1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: How do I remove these 2 nasties ?

Discussion in 'Virus & Other Malware Removal' started by PAT W, May 6, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    The AdAware free scan has identified these 2 items as 'severe'. Can someone tell me how to remove them please.

    W32/Noala.b@MIHKEY_LOCAL_MACHINE\software\micRegValue

    W32.Mydoom.AXC:\windows\java.exe


    Thanks very much

    PAT W
     
  2. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    If you are refering to AdAware SE have it clean them - click the box beside them and then click continue
     
  3. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    I've got mixed up with a download I've done for NoAdware. This will just identify files and you have to purchase it to get it to delete them. AdAware SE I've now downloaded and it has identified 1 object called Timesink rated as 7 TAC and 8 objects called Alexa rated at 5 TAC. I have quarantined them as I don't know if I should delete them or not.
    I don't know which out of these 9 items are the 2 picked out by NoAdware.

    Also, should I leave in the tracking cookies of which AdAware found 573 ?

    Thanks
     
  4. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    Delete anything AdAware ID's

    Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/ (W2K/XP Only)
    · Install ewido.
    · During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
    · Launch ewido
    · It will prompt you to update click the OK button and it will go to the main screen
    · On the left side of the main screen click update
    · Click on Start and let it update.
    · DO NOT run a scan yet. You will do that later in safe mode.

    Restart your computer into safe mode now. Perform the following steps in safe mode:
    (Start tapping F8 at the first black screen after power up)

    Run Ewido:
    · Click on scanner
    · Click Complete System Scan and the scan will begin.
    · During the scan it will prompt you to clean files, click OK
    · When the scan is finished, look at the bottom of the screen and click the Save report button.
    · Save the report to your C: Drive
    This will take some time to run!
    Boot to normal mode
    Post that log and a new HiJack log


    Click here to download HJTsetup.exe: http://www.thespykiller.co.uk/files/HJTSetup.exe
    Save HJTsetup.exe to your desktop.

    Double click on the HJTsetup.exe icon on your desktop.
    By default it will install to C:\Program Files\Hijack This.
    Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
    Put a check by Create a desktop icon then click Next again.
    Continue to follow the rest of the prompts from there.
    At the final dialogue box click Finish and it will launch Hijack This.
    Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
    Click Save to save the log file and then the log will open in notepad.
    Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
    Come back here to this thread and Paste the log in your next reply.
    DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
     
  5. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    As I'm using Windows 98, presumably I can't use the trial version of Ewido Security Suite you mentioned. Is there one for 98 as I couldn't see anything on their site?
     
  6. dvk01

    dvk01 Derek Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    47,842
    no adware can give false detections

    post the HJT log please
     
  7. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    HJT Log as requested
    Logfile of HijackThis v1.99.1
    Scan saved at 17:58:38, on 07/05/06
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
    C:\WINDOWS\SYSTEM\ATICWD32.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\E_S10IC2.EXE
    C:\WINDOWS\SYSTEM\ATITASK.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\RunDLL.exe
    C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\PROGRAM FILES\NORTON ANTIVIRUS\OPSCAN.EXE
    C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/broadband
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic 2000\Search Bar.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R3 - URLSearchHook: (no name) - {C12B4EC1-1F65-11D3-91CA-00104B9C4765} - C:\Program Files\Copernic 2000\CopernicFind.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWnd
    O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"
    O4 - HKLM\..\Run: [Atikey] Atitask.exe
    O4 - HKLM\..\Run: [autoclk] autoclk.exe
    O4 - HKLM\..\Run: [adiras] adiras.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
    O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
    O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background
    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: Open Frame in &New Window - C:\WINDOWS\WEB\frm2new.htm
    O8 - Extra context menu item: &Highlight - C:\WINDOWS\WEB\highlight.htm
    O8 - Extra context menu item: &Web Search - C:\WINDOWS\WEB\selsearch.htm
    O8 - Extra context menu item: &Links List - C:\WINDOWS\WEB\urllist.htm
    O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
    O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
    O8 - Extra context menu item: I&mages List - C:\WINDOWS\Web\imglist.htm
    O8 - Extra context menu item: Search Using Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
    O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra 'Tools' menuitem: Launch Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra button: Translate - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
    O9 - Extra 'Tools' menuitem: &Translate Using Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O15 - Trusted Zone: www.sulc.ac.uk
    O15 - Trusted Zone: http://www.learndirect.co.uk
    O15 - Trusted Zone: www.courses.learndirect.co.uk
    O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) - http://courses.learndirect.co.uk/pr...2000_hybrid/module06/aware_player/awswaxf.cab
     
  8. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
  9. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    I've tried to run the Kapersky scan but it failed and the message said " you must have admistration rights on this computer. You must also have the IE security setting to the medium level". I don't understand this as this is my personal computer and when I went on the security part of the dial up connection box and went onto custom level it already said medium. ??
     
  10. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    Go to the link below and download the trial version of SpySweeper:

    SpySweeper http://www.webroot.com/consumer/products/spysweeper/index.html?acode=af1&rc=4129&ac=tsg

    * Click the Free Trial link under "SpySweeper" to download the program.
    * Install it. Once the program is installed, it will open.
    * It will prompt you to update to the latest definitions, click Yes.
    * Once the definitions are installed, click Options on the left side.
    * Click the Sweep Options tab.
    * Under What to Sweep please put a check next to the following:
    o Sweep Memory
    o Sweep Registry
    o Sweep Cookies
    o Sweep All User Accounts
    o Enable Direct Disk Sweeping
    o Sweep Contents of Compressed Files
    o Sweep for Rootkits

    o Please UNCHECK Do not Sweep System Restore Folder.

    * Click Sweep Now on the left side.
    * Click the Start button.
    * When it's done scanning, click the Next button.
    * Make sure everything has a check next to it, then click the Next button.
    * It will remove all of the items found.
    * Click Session Log in the upper right corner, copy everything in that window.
    * Click the Summary tab and click Finish.
    * Paste the contents of the session log you copied into your next reply.
    Also post a new Hijack This log.
     
  11. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    09:47: | Start of Session, 08 May 2006 |
    09:47: Spy Sweeper started
    09:47: Sweep initiated using definitions version 670
    09:47: Starting Memory Sweep
    10:05: Memory Sweep Complete, Elapsed Time: 00:17:19
    10:05: Starting Registry Sweep
    10:09: Registry Sweep Complete, Elapsed Time:00:04:52
    10:09: Starting Cookie Sweep
    10:09: Found Spy Cookie: a cookie
    10:09: mrs pa williams@a[1].txt (ID = 2027)
    10:09: Found Spy Cookie: imgis cookie
    10:09: mrs pa williams@imgis[2].txt (ID = 2841)
    10:09: Found Spy Cookie: fastclick cookie
    10:09: mrs pa williams@fastclick[3].txt (ID = 2651)
    10:09: Found Spy Cookie: avenuea cookie
    10:09: mrs pa williams@avenuea[2].txt (ID = 2259)
    10:09: Found Spy Cookie: overture cookie
    10:09: mrs pa williams@overture[2].txt (ID = 3105)
    10:09: Found Spy Cookie: tripod cookie
    10:09: mrs pa williams@tripod[2].txt (ID = 3591)
    10:09: Found Spy Cookie: humanclick cookie
    10:09: mrs pa [email protected][2].txt (ID = 2810)
    10:09: Found Spy Cookie: classmates cookie
    10:09: mrs pa williams@classmates[1].txt (ID = 2384)
    10:09: Found Spy Cookie: preferences cookie
    10:09: mrs pa williams@preferences[1].txt (ID = 3183)
    10:10: Found Spy Cookie: mediaplex cookie
    10:10: mrs pa williams@mediaplex[2].txt (ID = 6442)
    10:10: Found Spy Cookie: servedby advertising cookie
    10:10: mrs pa [email protected][1].txt (ID = 3335)
    10:10: Found Spy Cookie: advertising cookie
    10:10: mrs pa williams@advertising[2].txt (ID = 2175)
    10:10: Found Spy Cookie: rightmedia cookie
    10:10: mrs pa williams@rightmedia[1].txt (ID = 3259)
    10:10: Found Spy Cookie: adviva cookie
    10:10: mrs pa williams@adviva[1].txt (ID = 2177)
    10:10: Found Spy Cookie: focalink cookie
    10:10: mrs pa williams@focalink[2].txt (ID = 2684)
    10:10: Found Spy Cookie: adtech cookie
    10:10: mrs pa williams@adtech[2].txt (ID = 2155)
    10:10: Found Spy Cookie: commission junction cookie
    10:10: mrs pa [email protected][1].txt (ID = 2456)
    10:10: mrs pa williams@mediaplex[9].txt (ID = 6442)
    10:10: Found Spy Cookie: qksrv cookie
    10:10: mrs pa [email protected][1].txt (ID = 3214)
    10:10: Found Spy Cookie: exitexchange cookie
    10:10: mrs pa williams@exitexchange[1].txt (ID = 2633)
    10:10: Found Spy Cookie: x10 cookie
    10:10: mrs pa williams@x10[1].txt (ID = 3711)
    10:10: Found Spy Cookie: weborama cookie
    10:10: mrs pa williams@weborama[1].txt (ID = 3658)
    10:10: mrs pa williams@mediaplex[1].txt (ID = 6442)
    10:10: Found Spy Cookie: go.com cookie
    10:10: mrs pa williams@go[2].txt (ID = 2728)
    10:10: mrs pa williams@fastclick[2].txt (ID = 2651)
    10:10: Found Spy Cookie: bluestreak cookie
    10:10: mrs pa williams@bluestreak[1].txt (ID = 2314)
    10:10: mrs pa [email protected][1].txt (ID = 2729)
    10:10: mrs pa [email protected][2].txt (ID = 2729)
    10:10: mrs pa [email protected][1].txt (ID = 2729)
    10:10: mrs pa williams@mediaplex[4].txt (ID = 6442)
    10:10: Found Spy Cookie: atlas dmt cookie
    10:10: mrs pa williams@atdmt[1].txt (ID = 2253)
    10:10: Found Spy Cookie: realmedia cookie
    10:10: mrs pa williams@realmedia[1].txt (ID = 3235)
    10:10: mrs pa [email protected][3].txt (ID = 3214)
    10:10: Found Spy Cookie: adserver cookie
    10:10: mrs pa [email protected][1].txt (ID = 2142)
    10:10: mrs pa [email protected][2].txt (ID = 2456)
    10:10: mrs pa [email protected][1].txt (ID = 2810)
    10:10: Found Spy Cookie: adbureau cookie
    10:10: mrs pa [email protected][2].txt (ID = 2060)
    10:10: Found Spy Cookie: gotoast cookie
    10:10: mrs pa [email protected][1].txt (ID = 2752)
    10:10: Found Spy Cookie: ad-flow cookie
    10:10: mrs pa williams@ad-flow[2].txt (ID = 2047)
    10:10: Found Spy Cookie: questionmarket cookie
    10:10: mrs pa williams@questionmarket[5].txt (ID = 3217)
    10:10: mrs pa [email protected][3].txt (ID = 2060)
    10:10: Found Spy Cookie: touchclarity cookie
    10:10: mrs pa [email protected][1].txt (ID = 3566)
    10:10: Found Spy Cookie: about cookie
    10:10: mrs pa williams@about[1].txt (ID = 2037)
    10:10: Found Spy Cookie: trafficmp cookie
    10:10: mrs pa williams@trafficmp[1].txt (ID = 3581)
    10:10: mrs pa williams@advertising[3].txt (ID = 2175)
    10:10: mrs pa williams@mediaplex[5].txt (ID = 6442)
    10:10: Found Spy Cookie: 2o7.net cookie
    10:10: mrs pa williams@2o7[1].txt (ID = 1957)
    10:10: mrs pa [email protected][2].txt (ID = 2142)
    10:10: mrs pa williams@questionmarket[1].txt (ID = 3217)
    10:10: mrs pa williams@atdmt[3].txt (ID = 2253)
    10:10: mrs pa williams@bluestreak[2].txt (ID = 2314)
    10:10: mrs pa williams@mediaplex[11].txt (ID = 6442)
    10:10: Found Spy Cookie: server.iad.liveperson cookie
    10:10: mrs pa [email protected][2].txt (ID = 3341)
    10:10: mrs pa [email protected][2].txt (ID = 3335)
    10:10: mrs pa williams@realmedia[3].txt (ID = 3235)
    10:10: Found Spy Cookie: internetfuel cookie
    10:10: mrs pa [email protected][1].txt (ID = 2874)
    10:10: mrs pa williams@classmates[2].txt (ID = 2384)
    10:10: Found Spy Cookie: pokerroom cookie
    10:10: mrs pa williams@pokerroom[1].txt (ID = 3149)
    10:10: mrs pa williams@fastclick[5].txt (ID = 2651)
    10:10: mrs pa williams@mediaplex[10].txt (ID = 6442)
    10:10: mrs pa williams@fastclick[4].txt (ID = 2651)
    10:10: mrs pa williams@overture[3].txt (ID = 3105)
    10:10: Found Spy Cookie: nextag cookie
    10:10: mrs pa williams@nextag[1].txt (ID = 5014)
    10:10: mrs pa williams@trafficmp[2].txt (ID = 3581)
    10:10: mrs pa [email protected][3].txt (ID = 3341)
    10:10: Found Spy Cookie: valuead cookie
    10:10: mrs pa [email protected][1].txt (ID = 3627)
    10:10: Found Spy Cookie: hotlog cookie
    10:10: mrs pa williams@hotlog[2].txt (ID = 2801)
    10:10: mrs pa [email protected][1].txt (ID = 2060)
    10:10: Found Spy Cookie: web-stat cookie
    10:10: mrs pa [email protected][1].txt (ID = 3649)
    10:10: mrs pa williams@adviva[3].txt (ID = 2177)
    10:10: Found Spy Cookie: casalemedia cookie
    10:10: mrs pa williams@casalemedia[1].txt (ID = 2354)
    10:10: Found Spy Cookie: fortunecity cookie
    10:10: mrs pa williams@fortunecity[2].txt (ID = 2686)
    10:10: mrs pa williams@mediaplex[3].txt (ID = 6442)
    10:10: Found Spy Cookie: spylog cookie
    10:10: mrs pa williams@spylog[1].txt (ID = 3415)
    10:10: mrs pa williams@questionmarket[2].txt (ID = 3217)
    10:10: mrs pa williams@bluestreak[3].txt (ID = 2314)
    10:10: mrs pa [email protected][2].txt (ID = 3566)
    10:10: mrs pa williams@weborama[3].txt (ID = 3658)
    10:10: mrs pa williams@mediaplex[7].txt (ID = 6442)
    10:10: mrs pa [email protected][1].txt (ID = 3566)
    10:10: mrs pa [email protected][3].txt (ID = 2142)
    10:10: mrs pa williams@fastclick[8].txt (ID = 2651)
    10:10: Found Spy Cookie: did-it cookie
    10:10: mrs pa williams@did-it[1].txt (ID = 2523)
    10:10: mrs pa williams@fastclick[10].txt (ID = 2651)
    10:10: Found Spy Cookie: dealtime cookie
    10:10: mrs pa williams@dealtime[2].txt (ID = 2505)
    10:10: Found Spy Cookie: xiti cookie
    10:10: mrs pa williams@xiti[1].txt (ID = 3717)
    10:10: Found Spy Cookie: bilbo.counted.com cookie
    10:10: mrs pa [email protected][2].txt (ID = 2306)
    10:10: mrs pa [email protected][4].txt (ID = 2810)
    10:10: Found Spy Cookie: ask cookie
    10:10: mrs pa [email protected][2].txt (ID = 2246)
    10:10: mrs pa williams@adviva[4].txt (ID = 2177)
    10:10: mrs pa williams@overture[4].txt (ID = 3105)
    10:10: mrs pa [email protected][2].txt (ID = 2506)
    10:10: mrs pa williams@qksrv[1].txt (ID = 3213)
    10:10: Found Spy Cookie: bs.serving-sys cookie
    10:10: mrs pa [email protected][1].txt (ID = 2330)
    10:10: mrs pa [email protected][4].txt (ID = 3214)
    10:10: mrs pa williams@weborama[4].txt (ID = 3658)
    10:10: mrs pa williams@bluestreak[4].txt (ID = 2314)
    10:10: mrs pa williams@commission-junction[1].txt (ID = 2455)
    10:10: mrs pa [email protected][3].txt (ID = 2456)
    10:10: Found Spy Cookie: gostats cookie
    10:10: mrs pa williams@gostats[2].txt (ID = 2747)
    10:10: mrs pa williams@weborama[2].txt (ID = 3658)
    10:10: mrs pa williams@advertising[1].txt (ID = 2175)
    10:10: Found Spy Cookie: hitslink cookie
    10:10: mrs pa [email protected][1].txt (ID = 2790)
    10:10: mrs pa williams@questionmarket[4].txt (ID = 3217)
    10:10: Found Spy Cookie: domainsponsor cookie
    10:10: mrs pa [email protected][1].txt (ID = 2535)
    10:10: mrs pa williams@mediaplex[6].txt (ID = 6442)
    10:10: mrs pa [email protected][1].txt (ID = 3106)
    10:10: mrs pa [email protected][4].txt (ID = 3335)
    10:10: mrs pa [email protected][1].txt (ID = 2534)
    10:10: Found Spy Cookie: domain sponsor cookie
    10:10: mrs pa williams@domainsponsor[2].txt (ID = 2533)
    10:10: mrs pa [email protected][1].txt (ID = 2790)
    10:10: mrs pa williams@dealtime[1].txt (ID = 2505)
    10:10: mrs pa williams@adviva[2].txt (ID = 2177)
    10:10: Found Spy Cookie: hypertracker.com cookie
    10:10: mrs pa williams@hypertracker[2].txt (ID = 2817)
    10:10: mrs pa [email protected][2].txt (ID = 2330)
    10:10: mrs pa [email protected][1].txt (ID = 2038)
    10:10: mrs pa williams@bluestreak[6].txt (ID = 2314)
    10:10: mrs pa [email protected][1].txt (ID = 2038)
    10:10: mrs pa williams@tripod[1].txt (ID = 3591)
    10:10: Found Spy Cookie: serving-sys cookie
    10:10: mrs pa williams@serving-sys[2].txt (ID = 3343)
    10:10: mrs pa williams@overture[5].txt (ID = 3105)
    10:10: Found Spy Cookie: pointroll cookie
    10:10: mrs pa [email protected][2].txt (ID = 3148)
    10:10: mrs pa williams@questionmarket[3].txt (ID = 3217)
    10:10: Found Spy Cookie: 247realmedia cookie
    10:10: mrs pa williams@247realmedia[2].txt (ID = 1953)
    10:10: Found Spy Cookie: falkag cookie
    10:10: mrs pa [email protected][1].txt (ID = 2650)
    10:10: mrs pa williams@adviva[5].txt (ID = 2177)
    10:10: mrs pa williams@2o7[4].txt (ID = 1957)
    10:10: Found Spy Cookie: xzoomy cookie
    10:10: mrs pa [email protected][1].txt (ID = 3742)
    10:10: mrs pa [email protected][2].txt (ID = 2748)
    10:10: mrs pa [email protected][4].txt (ID = 2330)
    10:10: mrs pa [email protected][3].txt (ID = 3649)
    10:10: Found Spy Cookie: tickle cookie
    10:10: mrs pa williams@tickle[1].txt (ID = 3529)
    10:10: Found Spy Cookie: ru4 cookie
    10:10: mrs pa [email protected][2].txt (ID = 3269)
    10:10: Found Spy Cookie: 123count cookie
    10:10: mrs pa [email protected][2].txt (ID = 1928)
    10:10: mrs pa [email protected][5].txt (ID = 3335)
    10:10: Found Spy Cookie: hyperbanner cookie
    10:10: mrs pa [email protected][1].txt (ID = 2816)
    10:10: mrs pa williams@serving-sys[1].txt (ID = 3343)
    10:10: mrs pa williams@advertising[5].txt (ID = 2175)
    10:10: mrs pa williams@fastclick[1].txt (ID = 2651)
    10:10: Found Spy Cookie: burstbeacon cookie
    10:10: mrs pa [email protected][1].txt (ID = 2335)
    10:10: mrs pa williams@bluestreak[5].txt (ID = 2314)
    10:10: mrs pa [email protected][2].txt (ID = 2650)
    10:10: Found Spy Cookie: clicktracks cookie
    10:10: mrs pa [email protected][2].txt (ID = 2407)
    10:10: mrs pa williams@overture[6].txt (ID = 3105)
    10:10: mrs pa [email protected][6].txt (ID = 3335)
    10:10: mrs pa williams@advertising[4].txt (ID = 2175)
    10:10: mrs pa williams@about[3].txt (ID = 2037)
    10:10: mrs pa williams@mediaplex[8].txt (ID = 6442)
    10:10: mrs pa williams@2o7[5].txt (ID = 1957)
    10:10: mrs pa [email protected][2].txt (ID = 2650)
    10:10: mrs pa williams@serving-sys[4].txt (ID = 3343)
    10:10: mrs pa williams@2o7[3].txt (ID = 1957)
    10:10: Found Spy Cookie: myaffiliateprogram.com cookie
    10:10: mrs pa [email protected][1].txt (ID = 3032)
    10:10: Found Spy Cookie: burstnet cookie
    10:10: mrs pa williams@burstnet[2].txt (ID = 2336)
    10:10: mrs pa [email protected][2].txt (ID = 3566)
    10:10: Found Spy Cookie: gator cookie
    10:10: mrs pa williams@gator[1].txt (ID = 2722)
    10:10: Found Spy Cookie: starware.com cookie
    10:10: mrs pa [email protected][1].txt (ID = 3442)
    10:10: Found Spy Cookie: adrevolver cookie
    10:10: mrs pa williams@adrevolver[3].txt (ID = 2088)
    10:10: mrs pa [email protected][3].txt (ID = 2330)
    10:10: mrs pa williams@fastclick[6].txt (ID = 2651)
    10:10: mrs pa williams@overture[7].txt (ID = 3105)
    10:10: mrs pa williams@bluestreak[7].txt (ID = 2314)
    10:10: Found Spy Cookie: tradedoubler cookie
    10:10: mrs pa williams@tradedoubler[1].txt (ID = 3575)
    10:10: mrs pa [email protected][3].txt (ID = 3269)
    10:10: mrs pa williams@adviva[6].txt (ID = 2177)
    10:10: Found Spy Cookie: servlet cookie
    10:10: mrs pa williams@servlet[2].txt (ID = 3345)
    10:10: mrs pa [email protected][3].txt (ID = 2506)
    10:10: Found Spy Cookie: bravenet cookie
    10:10: mrs pa williams@bravenet[2].txt (ID = 2322)
    10:10: mrs pa williams@adviva[7].txt (ID = 2177)
    10:10: mrs pa williams@spylog[3].txt (ID = 3415)
    10:10: Found Spy Cookie: apmebf cookie
    10:10: mrs pa williams@apmebf[2].txt (ID = 2229)
    10:10: Found Spy Cookie: centrport net cookie
    10:10: mrs pa williams@centrport[1].txt (ID = 2374)
    10:10: mrs pa williams@advertising[7].txt (ID = 2175)
    10:10: mrs pa williams@overture[1].txt (ID = 3105)
    10:10: Found Spy Cookie: maxserving cookie
    10:10: mrs pa williams@maxserving[3].txt (ID = 2966)
    10:10: mrs pa [email protected][6].txt (ID = 2330)
    10:10: mrs pa williams@gotoast[2].txt (ID = 2751)
    10:10: mrs pa williams@hypertracker[3].txt (ID = 2817)
    10:10: Found Spy Cookie: coremetrics cookie
    10:10: mrs pa [email protected][1].txt (ID = 2472)
    10:10: mrs pa williams@bluestreak[9].txt (ID = 2314)
    10:10: mrs pa [email protected][2].txt (ID = 2060)
    10:10: mrs pa williams@nextag[3].txt (ID = 5014)
    10:10: mrs pa [email protected][1].txt (ID = 2038)
    10:10: mrs pa williams@maxserving[2].txt (ID = 2966)
    10:10: Found Spy Cookie: go2net.com cookie
    10:10: mrs pa williams@go2net[1].txt (ID = 2730)
    10:10: Found Spy Cookie: yadro cookie
    10:10: mrs pa williams@yadro[1].txt (ID = 3743)
    10:10: mrs pa williams@ask[1].txt (ID = 2245)
    10:10: Found Spy Cookie: toplist cookie
    10:10: mrs pa williams@toplist[2].txt (ID = 3557)
    10:10: mrs pa [email protected][2].txt (ID = 3649)
    10:10: Found Spy Cookie: anm.co.uk cookie
    10:10: mrs pa [email protected][2].txt (ID = 2223)
    10:10: mrs pa [email protected][1].txt (ID = 2506)
    10:10: mrs pa williams@burstnet[3].txt (ID = 2336)
    10:10: mrs pa [email protected][2].txt (ID = 2790)
    10:10: mrs pa williams@servlet[1].txt (ID = 3345)
    10:10: mrs pa [email protected][3].txt (ID = 2650)
    10:10: mrs pa williams@about[4].txt (ID = 2037)
    10:10: mrs pa williams@247realmedia[1].txt (ID = 1953)
    10:10: mrs pa [email protected][1].txt (ID = 1958)
    10:10: mrs pa [email protected][1].txt (ID = 2650)
    10:10: Found Spy Cookie: customer cookie
    10:10: mrs pa williams@customer[1].txt (ID = 2481)
    10:10: mrs pa [email protected][1].txt (ID = 3341)
    10:10: Found Spy Cookie: realtracker cookie
    10:10: mrs pa [email protected][2].txt (ID = 3242)
    10:10: mrs pa williams@tripod[3].txt (ID = 3591)
    10:10: mrs pa [email protected][7].txt (ID = 3335)
    10:10: mrs pa [email protected][1].txt (ID = 3148)
    10:10: mrs pa williams@serving-sys[5].txt (ID = 3343)
    10:10: Found Spy Cookie: tracking cookie
    10:10: mrs pa williams@tracking[2].txt (ID = 3571)
    10:10: Found Spy Cookie: pricegrabber cookie
    10:10: mrs pa williams@pricegrabber[2].txt (ID = 3185)
    10:10: mrs pa [email protected][1].txt (ID = 3269)
    10:10: Found Spy Cookie: tribalfusion cookie
    10:10: mrs pa williams@tribalfusion[1].txt (ID = 3589)
    10:10: mrs pa williams@tradedoubler[2].txt (ID = 3575)
    10:10: mrs pa [email protected][1].txt (ID = 3186)
    10:10: Found Spy Cookie: webtrendslive cookie
    10:10: mrs pa [email protected][1].txt (ID = 3667)
    10:10: mrs pa [email protected][2].txt (ID = 3032)
    10:10: mrs pa williams@about[2].txt (ID = 2037)
    10:10: mrs pa williams@casalemedia[3].txt (ID = 2354)
    10:10: mrs pa williams@bluestreak[8].txt (ID = 2314)
    10:10: mrs pa williams@tracking[3].txt (ID = 3571)
    10:10: Found Spy Cookie: statcounter cookie
    10:10: mrs pa williams@statcounter[1].txt (ID = 3447)
    10:10: mrs pa [email protected][2].txt (ID = 2650)
    10:10: Found Spy Cookie: zedo cookie
    10:10: mrs pa williams@zedo[1].txt (ID = 3762)
    10:10: mrs pa williams@qksrv[3].txt (ID = 3213)
    10:10: mrs pa [email protected][7].txt (ID = 2330)
    10:10: mrs pa [email protected][2].txt (ID = 2060)
    10:10: mrs pa williams@realmedia[2].txt (ID = 3235)
    10:10: mrs pa [email protected][1].txt (ID = 2246)
    10:10: mrs pa williams@pricegrabber[3].txt (ID = 3185)
    10:10: mrs pa williams@questionmarket[6].txt (ID = 3217)
    10:10: mrs pa williams@bravenet[1].txt (ID = 2322)
    10:10: mrs pa williams@statcounter[2].txt (ID = 3447)
    10:10: mrs pa [email protected][4].txt (ID = 3269)
    10:10: mrs pa williams@advertising[8].txt (ID = 2175)
    10:10: mrs pa williams@adviva[9].txt (ID = 2177)
    10:10: mrs pa williams@overture[8].txt (ID = 3105)
    10:10: mrs pa [email protected][2].txt (ID = 2335)
    10:10: Found Spy Cookie: belnk cookie
    10:10: mrs pa williams@belnk[1].txt (ID = 2292)
    10:10: Found Spy Cookie: banner cookie
    10:10: mrs pa williams@banner[1].txt (ID = 2276)
    10:10: Found Spy Cookie: addynamix cookie
    10:10: mrs pa [email protected][1].txt (ID = 2062)
    10:10: Found Spy Cookie: bizrate cookie
    10:10: mrs pa williams@bizrate[1].txt (ID = 2308)
    10:10: mrs pa [email protected][1].txt (ID = 2038)
    10:10: mrs pa [email protected][4].txt (ID = 2506)
    10:10: mrs pa [email protected][5].txt (ID = 3341)
    10:10: mrs pa williams@about[5].txt (ID = 2037)
    10:10: mrs pa [email protected][4].txt (ID = 2650)
    10:10: mrs pa williams@tribalfusion[3].txt (ID = 3589)
    10:10: mrs pa [email protected][2].txt (ID = 2293)
    10:10: mrs pa williams@centrport[2].txt (ID = 2374)
    10:10: Found Spy Cookie: tacoda cookie
    10:10: mrs pa williams@tacoda[1].txt (ID = 6444)
    10:10: mrs pa williams@adtech[1].txt (ID = 2155)
    10:10: mrs pa [email protected][3].txt (ID = 2790)
    10:10: mrs pa williams@adrevolver[1].txt (ID = 2088)
    10:10: mrs pa williams@fastclick[7].txt (ID = 2651)
    10:10: mrs pa williams@burstnet[4].txt (ID = 2336)
    10:10: mrs pa [email protected][1].txt (ID = 2038)
    10:10: mrs pa williams@casalemedia[2].txt (ID = 2354)
    10:10: mrs pa [email protected][2].txt (ID = 2652)
    10:10: mrs pa williams@apmebf[3].txt (ID = 2229)
    10:10: mrs pa williams@2o7[2].txt (ID = 1957)
    10:10: mrs pa williams@tracking[1].txt (ID = 3571)
    10:10: mrs pa [email protected][3].txt (ID = 1958)
    10:10: mrs pa [email protected][1].txt (ID = 2650)
    10:10: mrs pa williams@bluestreak[10].txt (ID = 2314)
    10:10: mrs pa [email protected][4].txt (ID = 3148)
    10:10: mrs pa williams@as-eu.falkag[2].txt (ID = 2650)
    10:10: mrs pa williams@statse.webtrendslive[2].txt (ID = 3667)
    10:10: mrs pa williams@h.starware[1].txt (ID = 3442)
    10:10: mrs pa williams@entrepreneur.122.2o7[1].txt (ID = 1958)
    10:10: Found Spy Cookie: onestat.com cookie
    10:10: mrs pa williams@stat.onestat[2].txt (ID = 3098)
    10:10: Found Spy Cookie: 190dotcom cookie
    10:10: mrs pa williams@82.109.190[1].txt (ID = 1936)
    10:10: mrs pa williams@serving-sys[6].txt (ID = 3343)
    10:10: mrs pa williams@tradedoubler[3].txt (ID = 3575)
    10:10: mrs pa williams@www.myaffiliateprogram[4].txt (ID = 3032)
    10:10: Found Spy Cookie: atwola cookie
    10:10: mrs pa williams@atwola[2].txt (ID = 2255)
    10:10: Found Spy Cookie: pro-market cookie
    10:10: mrs pa williams@pro-market[1].txt (ID = 3197)
    10:10: mrs pa williams@247realmedia[3].txt (ID = 1953)
    10:10: mrs pa williams@edge.ru4[6].txt (ID = 3269)
    10:10: mrs pa williams@advertising[6].txt (ID = 2175)
    10:10: mrs pa williams@adrevolver[5].txt (ID = 2088)
    10:10: mrs pa williams@statcounter[4].txt (ID = 3447)
    10:10: mrs pa williams@counter2.hitslink[3].txt (ID = 2790)
    10:10: mrs pa williams@mediaplex[12].txt (ID = 6442)
    10:10: Found Spy Cookie: monstermarketplace cookie
    10:10: mrs pa williams@monstermarketplace[2].txt (ID = 3006)
    10:10: mrs pa williams@adrevolver[4].txt (ID = 2088)
    10:10: mrs pa williams@as-eu.falkag[4].txt (ID = 2650)
    10:10: mrs pa williams@adviva[8].txt (ID = 2177)
    10:10: mrs pa williams@questionmarket[8].txt (ID = 3217)
    10:10: mrs pa williams@server.iad.liveperson[4].txt (ID = 3341)
    10:10: mrs pa williams@122.2o7[1].txt (ID = 1958)
    10:10: mrs pa williams@tradedoubler[4].txt (ID = 3575)
    10:10: mrs pa williams@apmebf[1].txt (ID = 2229)
    10:10: mrs pa williams@qksrv[4].txt (ID = 3213)
    10:10: mrs pa williams@media.fastclick[3].txt (ID = 2652)
    10:10: mrs pa williams@statse.webtrendslive[3].txt (ID = 3667)
    10:10: mrs pa williams@overture[10].txt (ID = 3105)
    10:10: mrs pa williams@stat.dealtime[6].txt (ID = 2506)
    10:10: Found Spy Cookie: clickbank cookie
    10:10: mrs pa williams@clickbank[2].txt (ID = 2398)
    10:10: mrs pa williams@realmedia[5].txt (ID = 3235)
    10:10: Found Spy Cookie: yieldmanager cookie
    10:10: mrs pa williams@ad.yieldmanager[1].txt (ID = 3751)
    10:10: mrs pa williams@burstnet[1].txt (ID = 2336)
    10:10: mrs pa williams@casalemedia[4].txt (ID = 2354)
    10:11: mrs pa williams@tacoda[3].txt (ID = 6444)
    10:11: mrs pa williams@stat.onestat[1].txt (ID = 3098)
    10:11: mrs pa williams@sel.as-eu.falkag[1].txt (ID = 2650)
    10:11: mrs pa williams@motorcycles.about[2].txt (ID = 2038)
    10:11: mrs pa williams@tribalfusion[4].txt (ID = 3589)
    Too many characters for one reply. More to follow
     
  12. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    Part 2 of SpySweeper
    10:11: Cookie Sweep Complete, Elapsed Time: 00:01:06
    10:11: Starting File Sweep
    10:11: Warning: Failed to open file "c:\windows\win386.swp". The process cannot access the file because
    it is being used by another process
    10:13: Found Trojan Horse: sdbot
    10:13: adiras.ini (ID = 74768)
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7342-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7343-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7344-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7345-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7346-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7347-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7348-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7349-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e734f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7350-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7351-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7352-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7353-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7354-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7355-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7356-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7357-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7358-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7359-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e735f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7360-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7361-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7362-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7363-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7364-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7365-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7366-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7367-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7368-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7369-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e736f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7370-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7371-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7372-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7373-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7374-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7375-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7376-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7377-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7378-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7379-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e737f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7380-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7381-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7382-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7383-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7384-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7385-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7386-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7387-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7388-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7389-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e738f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7390-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7391-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7392-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7393-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7394-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7395-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7396-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7397-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7398-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e7399-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739a-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739b-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739c-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739d-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739e-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e739f-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a0-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a1-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a2-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a3-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a4-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a5-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a6-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a7-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a8-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    10:47: Warning: Failed to open file "c:\windows\application data\webroot\spy sweeper\temp\sscs192e73a9-de77-11da-8248-444553540000.tmp". The process cannot access the file because
    it is being used by another process
    11:10: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcsys.dll". The process cannot access the file because
    it is being used by another process
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:38: Warning: Unhandled Archive Type
    11:41: File Sweep Complete, Elapsed Time: 01:30:06
    11:41: Full Sweep has completed. Elapsed time 01:53:28
    11:41: Traces Found: 306
    11:47: Removal process initiated
    11:47: Quarantining All Traces: sdbot
    11:47: Quarantining All Traces: 123count cookie
    11:47: Quarantining All Traces: 190dotcom cookie
    11:47: Quarantining All Traces: 247realmedia cookie
    11:47: Quarantining All Traces: 2o7.net cookie
    11:47: Quarantining All Traces: a cookie
    11:47: Quarantining All Traces: about cookie
    11:47: Quarantining All Traces: adbureau cookie
    11:47: Quarantining All Traces: addynamix cookie
    11:47: Quarantining All Traces: ad-flow cookie
    11:47: Quarantining All Traces: adrevolver cookie
    11:47: Quarantining All Traces: adserver cookie
    11:47: Quarantining All Traces: adtech cookie
    11:48: Quarantining All Traces: advertising cookie
    11:48: Quarantining All Traces: adviva cookie
    11:48: Quarantining All Traces: anm.co.uk cookie
    11:48: Quarantining All Traces: apmebf cookie
    11:48: Quarantining All Traces: ask cookie
    11:48: Quarantining All Traces: atlas dmt cookie
    11:48: Quarantining All Traces: atwola cookie
    11:48: Quarantining All Traces: avenuea cookie
    11:48: Quarantining All Traces: banner cookie
    11:48: Quarantining All Traces: belnk cookie
    11:48: Quarantining All Traces: bilbo.counted.com cookie
    11:48: Quarantining All Traces: bizrate cookie
    11:48: Quarantining All Traces: bluestreak cookie
    11:48: Quarantining All Traces: bravenet cookie
    11:48: Quarantining All Traces: bs.serving-sys cookie
    11:48: Quarantining All Traces: burstbeacon cookie
    11:48: Quarantining All Traces: burstnet cookie
    11:48: Quarantining All Traces: casalemedia cookie
    11:48: Quarantining All Traces: centrport net cookie
    11:48: Quarantining All Traces: classmates cookie
    11:48: Quarantining All Traces: clickbank cookie
    11:48: Quarantining All Traces: clicktracks cookie
    11:48: Quarantining All Traces: commission junction cookie
    11:48: Quarantining All Traces: coremetrics cookie
    11:48: Quarantining All Traces: customer cookie
    11:48: Quarantining All Traces: dealtime cookie
    11:48: Quarantining All Traces: did-it cookie
    11:48: Quarantining All Traces: domain sponsor cookie
    11:48: Quarantining All Traces: domainsponsor cookie
    11:48: Quarantining All Traces: exitexchange cookie
    11:48: Quarantining All Traces: falkag cookie
    11:48: Quarantining All Traces: fastclick cookie
    11:48: Quarantining All Traces: focalink cookie
    11:48: Quarantining All Traces: fortunecity cookie
    11:48: Quarantining All Traces: gator cookie
    11:48: Quarantining All Traces: go.com cookie
    11:48: Quarantining All Traces: go2net.com cookie
    11:48: Quarantining All Traces: gostats cookie
    11:48: Quarantining All Traces: gotoast cookie
    11:48: Quarantining All Traces: hitslink cookie
    11:48: Quarantining All Traces: hotlog cookie
    11:48: Quarantining All Traces: humanclick cookie
    11:48: Quarantining All Traces: hyperbanner cookie
    11:48: Quarantining All Traces: hypertracker.com cookie
    11:49: Quarantining All Traces: imgis cookie
    11:49: Quarantining All Traces: internetfuel cookie
    11:49: Quarantining All Traces: maxserving cookie
    11:49: Quarantining All Traces: mediaplex cookie
    11:49: Quarantining All Traces: monstermarketplace cookie
    11:49: Quarantining All Traces: myaffiliateprogram.com cookie
    11:49: Quarantining All Traces: nextag cookie
    11:49: Quarantining All Traces: onestat.com cookie
    11:49: Quarantining All Traces: overture cookie
    11:49: Quarantining All Traces: pointroll cookie
    11:49: Quarantining All Traces: pokerroom cookie
    11:49: Quarantining All Traces: preferences cookie
    11:49: Quarantining All Traces: pricegrabber cookie
    11:49: Quarantining All Traces: pro-market cookie
    11:49: Quarantining All Traces: qksrv cookie
    11:49: Quarantining All Traces: questionmarket cookie
    11:49: Quarantining All Traces: realmedia cookie
    11:49: Quarantining All Traces: realtracker cookie
    11:49: Quarantining All Traces: rightmedia cookie
    11:49: Quarantining All Traces: ru4 cookie
    11:49: Quarantining All Traces: servedby advertising cookie
    11:49: Quarantining All Traces: server.iad.liveperson cookie
    11:49: Quarantining All Traces: serving-sys cookie
    11:49: Quarantining All Traces: servlet cookie
    11:49: Quarantining All Traces: spylog cookie
    11:49: Quarantining All Traces: starware.com cookie
    11:49: Quarantining All Traces: statcounter cookie
    11:49: Quarantining All Traces: tacoda cookie
    11:49: Quarantining All Traces: tickle cookie
    11:49: Quarantining All Traces: toplist cookie
    11:49: Quarantining All Traces: touchclarity cookie
    11:49: Quarantining All Traces: tracking cookie
    11:49: Quarantining All Traces: tradedoubler cookie
    11:49: Quarantining All Traces: trafficmp cookie
    11:49: Quarantining All Traces: tribalfusion cookie
    11:49: Quarantining All Traces: tripod cookie
    11:50: Quarantining All Traces: valuead cookie
    11:50: Quarantining All Traces: weborama cookie
    11:50: Quarantining All Traces: web-stat cookie
    11:50: Quarantining All Traces: webtrendslive cookie
    11:50: Quarantining All Traces: x10 cookie
    11:50: Quarantining All Traces: xiti cookie
    11:50: Quarantining All Traces: xzoomy cookie
    11:50: Quarantining All Traces: yadro cookie
    11:50: Quarantining All Traces: yieldmanager cookie
    11:50: Quarantining All Traces: zedo cookie
    11:50: Removal process completed. Elapsed time 00:02:46
    ********
    09:43: | Start of Session, 08 May 2006 |
    09:43: Spy Sweeper started
    09:45: Your spyware definitions have been updated.
    09:47: | End of Session, 08 May 2006
     
  13. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    HJT Log
    Logfile of HijackThis v1.99.1
    Scan saved at 12:13:42, on 08/05/06
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\ALUSCHEDULERSVC.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
    C:\WINDOWS\SYSTEM\ATICWD32.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\E_S10IC2.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\ATITASK.EXE
    C:\WINDOWS\RunDLL.exe
    C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
    C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\WRSSSDK.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/broadband
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = C:\Program Files\Copernic 2000\Search Bar.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R3 - URLSearchHook: (no name) - {C12B4EC1-1F65-11D3-91CA-00104B9C4765} - C:\Program Files\Copernic 2000\CopernicFind.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalControlWnd
    O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\SYSTEM\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"
    O4 - HKLM\..\Run: [Atikey] Atitask.exe
    O4 - HKLM\..\Run: [autoclk] autoclk.exe
    O4 - HKLM\..\Run: [adiras] adiras.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer
    O4 - HKLM\..\Run: [SpySweeper] "C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE" /startintray
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
    O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\BIN\REGIST~1.EXE
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [ALU Scheduler Service] C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
    O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /background
    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: Open Frame in &New Window - C:\WINDOWS\WEB\frm2new.htm
    O8 - Extra context menu item: &Highlight - C:\WINDOWS\WEB\highlight.htm
    O8 - Extra context menu item: &Web Search - C:\WINDOWS\WEB\selsearch.htm
    O8 - Extra context menu item: &Links List - C:\WINDOWS\WEB\urllist.htm
    O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
    O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
    O8 - Extra context menu item: I&mages List - C:\WINDOWS\Web\imglist.htm
    O8 - Extra context menu item: Search Using Copernic - file://C:\Program Files\Copernic 2000\Search Extension.htm
    O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra 'Tools' menuitem: Launch Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000\Copernic.exe
    O9 - Extra button: Translate - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
    O9 - Extra 'Tools' menuitem: &Translate Using Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000\Translate.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O15 - Trusted Zone: www.sulc.ac.uk
    O15 - Trusted Zone: http://www.learndirect.co.uk
    O15 - Trusted Zone: www.courses.learndirect.co.uk
    O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} (Macromedia Authorware Web Player Control) - http://courses.learndirect.co.uk/pr...2000_hybrid/module06/aware_player/awswaxf.cab
     
  14. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    You should be clean now and if you are getting those messages I would have to say they are false positives
     
  15. PAT W

    PAT W Thread Starter

    Joined:
    Jun 9, 2002
    Messages:
    118
    Many thanks for all your help !
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/465218