Welcome Guest ( Log In | Join )

Discover the best free computer help!
Learn more about Geeks to Go by taking the tour. Want to ask a question, reply to a topic, or remove all advertising? It's easy, fast and free. Join today!
Spyware, virus, trojan, fake security or privacy alerts? Please start with our malware cleaning guide.
     
2 Pages V   1 2 >  
 Closed TopicStart new topic
I think i have the "is this you" virus, However... [RES
terrorcore
post Mar 2 2006, 11:52 AM
Post #1


Member
**
Posts: 13
OS: winxp sp2
I received this virus from a friend. However, it did not fully install on my comp...it asked for my windows cd and at that point i realized something was wrong, so i cancelled the intallation, and shut down my laptop. now whenever i go on my comp, my homepage is changed to Http://dumeter.org, and i am asked to download zango. and i cannot acces my virus scan, (i use AVG). Nor can I acces any anti virus sites. And windows seem to popunder and are gone in less than a second...I cannot tell what they are. One final thing. sometimes my web browser closes and a winnit dos box comes up. i cant read it because it is only thwere for a sec....PLEASE HELP

much appreciated

Zac
Go to the top of the page
 
+Quote Post
Trevuren
post Mar 2 2006, 12:27 PM
Post #2


Malware Eradicator
Group Icon
Posts: 18,666
From: Ottawa
OS: Windows XP Pro /Vista Ultimate



Hi terrorcore and welcome to the Geeks to Go Forums.

My name is Trevuren and I will be helping you with your log.

Download and run the following HijackThis autoinstall program from Here . Please choose the default location of C:\Program Files\ as the destination. HJT needs to be in its own folder so that the program itself isn't deleted by accident. Having the backups could be VITAL to restoring your system if something went wrong in the FIX process!
  1. Run HijackThis
  2. Click SCAN and SAVE LOG. (a notepad window will open with the log in it when you click Save Log) (Ctrl-A to'select all', Ctrl-C to 'copy')
  3. POST the log into this thread using 'Add Reply' (Ctrl-V to 'paste')


DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS MOST OF THE FILES ARE LEGIT AND VITAL TO THE FUNCTION OF YOUR COMPUTER


Regards,

Trevuren
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 02:23 PM
Post #3


Member
**
Posts: 13
OS: winxp sp2
The program will run, but it closes before i can copy the log file....ie the program is only open for a few seconds...should it be run when the computer is in safe mode?
Go to the top of the page
 
+Quote Post
Trevuren
post Mar 2 2006, 03:32 PM
Post #4


Malware Eradicator
Group Icon
Posts: 18,666
From: Ottawa
OS: Windows XP Pro /Vista Ultimate



We will try to get rid of some junk first: (No the program is run in Normal Windows Mode)

1. Download, install, update, configure, and run Ad-Aware SE Personal 1.06.
  1. Download Ad-Aware SE Personal 1.06:
  2. Install Ad-Aware SE Personal 1.06:
    • Double-click on aawsepersonal.exe to install the program.
    • Follow the default settings for installation.
    • After the program has finished installing uncheck the "Perform a full system scan now", "Update definition file now", and "Open the help file now" boxes.
  3. Update Ad-Aware SE Personal 1.06:
    • Double-click the Ad-Aware SE Personal icon on your desktop.
    • Click "Check for updates now" then click "Connect".
    • It will check for any updates. If any are found click "OK" to download and install the updates. Once it has finished click "Finish".
  4. Configure Ad-Aware SE Personal 1.06:
    • Click on the Gear button at the top of the window.
    • Click "General" on the left hand side to display the General Settings box.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Automatically save logfile"
        • "Automatically quarantine objects prior to removal"
        • "Safe Mode (always request confirmation)"
        • "Prompt to update outdated definitions" - change to 7 days from the default 14.
    • Click "Scanning" on the left hand side to display the Scan Settings box.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Scan within archives"
        • "Select drives & folders to scan" - select your hard drive(s).
        • "Scan active processes"
        • "Scan registry"
        • "Deep-scan registry"
        • "Scan my IE favorites for banned URLs"
        • "Scan my Hosts file"
    • Click "Advanced" on the left hand side to display the Advanced Settings box.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Move deleted files to Recycle Bin"
        • "Include additional object information"
        • "Include negligible objects information"
        • "Include environment information"
    • Click "Defaults" on the left hand side to display the Default Settings box.
      • Make sure these items have your preferred settings in them.:
        • "Default homepage"
        • "Default searchpage"
    • Click "Tweak" on the left hand side to display the Tweak Settings box.
      • Click the + (plus) sign next to the Log Files section. This will expand the section.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Include basic Ad-Aware settings in log file"
        • "Include additional Ad-Aware settings in log file"
        • "Include reference summary in log file"
        • "Include alternate data stream details in log file"
      • Click the + (plus) sign next to the Scanning Engine section. This will expand the section.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Unload recognized processes & modules during scan"
        • "Scan registry for all users instead of current user only"
        • "Obtain command line of scanned processes"
      • Click the + (plus) sign next to the Cleaning Engine section. This will expand the section.
      • Make sure these items have a green check next to them. If they do not, click once on the circle next to them to put a green checkmark in it.:
        • "Always try to unload modules before deletion"
        • "During removal, unload Explorer and IE if necessary"
        • "Let Windows remove files in use at next reboot"
        • "Delete quarantined objects after restoring"
    • Once you are done with these settings, click "Proceed" to save them.
    • This will take you back to the main screen.
  5. Run Ad-Aware SE Personal 1.06:
    • Click the "Start" button.
    • Uncheck the "Search for negligible risk entries" entry.
    • Choose the "Use custom scanning options" scan mode.
    • Click the "Next" button.
    • Ad-Aware will begin to scan for malware residing on your computer.
    • Allow the scan to finish.
    • Right-click on any entry in the list and click "Select All" to select the whole list.
    • Click "Next" and choose "OK" at the prompt to quarantine and remove the objects.

2. Please follow the instructions provided, you may want to print out these instructions and use them as a reference.
  1. Please download ewido security suite it is a trial version of the program.
    • Install ewido security suite
    • When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
    • Launch ewido, there should be an icon on your desktop double-click it.
    • The program will prompt you to update click the OK button
    • The program will now go to the main screen

  2. You will need to update ewido to the latest definition files.
    • On the left hand side of the main screen click update
    • Click on Start
    • The update will start and a progress bar will show the updates being installed.

  3. Once the updates are installed do the following:
    • REBOOT into Safe Mode
    • Run EWIDO
    • Click on scanner
    • Click on Start Scan
    • Let the program scan the machine
    • While the scan is in progress you will be prompted to clean files, click OK

  4. Once the scan has completed, there will be a button located on the bottom of the screen named Save report
    • Click Save report
    • Save the report to your desktop

  5. Reboot your machine and post back a new HJT log and the ewido .txt log file you saved by using Add Reply

Regards,

Trevuren
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 04:08 PM
Post #5


Member
**
Posts: 13
OS: winxp sp2
I managed to run Ad-aware without a problem. Hwever whenever I try to run Ewido, i have the same problem as with HJT. it only open for a few seconds.
Go to the top of the page
 
+Quote Post
Trevuren
post Mar 2 2006, 04:11 PM
Post #6


Malware Eradicator
Group Icon
Posts: 18,666
From: Ottawa
OS: Windows XP Pro /Vista Ultimate



Try running Ewido in Safe Mode


Regards,

Trevuren
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 04:40 PM
Post #7


Member
**
Posts: 13
OS: winxp sp2
When ewido starts up, i get a msg saying that the database could not be found....., however when i try to update, i cannot connet to the net. and i am booting in safe mode with networking.
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 04:42 PM
Post #8


Member
**
Posts: 13
OS: winxp sp2
Ive managed to get get signatures manually...ill try again....
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 04:53 PM
Post #9


Member
**
Posts: 13
OS: winxp sp2
Whever ewido starts weatehr in safe mode or not, it says that all the seignatures have been erased. even though i have just manually installed them.
Go to the top of the page
 
+Quote Post
Trevuren
post Mar 2 2006, 06:06 PM
Post #10


Malware Eradicator
Group Icon
Posts: 18,666
From: Ottawa
OS: Windows XP Pro /Vista Ultimate



Uninstall Ewido and please try the following:

Please download WebRoot SpySweeper from HERE (It's a 14-day trial):
  • Click Download Now to download the program.
  • Install it. Once the program is installed, it will open.
  • It will prompt you to update to the latest definitions, click Yes.
  • Once the definitions are installed, click Options on the left side.
  • Click the Sweep Options tab.
  • Under What to Sweep please put a check next to the following:
    • Sweep Memory
    • Sweep Registry
    • Sweep Cookies
    • Sweep All User Accounts
    • Enable Direct Disk Sweeping
    • Sweep Contents of Compressed Files
    • Sweep for Rootkits
    • Please UNCHECK Do not Sweep System Restore Folder.
  • Click Sweep Now on the left side.
  • Click the Start button.
  • When it's done scanning, click the Next button.
  • Make sure everything has a check next to it, then click the Next button.
  • It will remove all of the items found.
  • Click Session Log in the upper right corner, copy everything in that window.
  • Click the Summary tab and click Finish.
  • Paste the contents of the session log you copied into your next reply along with a fresh HJT log.


Regards,

Trevuren
Go to the top of the page
 
+Quote Post
terrorcore
post Mar 2 2006, 10:29 PM
Post #11


Member
**
Posts: 13
OS: winxp sp2
Here is the log from Webroot Spy Sweeper

********
10:07 PM: | Start of Session, Thursday, March 02, 2006 |
10:07 PM: Spy Sweeper started
10:07 PM: Sweep initiated using definitions version 625
10:07 PM: Starting Memory Sweep
10:12 PM: Memory Sweep Complete, Elapsed Time: 00:04:41
10:12 PM: Starting Registry Sweep
10:12 PM: Found Trojan Horse: trojan-backdoor-securemulti
10:12 PM: HKLM\software\microsoft\windows\currentversion\run\ || csrss (ID = 112618)
10:12 PM: Found Adware: 180search assistant/zango
10:12 PM: HKLM\software\saap\ (4 subtraces) (ID = 135785)
10:12 PM: HKU\S-1-5-21-1275210071-1682526488-1343024091-500\software\microsoft\windows\currentversion\run\ || csrss (ID = 112615)
10:12 PM: Found Adware: drsnsrch.com hijack
10:12 PM: HKU\S-1-5-21-1275210071-1682526488-1343024091-500\software\microsoft\search assistant\ || defaultsearchurl (ID = 128205)
10:12 PM: HKU\S-1-5-21-1275210071-1682526488-1343024091-500\software\saap\ (4 subtraces) (ID = 135784)
10:12 PM: Registry Sweep Complete, Elapsed Time:00:00:24
10:12 PM: Starting Cookie Sweep
10:12 PM: Found Spy Cookie: cliks cookie
10:12 PM: zjspagat@cliks[1].txt (ID = 2414)
10:12 PM: Found Spy Cookie: rn11 cookie
10:12 PM: zjspagat@a.rn11[1].txt (ID = 3262)
10:12 PM: Found Spy Cookie: about cookie
10:12 PM: zjspagat@about[1].txt (ID = 2037)
10:12 PM: Found Spy Cookie: ugo cookie
10:12 PM: zjspagat@mediamgr.ugo[3].txt (ID = 3609)
10:12 PM: Found Spy Cookie: offeroptimizer cookie
10:12 PM: zjspagat@offeroptimizer[4].txt (ID = 3087)
10:12 PM: zjspagat@offeroptimizer[2].txt (ID = 3087)
10:12 PM: Found Spy Cookie: gamespy cookie
10:12 PM: zjspagat@ads.gamespy[2].txt (ID = 2717)
10:12 PM: Found Spy Cookie: belnk cookie
10:12 PM: zjspagat@dist.belnk[1].txt (ID = 2293)
10:12 PM: Found Spy Cookie: ads.stileproject cookie
10:12 PM: zjspagat@ads.stileproject[3].txt (ID = 2127)
10:12 PM: Found Spy Cookie: gorillanation cookie
10:12 PM: zjspagat@ads.gorillanation[1].txt (ID = 2744)
10:12 PM: zjspagat@mediamgr.ugo[2].txt (ID = 3609)
10:12 PM: Found Spy Cookie: servlet cookie
10:12 PM: zjspagat@servlet[1].txt (ID = 3345)
10:12 PM: Found Spy Cookie: azjmp cookie
10:12 PM: zjspagat@azjmp[2].txt (ID = 2270)
10:12 PM: zjspagat@offeroptimizer[5].txt (ID = 3087)
10:12 PM: Found Spy Cookie: adecn cookie
10:12 PM: zjspagat@adecn[1].txt (ID = 2063)
10:12 PM: Found Spy Cookie: teenax cookie
10:12 PM: zjspagat@www.teenax[2].txt (ID = 3504)
10:12 PM: zjspagat@ads.stileproject[1].txt (ID = 2127)
10:12 PM: Found Spy Cookie: mrskin cookie
10:12 PM: zjspagat@www.mrskin[2].txt (ID = 3021)
10:12 PM: zjspagat@www.teenax[1].txt (ID = 3504)
10:12 PM: Found Spy Cookie: buzztone cookie
10:12 PM: zjspagat@www.buzztone[2].txt (ID = 2339)
10:12 PM: Found Spy Cookie: joetec.net cookie
10:12 PM: zjspagat@www.ads.joetec[1].txt (ID = 2890)
10:12 PM: zjspagat@offeroptimizer[1].txt (ID = 3087)
10:12 PM: Found Spy Cookie: rightmedia cookie
10:12 PM: zjspagat@rightmedia[2].txt (ID = 3259)
10:12 PM: zjspagat@ads.joetec[2].txt (ID = 2890)
10:12 PM: Found Spy Cookie: cgi-win cookie
10:12 PM: zjspagat@cgi-win[1].txt (ID = 2376)
10:12 PM: zjspagat@rightmedia[1].txt (ID = 3259)
10:12 PM: zjspagat@www.mrskin[3].txt (ID = 3021)
10:12 PM: Found Spy Cookie: go.com cookie
10:12 PM: zjspagat@go[1].txt (ID = 2728)
10:12 PM: Found Spy Cookie: kinghost cookie
10:12 PM: zjspagat@kinghost[2].txt (ID = 2903)
10:12 PM: Found Spy Cookie: 888 cookie
10:12 PM: zjspagat@888[1].txt (ID = 2019)
10:12 PM: Found Spy Cookie: atwola cookie
10:12 PM: zjspagat@atwola[2].txt (ID = 2255)
10:12 PM: Found Spy Cookie: bpath cookie
10:12 PM: zjspagat@ads12.bpath[2].txt (ID = 2321)
10:12 PM: Found Spy Cookie: bannerspace cookie
10:12 PM: zjspagat@bannerspace[1].txt (ID = 2284)
10:12 PM: Found Spy Cookie: clickzs cookie
10:12 PM: zjspagat@cz3.clickzs[1].txt (ID = 2413)
10:12 PM: Found Spy Cookie: askmen cookie
10:12 PM: zjspagat@askmen[1].txt (ID = 2247)
10:12 PM: zjspagat@gorillanation[2].txt (ID = 2746)
10:12 PM: zjspagat@cz11.clickzs[1].txt (ID = 2413)
10:12 PM: zjspagat@abclocal.go[2].txt (ID = 2729)
10:12 PM: Found Spy Cookie: xiti cookie
10:12 PM: zjspagat@xiti[1].txt (ID = 3717)
10:12 PM: Found Spy Cookie: exitfuel cookie
10:12 PM: zjspagat@exitfuel[1].txt (ID = 2635)
10:12 PM: zjspagat@gamespy[1].txt (ID = 2719)
10:12 PM: zjspagat@www.ugo[1].txt (ID = 3609)
10:12 PM: Found Spy Cookie: ask cookie
10:12 PM: zjspagat@www.ask[2].txt (ID = 2246)
10:12 PM: Found Spy Cookie: howstuffworks cookie
10:12 PM: zjspagat@howstuffworks[2].txt (ID = 2805)
10:12 PM: Found Spy Cookie: seeq cookie
10:12 PM: zjspagat@www48.seeq[1].txt (ID = 3332)
10:12 PM: zjspagat@ads.gamespy[3].txt (ID = 2717)
10:12 PM: zjspagat@bannerspace[2].txt (ID = 2284)
10:12 PM: zjspagat@mediamgr.ugo[1].txt (ID = 3609)
10:12 PM: Found Spy Cookie: yadro cookie
10:12 PM: zjspagat@yadro[2].txt (ID = 3743)
10:12 PM: Found Spy Cookie: pokerroom cookie
10:12 PM: zjspagat@pokerroom[1].txt (ID = 3149)
10:12 PM: zjspagat@offeroptimizer[6].txt (ID = 3087)
10:12 PM: Found Spy Cookie: go2net.com cookie
10:12 PM: zjspagat@go2net[1].txt (ID = 2730)
10:12 PM: Found Spy Cookie: casinoonnet cookie
10:12 PM: zjspagat@www.casinoonnet[2].txt (ID = 2359)
10:12 PM: Found Spy Cookie: 64.62.232 cookie
10:12 PM: zjspagat@64.62.232[1].txt (ID = 1987)
10:12 PM: zjspagat@about[2].txt (ID = 2037)
10:12 PM: zjspagat@abclocal.go[1].txt (ID = 2729)
10:12 PM: zjspagat@go[2].txt (ID = 2728)
10:12 PM: zjspagat@64.62.232[6].txt (ID = 1987)
10:12 PM: Found Spy Cookie: smni cookie
10:12 PM: zjspagat@smni[1].txt (ID = 3389)
10:12 PM: Found Spy Cookie: metareward.com cookie
10:12 PM: zjspagat@metareward[1].txt (ID = 2990)
10:12 PM: Found Spy Cookie: pricegrabber cookie
10:12 PM: zjspagat@pricegrabber[2].txt (ID = 3185)
10:12 PM: zjspagat@adecn[2].txt (ID = 2063)
10:12 PM: zjspagat@www.buzztone[1].txt (ID = 2339)
10:12 PM: Found Spy Cookie: 00fun cookie
10:12 PM: zjspagat@a.00fun[1].txt (ID = 1910)
10:12 PM: Found Spy Cookie: sympaticoca cookie
10:12 PM: zjspagat@www3.sympatico[1].txt (ID = 3484)
10:12 PM: Found Spy Cookie: specificclick.com cookie
10:12 PM: zjspagat@ads.specificclick[1].txt (ID = 3400)
10:12 PM: zjspagat@www.howstuffworks[1].txt (ID = 2806)
10:12 PM: Found Spy Cookie: emode cookie
10:12 PM: zjspagat@emode[2].txt (ID = 2603)
10:12 PM: zjspagat@adcontent.gamespy[2].txt (ID = 2719)
10:12 PM: zjspagat@gorillanation[1].txt (ID = 2746)
10:12 PM: Found Spy Cookie: myaffiliateprogram.com cookie
10:12 PM: zjspagat@www.myaffiliateprogram[1].txt (ID = 3032)
10:12 PM: Found Spy Cookie: adscpm cookie
10:12 PM: zjspagat@servedby.adscpm[1].txt (ID = 2137)
10:12 PM: Found Spy Cookie: jp18 cookie
10:12 PM: zjspagat@free.jp18[1].txt (ID = 2892)
10:12 PM: Found Spy Cookie: tacoda cookie
10:12 PM: zjspagat@tacoda[2].txt (ID = 6444)
10:12 PM: zjspagat@ads12.bpath[1].txt (ID = 2321)
10:12 PM: Found Spy Cookie: linksponsor cookie
10:12 PM: zjspagat@ads.linksponsor[1].txt (ID = 2925)
10:12 PM: Found Spy Cookie: touchclarity cookie
10:12 PM: zjspagat@gm.touchclarity[1].txt (ID = 3566)
10:12 PM: Found Spy Cookie: a cookie
10:12 PM: zjspagat@a[1].txt (ID = 2027)
10:12 PM: zjspagat@mediamgr.ugo[5].txt (ID = 3609)
10:12 PM: zjspagat@howstuffworks[3].txt (ID = 2805)
10:12 PM: Found Spy Cookie: rb4.ampland cookie
10:12 PM: zjspagat@rb4.ampland[1].txt (ID = 3229)
10:12 PM: Found Spy Cookie: aa cookie
10:12 PM: zjspagat@aa[2].txt (ID = 2029)
10:12 PM: zjspagat@pricegrabber[1].txt (ID = 3185)
10:12 PM: Found Spy Cookie: hbmediapro cookie
10:12 PM: zjspagat@adopt.hbmediapro[2].txt (ID = 2768)
10:12 PM: zjspagat@ath.belnk[2].txt (ID = 2293)
10:12 PM: zjspagat@64.62.232[2].txt (ID = 1987)
10:12 PM: zjspagat@belnk[1].txt (ID = 2292)
10:12 PM: zjspagat@64.62.232[4].txt (ID = 1987)
10:13 PM: Found Spy Cookie: experclick cookie
10:13 PM: zjspagat@experclick[1].txt (ID = 2639)
10:13 PM: zjspagat@64.62.232[5].txt (ID = 1987)
10:13 PM: zjspagat@mrskin[2].txt (ID = 3020)
10:13 PM: zjspagat@dist.belnk[2].txt (ID = 2293)
10:13 PM: Found Spy Cookie: sexsuche cookie
10:13 PM: zjspagat@counter.sexsuche[1].txt (ID = 3360)
10:13 PM: Found Spy Cookie: toplist cookie
10:13 PM: zjspagat@toplist[1].txt (ID = 3557)
10:13 PM: zjspagat@about[4].txt (ID = 2037)
10:13 PM: Found Spy Cookie: adlegend cookie
10:13 PM: zjspagat@adlegend[1].txt (ID = 2074)
10:13 PM: Found Spy Cookie: danni cookie
10:13 PM: zjspagat@danni[2].txt (ID = 2493)
10:13 PM: Found Spy Cookie: paypopup cookie
10:13 PM: zjspagat@popunder.paypopup[1].txt (ID = 3120)
10:13 PM: Found Spy Cookie: xxx69 cookie
10:13 PM: zjspagat@www.xxx69[1].txt (ID = 3732)
10:13 PM: zjspagat@toplist[2].txt (ID = 3557)
10:13 PM: zjspagat@tattoo.about[2].txt (ID = 2038)
10:13 PM: Found Spy Cookie: kmpads cookie
10:13 PM: zjspagat@kmpads[1].txt (ID = 2909)
10:13 PM: Found Spy Cookie: starware.com cookie
10:13 PM: zjspagat@starware[2].txt (ID = 3441)
10:13 PM: Found Spy Cookie: adknowledge cookie
10:13 PM: zjspagat@adknowledge[2].txt (ID = 2072)
10:13 PM: Found Spy Cookie: screensavers.com cookie
10:13 PM: zjspagat@www.screensavers[1].txt (ID = 3298)
10:13 PM: zjspagat@i.screensavers[1].txt (ID = 3298)
10:13 PM: zjspagat@dist.belnk[4].txt (ID = 2293)
10:13 PM: Found Spy Cookie: yieldmanager cookie
10:13 PM: zjspagat@ad.yieldmanager[2].txt (ID = 3751)
10:13 PM: zjspagat@paypopup[1].txt (ID = 3119)
10:13 PM: Found Spy Cookie: partypoker cookie
10:13 PM: zjspagat@partypoker[2].txt (ID = 3111)
10:13 PM: zjspagat@partypoker.touchclarity[1].txt (ID = 3567)
10:13 PM: zjspagat@mrskin[1].txt (ID = 3020)
10:13 PM: Found Spy Cookie: reunion cookie
10:13 PM: zjspagat@reunion[2].txt (ID = 3255)
10:13 PM: Found Spy Cookie: customer cookie
10:13 PM: zjspagat@customer[1].txt (ID = 2481)
10:13 PM: Found Spy Cookie: 2o7.net cookie
10:13 PM: zjspagat@microsoftwga.112.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@adopt.hbmediapro[3].txt (ID = 2768)
10:13 PM: zjspagat@www.mrskin[4].txt (ID = 3021)
10:13 PM: zjspagat@adknowledge[1].txt (ID = 2072)
10:13 PM: zjspagat@cnn.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@vgstrategies.about[1].txt (ID = 2038)
10:13 PM: zjspagat@danni[3].txt (ID = 2493)
10:13 PM: zjspagat@metacafe.122.2o7[2].txt (ID = 1958)
10:13 PM: Found Spy Cookie: directtrack cookie
10:13 PM: zjspagat@directtrack[2].txt (ID = 2527)
10:13 PM: zjspagat@canadiansponsors.directtrack[2].txt (ID = 2528)
10:13 PM: Found Spy Cookie: mp3s hits cookie
10:13 PM: zjspagat@www.mp3shits[1].txt (ID = 3019)
10:13 PM: Found Spy Cookie: cc214142 cookie
10:13 PM: zjspagat@ads.cc214142[1].txt (ID = 2367)
10:13 PM: zjspagat@tgn.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@starware[3].txt (ID = 3441)
10:13 PM: zjspagat@www.screensavers[3].txt (ID = 3298)
10:13 PM: Found Spy Cookie: overture cookie
10:13 PM: zjspagat@data1.perf.overture[1].txt (ID = 3106)
10:13 PM: zjspagat@i.screensavers[3].txt (ID = 3298)
10:13 PM: zjspagat@paranormal.about[1].txt (ID = 2038)
10:13 PM: zjspagat@maxim.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@microsofteup.112.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@partygaming.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@paypopup[2].txt (ID = 3119)
10:13 PM: Found Spy Cookie: web-stat cookie
10:13 PM: zjspagat@server4.web-stat[2].txt (ID = 3649)
10:13 PM: zjspagat@cz11.clickzs[3].txt (ID = 2413)
10:13 PM: Found Spy Cookie: primaryads cookie
10:13 PM: zjspagat@aff.primaryads[1].txt (ID = 3190)
10:13 PM: zjspagat@partypoker[3].txt (ID = 3111)
10:13 PM: Found Spy Cookie: clickandtrack cookie
10:13 PM: zjspagat@hits.clickandtrack[1].txt (ID = 2397)
10:13 PM: Found Spy Cookie: www.mature-post cookie
10:13 PM: zjspagat@www.mature-post[1].txt (ID = 3703)
10:13 PM: Found Spy Cookie: winantiviruspro cookie
10:13 PM: zjspagat@www.winantiviruspro[2].txt (ID = 3690)
10:13 PM: zjspagat@msnportal.112.2o7[1].txt (ID = 1958)
10:13 PM: Found Spy Cookie: starpulse cookie
10:13 PM: zjspagat@www.starpulse[1].txt (ID = 3440)
10:13 PM: zjspagat@tacoda[3].txt (ID = 6444)
10:13 PM: zjspagat@cneteurope.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@torstardigital.122.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@www.teenax[3].txt (ID = 3504)
10:13 PM: zjspagat@cbs.112.2o7[1].txt (ID = 1958)
10:13 PM: zjspagat@kmpads[2].txt (ID = 2909)
10:13 PM: zjspagat@about[3].txt (ID = 2037)
10:13 PM: zjspagat@netsecurity.about[1].txt (ID = 2038)
10:13 PM: Found Spy Cookie: techtarget cookie
10:13 PM: zjspagat@searchwindowssecurity.techtarget[2].txt (ID = 3500)
10:13 PM: zjspagat@kinghost[1].txt (ID = 2903)
10:13 PM: zjspagat@ad.yieldmanager[1].txt (ID = 3751)
10:13 PM: Cookie Sweep Complete, Elapsed Time: 00:00:10
10:13 PM: Starting File Sweep
10:13 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
10:15 PM: Found Adware: wild media - statblaster
10:15 PM: msview.ini (ID = 77091)
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\system.log". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\software.log". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\default.log". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\security.log". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\sam.log". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\default". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\security". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\software". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\system". The process cannot access the file because it is being used by another process
10:19 PM: Warning: Failed to open file "c:\winnt\system32\config\sam". The process cannot access the file because it is being used by another process
10:24 PM: Found Adware: directrevenue-abetterinternet
10:24 PM: alchem.inf (ID = 83109)
10:24 PM: Found Adware: twain-tech
10:24 PM: polmx.inf (ID = 81856)
10:24 PM: msvini.inf (ID = 77093)
10:26 PM: Found Adware: bonzi buddy
10:26 PM: bonzi (ID = 51620)
10:35 PM: Warning: Failed to open file "c:\winnt\softwaredistribution\eventcache\{23d3ed4d-ab0b-443c-a358-fbf485e34242}.bin". The process cannot access the file because it is being used by another process
10:36 PM: Warning: Failed to open file "c:\documents and settings\administrator\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:36 PM: Warning: Failed to open file "c:\documents and settings\administrator\ntuser.dat". The process cannot access the file because it is being used by another process
10:36 PM: Warning: Failed to open file "c:\documents and settings\administrator\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:36 PM: Warning: Failed to open file "c:\documents and settings\administrator\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:36 PM: Warning: Failed to open file "c:\documents and settings\administrator\local settings\temp\temporary directory 1 for pop will eat itself - 3 albums [ugbrip].zip\pop will eat itself\pop will eat itself - dos dedos mis amigos\pop will eat itself - pop will eat itself - dos dedos mis amigos - 01 - ich bin ein ausland". The system cannot find the path specified
10:38 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf00cd0a1-3121-45f1-a0e2-7c28bac80c9a.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8125df76-dfc4-4eae-8200-4b1a6e1ae33d.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs02fc8321-92ad-4049-a766-cac82b08a256.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbe175b3c-50fe-4182-b64b-d576ced72439.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb56de1fb-2e7e-49a7-9f50-20d039645cdb.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0977a803-02d6-4891-8483-3e9c279587c0.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6968c650-a37f-4d59-9ce0-0645fd658f3c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsff7308da-7e52-42ab-a604-11736d820175.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs845aa920-bb10-42bb-a298-af3164376528.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc71346ea-3ef1-45d9-8b11-0e52ade9e003.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3ab1a5b0-4c3d-4cf8-9845-311f6724e870.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4ac79b0b-caa2-439b-94a0-a4e41febbd0c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs304b82d5-24ca-4fb7-a894-b61368073f20.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs003c8c6f-c0e5-458b-9e29-270359662b9d.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5b48f2e5-b510-4f19-936f-84af71321172.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscea31fb3-c337-4fc5-b08e-2a4e8f8b9ed9.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs274dc1e0-1fd0-40ce-a811-bf0af94dbf6d.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscf5e78f6-e6ee-45cd-ae9a-764335e83be1.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs48a2da21-53ee-476f-a473-5aedfe106c43.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb229455f-e8b5-4f56-9cf5-6173fb2e490f.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa3e5f2b4-13e7-4d3c-94db-cbdf0580444c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4d122ddc-62b2-413d-bbdd-c9c47009097d.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd0afaff1-5308-412f-acde-18b99706bafd.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs76a6779b-45f9-43f6-ad77-30da9b3ff210.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs11309a1f-2766-40f2-a84f-eb0cd96884c8.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0895b963-f5c6-489f-8bc0-f8966a65edf7.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsde4beedb-0af3-49d6-b2a8-21d22920d0f3.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs56224b03-b642-4855-aae3-b0e7446e2ccb.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7cb3fca0-d1af-4c22-bea1-ffc4541524ea.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs41faf43b-edba-49ed-968d-369b254bdf0e.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs272f290b-f6a7-4ac2-ad42-888082acafdf.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf2fc97c0-db39-4f36-8c13-465a2b9fc131.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7dfd2e9e-5638-44e2-932e-5593380eaf15.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs81608f50-fe9f-4d5d-a6a8-a61ff5979670.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2948a17a-96e6-48f7-9023-f59224c02c83.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c0436dd-c3a3-48bc-bdd3-9a9fac93332b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa9371a31-a60e-4154-93e6-4a760cbba76e.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5c7b041b-ba95-4ad8-9f9b-bda3f0b86431.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2759e110-7782-4315-9f68-44387b2d80d5.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79f6bdcc-64e5-4959-906f-d6dde55acfbb.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs649edb2c-a87a-4363-9a69-ffdc5a259675.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf19acb51-b08d-45fc-89a4-2a5334779936.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa9fb6666-feb2-429b-ad4a-53c62ba61674.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs559a8e2f-2c70-4451-b53d-d18e209cd3ce.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5e87645b-74b8-4257-ab10-8de403504b8a.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsafae3fac-cfb5-4344-96da-8e7e2b77f891.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79f96590-f245-4298-8c28-185e726ae4b9.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs65ce5f4a-56c5-4b39-b7bd-cf6bc17abb24.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseeaac055-ec91-4305-8c5b-3b953f292b6e.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf9cbf4b3-df55-4ff8-b2de-8a47cb1e6c42.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs753ea6e1-0e0c-470a-a332-3db9a5c1fcf0.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd5e8c6f5-e603-496e-8491-1d7ebcbd42a2.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8a0f0622-2f0e-4897-838b-cb778412a51f.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs078752ba-cd06-47a9-8df3-aef7532a014c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa6fbe7a6-2a2c-4ad9-86fb-0ad72fc30b10.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb3cae8b9-cb2e-402c-8d88-a2c1df236836.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e987913-79c4-4fd1-b780-72444a2bf68d.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb5776153-3448-424f-acbc-17ee69e10b74.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc062bbf5-c46a-4a43-a46b-6799b8977fab.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd9145008-9654-48d5-8cc7-73430763dd86.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs78f68924-685b-4447-832d-2e4f2ab1604a.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdd260d27-f769-442c-8ae2-85e8dda559f7.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs81e21aa9-4d88-489c-a738-e08f6b91bf43.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9833ad1b-9b78-4e02-bd45-b73514e5a4ca.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6ad3c345-ada5-4c60-bb54-ab19fdada4d1.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse60832d7-69d8-4950-9b81-f1252dd4d2e1.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3f15016b-ef42-4a7f-b8e7-fd8b66e7ed0e.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs11deb6b1-1072-4478-86a9-4f2904cde0a4.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8431e093-8ffe-471d-84bc-6c77d277bbf8.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa3d92f7d-90f5-497f-bf45-8959f98bfe1e.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbeefac64-7bfd-4572-bce2-b623cdc39309.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb26d72c4-8221-49c5-bf60-5bcfce043d50.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0be20a40-1e3a-486e-b065-3db09f2fb70f.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6f1a5eaa-41b2-4843-9c5c-21898dad457c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa87f8a78-443f-4c47-aa9d-419cbcd34e0c.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs168a0c01-7620-41bd-b39c-3f8a51921501.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs89067eda-7e6e-402f-9657-8ef7db60dab5.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa1f679ee-3e7c-4457-90a8-cf63575843c1.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0aa88d74-fd7b-4369-ad06-1c7d2c4b406b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc00f448c-2e95-40d4-9d9e-1995cf623f56.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs939a9192-ee70-4865-8433-5ad7bd29fd1f.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4a741043-83ee-4be1-ba5e-d9807cdc35b1.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4731ddb-9403-4d92-ad12-41d55f69f116.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs76ef4971-f902-40af-bba3-cc6a8e776c5b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdaaa95b8-bae0-4c30-be5d-3cde52ac0d9b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8151936a-0d29-4142-9ab5-67967fb8acb5.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdb5676eb-50cb-4dca-a0ac-3b3e14b903f8.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb3cf73fc-0516-4765-9e35-3adbf8a5906a.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs386270ea-2ee9-4e7e-b6ce-cde67091e108.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9c444e65-2749-49e8-8621-502d3c23d14f.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa5223799-e817-4eb1-bf2a-5f22bbb4a0b6.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd243a5f6-fc60-4e03-bcb7-8ff0415d587b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf8651c70-10eb-450d-9e48-a02812f17dfd.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf53185c6-882c-4182-8940-28ff39424c24.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs687af6c4-195b-4be5-b3d2-2e7b0b973732.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8bc06b0f-a9f4-4d79-9581-1d7d24483190.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa54f4f6f-33aa-420d-8e2c-779481c65f0b.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs766bcb4c-cf30-450d-9263-3e5f2b19d708.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf80b13f9-4b04-479f-a2d2-92dc144821e6.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa4d39d0c-9733-48c6-8f76-cfab00dc9bfd.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs33a0cc9d-3e62-4084-affa-afb5b31259fa.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68967d6d-7a44-4414-bc10-ede88e19f3c4.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa8508205-e353-4479-bf91-303cc730e0ad.tmp". The process cannot access the file because it is being used by another process
10:38 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc455937f-5509-4f33-b83f-0774db772144.tmp". The process cannot access the file because it is being used by another process
10:45 PM: Found System Monitor: diablo keys
10:45 PM: uninstall.exe (ID = 58145)
11:03 PM: Warning: Unhandled Archive Type
11:14 PM: uninstall mcgraw-hill dictionary of engineering.lnk (ID = 58145)
11:14 PM: File Sweep Complete, Elapsed Time: 01:01:38
11:14 PM: Full Sweep has completed. Elapsed time 01:06:58
11:14 PM: Traces Found: 176
11:26 PM: Removal process initiated
11:26 PM: Quarantining All Traces: 180search assistant/zango
11:26 PM: Quarantining All Traces: diablo keys
11:26 PM: Quarantining All Traces: directrevenue-abetterinternet
11:2