********
8:14 PM: | Start of Session, Monday, February 12, 2007 |
8:14 PM: Spy Sweeper started
8:14 PM: Sweep initiated using definitions version 858
8:14 PM: Starting Memory Sweep
8:45 PM: Memory Sweep Complete, Elapsed Time: 00:30:51
8:45 PM: Starting Registry Sweep
8:46 PM: Found Adware: cws_ns3
8:46 PM: HKCR\clsid\{1f846f72-8833-7b85-fbf7-b2d81d30ab82}\ (2 subtraces) (ID = 117736)
8:46 PM: HKCR\clsid\{a5b3b4a7-6bd2-e7ce-e654-7a1d658d1bb3}\ (2 subtraces) (ID = 118745)
8:46 PM: HKLM\software\classes\clsid\{1f846f72-8833-7b85-fbf7-b2d81d30ab82}\ (2 subtraces) (ID = 119611)
8:47 PM: HKLM\software\classes\clsid\{a5b3b4a7-6bd2-e7ce-e654-7a1d658d1bb3}\ (2 subtraces) (ID = 120584)
8:47 PM: Found Adware: ie driver
8:47 PM: HKLM\software\microsoft\windows\currentversion\uninstall\8d52ff82f449\ (2 subtraces) (ID = 128021)
8:48 PM: Found Adware: wild media - minigolf
8:48 PM: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\minigolf_affiliate.exe (ID = 135058)
8:49 PM: Found Adware: wurldmedia
8:49 PM: HKCR\appid\sostatatl.exe\ (1 subtraces) (ID = 147535)
8:49 PM: HKCR\appid\{dee5d795-a276-43b5-a04a-511149a354f0}\ (1 subtraces) (ID = 147536)
8:49 PM: HKCR\interface\{9603a736-05b9-4d78-bdd5-bdcb0914e522}\ (8 subtraces) (ID = 147565)
8:49 PM: Found Adware: ist yoursitebar
8:49 PM: HKCR\interface\{bf06da8e-2beb-4816-9bbd-f7625246e245}\ (8 subtraces) (ID = 147834)
8:49 PM: HKLM\software\classes\interface\{bf06da8e-2beb-4816-9bbd-f7625246e245}\ (8 subtraces) (ID = 147840)
8:51 PM: Found Adware: findthewebsiteyouneed hijack
8:51 PM: HKU\WRSS_Profile_tvz\software\microsoft\internet explorer\main\ || default_search_url (ID = 125236)
8:51 PM: HKU\WRSS_Profile_tvz\software\microsoft\internet explorer\search\searchassistant explorer\main\ || default_search_url (ID = 555437)
8:51 PM: Found Adware: cydoor
8:51 PM: HKU\WRSS_Profile_tvz\software\cydoor\ (801 subtraces) (ID = 639126)
8:51 PM: HKU\WRSS_Profile_tvz\software\cydoor services\ (12 subtraces) (ID = 639128)
8:51 PM: HKU\WRSS_Profile_tvz\software\microsoft\internet explorer\search\searchassistant explorer\main\ || Default_Search_URL (ID = 1554015)
8:51 PM: HKU\WRSS_Profile_tvz\software\microsoft\internet explorer\main\ || default_search_url (ID = 1607009)
8:51 PM: Found Adware: hiwire
8:51 PM: HKU\WRSS_Profile_tvz\software\hiwire\ (79 subtraces) (ID = 1874339)
8:51 PM: Registry Sweep Complete, Elapsed Time:00:05:53
8:51 PM: Starting Cookie Sweep
8:51 PM: Found Spy Cookie: stlyrics cookie
8:51 PM: anyuser@stlyrics[1].txt (ID = 3461)
8:51 PM: Found Spy Cookie: about cookie
8:51 PM: anyuser@about[1].txt (ID = 2037)
8:51 PM:
[email protected][1].txt (ID = 2038)
8:51 PM: Cookie Sweep Complete, Elapsed Time: 00:00:02
8:51 PM: Starting File Sweep
8:51 PM: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_bftat4jh3rtiyaj". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_jkvoej52lbutyuq". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_kkjl7pnw0n9wera". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_z5pacq40vjaauwb". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_eltbbtc4dxuajqt". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_0zdx7uqvgfxaons". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_cbfxjjs9rh8ksjv". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_zbqpp8k5xpldpb3". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_elpadrqxgxpj2i7". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_ecomfnmu1f45dqh". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_1acbjdbfte3rwph". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_dqyt0gm2us7qteu". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_zsc6b9hs9w355jw". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_vlsdjn8dq6jge9t". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_p6jze4aipdiuzlf". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_ce55zntqfr040ip". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_ovsnce55zntqfr0". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_hkojmy7lv47vn0l". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_xepa75cayygw8zp". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_8zb4a9dy3ysx6gq". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_vu37ddwj1iohof3". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_mtwb6knyhbgpqey". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_jsftcu6g7zphvb5". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_22qsjdoalcpculn". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_fst7gev0rafyo13". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_uuhu9nxj6da0ihd". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_q2sfbgiuhlufrms". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_b9iyhbsxujdg63l". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_jiw2kdcqzpneq25". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_tjbmo8iiz57bpif". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_8jus7ihox1m22vu". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_of7prvr5i5smata". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_hqvbnkoljlgu26z". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_5owvlk5x8gsoouw". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_c3bxbvedqpunwhu". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_5oa9g2sej69wyoe". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_mpxun896ywtnjav". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_u9xvbv9qotb5vbq". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_xwr4s2cl9ykxiea". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_nww5mtgwgvnpzzg". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_hhxwsmsmt4tpoof". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_1brcrhhkiwqf2oh". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_89hnqouminfywyo". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_krludqwqrfdxate". The process cannot access the file because it is being used by another process
9:07 PM: Warning: Failed to open file "c:\windows\temp\tmp_ng_rwuwtjyfzubmti5". The process cannot access the file because it is being used by another process
9:09 PM: Found Adware: security iguard
9:09 PM: chmhelp.chm (ID = 453379)
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2879d1bb-55ba-43e0-a31b-6b43606e84cc.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1cc286fb-1746-4ac2-9db6-3e6517a09b33.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs84d4a49f-d9ec-4994-b4a9-405f623d9d94.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd53ca69f-b527-4fc5-8bd9-da62baeed31c.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4c5856c5-c69e-4ce0-8aed-0743200ba4e1.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6d15f081-7d14-4415-8216-20e5224c55b8.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs34f68c3d-0a72-42b5-a39a-48f002c1c152.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa5fc9aee-cc6b-4e01-a5d9-a92398ac6ee0.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa1729ac0-4c9e-4556-ba00-3f4313bad719.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsee6c3528-794a-4147-8cc4-1450735e2217.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1ef792f7-2c61-4635-97f0-c09e86c4f9e8.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs43f57c05-035e-440e-b111-c8ded95d2e58.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs17d3a635-cf6e-4242-9da9-2ef9db62788f.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1e908fb6-f9aa-47b2-9a9a-81afd2e6ffd7.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1fcd87c1-8c28-4b94-8eb8-fd1ccf06959d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse428643c-b96e-44e8-996e-c3df3a3e8931.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse7193b96-8da7-43cd-8c62-4cfb5c302b87.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse702586a-8506-4935-a416-7ced47e953e3.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscse76f86b0-ff27-414d-86a9-cc5194011088.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsc4690f38-8433-4185-a19f-6374db6ffd29.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs9f0370b2-f950-4537-b724-dbd1d53129c7.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd862e0a3-6eb5-4041-875d-23e8cad02514.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs817037b9-67fa-47d0-a4f1-2ad8b343a790.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6651bce3-2387-42d7-9b5b-edce8739bcdc.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb79fde07-2548-4b8c-9de3-11535ee89fa2.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1373ca08-3bef-441e-a979-ff90f6061104.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsccf22b79-79e5-4f84-b774-587d15706a1b.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1312a01a-6879-43ef-9899-c2983d4a43c7.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4f3f6020-1731-47df-aabd-23edb17d3112.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa92e9f0f-3da1-4700-9199-1319bbf77239.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5f17b33e-8cd4-4ee4-a9f4-b83dbf702fa3.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs82c58ec2-4bb5-4de6-b255-fd599bb094ef.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7c1966b6-eef8-432d-888a-c6799967bd28.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs96b77a96-3137-4b14-9d39-3f8f4be91871.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf03f8ffa-9955-4b85-ac17-748b529d2ced.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb0ef6fec-5390-469c-ad0f-24270a586ff4.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs37d1bf3b-d5bf-4b4a-b483-c3893fd7352e.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb30db284-6e78-4659-ba51-9b5bd92959b9.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb6c59076-48a6-451a-9cd5-4a15ea7b9744.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs057eb328-e348-44b5-97bb-d17b70c275fa.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7285fdf7-1363-493e-8bf3-7075124c80cf.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa38ce074-e5e8-4a5c-b46c-b317ab4940ce.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs043ef08e-f2b6-4caf-8042-c6d155e884ab.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1f890f6e-d618-4b1f-9bdd-864012b044e6.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd76f581d-a6eb-4f59-980e-9e0ffccee875.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs2aa8d9e9-63cb-4fe9-9883-d9767d3ab42e.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb539a9a9-dbb5-4d2a-b2ec-af02da28cea3.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8fb5d0ec-5d4a-4e6d-8d2f-2f0e691ed47c.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscseab82cd9-b782-4384-a081-e269d5482ace.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd1c33251-85b0-48c9-b5ee-ca81b98f5d17.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbafcaacd-a6f0-46ee-a632-bf350b4674ae.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfe13f2a3-90a6-41c4-8473-08629c319239.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0f504324-78ff-4157-97c4-82aecc047c86.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs0d4c90c1-3be0-4773-9b94-8e5d0a6b73bf.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4b9a8030-dd9e-4bce-be2b-a8f848c5d5ab.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsfdae7cd8-4a47-424d-bfce-e1d30fb5ae5f.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs60189228-33ba-4981-a941-1a0d43ffdb38.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs62cce5b3-4bd2-4eab-b599-d8ae7eacb88d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1b50e378-166f-4f58-a2aa-8f45c7049eab.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb6dd6e44-318f-4a19-bc2c-365babd2c610.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs69d28634-edfa-487a-b39d-a99547f093ac.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs94101bdc-0bef-4fdd-b2d6-8901fc07080d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs6666273e-01f7-4fa5-be1d-161e872422dd.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsed98e0f3-a405-47f0-93ec-63a5b05f2ac1.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d788f88-f8d6-4676-9a73-02ecf1fdcbcf.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs003fdc84-9155-4f94-8d66-d6010eafa68c.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs208f3182-fd7f-4b6e-98cb-3db86a8ace38.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsa7e4bcdb-446f-4790-807c-7cb7d6947325.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs97cb3c3c-b2e7-4a79-8068-4179c8bebf66.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7e74b352-cf13-4f97-b81c-165d75667a71.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs56809ae4-999e-4b56-915c-eb8f5baf8349.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs01586796-827b-4e88-afad-c03798a24797.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8488ee94-5af2-423e-a3bc-91436975c50d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsaef3c6b4-c36b-4fbf-9937-a0afd2271d27.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs5fa2328c-e27e-46d4-bfd5-f72c7c41a9ae.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd9093b5f-1507-4c76-8701-aa021985518e.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd7f293c1-5a5b-4e94-b909-6c9db565e553.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d0d6bbc-9c99-49e4-a2dd-43a93de08af2.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs8df9edf9-fbaf-45b9-bfaf-895f9e8e1ffb.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbc93a7e9-8553-4127-a1fa-d85a72e1902e.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsdd6d425b-29d8-42e3-be39-146d01c15c05.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf0cd9b3f-21cd-45b6-b428-dc21b786fbda.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs50fce577-261a-4a86-b0f0-9df4baa88811.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3d165947-8dcb-40e0-b017-ec758d17ddbe.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs59f71a81-2ba1-42f5-8b0b-f3ef6b8dfe61.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs4d8dc1fd-410b-4ad5-9b26-a0872dcaebd9.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7fa67d18-7960-4f8b-92c5-e12adc4a5c49.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs3204a650-74bb-4a77-9761-41eb741772c5.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf4d5ee43-ac92-43ac-9728-6c1be36a4fc1.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd49a3e4e-2af1-40c4-9924-292cab69f904.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsd88001f5-ac9c-4d02-ac38-9ddddb20c427.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs7b672d01-8525-4c65-ae98-436a9568cf02.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsb2d89c57-0206-4cb9-a164-aecec9bf01d4.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs76224e0c-7d95-404f-938b-3f989636e000.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf7c87140-5e26-46c2-9d3f-236f88891e72.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs30b82bbb-78d4-4be3-9c21-8071bca8b71d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsbe73a53a-5084-4ad7-b2fc-677d9e84e26b.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs63697cb6-4dee-4e36-a580-d318863e07b6.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs786793cb-fb79-4b33-8ee6-aff066f1e63d.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs84935039-792b-4081-8c28-f155e45a10fc.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscsf7218207-ef58-437f-9efe-1b087a4edfd4.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs1a865471-f066-4951-b017-8ae9452c07e5.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs264a3c29-970f-45fb-91f1-0522423a7d44.tmp". The process cannot access the file because it is being used by another process
9:42 PM: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs22deaea0-7dfc-4c08-a239-0a2a838b373b.tmp". The process cannot access the file because it is being used by another process
9:49 PM: Found Adware: purityscan
9:49 PM: a0001112.cpy (ID = 73136)
11:10 PM: adobe cs.zip (ID = 258153)
11:10 PM: Warning: Unhandled Archive Type
11:12 PM: Warning: Invalid file - not a PKZip file
11:15 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:18 PM: Warning: Invalid file - not a PKZip file
11:19 PM: File Sweep Complete, Elapsed Time: 02:28:18
11:19 PM: Full Sweep has completed. Elapsed time 03:05:41
11:19 PM: Traces Found: 952
7:31 AM: Removal process initiated
7:31 AM: Quarantining All Traces: cws_ns3
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine cws_ns3
7:31 AM: Failed to quarantine clsid\{1f846f72-8833-7b85-fbf7-b2d81d30ab82}\
7:31 AM: Failed to quarantine clsid\{a5b3b4a7-6bd2-e7ce-e654-7a1d658d1bb3}\
7:31 AM: Failed to quarantine HKLM: software\classes\clsid\{1f846f72-8833-7b85-fbf7-b2d81d30ab82}\
7:31 AM: Failed to quarantine HKLM: software\classes\clsid\{a5b3b4a7-6bd2-e7ce-e654-7a1d658d1bb3}\
7:31 AM: Quarantining All Traces: ie driver
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine ie driver
7:31 AM: Failed to quarantine HKLM: software\microsoft\windows\currentversion\uninstall\8d52ff82f449\
7:31 AM: Quarantining All Traces: ist yoursitebar
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine ist yoursitebar
7:31 AM: Failed to quarantine adobe cs.zip
7:31 AM: Failed to quarantine interface\{bf06da8e-2beb-4816-9bbd-f7625246e245}\
7:31 AM: Failed to quarantine HKLM: software\classes\interface\{bf06da8e-2beb-4816-9bbd-f7625246e245}\
7:31 AM: Quarantining All Traces: purityscan
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine purityscan
7:31 AM: Failed to quarantine a0001112.cpy
7:31 AM: Quarantining All Traces: cydoor
7:31 AM: Quarantining All Traces: findthewebsiteyouneed hijack
7:31 AM: Quarantining All Traces: hiwire
7:31 AM: Quarantining All Traces: security iguard
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine security iguard
7:31 AM: Failed to quarantine chmhelp.chm
7:31 AM: Quarantining All Traces: wild media - minigolf
7:31 AM: Quarantining All Traces: wurldmedia
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine wurldmedia
7:31 AM: Failed to quarantine appid\sostatatl.exe\
7:31 AM: Failed to quarantine appid\{dee5d795-a276-43b5-a04a-511149a354f0}\
7:31 AM: Failed to quarantine interface\{9603a736-05b9-4d78-bdd5-bdcb0914e522}\
7:31 AM: Quarantining All Traces: about cookie
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine about cookie
7:31 AM: Failed to quarantine anyuser@about[1].txt
7:31 AM: Failed to quarantine
[email protected][1].txt
7:31 AM: Quarantining All Traces: stlyrics cookie
7:31 AM: Warning: Out of memory
7:31 AM: Failed to quarantine stlyrics cookie
7:31 AM: Failed to quarantine anyuser@stlyrics[1].txt
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:31 AM: Warning: Out of memory
7:32 AM: Removal process completed. Elapsed time 00:01:33
********
8:08 PM: | Start of Session, Monday, February 12, 2007 |
8:08 PM: Spy Sweeper started
8:11 PM: Your spyware definitions have been updated.
8:14 PM: | End of Session, Monday, February 12, 2007 |
************************************************
Logfile of HijackThis v1.99.1
Scan saved at 7:35:12 AM, on 2/13/2007
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\SUNBELT SOFTWARE\COUNTERSPY\CONSUMER\SUNTHREATENGINE.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\SUNBELT SOFTWARE\COUNTERSPY\CONSUMER\SUNPROTECTIONSERVER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\OPTIONS\CABS\LOGITECH\HP_FINDER.EXE
C:\PROGRAM FILES\IOMEGA\DRIVEICONS\IMGICON.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\SUNBELT SOFTWARE\COUNTERSPY\CONSUMER\SUNSERVER.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETGATE\SPY EMERGENCY 2006\SPYEMERGENCY.EXE
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\MY DOCUMENTS\VIRUSSPYWARE ISSUE\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://mail.yahoo.com/N3 - Netscape 7: user_pref("browser.startup.homepage", "
http://home.netscape.../7_1/home.html"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\pzp07wue.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%20FILES%5CNETSCAPE%5Csearchplugins%5CSBWeb_01.src"); (C:\WINDOWS\Application Data\Mozilla\Profiles\default\pzp07wue.slt\prefs.js)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDSG.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [HPLogiFinder] \WINDOWS\OPTIONS\CABS\LOGITECH\HP_FINDER.EXE
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\PROGRAM FILES\WINAMP\WINAMPa.exe"
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [SunServer] C:\PROGRAM FILES\SUNBELT SOFTWARE\COUNTERSPY\CONSUMER\sunserver.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE" /Q
O4 - HKCU\..\Run: [SpyEmergency] "C:\PROGRAM FILES\NETGATE\SPY EMERGENCY 2006\SpyEmergency.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmwordtrans.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://hp.my.yahoo.com
O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) -
http://216.249.24.14...tiveXImgCtl.CABO16 - DPF: {D30CA0FD-1CA0-11D4-AC78-006008A9A8BC} (WebBasedClientInstall Class) -
http://www.its.usd.e...pus/WebInst.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) -
http://security.syma...n/bin/cabsa.cabO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.syma...bin/AvSniff.cabO16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) -
http://zone.msn.com/...me/ZAxRcMgr.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zon...StatsClient.cabO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -
http://messenger.zon...ry/msgrchkr.cabO16 - DPF: {C1BAC744-8F0B-11D0-89E7-00C0A8295197} (Cameractl Class) -
http://64.75.174.5/push.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/...ro.cab34246.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) -
http://messenger.zon...nt.cab28578.cabO16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) -
http://messenger.zon...ss.cab28578.cabO16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) -
http://zone.msn.com/...bGameLoader.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) -
http://fdl.msn.com/z...s/heartbeat.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai...all/xscan53.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) -
http://www.bitdefend...bitdefender.cabO16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://zone.msn.com/...fault/shapo.cabO16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) -
http://zone.msn.com/...WebLauncher.cabO16 - DPF: {A0EAC162-A012-4AD8-B2E1-D5A0BBBCDA51} (PopupSh Control) -
http://206.222.17.18...ges/PopupSh.ocxO16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) -
http://zone.msn.com/...mjolauncher.cabO16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) -
http://www.slide.com...ageUploader.cabO16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -
http://www1.snapfish...fishActivia.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoft...free/asinst.cabO17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = mchsi.com
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 192.168.0.1
O20 - Winlogon Notify: !SASWinLogon - C:\PROGRAM FILES\SUPERANTISPYWARE\SASWINLO.DLL
This topic is locked
Sign In
Create Account
