********
8:48 PM: | Start of Session, Wednesday, January 04, 2006 |
8:48 PM: Spy Sweeper started
8:48 PM: Sweep initiated using definitions version 596
8:48 PM: Starting Memory Sweep
8:54 PM: Found Adware: cws_ns3
8:54 PM: Detected running threat: C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Watch.exe (ID = 8)
8:56 PM: Memory Sweep Complete, Elapsed Time: 00:07:10
8:56 PM: Starting Registry Sweep
8:56 PM: Found Adware: elitebar
8:56 PM: HKLM\software\microsoft\code store database\distribution units\v3cab\ (8 subtraces) (ID = 125742)
8:56 PM: Found Trojan Horse: vesbiz downloader
8:56 PM: HKLM\software\microsoft\windows\currentversion\run\ || controlpanel (ID = 145540)
8:56 PM: Found Adware: searchtoolbar
8:56 PM: HKU\S-1-5-21-776561741-1580436667-1343024091-1003\software\microsoft\internet explorer\toolbar\webbrowser\ || {08bec6aa-49fc-4379-3587-4b21e286c19e} (ID = 139177)
8:56 PM: Found Adware: quicklink search toolbar
8:56 PM: HKU\S-1-5-21-776561741-1580436667-1343024091-1003\software\microsoft\internet explorer\toolbar\webbrowser\ || {08bec6aa-49fc-4379-3587-4b21e286c19e} (ID = 139177)
8:56 PM: Found Trojan Horse: trojan-downloader-wareout
8:56 PM: HKU\S-1-5-21-776561741-1580436667-1343024091-1003\software\microsoft\windows\currentversion\run\ || systemdll (ID = 144857)
8:56 PM: Registry Sweep Complete, Elapsed Time:00:00:29
8:56 PM: Starting Cookie Sweep
8:56 PM: Found Spy Cookie: enhance cookie
8:56 PM:
[email protected][1].txt (ID = 2614)
8:56 PM: Found Spy Cookie: search123 cookie
8:56 PM: new@search123[2].txt (ID = 3305)
8:56 PM: Found Spy Cookie: go.com cookie
8:56 PM:
[email protected][1].txt (ID = 2729)
8:56 PM: new@go[2].txt (ID = 2728)
8:56 PM:
[email protected][2].txt (ID = 2729)
8:56 PM: Found Spy Cookie: nextag cookie
8:56 PM: new@nextag[2].txt (ID = 5014)
8:56 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
8:56 PM: Starting File Sweep
8:56 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
8:56 PM: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
9:06 PM: Warning: Failed to open file "c:\program files\norton antivirus\savrt\0814nav~.tmp". The process cannot access the file because it is being used by another process
9:08 PM: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcsys.dll". The process cannot access the file because it is being used by another process
9:08 PM: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcrst.dll". The process cannot access the file because it is being used by another process
9:12 PM: Found Adware: commonname
9:12 PM: rmcomtb.dat (ID = 111038)
9:15 PM: Found Adware: idesk
9:15 PM: dc38.sys (ID = 205674)
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
9:19 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc519c60c-7b21-40ab-8305-4b27e42c0997.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs13671143-67cf-4610-a438-6471f477fbd6.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs47df0d42-00ed-400f-832b-8740a726a6c5.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8ae76ced-08f2-4e65-9f11-2e88455b2257.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5962935b-503c-40e8-a4d1-de8c1e924896.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6711e681-02f5-4e24-9de8-00bec1244ffe.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa6dbec26-55ba-4c78-b31e-080807925a8e.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs65fdf8fe-13a7-4832-af0a-a0a552a417b1.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscd7e88c6-b01c-4479-a8f0-6462d71d8334.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseabcd76b-bcda-4a83-a551-76831f5a81c2.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9d4b05c6-cb1b-4195-a97c-1c844ac6f80a.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7ba13674-5c2f-4d02-b408-6d39ac6394a5.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c477fde-8381-4fbb-a904-615839350a5c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9747cea9-cfdf-4b0c-94d4-8ab730fef022.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf3870515-6600-41f5-b58b-7d5dc10b6b1f.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdb3dd2be-f6d9-4f92-9245-f6f77edbfb0b.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfb1eb6ea-7942-4ac4-b2fc-0fd1e3542d4d.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs32a590d1-cefc-404a-bbab-aedef3ab7818.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2527db65-63a3-43da-847f-a92cb21a439a.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa902bfa9-a3da-47a8-a124-da414c99c382.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc32ac489-6f41-4a8c-b9a9-910957278292.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3bd6af88-a366-4c0d-a3e6-d8007cd70a64.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8026fd79-e780-4371-ab76-4ce0d239744d.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs44c6b20f-bd52-41e3-be1a-cc11363d26c9.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs03b1b486-cd7f-4808-8c3b-58cae3e02c9c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs21f021f4-1b14-4748-bc18-eb6b2b992fde.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsea6a0829-dc77-4ccd-8118-f2e53cc838f9.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsaf3c3485-7e0d-421f-a6e5-a13000360541.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs79f7c1df-4ffe-4db4-9d2b-0998319e4acc.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs771397a0-31b6-437f-a1c3-355a954a38d3.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsccf7519b-e6b9-4aae-8eb4-256dc58c0c33.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5b8294e8-af1e-48e0-9e85-6271f851017c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf99f7216-c35c-48d5-9595-072d0d0a2ea9.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfd64277e-7e18-486d-93e4-3d63bb691a9f.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3bfda267-a23e-4548-ac71-36f2a83b1089.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs527293e1-dc42-4c14-91fe-a20011dc4c45.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5ec0387f-6256-4f6c-98fd-b4bb09ea8b35.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdae4599c-f144-41b4-bf62-842ca1d4c3d7.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf6a7ab49-c93b-450b-8dae-f6343d2486d0.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd33e3025-83bb-4d63-8b4e-4bcfb27d8dab.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsadf2f2ab-1675-483d-9f5a-de1cc2bc1e20.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse941a98a-ecbc-43ac-b626-e44074cffb40.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsae341a42-1df6-4fba-abc5-a435329239c3.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsffb72233-ca82-4541-90f7-19395e85471e.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs209a837e-1e34-4712-8bd0-94c32a746b58.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa30c77ad-0c6f-4386-848b-b6c40ca4392d.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdde4cc5e-ed44-45ef-928a-99452fe619c0.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs67485b33-5e88-445f-867f-49580eec00ff.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs039eeea5-a6b5-434a-984c-057c0c5bbe72.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4bb6fbf4-3779-4288-85c0-5059c8a0fbc3.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs18e46d36-df41-4a86-bc2d-f7939c3e4aff.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5a2826e6-3d77-4901-a48b-e4002a00362c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs63ce08a9-d883-4c9b-8009-a15feac6c6ea.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsffd0ed32-550f-4db4-99d8-59007be98e75.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb5033ce2-4442-4660-87a4-fdd94b12f80c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs77e3688c-9d96-4859-b877-1fb54c21c972.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf6204f91-9b7c-4fab-8ae1-51c50d37b6a6.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4e2cfcfe-07a7-4d10-9c78-04eef0b2d25b.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2a9e2c0e-a492-4aa9-84f7-e4d39e33f73a.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb28bff05-c4d4-490f-83e3-62b64b2425c1.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6dd669ea-48d2-4257-82e5-fdf776531dbd.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa8c9b726-8f61-43c2-b72a-53436bea38bf.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3bdfecc0-e4f4-4a01-a057-fd7915b83cf6.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4b509aa4-27c3-4c40-8f95-355681daf2dd.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsca80ca41-b19b-404d-9ffa-41c5f685bff1.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs43cd9fc4-5140-4716-9283-97d4c37c2bd0.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc23fc10c-c91a-406d-970a-2189d947f4e9.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1b2428b2-26bf-490a-9b98-25257b664f85.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8b803b99-5aed-4217-9706-befcaaa4b265.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf2bd11af-740f-4170-aa08-fd6f373168e2.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6eefe5f7-5a2a-425a-91f8-7385e452c886.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc1a89c5e-95d8-4b8e-924c-c9749bcec933.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4fe84db9-e8e6-4524-86b4-e72dc9e198a8.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc06a790d-9281-4b1e-ba55-6ffc678c518e.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsad3bd917-29fe-49ee-81dc-7af0c4a32d96.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5da180cf-c1d5-4f4f-b311-4ca7b107c8e6.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5806ea66-bf42-430e-831c-51d47eb54e04.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6f5bdfdb-f95d-45ca-b2a7-f920a3573f39.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdde3f544-099f-43ed-811f-206b6d6de55c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf1d1028a-0a9a-4006-8656-3c18c9bddd11.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7acee348-fe74-4b4f-b638-6569bb23f156.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscbef2ea4-72d5-4b01-9dd5-515e40467842.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8a94dae6-4020-414f-b612-002faa2c0c2b.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4194f012-1f26-49e8-9b22-eef30fa8cdd9.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs37b89f68-336e-4177-b9b6-939f30b3e538.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs06c21392-7b29-4d97-a95f-e267670afa56.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6ddb94cc-1d3e-4ea5-8d6b-c9eb3e12c88c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs20367081-2dae-4637-9f57-3ec96b84c404.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs92847dab-2c03-41be-b2c6-f3a2dcc2dbd7.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs83bf0b80-c4a4-4ebf-85d7-04c73f7262a7.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5fb63fe6-093d-4000-ad0d-24513766f98e.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc7afb59d-2a5c-4596-8465-a67a97b5cdf8.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs65238b15-90cc-4f9c-b95a-83cbac68dc11.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa7b560f0-396a-451a-a3b9-2e679a821ba1.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9b46cbaa-f098-4122-afa4-7488653be80a.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse879669f-a0cb-41eb-834e-28a9fd9ebcba.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbee4a142-91a0-4842-a3e0-ac20fde024c0.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5ad67e12-166f-44ef-89b3-85b03572c963.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs601e533c-c6bf-42f9-98c9-cbf0e180cd68.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1839a49c-042f-458e-8ccb-e9106c5c1c9d.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs24a8d35f-5ad3-43dd-a14a-44cbf1e4d78c.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9d885647-4091-4e84-8a12-bb11cad0b257.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5c992297-b69f-4b2e-a853-678b3c8cd9f1.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7aedcb5b-ba4e-4576-80cc-790b10bb8234.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\new\ntuser.dat". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to open file "c:\documents and settings\new\ntuser.dat.log". The process cannot access the file because it is being used by another process
9:37 PM: Warning: Failed to open file "c:\documents and settings\new\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:37 PM: Warning: Failed to open file "c:\documents and settings\new\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
9:40 PM: Found Adware: unspypc
9:40 PM: a0065516.exe (ID = 209376)
9:40 PM: a0065517.exe (ID = 209378)
9:40 PM: a0065519.exe (ID = 209375)
9:41 PM: Found Trojan Horse: trojan-downloader-perlink.biz
9:41 PM: a0088059.exe (ID = 213450)
9:41 PM: Found Trojan Horse: trojan-downloader-ruin
9:41 PM: a0088060.exe (ID = 203528)
9:41 PM: a0088061.exe (ID = 209383)
9:41 PM: Found Trojan Horse: trojan-secdrop
9:41 PM: a0088062.exe (ID = 81237)
9:41 PM: a0088063.exe (ID = 125496)
9:41 PM: a0088064.exe (ID = 209443)
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Unhandled Archive Type
9:43 PM: Warning: Invalid Stream
9:43 PM: Warning: Invalid Stream
9:44 PM: File Sweep Complete, Elapsed Time: 00:48:01
9:44 PM: Full Sweep has completed. Elapsed time 00:55:45
9:44 PM: Traces Found: 31
9:45 PM: Removal process initiated
9:45 PM: Quarantining All Traces: cws_ns3
9:45 PM: Quarantining All Traces: elitebar
9:45 PM: Quarantining All Traces: trojan-downloader-ruin
9:45 PM: Quarantining All Traces: commonname
9:45 PM: Quarantining All Traces: trojan-downloader-perlink.biz
9:45 PM: Quarantining All Traces: trojan-downloader-wareout
9:45 PM: Quarantining All Traces: trojan-secdrop
9:45 PM: Quarantining All Traces: vesbiz downloader
9:45 PM: Quarantining All Traces: idesk
9:45 PM: Quarantining All Traces: quicklink search toolbar
9:45 PM: Quarantining All Traces: searchtoolbar
9:45 PM: Quarantining All Traces: unspypc
9:46 PM: Quarantining All Traces: enhance cookie
9:46 PM: Quarantining All Traces: go.com cookie
9:46 PM: Quarantining All Traces: nextag cookie
9:46 PM: Quarantining All Traces: search123 cookie
9:46 PM: Removal process completed. Elapsed time 00:01:13
********
8:31 PM: | Start of Session, Wednesday, January 04, 2006 |
8:31 PM: Spy Sweeper started
8:47 PM: Your spyware definitions have been updated.
8:47 PM: Your definitions are up to date.
8:48 PM: | End of Session, Wednesday, January 04, 2006 |