My MSN problem is sloved and I managed to delete that file..but anyway...
I guess the scan didnt work too well in Safe Mode too...
********
3:35 PM: | Start of Session, Wednesday, April 26, 2006 |
3:35 PM: Spy Sweeper started
3:35 PM: Sweep initiated using definitions version 665
3:35 PM: Starting Memory Sweep
3:36 PM: Memory Sweep Complete, Elapsed Time: 00:01:24
3:36 PM: Starting Registry Sweep
3:37 PM: Found Adware: whenu savenow
3:37 PM: HKLM\software\microsoft\windows\currentversion\run\ || vvsn (ID = 140442)
3:37 PM: Registry Sweep Complete, Elapsed Time:00:00:09
3:37 PM: Starting Cookie Sweep
3:37 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
3:37 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
3:37 PM: Starting File Sweep
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs47fc1583-a740-4daa-99eb-f0863cd7a5ae.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs918996a2-3a77-48e1-9d38-6bb1a2820338.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs0f185535-9d80-4ac3-9d0b-d13a15d0a3f3.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs2ab26d04-9d68-46b5-805e-188d48c2e5a7.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs1ffa15e6-72de-4c56-92cb-12486486e40c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs863d3316-5181-42c3-b2c1-f4aea06b1e0a.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs6de2863e-2fe4-45d1-bb20-aae1348f7f6a.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsae4cb6f5-a0a7-41d2-b801-3d8fe186c8dd.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse11558f8-ad60-4b4d-9d1d-5e0638965ea0.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs475680f6-39ee-4eec-997d-d672a20f7585.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscscc28cd24-f151-4215-8739-5d5a1c818e1c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs4981d0a4-874e-484e-8e61-f274df19bc24.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs38ec2c97-aa3c-49cf-ad4f-8352e91e9c68.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsf11ad080-f78c-415e-b39e-0780086a6f4a.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs558b9aad-6a51-43d0-8cb0-bb10d94b5c8c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs02731f32-1914-4a11-b984-3da6b35dd964.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsaa9b74a3-5f2e-472d-8755-b06fddcbb115.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs1ca6ec0a-0d76-4c23-a463-1b14945903db.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs9a33a8fc-fd09-43f2-b448-e51e961ad83c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs5a65b400-71c2-44d0-af12-26117915c497.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsf56de701-db9e-4a10-8a5a-65ebbdc83e9e.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs02201196-fd4d-47fa-8e0b-e567b20a26e0.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs5271e573-56e8-4f93-b7f9-e998da9c3dea.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsd0ce2b9d-4361-4858-a6f1-98d06b3514ff.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsbf4502c6-e973-4eb4-b5fa-5dde47f60452.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse124d3b1-f875-453f-8860-3521fd696d07.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsbf5a5851-12b3-44e2-8bdd-796faad72265.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs7b6c0f7a-4a6e-49b7-a15c-8e8b79dba6d9.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse60f03d9-9cd1-4648-a631-f75a53896811.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsd2b822e3-0db9-4b59-9679-acf7a2d0f0a5.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs10ae5b75-7200-4182-ad47-8bbc52d81fcc.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs9b361af2-6bcb-495b-a2bd-6eb284493faf.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs32a035c4-595d-4395-85c7-884bf52917d7.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsdea18cdf-eb10-4a59-ba14-5ff907248adb.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsb4e7c878-173d-4246-b3f7-4eee0795957a.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs42b08102-cdc3-4f16-9397-8483d52022b0.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs7de47163-2e6d-4fa5-9884-7b33a02ff073.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs708f6894-3b2e-44fa-b8da-b9bd1f4b7855.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs77634a4e-7b4b-473d-95d4-daac9bf0e3d1.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs9b77ac44-0719-407d-b4a6-17c282626463.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsabd46ec4-f776-47ba-8c66-9836b365401f.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs6a9f4844-5d68-4a7c-bdbc-2160b30f3942.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs36c97cb6-5be0-42e3-aa22-27bda8591b64.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs90fc8dbd-501f-4a91-a5b6-51e51b5dd161.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs221231a5-e5ee-420d-9814-2773685ee6ca.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs88017735-772e-4f62-ae2d-3aebc758dd8d.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs0e19ef32-bb30-47e4-a3bd-38d600ef5005.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs614b1828-94bb-4ff3-8c61-1f10f676efbf.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs8abf43e1-5460-4689-8a26-0e86a77222ab.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsad0a1b13-ca31-4fcd-bde4-7c4f054411aa.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs74561308-12a8-454f-9c6b-d03518f652af.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs12eb414c-b10b-4ff9-8c35-f386951e7af8.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs7bd92745-91eb-460d-bc02-5f9198e6fdfb.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs4cfd6139-c4df-4520-a228-cdd2ad20f22f.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs751911b9-0b72-4826-90c9-3107ce037c36.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs5ff7c7a2-79bd-4338-98e4-943c59bcaa4c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs87b8814c-3c58-4c6f-8cc9-089276b89303.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse83cdaed-3f62-45fb-89b6-d0054c3f126c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs15f1087e-6a36-4226-9ff8-a92d67ff54a4.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs525b136a-2c61-49d8-82aa-fa78122c7f76.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs53850a43-e92f-4663-8bae-e4b33ea7f0f5.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs9dad1842-0a06-4c12-99f3-4b8633facec7.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsf7605656-a2b0-43e7-9473-a663acc36688.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse44521a6-5f91-43e3-a7ea-bc5f289e957d.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs3181e18d-54c3-41d3-a8f7-a7ecdb74b769.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs61f01f4c-3a65-4052-8772-269ea9092dbc.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse13d6c6a-28b7-4bbf-bba2-fd9cdb37d81c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs3ecd41ad-d0cd-43f0-ba9d-1259ffbf59a5.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs5d57139f-6605-4f94-91fe-c415e28a794b.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs313417d2-2190-4cc6-85aa-20922d106004.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs744ecce4-126b-44f4-9256-8c0b4b1bffcb.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs65663e40-9c89-4b45-b282-9f7e9738e270.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs76df751a-db81-4122-92d8-99af8c4c3b42.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs59b9e2bd-4fc2-4b3c-bd55-4c2124974f18.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs4d8d8d41-0f05-4ad0-9ae9-cfc58cddbae9.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsea24a264-5982-4e3f-9ff1-c8105ccc0bc3.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs2e57c573-812c-4157-a3f8-7716bb90bc7b.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs17262ec8-f354-4f2d-9245-727de46fe8c1.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs13ebc996-6c86-4663-91f3-cd522dc53e88.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs9b13fc6e-1e9e-4d15-8479-523dd396b2e2.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse885c624-4b9c-4d35-a61c-1ab39ceee868.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs196c3184-057f-41ea-a6ab-a13bd154e695.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs5085fbf6-6ef6-4724-a1bf-722f26499614.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs6d200297-6597-41bb-87d0-3d39204789bd.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscscb982155-a5cd-4b1e-bd33-466f46d9eb29.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse19011b3-13c7-4ca5-b610-162dbba94234.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs1481fb8c-ce1f-41c4-89c4-c130e833c7cc.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs3dcb37ff-a7ed-4ba5-96db-8ad6513e1a8d.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs907a63b7-85d2-4876-b454-b765edc9c2e7.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs51b66318-d6a6-431c-9f2c-374f2f752093.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsbc826406-38cb-4d67-9aaf-1cbe7db0fb9c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs84b9b637-62f7-4cf7-9877-3b9f291ecf70.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsa696cf4f-889f-42f2-8a60-a6422becc93c.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs7c7e4dd1-c423-4c72-a787-fe22878d255d.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsee876092-e4fa-4c53-b895-f37dc6f4c1fb.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs4bb7d432-d632-4272-8c6b-a83ec404981f.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsa10fbccf-a026-4568-bcb7-2c2b58779e12.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs1fc66a18-9bb9-4100-b2da-c218e15abeb1.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs6cfc6aa8-d1fc-46b0-ac37-5db9e29c67e3.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs10708234-2c7f-49b2-8a4c-889e705344e0.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs2b7ac909-545b-4685-a370-1aba76107a71.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscse7844e19-6a3f-4525-a5cb-13a1c6cc44b2.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscsb6e09d55-6ad2-4cac-b9e4-aeb3676cb07e.tmp". The process cannot access the file because it is being used by another process
3:39 PM: Warning: Failed to open file "c:\windows\system32\config\systemprofile\application data\webroot\spy sweeper\temp\sscs659137ce-86e6-411f-a99d-f8588f1b6a98.tmp". The process cannot access the file because it is being used by another process
3:41 PM: Warning: Failed to open file "c:\documents and settings\abha\ntuser.dat". The process cannot access the file because it is being used by another process
3:41 PM: Warning: Failed to open file "c:\documents and settings\abha\ntuser.dat.log". The process cannot access the file because it is being used by another process
3:42 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
3:42 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
3:42 PM: vvsninst.exe (ID = 74460)
3:45 PM: c:\program files\vvsn (3 subtraces) (ID = -2147480376)
3:45 PM: vvsn.exe (ID = 188685)
3:45 PM: HKLM\Software\Microsoft\Windows\CurrentVersion\Run || VVSN (ID = 0)
3:49 PM: File Sweep Complete, Elapsed Time: 00:12:36
3:49 PM: Full Sweep has completed. Elapsed time 00:14:23
3:49 PM: Traces Found: 8
********
2:50 PM: | Start of Session, Wednesday, April 26, 2006 |
2:50 PM: Spy Sweeper started
2:50 PM: Sweep initiated using definitions version 665
2:50 PM: Starting Memory Sweep
2:54 PM: Found Adware: whenu savenow
2:54 PM: Detected running threat: C:\Program Files\VVSN\VVSN.exe (ID = 188685)
2:54 PM: HKLM\Software\Microsoft\Windows\CurrentVersion\Run || VVSN (ID = 0)
3:05 PM: Memory Sweep Complete, Elapsed Time: 00:15:15
3:05 PM: Starting Registry Sweep
3:06 PM: HKLM\software\microsoft\windows\currentversion\run\ || vvsn (ID = 140442)
3:06 PM: Found Adware: accoona toolbar
3:06 PM: HKCR\abar.abarband\ (5 subtraces) (ID = 520479)
3:06 PM: HKCR\asearchassist.adefaultsearch\ (5 subtraces) (ID = 520489)
3:06 PM: HKCR\typelib\{21f022c8-c045-4555-8a90-651e6a3dc6c6}\ (9 subtraces) (ID = 520528)
3:06 PM: HKCR\typelib\{ea3956d2-ec38-41ab-b601-47aa281e4952}\ (9 subtraces) (ID = 520538)
3:06 PM: HKLM\software\accoona\ (124 subtraces) (ID = 520615)
3:06 PM: HKLM\software\classes\abar.abarband\ (5 subtraces) (ID = 520739)
3:06 PM: HKLM\software\classes\asearchassist.adefaultsearch\ (5 subtraces) (ID = 520749)
3:06 PM: HKLM\software\classes\asearchassist.adefaultsearch.1\ (3 subtraces) (ID = 520755)
3:07 PM: Found Adware: command
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ (7 subtraces) (ID = 892523)
3:07 PM: Found Adware: dollarrevenue
3:07 PM: HKLM\software\policies\ || {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} (ID = 916803)
3:07 PM: HKCR\abar.abarband.1\ (3 subtraces) (ID = 954980)
3:07 PM: HKCR\asearchassist.adefaultsearch.1\ (3 subtraces) (ID = 954985)
3:07 PM: HKCR\clsid\{f80c1d93-0d22-436e-963e-9d3156997a4e}\ (5 subtraces) (ID = 954998)
3:07 PM: HKLM\software\classes\clsid\{f80c1d93-0d22-436e-963e-9d3156997a4e}\ (5 subtraces) (ID = 955055)
3:07 PM: HKLM\software\classes\typelib\{21f022c8-c045-4555-8a90-651e6a3dc6c6}\ (9 subtraces) (ID = 955497)
3:07 PM: HKLM\software\classes\typelib\{ea3956d2-ec38-41ab-b601-47aa281e4952}\ (9 subtraces) (ID = 955503)
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ || nomodify (ID = 958653)
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ || noremove (ID = 958654)
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ || norepair (ID = 958655)
3:07 PM: HKLM\system\currentcontrolset\services\cmdservice\ (12 subtraces) (ID = 958670)
3:07 PM: HKLM\software\policies\ || {6bf52a52-394a-11d3-b153-00c04f79faa6} (ID = 967836)
3:07 PM: HKLM\system\currentcontrolset\enum\root\legacy_cmdservice\0000\ (6 subtraces) (ID = 1016064)
3:07 PM: HKLM\system\currentcontrolset\enum\root\legacy_cmdservice\ (8 subtraces) (ID = 1016072)
3:07 PM: HKLM\software\policies\ || {645ff040-5081-101b-9f08-00aa002f954e} (ID = 1036890)
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{a394e835-c8d6-4b4b-884b-d2709059f3be}\ (7 subtraces) (ID = 1110756)
3:07 PM: HKLM\software\microsoft\drsmartload2\ (1 subtraces) (ID = 1134137)
3:07 PM: HKLM\software\microsoft\windows\currentversion\uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920}\ || uninstallstring (ID = 1134952)
3:07 PM: Found Adware: maxifiles
3:07 PM: HKCR\xbtb04715.ietoolbar.1\ (3 subtraces) (ID = 1156344)
3:07 PM: HKCR\xbtb04715.ietoolbar\ (5 subtraces) (ID = 1156348)
3:07 PM: HKCR\toolband.xbtb04715.1\ (3 subtraces) (ID = 1156354)
3:07 PM: HKCR\toolband.xbtb04715\ (5 subtraces) (ID = 1156358)
3:07 PM: HKCR\xbtb04715.xbtb04715.1\ (3 subtraces) (ID = 1156364)
3:07 PM: HKCR\xbtb04715.xbtb04715\ (5 subtraces) (ID = 1156368)
3:07 PM: HKCR\typelib\{75e46ee7-404b-48ec-9326-c654f21f65bf}\ (9 subtraces) (ID = 1156391)
3:07 PM: HKLM\software\classes\toolband.xbtb04715\ (5 subtraces) (ID = 1156475)
3:07 PM: HKLM\software\classes\xbtb04715.xbtb04715.1\ (3 subtraces) (ID = 1156481)
3:07 PM: HKLM\software\classes\xbtb04715.xbtb04715\ (5 subtraces) (ID = 1156485)
3:07 PM: HKLM\software\classes\typelib\{75e46ee7-404b-48ec-9326-c654f21f65bf}\ (9 subtraces) (ID = 1156508)
3:07 PM: HKLM\software\classes\xbtb04715.ietoolbar.1\ (3 subtraces) (ID = 1156524)
3:07 PM: HKLM\software\classes\xbtb04715.ietoolbar\ (5 subtraces) (ID = 1156528)
3:07 PM: HKLM\software\classes\toolband.xbtb04715.1\ (3 subtraces) (ID = 1156534)
3:07 PM: HKU\S-1-5-21-1292428093-1614895754-839522115-1003\software\director\ || baseurl (ID = 980277)
3:07 PM: Found Adware: zquest
3:07 PM: HKU\S-1-5-21-1292428093-1614895754-839522115-1003\software\microsoft\internet explorer\desktop\components\0\ || source (ID = 1140816)
3:07 PM: HKU\S-1-5-21-1292428093-1614895754-839522115-1003\software\xbtb04715\ (71 subtraces) (ID = 1156401)
3:07 PM: Registry Sweep Complete, Elapsed Time:00:01:22
3:07 PM: Starting Cookie Sweep
3:07 PM: Found Spy Cookie: webtrendslive cookie
3:07 PM: abha@statse.webtrendslive[1].txt (ID = 3667)
3:07 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
3:07 PM: Starting File Sweep
3:07 PM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
3:07 PM: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
3:07 PM: uninstall_nmon.vbs (ID = 231442)
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
3:10 PM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb2994688-84e0-41c6-ba7b-3c0362cbc614.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0fd7eaef-1814-4a83-a103-30a96d0cc4a2.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs48929315-3d33-440a-8e1e-e4db2ff5591f.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc99d1ee7-7708-4373-be06-aee2708b92a1.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6311cb23-eaea-4858-8230-ecab8ff422b8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3a3d492b-b029-4424-9b53-d09058eb7a9e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd633a9b7-2131-4099-9c48-e9d3cb755399.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs17e5eb1a-dd5a-4b3c-9f8f-3d8d1105f732.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs29e75abe-0f36-4267-ad40-a17a55c7f97e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68cdd601-12bc-41cf-9b92-ff9700befb2b.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6cc6e9f4-b5f1-4cb1-8215-79a7da91ca8a.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3f14c720-ea4a-4b44-b222-c3f5079712f8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07d8a1d6-b091-4e3f-a7db-7555628191d9.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4b9342fb-9ac4-492b-92fc-bc1e1f7ad4f5.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3ad2fb92-e700-414e-9f75-937b5fd23cf1.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2d005330-87af-45df-94a1-bf956d8774f5.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1637183f-9436-43ef-a73b-a064739432ea.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs80f11280-8b89-46ee-bc76-5af6bd0ae631.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs120acdf1-90f2-44da-bcef-d08dd30d057d.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5f819e90-fdeb-43b2-866b-c07eed6115c8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdbe0b9c4-9b0c-4d9a-8bb8-45251ba4ba9e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8fb95ef4-717f-4294-b7bf-56dea93f608c.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs92e1b072-9bf1-4006-a30e-45fb120ed605.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd99be36d-1b0d-4e10-9764-bd97dd1a129a.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs98a40295-c2fb-4d43-87b2-129dc6814c4c.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8164ff3d-087e-4eef-8faa-c3cd76ef46fd.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5e442af0-0ba5-4a7c-a02d-74990b0ad038.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs35f1efd9-f1e4-46c7-8ce4-1c2a2bbd67cb.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb4f9eb97-ac1d-487f-9bd7-4012f4866b41.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs072191c7-ac2c-4148-9bc6-e56787b456d7.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4f9077c8-9cf1-4d15-aa0d-bb2cf240ee44.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3c7fc339-c225-4029-b478-8a5d2c8892d8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7437af62-d453-4e83-acaf-bdca194daffb.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd369ddfa-2921-4322-b07f-ea07b5a3efb3.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf18f3c4d-1993-45fe-8e44-eb235ed7f005.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs01008242-c1d2-4e63-980e-14ee317b3d5a.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs55ac9df9-6f19-44d5-8bf6-00d2e210d07c.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse6efa705-f104-483b-9afa-d5519b467b21.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs06e30e1b-8f23-4f7f-8fc6-1bd63da4b637.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs428da710-8156-4b1e-b663-389aba21e7e1.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs173169c8-ba5d-4cf2-b2c0-e217aa7cceb8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsed0363aa-03fd-407c-837c-9c16472778bc.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs83017bb0-ec50-4ea6-bfde-1e4ae0725989.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa8d39af1-693e-433a-aa6a-e8c14aa4d358.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf2e7b721-4473-42de-b754-05e8c3f5e350.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd506c047-c225-4ffd-b2f7-76b9419ddaa1.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse1647e6d-5e7f-4781-8d1d-a140cbc1ff48.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs22dbf0b6-72b0-4486-a9c7-ace0a016ef3b.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs12ca5fb8-870b-496f-91d0-a175233e1ad6.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs22bda1b0-e261-4d6b-98f8-fcb40dac2b51.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc4c226ca-9f71-4e3d-9182-38f5e84b2a78.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs465efa02-e045-457e-9ad0-139e8a7553b0.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsce414928-67cf-424f-8d4a-d700b6d216f6.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs57d02b25-963f-4bb1-951d-a22742324bfe.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4b8f00fa-e2cb-4ee7-8cca-99ba0809d09c.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs330af820-24c8-463a-a852-e65a52e7f407.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs701d95e5-1d2a-4cea-995a-2db7b0e18abf.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsff1694dd-6614-48e3-a38d-cb24a55a4880.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7f66c018-3ab9-44da-9b2b-42c2ae9a795d.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb1a759fb-f6f6-4325-9c21-912f7c562966.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs128a353d-e1e8-497c-b622-dae68aa8ccbe.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs09330029-262c-41a1-85d5-51ed7aff4546.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2bdb6ea4-4a6d-4623-acaa-f6317edf6fea.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4f8f9156-983b-4b6d-ba9b-7e15b25b2494.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs11534e22-a555-4bfb-8c6f-7ef12ddce207.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbbde4cab-77f3-4b55-889e-32d1d91b63a7.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs67435269-ba42-4d57-aeff-696b937f183d.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3e72fbe7-13d5-4168-a20b-094f9dc4539e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4334e9f1-0c6d-4dcd-a8e9-caf39d38bd9c.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse9c13e61-ba71-4127-8e76-200a5d2b6172.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e1bf8ed-aa3f-4438-be70-48e64cac6f39.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse4f1f170-36cf-4138-b6d8-cd6994de04ce.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs741d01d0-8d1e-46bb-aaa8-06b9bff369a6.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbf033b63-341c-4764-a494-72c09d861178.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs61efd649-2f0c-4c92-af21-c570b6164ef5.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsee50a7e5-cf0b-4d26-b7b4-50293a9ff83e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa70efa00-eeaf-4147-add1-534183e9011b.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs28f88301-82c5-4b34-b6e7-9165b5ec2386.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9ac696ed-006c-4a57-8251-24e0e6f02315.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7270d114-1a83-4c9b-8b3d-e9a38d8132f7.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbba01958-ff09-4161-ab9f-89dcba339fe8.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsccddca39-de1d-4fa2-a7dd-434fb6ef1d77.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf0a52679-2de7-4309-96dc-f2e957e2b8a4.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4954ce7e-4dca-48cb-b7d3-4d5c55ea3178.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb752c0bd-8cb1-4648-8fca-08e56c89e6ae.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6c0cf334-b896-472e-a251-b6e70409a201.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8f6b1329-47d5-4218-a6e0-caafd91e5451.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs551017c5-885c-4adf-8fea-f5854d6f63e7.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsffe878f2-f907-47a6-86a6-b950ed53bc06.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs176abc64-ed19-4f3b-a32d-ac73f11b18e6.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse410e22c-1901-4a6a-be07-72ebb1040996.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs045527c2-36e0-4e13-94d5-02db5bd7ec3f.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs73aec1d9-0863-4a7c-a5e3-dbe773066993.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs95a5e88a-2524-450d-8acd-2ad077d81d13.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs65697220-65f5-4a8f-938a-c9279634781e.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs68636b52-567e-42be-82fc-1105b9f348f3.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsee9b91b7-194e-48ac-981a-867f2bd5d32d.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs72ef1e3e-60e9-40d6-96f0-d070044d57f2.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9185bddc-2b8d-483b-a61f-c114909b63f0.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs451e0f6c-ed8a-4d76-a00f-6b7817488a93.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs55acca66-d320-418a-8c08-0b1fea36724d.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse5796da9-2e67-43d9-9133-0ef6edd61cad.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8f19f2f3-fe3a-48ce-a03b-b59c86603303.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0aacc31b-6b73-457f-bd68-93ea30b28307.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\ntuser.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\ntuser.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\temp\~dfd183.tmp". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\temp\scan.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
3:15 PM: Warning: Failed to open file "c:\documents and settings\abha\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
3:15 PM: sqlcsk.vbs (ID = 185675)
3:15 PM: Found Trojan Horse: trojan downloader matcash
3:15 PM: mc-110-12-0000137.exe (ID = 246327)
3:15 PM: vvsninst.exe (ID = 74460)
3:16 PM: Warning: Failed to open file "c:\documents and settings\abha\application data\mozilla\firefox\profiles\ystxomhg.default\parent.lock". The process cannot access the file because it is being used by another process
3:20 PM: c:\program files\network monitor (ID = -2147459771)
3:20 PM: c:\program files\vvsn (3 subtraces) (ID = -2147480376)
3:21 PM: vvsn.exe (ID = 188685)
3:21 PM: HKLM\Software\Microsoft\Windows\CurrentVersion\Run || VVSN (ID = 0)
3:26 PM: File Sweep Complete, Elapsed Time: 00:19:33
3:26 PM: Full Sweep has completed. Elapsed time 00:36:32
3:26 PM: Traces Found: 436
3:27 PM: Processing Startup Alerts
3:27 PM: Allowed Startup entry: Autofix.exe
3:27 PM: Removal process initiated
3:28 PM: Quarantining All Traces: trojan downloader matcash
3:28 PM: Quarantining All Traces: dollarrevenue
3:29 PM: Quarantining All Traces: maxifiles
3:29 PM: Quarantining All Traces: zquest
3:29 PM: Quarantining All Traces: accoona toolbar
3:29 PM: Quarantining All Traces: command
3:29 PM: Quarantining All Traces: webtrendslive cookie
3:29 PM: Removal process completed. Elapsed time 00:01:57
3:35 PM: Program Version 4.5.9 (Build 709) Using Spyware Definitions 665
3:35 PM: | End of Session, Wednesday, April 26, 2006 |
********
2:46 PM: | Start of Session, Wednesday, April 26, 2006 |
2:46 PM: Spy Sweeper started
2:50 PM: Your spyware definitions have been updated.
2:50 PM: | End of Session, Wednesday, April 26, 2006 |
And here is my HJT
Logfile of HijackThis v1.99.1
Scan saved at 3:55:38 PM, on 4/26/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\McAfee VirusScan\VsMain.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\VVSN\VVSN.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\WordWeb\wweb32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\McAfee\McAfee VirusScan\AlogServ.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\abha\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
O3 - Toolbar: McAfee VirusScan - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - C:\Program Files\McAfee\McAfee VirusScan\VSCShellExtension.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [IpNetwork] C:\Program Files\Network\ipnetwork.exe
O4 - HKLM\..\Run: [VVSN] C:\Program Files\VVSN\VVSN.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-110-12-0000137.exe
O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: Sebring - c:\WINDOWS\System32\LgNotify.dll
O20 - Winlogon Notify: WB - C:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\fastload.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: ECCEBHCG - {2D3033ED-1E8A-1569-3317-1FDD6211340E} - C:\WINDOWS\System32\Dakgiood.dll (file missing)
O23 - Service: AVSync Manager (AvSynMgr) - Network Associates, Inc. - C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: McAfee Firewall - Unknown owner - C:\Program Files\McAfee\McAfee Firewall\CPD.EXE" /SERVICE (file missing)
O23 - Service: McShield - Unknown owner - C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Unsolved 
Offline 
