Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

Solved: How do I remove these 2 nasties ?

(New)
(!)

PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
06-May-2006, 12:46 PM #1
Solved: How do I remove these 2 nasties ?
The AdAware free scan has identified these 2 items as 'severe'. Can someone tell me how to remove them please.

W32/Noala.b@MIHKEY_LOCAL_MACHINE\software\micRegValue

W32.Mydoom.AXC:\windows\java.exe


Thanks very much

PAT W
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
06-May-2006, 01:15 PM #2
If you are refering to AdAware SE have it clean them - click the box beside them and then click continue
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
06-May-2006, 06:17 PM #3
I've got mixed up with a download I've done for NoAdware. This will just identify files and you have to purchase it to get it to delete them. AdAware SE I've now downloaded and it has identified 1 object called Timesink rated as 7 TAC and 8 objects called Alexa rated at 5 TAC. I have quarantined them as I don't know if I should delete them or not.
I don't know which out of these 9 items are the 2 picked out by NoAdware.

Also, should I leave in the tracking cookies of which AdAware found 573 ?

Thanks
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
06-May-2006, 06:58 PM #4
Delete anything AdAware ID's

Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/ (W2K/XP Only)
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.

Restart your computer into safe mode now. Perform the following steps in safe mode:
(Start tapping F8 at the first black screen after power up)

Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your C: Drive
This will take some time to run!
Boot to normal mode
Post that log and a new HiJack log


Click here to download HJTsetup.exe: http://www.thespykiller.co.uk/files/HJTSetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
07-May-2006, 05:52 AM #5
As I'm using Windows 98, presumably I can't use the trial version of Ewido Security Suite you mentioned. Is there one for 98 as I couldn't see anything on their site?
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 45,302 posts.
 
Join Date: Dec 2002
Location: Loughton, Essex, UK
07-May-2006, 06:11 AM #6
no adware can give false detections

post the HJT log please
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
07-May-2006, 12:56 PM #7
HJT Log as requested
Logfile of HijackThis v1.99.1
Scan saved at 17:58:38, on 07/05/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\E_S10IC2.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\OPSCAN.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/broadband
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic 2000\Search Bar.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {C12B4EC1-1F65-11D3-91CA-00104B9C4765} - C:\Program Files\Copernic 2000\CopernicFind.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"
O4 - HKLM\..\Run: [Atikey] Atitask.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background
O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Open Frame in &New Window - C:\WINDOWS\WEB\frm2new.htm
O8 - Extra context menu item: &Highlight - C:\WINDOWS\WEB\highlight.htm
O8 - Extra context menu item: &Web Search - C:\WINDOWS\WEB\selsearch.htm
O8 - Extra context menu item: &Links List - C:\WINDOWS\WEB\urllist.htm
O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
O8 - Extra context menu item: I&mages List - C:\WINDOWS\Web\imglist.htm
O8 - Extra context menu item: Search Using Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra 'Tools' menuitem: Launch Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra button: Translate - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
O9 - Extra 'Tools' menuitem: &Translate Using Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: www.sulc.ac.uk
O15 - Trusted Zone: http://www.learndirect.co.uk
O15 - Trusted Zone: www.courses.learndirect.co.uk
O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) - http://courses.learndirect.co.uk/pro...er/awswaxf.cab
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
07-May-2006, 01:00 PM #8
Run http://www.kaspersky.com/virusscanner - Online scan

When the scan is finished Save the results from the scan!

Post the results from Kaspersky scan
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
07-May-2006, 05:38 PM #9
I've tried to run the Kapersky scan but it failed and the message said " you must have admistration rights on this computer. You must also have the IE security setting to the medium level". I don't understand this as this is my personal computer and when I went on the security part of the dial up connection box and went onto custom level it already said medium. ??
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
07-May-2006, 05:45 PM #10
Go to the link below and download the trial version of SpySweeper:

SpySweeper http://www.webroot.com/consumer/prod...rc=4129&ac=tsg

* Click the Free Trial link under "SpySweeper" to download the program.
* Install it. Once the program is installed, it will open.
* It will prompt you to update to the latest definitions, click Yes.
* Once the definitions are installed, click Options on the left side.
* Click the Sweep Options tab.
* Under What to Sweep please put a check next to the following:
o Sweep Memory
o Sweep Registry
o Sweep Cookies
o Sweep All User Accounts
o Enable Direct Disk Sweeping
o Sweep Contents of Compressed Files
o Sweep for Rootkits

o Please UNCHECK Do not Sweep System Restore Folder.

* Click Sweep Now on the left side.
* Click the Start button.
* When it's done scanning, click the Next button.
* Make sure everything has a check next to it, then click the Next button.
* It will remove all of the items found.
* Click Session Log in the upper right corner, copy everything in that window.
* Click the Summary tab and click Finish.
* Paste the contents of the session log you copied into your next reply.
Also post a new Hijack This log.
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
08-May-2006, 07:05 AM #11
09:47: | Start of Session, 08 May 2006 |
09:47: Spy Sweeper started
09:47: Sweep initiated using definitions version 670
09:47: Starting Memory Sweep
10:05: Memory Sweep Complete, Elapsed Time: 00:17:19
10:05: Starting Registry Sweep
10:09: Registry Sweep Complete, Elapsed Time:00:04:52
10:09: Starting Cookie Sweep
10:09: Found Spy Cookie: a cookie
10:09: mrs pa williams@a[1].txt (ID = 2027)
10:09: Found Spy Cookie: imgis cookie
10:09: mrs pa williams@imgis[2].txt (ID = 2841)
10:09: Found Spy Cookie: fastclick cookie
10:09: mrs pa williams@fastclick[3].txt (ID = 2651)
10:09: Found Spy Cookie: avenuea cookie
10:09: mrs pa williams@avenuea[2].txt (ID = 2259)
10:09: Found Spy Cookie: overture cookie
10:09: mrs pa williams@overture[2].txt (ID = 3105)
10:09: Found Spy Cookie: tripod cookie
10:09: mrs pa williams@tripod[2].txt (ID = 3591)
10:09: Found Spy Cookie: humanclick cookie
10:09: mrs pa williams@hc2.humanclick[2].txt (ID = 2810)
10:09: Found Spy Cookie: classmates cookie
10:09: mrs pa williams@classmates[1].txt (ID = 2384)
10:09: Found Spy Cookie: preferences cookie
10:09: mrs pa williams@preferences[1].txt (ID = 3183)
10:10: Found Spy Cookie: mediaplex cookie
10:10: mrs pa williams@mediaplex[2].txt (ID = 6442)
10:10: Found Spy Cookie: servedby advertising cookie
10:10: mrs pa williams@servedby.advertising[1].txt (ID = 3335)
10:10: Found Spy Cookie: advertising cookie
10:10: mrs pa williams@advertising[2].txt (ID = 2175)
10:10: Found Spy Cookie: rightmedia cookie
10:10: mrs pa williams@rightmedia[1].txt (ID = 3259)
10:10: Found Spy Cookie: adviva cookie
10:10: mrs pa williams@adviva[1].txt (ID = 2177)
10:10: Found Spy Cookie: focalink cookie
10:10: mrs pa williams@focalink[2].txt (ID = 2684)
10:10: Found Spy Cookie: adtech cookie
10:10: mrs pa williams@adtech[2].txt (ID = 2155)
10:10: Found Spy Cookie: commission junction cookie
10:10: mrs pa williams@www.commission-junction[1].txt (ID = 2456)
10:10: mrs pa williams@mediaplex[9].txt (ID = 6442)
10:10: Found Spy Cookie: qksrv cookie
10:10: mrs pa williams@www.qksrv[1].txt (ID = 3214)
10:10: Found Spy Cookie: exitexchange cookie
10:10: mrs pa williams@exitexchange[1].txt (ID = 2633)
10:10: Found Spy Cookie: x10 cookie
10:10: mrs pa williams@x10[1].txt (ID = 3711)
10:10: Found Spy Cookie: weborama cookie
10:10: mrs pa williams@weborama[1].txt (ID = 3658)
10:10: mrs pa williams@mediaplex[1].txt (ID = 6442)
10:10: Found Spy Cookie: go.com cookie
10:10: mrs pa williams@go[2].txt (ID = 2728)
10:10: mrs pa williams@fastclick[2].txt (ID = 2651)
10:10: Found Spy Cookie: bluestreak cookie
10:10: mrs pa williams@bluestreak[1].txt (ID = 2314)
10:10: mrs pa williams@psc.disney.go[1].txt (ID = 2729)
10:10: mrs pa williams@disney.go[2].txt (ID = 2729)
10:10: mrs pa williams@disneyland.disney.go[1].txt (ID = 2729)
10:10: mrs pa williams@mediaplex[4].txt (ID = 6442)
10:10: Found Spy Cookie: atlas dmt cookie
10:10: mrs pa williams@atdmt[1].txt (ID = 2253)
10:10: Found Spy Cookie: realmedia cookie
10:10: mrs pa williams@realmedia[1].txt (ID = 3235)
10:10: mrs pa williams@www.qksrv[3].txt (ID = 3214)
10:10: Found Spy Cookie: adserver cookie
10:10: mrs pa williams@z1.adserver[1].txt (ID = 2142)
10:10: mrs pa williams@www.commission-junction[2].txt (ID = 2456)
10:10: mrs pa williams@hc2.humanclick[1].txt (ID = 2810)
10:10: Found Spy Cookie: adbureau cookie
10:10: mrs pa williams@btls-eu.adbureau[2].txt (ID = 2060)
10:10: Found Spy Cookie: gotoast cookie
10:10: mrs pa williams@www.gotoast[1].txt (ID = 2752)
10:10: Found Spy Cookie: ad-flow cookie
10:10: mrs pa williams@ad-flow[2].txt (ID = 2047)
10:10: Found Spy Cookie: questionmarket cookie
10:10: mrs pa williams@questionmarket[5].txt (ID = 3217)
10:10: mrs pa williams@btls-eu.adbureau[3].txt (ID = 2060)
10:10: Found Spy Cookie: touchclarity cookie
10:10: mrs pa williams@tiscali.touchclarity[1].txt (ID = 3566)
10:10: Found Spy Cookie: about cookie
10:10: mrs pa williams@about[1].txt (ID = 2037)
10:10: Found Spy Cookie: trafficmp cookie
10:10: mrs pa williams@trafficmp[1].txt (ID = 3581)
10:10: mrs pa williams@advertising[3].txt (ID = 2175)
10:10: mrs pa williams@mediaplex[5].txt (ID = 6442)
10:10: Found Spy Cookie: 2o7.net cookie
10:10: mrs pa williams@2o7[1].txt (ID = 1957)
10:10: mrs pa williams@t1.adserver[2].txt (ID = 2142)
10:10: mrs pa williams@questionmarket[1].txt (ID = 3217)
10:10: mrs pa williams@atdmt[3].txt (ID = 2253)
10:10: mrs pa williams@bluestreak[2].txt (ID = 2314)
10:10: mrs pa williams@mediaplex[11].txt (ID = 6442)
10:10: Found Spy Cookie: server.iad.liveperson cookie
10:10: mrs pa williams@server.iad.liveperson[2].txt (ID = 3341)
10:10: mrs pa williams@servedby.advertising[2].txt (ID = 3335)
10:10: mrs pa williams@realmedia[3].txt (ID = 3235)
10:10: Found Spy Cookie: internetfuel cookie
10:10: mrs pa williams@adserv.internetfuel[1].txt (ID = 2874)
10:10: mrs pa williams@classmates[2].txt (ID = 2384)
10:10: Found Spy Cookie: pokerroom cookie
10:10: mrs pa williams@pokerroom[1].txt (ID = 3149)
10:10: mrs pa williams@fastclick[5].txt (ID = 2651)
10:10: mrs pa williams@mediaplex[10].txt (ID = 6442)
10:10: mrs pa williams@fastclick[4].txt (ID = 2651)
10:10: mrs pa williams@overture[3].txt (ID = 3105)
10:10: Found Spy Cookie: nextag cookie
10:10: mrs pa williams@nextag[1].txt (ID = 5014)
10:10: mrs pa williams@trafficmp[2].txt (ID = 3581)
10:10: mrs pa williams@server.iad.liveperson[3].txt (ID = 3341)
10:10: Found Spy Cookie: valuead cookie
10:10: mrs pa williams@ads.valuead[1].txt (ID = 3627)
10:10: Found Spy Cookie: hotlog cookie
10:10: mrs pa williams@hotlog[2].txt (ID = 2801)
10:10: mrs pa williams@btls-eu.adbureau[1].txt (ID = 2060)
10:10: Found Spy Cookie: web-stat cookie
10:10: mrs pa williams@www.web-stat[1].txt (ID = 3649)
10:10: mrs pa williams@adviva[3].txt (ID = 2177)
10:10: Found Spy Cookie: casalemedia cookie
10:10: mrs pa williams@casalemedia[1].txt (ID = 2354)
10:10: Found Spy Cookie: fortunecity cookie
10:10: mrs pa williams@fortunecity[2].txt (ID = 2686)
10:10: mrs pa williams@mediaplex[3].txt (ID = 6442)
10:10: Found Spy Cookie: spylog cookie
10:10: mrs pa williams@spylog[1].txt (ID = 3415)
10:10: mrs pa williams@questionmarket[2].txt (ID = 3217)
10:10: mrs pa williams@bluestreak[3].txt (ID = 2314)
10:10: mrs pa williams@tiscali.touchclarity[2].txt (ID = 3566)
10:10: mrs pa williams@weborama[3].txt (ID = 3658)
10:10: mrs pa williams@mediaplex[7].txt (ID = 6442)
10:10: mrs pa williams@webtracking.touchclarity[1].txt (ID = 3566)
10:10: mrs pa williams@z1.adserver[3].txt (ID = 2142)
10:10: mrs pa williams@fastclick[8].txt (ID = 2651)
10:10: Found Spy Cookie: did-it cookie
10:10: mrs pa williams@did-it[1].txt (ID = 2523)
10:10: mrs pa williams@fastclick[10].txt (ID = 2651)
10:10: Found Spy Cookie: dealtime cookie
10:10: mrs pa williams@dealtime[2].txt (ID = 2505)
10:10: Found Spy Cookie: xiti cookie
10:10: mrs pa williams@xiti[1].txt (ID = 3717)
10:10: Found Spy Cookie: bilbo.counted.com cookie
10:10: mrs pa williams@bilbo.counted[2].txt (ID = 2306)
10:10: mrs pa williams@hc2.humanclick[4].txt (ID = 2810)
10:10: Found Spy Cookie: ask cookie
10:10: mrs pa williams@uk.ask[2].txt (ID = 2246)
10:10: mrs pa williams@adviva[4].txt (ID = 2177)
10:10: mrs pa williams@overture[4].txt (ID = 3105)
10:10: mrs pa williams@stat.dealtime[2].txt (ID = 2506)
10:10: mrs pa williams@qksrv[1].txt (ID = 3213)
10:10: Found Spy Cookie: bs.serving-sys cookie
10:10: mrs pa williams@bs.serving-sys[1].txt (ID = 2330)
10:10: mrs pa williams@www.qksrv[4].txt (ID = 3214)
10:10: mrs pa williams@weborama[4].txt (ID = 3658)
10:10: mrs pa williams@bluestreak[4].txt (ID = 2314)
10:10: mrs pa williams@commission-junction[1].txt (ID = 2455)
10:10: mrs pa williams@www.commission-junction[3].txt (ID = 2456)
10:10: Found Spy Cookie: gostats cookie
10:10: mrs pa williams@gostats[2].txt (ID = 2747)
10:10: mrs pa williams@weborama[2].txt (ID = 3658)
10:10: mrs pa williams@advertising[1].txt (ID = 2175)
10:10: Found Spy Cookie: hitslink cookie
10:10: mrs pa williams@counter.hitslink[1].txt (ID = 2790)
10:10: mrs pa williams@questionmarket[4].txt (ID = 3217)
10:10: Found Spy Cookie: domainsponsor cookie
10:10: mrs pa williams@landing.domainsponsor[1].txt (ID = 2535)
10:10: mrs pa williams@mediaplex[6].txt (ID = 6442)
10:10: mrs pa williams@perf.overture[1].txt (ID = 3106)
10:10: mrs pa williams@servedby.advertising[4].txt (ID = 3335)
10:10: mrs pa williams@search.domainsponsor[1].txt (ID = 2534)
10:10: Found Spy Cookie: domain sponsor cookie
10:10: mrs pa williams@domainsponsor[2].txt (ID = 2533)
10:10: mrs pa williams@counter2.hitslink[1].txt (ID = 2790)
10:10: mrs pa williams@dealtime[1].txt (ID = 2505)
10:10: mrs pa williams@adviva[2].txt (ID = 2177)
10:10: Found Spy Cookie: hypertracker.com cookie
10:10: mrs pa williams@hypertracker[2].txt (ID = 2817)
10:10: mrs pa williams@bs.serving-sys[2].txt (ID = 2330)
10:10: mrs pa williams@womenshealth.about[1].txt (ID = 2038)
10:10: mrs pa williams@bluestreak[6].txt (ID = 2314)
10:10: mrs pa williams@experts.about[1].txt (ID = 2038)
10:10: mrs pa williams@tripod[1].txt (ID = 3591)
10:10: Found Spy Cookie: serving-sys cookie
10:10: mrs pa williams@serving-sys[2].txt (ID = 3343)
10:10: mrs pa williams@overture[5].txt (ID = 3105)
10:10: Found Spy Cookie: pointroll cookie
10:10: mrs pa williams@ads.pointroll[2].txt (ID = 3148)
10:10: mrs pa williams@questionmarket[3].txt (ID = 3217)
10:10: Found Spy Cookie: 247realmedia cookie
10:10: mrs pa williams@247realmedia[2].txt (ID = 1953)
10:10: Found Spy Cookie: falkag cookie
10:10: mrs pa williams@as-us.falkag[1].txt (ID = 2650)
10:10: mrs pa williams@adviva[5].txt (ID = 2177)
10:10: mrs pa williams@2o7[4].txt (ID = 1957)
10:10: Found Spy Cookie: xzoomy cookie
10:10: mrs pa williams@www.xzoomy[1].txt (ID = 3742)
10:10: mrs pa williams@c2.gostats[2].txt (ID = 2748)
10:10: mrs pa williams@bs.serving-sys[4].txt (ID = 2330)
10:10: mrs pa williams@www.web-stat[3].txt (ID = 3649)
10:10: Found Spy Cookie: tickle cookie
10:10: mrs pa williams@tickle[1].txt (ID = 3529)
10:10: Found Spy Cookie: ru4 cookie
10:10: mrs pa williams@edge.ru4[2].txt (ID = 3269)
10:10: Found Spy Cookie: 123count cookie
10:10: mrs pa williams@www.123count[2].txt (ID = 1928)
10:10: mrs pa williams@servedby.advertising[5].txt (ID = 3335)
10:10: Found Spy Cookie: hyperbanner cookie
10:10: mrs pa williams@ads12.hyperbanner[1].txt (ID = 2816)
10:10: mrs pa williams@serving-sys[1].txt (ID = 3343)
10:10: mrs pa williams@advertising[5].txt (ID = 2175)
10:10: mrs pa williams@fastclick[1].txt (ID = 2651)
10:10: Found Spy Cookie: burstbeacon cookie
10:10: mrs pa williams@www.burstbeacon[1].txt (ID = 2335)
10:10: mrs pa williams@bluestreak[5].txt (ID = 2314)
10:10: mrs pa williams@a.as-us.falkag[2].txt (ID = 2650)
10:10: Found Spy Cookie: clicktracks cookie
10:10: mrs pa williams@stats.clicktracks[2].txt (ID = 2407)
10:10: mrs pa williams@overture[6].txt (ID = 3105)
10:10: mrs pa williams@servedby.advertising[6].txt (ID = 3335)
10:10: mrs pa williams@advertising[4].txt (ID = 2175)
10:10: mrs pa williams@about[3].txt (ID = 2037)
10:10: mrs pa williams@mediaplex[8].txt (ID = 6442)
10:10: mrs pa williams@2o7[5].txt (ID = 1957)
10:10: mrs pa williams@as1.falkag[2].txt (ID = 2650)
10:10: mrs pa williams@serving-sys[4].txt (ID = 3343)
10:10: mrs pa williams@2o7[3].txt (ID = 1957)
10:10: Found Spy Cookie: myaffiliateprogram.com cookie
10:10: mrs pa williams@www.myaffiliateprogram[1].txt (ID = 3032)
10:10: Found Spy Cookie: burstnet cookie
10:10: mrs pa williams@burstnet[2].txt (ID = 2336)
10:10: mrs pa williams@honda.touchclarity[2].txt (ID = 3566)
10:10: Found Spy Cookie: gator cookie
10:10: mrs pa williams@gator[1].txt (ID = 2722)
10:10: Found Spy Cookie: starware.com cookie
10:10: mrs pa williams@www.starware[1].txt (ID = 3442)
10:10: Found Spy Cookie: adrevolver cookie
10:10: mrs pa williams@adrevolver[3].txt (ID = 2088)
10:10: mrs pa williams@bs.serving-sys[3].txt (ID = 2330)
10:10: mrs pa williams@fastclick[6].txt (ID = 2651)
10:10: mrs pa williams@overture[7].txt (ID = 3105)
10:10: mrs pa williams@bluestreak[7].txt (ID = 2314)
10:10: Found Spy Cookie: tradedoubler cookie
10:10: mrs pa williams@tradedoubler[1].txt (ID = 3575)
10:10: mrs pa williams@edge.ru4[3].txt (ID = 3269)
10:10: mrs pa williams@adviva[6].txt (ID = 2177)
10:10: Found Spy Cookie: servlet cookie
10:10: mrs pa williams@servlet[2].txt (ID = 3345)
10:10: mrs pa williams@stat.dealtime[3].txt (ID = 2506)
10:10: Found Spy Cookie: bravenet cookie
10:10: mrs pa williams@bravenet[2].txt (ID = 2322)
10:10: mrs pa williams@adviva[7].txt (ID = 2177)
10:10: mrs pa williams@spylog[3].txt (ID = 3415)
10:10: Found Spy Cookie: apmebf cookie
10:10: mrs pa williams@apmebf[2].txt (ID = 2229)
10:10: Found Spy Cookie: centrport net cookie
10:10: mrs pa williams@centrport[1].txt (ID = 2374)
10:10: mrs pa williams@advertising[7].txt (ID = 2175)
10:10: mrs pa williams@overture[1].txt (ID = 3105)
10:10: Found Spy Cookie: maxserving cookie
10:10: mrs pa williams@maxserving[3].txt (ID = 2966)
10:10: mrs pa williams@bs.serving-sys[6].txt (ID = 2330)
10:10: mrs pa williams@gotoast[2].txt (ID = 2751)
10:10: mrs pa williams@hypertracker[3].txt (ID = 2817)
10:10: Found Spy Cookie: coremetrics cookie
10:10: mrs pa williams@data.coremetrics[1].txt (ID = 2472)
10:10: mrs pa williams@bluestreak[9].txt (ID = 2314)
10:10: mrs pa williams@etype.adbureau[2].txt (ID = 2060)
10:10: mrs pa williams@nextag[3].txt (ID = 5014)
10:10: mrs pa williams@knitting.about[1].txt (ID = 2038)
10:10: mrs pa williams@maxserving[2].txt (ID = 2966)
10:10: Found Spy Cookie: go2net.com cookie
10:10: mrs pa williams@go2net[1].txt (ID = 2730)
10:10: Found Spy Cookie: yadro cookie
10:10: mrs pa williams@yadro[1].txt (ID = 3743)
10:10: mrs pa williams@ask[1].txt (ID = 2245)
10:10: Found Spy Cookie: toplist cookie
10:10: mrs pa williams@toplist[2].txt (ID = 3557)
10:10: mrs pa williams@server3.web-stat[2].txt (ID = 3649)
10:10: Found Spy Cookie: anm.co.uk cookie
10:10: mrs pa williams@anm.co[2].txt (ID = 2223)
10:10: mrs pa williams@stat.dealtime[1].txt (ID = 2506)
10:10: mrs pa williams@burstnet[3].txt (ID = 2336)
10:10: mrs pa williams@counter.hitslink[2].txt (ID = 2790)
10:10: mrs pa williams@servlet[1].txt (ID = 3345)
10:10: mrs pa williams@as1.falkag[3].txt (ID = 2650)
10:10: mrs pa williams@about[4].txt (ID = 2037)
10:10: mrs pa williams@247realmedia[1].txt (ID = 1953)
10:10: mrs pa williams@112.2o7[1].txt (ID = 1958)
10:10: mrs pa williams@as-eu.falkag[1].txt (ID = 2650)
10:10: Found Spy Cookie: customer cookie
10:10: mrs pa williams@customer[1].txt (ID = 2481)
10:10: mrs pa williams@server.iad.liveperson[1].txt (ID = 3341)
10:10: Found Spy Cookie: realtracker cookie
10:10: mrs pa williams@web4.realtracker[2].txt (ID = 3242)
10:10: mrs pa williams@tripod[3].txt (ID = 3591)
10:10: mrs pa williams@servedby.advertising[7].txt (ID = 3335)
10:10: mrs pa williams@ads.pointroll[1].txt (ID = 3148)
10:10: mrs pa williams@serving-sys[5].txt (ID = 3343)
10:10: Found Spy Cookie: tracking cookie
10:10: mrs pa williams@tracking[2].txt (ID = 3571)
10:10: Found Spy Cookie: pricegrabber cookie
10:10: mrs pa williams@pricegrabber[2].txt (ID = 3185)
10:10: mrs pa williams@edge.ru4[1].txt (ID = 3269)
10:10: Found Spy Cookie: tribalfusion cookie
10:10: mrs pa williams@tribalfusion[1].txt (ID = 3589)
10:10: mrs pa williams@tradedoubler[2].txt (ID = 3575)
10:10: mrs pa williams@pcworld.pricegrabber[1].txt (ID = 3186)
10:10: Found Spy Cookie: webtrendslive cookie
10:10: mrs pa williams@statse.webtrendslive[1].txt (ID = 3667)
10:10: mrs pa williams@www.myaffiliateprogram[2].txt (ID = 3032)
10:10: mrs pa williams@about[2].txt (ID = 2037)
10:10: mrs pa williams@casalemedia[3].txt (ID = 2354)
10:10: mrs pa williams@bluestreak[8].txt (ID = 2314)
10:10: mrs pa williams@tracking[3].txt (ID = 3571)
10:10: Found Spy Cookie: statcounter cookie
10:10: mrs pa williams@statcounter[1].txt (ID = 3447)
10:10: mrs pa williams@as-us.falkag[2].txt (ID = 2650)
10:10: Found Spy Cookie: zedo cookie
10:10: mrs pa williams@zedo[1].txt (ID = 3762)
10:10: mrs pa williams@qksrv[3].txt (ID = 3213)
10:10: mrs pa williams@bs.serving-sys[7].txt (ID = 2330)
10:10: mrs pa williams@creview.adbureau[2].txt (ID = 2060)
10:10: mrs pa williams@realmedia[2].txt (ID = 3235)
10:10: mrs pa williams@uk.ask[1].txt (ID = 2246)
10:10: mrs pa williams@pricegrabber[3].txt (ID = 3185)
10:10: mrs pa williams@questionmarket[6].txt (ID = 3217)
10:10: mrs pa williams@bravenet[1].txt (ID = 2322)
10:10: mrs pa williams@statcounter[2].txt (ID = 3447)
10:10: mrs pa williams@edge.ru4[4].txt (ID = 3269)
10:10: mrs pa williams@advertising[8].txt (ID = 2175)
10:10: mrs pa williams@adviva[9].txt (ID = 2177)
10:10: mrs pa williams@overture[8].txt (ID = 3105)
10:10: mrs pa williams@www.burstbeacon[2].txt (ID = 2335)
10:10: Found Spy Cookie: belnk cookie
10:10: mrs pa williams@belnk[1].txt (ID = 2292)
10:10: Found Spy Cookie: banner cookie
10:10: mrs pa williams@banner[1].txt (ID = 2276)
10:10: Found Spy Cookie: addynamix cookie
10:10: mrs pa williams@ads.addynamix[1].txt (ID = 2062)
10:10: Found Spy Cookie: bizrate cookie
10:10: mrs pa williams@bizrate[1].txt (ID = 2308)
10:10: mrs pa williams@sewing.about[1].txt (ID = 2038)
10:10: mrs pa williams@stat.dealtime[4].txt (ID = 2506)
10:10: mrs pa williams@server.iad.liveperson[5].txt (ID = 3341)
10:10: mrs pa williams@about[5].txt (ID = 2037)
10:10: mrs pa williams@as1.falkag[4].txt (ID = 2650)
10:10: mrs pa williams@tribalfusion[3].txt (ID = 3589)
10:10: mrs pa williams@dist.belnk[2].txt (ID = 2293)
10:10: mrs pa williams@centrport[2].txt (ID = 2374)
10:10: Found Spy Cookie: tacoda cookie
10:10: mrs pa williams@tacoda[1].txt (ID = 6444)
10:10: mrs pa williams@adtech[1].txt (ID = 2155)
10:10: mrs pa williams@counter.hitslink[3].txt (ID = 2790)
10:10: mrs pa williams@adrevolver[1].txt (ID = 2088)
10:10: mrs pa williams@fastclick[7].txt (ID = 2651)
10:10: mrs pa williams@burstnet[4].txt (ID = 2336)
10:10: mrs pa williams@motorcycles.about[1].txt (ID = 2038)
10:10: mrs pa williams@casalemedia[2].txt (ID = 2354)
10:10: mrs pa williams@media.fastclick[2].txt (ID = 2652)
10:10: mrs pa williams@apmebf[3].txt (ID = 2229)
10:10: mrs pa williams@2o7[2].txt (ID = 1957)
10:10: mrs pa williams@tracking[1].txt (ID = 3571)
10:10: mrs pa williams@112.2o7[3].txt (ID = 1958)
10:10: mrs pa williams@sel.as-us.falkag[1].txt (ID = 2650)
10:10: mrs pa williams@bluestreak[10].txt (ID = 2314)
10:10: mrs pa williams@ads.pointroll[4].txt (ID = 3148)
10:10: mrs pa williams@as-eu.falkag[2].txt (ID = 2650)
10:10: mrs pa williams@statse.webtrendslive[2].txt (ID = 3667)
10:10: mrs pa williams@h.starware[1].txt (ID = 3442)
10:10: mrs pa williams@entrepreneur.122.2o7[1].txt (ID = 1958)
10:10: Found Spy Cookie: onestat.com cookie
10:10: mrs pa williams@stat.onestat[2].txt (ID = 3098)
10:10: Found Spy Cookie: 190dotcom cookie
10:10: mrs pa williams@82.109.190[1].txt (ID = 1936)
10:10: mrs pa williams@serving-sys[6].txt (ID = 3343)
10:10: mrs pa williams@tradedoubler[3].txt (ID = 3575)
10:10: mrs pa williams@www.myaffiliateprogram[4].txt (ID = 3032)
10:10: Found Spy Cookie: atwola cookie
10:10: mrs pa williams@atwola[2].txt (ID = 2255)
10:10: Found Spy Cookie: pro-market cookie
10:10: mrs pa williams@pro-market[1].txt (ID = 3197)
10:10: mrs pa williams@247realmedia[3].txt (ID = 1953)
10:10: mrs pa williams@edge.ru4[6].txt (ID = 3269)
10:10: mrs pa williams@advertising[6].txt (ID = 2175)
10:10: mrs pa williams@adrevolver[5].txt (ID = 2088)
10:10: mrs pa williams@statcounter[4].txt (ID = 3447)
10:10: mrs pa williams@counter2.hitslink[3].txt (ID = 2790)
10:10: mrs pa williams@mediaplex[12].txt (ID = 6442)
10:10: Found Spy Cookie: monstermarketplace cookie
10:10: mrs pa williams@monstermarketplace[2].txt (ID = 3006)
10:10: mrs pa williams@adrevolver[4].txt (ID = 2088)
10:10: mrs pa williams@as-eu.falkag[4].txt (ID = 2650)
10:10: mrs pa williams@adviva[8].txt (ID = 2177)
10:10: mrs pa williams@questionmarket[8].txt (ID = 3217)
10:10: mrs pa williams@server.iad.liveperson[4].txt (ID = 3341)
10:10: mrs pa williams@122.2o7[1].txt (ID = 1958)
10:10: mrs pa williams@tradedoubler[4].txt (ID = 3575)
10:10: mrs pa williams@apmebf[1].txt (ID = 2229)
10:10: mrs pa williams@qksrv[4].txt (ID = 3213)
10:10: mrs pa williams@media.fastclick[3].txt (ID = 2652)
10:10: mrs pa williams@statse.webtrendslive[3].txt (ID = 3667)
10:10: mrs pa williams@overture[10].txt (ID = 3105)
10:10: mrs pa williams@stat.dealtime[6].txt (ID = 2506)
10:10: Found Spy Cookie: clickbank cookie
10:10: mrs pa williams@clickbank[2].txt (ID = 2398)
10:10: mrs pa williams@realmedia[5].txt (ID = 3235)
10:10: Found Spy Cookie: yieldmanager cookie
10:10: mrs pa williams@ad.yieldmanager[1].txt (ID = 3751)
10:10: mrs pa williams@burstnet[1].txt (ID = 2336)
10:10: mrs pa williams@casalemedia[4].txt (ID = 2354)
10:11: mrs pa williams@tacoda[3].txt (ID = 6444)
10:11: mrs pa williams@stat.onestat[1].txt (ID = 3098)
10:11: mrs pa williams@sel.as-eu.falkag[1].txt (ID = 2650)
10:11: mrs pa williams@motorcycles.about[2].txt (ID = 2038)
10:11: mrs pa williams@tribalfusion[4].txt (ID = 3589)
Too many characters for one reply. More to follow
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
08-May-2006, 07:06 AM #12
Part 2 of SpySweeper
10:11: Cookie Sweep Complete, Elapsed Time: 00:01:06
10:11: Starting File Sweep
10:11: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because
it is being used by another process
10:13: Found Trojan Horse: sdbot
10:13: adiras.ini (ID = 74768)
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7342-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7343-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7344-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7345-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7346-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7347-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7348-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7349-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7350-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7351-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7352-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7353-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7354-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7355-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7356-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7357-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7358-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7359-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7360-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7361-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7362-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7363-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7364-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7365-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7366-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7367-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7368-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7369-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7370-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7371-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7372-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7373-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7374-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7375-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7376-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7377-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7378-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7379-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7380-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7381-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7382-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7383-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7384-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7385-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7386-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7387-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7388-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7389-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7390-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7391-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7392-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7393-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7394-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7395-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7396-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7397-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7398-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7399-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a0-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a1-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a2-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a3-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a4-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a5-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a6-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a7-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a8-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a9-de77-11da-8248-444553540000.tmp". The process cannot access the file because
it is being used by another process
11:10: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcsys.dll". The process cannot access the file because
it is being used by another process
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:38: Warning: Unhandled Archive Type
11:41: File Sweep Complete, Elapsed Time: 01:30:06
11:41: Full Sweep has completed. Elapsed time 01:53:28
11:41: Traces Found: 306
11:47: Removal process initiated
11:47: Quarantining All Traces: sdbot
11:47: Quarantining All Traces: 123count cookie
11:47: Quarantining All Traces: 190dotcom cookie
11:47: Quarantining All Traces: 247realmedia cookie
11:47: Quarantining All Traces: 2o7.net cookie
11:47: Quarantining All Traces: a cookie
11:47: Quarantining All Traces: about cookie
11:47: Quarantining All Traces: adbureau cookie
11:47: Quarantining All Traces: addynamix cookie
11:47: Quarantining All Traces: ad-flow cookie
11:47: Quarantining All Traces: adrevolver cookie
11:47: Quarantining All Traces: adserver cookie
11:47: Quarantining All Traces: adtech cookie
11:48: Quarantining All Traces: advertising cookie
11:48: Quarantining All Traces: adviva cookie
11:48: Quarantining All Traces: anm.co.uk cookie
11:48: Quarantining All Traces: apmebf cookie
11:48: Quarantining All Traces: ask cookie
11:48: Quarantining All Traces: atlas dmt cookie
11:48: Quarantining All Traces: atwola cookie
11:48: Quarantining All Traces: avenuea cookie
11:48: Quarantining All Traces: banner cookie
11:48: Quarantining All Traces: belnk cookie
11:48: Quarantining All Traces: bilbo.counted.com cookie
11:48: Quarantining All Traces: bizrate cookie
11:48: Quarantining All Traces: bluestreak cookie
11:48: Quarantining All Traces: bravenet cookie
11:48: Quarantining All Traces: bs.serving-sys cookie
11:48: Quarantining All Traces: burstbeacon cookie
11:48: Quarantining All Traces: burstnet cookie
11:48: Quarantining All Traces: casalemedia cookie
11:48: Quarantining All Traces: centrport net cookie
11:48: Quarantining All Traces: classmates cookie
11:48: Quarantining All Traces: clickbank cookie
11:48: Quarantining All Traces: clicktracks cookie
11:48: Quarantining All Traces: commission junction cookie
11:48: Quarantining All Traces: coremetrics cookie
11:48: Quarantining All Traces: customer cookie
11:48: Quarantining All Traces: dealtime cookie
11:48: Quarantining All Traces: did-it cookie
11:48: Quarantining All Traces: domain sponsor cookie
11:48: Quarantining All Traces: domainsponsor cookie
11:48: Quarantining All Traces: exitexchange cookie
11:48: Quarantining All Traces: falkag cookie
11:48: Quarantining All Traces: fastclick cookie
11:48: Quarantining All Traces: focalink cookie
11:48: Quarantining All Traces: fortunecity cookie
11:48: Quarantining All Traces: gator cookie
11:48: Quarantining All Traces: go.com cookie
11:48: Quarantining All Traces: go2net.com cookie
11:48: Quarantining All Traces: gostats cookie
11:48: Quarantining All Traces: gotoast cookie
11:48: Quarantining All Traces: hitslink cookie
11:48: Quarantining All Traces: hotlog cookie
11:48: Quarantining All Traces: humanclick cookie
11:48: Quarantining All Traces: hyperbanner cookie
11:48: Quarantining All Traces: hypertracker.com cookie
11:49: Quarantining All Traces: imgis cookie
11:49: Quarantining All Traces: internetfuel cookie
11:49: Quarantining All Traces: maxserving cookie
11:49: Quarantining All Traces: mediaplex cookie
11:49: Quarantining All Traces: monstermarketplace cookie
11:49: Quarantining All Traces: myaffiliateprogram.com cookie
11:49: Quarantining All Traces: nextag cookie
11:49: Quarantining All Traces: onestat.com cookie
11:49: Quarantining All Traces: overture cookie
11:49: Quarantining All Traces: pointroll cookie
11:49: Quarantining All Traces: pokerroom cookie
11:49: Quarantining All Traces: preferences cookie
11:49: Quarantining All Traces: pricegrabber cookie
11:49: Quarantining All Traces: pro-market cookie
11:49: Quarantining All Traces: qksrv cookie
11:49: Quarantining All Traces: questionmarket cookie
11:49: Quarantining All Traces: realmedia cookie
11:49: Quarantining All Traces: realtracker cookie
11:49: Quarantining All Traces: rightmedia cookie
11:49: Quarantining All Traces: ru4 cookie
11:49: Quarantining All Traces: servedby advertising cookie
11:49: Quarantining All Traces: server.iad.liveperson cookie
11:49: Quarantining All Traces: serving-sys cookie
11:49: Quarantining All Traces: servlet cookie
11:49: Quarantining All Traces: spylog cookie
11:49: Quarantining All Traces: starware.com cookie
11:49: Quarantining All Traces: statcounter cookie
11:49: Quarantining All Traces: tacoda cookie
11:49: Quarantining All Traces: tickle cookie
11:49: Quarantining All Traces: toplist cookie
11:49: Quarantining All Traces: touchclarity cookie
11:49: Quarantining All Traces: tracking cookie
11:49: Quarantining All Traces: tradedoubler cookie
11:49: Quarantining All Traces: trafficmp cookie
11:49: Quarantining All Traces: tribalfusion cookie
11:49: Quarantining All Traces: tripod cookie
11:50: Quarantining All Traces: valuead cookie
11:50: Quarantining All Traces: weborama cookie
11:50: Quarantining All Traces: web-stat cookie
11:50: Quarantining All Traces: webtrendslive cookie
11:50: Quarantining All Traces: x10 cookie
11:50: Quarantining All Traces: xiti cookie
11:50: Quarantining All Traces: xzoomy cookie
11:50: Quarantining All Traces: yadro cookie
11:50: Quarantining All Traces: yieldmanager cookie
11:50: Quarantining All Traces: zedo cookie
11:50: Removal process completed. Elapsed time 00:02:46
********
09:43: | Start of Session, 08 May 2006 |
09:43: Spy Sweeper started
09:45: Your spyware definitions have been updated.
09:47: | End of Session, 08 May 2006
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
08-May-2006, 07:08 AM #13
HJT Log
Logfile of HijackThis v1.99.1
Scan saved at 12:13:42, on 08/05/06
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\ATICWD32.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\E_S10IC2.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\ATITASK.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/broadband
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic 2000\Search Bar.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R3 - URLSearchHook: (no name) - {C12B4EC1-1F65-11D3-91CA-00104B9C4765} - C:\Program Files\Copernic 2000\CopernicFind.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"
O4 - HKLM\..\Run: [Atikey] Atitask.exe
O4 - HKLM\..\Run: [autoclk] autoclk.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background
O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Open Frame in &New Window - C:\WINDOWS\WEB\frm2new.htm
O8 - Extra context menu item: &Highlight - C:\WINDOWS\WEB\highlight.htm
O8 - Extra context menu item: &Web Search - C:\WINDOWS\WEB\selsearch.htm
O8 - Extra context menu item: &Links List - C:\WINDOWS\WEB\urllist.htm
O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
O8 - Extra context menu item: I&mages List - C:\WINDOWS\Web\imglist.htm
O8 - Extra context menu item: Search Using Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra 'Tools' menuitem: Launch Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
O9 - Extra button: Translate - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
O9 - Extra 'Tools' menuitem: &Translate Using Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: www.sulc.ac.uk
O15 - Trusted Zone: http://www.learndirect.co.uk
O15 - Trusted Zone: www.courses.learndirect.co.uk
O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) - http://courses.learndirect.co.uk/pro...er/awswaxf.cab
MFDnNC's Avatar
Member with 49,015 posts.
 
Join Date: Sep 2004
08-May-2006, 11:22 AM #14
You should be clean now and if you are getting those messages I would have to say they are false positives
PAT W's Avatar
PAT W PAT W is offline
Member with 115 posts.
THREAD STARTER
 
Join Date: Jun 2002
08-May-2006, 12:29 PM #15
Many thanks for all your help !
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑