Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Help with restore, please [CLOSED]


  • This topic is locked This topic is locked

#1
Govoni

Govoni

    New Member

  • Member
  • Pip
  • 1 posts
I read the Hyjack This information before posting here but I am a little afraid to add anything else to my mess. I feel like I have made quite a bit of headway, but have not gotten the whole problem settled yet. I hope someone can help me to clean up the scraps. Thanks in advance and here is the story....

I downloaded a dptrojan file in an ActiveX download, by mistake, and when I realized what was happening, I couldn't stop it. Closing the browser didn't keep it from infecting my computer, either. Immediately, I started getting loads of advertisement windows popping up and the *%$#* thing, took control of my computer, pretty much. I have been trying to clean it up for the past 3 days.

I ran my Norton's Antivirus, right away and found that I had the trojan. The next day, I bought and installed Spy Sweep and on the first run, it turned up something like 143 adware, cookies and spyware files. I did a sweep and removed, quaratined, and deleted all that I could, plus the trojan. I then found "NoAdware", on the net and d/l that. When I ran that, it found MORE adware and spyware files! I ordered it to remove those files and it did fairly well. I was getting a serious disk error at boot up (BCCode:100000000a BCP1: EIESA908 BCP@:000000FF BCP3:00000000 BCP4:80563CD6 OS Ver:5_1_2600 SP:2_0) until, today, I found a "Spyware.Aprosos.C" file. It was a dll file in C:\Windows\System32. It is called xpsifmgr.dll It wouldn't let me delete it, so I just renamed it xpsifmgr.dllold and that took care of the boot up error. It cut down on the number of pop up advertisement windows also, considerably. I can now use the search button in IE and the MS.com link works.

I still am getting several files when I run the cleaners that I can't get to or figure out which one's they are.All files are set to show. Those files are both called "Stareware" (considered a serious threat by Spy Sweep) It shows it to be in C:\Documents and Settings\nancy\Log File The other one is in C:\system\Volumn Information_restore, and there, I believe is the reason that I can't do a restore. I can't find that darn file and I have every file set to show! Where is it hiding? The other file that keeps showing up on the software is "Istbar". I deleted the exe. file when I first found it, but it keeps turning up in all the scans and I figure that is the problem still with IE. I know that that file is a Hyjacker and is called AZE Search Toolbar, but it escapes me, #!$@#*!

Oh, yeah, this last scan found "lopdotcom"! Where the heck are they coming from?! :tazz:

I am posting my last scan that I did this evening with Spy Sweep. It follows:

********
5:02 PM: | Start of Session, Friday, November 11, 2005 |
5:02 PM: Spy Sweeper started
5:02 PM: Sweep initiated using definitions version 571
5:02 PM: Starting Memory Sweep
5:04 PM: Memory Sweep Complete, Elapsed Time: 00:01:56
5:04 PM: Starting Registry Sweep
5:05 PM: Registry Sweep Complete, Elapsed Time:00:00:15
5:05 PM: Starting Cookie Sweep
5:05 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
5:05 PM: Starting File Sweep
5:05 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
5:05 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
5:06 PM: Warning: Failed to open file "c:\windows\temp\perflib_perfdata_b10.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs27588bb1-1f05-473e-bb63-7a936844879d.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf236db9-6460-43f4-9a12-6504782e4be3.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs679c864c-5d91-45d1-9fa7-9469c89497d2.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs009a30ea-05dd-4403-a88d-1c7da33edb81.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1946ab23-22de-4efc-a906-ec50b6f6512a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs80b74608-fd8b-4ec3-9cbc-26e9ff4c164e.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc3a52e28-237a-416f-9ed7-6590c4fd1cc3.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb629beef-2a74-4643-9916-149af325dcc7.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs97b4f719-fdc5-4eaa-bab7-3531b77d17a0.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs507f70e4-9782-4fdd-a9b0-b5f738f5833a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs88e4ad7a-4a8c-417a-90ad-011557ce548f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs143e3cca-9f20-4fc6-bd8e-2e6d461e8677.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs12575044-c778-489f-ba66-d31e591f59ae.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfdb6303d-f0ce-4866-bf62-1df67616762f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs395d9c3c-27e3-497f-afb1-b79a257b8fe6.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2e523bd2-f776-414f-8a16-39a1ee746aa4.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsec6dc6ba-fffc-47bb-89ad-9ca219582810.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscb5f8557-3c0a-415a-a174-9a6e7ff7ef2f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbdb09a6f-26ce-4cba-8300-9e83aeda67e4.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs924bd65e-976a-4e02-aedc-8c8cf14b6b75.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs22fe1f88-216b-4384-958b-8c3de30b8723.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0c09a0b3-ad59-479a-922e-0ce99b1f0015.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6ee3fac1-407c-4eee-9e73-7457d07b6226.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa8d56ac7-0b9e-4e3e-8f2b-17964b7125fe.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79341137-d8da-414a-b7bc-bf63b01efc89.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd563a2c0-135d-43b8-9577-f77874b7af4d.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9321025d-0cd5-4d5d-9166-22b9fb8d02b5.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscf6b41a9-92cb-42cb-a63c-2033c081067a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse9aadd65-8c68-4923-89f2-161f44527c28.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs56d9ce65-4514-4a10-b318-2f6cfc32c0db.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs96d35179-0a13-4bf9-933c-01facc0fe568.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf801ff8a-416c-49fa-9fc8-83df5482fdac.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb1301af6-8bf7-4859-b9ac-1a858ddb2b1d.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3885b795-d704-4e29-8bba-fa69e74e8f84.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7b27f023-acd2-4984-b380-6814d30534ef.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs846e2a4a-a821-4537-ad66-afc3833c4eca.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdda27a1a-40b4-493c-96a0-5098b2986405.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa5897171-ddda-4718-af6e-ddb7c18ac9da.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0de4415c-6d6b-4855-b894-893db76dd349.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd343fbaa-3686-484e-9074-1f196b0188ff.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscc14cd38-8f3d-4c8f-9284-3e0a9f2aa857.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0d21e7ed-7f8b-4f80-a2c3-845e2bfd82a8.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb8a6efc9-259d-4b84-acfa-90bcb290164f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4e850df-fc66-45a9-acb6-d0af1bf94f2f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs245b70ea-1d41-460b-8672-2c3ff373b540.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf95ffa0d-784c-439b-b2ac-04d34dc2e775.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseb0714db-1ec0-4cda-ae5d-00a2e87836d2.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscb947beb-2b6d-42f3-a337-0ce1564a1d77.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs314739ba-5f21-4e73-be2b-68c4ede39ca1.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd9b7f830-5ec1-4624-a010-2c2a03209d94.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8829306b-d306-4429-be32-233d8d85755e.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsddf8dd50-7496-4a47-a769-bf334601875d.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3aa55351-dc41-4967-ab98-fc06e24cb590.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscb0e229f-38ee-48e5-b3bc-92a4dba86a7a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse34fac37-16b1-4b90-8de9-8345e9b0e376.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07ad2a42-21bb-468c-a510-ac20911b8f87.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6aa015ef-a6e8-4e1c-985d-ca8c97609483.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c437dc2-b173-414e-92d0-e4c13e62a56e.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3c88bab4-7d3a-4ad3-b11b-0a5b7e602841.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3b997b47-9f62-4fc8-8915-aa05a1e283c4.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1397a830-c8b0-4c40-9654-ecd29ea9985f.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79329a69-41dd-4ac4-aed1-1c6a7663cdb0.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs407cee4c-36c4-4e2f-b4e7-9fe2e51b10e9.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseef32fe7-bf7c-414e-8824-d965897db65a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf13f135c-bc0b-4294-a81f-6b1804ed5470.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs87daa067-24b1-486a-baa2-a289cb257677.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs98f7d766-3679-4f23-b3fa-e51d7bca8924.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3ae0ed57-eacc-4354-b5d7-2a5d50326e96.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs42f0da9e-18d5-4827-aba9-1f190a2d66ca.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd2af6787-8073-4548-8cce-0fe6c648c68d.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1acac46d-0aab-4d66-83b5-e9b82aa34f91.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfcdebac8-3735-4c79-94a0-b4ee3ed173df.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsec631eba-9236-4305-8245-30ebe1d21fc8.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs26124398-e0eb-4543-b7ef-ea336e24e2d0.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs491e5c4d-b74b-4635-8c31-375c7130d027.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsff8d79b7-5356-4f81-98df-dc5c6c57eb6c.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc19a5343-8e8e-4337-9ea5-78060de557f7.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc4ab3941-8260-4d43-9d1f-f29d2a6ac23c.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs01f8f6d7-f1b7-407c-8108-887a24914113.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9008f35c-1559-48f5-93ea-d561af8c08bf.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs92a35187-349f-4889-8124-85c527b063c8.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8b028643-c1fa-42f6-84de-0cc50037dd4c.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8d19e1c6-149d-4ee1-bf2d-9b59ffc3f1d5.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse3dc5d67-9470-4297-b045-ad0cdc598b48.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs638f2305-2593-49e7-82f8-4267570b8e1c.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbedd797c-ecbe-4624-beb4-e002cf06aef7.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4a28f74b-2fea-47eb-b15b-970d1021e541.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs86644587-bb18-46b7-a66f-4009c42e7bea.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc59c61dc-21c8-4a3e-aa2e-786a1ab757b6.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e4b21c3-fd3c-4c2d-a45e-f674efd211f4.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs60a0f6c7-3b74-4d28-a114-decc24c66147.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6755dd7f-f9e4-4146-a2f3-32b9e21d4b19.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs78514d17-4196-4844-9694-9762ccc27331.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc5bf1ab5-b517-49f4-ac2c-bda46e4da270.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs06607218-4908-4315-b8a6-3448b3536db2.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7e822746-f66f-4743-9903-fd2538151b5a.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf32e207c-d17e-4672-ab72-2b41877e14fb.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs87b111be-de41-4283-a6c6-b7c4f993a9a7.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdf774685-02e4-4f45-bbf5-e17d842e1f45.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0c18c3ce-b28e-4a06-a9e0-8c92e1e5ecea.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs20818600-bf0b-475b-8eee-96d600d5f691.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa3cae407-91b7-4320-8f54-757c18a49656.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs830c8d61-446e-49da-9878-56d624144a31.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs678784ab-e455-4955-9ead-2e5ecfc8580e.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\ntuser.dat". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\ntuser.dat.log". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37126.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37127.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37128.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37129.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37130.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37131.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37132.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37133.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37134.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37136.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37137.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37138.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37139.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37140.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37141.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\jar_cache37142.tmp". The process cannot access the file because it is being used by another process
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\fu2dt3qi\olios%2fview%3fpid%3d1%26sym%3d%26exch%3dusa%26tabs%3dquotesandnews&kw_type=broad&kw=stock%20prices%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\fu2dt3qi\ew%3fpid%3d1%26sym%3d%26exch%3dusa%26tabs%3dquotesandnews&kw_type=broad&kw=stock%20quote%20investing%20money&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=5&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\fu2dt3qi\%3d1%26sid%3d1%26fid%3d0%26vid%3d10%26metarefresh%3dtrue&kw_type=broad&kw=stock%20prices%2c%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=6&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\fu2dt3qi\view%3fpid%3d1%26sym%3d%26exch%3dusa%26tabs%3dquotesandnews&kw_type=broad&kw=stock%20prices%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=1&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\upkvenkd\%3d1%26sid%3d1%26fid%3d0%26vid%3d10%26metarefresh%3dtrue&kw_type=broad&kw=stock%20prices%2c%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=3&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\upkvenkd\es%2fquotesandnews%3fsym%3de%253anys%253amso%26exch%3dnys&kw_type=broad&kw=stock%20picks%2c%20stock%20rumors&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=7&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\upkvenkd\view%3fpid%3d1%26sym%3dmso%26exch%3dusa%26tabs%3dquotesandnews&kw_type=exact&kw=stock%20quote%2c%20investing&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=8&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\4datmxs3\%3dview_refresh%26pid%3d1%26vid%3d10%26fid%3d0%26sid%3d1&kw_type=broad&kw=stock%20picks%2c%20stock%20trading&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=2&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\4datmxs3\%3dview_refresh%26pid%3d1%26vid%3d10%26fid%3d0%26sid%3d1&kw_type=broad&kw=stock%20prices%2c%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=2&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\4datmxs3\rom%3dview_refresh%26pid%3d1%26vid%3d10%26fid%3d0%26sid%3d1&kw_type=broad&kw=stock%20prices%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=2&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\4datmxs3\pid%3d1%26sid%3d1%26fid%3d0%26vid%3d10%26metarefresh%3dtrue&kw_type=broad&kw=stock%20prices%20penny%20stocks&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=3&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\4datmxs3\olios%2fview%3fpid%3d2%26sym%3d%26exch%3dusa%26tabs%3dquotesandnews&kw_type=exact&kw=stock%20quote%2c%20loan&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=4&u_java=true". The system cannot find the path specified
5:09 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\k38nw38v\refresh%26refresh%3dturnon%26pid%3d1%26vid%3d10%26fid%3d0%26sid%3d1&kw_type=exact&kw=stock%20quote%2c%20loan&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_his=1&u_java=true". The system cannot find the path specified
5:10 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\temp\temporary internet files\content.ie5\pivpxqs6\os%2fview%3fpid%3d1%26sym%3d%26exch%3dusa%26tabs%3dquotesandnews&kw_type=broad&kw=stocks%20investing%20finance&cc=69&u_h=600&u_w=800&u_ah=572&u_aw=800&u_cd=32&u_tz=-240&u_java=true". The system cannot find the path specified
5:10 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
5:10 PM: Warning: Failed to open file "c:\documents and settings\nancy\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
5:10 PM: Found Adware: ist istbar
5:10 PM: a0126575.exe (ID = 64496)
5:12 PM: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcrst.dll". The process cannot access the file because it is being used by another process
5:17 PM: Found Adware: lopdotcom
5:17 PM: epurcmainver05.dll.zip (ID = 111426)
5:18 PM: File Sweep Complete, Elapsed Time: 00:13:11
5:18 PM: Full Sweep has completed. Elapsed time 00:15:24
5:18 PM: Traces Found: 2
9:52 PM: IE Tracking Cookies Shield: Removed trafficmp cookie
9:52 PM: IE Tracking Cookies Shield: Removed reliablestats cookie
  • 0

Advertisements


#2
OwNt

OwNt

    Malware Expert

  • Retired Staff
  • 7,457 posts
Hello and welcome to GeeksToGo!

I apologize for the delay getting to your log, the helpers here are very busy.
If you still need help, please post a fresh Hijackthis log in this thread.

If you have resolved this issue please let us know.
  • 0

#3
OwNt

OwNt

    Malware Expert

  • Retired Staff
  • 7,457 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP