Here's the log sorry for delay this is the problem with me being in Australia I guess.....
********
4:15 PM: | Start of Session, Friday, 18 November 2005 |
4:15 PM: Spy Sweeper started
4:15 PM: Sweep initiated using definitions version 574
4:15 PM: Found Adware: look2me
4:15 PM: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\shell extensions\ || dllname (ID = 129986)
4:15 PM: o248lchu1f48.dll (ID = 129986)
4:15 PM: Starting Memory Sweep
4:16 PM: Found Adware: icannnews
4:16 PM: Detected running threat: C:\WINDOWS\system32\o248lchu1f48.dll (ID = 83)
4:17 PM: Detected running threat: C:\WINDOWS\system32\guard.tmp (ID = 83)
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:18 PM: Memory Sweep Complete, Elapsed Time: 00:02:56
4:18 PM: Starting Registry Sweep
4:18 PM: Found Adware: 2020search
4:18 PM: HKLM\system\currentcontrolset\services\.net connection service\ (12 subtraces) (ID = 101924)
4:18 PM: Found Adware: azsearch toolbar
4:18 PM: HKLM\software\azentretienco\ (3 subtraces) (ID = 103905)
4:18 PM: Found Adware: hotbar
4:18 PM: HKCR\appid\{5ca2095f-e932-48bf-88e1-603094e9331f}\ (1 subtraces) (ID = 127219)
4:18 PM: HKLM\software\classes\appid\{5ca2095f-e932-48bf-88e1-603094e9331f}\ (1 subtraces) (ID = 127382)
4:18 PM: Found Adware: internet washer
4:18 PM: HKLM\software\internet washer\ (7 subtraces) (ID = 128874)
4:18 PM: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\iwcheck.dll (ID = 128876)
4:18 PM: Found Adware: websearch toolbar
4:18 PM: HKLM\system\currentcontrolset\enum\root\legacy_wintoolssvc\ (7 subtraces) (ID = 146518)
4:19 PM: Found Adware: command
4:19 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ (7 subtraces) (ID = 892523)
4:19 PM: Found Adware: dollarrevenue
4:19 PM: HKLM\software\microsoft\drsmartload\ (1 subtraces) (ID = 916795)
4:19 PM: Found Adware: cws-aboutblank
4:19 PM: HKU\S-1-5-21-1085031214-1035525444-725345543-1004\software\microsoft\internet explorer\main\ || search bar_bak (ID = 115924)
4:19 PM: HKU\S-1-5-21-1085031214-1035525444-725345543-1004\software\microsoft\internet explorer\main\ || search page_bak (ID = 115925)
4:19 PM: HKU\S-1-5-21-1085031214-1035525444-725345543-1004\software\microsoft\internet explorer\main\ || search page_bak (ID = 774883)
4:19 PM: Registry Sweep Complete, Elapsed Time:00:00:17
4:19 PM: Starting Cookie Sweep
4:19 PM: Found Spy Cookie: enhance cookie
4:19 PM:
[email protected][1].txt (ID = 2614)
4:19 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
4:19 PM: Starting File Sweep
4:19 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:19 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:19 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:19 PM: Found Adware: lopdotcom
4:19 PM: c:\program files\c2media (ID = -2147480676)
4:19 PM: c:\program files\hbinst (ID = -2147480873)
4:19 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:19 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:20 PM: d_icons_buttons_bbar8[1].xip (ID = 114356)
4:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:20 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:20 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:20 PM: progress.res (ID = 62367)
4:20 PM: d_icons_buttons_bbar2[1].xip (ID = 114393)
4:20 PM: t2_bg.res (ID = 121851)
4:20 PM: d_icons_buttons_bbar1.res (ID = 121825)
4:21 PM: d_icons_buttons_bbar5.res (ID = 121834)
4:21 PM: d_icons_buttons_bbar1[1].xip (ID = 114354)
4:21 PM: d_icons_buttons_bbar2.res (ID = 121831)
4:21 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:21 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:21 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:21 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:21 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:21 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:22 PM: Found Adware: winantispyware 2005
4:22 PM: 00337638.dll (ID = 119204)
4:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:22 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:23 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:23 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:23 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:23 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:23 PM: d_icons_buttons_bbar5[1].xip (ID = 114376)
4:23 PM: d_icons_buttons_bbar9[1].xip (ID = 114377)
4:23 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:23 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: d_icons_buttons_2000.res (ID = 62279)
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:24 PM: 00337635.dll (ID = 119203)
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:24 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:25 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:26 PM: d_icons_buttons_x[1].xip (ID = 121859)
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:26 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:27 PM: d_icons_buttons_3000[1].xip (ID = 62282)
4:27 PM: 00338867.dll (ID = 159)
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:27 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:28 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:28 PM: d_icons_buttons_1000.xip (ID = 62278)
4:28 PM: Found Adware: ist istbar
4:28 PM: regular_plugin.exe (ID = 193809)
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: 00338399.dll (ID = 159)
4:29 PM: 00337746.dll (ID = 159)
4:29 PM: d_icons_buttons_2000.xip (ID = 62280)
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:29 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: r06ulaj91do.dll (ID = 159)
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: 00337665.dll (ID = 159)
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:30 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:31 PM: d_icons_buttons_1000.res (ID = 62277)
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: 00337748.dll (ID = 159)
4:31 PM: 00337747.dll (ID = 159)
4:31 PM: 00337873.dll (ID = 159)
4:31 PM: guard.tmp (ID = 159)
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:31 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:31 PM: 00338777.dll (ID = 159)
4:31 PM: mv26l9fs1.dll (ID = 159)
4:31 PM: dnlm0131e.dll (ID = 159)
4:32 PM: d_icons_buttons_3000.res (ID = 62281)
4:32 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:32 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:32 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:32 PM: 00338396.dll (ID = 159)
4:32 PM: Found Adware: apropos
4:32 PM: atmtd.dll (ID = 166754)
4:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:33 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:33 PM: d_icons_weather[1].xip (ID = 121860)
4:33 PM: d_icons_weather.xip (ID = 121860)
4:33 PM: tsd_bg.xip (ID = 62383)
4:33 PM: t2_bg.xip (ID = 121869)
4:34 PM: t2_bg[1].xip (ID = 121869)
4:34 PM: atmtd.dll._ (ID = 166754)
4:34 PM: d_icons_buttons_bbar1.xip (ID = 114354)
4:34 PM: tsd_bg[1].xip (ID = 62383)
4:34 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:34 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:34 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:34 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:34 PM: 00338293.dll (ID = 159)
4:34 PM: tsd_bg.res (ID = 62382)
4:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:35 PM: d_icons_buttons_bbar11[1].xip (ID = 114340)
4:35 PM: d_icons_buttons_bbar8.xip (ID = 114356)
4:35 PM: d_icons_buttons_bbar11.xip (ID = 114340)
4:35 PM: azesearch.bmp (ID = 50322)
4:35 PM: d_icons_buttons_x.xip (ID = 121859)
4:35 PM: d_icons_buttons_bbar9.xip (ID = 114377)
4:35 PM: d_icons_buttons_bbar5.xip (ID = 114376)
4:35 PM: default_hotbarcom.mnu (ID = 121820)
4:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:35 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:35 PM: d_icons_buttons_3000.xip (ID = 62282)
4:36 PM: d_icons_buttons_bbar2.xip (ID = 114393)
4:36 PM: d_icons_buttons_bbar8.res (ID = 121837)
4:36 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:36 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:36 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:36 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:36 PM: d_icons_weather.res (ID = 121840)
4:36 PM: d_icons_buttons_bbar11.res (ID = 121827)
4:36 PM: d_icons_buttons_1000[1].xip (ID = 62278)
4:36 PM: d_icons_buttons_bbar9.res (ID = 121838)
4:36 PM: d_icons_buttons_x.res (ID = 121839)
4:36 PM: d_icons_buttons_2000[1].xip (ID = 62280)
4:37 PM: Found Adware: gain-supported software
4:37 PM: 00337323.esp (ID = 61339)
4:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:37 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:37 PM: 00338764.dll (ID = 159)
4:37 PM: fpr8039ue.dll (ID = 159)
4:37 PM: 00339493.dll (ID = 159)
4:38 PM: o248lchu1f48.dll (ID = 159)
4:38 PM: jtp8077ue.dll (ID = 159)
4:38 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:38 PM: Found Trojan Horse: backdoor-requester
4:38 PM: system.req.5 (ID = 50455)
4:38 PM: 00337486.gdt (ID = 61574)
4:38 PM: backup-20051103-101411-680.inf (ID = 50329)
4:38 PM: 00337499.inf (ID = 63969)
4:38 PM: linkpathlegal[1].xip (ID = 121866)
4:38 PM: linkpathlegal.xip (ID = 121866)
4:38 PM: linkpathlegal.txt (ID = 121849)
4:38 PM: d_icons_buttons_logos[1].xip (ID = 62296)
4:38 PM: d_icons_buttons_logos.xip (ID = 62296)
4:38 PM: d_icons_buttons_logos.res (ID = 62295)
4:38 PM: d_icons_buttons_other[1].xip (ID = 62296)
4:38 PM: d_icons_buttons_other.xip (ID = 62296)
4:38 PM: d_icons_buttons_other.res (ID = 62295)
4:38 PM: progress[1].xip (ID = 62368)
4:38 PM: progress.xip (ID = 62368)
4:38 PM: d_icons_buttons_bar[1].xip (ID = 62296)
4:38 PM: d_icons_buttons_bar.xip (ID = 62296)
4:38 PM: d_icons_buttons_bar.res (ID = 62295)
4:38 PM: d_icons_buttons_bbar13[1].xip (ID = 114341)
4:38 PM: d_icons_buttons_bbar13.xip (ID = 114341)
4:38 PM: d_icons_buttons_bbar13.res (ID = 121829)
4:38 PM: d_icons_buttons_bbar14[1].xip (ID = 114341)
4:38 PM: d_icons_buttons_bbar14.xip (ID = 114341)
4:38 PM: d_icons_buttons_bbar14.res (ID = 121829)
4:38 PM: business_promo[1].xip (ID = 121856)
4:38 PM: business_promo.xip (ID = 121856)
4:38 PM: default_mails.mnu (ID = 121821)
4:38 PM: email-def-511724-9595.mnu (ID = 121842)
4:38 PM: ads[1].xip (ID = 121855)
4:38 PM: ads.xip (ID = 121855)
4:38 PM: ads.cdf (ID = 121815)
4:38 PM: hotbar-premium[1].xip (ID = 114359)
4:38 PM: hotbar-premium.xip (ID = 114359)
4:38 PM: hotbar-premium.cdf (ID = 121845)
4:38 PM: hotbar-premium-hotbar-premium.mnu (ID = 121844)
4:38 PM: Found Adware: directrevenue-abetterinternet
4:38 PM: belt.inf (ID = 83154)
4:38 PM: 00337496.inf (ID = 62344)
4:38 PM: biini.inf (ID = 83199)
4:38 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:38 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:39 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:39 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:40 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:41 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:41 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:41 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:42 PM: File Sweep Complete, Elapsed Time: 00:22:53
4:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:42 PM: Full Sweep has completed. Elapsed time 00:26:15
4:42 PM: Traces Found: 163
4:42 PM: Removal process initiated
4:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:42 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:43 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:43 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
4:43 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:43 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
4:43 PM: Quarantining All Traces: cws-aboutblank
4:43 PM: Quarantining All Traces: directrevenue-abetterinternet
4:43 PM: Quarantining All Traces: icannnews
4:43 PM: icannnews is in use. It will be removed on reboot.
4:43 PM: C:\WINDOWS\system32\o248lchu1f48.dll is in use. It will be removed on reboot.
4:43 PM: C:\WINDOWS\system32\guard.tmp is in use. It will be removed on reboot.
4:43 PM: Quarantining All Traces: ist istbar
4:43 PM: Quarantining All Traces: look2me
4:43 PM: look2me is in use. It will be removed on reboot.
4:43 PM: o248lchu1f48.dll is in use. It will be removed on reboot.
4:43 PM: guard.tmp is in use. It will be removed on reboot.
4:43 PM: o248lchu1f48.dll is in use. It will be removed on reboot.
4:43 PM: jtp8077ue.dll is in use. It will be removed on reboot.
4:43 PM: Quarantining All Traces: lopdotcom
4:43 PM: Quarantining All Traces: websearch toolbar
4:43 PM: Quarantining All Traces: 2020search
4:43 PM: Quarantining All Traces: apropos
4:43 PM: Quarantining All Traces: azsearch toolbar
4:43 PM: Quarantining All Traces: backdoor-requester
4:43 PM: Quarantining All Traces: gain-supported software
4:43 PM: Quarantining All Traces: hotbar
4:44 PM: Quarantining All Traces: command
4:44 PM: Quarantining All Traces: dollarrevenue
4:44 PM: Quarantining All Traces: internet washer
4:44 PM: Quarantining All Traces: winantispyware 2005
4:44 PM: Quarantining All Traces: enhance cookie
4:44 PM: Preparing to restart your computer. Please wait...
4:44 PM: Removal process completed. Elapsed time 00:02:04
********
4:14 PM: | Start of Session, Friday, 18 November 2005 |
4:14 PM: Spy Sweeper started
4:15 PM: Your spyware definitions have been updated.
4:15 PM: | End of Session, Friday, 18 November 2005 |
Thanks Giberdee