c1-7d98c5653345.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9faa156a-a36e-4935-9132-76f43f71bc40.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs109b7864-ac0c-413f-abdc-73a557cadc08.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb227480d-7d95-4aab-bba6-2cce233db956.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs11dac356-45fd-40f4-8129-c0293f3b53b4.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf8c5603b-11f2-453e-b6b4-6991dda6370d.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseaa6c083-5a60-4de9-9dc9-7893f838a6ad.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbd16693f-fa28-4877-b8fa-e5a0203f95ab.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1d61e64a-8559-44a1-ae61-7a87a64e71a1.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8e8c4f39-f471-41c5-9ed4-3de174b6470f.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsafcc1a82-ea8f-4594-9cfd-863eb537fdb2.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs13411ad6-30df-4c9f-a8fc-4b20abc8dffc.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs62aab689-d1ea-43d2-90fb-585355d93362.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs54df6c24-e88b-4575-bbaf-b00f462f2cb3.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9ba58ca5-56ab-465e-a120-1dcd22277ebf.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1fd4ae68-8493-4796-a072-ce849161b411.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs228ade19-3b1f-496f-b383-521826c04007.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs99330af3-a6d2-41b7-b521-0dae72839d19.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf4397985-c4c2-436e-a76e-21068eb30d18.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsddfab516-4273-4ebf-bccd-6ff9eca2ff87.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscbd6e8af-0b3c-4647-b616-1ca689f2192a.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf73e5e7e-c32f-49a5-8bfc-e0dfe15c532b.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs09a6326b-b609-48a7-99e5-3f2268c43062.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4ca72363-af89-46db-a7f0-d36449e9a517.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs54d0ba35-5013-49dd-b49d-bd9ebdc422ea.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8fb7691c-d73c-4da1-ab46-d438a1fdab44.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs748706c1-a43c-4058-a3de-df0ada907b2e.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1352a518-50ac-4928-ab1c-b81b3a21e585.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscb8a0a09-cf29-4b78-a4e1-73113739a064.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa4311b8a-ab12-4ddc-964b-d27c789dfa85.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscd44144b-695f-4746-82fd-650924a048d7.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa5a3e260-4e01-4ad9-a913-d881f79e4c16.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs67d033da-df38-4297-9648-89bda262958f.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbaf56673-f33b-480d-b32c-fda7718ee4e0.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs55358dc3-bb0e-4576-b6e9-3c51dd48a2f6.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse8ee0178-9ce9-4d58-a1e2-76fe783efd88.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd210c1ce-5946-453a-828f-a7bef6b85437.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs19beb71b-7165-4b96-9e03-fd0a6355445b.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7bf2bd20-a56b-4baa-bf08-f1043fbb0a51.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5743c6f8-5864-43a0-bf10-789ccce04a88.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf688c1e8-c818-4066-b65a-effb67bd1bd0.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8ccc206c-3f4c-4705-af2b-bd7958c14517.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs08feefc4-ccb4-4ed3-95fe-d4344c4dc90b.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsba8c36d3-d84e-4157-bc9c-3992d3ff7209.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscscdb74ba0-6160-4f0f-ac12-5c016ed6dcb2.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6d0c21c2-3d7e-44bf-ad40-b224506fb4ac.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs69183b46-65c5-4718-9e1c-65704111e450.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4b7b3aa0-8613-4abc-b714-010ef4621329.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs49a3d7a2-7485-4d61-aebf-e1fad633f554.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8857ece6-ceb5-45d4-ad47-9e09b5231afb.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs46e4c73b-2d17-49e4-a342-31ac80287803.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs42603c22-2820-47fd-b4b2-14728be96b7d.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd58e8d0b-5568-42ff-86b6-4887b1dae4b0.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs08a3ea2d-cf90-4b30-b097-9c48253fe5b2.tmp". The process cannot access the file because
it is being used by another process
10:42 AM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs37bd5029-0f6e-4925-9744-775c7a57ecf7.tmp". The process cannot access the file because
it is being used by another process
10:43 AM: Warning: Failed to open file "c:\windows\temporary internet files\content.ie5\s5n2vq5e\product_jump[___-". The system cannot find the file specified
10:47 AM: Warning: Failed to open file "c:\windows\temporary internet files\content.ie5\sta7ktub\default[3].ht________". The system cannot find the file specified
10:51 AM: Warning: Failed to open file "c:\windows\temporary internet files\content.ie5\eb4bjwpg\0000050851_000000000000000________-___". The system cannot find the file specified
11:10 AM: Warning: Failed to open file "c:\program files\common files\symantec shared\virusdefs\lulock.dat". The process cannot access the file because
it is being used by another process
11:10 AM: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcrst.dll". The process cannot access the file because
it is being used by another process
11:11 AM: Warning: Failed to open file "c:\program files\common files\symantec shared\symcdata\ids-diskless\lulock.dat". The process cannot access the file because
it is being used by another process
11:11 AM: c:\program files\common files\vcclient (6 subtraces) (ID = -2147461290)
11:11 AM: biuninst.exe (ID = 51257)
11:11 AM: clientupdater.bat (ID = 212353)
11:11 AM: vcclient.exe.config (ID = 212358)
11:11 AM: vcupdate.exe.config (ID = 212361)
11:20 AM: Found Adware: crackserver
11:20 AM: c:\program files\crackserver (ID = -2147467140)
11:21 AM: bigameres.dll (ID = 51182)
11:21 AM: bisysinfo.dll (ID = 51193)
11:21 AM: biuninst.exe (ID = 51257)
11:21 AM: bibingoclient.x32 (ID = 51180)
11:21 AM: c:\program files\thesearchaccelerator (ID = -2147481059)
11:23 AM: Found Adware: spysheriff fakealert
11:23 AM: secure32.html (ID = 184319)
11:23 AM: Warning: Invalid Stream
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:23 AM: Warning: Unhandled Archive Type
11:24 AM: Warning: Invalid Stream
11:24 AM: Warning: Invalid Stream
11:24 AM: uninstall.lnk (ID = 51257)
11:24 AM: File Sweep Complete, Elapsed Time: 00:57:49
11:24 AM: Full Sweep has completed. Elapsed time 01:04:38
11:24 AM: Traces Found: 85
11:25 AM: Removal process initiated
11:25 AM: Quarantining All Traces: lzio
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine lzio
11:25 AM: Failed to quarantine real.exe
11:25 AM: Quarantining All Traces: spysheriff fakealert
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine spysheriff fakealert
11:25 AM: Failed to quarantine secure32.html
11:25 AM: Quarantining All Traces: trojan downloader matcash
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine trojan downloader matcash
11:25 AM: Failed to quarantine new_pop.exe
11:25 AM: Failed to quarantine explorer.exe
11:25 AM: Quarantining All Traces: win-spy monitor
11:25 AM: Error: Out of memory.
11:25 AM: Quarantining All Traces: crackserver
11:25 AM: Error: Out of memory.
11:25 AM: Quarantining All Traces: dollarrevenue
11:25 AM: Quarantining All Traces: elitemediagroup-mediamotor
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine elitemediagroup-mediamotor
11:25 AM: Failed to quarantine mcspy.exe
11:25 AM: Quarantining All Traces: enbrowser
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine enbrowser
11:25 AM: Failed to quarantine checks02.exe
11:25 AM: Failed to quarantine pre2.exe
11:25 AM: Failed to quarantine setup95.exe
11:25 AM: Quarantining All Traces: surfsidekick
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Error: Out of memory.
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine surfsidekick
11:25 AM: Failed to quarantine clientupdater.bat
11:25 AM: Failed to quarantine vcclient.exe.config
11:25 AM: Failed to quarantine vcupdate.exe.config
11:25 AM: Failed to quarantine HKLM: software\surfsidekick3\
11:25 AM: Quarantining All Traces: bingofun games
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine bingofun games
11:25 AM: Failed to quarantine biuninst.exe
11:25 AM: Failed to quarantine bigameres.dll
11:25 AM: Failed to quarantine bisysinfo.dll
11:25 AM: Failed to quarantine biuninst.exe
11:25 AM: Failed to quarantine bibingoclient.x32
11:25 AM: Failed to quarantine uninstall.lnk
11:25 AM: Failed to quarantine clsid\{aaa8135f-d41a-4e85-a40f-58e6be393e6f}\
11:25 AM: Failed to quarantine HKLM: software\classes\clsid\{aaa8135f-d41a-4e85-a40f-58e6be393e6f}\
11:25 AM: Quarantining All Traces: bullguard popup ad
11:25 AM: Warning: Out of memory
11:25 AM: Error: Out of memory.
11:25 AM: Failed to quarantine bullguard popup ad
11:25 AM: Failed to quarantine bulldownload.exe
11:25 AM: Quarantining All Traces: effective-i toolbar
11:25 AM: Error: Out of memory.
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine effective-i toolbar
11:25 AM: Failed to quarantine glb71b4.tmp
11:25 AM: Failed to quarantine glb8100.tmp
11:25 AM: Quarantining All Traces: seekmo search assistant
11:25 AM: Quarantining All Traces: zenosearchassistant
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine zenosearchassistant
11:25 AM: Failed to quarantine msnav32.ax
11:25 AM: Quarantining All Traces: 2o7.net cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine 2o7.net cookie
11:25 AM: Failed to quarantine default@microsofteup.112.2o7[1].txt
11:25 AM: Failed to quarantine default@msnportal.112.2o7[1].txt
11:25 AM: Failed to quarantine default@bookspan.122.2o7[1].txt
11:25 AM: Failed to quarantine default@stubhub.122.2o7[1].txt
11:25 AM: Failed to quarantine default@ford.112.2o7[1].txt
11:25 AM: Failed to quarantine default@redcats.122.2o7[1].txt
11:25 AM: Quarantining All Traces: about cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine about cookie
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Failed to quarantine default@about[1].txt
11:25 AM: Quarantining All Traces: adecn cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine adecn cookie
11:25 AM: Failed to quarantine default@adecn[2].txt
11:25 AM: Quarantining All Traces: adknowledge cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine adknowledge cookie
11:25 AM: Failed to quarantine default@adknowledge[2].txt
11:25 AM: Quarantining All Traces: adlegend cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine adlegend cookie
11:25 AM: Failed to quarantine default@adlegend[1].txt
11:25 AM: Quarantining All Traces: ask cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine ask cookie
11:25 AM: Failed to quarantine default@ask[1].txt
11:25 AM: Quarantining All Traces: atwola cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine atwola cookie
11:25 AM: Failed to quarantine default@atwola[1].txt
11:25 AM: Quarantining All Traces: burstbeacon cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine burstbeacon cookie
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Quarantining All Traces: columbiahouse cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine columbiahouse cookie
11:25 AM: Failed to quarantine default@columbiahouse[2].txt
11:25 AM: Failed to quarantine default@columbiahouse[1].txt
11:25 AM: Quarantining All Traces: dealtime cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine dealtime cookie
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Failed to quarantine default@dealtime[1].txt
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Quarantining All Traces: directtrack cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine directtrack cookie
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Failed to quarantine [removed][3].txt
11:25 AM: Quarantining All Traces: gostats cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine gostats cookie
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Quarantining All Traces: overture cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine overture cookie
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Quarantining All Traces: pch cookie
11:25 AM: Warning: Out of memory
11:25 AM: Failed to quarantine pch cookie
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Quarantining All Traces: specificclick.com cookie
11:25 AM: Warning: Out of memory
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Failed to quarantine specificclick.com cookie
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Quarantining All Traces: stamps.com cookie
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Failed to quarantine stamps.com cookie
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Quarantining All Traces: tacoda cookie
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Failed to quarantine tacoda cookie
11:25 AM: Failed to quarantine default@tacoda[1].txt
11:25 AM: Quarantining All Traces: yieldmanager cookie
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Failed to quarantine yieldmanager cookie
11:25 AM: Failed to quarantine [removed][1].txt
11:25 AM: Failed to quarantine [removed][3].txt
11:25 AM: Failed to quarantine [removed][2].txt
11:25 AM: Warning: lzma: LZMA_Init failed
11:25 AM: Removal process completed. Elapsed time 00:00:32
11:26 AM: Sent error log: C:\WINDOWS\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
********
10:01 AM: | Start of Session, Tuesday, April 11, 2006 |
10:01 AM: Spy Sweeper started
10:04 AM: Your spyware definitions have been updated.
10:18 AM: Updating spyware definitions
10:18 AM: Your definitions are up to date.
10:19 AM: Updating spyware definitions
10:19 AM: Your definitions are up to date.
10:20 AM: | End of Session, Tuesday, April 11, 2006 |
And here is my new HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 11:37:48 AM, on 4/11/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
c:\windows\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\CONSUMER INPUT\CONSUMERINPUT.EXE
C:\PROGRAM FILES\CONSUMER INPUT\CONSUMERINPUTUA.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\PROMPTCAST\PROMPTCAST.EXE
C:\PROGRAM FILES\WALGREENS\WALGREENS PHOTOSHOW\DATA\XTRAS\MSSYSMGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://msn.com/
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [WT GameChannel] C:\Program Files\WildTangent\Apps\GameChannel.exe
O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe C:\PROGRA~1\WILDTA~1\APPS\CDA\CDAENG~1.DLL,cdaEngineMain
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Consumer Input] C:\Program Files\Consumer Input\ConsumerInput.exe
O4 - HKLM\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\ConsumerInputUa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [KB891711] c:\windows\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O4 - HKCU\..\Run: [PromptCast] C:\Program Files\PromptCast\PromptCast.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\WALGRE~1\WALGRE~1\DATA\XTRAS\MSSYSMGR.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\INSTANT MESSENGER\AIM.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_06\BIN\SSV.DLL
O9 - Extra button: Dell Home - {B5439B40-2A98-11D5-B1BE-000103E071E2} -
http://www.my.delleworks.com (file missing) (HKCU)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) -
http://security.symantec.com/SSC/SharedCon…n/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.symantec.com/SSC/SharedCon…bin/AvSniff.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -
http://netscape.musicnotes.com/download/mnviewer.cab
O16 - DPF: {60EFC337-15C2-4369-B2A0-3429B071D8B8} (WebProgramManager Class) -
http://isupport4.hp.com/awebui/jsp/answerw…SWebManager.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) -
http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://zone.msn.com/bingame/zuma/default/popcaploader_v5.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: Pop Fu by pogo -
http://popfu.pogo.com/applet-6.0.4.37/popf…u-ob-assets.cab
O16 - DPF: Fortune Bingo by pogo -
http://game1.pogo.com/applet-6.4.0.41/supe…o-ob-assets.cab
O16 - DPF: Squelchies by pogo -
http://squelchies.pogo.com/applet-6.0.4.37…s-ob-assets.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://zone.msn.com/bingame/gold/UnSkin/gf.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: Poppit by pogo -
http://game1.pogo.com/applet-6.2.1.34/popp…2-ob-assets.cab
O16 - DPF: Mah Jong Garden by pogo -
http://game1.pogo.com/applet-6.4.3.28/mahj…g-ob-assets.cab
O16 - DPF: {77DD44BF-551D-4E3C-82CD-D637D5018D3C} -
http://www.surveys.com/promptcast/Installs…AST%20SETUP.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: Penguin Blocks by pogo -
http://game1.pogo.com/applet-6.4.0.34/peng…s-ob-assets.cab
O16 - DPF: PoppaZoppa by pogo -
http://game1.pogo.com/applet-6.4.2.30/popp…a-ob-assets.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) -
http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = covad.net
O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = covad.net
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 64.105.113.138,64.105.97.90
System seems to be running a tad bit quicker BUT the error messages appeared again during rebooting. System won't let me use the Start-Restart steps. Error message says Lucallbackproxy and I have to hard boot the system.
And upon rebooting, I get IPHLPAPI.DLL cannot start and ibm00001.exe cannot find.
Do I still need to run that alternative scan? I know you mentioned it if the Spy Sweeper did not work again. And since it had that error I was not sure if you still needed me to run the alternative.
Thanks again for all your help!
Yes, I'm so sorry. Unfortunatly it is my work computer that is so messed up. I have been trying to get my work done while completing the necessary steps as well to fix it.
Norton says it is so user friendly but …. NOT! I have been working the past couple of days to complete the unintall/reinstall steps they have on thier websight. I think I may have finally finished. I restarted a couple of times and I THINK the Lucallbackproxy thing is gone. It surprises me once in awhile though when I think I've just about got it taken care of.
The ibm00001 message is gone.
Now I am getting an error message upon rebooting saying the cstray.exe can not be found.
I am hoping this is the last of the brain twisters here. Any idea on the cstray.exe?
Thanks for being so helpful and patient!
Woogs