[D_mcpasterfield]

here is the spy sweeper, EWIDO is coming right up

********
12:57 PM: | Start of Session, Sunday, November 20, 2005 |
12:57 PM: Spy Sweeper started
12:57 PM: Sweep initiated using definitions version 574
12:57 PM: Starting Memory Sweep
1:02 PM: Memory Sweep Complete, Elapsed Time: 00:04:45
1:02 PM: Starting Registry Sweep
1:02 PM: Found Adware: dollarrevenue
1:02 PM: HKLM\software\microsoft\drsmartload\ (1 subtraces) (ID = 916795)
1:02 PM: Registry Sweep Complete, Elapsed Time:00:00:37
1:02 PM: Starting Cookie Sweep
1:02 PM: Found Spy Cookie: exitexchange cookie
1:02 PM: steven sullivan@exitexchange[1].txt (ID = 2633)
1:02 PM: Found Spy Cookie: screensavers.com cookie
1:02 PM: steven [email protected][1].txt (ID = 3298)
1:02 PM: Found Spy Cookie: adknowledge cookie
1:02 PM: steven sullivan@adknowledge[1].txt (ID = 2072)
1:02 PM: Found Spy Cookie: clickandtrack cookie
1:02 PM: steven [email protected][1].txt (ID = 2397)
1:02 PM: Found Spy Cookie: realmedia cookie
1:02 PM: steven sullivan@realmedia[1].txt (ID = 3235)
1:02 PM: Found Spy Cookie: ru4 cookie
1:02 PM: steven [email protected][2].txt (ID = 3269)
1:02 PM: Found Spy Cookie: specificclick.com cookie
1:02 PM: steven [email protected][1].txt (ID = 3400)
1:02 PM: Found Spy Cookie: starware.com cookie
1:02 PM: steven sullivan@starware[2].txt (ID = 3441)
1:02 PM: Found Spy Cookie: hbmediapro cookie
1:02 PM: steven [email protected][2].txt (ID = 2768)
1:02 PM: Found Spy Cookie: zedo cookie
1:02 PM: steven sullivan@zedo[2].txt (ID = 3762)
1:02 PM: Found Spy Cookie: maxserving cookie
1:02 PM: steven sullivan@maxserving[2].txt (ID = 2966)
1:02 PM: Found Spy Cookie: adrevolver cookie
1:02 PM: steven sullivan@adrevolver[1].txt (ID = 2088)
1:02 PM: steven sullivan@adrevolver[3].txt (ID = 2088)
1:02 PM: Found Spy Cookie: adecn cookie
1:02 PM: steven sullivan@adecn[2].txt (ID = 2063)
1:02 PM: Found Spy Cookie: yieldmanager cookie
1:02 PM: steven [email protected][2].txt (ID = 3751)
1:02 PM: Found Spy Cookie: rn11 cookie
1:02 PM: steven sullivan@rn11[2].txt (ID = 3261)
1:02 PM: Found Spy Cookie: reliablestats cookie
1:02 PM: steven [email protected][2].txt (ID = 3254)
1:02 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
1:02 PM: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
1:02 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
1:02 PM: Starting File Sweep
1:02 PM: Warning: Failed to open file "c:\windows\tool4.exe". Access is denied
1:02 PM: Warning: Failed to open file "c:\windows\tool5.exe". Access is denied
1:03 PM: Warning: Failed to open file "c:\windows\system32\countrydial.exe". Access is denied
1:03 PM: Found Adware: targetsaver
1:03 PM: tsuninst.exe (ID = 193501)
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
1:04 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
1:05 PM: mzoqm.exe (ID = 195131)
1:05 PM: mzoql.exe (ID = 195130)
1:05 PM: mzoqp.exe (ID = 195132)
1:05 PM: mzoqc.dll (ID = 195129)
1:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat". The process cannot access the file because it is being used by another process
1:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat.log". The process cannot access the file because it is being used by another process
1:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\local settings\temp\~df5fa6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\mozilla\firefox\profiles\default.wur\parent.lock". The process cannot access the file because it is being used by another process
1:09 PM: Found Adware: spysheriff
1:09 PM: install.dat (ID = 194435)
1:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs17ef34a9-3888-4da6-89b9-4289bdbfbe3e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsca127cac-bdfc-4a34-8180-d1210d250669.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa22eef08-ecd2-4ae5-baa2-c2dd3406d46d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsae4cdbea-e144-48d4-9aee-21306455bbdd.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs538dfa9b-a8f0-4651-8d6c-6a3ae5c8dc24.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf404242-e16b-4c97-bd9e-0b4573952f36.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb488ac9b-3bd5-458e-8e09-9cff8885e81e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf9093b76-b301-46a9-83bc-dbed2fcef767.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd19e3078-42d1-40b9-9dfd-594fa267b403.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs35174a35-15fc-4d05-a40e-bc1ed132a122.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1254c7cd-8128-4844-bebb-2516ba2cd407.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3ecda8d1-4443-4110-ad9e-32c8398ba594.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8cf07c23-3962-4787-9e9f-09f612c6c2b3.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs53c13fd7-8bd5-4e97-b71e-d482713e047b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68a9d49b-241d-4304-8124-92569f9f9b38.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8a91cb76-e807-44d0-bd33-90912590b3ca.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa546f3a6-9e8a-4435-9bd4-3eb679807ac6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2792e127-4e32-481e-9643-e170618c8227.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs29e0f0d9-ed61-4b59-b9fc-2015016c4fc9.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd06cbb6c-55a1-487a-aa25-e5943b7f729e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2eaaa12b-fb82-4bf7-9fed-60505b705edf.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6e1babec-678e-479f-92e6-899e2c94e69c.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd0081e74-088b-408d-bc24-06495bb7bbd1.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4e4951b0-e7c3-4f1b-b277-f71742a22d58.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa4ba96cc-bd95-4986-a113-b99a19bf5130.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf8b4e36-cd1b-4912-a290-65fdd44b5579.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa2718dd1-2be7-4736-a4a8-4f63bccceda7.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs34c1ac6b-1c91-44ad-94f5-ffa60df59e3b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa1e89bcc-cf90-414e-ade5-c1f8315aabac.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs66b465e5-deab-42ef-815c-bc62a801f49d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs00314adc-ecaf-4e7e-8c2b-bcd18cb4474d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf8275b1c-831a-4159-84e1-6f47a37587cc.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs090ec464-77da-4d87-ad5c-c02ab0d5b903.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscf1059b0-cb23-4d52-9189-a6e43921114f.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsce37a667-679e-47ee-be54-5596f8e6a336.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs049c5a38-282a-404e-9f78-6dbc5c77c4b0.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs89e2a2db-8f34-42ad-abea-661e3f07d1c1.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd144c291-e4ad-4a0c-9d6e-f6ff26682b10.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd7bc5ce4-4321-4d7b-88bd-b7f973178869.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7f0014b4-9faf-4c1c-b1db-2222e83f8e6b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc3199e02-ed5e-4971-a878-df615c2ba1c6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfc9f09b8-b52c-4f57-a380-5b8a9343cd41.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8948b17e-28ad-4d46-bffa-82be296d0fb4.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb55351c0-d671-484d-a182-d93a30929856.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3dee33f1-6d38-4007-bc27-27e7edba7738.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsaed309ad-88de-408d-ad08-de258250a2fa.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68c64d1f-3a57-4f90-adcb-7d36c356a58d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8b05ff5d-edbe-4982-ac23-6d5c86b3b52a.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs93e5553d-0f04-42a8-856a-78ea1012941e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfdf429dd-3783-4fab-b6fe-12610ed921b6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs83f60cbb-a36c-4758-9e54-eb46f95ca97c.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9e2e7d9e-df7d-42ef-b4af-bb78f76a784e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs02e9d0da-1ab6-446e-929b-bd9feeb91f8d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs576e5d80-b559-478b-8978-2ae8ee8ba2aa.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf4b68db-d403-4d7c-b4ec-e15156778050.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs61a1884e-44b9-45e5-b8e8-ab8de177ae87.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs267d1bd3-e8fe-48ad-a2bb-4d598afd3797.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5f10be00-d560-41b9-85f7-d0b15de07423.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs37308bc2-74f8-4175-a7bd-498a16eca108.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb6179ac2-35e3-4720-9e7d-4720348f6286.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf69348b-d82a-45d4-8d43-dba61aaea1db.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfbfc204b-b5f2-4469-88bd-d77495e1c0b5.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfbd5e1e0-d0be-4214-a98d-c9ab768983db.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfc50a53b-ea93-4ccd-a4b7-9b1a900cba66.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs31136389-720c-4974-a8e8-63dfe226a3f0.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs097840ac-9c94-4155-b951-9189ad65f2a6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsebba0d26-5790-4409-9c0e-451dcbfa224c.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs04944319-2266-470b-98b5-fff72b2a4236.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsacbf0f65-0c8e-4bdd-8abd-9a4690dfdc8d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseb37ba2d-b66c-4e97-837a-c71e62c3fa4b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf90bd136-4e84-4dba-a266-5a9df0d4a7ed.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs63addd1e-3709-4fb3-86a0-6460d933ca00.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs720ced9b-9dc5-421e-83f2-75b4c5c88ddf.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf0567224-6f6e-45c3-b308-985f224fb42f.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3b42f71f-d6de-49a8-acf6-d6817e3b052f.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs720f191f-23cf-4a10-ab6d-509a1c8b3e90.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4cb8c58a-12aa-4d18-a3b6-55837836af21.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs39b50477-5a1b-4eec-b85b-9f3a065273eb.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0914966a-904a-4032-a363-550170cf7bc9.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb9686d53-148e-4cd4-9573-aaba34a83362.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6f650e59-a360-4064-9516-489a0c987a1b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68960add-2d67-4bf7-96b9-d6d72552ef83.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7ab3905e-8f98-4fcd-9d07-616ef7b10b3c.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf45684f-f9d0-440c-b6da-f05cb65edbf7.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd7d74d4e-6418-4675-8f5c-4e9745f36122.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5b117759-5c36-4938-8a4f-e70ee5d5f32d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc8f81038-f919-4afc-ba79-10c95c4d451d.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5de38e84-e002-40eb-a669-43f9fe555548.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs403d6a29-8b6b-4236-93bb-45ed6148991f.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1260ea2d-7453-4c0d-9b32-af2715079df4.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8447a7ee-a1a3-4529-9a29-26e668f2055e.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfe0f67e9-50d7-478a-8586-d932983a8a9c.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1cc0ed68-83e6-4a5a-8b38-055077a18d52.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsca022a2d-fe39-4137-a21c-249a86085642.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf90ae2f5-224f-4a08-a0f7-717dace8b103.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs06ee3754-3e27-4279-9be1-36af70146544.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0a0daae6-cac6-45ce-8673-fa49df97a0a6.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs864c7b04-8f8d-4730-8150-aa452f2d075b.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd8ffa26c-7625-4bac-bfc7-961f3bbae090.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs00c0f8d8-98ca-4aea-87de-d20683d9cec5.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6979ebd1-e4e3-4eec-a4da-4021b81d3fed.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd2d6456f-2557-4d0c-a955-9c03a90d04a5.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs33b28014-3cf3-4a87-886f-76da242137e1.tmp". The process cannot access the file because it is being used by another process
1:09 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2d14514f-e5c8-42a6-9fc6-af0dcd06e963.tmp". The process cannot access the file because it is being used by another process
1:14 PM: Found Adware: cydoor peer-to-peer dependency
1:14 PM: cd_clint.dll (ID = 57300)
1:20 PM: Warning: Unhandled Archive Type
1:20 PM: Found Adware: java byteverify
1:20 PM: loaderadv698.jar-2b037dd6-661bd175.zip (ID = 64819)
1:22 PM: Warning: Unhandled Archive Type
1:29 PM: Warning: Unhandled Archive Type
1:30 PM: Warning: Unhandled Archive Type
1:30 PM: Warning: Invalid file - not a PKZip file
1:30 PM: Warning: Invalid file - not a PKZip file
3:25 PM: File Sweep Complete, Elapsed Time: 02:23:13
3:25 PM: Full Sweep has completed. Elapsed time 02:28:42
3:25 PM: Traces Found: 27
3:29 PM: Removal process initiated
3:29 PM: Quarantining All Traces: spysheriff
3:29 PM: Quarantining All Traces: cydoor peer-to-peer dependency
3:29 PM: Quarantining All Traces: dollarrevenue
3:29 PM: Quarantining All Traces: java byteverify
3:29 PM: Quarantining All Traces: targetsaver
3:29 PM: Quarantining All Traces: adecn cookie
3:29 PM: Quarantining All Traces: adknowledge cookie
3:29 PM: Quarantining All Traces: adrevolver cookie
3:29 PM: Quarantining All Traces: clickandtrack cookie
3:29 PM: Quarantining All Traces: exitexchange cookie
3:29 PM: Quarantining All Traces: hbmediapro cookie
3:29 PM: Quarantining All Traces: maxserving cookie
3:29 PM: Quarantining All Traces: realmedia cookie
3:29 PM: Quarantining All Traces: reliablestats cookie
3:29 PM: Quarantining All Traces: rn11 cookie
3:29 PM: Quarantining All Traces: ru4 cookie
3:29 PM: Quarantining All Traces: screensavers.com cookie
3:29 PM: Quarantining All Traces: specificclick.com cookie
3:29 PM: Quarantining All Traces: starware.com cookie
3:29 PM: Quarantining All Traces: yieldmanager cookie
3:29 PM: Quarantining All Traces: zedo cookie
3:29 PM: Removal process completed. Elapsed time 00:00:15

Edited by D_mcpasterfield, 20 November 2005 - 03:31 PM.

[Advertisements]

Close any programs you have open since this step requires a reboot.

• From the l2mfix folder on your desktop, double click l2mfix.bat.
• Select option #2 for Run Fix by typing 2 and then pressing enter.
• Press any key to reboot your computer.
• After a reboot, your desktop and icons will appear, then disappear (this is normal).
• L2mfix will continue to scan your computer and when it's finished, notepad will open with a log.
• Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so!

Note: If after the reboot the desktop icons dont dissappear or the log does not pop up then in the l2mfix folder double click the second.bat file to continue with the fix

Regards,

Trevuren

[Trevuren]

Close any programs you have open since this step requires a reboot.

• From the l2mfix folder on your desktop, double click l2mfix.bat.
• Select option #2 for Run Fix by typing 2 and then pressing enter.
• Press any key to reboot your computer.
• After a reboot, your desktop and icons will appear, then disappear (this is normal).
• L2mfix will continue to scan your computer and when it's finished, notepad will open with a log.
• Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so!

Note: If after the reboot the desktop icons dont dissappear or the log does not pop up then in the l2mfix folder double click the second.bat file to continue with the fix

Regards,

Trevuren

[D_mcpasterfield]

when i run l2mfix, it reboots, goes to the login screen, i pick my name, it locks up, windows doesn't start up, nothing happens, it just sits there at the loading screen
any ideas?,
Steve

[Trevuren]

Please post a fresh HJT log


Regards,

Trevuren

[D_mcpasterfield]

Here it is
I think this has to do with nvcpldaemon and or viewpoint
Logfile of HijackThis v1.99.1
Scan saved at 10:42:32 PM, on 11/20/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\AIM\aim.exe
H:\Program Files\Xfire\Xfire.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
E:\Program Files\Alias\Maya 6.0 Personal Learning Edition\docs\wrapper.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
E:\Program Files\Alias\Maya 6.0 Personal Learning Edition\docs\jre\bin\java.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\HSA KILL\hijackthis.exe

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Shareaza] "F:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - Startup: Xfire.lnk = H:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: ewido security suite control - Unknown owner - f:\Program Files\ewido\security suite\ewidoctrl.exe (file missing)
O23 - Service: Maya 6 PLE Documentation Server (mple6docserver) - Unknown owner - E:\Program Files\Alias\Maya 6.0 Personal Learning Edition\docs\wrapper.exe" -s "E:\Program Files\Alias\Maya 6.0 Personal Learning Edition\docs\Wrapper.conf (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

thanks,
Steve

Edited by D_mcpasterfield, 20 November 2005 - 10:45 PM.

[Trevuren]

We are fortunate Steve, it appears to be gone

Just to be on the safe side, I would like to check all your system:

1. I need you to download MWav to a convenient location.

This scan might take around 3+ hours to finish when set to scan everything.
I need you to run MWav by double-clicking on mwav.exe. This scan only produces a report, it doesn't clean your system. I will analyze the report and recommend a course of action depending on the results.

Put a check next to the below items before scanning:

• Memory
• Startup Folders
• Drive - All Local Drives
• Folder - then click "browse" to change the directory to C: (default is C:\Windows)
• Registry
• System Folders
• Services
• Include Sub-Directory
• Scan All Files

Please make sure ALL of these are checked, then press the Scan button. This typically will take hours to complete.

**NOTE*** Sometimes MWav will pause and it appears to be finished, but it isn't done. Just let it run until it says it's complete.

On the bottom portion of the window, you will see the lower panel where MWav is listing "infected items", please highlight everything in that lower panel and copy them by holding CTRL + C then paste it here. The whole log will be extremely BIG so there is no way to post the log. I just need the infected items list.

Regards,

Trevuren

[D_mcpasterfield]

I highly doubt that this is gone because my background is still permanently on active desktop, and I just got a pop-up. I still believe the problem lies within either viewmgr, or nvcpldaemon. I have attempted to remove both with HJT, but neither have gone away. Any ideas?

I am currently running Mwav.

Thanks,
Steve

Edited by D_mcpasterfield, 21 November 2005 - 07:27 AM.

[Trevuren]

The MWAV scan should provide us with a lot of valuable information.

1. Could you please provide a litltle more info about the popup? Does it appear regardless of where you are surfing, does it appear even when disconnected from the net, is it site specific?


2. Could you please describe in further detail what you mean by

my background is still permanently on active desktop

?

Please post the above requested info with your MWAV report.

Regards,

Trevuren

[D_mcpasterfield]

ok,
Mwav is locking up in the first couple service files, it just stops...
the pop-ups, i distinctly remember several about search inqwire, several registry cleaner pop-ups, one or two microsoft style anti-virus products. usually when i surf they pop-up, BUT, i run mozilla firefox, which is quite pop-up free, and these are all opening in new internet explorer windows, I NEVER use IE.
<EDIT>Just got a pop-up from ad.firstadsolution.com

The desktop,
this is somewhat minor, but ever since i got this thing, my desktop has changed the icon caption text from transparent to othe colors. I wanted transparent back, so i downloaded iconoid, and it says that i am using active desktop, and cannot change back to transparent. This persists even after i have followed all steps to turn off active desktop.


Any ideas?
Steve

Edited by D_mcpasterfield, 21 November 2005 - 06:18 PM.

[Trevuren]

Please download WebRoot SpySweeper from HERE (It's a 2 week trial):

• Click the Free Trial link under to "SpySweeper" to download the program.
• Install it. Once the program is installed, it will open.
• It will prompt you to update to the latest definitions, click Yes.
• Once the definitions are installed, click Options on the left side.
• Click the Sweep Options tab.
• Under What to Sweep please put a check next to the following:
  • Sweep Memory
  • Sweep Registry
  • Sweep Cookies
  • Sweep All User Accounts
  • Enable Direct Disk Sweeping
  • Sweep Contents of Compressed Files
  • Sweep for Rootkits
  • Please UNCHECK Do not Sweep System Restore Folder.
• Click Sweep Now on the left side.
• Click the Start button.
• When it's done scanning, click the Next button.
• Make sure everything has a check next to it, then click the Next button.
• It will remove all of the items found.
• Click Session Log in the upper right corner, copy everything in that window.
• Click the Summary tab and click Finish.
• Paste the contents of the session log you copied into your next reply.

NOTE:You can bring up the desktop problem in our Windows Forum once we have finished with malware.

Regards,

Trevuren

[D_mcpasterfield]

well, here is the spysweeper... nothing new i don't think

********
7:17 AM: | Start of Session, Tuesday, November 22, 2005 |
7:17 AM: Spy Sweeper started
7:17 AM: Sweep initiated using definitions version 575
7:17 AM: Starting Memory Sweep
7:18 AM: Memory Sweep Complete, Elapsed Time: 00:00:58
7:18 AM: Starting Registry Sweep
7:18 AM: Registry Sweep Complete, Elapsed Time:00:00:16
7:18 AM: Starting Cookie Sweep
7:18 AM: Found Spy Cookie: trafficmp cookie
7:18 AM: steven sullivan@trafficmp[1].txt (ID = 3581)
7:18 AM: Found Spy Cookie: adecn cookie
7:18 AM: steven sullivan@adecn[2].txt (ID = 2063)
7:18 AM: Found Spy Cookie: yieldmanager cookie
7:18 AM: steven [email protected][2].txt (ID = 3751)
7:18 AM: Found Spy Cookie: clickandtrack cookie
7:18 AM: steven [email protected][2].txt (ID = 2397)
7:18 AM: Found Spy Cookie: zedo cookie
7:18 AM: steven sullivan@zedo[1].txt (ID = 3762)
7:18 AM: Found Spy Cookie: rn11 cookie
7:18 AM: steven sullivan@rn11[2].txt (ID = 3261)
7:18 AM: Found Spy Cookie: server.iad.liveperson cookie
7:18 AM: steven [email protected][2].txt (ID = 3341)
7:18 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
7:18 AM: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
7:18 AM: Starting File Sweep
7:18 AM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
7:18 AM: Warning: Failed to open file "c:\windows\tool4.exe". Access is denied
7:18 AM: Warning: Failed to open file "c:\windows\tool5.exe". Access is denied
7:19 AM: Warning: Failed to open file "c:\windows\system32\countrydial.exe". Access is denied
7:19 AM: Warning: Failed to open file "c:\windows\system32\drivers\sptd6381.sys". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\drivers\sptd.sys". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
7:19 AM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
7:23 AM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat". The process cannot access the file because it is being used by another process
7:23 AM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs64913864-dc16-4f2f-921f-2f2758901558.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs720efca7-4ad3-4a4a-b7fe-dc86a146d364.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs26c5e94f-ab5d-4878-beae-c61e1201af80.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf9012777-6f74-41b1-9238-7c7f50b3ad71.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3f79e711-9248-4a3e-be5d-870cd6afefad.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4d34e48b-6f94-4bd1-bd10-03a04069b37b.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7d5f894b-0344-43e0-8827-b40f8138ed8c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc18df038-2ea3-4d74-ae56-00cd1e3a5a20.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc2ab6821-fe91-4020-bb0b-6f7da8bb0f51.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs99269d54-572e-4c7a-acd8-2212c3f0a15e.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa1597906-0ca5-4d61-9277-ce5e77ea1bf0.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsce59c45c-41f7-4ae5-b9e3-edc0c13e9a3f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs48a00a19-4b02-4b85-8cfd-e496816d740c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs73a92fdf-c166-420d-a946-4d9b8b18a861.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2d692654-12bc-4ee1-813d-a41fcf6fbce6.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs067673f2-c644-4617-8bc3-9121facf607d.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7c23b66c-7e6e-439f-aa89-dca11c5628e8.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsaa08047e-7479-4541-bfd6-ef3a45510bc3.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs38b38cc1-43d1-4286-add3-6364529c62c5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1cb027b7-3ef3-46a2-a5b1-2269d04ad029.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb434f2b8-8e37-4a7a-9ed1-2eadb0752579.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07b531db-45b0-4aa0-8e3e-823cf2ed0ffd.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd7d55008-9348-47af-94e3-a9388b937a2e.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs380164b8-b3de-47c3-947b-6c5738c4c087.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs40846bc1-d4e8-4dcc-afe2-d9957ad6f5a4.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2783fd02-12a4-499a-adb2-99595fcef7bb.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0d063bf2-0e40-42ee-9d0b-3dd70049c5e5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd3d54752-07e2-4453-9b9f-0d18018b5362.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7e2bd828-2031-4647-ad38-22c457de4449.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs61f496bf-c92a-48a9-b8df-57499a72ee4c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfe8a5e64-b14b-4ba9-bbeb-61a6d25aea43.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs27f3d4c0-c88f-4b6e-a678-03ae2cef4fda.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs33724cff-9c9c-46c5-ba44-90e36558412d.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7dd16b28-36e9-4dbb-96fb-5c1c0f6782f5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0bc61410-97fe-482f-ba55-3d3576345ad6.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb19bbd43-6238-4e14-98b9-d552334c9558.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs367b4cbd-556d-4b1b-bdab-37ff4fe800c8.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c6bd057-816e-47ab-b026-883656468100.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs31faddb7-4907-4bdd-9117-8f51431f52a5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs972f9384-8bd2-44b5-84dc-26db03f5c94c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs542e96ed-abbb-4e86-a85e-8085c9c76e99.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdf4750d9-658c-4ab4-806c-f24520c2f736.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8e2b06b9-938c-462e-971e-5dced51d2501.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf40670c9-f5e2-46e3-9dc8-06c6f94c2335.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs82f03c72-e80a-4aad-9c19-0e82936fa55a.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb46b65d4-b65a-4889-9e47-f7fb223f5a21.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ba3be58-17ed-4c1c-a206-9e825854a306.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse6600645-0787-4b49-a512-fd074e8f7c8f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse751e60f-5217-41df-989d-0647f0c7a00f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7c63eee3-b8f5-4c46-bd9e-a086bfe8e6ac.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscd30f34b-bc86-4419-9c2f-282ab2995b7e.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0c820646-293e-4860-bd79-8bad9a7c2690.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2e463fb0-a47b-4e53-b857-a73452a83348.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs26743368-1364-49ca-b72d-a04d2a50f1a4.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs50f150ee-7846-43ca-b56b-36b893676fc3.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5acb1bf7-427c-4ff0-98cf-104ec392d3f5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8597304f-4af6-40a0-a184-e34a5ef3741f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7dcf2119-6c82-4b34-9428-01c6c5e0c8b5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd73a507e-06d6-4abb-8b69-9b06cc60af92.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse5140757-86b8-4435-ba37-dc820019883f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf501a9a9-c090-41bc-b6d3-0b5815a1cace.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6a851217-d96f-4bf4-bc99-a5b3821cf67c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs28db2bc1-0164-486c-a626-837c7a1937c7.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6f74d6c3-9b24-4e02-ae19-477bce858bd7.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsde640d85-c8ec-4d46-829a-92f4c1a8f975.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7861a96d-118c-407c-a050-f048e72b33d5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0fa62c55-70a4-4283-9581-6596b404eb51.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0260dbfc-4558-4b91-b582-6c3e9509e628.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5a4631dd-8573-48c7-ae73-61086be2c009.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd1db192b-9d8e-4097-868b-492411109786.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1b146735-ec3c-4cf2-bd7f-b482dccf61a9.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9a23a8d6-8495-4977-b1f2-2a52848e02e1.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs85f593a5-af78-412d-bb1d-8f400d46185c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6abb4803-c2b5-47a7-863d-8f2f5f4007cb.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4471546d-1ac5-43d1-8500-42499bea72eb.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd2c3103f-188e-4e44-801b-9be8f76fe532.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdf91d3d0-2139-4550-8369-c6647575ac20.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbd7fbbaf-f8aa-4105-9d1c-bd8f6fec2138.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7b42c436-52c0-41a2-85cf-85351d1860c0.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs53dd2cdb-4cc1-42fc-8d08-b479dc721e1f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs88e4d7f2-7bbc-42ef-81ed-b4273a278d46.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8bdef210-9672-43a7-8634-b4e09647e1a5.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsef285f8f-3c62-4e14-92c0-c7db78e1dc73.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5d08e5a2-1c9e-45a9-8ac0-74f9346c79f0.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs47cda1be-fca7-49b4-9204-dce6fc6fcdc2.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd1a27cb0-f837-4db2-adf5-b739a238da26.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6d6ad091-26de-4cee-93a5-371119aef23e.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs930fdc54-83f9-45f0-a561-780f529942da.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsabe3fc0a-fdda-42e9-b7e3-f02a0ef02a9f.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5e4bce88-258b-43e2-b187-76e0f4aab062.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9f0d7181-f7f4-43d5-bf6c-5a52f03bfc82.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd306a495-1b50-4d28-a913-1780a3540ef6.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1bb77654-86c4-4e7f-81ce-1926f3647bdc.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs97f55290-ac91-435f-ba36-f033a8f47c09.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4bf9570a-72b1-4b4b-be99-2538c1880440.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa3798fb5-2a1f-49db-8f51-5ba45f2f9e43.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1c3b1719-9634-462f-902d-b000fdded70c.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs16758d73-bc63-46cf-911a-9516d5ad2938.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7089de7d-e953-48ca-8b0a-34f476e63255.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse846c266-dbeb-4790-86d9-d720a8b80668.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsef642775-a914-4954-85fc-447d8a70e59e.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse0848816-2834-4363-a08c-60b119f01ff3.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs52385e4a-0522-4754-b629-dcbade6be716.tmp". The process cannot access the file because it is being used by another process
7:24 AM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf7b7c24a-5cb8-4a1b-8ae2-f0cfb1f4ce59.tmp". The process cannot access the file because it is being used by another process
8:55 AM: File Sweep Complete, Elapsed Time: 01:36:50
8:55 AM: Full Sweep has completed. Elapsed time 01:38:09
8:55 AM: Traces Found: 7
6:13 PM: Removal process initiated
6:13 PM: Quarantining All Traces: server.iad.liveperson cookie
6:13 PM: Quarantining All Traces: trafficmp cookie
6:13 PM: Quarantining All Traces: adecn cookie
6:13 PM: Quarantining All Traces: yieldmanager cookie
6:13 PM: Quarantining All Traces: clickandtrack cookie
6:13 PM: Quarantining All Traces: zedo cookie
6:13 PM: Quarantining All Traces: rn11 cookie
6:13 PM: Removal process completed. Elapsed time 00:00:02
********
10:00 PM: | Start of Session, Monday, November 21, 2005 |
10:00 PM: Spy Sweeper started
10:00 PM: Sweep initiated using definitions version 575
10:00 PM: Starting Memory Sweep
10:01 PM: Memory Sweep Complete, Elapsed Time: 00:01:47
10:01 PM: Starting Registry Sweep
10:02 PM: Registry Sweep Complete, Elapsed Time:00:00:52
10:02 PM: Starting Cookie Sweep
10:02 PM: Found Spy Cookie: specificclick.com cookie
10:02 PM: steven [email protected][1].txt (ID = 3400)
10:02 PM: Found Spy Cookie: maxserving cookie
10:02 PM: steven sullivan@maxserving[2].txt (ID = 2966)
10:02 PM: Found Spy Cookie: adecn cookie
10:02 PM: steven sullivan@adecn[1].txt (ID = 2063)
10:02 PM: Found Spy Cookie: addynamix cookie
10:02 PM: steven [email protected][2].txt (ID = 2062)
10:02 PM: Found Spy Cookie: valuead cookie
10:02 PM: steven sullivan@valuead[1].txt (ID = 3626)
10:02 PM: Found Spy Cookie: falkag cookie
10:02 PM: steven [email protected][2].txt (ID = 2650)
10:02 PM: Found Spy Cookie: 247realmedia cookie
10:02 PM: steven sullivan@247realmedia[1].txt (ID = 1953)
10:02 PM: Found Spy Cookie: adknowledge cookie
10:02 PM: steven sullivan@adknowledge[2].txt (ID = 2072)
10:02 PM: Found Spy Cookie: realmedia cookie
10:02 PM: steven sullivan@realmedia[2].txt (ID = 3235)
10:02 PM: Found Spy Cookie: videodome cookie
10:02 PM: steven sullivan@videodome[1].txt (ID = 3638)
10:02 PM: Found Spy Cookie: rn11 cookie
10:02 PM: steven sullivan@rn11[2].txt (ID = 3261)
10:02 PM: Found Spy Cookie: hbmediapro cookie
10:02 PM: steven [email protected][2].txt (ID = 2768)
10:02 PM: Found Spy Cookie: zedo cookie
10:02 PM: steven sullivan@zedo[2].txt (ID = 3762)
10:02 PM: Found Spy Cookie: hotbar cookie
10:02 PM: steven [email protected][2].txt (ID = 4207)
10:02 PM: Found Spy Cookie: ru4 cookie
10:02 PM: steven [email protected][2].txt (ID = 3269)
10:02 PM: Found Spy Cookie: trafficmp cookie
10:02 PM: steven sullivan@trafficmp[1].txt (ID = 3581)
10:02 PM: steven [email protected][1].txt (ID = 3763)
10:02 PM: Found Spy Cookie: exitexchange cookie
10:02 PM: steven sullivan@exitexchange[2].txt (ID = 2633)
10:02 PM: Found Spy Cookie: yieldmanager cookie
10:02 PM: steven [email protected][2].txt (ID = 3751)
10:02 PM: Found Spy Cookie: overture cookie
10:02 PM: steven [email protected][1].txt (ID = 3106)
10:02 PM: Found Spy Cookie: clickandtrack cookie
10:02 PM: steven [email protected][1].txt (ID = 2397)
10:02 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
10:02 PM: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
10:02 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
10:02 PM: Starting File Sweep
10:02 PM: Warning: Failed to open file "c:\windows\tool4.exe". Access is denied
10:02 PM: Warning: Failed to open file "c:\windows\tool5.exe". Access is denied
10:03 PM: Warning: Failed to open file "c:\windows\system32\countrydial.exe". Access is denied
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
10:03 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
10:07 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat". The process cannot access the file because it is being used by another process
10:07 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:07 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\local settings\temp\perflib_perfdata_5b0.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\steven sullivan\application data\mozilla\firefox\profiles\default.wur\parent.lock". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs257eb889-2617-4103-8970-4c33d6e2f37a.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs33594997-58f2-4a61-9502-4ae53ca43e5e.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs19c2b731-1ba0-4d37-941c-ee538d68a7d5.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsacc19d85-932b-4880-989d-d959eeb8ce7a.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb7afd52e-5127-499d-b2da-3c4098556f55.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf9bc8d9-ab31-4c21-ab1f-50f65d5b283c.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs50763446-8696-4f3d-a027-05e088614a4e.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs92b7cd41-6e42-4f3e-b4ae-32064df8543c.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c50a48f-62f2-409a-b75e-4cff9e542fae.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs76e2bc07-97a1-4dfc-8b8f-7e7536928a14.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs48c088d6-e105-4050-bb2c-b1d45389be11.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs080759c0-332d-4b29-9438-4fca02c3cda7.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs57268c78-5a68-4455-98b8-9df1e640fa38.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0662d0a5-fd2c-4ae0-9a7a-b3afd52f77ab.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7339fce5-0af2-4174-b682-30cf7d983946.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs15b88bd0-6247-4024-a4e8-d224a68a2610.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0c330b6a-c8cc-4926-94c8-5b29edb19393.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9f7bbf67-84d1-4f3b-bf0e-c83e39ed15f8.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd3d9995a-202e-40b8-b0da-c99e474ed6a0.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsaca52b56-3485-411e-a893-e32b0e769e34.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2672b791-4b05-44d0-beed-4926d78b6115.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs26fe3fc9-a062-4161-ab82-c7752f7e88b4.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8b2a822e-7a6c-45b9-801d-6f90b1ba7fe8.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse287ee44-2e50-4f05-b68f-1b41ed42928b.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseec7f033-63cf-4402-8190-a1891bfc4aee.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs80f7e945-4540-4ea6-b64b-db87eb14cd9f.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs02dffa06-d77d-406c-ac5f-5b9a4f2f05e9.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2cf39cac-ceb0-4609-9d3c-abeb5053730f.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4de07de4-0467-4261-ab77-5399e7bad09c.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3144d3db-4481-4f1d-87ce-569549938a83.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4bb2d0f-dd00-4793-9aea-6f1cc6ea4c84.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9d8bf3b2-1c90-40d3-8b53-dbc3ebd0c8a1.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs49f0a1de-451c-4685-886d-2db419ac051f.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd6d3faf0-ef09-4491-b577-f2a581187390.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79a95b6c-2385-4a3f-8766-83c8210b75f3.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs94e86f99-85aa-4a08-ab77-99873bf52d82.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4ccb08d0-b359-42f5-bad8-aa88cba8995b.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc228bcdc-8c95-4ed5-bc2b-d0a1d47f9d4f.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs65f5fb44-7d04-49ed-8e6c-4675caa495ef.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2dbb34b5-3b92-43a5-8408-1118a758d5f9.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs162d1258-57c5-4a57-863f-d803078b456e.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb093a0fd-fc51-4d60-81b0-4b0ed1f680a9.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb4551060-9f75-4b31-9ba1-3564b1ac554e.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5cdcaaa6-79d2-46b4-a5d7-afb8a21abc1e.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseacbbdb7-f5c7-46d7-9e58-386682c88b85.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa4787365-f016-43a6-97d5-69ee1b1a036c.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdecce5a5-fbc2-421f-93be-d1ac76ffcfc6.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7c706db9-6918-4737-9966-6fb7556ab726.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs548be2a5-3a76-4ab8-a630-9c5ec784e112.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4fc715aa-48d4-4347-8f3a-52c17af645ce.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6ba5c3a8-1db8-474c-a682-e62815183c6d.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse5121453-9c3b-4fb3-b1ff-a91eedbbf8ab.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs158633c6-96bd-4678-a451-f6fab1f9035c.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs61e963e3-009b-46e9-bb03-657e57308522.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsde82f95f-d1ac-40ce-af87-ec17acf06b06.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7f798e66-75f1-4b6a-bdb0-94f82071d34f.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs86e20307-cc51-4161-816f-05086bbee126.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc8fd5515-a76b-4fd6-8bc6-401921aac869.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfb19df73-15a0-4a8b-8709-93f96668d3d0.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa50da7d8-348f-429f-8a63-ab4b84cc6f56.tmp". The process cannot access the file because it is being used by another process
10:08 PM: Warning: Failed to open file "c:\documents a

[Trevuren]

Not having MWAV is a major setback. Let's another scan.

Please do an online scan with Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  Standard
  
  • Scan Options:
  Scan Archives
  Scan Mail Bases
• Click OK
• Now under select a target to scan:Select My Computer
• This will program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information into your next post.

Are there still popups?
Regards

Trevuren

[D_mcpasterfield]

yes,
<running kaspersky>
thanks for the help.... i think the pop-ups are slowing down...
thanks,
Steve

[Trevuren]

Please remember to send me the log


Thanks,

Trevuren

[D_mcpasterfield]

BREAKTHROUGH!!!
so i was cleaning up my services....
and,
Somehow either system restore turned itself on, or i never turned it off!
well, it's off now, so maybe things will start happening!..

Also,
many people have told me that microsoft has a new virus scanner out that is very useful, should i try it?


Kaspersky log!

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Sunday, November 27, 2005 00:41:41
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 26/11/2005
Kaspersky Anti-Virus database records: 151902
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan Statistics:
Total number of scanned objects: 506894
Number of viruses found: 4
Number of infected objects: 10
Number of suspicious objects: 0
Duration of the scan process: 12802 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3cc46f89-16bef6e5.zip/javainstaller/InstallerApplet.class Infected: Trojan-Downloader.Java.OpenStream.t
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3cc46f89-16bef6e5.zip Infected: Trojan-Downloader.Java.OpenStream.t
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5ad1bcbe-5c6512e1.zip/javainstaller/InstallerApplet.class Infected: Trojan-Downloader.Java.OpenStream.w
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5ad1bcbe-5c6512e1.zip Infected: Trojan-Downloader.Java.OpenStream.w
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-2898a363-51d051ab.zip/GetAccess.class Infected: Trojan-Downloader.Java.OpenConnection.aj
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-2898a363-51d051ab.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.aj
C:\Documents and Settings\Steven Sullivan\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-2898a363-51d051ab.zip Infected: Trojan-Downloader.Java.OpenConnection.aj
C:\Documents and Settings\Steven Sullivan\.jpi_cache\jar\1.0\javainstaller.jar-4514e5ea-1fb00cd5.zip/javainstaller/InstallerApplet.class Infected: Trojan-Downloader.Java.OpenStream.w
C:\Documents and Settings\Steven Sullivan\.jpi_cache\jar\1.0\javainstaller.jar-4514e5ea-1fb00cd5.zip Infected: Trojan-Downloader.Java.OpenStream.w
E:\MFdownloads\pic0023-1.com Infected: Backdoor.Win32.IRCBot.gw

Scan process completed.

Thanks,
Steve