Hi, thanks for the help. Computers running great now. No pop ups, and its running faster than ever
. You've been a great help
Here are the lods you requested.
HiJackThis Log:
Logfile of HijackThis v1.99.1
Scan saved at 5:51:08 PM, on 4/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iriver\iriver plus\iAgent.exe
C:\Program Files\iriver\iriver plus\iPlus.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\AhnLab\V3\MonSysNT.exe
C:\Program Files\AhnLab\V3\V3P3AT.exe
C:\Program Files\AhnLab\Smart Update Utility\Ahnsdsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\Ahnlab\V3\MonSvcNT.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\PROGRA~1\Ahnlab\V3\V3IMPro.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\My Documents\Kevin\HiJackTHis Spyware\HijackThis.exe
C:\PROGRA~1\AhnLab\SMARTU~1\SUCer.exe
C:\PROGRA~1\AhnLab\SMARTU~1\SUpdate.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: V3 - {9E3849D6-41EF-4B2F-86B7-632EF90758E4} - "C:\Program Files\Ahnlab\V3\V3Bar.dll" (file missing)
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AHNSD] "C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [iPlusAgent] "C:\Program Files\iriver\iriver plus\iAgent.exe"
O4 - HKCU\..\Run: [iriverPlus] "C:\Program Files\iriver\iriver plus\iPlus.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft....k/?linkid=39204
O16 - DPF: {1DE9BB01-B121-401D-8877-BCD5ED5B7EE5} (Tpwin Control) -
http://www.cgntv.net...eX/AlwaysOn.CAB
O16 - DPF: {6066F243-425A-4AD8-A2AE-6BD1DE56FAEE} (PCID Class) -
http://webclinic.ahn...gin/speedup.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.micros...b?1123860645941
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.micros...b?1145279974687
O16 - DPF: {85AF9A98-3423-45E4-8BAD-85645F16AC31} (P3 Bugs VoD Loader Class) -
http://player.bugs.c.../mv/p3bvset.cab
O16 - DPF: {9BDBC41E-C335-4263-83C0-ECE78EE28A33} (SysMonOCX Control) -
http://ahnlabdownloa...yfirewall20.cab
O16 - DPF: {9BED3AC7-E6D4-43E7-B8A1-1FA502F639E1} (XTools Control) -
http://player.bugs.c...l/mv/XTools.cab
O16 - DPF: {9F597799-02BF-4E44-9C5F-6957CBC78A39} (AhnName Control) -
http://webclinic.ahn...gin/ahnname.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn...pDownloader.cab
O16 - DPF: {B6C10489-FB89-11D4-93C9-006008A7EED4} (TeeChart Pro Activex control v5) -
http://www.moneta.co...l/teechart5.cab
O16 - DPF: {BF628973-1E86-4D0E-B42C-EDDECFFABDBC} (Bugs AoD Class) -
http://player.bugs.c...der20041018.cab
O16 - DPF: {E2A96175-32D0-4651-B228-B474C2408346} (DacomDownload Control) -
http://program.webha...comDownload.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ACAC91AE-1EFA-4CE5-8C3F-427A42B4EE82}: NameServer = 205.252.144.126 218.102.62.71
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AhnLab Task Scheduler - AhnLab, Inc. - C:\Program Files\AhnLab\Smart Update Utility\Ahnsdsv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: MonSvcNT - AhnLab, Inc. - C:\PROGRA~1\Ahnlab\V3\MonSvcNT.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Spy Sweeper Log:
5:13 PM: | Start of Session, Sunday, April 23, 2006 |
5:13 PM: Spy Sweeper started
5:13 PM: Sweep initiated using definitions version 663
5:13 PM: Starting Memory Sweep
5:13 PM: Found Adware: begin2search
5:13 PM: Detected running threat: C:\WINDOWS\system32\rlmtcs.dll (ID = 273264)
5:13 PM: The Spy Communication shield has blocked access to: join1.winhundred.com
5:13 PM: The Spy Communication shield has blocked access to: join1.winhundred.com
5:17 PM: Memory Sweep Complete, Elapsed Time: 00:04:00
5:17 PM: Starting Registry Sweep
5:17 PM: Found Adware: gophersearch hijack
5:17 PM: HKLM\software\microsoft\internet explorer\search\ || searchassistant (ID = 126950)
5:17 PM: HKCR\rlmtcs.amo\ (5 subtraces) (ID = 1221370)
5:17 PM: HKCR\rlmtcs.amo.1\ (3 subtraces) (ID = 1221375)
5:17 PM: HKCR\rlmtcs.iiittt\ (5 subtraces) (ID = 1221378)
5:17 PM: HKCR\rlmtcs.iiittt.1\ (3 subtraces) (ID = 1221383)
5:17 PM: HKCR\rlmtcs.momo\ (5 subtraces) (ID = 1221386)
5:17 PM: HKCR\rlmtcs.momo.1\ (3 subtraces) (ID = 1221391)
5:17 PM: HKCR\rlmtcs.ohb\ (5 subtraces) (ID = 1221394)
5:17 PM: HKCR\rlmtcs.ohb.1\ (3 subtraces) (ID = 1221399)
5:17 PM: HKCR\clsid\{294c0052-39dc-47e8-8dff-4c5bc0100301}\ (22 subtraces) (ID = 1221414)
5:17 PM: HKCR\clsid\{e8888041-b24a-4b0b-911b-12b018e43f21}\ (11 subtraces) (ID = 1221437)
5:17 PM: HKCR\clsid\{f5dcb1f3-bf38-4966-9689-23c3dfccbe17}\ (11 subtraces) (ID = 1221461)
5:17 PM: HKCR\clsid\{fecc0ca7-d772-458a-b8a5-55e5aa8c1aa9}\ (11 subtraces) (ID = 1221473)
5:17 PM: HKCR\typelib\{1ab449ab-1c29-402e-a5e7-26af81b0d6f7}\ (9 subtraces) (ID = 1221485)
5:17 PM: HKLM\software\microsoft\windows\currentversion\explorer\browser helper objects\{e8888041-b24a-4b0b-911b-12b018e43f21}\ (1 subtraces) (ID = 1221520)
5:17 PM: HKLM\software\classes\rlmtcs.amo\ (5 subtraces) (ID = 1221526)
5:17 PM: HKLM\software\classes\rlmtcs.amo.1\ (3 subtraces) (ID = 1221531)
5:17 PM: HKLM\software\classes\rlmtcs.iiittt\ (5 subtraces) (ID = 1221534)
5:17 PM: HKLM\software\classes\rlmtcs.iiittt.1\ (3 subtraces) (ID = 1221539)
5:17 PM: HKLM\software\classes\rlmtcs.momo\ (5 subtraces) (ID = 1221542)
5:17 PM: HKLM\software\classes\rlmtcs.momo.1\ (3 subtraces) (ID = 1221547)
5:17 PM: HKLM\software\classes\rlmtcs.ohb\ (5 subtraces) (ID = 1221550)
5:17 PM: HKLM\software\classes\rlmtcs.ohb.1\ (3 subtraces) (ID = 1221555)
5:17 PM: HKLM\software\classes\clsid\{294c0052-39dc-47e8-8dff-4c5bc0100301}\ (22 subtraces) (ID = 1221570)
5:17 PM: HKLM\software\classes\clsid\{e8888041-b24a-4b0b-911b-12b018e43f21}\ (11 subtraces) (ID = 1221593)
5:17 PM: HKLM\software\classes\clsid\{f5dcb1f3-bf38-4966-9689-23c3dfccbe17}\ (11 subtraces) (ID = 1221617)
5:17 PM: HKLM\software\classes\clsid\{fecc0ca7-d772-458a-b8a5-55e5aa8c1aa9}\ (11 subtraces) (ID = 1221629)
5:17 PM: HKLM\software\classes\typelib\{1ab449ab-1c29-402e-a5e7-26af81b0d6f7}\ (9 subtraces) (ID = 1221641)
5:17 PM: Found Adware: desktoptraffic
5:17 PM: HKU\S-1-5-21-448539723-1078145449-1801674531-1003\eeennn\ (ID = 124993)
5:17 PM: HKU\S-1-5-21-448539723-1078145449-1801674531-1003\software\microsoft\internet explorer\ || searchurl (ID = 126947)
5:17 PM: HKU\S-1-5-21-448539723-1078145449-1801674531-1003\software\microsoft\internet explorer\main\ || search bar (ID = 126948)
5:17 PM: HKU\S-1-5-21-448539723-1078145449-1801674531-1003\software\microsoft\internet explorer\main\ || search page (ID = 126949)
5:17 PM: HKU\S-1-5-21-448539723-1078145449-1801674531-1003\software\microsoft\internet explorer\search\ || searchassistant (ID = 126951)
5:18 PM: Registry Sweep Complete, Elapsed Time:00:00:18
5:18 PM: Starting Cookie Sweep
5:18 PM: Found Spy Cookie: azjmp cookie
5:18 PM: owner@azjmp[2].txt (ID = 2270)
5:18 PM: Found Spy Cookie: webtrends cookie
5:18 PM: owner@m.webtrends[1].txt (ID = 3669)
5:18 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
5:18 PM: Starting File Sweep
5:20 PM: rlmtcs.dll (ID = 273264)
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
5:22 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
5:31 PM: Warning: Failed to open file "c:\windows\softwaredistribution\eventcache\{b691e0b0-9569-478e-b39b-0c41637d7170}.bin". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs205bf8a8-29c7-4947-9e64-9b8df97ea560.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf9040e96-2f4f-4d63-b656-5b8964caa1e2.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4534b4e-3bea-42bc-939e-a0843b328c13.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc6abeff7-a80b-45a2-9198-f14a6ab647f8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs702f064e-84ad-4f37-b18c-1b8c88f0d878.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs713ab382-dbd9-415a-b001-941b1f3e96e5.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs134f9a3c-093c-49d5-918d-790a47b81248.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscf7e2e99-9312-4d1b-859d-c44d42c2d98d.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa63aec0a-164c-4c08-a67f-e9d5d42800bd.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs976426bb-d829-44b6-ba96-6d188d75e3c8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3261a15e-dc95-4d20-907e-3c17ca1eb7c8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs410a5f81-39b5-443c-a6b3-fcbbf6885575.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd13658ea-899e-4ef7-af9f-bc8eeca6b2fa.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07f5bb13-3e02-4a73-baa0-fe0ed694e228.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa6ff4ce7-2ca5-46ff-9ad8-b348283d9d90.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbc202022-a5ec-4e8e-9fc8-ef5607467e95.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4464a785-14e8-417a-9187-5fa7dff688af.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsabbe03e3-4591-424b-b2c9-7f5f5301bbd6.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs023cd4c5-bb30-460f-8ffc-3a28f1494b1d.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9df63ef8-fd61-4347-a2ae-c0ba0dd55bff.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd9d8aaf1-4366-444b-89c6-ee8707a2fbbb.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3d6642f1-e2a6-43af-812a-8874181f2ae4.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa6075fa7-5c6e-458e-a203-ed02b447c89b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs32624def-2c01-44a0-8a3e-ba050f7704a2.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc63a21c7-34a0-4120-8e4d-2e0b01470d6f.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfb5615c0-8300-427b-bb19-49755768f63b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs28418078-6ec7-435a-bdab-d796a9de7d46.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsccf2d162-7b6c-49bf-abb5-d60f3650ad42.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd5a22ecf-4f7e-46dc-9a0d-26ba7e8cb266.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0a8e1f46-8e7e-4ee0-a6d5-2e7193f9e0f8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd21c3bda-7227-488c-a0b5-f598e024a68a.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs89cc0ed1-86d2-4eee-b54f-e9d136185ace.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0a3a43a5-9cae-4112-befe-b17f2afaa23f.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb8d97520-9a91-4c60-a701-6daa661467cb.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs58590f45-3409-4ebf-bb61-d9e18b434382.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs95652cce-01f6-4277-9065-0ba5c02475da.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9a220394-7b70-4885-89fe-e8b52992f976.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e95c691-5d54-43a5-b6f6-694373356aa8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2e8dec6b-7daa-4a05-9eb4-50fe2f9fa621.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7d3318d1-0347-42c1-b5fc-9053f96f59cb.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd1196e42-0a60-4ef5-9f99-5cf9d03c6ff6.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0ac14b40-c9ba-4456-a7cb-d9785df0d8f2.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs83ecf36d-c1d7-4431-a0dd-01177365f660.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5852898a-14c3-4dda-af21-a5285ace3527.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07ba0a3a-ddde-43e2-ab4f-27da6a43bd28.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7fde0e6c-349a-48c2-b961-4044bce226c7.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdd046313-3b97-4e0b-b282-3d3b0f27bdee.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2e6eabd1-b4ad-4eb9-928d-bb3332a17a6a.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs944e107e-32fb-4b31-a652-77295bdf3e33.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsab4d6dc6-a6dd-4bfe-82c4-34471825950b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs27cbc9fa-dd85-4973-84cf-96e14f9cb0ad.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9c06cd59-9961-447b-80eb-bfce8cd7ad67.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf5b7ce4a-dac6-4208-9876-e71c090fc8eb.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6f560c9e-b81e-40bf-b5ae-35bf7d2c945a.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs35d5d395-dd54-4900-8512-dff179decfb9.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs627ff76c-c080-411e-8c7b-f4ad8ea2c3bb.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs87871e18-a554-423c-953d-fbdaf36a0aab.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse052d581-0e94-4035-a4da-43094aa842b9.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7b1bd647-3b64-4658-8179-3392024b7036.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3e7a7cdc-7526-4648-8139-86cf5ea6acf3.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1cd32c17-0f60-4027-acb5-776b78d36d5d.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs013fe0e3-604b-461b-8623-6ff40a13d390.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs549b1bc9-00d0-4271-8585-0555e99af1f1.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3a09f48f-1a6f-42cb-8aca-ce2e25744808.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8be9a8b9-83ee-44ae-8cd2-b6d2111e1d83.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1cb5b56b-bf02-4f88-9ac2-fda8aada1eef.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs72c8337b-749f-4454-8361-a938275a7b6e.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd67ca86e-d8be-4732-bd23-600bff7ee467.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbffd682a-6968-46cd-81de-10589e69f04b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs14a777c2-5d61-4721-8173-a890bb729db8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb206f1e2-8ce6-4786-90b1-44dbd31e9967.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsee1e5e1e-4de1-407f-8bbc-d6bb6a32f03e.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7c789c24-cb7a-4649-9278-2fa271ece20e.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9c185367-d5e8-4c06-ace4-ccbf432be82d.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ae7e68d-1ebc-4d44-80d9-3f6023b35f0c.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa517167a-be6c-4ee2-ad0e-5d7127c27e69.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79cca2f9-2bc8-4621-820a-a702ac20097b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseee733da-309f-4ee8-8120-08fa9303a062.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs765a9ff2-cbd7-4a2c-863e-b58135b4167c.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf05b7cfd-666a-48f0-b4f4-a7af9832d3c4.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs731e963c-784d-44f3-992e-7fb44ff56b20.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd6025b31-9e25-49fb-978b-edfb681eb501.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs96a90598-c38f-4bf3-b525-1c9d4441a72a.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf8b33ef2-812f-4b3b-98c1-df61857f76f8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsda61beeb-a4e6-4a35-a526-03b00dfed66c.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ab65ccc-233b-4a20-a790-28ba39f610d0.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1bac1ced-b77c-40c2-ac54-4754fa1df907.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9ea74116-00a1-442a-b29d-96b8227936c0.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc110e129-1a3d-40a4-be8c-cce74fed8313.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbcc725d5-6e09-4b97-88f6-3664daad1487.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf893386b-f18e-4e65-8406-d54cdc49c60f.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfc37a85f-5fe7-45fb-9b3e-5ac410e7b96e.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4492456e-0802-41c3-8a03-257d0dd163dc.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs33cc2f6c-dd91-4348-8624-f50d8f3978d7.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7bacae55-f13d-4d7e-9f75-28d5d8a95086.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3c346a05-a287-419e-ba53-08278c98712b.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf7c9d727-ee80-4a5e-a154-171c9948bb67.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfce8dcf5-a5f1-4fc9-8798-19323b582afd.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbd773f50-4312-4698-8d41-e1e56d316332.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs131e1ecb-5c61-42b5-a6c2-17e75d4a91d2.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs087f57b0-4757-4dff-8b1e-02fd21ee3b43.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9f7d27f0-d49a-4360-8ddd-5c47088dc190.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf611d7d6-29a5-470f-880b-f258920ce549.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2bdecb3e-271e-4e7a-9414-99162718abd8.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\owner\ntuser.dat". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\owner\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\owner\local settings\temp\~dff119.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\owner\local settings\temp\~df3508.tmp". The process cannot access the file because it is being used by another process
5:33 PM: Warning: Failed to open file "c:\documents and settings\owner\local settings\temp\~df351b.tmp". The process cannot access the file because it is being used by another process
5:34 PM: Warning: Failed to open file "c:\documents and settings\owner\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:34 PM: Warning: Failed to open file "c:\documents and settings\owner\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:39 PM: Warning: Failed to open file "d:\pagefile.sys". Access is denied
5:41 PM: File Sweep Complete, Elapsed Time: 00:23:36
5:41 PM: Full Sweep has completed. Elapsed time 00:27:58
5:41 PM: Traces Found: 230
5:42 PM: Removal process initiated
5:42 PM: Quarantining All Traces: begin2search
5:42 PM: Quarantining All Traces: desktoptraffic
5:42 PM: Quarantining All Traces: gophersearch hijack
5:42 PM: Quarantining All Traces: azjmp cookie
5:42 PM: Quarantining All Traces: webtrends cookie
5:44 PM: Preparing to restart your computer. Please wait...
5:44 PM: Removal process completed. Elapsed time 00:01:41
********
5:11 PM: | Start of Session, Sunday, April 23, 2006 |
5:11 PM: Spy Sweeper started
5:12 PM: Your spyware definitions have been updated.
5:13 PM: | End of Session, Sunday, April 23, 2006 |
-HaM-