Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijackthis Log: Pre-submission


  • This topic is locked This topic is locked
25 replies to this topic

#1 lenh

lenh

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 17 September 2006 - 08:21 PM

I have downloaded HijackThis and run the scan following the instructions in the HJT Tutorial. I ended up with two different scan results. One is a list of 94 items and includes the boxes in front of each entry. It is in a window titled, "HijackThis - v1.99.1". The other lists 138 items and has no boxes. It is in a window titled, "hijackthis.log - Notepad". My inclination was to use the one with the boxes as shown in the Tutorial but looking at the entries in the Forum, most seem to be the list without the boxes. Which should I submit? TIA. lenh

BC AdBot (Login to Remove)

 


#2 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:12:59 PM

Posted 18 September 2006 - 05:30 PM

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. :thumbsup:

You want to post the log that opens up in notepad and contains the processes.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#3 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 18 September 2006 - 06:42 PM

Good afternoon, Sam. Thank you for your response. Be advised that although I 'use' a computer, I am not technically expert in details. Any help you can offer may have to be step-by-step and concise. I have scanned my computer with Earthlink Total Access, AdAwareSE, SpySweeper, Zone Alarm, CW Shredder, TrendMicro, and SpybotSD, Panda Activescan, and Bit Defender. Spybot consistantly finds CoolWWWSearch.Feat2DLL but can not fix it. Panda found Adware/searchaid in C:WINDOWS\system32\sdkwt32.exe but did not disinfect it. Here is my log:

Logfile of HijackThis v1.99.1
Scan saved at 5:29:41 PM, on 9/17/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\toshiba\ivp\ISM\pinger.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\twain_32\SiPix\SCBlink2\Srvany.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Cosmi\StealthSurf Pro\wc\wcservice.exe
C:\WINDOWS\twain_32\SiPix\SCBlink2\USBPNP.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\LTSMMSG.exe
C:\Program Files\WDC\SetIcon.exe
C:\Program Files\NuCam\CamCheck\CamCheck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\TOSHIBA\NetDevSw\NetDevSW.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\wwSecure.exe
C:\WINDOWS\System32\ZoneLabs\vsmon.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\WINDOWS\System32\ZoneLabs\isafe.exe
C:\Program Files\EarthLink TotalAccess\MailClnt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\MyFiles\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.earthlink.net/channel/START
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchcust.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:9095
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {3F914477-1DF9-D259-7203-3EB9F96EABDB} - C:\WINDOWS\mfczm32.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {60D3AAEB-AA39-4AE0-B2F9-E4AF0613A2A3} - C:\PROGRA~1\Cosmi\STEALT~1\pop\ABG_PL~1.DLL
O2 - BHO: Class - {8F3F47CD-F9FD-26AF-ABC0-2AB822B01267} - C:\WINDOWS\ntho.dll (file missing)
O2 - BHO: Class - {C3F84830-18F3-1D3D-C769-86D58A213F17} - C:\WINDOWS\apphd32.dll (file missing)
O2 - BHO: Class - {D476F3A0-4D6E-CAD1-1014-B290A1A15520} - C:\WINDOWS\netqi.dll (file missing)
O2 - BHO: Class - {EADC9B53-D581-7967-D192-3710E66EF037} - C:\WINDOWS\atlms32.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 10
O4 - HKLM\..\Run: [Pinger] "C:\toshiba\ivp\ISM\pinger.exe" /run
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE" /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [sysnz.exe] C:\WINDOWS\sysnz.exe
O4 - HKLM\..\Run: [sdkgh.exe] C:\WINDOWS\sdkgh.exe
O4 - HKLM\..\Run: [ntnq.exe] C:\WINDOWS\ntnq.exe
O4 - HKLM\..\Run: [ieum32.exe] C:\WINDOWS\ieum32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [REGSHAVE] "C:\Program Files\REGSHAVE\REGSHAVE.EXE" /AUTORUN
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [SetIcon] "\Program Files\WDC\SetIcon.exe"
O4 - HKLM\..\Run: [CamCheck] "C:\Program Files\NuCam\CamCheck\CamCheck.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Window Washer] "C:\Program Files\Webroot\Washer\wwDisp.exe"
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - HKCU\..\RunOnce: [CF1DelMsvcr] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\msvcr71.dll
O4 - HKCU\..\RunOnce: [CF1DelEXE] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\Customer-5.2.2.8.exe
O4 - HKCU\..\RunOnce: [CF1DelUnicows] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\unicows.dll
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Display.lnk = C:\Windows\temp\Display.bat
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Network Device Switch.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - C:\Program Files\EarthLink TotalAccess\Accelerator\\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - C:\Program Files\EarthLink TotalAccess\Accelerator\\pac-image.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .avi: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll
O12 - Plugin for .pdf: C:\Program Files\Netscape\Communicator\Program\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O15 - Trusted Zone: http://update.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as...rl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security1.norton.com/SSC/SharedCont...bin/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exe
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/067bff80daa12cbf5b05/netzip/RdxIE2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotion...canner37240.cab
O16 - DPF: {97BB6657-DC7F-4489-9067-51FAB9D8857E} (CWebLaunchCtl Object) - http://earthlink.cf1live.com/earthlink/sta.../weblaunch2.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} - https://webresponse.one.microsoft.com/oas/A...eX/FileXfer.cab
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://D:\trial\intrlnch\IntraLaunch.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedCont...c/bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Blink2PnP - Unknown owner - C:\WINDOWS\twain_32\SiPix\SCBlink2\Srvany.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\System32\ZoneLabs\isafe.exe
O23 - Service: CXPT_Service - Cyberspace Headquarters, LLC - C:\Program Files\Cosmi\StealthSurf Pro\wc\wcservice.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\System32\wwSecure.exe

#4 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:12:59 PM

Posted 18 September 2006 - 08:00 PM

It doesn't look too bad, so we should be able to take of this for you in a few steps. :thumbsup:

Run Hijackthis again, click scan, and Put a checkmark next to each of the lines listed below. Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.

R3 - Default URLSearchHook is missing
O2 - BHO: Class - {3F914477-1DF9-D259-7203-3EB9F96EABDB} - C:\WINDOWS\mfczm32.dll (file missing)
O2 - BHO: Class - {8F3F47CD-F9FD-26AF-ABC0-2AB822B01267} - C:\WINDOWS\ntho.dll (file missing)
O2 - BHO: Class - {C3F84830-18F3-1D3D-C769-86D58A213F17} - C:\WINDOWS\apphd32.dll (file missing)
O2 - BHO: Class - {D476F3A0-4D6E-CAD1-1014-B290A1A15520} - C:\WINDOWS\netqi.dll (file missing)
O2 - BHO: Class - {EADC9B53-D581-7967-D192-3710E66EF037} - C:\WINDOWS\atlms32.dll (file missing)
O4 - HKLM\..\Run: [sysnz.exe] C:\WINDOWS\sysnz.exe
O4 - HKLM\..\Run: [sdkgh.exe] C:\WINDOWS\sdkgh.exe
O4 - HKLM\..\Run: [ntnq.exe] C:\WINDOWS\ntnq.exe
O4 - HKLM\..\Run: [ieum32.exe] C:\WINDOWS\ieum32.exe
O4 - HKCU\..\RunOnce: [CF1DelMsvcr] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\msvcr71.dll
O4 - HKCU\..\RunOnce: [CF1DelEXE] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\Customer-5.2.2.8.exe
O4 - HKCU\..\RunOnce: [CF1DelUnicows] cmd /C del C:\DOCUME~1\Leonard\LOCALS~1\Temp\unicows.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/067bff80daa12cbf5b05/netzip/RdxIE2.cab



===========



Please download the Killbox by Option^Explicit.

Note: In the event you already have Killbox, this is a new version that I need you to download.
  • Save it to your desktop.
  • Please double-click Killbox.exe to run it.
  • Delete Temp Files
    • Click Tools -> Delete Temp Files
    • Place a check mark in all locations that aren't greyed out. By default they should already be checked.
    • Click Delete Selected Temp Files
  • Once that completes, select:
    • Delete on Reboot
    • then Click on the All Files button.
  • Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):



    C:\WINDOWS\sysnz.exe
    C:\WINDOWS\sdkgh.exe
    C:\WINDOWS\ntnq.exe
    C:\WINDOWS\ieum32.exe
    C:WINDOWS\system32\sdkwt32.exe



  • Return to Killbox, go to the File menu, and choose Paste from Clipboard.
  • Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let me know if you receive this message!).

    If your computer does not restart automatically, please restart it manually.

  • After rebooting, open up Killbox again. Click File -> Logs -> Actions History Log
  • Post this log in your next reply.
==============


Open SpySweeper, by double-clicking the icon on your desktop.
  • Click Options on the left side.
  • Click the Sweep tab.
  • Under Items to Sweep make sure the following are checked:
    • Windows registry
    • Memory objects
    • Cookies
    • Compressed Files
    • System Restore Folder
  • Under Other Options make sure the following are checked:
    • Sweep all user accounts
    • Enable Direct Disk Sweeping
    • Sweep for rootkits
  • Click the Sweep button on the left side.
  • Click the Start Sweep button.
  • When it's done scanning, make sure everything has a check next to it, then click the Quarantine Selected button.
  • It will quarantine all of the items found.
  • Click View Session Log in the right corner above the box where the items are listed.
  • Click Save to File and save it on your desktop.
  • Exit SpySweeper.
  • Paste the contents of the session log you saved into your next reply (Spy Sweeper Session Log.txt).
  • NOTE: you can get to the log by clicking Options on the left. Then, View Session Log will be listed under Other Options.
Also post a new hijackthis log.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#5 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 19 September 2006 - 12:57 PM

I have gotten down to KillBox and completed all actions up to the red entries that are supposed to be copied to clipboard and pasted into the "Full Path of File to Delete" box. I highlight and Control/C (and/or right click and select copy) and then try to place them in the box with Control/V or File>Paste. Nothing works. I tried to enter them by typing in the addresses but I can only type in one. Clicking 'Enter' does not move curser to next line. Clicking the Delete File button presents window that says I have not selected any file to delete. Would it work to enter them consecutively with a punctuation mark between - like a comma? lenh

#6 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:12:59 PM

Posted 19 September 2006 - 04:12 PM

That may indicate that those files are no longer present, or they possibly have been renamed. Go ahead with the Spysweeper scan and then post the log from it along with a new hijackthis log.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#7 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 19 September 2006 - 06:33 PM

Before I go to Spy Sweeper, what would happen if I typed in one of the red addresses and hit the Delete File button. Would it tell me that there is no such file if it was already deleted? If I did not get such a message, would you recommend inserting each address individually? Or should I just forget it for now and go on to Spy Sweeper? (Sorry I did not get back sooner but I did not get an e-mail alert that you had responded) lenh

#8 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:12:59 PM

Posted 20 September 2006 - 04:44 PM

Yes, you could do that and Killbox would tell you if the file was not present.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#9 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 12:10 PM

This response will be in two or more sections as it exceeds the maximum allowable characters.

In my haste to respond to your first contact, I failed to tell you what some of my problems are - if
that would have helped. My computer (Toshiba Satellite 1805-S204, 1GHz Celeron, 20 GB HD, 512 MB RAM) has become very slow; I can access most, but not all, web sites; a couple load one or two lines then stop loading; I have gotten a few windows asking for my password which I have ignored without consequence; at least one web site loads all the way to “1 item remaining....” and stops which prevents me from printing the web page or anything on it; sometimes, when typing, the letters enter very slowly.

I hope I have not confused things but out of curiosity, while waiting, I copied the red
C:\WINDOWS\System32\sdkwt32.exe to the ‘Full Path of File to Delete’ box in Killbox since that
was the location of the Adware found by Panda. The rest of the process went as shown in your
instructions. I scanned with Panda again and the same Adware: adware/searchaid at
C:WINDOWS\system32\sdkwt32.exe was detected showing that Killbox did not delete it. Again,
it was not disinfected (they will disinfect it for a 6 month subscription for $12.95). Following are
the logs that you requested:

Killbox log:

Pocket Killbox version 2.0.0.881
Running on Windows XP as Leonard(Administrator)
was started @ Tuesday, September 19, 2006, 10:32 AM

# 1 [Delete on Reboot]
Path = C:WINDOWS\system32\sdkwt32.exe


PendingFileRenameOperations Registry Data has been Removed by External Process! @ 6:47:16
PM
Killbox Closed(Exit) @ 6:48:15 PM
__________________________________________________

Pocket Killbox version 2.0.0.881
Running on Windows XP as Leonard(Administrator)
was started @ Tuesday, September 19, 2006, 8:07 PM


Spy Sweeper log: I SEE A LOT OF ‘WARNINGS’. ????

9:22 PM: Your definitions are up to date.
9:22 PM: Automated check for program update in progress.
9:21 PM: None
9:21 PM: Traces Found: 0
9:21 PM: Full Sweep has completed. Elapsed time 01:06:20
9:21 PM: File Sweep Complete, Elapsed Time: 00:55:11
9:12 PM: Warning: Failed to access drive E:
8:26 PM: Starting File Sweep
8:26 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
8:26 PM: Starting Cookie Sweep
8:26 PM: Registry Sweep Complete, Elapsed Time:00:01:01
8:25 PM: Starting Registry Sweep
8:25 PM: Memory Sweep Complete, Elapsed Time: 00:09:59
8:15 PM: Starting Memory Sweep
8:15 PM: Sweep initiated using definitions version 761
8:15 PM: Spy Sweeper 5.0.7.1608 started
8:15 PM: | Start of Session, Tuesday, September 19, 2006 |
********
8:15 PM: | End of Session, Tuesday, September 19, 2006 |
6:58 PM: Warning: A required privilege is not held by the client
6:58 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
6:58 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:57 PM: Shield States
6:57 PM: Spyware Definitions: 761
6:56 PM: Spy Sweeper 5.0.7.1608 started
4:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:12 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:12 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:12 AM: Shield States
9:12 AM: Spyware Definitions: 761
9:10 AM: Spy Sweeper 5.0.7.1608 started
9:18 PM: Your definitions are up to date.
9:18 PM: Automated check for program update in progress.
9:49 AM: IE Tracking Cookies Shield: Removed bravenet cookie
9:36 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:36 AM: Shield States
9:35 AM: Spyware Definitions: 761
9:34 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:50 PM: Tamper Detection
9:17 PM: Your definitions are up to date.
9:17 PM: Automated check for program update in progress.
4:20 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:20 PM: Shield States
4:20 PM: Spyware Definitions: 761
4:18 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
9:04 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:04 AM: Shield States
9:03 AM: Spyware Definitions: 761
9:02 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:42 PM: Tamper Detection
9:57 PM: Warning: A required privilege is not held by the client
9:55 PM: IE Tracking Cookies Shield: Removed tacoda cookie
9:16 PM: Your definitions are up to date.
9:16 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:06 PM: Tamper Detection
10:55 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:55 AM: Shield States
10:55 AM: Spyware Definitions: 761
10:53 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:27 PM: Tamper Detection
9:15 PM: Your definitions are up to date.
9:15 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
11:01 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
11:01 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
11:01 AM: Shield States
11:00 AM: Spyware Definitions: 761
10:59 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:54 PM: Tamper Detection
9:16 PM: Your spyware definitions have been updated.
9:14 PM: Warning: A required privilege is not held by the client
9:14 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
9:14 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:13 PM: Shield States
9:13 PM: Spyware Definitions: 758
9:10 PM: Spy Sweeper 5.0.7.1608 started
10:00 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
9:29 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
7:29 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
7:08 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
5:34 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
Operation: File Access
Target:
Source: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
4:27 PM: Tamper Detection
3:58 PM: Your definitions are up to date.
3:58 PM: Automated check for program update in progress.
2:45 PM: BHO Shield: found: -- BHO installation denied at user request
2:45 PM: BHO Shield: found: -- BHO installation denied at user request
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:50 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:50 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:49 AM: Shield States
10:49 AM: Spyware Definitions: 758
10:48 AM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:45 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:44 AM: Shield States
8:44 AM: Spyware Definitions: 758
8:43 AM: Spy Sweeper 5.0.7.1608 started
6:07 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
5:06 PM: Access to Hosts file blocked for C:\PROGRAM FILES\INTERNET
EXPLORER\IEXPLORE.EXE
4:00 PM: Your spyware definitions have been updated.
3:58 PM: Automated check for program update in progress.
3:54 PM: Automated check for program update in progress.
3:53 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
2:10 PM: Tamper Detection
2:04 PM: IE Favorites Shield: Entry Allowed: http://www.bitdefender.com/
2:03 PM: IE Favorites Shield: Entry Allowed: http://www.bitdefender.com/
2:01 PM: IE Favorites Shield: Entry Allowed: http://www.bitdefender.com/
2:01 PM: IE Favorites Shield: Entry Allowed: http://www.pandasoftware.com/
1:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
1:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
1:16 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
1:16 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:15 PM: Shield States
1:15 PM: Spyware Definitions: 757
1:14 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
12:05 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
12:05 PM: Shield States
12:04 PM: Spyware Definitions: 757
12:03 PM: Spy Sweeper 5.0.7.1608 started
9:54 PM: IE Tracking Cookies Shield: Removed tacoda cookie
9:54 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
3:54 PM: Your spyware definitions have been updated.
3:53 PM: Warning: A required privilege is not held by the client
3:52 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:52 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:52 PM: Shield States
3:51 PM: Spyware Definitions: 756
3:50 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:30 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
3:31 PM: Tamper Detection
2:22 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:21 PM: Shield States
2:21 PM: Spyware Definitions: 756
2:20 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
11:32 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
10:01 PM: Tamper Detection
8:34 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
8:34 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:33 PM: Shield States
8:33 PM: Spyware Definitions: 756
8:32 PM: Spy Sweeper 5.0.7.1608 started
8:02 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
8:02 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:02 PM: Shield States
8:01 PM: Spyware Definitions: 756
8:00 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
7:31 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:19 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
7:19 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:19 PM: Shield States
7:19 PM: Spyware Definitions: 756
7:18 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:02 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:01 PM: Shield States
7:01 PM: Spyware Definitions: 756
6:59 PM: Spy Sweeper 5.0.7.1608 started
6:04 PM: Program Version 5.0.7.1608 Using Spyware Definitions 756
6:02 PM: Traces Found: 0
6:02 PM: Full Sweep has completed. Elapsed time 01:07:44
6:02 PM: File Sweep Complete, Elapsed Time: 01:01:57
6:02 PM: Warning: Failed to access drive E:
5:00 PM: Starting File Sweep
5:00 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
5:00 PM: Starting Cookie Sweep
5:00 PM: Registry Sweep Complete, Elapsed Time:00:00:55
4:59 PM: Starting Registry Sweep
4:59 PM: Memory Sweep Complete, Elapsed Time: 00:02:16
4:57 PM: Starting Memory Sweep
4:54 PM: Sweep initiated using definitions version 756
4:54 PM: Spy Sweeper 5.0.7.1608 started
4:54 PM: | Start of Session, Friday, September 08, 2006 |
********
4:54 PM: | End of Session, Friday, September 08, 2006 |
4:54 PM: Program Version 5.0.7.1608 Using Spyware Definitions 756
3:18 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:18 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
3:17 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:17 PM: Shield States
3:17 PM: Spyware Definitions: 756
3:16 PM: Spy Sweeper 5.0.7.1608 started
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:10 PM: Tamper Detection
11:29 AM: Your spyware definitions have been updated.
11:27 AM: Warning: A required privilege is not held by the client
11:27 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
11:27 AM: Warning: A required privilege is not held by the client
11:27 AM: Warning: The handle is invalid
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
11:26 AM: Shield States
11:26 AM: Spyware Definitions: 755
11:25 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:57 PM: Tamper Detection
9:54 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:54 PM: Shield States
9:54 PM: Spyware Definitions: 755
9:52 PM: Spy Sweeper 5.0.7.1608 started
9:11 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:10 PM: Shield States
9:10 PM: Spyware Definitions: 755
9:09 PM: Spy Sweeper 5.0.7.1608 started
10:21 AM: Warning: A required privilege is not held by the client
9:25 AM: Your spyware definitions have been updated.
9:23 AM: Warning: A required privilege is not held by the client
9:23 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
9:22 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:22 AM: Shield States
9:22 AM: Spyware Definitions: 754
9:20 AM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
2:01 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
2:01 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:01 PM: Shield States
2:00 PM: Spyware Definitions: 754
1:58 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:48 PM: Tamper Detection
4:56 PM: Your spyware definitions have been updated.
4:54 PM: Warning: The handle is invalid
4:54 PM: Automated check for program update in progress.
4:54 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:53 PM: Shield States
4:53 PM: Spyware Definitions: 753
4:52 PM: Spy Sweeper 5.0.7.1608 started
1:25 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
1:15 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
9:09 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:41 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
7:41 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:41 AM: Shield States
7:40 AM: Spyware Definitions: 753
7:39 AM: Spy Sweeper 5.0.7.1608 started
10:22 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:21 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
10:21 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:21 PM: Shield States
10:20 PM: Spyware Definitions: 753
10:19 PM: Spy Sweeper 5.0.7.1608 started
4:26 PM: Your definitions are up to date.
4:26 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
1:51 PM: Tamper Detection
10:56 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
10:56 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:56 AM: Shield States
10:56 AM: Spyware Definitions: 753
10:54 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
11:07 PM: Tamper Detection
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:55 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
10:14 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
10:14 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
10:13 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:13 PM: Shield States
10:13 PM: Spyware Definitions: 753
10:11 PM: Spy Sweeper 5.0.7.1608 started
6:26 PM: Traces Found: 0
6:26 PM: Full Sweep has completed. Elapsed time 01:05:16
6:26 PM: File Sweep Complete, Elapsed Time: 00:59:43
5:26 PM: Starting File Sweep
5:26 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
5:26 PM: Starting Cookie Sweep
5:26 PM: Registry Sweep Complete, Elapsed Time:00:00:54
5:25 PM: Starting Registry Sweep
5:25 PM: Memory Sweep Complete, Elapsed Time: 00:02:12
5:23 PM: Starting Memory Sweep
5:20 PM: Sweep initiated using definitions version 753
5:20 PM: Spy Sweeper 5.0.7.1608 started
5:20 PM: | Start of Session, Sunday, September 03, 2006 |
********
5:20 PM: | End of Session, Sunday, September 03, 2006 |
5:20 PM: Program Version 5.0.7.1608 Using Spyware Definitions 753
4:25 PM: Your definitions are up to date.
4:22 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
4:21 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:21 PM: Shield States
4:21 PM: Spyware Definitions: 753
4:19 PM: Spy Sweeper 5.0.7.1608 started
4:13 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:08 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
4:04 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
4:04 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:03 PM: Shield States
4:03 PM: Spyware Definitions: 753
4:02 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
3:56 PM: Tamper Detection
3:00 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
2:59 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:59 PM: Shield States
2:59 PM: Spyware Definitions: 753
2:57 PM: Spy Sweeper 5.0.7.1608 started
1:42 PM: Warning: A required privilege is not held by the client
10:44 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
10:44 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:44 AM: Shield States
10:43 AM: Spyware Definitions: 753
10:41 AM: Spy Sweeper 5.0.7.1608 started
10:10 AM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:50 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
7:50 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:50 AM: Shield States
7:50 AM: Spyware Definitions: 753
7:47 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:02 PM: Tamper Detection
9:45 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
9:45 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
9:33 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
9:31 PM: IE Tracking Cookies Shield: Removed 360i cookie
9:29 PM: IE Tracking Cookies Shield: Removed pointroll cookie
9:25 PM: IE Tracking Cookies Shield: Removed falkag cookie
9:25 PM: IE Tracking Cookies Shield: Removed 360i cookie
9:24 PM: IE Tracking Cookies Shield: Removed 360i cookie
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
2:29 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
2:29 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:29 PM: Shield States
2:29 PM: Spyware Definitions: 753
2:27 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
2:24 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
2:23 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\IMAPIROX.EXE
2:20 PM: Tamper Detection
1:59 PM: Warning: Access is denied
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:59 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
1:59 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:58 PM: Shield States
1:58 PM: Spyware Definitions: 753
1:57 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
1:25 PM: Tamper Detection
12:30 PM: IE Tracking Cookies Shield: Removed 360i cookie
12:28 PM: IE Tracking Cookies Shield: Removed 360i cookie
11:56 AM: IE Tracking Cookies Shield: Removed 360i cookie
11:50 AM: IE Tracking Cookies Shield: Removed 360i cookie
11:50 AM: IE Tracking Cookies Shield: Removed 360i cookie
11:49 AM: IE Tracking Cookies Shield: Removed 360i cookie
9:22 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:20 AM: Shield States
9:20 AM: Spyware Definitions: 753
9:19 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:36 PM: Tamper Detection
9:22 PM: IE Tracking Cookies Shield: Removed tacoda cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: Warning: Unable to remove cookie c:\documents and
settings\leonard\application
data\earthlink\6.0\thehartnetts@earthlink.net\cookies\leonard@go[1].txt
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:22 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:15 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:15 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:15 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:12 PM: Your spyware definitions have been updated.
9:10 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:10 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:10 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:10 PM: Shield States
9:09 PM: Spyware Definitions: 752
9:08 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:25 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:25 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:04 PM: Tamper Detection
7:42 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:42 PM: IE Tracking Cookies Shield: Removed tacoda cookie
7:42 PM: Warning: Unable to remove cookie c:\documents and
settings\leonard\application
data\earthlink\6.0\thehartnetts@earthlink.net\cookies\leonard@go[1].txt
7:42 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:42 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:41 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:41 PM: IE Tracking Cookies Shield: Removed tacoda cookie
7:41 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:41 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:41 PM: IE Tracking Cookies Shield: Removed go.com cookie
7:41 PM: IE Tracking Cookies Shield: Removed go.com cookie
4:53 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
4:53 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
4:52 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:52 PM: Shield States
4:52 PM: Spyware Definitions: 752
4:51 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:43 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:42 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
3:42 PM: Warning: The handle is invalid
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:42 PM: Shield States
3:41 PM: Spyware Definitions: 752
3:40 PM: Spy Sweeper 5.0.7.1608 started
9:10 AM: Warning: A required privilege is not held by the client
9:09 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:08 AM: Shield States
9:08 AM: Spyware Definitions: 752
9:06 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:57 PM: Tamper Detection
10:22 PM: IE Tracking Cookies Shield: Removed tacoda cookie
10:21 PM: IE Tracking Cookies Shield: Removed tacoda cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed tacoda cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:21 PM: IE Tracking Cookies Shield: Removed tacoda cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed tacoda cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:20 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:18 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:13 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:13 PM: IE Tracking Cookies Shield: Removed go.com cookie
10:13 PM: IE Tracking Cookies Shield: Removed go.com cookie
9:30 PM: Warning: A required privilege is not held by the client
9:29 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:29 PM: Shield States
9:29 PM: Spyware Definitions: 752
9:27 PM: Spy Sweeper 5.0.7.1608 started
8:26 PM: Your definitions are up to date.
8:26 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
8:10 PM: Warning: A required privilege is not held by the client
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:09 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:09 PM: Shield States
8:09 PM: Spyware Definitions: 752
8:08 PM: Spy Sweeper 5.0.7.1608 started
6:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:19 PM: IE Tracking Cookies Shield: Removed tacoda cookie
6:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:19 PM: Warning: Unable to remove cookie c:\documents and
settings\leonard\application
data\earthlink\6.0\thehartnetts@earthlink.net\cookies\leonard@go[1].txt
6:19 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:16 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:16 PM: IE Tracking Cookies Shield: Removed tacoda cookie
6:16 PM: Warning: Unable to remove cookie c:\documents and
settings\leonard\application
data\earthlink\6.0\thehartnetts@earthlink.net\cookies\leonard@go[1].txt
6:16 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:16 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:15 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:15 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:11 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:11 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:11 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:10 PM: IE Tracking Cookies Shield: Removed go.com cookie
6:10 PM: IE Tracking Cookies Shield: Removed go.com cookie
4:00 PM: IE Tracking Cookies Shield: Removed tacoda cookie
4:00 PM: IE Tracking Cookies Shield: Removed tacoda cookie
4:00 PM: IE Tracking Cookies Shield: Removed go.com cookie
4:00 PM: IE Tracking Cookies Shield: Removed tacoda cookie
4:00 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed tacoda cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:59 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:58 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:58 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:58 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:57 PM: IE Tracking Cookies Shield: Removed tacoda cookie
3:57 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:57 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:56 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:54 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:54 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:54 PM: IE Tracking Cookies Shield: Removed go.com cookie
3:54 PM: IE Tracking Cookies Shield: Removed go.com cookie
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
3:24 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
3:23 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:23 PM: Shield States
3:23 PM: Spyware Definitions: 752
3:21 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
2:49 PM: Warning: A required privilege is not held by the client
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
2:49 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:49 PM: Shield States
2:49 PM: Spyware Definitions: 752
2:47 PM: Spy Sweeper 5.0.7.1608 started
2:39 PM: IE Tracking Cookies Shield: Removed go.com cookie
2:39 PM: IE Tracking Cookies Shield: Removed go.com cookie
2:39 PM: IE Tracking Cookies Shield: Removed go.com cookie
2:38 PM: IE Tracking Cookies Shield: Removed go.com cookie
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
2:05 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
2:05 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:05 PM: Shield States
2:04 PM: Spyware Definitions: 752
2:02 PM: Spy Sweeper 5.0.7.1608 started
11:45 AM: IE Tracking Cookies Shield: Removed tacoda cookie
11:45 AM: IE Tracking Cookies Shield: Removed go.com cookie
11:45 AM: IE Tracking Cookies Shield: Removed go.com cookie
11:45 AM: IE Tracking Cookies Shield: Removed go.com cookie
11:45 AM: IE Tracking Cookies Shield: Removed go.com cookie
11:45 AM: IE Tracking Cookies Shield: Removed go.com cookie
11:24 AM: IE Tracking Cookies Shield:

#10 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 12:13 PM

8:54 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:54 AM: Warning: The handle is invalid
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
8:53 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:53 AM: Shield States
8:53 AM: Spyware Definitions: 747
8:51 AM: Spy Sweeper 5.0.7.1608 started
8:48 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:47 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:47 PM: Shield States
8:46 PM: Spyware Definitions: 747
8:44 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:35 PM: Tamper Detection
7:44 PM: Your definitions are up to date.
7:44 PM: Automated check for program update in progress.
11:03 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
11:03 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
11:03 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
10:53 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
10:18 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:17 AM: Shield States
10:17 AM: Spyware Definitions: 747
10:16 AM: Spy Sweeper 5.0.7.1608 started
9:11 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
9:11 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:10 AM: Shield States
9:10 AM: Spyware Definitions: 747
9:08 AM: Spy Sweeper 5.0.7.1608 started
7:45 PM: Your spyware definitions have been updated.
7:44 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:40 AM: Shield States
7:38 AM: Spyware Definitions: 746
7:36 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:59 PM: Tamper Detection
9:22 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
9:22 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:22 PM: Shield States
9:22 PM: Spyware Definitions: 746
9:21 PM: Spy Sweeper 5.0.7.1608 started
8:28 PM: Startup Shield: Entry Allowed: Index Washer
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:26 PM: Tamper Detection
7:49 PM: Your spyware definitions have been updated.
7:42 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
8:49 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
8:48 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:48 AM: Shield States
8:48 AM: Spyware Definitions: 745
8:46 AM: Spy Sweeper 5.0.7.1608 started
7:44 PM: Your spyware definitions have been updated.
7:42 PM: Warning: A required privilege is not held by the client
7:42 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:42 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:41 PM: Shield States
7:41 PM: Spyware Definitions: 744
7:40 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:07 PM: Shield States
3:06 PM: Spyware Definitions: 744
3:05 PM: Spy Sweeper 5.0.7.1608 started
3:00 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
2:40 PM: Warning: A required privilege is not held by the client
2:40 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:39 PM: Shield States
2:39 PM: Spyware Definitions: 744
2:38 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
1:56 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
1:56 PM: Warning: A required privilege is not held by the client
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:55 PM: Shield States
1:55 PM: Spyware Definitions: 744
1:53 PM: Spy Sweeper 5.0.7.1608 started
1:35 PM: Warning: A required privilege is not held by the client
1:35 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
1:34 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:34 PM: Shield States
1:33 PM: Spyware Definitions: 744
1:32 PM: Spy Sweeper 5.0.7.1608 started
7:55 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:55 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:54 AM: Shield States
7:54 AM: Spyware Definitions: 744
7:53 AM: Spy Sweeper 5.0.7.1608 started
9:54 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
9:54 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:53 PM: Shield States
9:53 PM: Spyware Definitions: 744
9:52 PM: Spy Sweeper 5.0.7.1608 started
9:25 PM: Startup Shield: Entry Allowed: Index Washer
7:09 PM: Your definitions are up to date.
7:09 PM: Automated check for program update in progress.
9:57 AM: None
9:57 AM: Traces Found: 0
9:57 AM: Full Sweep has completed. Elapsed time 00:38:48
9:57 AM: File Sweep Complete, Elapsed Time: 00:27:45
9:56 AM: Warning: Failed to access drive E:
9:29 AM: Starting File Sweep
9:29 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
9:29 AM: Starting Cookie Sweep
9:29 AM: Registry Sweep Complete, Elapsed Time:00:01:05
9:28 AM: Starting Registry Sweep
9:28 AM: Memory Sweep Complete, Elapsed Time: 00:09:49
9:18 AM: Starting Memory Sweep
9:18 AM: Sweep initiated using definitions version 744
9:18 AM: Spy Sweeper 5.0.7.1608 started
9:18 AM: | Start of Session, Sunday, August 20, 2006 |
********
9:18 AM: | End of Session, Sunday, August 20, 2006 |
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:15 AM: Shield States
9:15 AM: Spyware Definitions: 744
9:15 AM: Spy Sweeper 5.0.7.1608 started
7:46 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:46 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:45 AM: Shield States
7:45 AM: Spyware Definitions: 744
7:44 AM: Spy Sweeper 5.0.7.1608 started
9:18 PM: None
9:18 PM: Traces Found: 0
9:18 PM: Full Sweep has completed. Elapsed time 00:38:30
9:18 PM: File Sweep Complete, Elapsed Time: 00:27:53
9:18 PM: Warning: Failed to access drive E:
8:50 PM: Starting File Sweep
8:50 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
8:50 PM: Starting Cookie Sweep
8:50 PM: Registry Sweep Complete, Elapsed Time:00:01:02
8:49 PM: Starting Registry Sweep
8:49 PM: Memory Sweep Complete, Elapsed Time: 00:09:28
8:39 PM: Starting Memory Sweep
8:39 PM: Sweep initiated using definitions version 744
8:39 PM: Spy Sweeper 5.0.7.1608 started
8:39 PM: | Start of Session, Saturday, August 19, 2006 |
********
8:39 PM: | End of Session, Saturday, August 19, 2006 |
8:36 PM: BHO Shield: found: ssv.dll-- BHO installation denied at user request
8:35 PM: BHO Shield: found: ssv.dll-- BHO installation denied at user request
7:08 PM: Warning: A required privilege is not held by the client
7:08 PM: Your definitions are up to date.
7:08 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:08 PM: Shield States
7:08 PM: Spyware Definitions: 744
7:06 PM: Spy Sweeper 5.0.7.1608 started
7:31 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:31 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:31 PM: Shield States
7:30 PM: Spyware Definitions: 744
7:29 PM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
6:31 PM: Tamper Detection
6:18 PM: Your spyware definitions have been updated.
6:16 PM: Automated check for program update in progress.
6:18 PM: Your spyware definitions have been updated.
6:16 PM: Automated check for program update in progress.
6:03 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
4:33 PM: Tamper Detection
3:13 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:13 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:12 PM: Shield States
3:12 PM: Spyware Definitions: 741
3:11 PM: Spy Sweeper 5.0.7.1608 started
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
12:41 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
11:20 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
11:20 AM: Shield States
11:18 AM: Spyware Definitions: 741
11:17 AM: Spy Sweeper 5.0.7.1608 started
10:05 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
9:58 PM: IE Tracking Cookies Shield: Removed teenax cookie
9:52 PM: IE Tracking Cookies Shield: Removed teenax cookie
9:39 PM: IE Tracking Cookies Shield: Removed teenax cookie
9:35 PM: IE Tracking Cookies Shield: Removed a cookie
9:31 PM: IE Tracking Cookies Shield: Removed teenax cookie
6:02 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
6:02 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
10:59 AM: Tamper Detection
9:22 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:21 AM: Shield States
9:21 AM: Spyware Definitions: 741
9:19 AM: Spy Sweeper 5.0.7.1608 started
6:59 PM: Common Ad Sites Shield: On
6:58 PM: IE Tracking Cookies Shield: On
6:56 PM: Removal process completed. Elapsed time 00:00:29
6:56 PM: Quarantining All Traces: bannerspace cookie
6:55 PM: Removal process initiated
6:48 PM: Traces Found: 1
6:48 PM: Full Sweep has completed. Elapsed time 00:44:27
6:48 PM: File Sweep Complete, Elapsed Time: 00:29:52
6:48 PM: Warning: Failed to access drive E:
6:18 PM: Starting File Sweep
6:18 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
6:18 PM: c:\documents and settings\leonard\application
data\earthlink\6.0\thehartnetts@earthlink.net\cookies\leonard@bannerspace[2].t
xt (ID = 2284)
6:18 PM: Found Spy Cookie: bannerspace cookie
6:18 PM: Starting Cookie Sweep
6:18 PM: Registry Sweep Complete, Elapsed Time:00:01:02
6:17 PM: Starting Registry Sweep
6:17 PM: Memory Sweep Complete, Elapsed Time: 00:13:16
6:04 PM: Starting Memory Sweep
6:03 PM: Sweep initiated using definitions version 741
6:03 PM: Spy Sweeper 5.0.7.1608 started
6:03 PM: | Start of Session, Tuesday, August 15, 2006 |
********
6:03 PM: | End of Session, Tuesday, August 15, 2006 |
6:03 PM: Your spyware definitions have been updated.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
5:58 PM: Shield States
5:58 PM: Spyware Definitions: 740
5:58 PM: Spy Sweeper 5.0.7.1608 started
10:37 AM: Your spyware definitions have been updated.
10:34 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
10:34 AM: Warning: The handle is invalid
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:34 AM: Shield States
10:34 AM: Spyware Definitions: 739
10:32 AM: Spy Sweeper 5.0.7.1608 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:53 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:52 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:55 PM: Tamper Detection
10:28 PM: Your definitions are up to date.
10:28 PM: Automated check for program update in progress.
10:28 PM: Your definitions are up to date.
10:16 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
7:57 PM: Shield States
7:56 PM: Spyware Definitions: 739
7:55 PM: Spy Sweeper 5.0.7.1608 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:32 PM: Shield States
10:28 PM: Spyware Definitions: 734
10:26 PM: Spy Sweeper 5.0.7.1608 started
10:09 PM: Your definitions are up to date.
10:09 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
6:03 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
6:03 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:03 PM: Shield States
6:03 PM: Spyware Definitions: 739
6:00 PM: Spy Sweeper 5.0.5.1286 started
4:00 PM: Traces Found: 0
4:00 PM: Full Sweep has completed. Elapsed time 00:47:39
4:00 PM: Warning: Failed to access drive E:
4:00 PM: File Sweep Complete, Elapsed Time: 00:44:05
3:16 PM: Starting File Sweep
3:16 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
3:16 PM: Starting Cookie Sweep
3:16 PM: Registry Sweep Complete, Elapsed Time:00:00:52
3:15 PM: Starting Registry Sweep
3:15 PM: Memory Sweep Complete, Elapsed Time: 00:02:08
3:13 PM: Starting Memory Sweep
3:13 PM: Sweep initiated using definitions version 739
3:13 PM: Spy Sweeper 5.0.5.1286 started
3:13 PM: | Start of Session, Saturday, August 12, 2006 |
********
3:13 PM: | End of Session, Saturday, August 12, 2006 |
3:11 PM: Program Version 5.0.5.1286 Using Spyware Definitions 739
12:44 PM: Startup Shield: Entry Allowed: Index Washer
10:01 PM: Your spyware definitions have been updated.
10:00 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:09 PM: Tamper Detection
10:00 PM: Your spyware definitions have been updated.
9:59 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
1:42 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
1:42 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:41 PM: Shield States
1:41 PM: Spyware Definitions: 737
1:40 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:28 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:28 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:28 AM: Shield States
8:28 AM: Spyware Definitions: 737
8:26 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
7:58 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
6:35 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
6:35 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:35 AM: Shield States
6:34 AM: Spyware Definitions: 737
6:33 AM: Spy Sweeper 5.0.5.1286 started
10:34 PM: Startup Shield: Entry Allowed: Index Washer
10:08 PM: Your spyware definitions have been updated.
9:58 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
5:15 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
5:15 PM: Shield States
5:14 PM: Spyware Definitions: 735
5:13 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:36 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
2:30 PM: Shield States
2:29 PM: Spyware Definitions: 735
2:27 PM: Spy Sweeper 5.0.5.1286 started
9:57 PM: Your definitions are up to date.
9:57 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:02 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:02 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:02 PM: Shield States
9:02 PM: Spyware Definitions: 735
9:01 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:46 PM: Tamper Detection
6:35 PM: IE Tracking Cookies Shield: Removed pointroll cookie
5:32 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
5:31 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
5:31 PM: Warning: A required privilege is not held by the client
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
5:31 PM: Shield States
5:31 PM: Spyware Definitions: 735
5:29 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
5:10 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
12:56 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
12:55 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
12:55 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
12:55 PM: Shield States
12:55 PM: Spyware Definitions: 735
12:54 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
11:12 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
11:12 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
11:12 AM: Shield States
11:12 AM: Spyware Definitions: 735
11:10 AM: Spy Sweeper 5.0.5.1286 started
8:31 AM: None
8:31 AM: Traces Found: 0
8:31 AM: Full Sweep has completed. Elapsed time 00:40:52
8:31 AM: File Sweep Complete, Elapsed Time: 00:28:17
8:03 AM: Starting File Sweep
8:03 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
8:03 AM: Starting Cookie Sweep
8:03 AM: Registry Sweep Complete, Elapsed Time:00:01:07
8:02 AM: Starting Registry Sweep
8:02 AM: Memory Sweep Complete, Elapsed Time: 00:11:19
7:50 AM: Starting Memory Sweep
7:50 AM: Sweep initiated using definitions version 735
7:50 AM: Spy Sweeper 5.0.5.1286 started
7:50 AM: | Start of Session, Tuesday, August 08, 2006 |
********
7:50 AM: | End of Session, Tuesday, August 08, 2006 |
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:27 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
7:26 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:26 AM: Shield States
7:26 AM: Spyware Definitions: 735
7:25 AM: Spy Sweeper 5.0.5.1286 started
10:57 PM: Startup Shield: Entry Allowed: Index Washer
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:55 PM: Shield States
10:55 PM: Spyware Definitions: 735
10:55 PM: Spy Sweeper 5.0.5.1286 started
9:57 PM: Your spyware definitions have been updated.
9:56 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
8:04 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
6:29 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
6:29 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:29 PM: Shield States
6:28 PM: Spyware Definitions: 734
6:26 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:32 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
7:31 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
7:31 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:31 AM: Shield States
7:30 AM: Spyware Definitions: 734
7:29 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
11:01 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
10:45 PM: Warning: A required privilege is not held by the client
10:45 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
10:45 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:45 PM: Shield States
10:45 PM: Spyware Definitions: 734
10:43 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:26 PM: Tamper Detection
9:56 PM: Your definitions are up to date.
9:56 PM: Automated check for program update in progress.
8:22 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
8:22 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
8:21 PM: Warning: A required privilege is not held by the client
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:21 PM: Shield States
8:21 PM: Spyware Definitions: 734
8:19 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
6:58 PM: Warning: A required privilege is not held by the client
6:58 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
6:58 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:57 PM: Shield States
6:57 PM: Spyware Definitions: 734
6:55 PM: Spy Sweeper 5.0.5.1286 started
10:42 PM: Startup Shield: Entry Allowed: Index Washer
10:40 PM: IE Tracking Cookies Shield: Removed teenax cookie
10:37 PM: IE Tracking Cookies Shield: Removed teenax cookie
10:21 PM: IE Tracking Cookies Shield: Removed teenax cookie
10:05 PM: IE Tracking Cookies Shield: Removed teenax cookie
10:01 PM: IE Tracking Cookies Shield: Removed teenax cookie
9:54 PM: Your definitions are up to date.
9:54 PM: Automated check for program update in progress.
10:04 PM: Startup Shield: Entry Allowed: Index Washer
9:58 PM: Your spyware definitions have been updated.
9:54 PM: Automated check for program update in progress.
4:33 PM: Warning: A required privilege is not held by the client
4:32 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:32 PM: Shield States
4:32 PM: Spyware Definitions: 733
4:31 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:01 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
3:12 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
3:12 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:12 PM: Shield States
3:11 PM: Spyware Definitions: 733
3:10 PM: Spy Sweeper 5.0.5.1286 started
2:57 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:17 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
9:02 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:02 AM: Shield States
9:02 AM: Spyware Definitions: 733
9:00 AM: Spy Sweeper 5.0.5.1286 started
10:56 PM: Startup Shield: Entry Allowed: Index Washer
9:54 PM: Your spyware definitions have been updated.
9:53 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:52 PM: Shield States
9:52 PM: Spyware Definitions: 730
9:51 PM: Spy Sweeper 5.0.5.1286 started
4:12 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
4:12 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
4:12 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
4:11 PM: Shield States
4:11 PM: Spyware Definitions: 730
4:10 PM: Spy Sweeper 5.0.5.1286 started
3:38 PM: Spy Sweeper 5.0.5.1286 started
3:00 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
8:59 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
8:58 AM: Warning: A required privilege is not held by the client
8:58 AM: Warning: A required privilege is not held by the client
8:58 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:58 AM: Shield States
8:58 AM: Spyware Definitions: 730
8:55 AM: Spy Sweeper 5.0.5.1286 started
9:43 PM: Your definitions are up to date.
9:43 PM: Automated check for program update in progress.
8:18 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:18 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
8:18 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:17 PM: Shield States
8:17 PM: Spyware Definitions: 730
8:16 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:53 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
3:53 PM: Warning: A required privilege is not held by the client
3:53 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:53 PM: Shield States
3:52 PM: Spyware Definitions: 730
3:51 PM: Spy Sweeper 5.0.5.1286 started
9:37 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
9:36 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:36 AM: Shield States
9:35 AM: Spyware Definitions: 730
9:34 AM: Spy Sweeper 5.0.5.1286 started
9:26 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:09 AM: Tamper Detection
8:17 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:16 AM: Shield States
8:16 AM: Spyware Definitions: 730
8:15 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:39 PM: Tamper Detection
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
10:02 PM: Warning: A required privilege is not held by the client
9:43 PM: Your definitions are up to date.
9:43 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
11:10 AM: Tamper Detection
7:29 AM: Warning: A required privilege is not held by the client
7:29 AM: Warning: A required privilege is not held by the client
7:29 AM: Warning: A required privilege is not held by the client
7:28 AM: Warning: A required privilege is not held by the client
7:28 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
7:27 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
7:27 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:27 AM: Shield States
7:27 AM: Spyware Definitions: 730
7:26 AM: Spy Sweeper 5.0.5.1286 started
10:04 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:04 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:04 PM: Warning: A required privilege is not held by the client
10:03 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:03 PM: Shield States
10:03 PM: Spyware Definitions: 730
10:02 PM: Spy Sweeper 5.0.5.1286 started
9:45 PM: Your spyware definitions have been updated.
9:41 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
9:41 PM: Warning: A required privilege is not held by the client
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:41 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
9:40 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
9:40 PM: Warning: Access is denied
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:40 PM: Shield States
9:40 PM: Spyware Definitions: 729
9:38 PM: Spy Sweeper 5.0.5.1286 started
7:50 PM: Your spyware definitions have been updated.
7:47 PM: Automated check for program update in progress.
7:35 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:35 PM: Warning: A required privilege is not held by the client
7:35 PM: Warning: A required privilege is not held by the client
7:35 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
7:35 PM: Warning: A required privilege is not held by the client
7:34 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:34 PM: Shield States
7:34 PM: Spyware Definitions: 723
7:33 PM: Spy Sweeper 5.0.5.1286 started
7:20 PM: Warning: A required privilege is not held by the client
7:20 PM: Warning: TIdentifyCookieObj.GetCookiePaths(): Unable to map user: S-
1-5-21-1497286466-1809067083-516276246-1006
7:20 PM: Warning: A required privilege is not held by the client
7:20 PM: Warning: A required privilege is not held by the client
7:20 PM: Warning: Access is denied
7:20 PM: Warning: Access is denied
7:20 PM: Warning: Access is denied
7:20 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:19 PM: Warning: A required privilege is not held by the client
7:19 PM: Warning: TIdentifyCookieObj.GetCookiePaths(): Unable to map user: S-
1-5-21-1497286466-1809067083-516276246-1006
7:19 PM: Warning: Access is denied
7:19 PM: Warning: A required privilege is not held by the client
7:19 PM: Warning: A required privilege is not held by the client
7:19 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
7:19 PM: Warning: Access is denied
Hosts File Shield: On
Spy Communication Shield: On
7:19 PM: Warning: A required privilege is not held by the client
7:19 PM: Warning: Access is denied
7:19 PM: W

#11 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 12:15 PM

10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:27 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:27 AM: Shield States
10:27 AM: Spyware Definitions: 723
10:26 AM: Spy Sweeper 5.0.5.1286 started
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
10:52 PM: Tamper Detection
9:22 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:20 PM: Shield States
9:20 PM: Spyware Definitions: 723
9:19 PM: Spy Sweeper 5.0.5.1286 started
8:38 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
8:37 PM: Automated check for program update in progress.
8:34 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
8:32 PM: Warning: A required privilege is not held by the client
8:32 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
8:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 PM: Shield States
8:32 PM: Spyware Definitions: 723
8:31 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:18 PM: Warning: A required privilege is not held by the client
8:18 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:17 PM: Shield States
8:17 PM: Spyware Definitions: 723
8:16 PM: Spy Sweeper 5.0.5.1286 started
10:37 PM: Spy Sweeper 5.0.5.1286 started
10:28 PM: Spy Sweeper 5.0.5.1286 started
3:06 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
3:05 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
1:49 PM: Your definitions are up to date.
1:49 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:29 PM: Tamper Detection
12:45 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
12:44 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
12:43 PM: Shield States
12:43 PM: Spyware Definitions: 723
12:42 PM: Spy Sweeper 5.0.5.1286 started
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
10:47 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:46 AM: Shield States
10:46 AM: Spyware Definitions: 723
10:45 AM: Spy Sweeper 5.0.5.1286 started
10:48 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:48 PM: IE Tracking Cookies Shield: Removed clickzs cookie
10:48 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:47 PM: Shield States
10:47 PM: Spyware Definitions: 723
10:46 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
1:15 PM: Warning: A required privilege is not held by the client
1:15 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:13 PM: Shield States
1:13 PM: Spyware Definitions: 722
1:12 PM: Spy Sweeper 5.0.5.1286 started
8:33 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 AM: Warning: A required privilege is not held by the client
8:33 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:32 AM: Warning: A required privilege is not held by the client
8:32 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 AM: Shield States
8:32 AM: Spyware Definitions: 722
8:31 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
8:03 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:03 AM: Shield States
8:02 AM: Spyware Definitions: 722
8:01 AM: Spy Sweeper 5.0.5.1286 started
9:18 PM: Common Ad Sites Shield: On
8:53 PM: Spy Sweeper 5.0.5.1286 started
8:35 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:15 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
7:15 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:15 PM: Shield States
7:15 PM: Spyware Definitions: 722
7:14 PM: Spy Sweeper 5.0.5.1286 started
6:49 PM: Warning: The handle is invalid
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
6:48 PM: Warning: A required privilege is not held by the client
6:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Spy Installation Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:48 PM: Shield States
6:47 PM: Spyware Definitions: 722
6:44 PM: Spy Sweeper 5.0.5.1286 started
4:29 PM: Spy Sweeper 5.0.5.1286 started
4:11 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:07 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:06 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
3:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:31 PM: Shield States
3:31 PM: Spyware Definitions: 722
3:30 PM: Spy Sweeper 5.0.5.1286 started
1:48 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:19 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:19 PM: Shield States
1:19 PM: Spyware Definitions: 721
1:18 PM: Spy Sweeper 5.0.5.1286 started
8:56 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
7:50 AM: Warning: Access is denied
7:50 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:50 AM: Warning: A required privilege is not held by the client
7:50 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:50 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
7:50 AM: Warning: A required privilege is not held by the client
Windows Messenger Service Shield: On
7:50 AM: Warning: The handle is invalid
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:50 AM: Shield States
7:50 AM: Spyware Definitions: 721
7:49 AM: Spy Sweeper 5.0.5.1286 started
10:18 PM: IE Tracking Cookies Shield: On
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:14 PM: Shield States
10:14 PM: Spyware Definitions: 721
10:13 PM: Spy Sweeper 5.0.5.1286 started
9:50 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:41 PM: Shield States
1:41 PM: Spyware Definitions: 691
1:39 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:21 PM: Shield States
1:21 PM: Spyware Definitions: 721
1:20 PM: Spy Sweeper 5.0.5.1286 started
11:46 AM: Spyware Definitions: 721
11:45 AM: Spy Sweeper 5.0.5.1286 started
11:33 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:08 PM: Shield States
2:08 PM: Spyware Definitions: 718
2:06 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:53 AM: Warning: Access is denied
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:52 AM: Shield States
9:52 AM: Spyware Definitions: 718
9:51 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:43 AM: Shield States
9:43 AM: Spyware Definitions: 718
9:42 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:28 AM: Shield States
9:28 AM: Spyware Definitions: 718
9:27 AM: Spy Sweeper 5.0.5.1286 started
9:09 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:15 PM: Shield States
2:15 PM: Spyware Definitions: 718
2:14 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:39 AM: Shield States
9:39 AM: Spyware Definitions: 718
9:38 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp.log". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: S-1-5-21-1497286466-1809067083-516276246-1006 could not be
unmapped. Error Code 87
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:48 AM: Shield States
9:48 AM: Spyware Definitions: 718
9:46 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:43 PM: Tamper Detection
9:11 PM: Your definitions are up to date.
9:10 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:19 PM: Tamper Detection
9:36 AM: Warning: Access is denied
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:35 AM: Warning: Access is denied
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:34 AM: Shield States
9:34 AM: Spyware Definitions: 718
9:33 AM: Spy Sweeper 5.0.5.1286 started
9:10 PM: Your spyware definitions have been updated.
9:09 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
3:39 PM: Shield States
3:39 PM: Spyware Definitions: 717
3:38 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:18 AM: Shield States
9:18 AM: Spyware Definitions: 717
9:17 AM: Spy Sweeper 5.0.5.1286 started
9:08 PM: Your definitions are up to date.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:46 PM: Shield States
8:45 PM: Spyware Definitions: 717
8:44 PM: Spy Sweeper 5.0.5.1286 started
8:21 PM: Spy Sweeper 5.0.5.1286 started
7:19 PM: Spy Sweeper 5.0.5.1286 started
4:51 PM: Your spyware definitions have been updated.
4:50 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
4:12 PM: Shield States
4:12 PM: Spyware Definitions: 716
4:11 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
6:19 PM: Shield States
6:18 PM: Spyware Definitions: 716
6:17 PM: Spy Sweeper 5.0.5.1286 started
4:57 PM: Spy Sweeper 5.0.5.1286 started
2:55 PM: Your spyware definitions have been updated.
10:29 PM: IE Security Shield: found: C:\PROGRAM FILES\SPYBOT - SEARCH &
DESTROY\SPYBOTSD.EXE -- IE Security modification denied
10:27 PM: BHO Shield: found: SDHelper.dll-- BHO installation allowed at user
request
4:31 PM: Removal process completed. Elapsed time 00:00:16
4:31 PM: Quarantining All Traces: mywebsearch cookie
4:31 PM: Quarantining All Traces: 2o7.net cookie
4:31 PM: Removal process initiated
4:29 PM: Traces Found: 2
4:29 PM: Full Sweep has completed. Elapsed time 01:35:02
4:29 PM: File Sweep Complete, Elapsed Time: 01:07:04
3:22 PM: Starting File Sweep
3:22 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
3:22 PM: leonard@mywebsearch[2].txt (ID = 3051)
3:22 PM: Found Spy Cookie: mywebsearch cookie
3:22 PM: leonard@2o7[2].txt (ID = 1957)
3:22 PM: Found Spy Cookie: 2o7.net cookie
3:22 PM: Starting Cookie Sweep
3:22 PM: Registry Sweep Complete, Elapsed Time:00:02:17
3:20 PM: Starting Registry Sweep
3:20 PM: Memory Sweep Complete, Elapsed Time: 00:25:26
2:54 PM: Starting Memory Sweep
2:54 PM: Sweep initiated using definitions version 714
2:54 PM: Spy Sweeper started
2:54 PM: | Start of Session, Monday, July 10, 2006 |
********
2:54 PM: | End of Session, Monday, July 10, 2006 |
2:54 PM: Your definitions are up to date.
2:54 PM: Updating spyware definitions
3:25 PM: Allowed Startup entry: srePostpone
3:25 PM: Processing Startup Alerts
1:37 PM: Your spyware definitions have been updated.
1:36 PM: Your spyware definitions have been updated.
9:51 PM: Allowed IE Favorite: Satellite Tracking
9:51 PM: Processing Internet Explorer Favorites Alerts
9:37 PM: Allowed IE Favorite: International Space Station
9:37 PM: Processing Internet Explorer Favorites Alerts
1:35 PM: Your definitions are up to date.
8:31 AM: Allowed IE Favorite: KCRA 3 Home
8:31 AM: Processing Internet Explorer Favorites Alerts
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Processing Startup Alerts
8:40 PM: Allowed Startup entry: My Web Search Bar
8:40 PM: Processing Startup Alerts
8:40 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
8:39 PM: BHO Shield: found: -- BHO installation allowed at user request
8:39 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
1:33 PM: Your spyware definitions have been updated.
1:32 PM: Your spyware definitions have been updated.
1:31 PM: Your spyware definitions have been updated.
1:30 PM: Your spyware definitions have been updated.
1:29 PM: Your spyware definitions have been updated.
2:52 PM: Traces Found: 0
2:52 PM: Full Sweep has completed. Elapsed time 01:23:12
2:52 PM: File Sweep Complete, Elapsed Time: 01:00:51
1:51 PM: Starting File Sweep
1:51 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
1:51 PM: Starting Cookie Sweep
1:51 PM: Registry Sweep Complete, Elapsed Time:00:01:46
1:49 PM: Starting Registry Sweep
1:49 PM: Memory Sweep Complete, Elapsed Time: 00:20:23
1:29 PM: Starting Memory Sweep
1:29 PM: Sweep initiated using definitions version 706
1:29 PM: Spy Sweeper started
1:29 PM: | Start of Session, Sunday, June 25, 2006 |
********
1:29 PM: | End of Session, Sunday, June 25, 2006 |
1:27 PM: Your definitions are up to date.
1:27 PM: Updating spyware definitions
10:47 AM: Removed Startup entry: srePostpone
10:47 AM: Processing Startup Alerts
2:37 PM: Your spyware definitions have been updated.
2:37 PM: Your spyware definitions have been updated.
2:36 PM: Your spyware definitions have been updated.
2:35 PM: Your spyware definitions have been updated.
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
2:35 PM: Your spyware definitions have been updated.
2:32 PM: Your spyware definitions have been updated.
8:41 AM: Allowed Startup entry: Zone Labs Client
8:41 AM: Processing Startup Alerts
2:32 PM: Your spyware definitions have been updated.
2:31 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
6:38 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
8:28 AM: Allowed Startup entry: updateMgr
8:28 AM: Processing Startup Alerts
6:34 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Processing Startup Alerts
7:19 PM: Allowed Startup entry: My Web Search Bar
7:19 PM: Processing Startup Alerts
7:19 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
7:18 PM: BHO Shield: found: -- BHO installation allowed at user request
7:18 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
6:29 PM: Your spyware definitions have been updated.
6:28 PM: Your spyware definitions have been updated.
6:27 PM: Your spyware definitions have been updated.
9:45 PM: The Spy Communication shield has blocked access to: csx.adservs.com
9:44 PM: The Spy Communication shield has blocked access to: csx.adservs.com
8:09 PM: Allowed IE Favorite: AFPC - Air Force Personnel Center
8:09 PM: Allowed IE Favorite: Air Force Link - Home
8:09 PM: Processing Internet Explorer Favorites Alerts
10:11 AM: Your spyware definitions have been updated.
9:48 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:48 AM: Processing Internet Explorer Favorites Alerts
9:43 AM: Allowed IE Favorite: Air Force Link - Home
9:43 AM: Processing Internet Explorer Favorites Alerts
10:10 AM: Your spyware definitions have been updated.
10:09 AM: Your spyware definitions have been updated.
10:08 AM: Your spyware definitions have been updated.
7:53 AM: Allowed Startup entry: WorkFlowTray
7:53 AM: Allowed Startup entry: Opware14
7:53 AM: Allowed Startup entry: OpScheduler
7:53 AM: Allowed Startup entry: CamCheck
7:53 AM: Allowed Startup entry: Apoint
7:53 AM: Allowed Startup entry: AdaptecDirectCD
7:53 AM: Processing Startup Alerts
7:52 AM: Removed Startup entry: TosHKCW.exe
7:52 AM: Removed Startup entry: Share-to-Web Namespace Daemon
7:52 AM: Removed Startup entry: 00THotkey
7:52 AM: Removed Startup entry: Corel Desktop Application Director 8.LNK
7:52 AM: Removed Startup entry: Screen Shot Deluxe 4.0.lnk
7:52 AM: Removed Startup entry: CreataCard Gold 3 Forget Me Not Reminders
Tray Icon.lnk
7:52 AM: Removed Startup entry: Forget Me Not.lnk
7:52 AM: Removed Startup entry: Microsoft Works Calendar Reminders.lnk
7:52 AM: Processing Startup Alerts
5:52 PM: Allowed Startup entry: MSConfig
5:52 PM: Processing Startup Alerts
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
11:07 AM: Traces Found: 0
11:07 AM: Full Sweep has completed. Elapsed time 01:03:50
11:07 AM: File Sweep Complete, Elapsed Time: 00:46:05
10:21 AM: Starting File Sweep
10:21 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:21 AM: Starting Cookie Sweep
10:21 AM: Registry Sweep Complete, Elapsed Time:00:01:39
10:19 AM: Starting Registry Sweep
10:19 AM: Memory Sweep Complete, Elapsed Time: 00:15:56
10:03 AM: Starting Memory Sweep
10:03 AM: Sweep initiated using definitions version 670
10:03 AM: Spy Sweeper started
10:03 AM: | Start of Session, Sunday, May 07, 2006 |
********
10:03 AM: | End of Session, Sunday, May 07, 2006 |
10:03 AM: Your definitions are up to date.
10:03 AM: Updating spyware definitions
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:48 AM: Your spyware definitions have been updated.
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:48 AM: Your spyware definitions have been updated.
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:47 AM: Your spyware definitions have been updated.
10:46 AM: Your spyware definitions have been updated.
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:41 AM: Your spyware definitions have been updated.
11:43 AM: Traces Found: 0
11:43 AM: Full Sweep has completed. Elapsed time 01:03:10
11:43 AM: File Sweep Complete, Elapsed Time: 00:46:36
10:57 AM: Starting File Sweep
10:57 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:57 AM: Starting Cookie Sweep
10:57 AM: Registry Sweep Complete, Elapsed Time:00:01:42
10:55 AM: Starting Registry Sweep
10:55 AM: Memory Sweep Complete, Elapsed Time: 00:14:42
10:40 AM: Starting Memory Sweep
10:40 AM: Sweep initiated using definitions version 663
10:40 AM: Spy Sweeper started
10:40 AM: | Start of Session, Sunday, April 23, 2006 |
********
10:40 AM: | End of Session, Sunday, April 23, 2006 |
10:40 AM: Your definitions are up to date.
10:40 AM: Updating spyware definitions
10:47 AM: Your spyware definitions have been updated.
10:45 AM: Your spyware definitions have been updated.
10:44 AM: Your spyware definitions have been updated.
10:42 AM: Your spyware definitions have been updated.
1:17 PM: Allowed IE Favorite: Pace Products Products
1:17 PM: Processing Internet Explorer Favorites Alerts
10:41 AM: Your spyware definitions have been updated.
10:39 AM: Your spyware definitions have been updated.
2:08 PM: Allowed Startup entry: SpybotSnD
2:08 PM: Processing Startup Alerts
11:34 AM: Traces Found: 0
11:34 AM: Full Sweep has completed. Elapsed time 00:56:20
11:34 AM: File Sweep Complete, Elapsed Time: 00:40:17
10:54 AM: Starting File Sweep
10:54 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:54 AM: Starting Cookie Sweep
10:53 AM: Registry Sweep Complete, Elapsed Time:00:01:40
10:52 AM: Starting Registry Sweep
10:52 AM: Memory Sweep Complete, Elapsed Time: 00:14:12
10:38 AM: Starting Memory Sweep
10:38 AM: Sweep initiated using definitions version 652
10:38 AM: Spy Sweeper started
10:38 AM: | Start of Session, Sunday, April 09, 2006 |
********
10:38 AM: | End of Session, Sunday, April 09, 2006 |
10:37 AM: Your definitions are up to date.
10:37 AM: Updating spyware definitions
11:38 AM: Your spyware definitions have been updated.
11:38 AM: Your spyware definitions have been updated.
11:37 AM: Your spyware definitions have been updated.
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
10:56 AM: Your spyware definitions have been updated.
7:48 AM: Allowed IE Favorite: gethuman database
7:48 AM: Processing Internet Explorer Favorites Alerts
10:52 PM: Removed Startup entry: CF1DelUnicows
10:52 PM: Removed Startup entry: CF1DelEXE
10:52 PM: Removed Startup entry: CF1DelMsvcr
10:52 PM: Processing Startup Alerts
3:06 PM: Allowed Startup entry: SpybotSnD
3:06 PM: Processing Startup Alerts
11:54 AM: Traces Found: 0
11:54 AM: Full Sweep has completed. Elapsed time 00:58:06
11:54 AM: File Sweep Complete, Elapsed Time: 00:39:49
11:14 AM: Starting File Sweep
11:14 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
11:14 AM: Starting Cookie Sweep
11:14 AM: Registry Sweep Complete, Elapsed Time:00:01:50
11:12 AM: Starting Registry Sweep
11:12 AM: Memory Sweep Complete, Elapsed Time: 00:16:16
10:56 AM: Starting Memory Sweep
10:56 AM: Sweep initiated using definitions version 646
10:56 AM: Spy Sweeper started
10:56 AM: | Start of Session, Sunday, April 02, 2006 |
********
10:56 AM: | End of Session, Sunday, April 02, 2006 |
10:56 AM: Your definitions are up to date.
10:56 AM: Updating spyware definitions
8:41 AM: Your spyware definitions have been updated.
8:30 AM: Your spyware definitions have been updated.
8:29 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:10 AM: Allowed Startup entry: Zone Labs Client
8:10 AM: Processing Startup Alerts
6:02 PM: Allowed Startup entry: nmapp
6:02 PM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
8:25 AM: Allowed Startup entry: E6TaskPanel
8:25 AM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
7:49 AM: Your spyware definitions have been updated.
7:47 AM: Your spyware definitions have been updated.
11:06 AM: Traces Found: 0
11:06 AM: Full Sweep has completed. Elapsed time 00:51:55
11:06 AM: File Sweep Complete, Elapsed Time: 00:35:14
10:30 AM: Starting File Sweep
10:30 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:30 AM: Starting Cookie Sweep
10:30 AM: Registry Sweep Complete, Elapsed Time:00:01:48
10:29 AM: Starting Registry Sweep
10:29 AM: Memory Sweep Complete, Elapsed Time: 00:14:40
10:14 AM: Starting Memory Sweep
10:14 AM: Sweep initiated using definitions version 636
10:14 AM: Spy Sweeper started
10:14 AM: | Start of Session, Sunday, March 19, 2006 |
********
10:14 AM: | End of Session, Sunday, March 19, 2006 |
8:16 AM: Allowed IE Favorite: AutoColorLibrary Color Chip Selector
8:16 AM: Processing Internet Explorer Favorites Alerts
11:06 AM: Your spyware definitions have been updated.
11:06 AM: Your spyware definitions have been updated.
10:52 AM: Your spyware definitions have been updated.
8:12 AM: Allowed IE Favorite: JC Whitney
8:12 AM: Processing Internet Explorer Favorites Alerts
7:22 PM: Allowed IE Favorite: JC Whitney Aftermarket Auto Parts &
Accessories for Cars, Trucks, Motorcycles & More
7:22 PM: Processing Internet Explorer Favorites Alerts
9:08 AM: Allowed IE Favorite: 50 Best Tips & Tricks
9:08 AM: Allowed IE Favorite: Acronym Finder Look up 238,000+ acronyms-
abbreviations & their definitions
9:08 AM: Allowed IE Favorite: Acronym lookup
9:08 AM: Allowed IE Favorite: Acronyms in IRC & eMail; Common Emoticons
(Smileys)
9:08 AM: Allowed IE Favorite: Commissary Shopper News
9:08 AM: Allowed IE Favorite: StarBits - Acronyms, Abbreviations, and so on
9:08 AM: Allowed IE Favorite: AdventurePages.com
9:08 AM: Allowed IE Favorite: American Science & Surplus
9:08 AM: Allowed IE Favorite: Anything I Can Do
9:08 AM: Allowed IE Favorite: AnyWho Internet Directory Assistance; Yellow
Pages, White Pages, Toll-Free Numbers, Maps and Directions
9:08 AM: Allowed IE Favorite: Applebee's $50 card
9:08 AM: Allowed IE Favorite: AH Owners' Assn of British Columbia
9:08 AM: Allowed IE Favorite: AHC Western Australia
9:08 AM: Allowed IE Favorite: Alpine 500
9:08 AM: Allowed IE Favorite: Antique Automobile Radio, modern stereo for
vintage cars
9:08 AM: Allowed IE Favorite: Archives for the healeys@autox.team.net list
Mailing List
9:08 AM: Allowed IE Favorite: Austin Healey 100 Restoration Site
9:08 AM: Allowed IE Favorite: Austin Healey Club (UK)
9:08 AM: Allowed IE Favorite: Austin Healey Club of America
9:08 AM: Allowed IE Favorite: Austin Healey Club of Oregon Home Page
9:08 AM: Allowed IE Favorite: Austin Healey Parts Spares Accessories
Restoration - Cape International
9:08 AM: Allowed IE Favorite: Austin Healey Parts –– Discount Austin Healey
Replacement Parts
9:08 AM: Allowed IE Favorite: Austin-Healey Club USA
9:08 AM: Allowed IE Favorite: Austin-Healey Sports and Touring Club
9:08 AM: Allowed IE Favorite: Austin-Healeys.com, Dickson's
9:08 AM: Allowed IE Favorite: Auto Farm - The Austin Healey Parts Source
9:08 AM: Allowed IE Favorite: automobile-portal.com
9:08 AM: Allowed IE Favorite: AutoWeek - Premier Source for Auto News,
Reviews, Motorsports Info
9:08 AM: Allowed IE Favorite: Big Healeys, Roger Los
9:08 AM: Allowed IE Favorite: British Car Forum Contents
9:08 AM: Allowed IE Favorite: British Car Specialists
9:08 AM: Allowed IE Favorite: British Car Week
9:08 AM: Allowed IE Favorite: British Sports Car Restorations
9:08 AM: Allowed IE Favorite: british tool whitworth tools sockets wrenches,
taps & dies, BSW, BSF, british association
9:08 AM: Allowed IE Favorite: British Wire Wheel Home
9:08 AM: Allowed IE Favorite: Cape International
9:08 AM: Allowed IE Favorite: Car Talk
9:08 AM: Allowed IE Favorite: Cars in Movies
9:08 AM: Allowed IE Favorite: Cascade AH Club, Washington
9:08 AM: Allowed IE Favorite: Classic Auto Lubes
9:08 AM: Allowed IE Favorite: Classic Cars
9:08 AM: Allowed IE Favorite: Clikadjust_0
9:08 AM: Allowed IE Favorite: Complete Automobilist
9:08 AM: Allowed IE Favorite: DIY Autoparts
9:08 AM: Allowed IE Favorite: Don Barrow - For Magnifiers, Tripmeters,
Romers, Average Speed Tables, Plotlights, Compasses, Glowlights, Cagelights,
Chronolig
9:08 AM: Allowed IE Favorite: Dun-Rite Tool Company
9:08 AM: Allowed IE Favorite: Engine Oil Filter Study
9:08 AM: Allowed IE Favorite: Francois Wildi - Tech talks
9:08 AM: Allowed IE Favorite: GGAHC Members Page
9:08 AM: Allowed IE Favorite: Golden Gate Austin Healey Club
9:08 AM: Allowed IE Favorite: Gulf Coast Healey Club
9:08 AM: Allowed IE Favorite: Hazelden, Austin Healey Page
9:08 AM: Allowed IE Favorite: Healey Web - SOL
9:08 AM: Allowed IE Favorite: http--www.bighealey.ltd.uk
9:08 AM: Allowed IE Favorite: Jim Werner's Healey Adventure Site
9:08 AM: Allowed IE Favorite: Just Brits
9:08 AM: Allowed IE Favorite: Macgregor British Car Parts
9:08 AM: Allowed IE Favorite: Minor Classics
9:08 AM: Allowed IE Favorite: Modified Austin Healey Registry
9:08 AM: Allowed IE Favorite: MossMotors.com - Restoration Parts And
Accessories For British Cars
9:08 AM: Allowed IE Favorite: North Texas Austin Healey Club
9:08 AM: Allowed IE Favorite: Northern Bay British Car Club
9:08 AM: Allowed IE Favorite: Pertronix Home
9:08 AM: Allowed IE Favorite: Precision Sportscar
9:08 AM: Allowed IE Favorite: Ruddspeed Ltd - Sales and Restoration of
Austin Healey Classic Cars
9:08 AM: Allowed IE Favorite: Speedograph Richfield ,Classic car,instrument
repairs,speedometer ,clutch, accelerator,Brake cables
9:08 AM: Allowed IE Favorite: Team Healey Texas
9:08 AM: Allowed IE Favorite: The Car Czar - Home
9:08 AM: Allowed IE Favorite: The Healey Factory - Welcome
9:08 AM: Allowed IE Favorite: The Little British Car Company
9:08 AM: Allowed IE Favorite: The MG Store
9:08 AM: Allowed IE Favorite: The United British Sports Car Club
9:08 AM: Allowed IE Favorite: Triple-C Motor Accessories - MINI Cooper, MINI
Cooper S, MG, Triumph etc.
9:08 AM: Allowed IE Favorite: uc2_flat
9:08 AM: Allowed IE Favorite: Utterly Obscure British Car Humour...
9:08 AM: Allowed IE Favorite: Vintage-Sportcar-Touring - Page 1
9:08 AM: Allowed IE Favorite: VintageRally.com - The Source for Vintage and
Historic Auto Rally Information
9:08 AM: Allowed IE Favorite: Wilko's Healey Progress
9:08 AM: Allowed IE Favorite: BART - Bay Area Rapid Transit District
9:08 AM: Allowed IE Favorite: Baylink Ferries of Vallejo California - Ferry
Service to San Francisco
9:08 AM: Allowed IE Favorite: Black Viper's Windows XP Home and Professional
Services Configuration
9:08 AM: Allowed IE Favorite: California Fair Political Practices Commission
-- Welcome to the FPPC Web Site
9:08 AM: Allowed IE Favorite: Centers for Disease Control and Prevention
9:08 AM: Allowed IE Favorite: Classic Motorsports Magazine
9:08 AM: Allowed IE Favorite: Cockeyed.com Always bring your camera
9:08 AM: Allowed IE Favorite: Comics.com Home Page
9:08 AM: Allowed IE Favorite: Annoyances.org
9:08 AM: Allowed IE Favorite: Anonymizer®® Online Privacy and Security
9:08 AM: Allowed IE Favorite: Belarc
9:08 AM: Allowed IE Favorite: Black Viper's Home Page
9:08 AM: Allowed IE Favorite: Bob Cerelli's Windows Page
9:08 AM: Allowed IE Favorite: broadband »» Speed tests
9:08 AM: Allowed IE Favorite: BUSlink USA Inc. -
9:08 AM: Allowed IE Favorite: CompUSA.com - CompUSA.com's Frequent Filler
Program Registration page
9:08 AM: Allowed IE Favorite: Computer Knowledge
9:08 AM: Allowed IE Favorite: Contact Microsoft
9:08 AM: Allowed IE Favorite: Contact Us, .NET Passport
9:08 AM: Allowed IE Favorite: Earthlink Help Page
9:08 AM: Allowed IE Favorite: Everything Computers Home of O'Donnell on
Computers and Personal Computer Secrets
9:08 AM: Allowed IE Favorite: FILExt - The File Extension Source
9:08 AM: Allowed IE Favorite: Howstuffworks How Home Networking Works
9:08 AM: Allowed IE Favorite: LangaList Home Page
9:08 AM: Allowed IE Favorite: Laptop Computing Forum
9:08 AM: Allowed IE Favorite: Microsoft Help and Support
9:08 AM: Allowed IE Favorite: Microsoft TechNet
9:08 AM: Allowed IE Favorite: Microsoft®® .NET Passport One easy way to sign
in and shop online.
9:08 AM: Allowed IE Favorite: NetLingo Dictionary of Internet Words A
Glossary of Online Jargon with Definitions of Terminology & Acronyms
9:08 AM: Allowed IE Favorite: Palm One-Zire21
9:08 AM: Allowed IE Favorite: Performance Tweaks and Tips for Windows 9x-ME-
NT-2000-XP
9:08 AM: Allowed IE Favorite: Pinnacle Systems is the Leader in Digital
Video
9:08 AM: Allowed IE Favorite: Symantec Worldwide Home Page
9:08 AM: Allowed IE Favorite: TechSpot Your PC Hardware resource aka 3D
Spotlight
9:08 AM: Allowed IE Favorite: TechSpot - The PC Enthusiast Information
Resource
9:08 AM: Allowed IE Favorite: TechTV Home
9:08 AM: Allowed IE Favorite: The Hartnett's Page 1
9:08 AM: Allowed IE Favorite: The Kim Komando Radio Show®®--One of the Top
10 Programs in the US
9:08 AM: Allowed IE Favorite: Toshiba Laptop Forum
9:08 AM: Allowed IE Favorite: Update Notification (Leonard Hartnett)
9:08 AM: Allowed IE Favorite: Webroot Software Spyware and Adware
Detection, Removal and Protection
9:08 AM: Allowed IE Favorite: Welcome to EMAZING.com
9:08 AM: Allowed IE Favorite: Window Washer Plugins
9:08 AM: Allowed IE Favorite: Windows Guide Network at WinGuides.com
9:08 AM: Allowed IE Favorite: Windows XP Service Pack 2 (SP2)
9:08 AM: Allowed IE Favorite: WinPlanet - A World of Premium Windows
Information and Tutorials
9:08 AM: Allowed IE Favorite: Your Broderbund Account Home
9:08 AM: Allowed IE Favorite: Zone Labs ZoneAlarm
9:08 AM: Allowed IE Favorite: Darwin Awards
9:08 AM: Allowed IE Favorite: B&Q, diy.com advice
9:08 AM: Allowed IE Favorite: Broderbund
9:08 AM: Allowed IE Favorite: Welcome to Ace Hardware
9:08 AM: Allowed IE Favorite: eBay - The World's Online Marketplace
9:08 AM: Allowed IE Favorite: Federal Communications Commission (FCC) Home
Page
9:08 AM: Allowed IE Favorite: Better Investing - We'll show you how!
9:08 AM: Allowed IE Favorite: Charles Schwab Home
9:08 AM: Allowed IE Favorite: Currency Convertor
9:08 AM: Allowed IE Favorite: DFAS emss, myPay, military pay
9:08 AM: Allowed IE Favorite: Franklin Templeton Home
9:08 AM: Allowed IE Favorite: Motley Fool
9:08 AM: Allowed IE Favorite: myPay Web Site
9:08 AM: Allowed IE Favorite: NETworth TV Show We Show You How to Use the
Net to Increase Your Worth
9:08 AM: Allowed IE Favorite: Quicken.com - Investing Strategies
9:08 AM: Allowed IE Favorite: Quicken.com - Quicken software Home, See Your
Complete Financial Picture in Minutes
9:08 AM: Allowed IE Favorite: Travis CU
9:08 AM: Allowed IE Favorite: U.S. Savings Bonds Online
9:08 AM: Allowed IE Favorite: UBS - UBS Wealth Management USA
9:08 AM: Allowed IE Favorite: Vanguard - The Vanguard Group
9:08 AM: Allowed IE Favorite: Welcome to The Savings Bond Informer
9:08 AM: Allowed IE Favorite: abc7news.com Mr. Food
9:08 AM: Allowed IE Favorite: America's Test Kitchen
9:08 AM: Allowed IE Favorite: Mr. Food - Contact
9:08 AM: Allowed IE Favorite: Compuserve Forum Center
9:08 AM: Allowed IE Favorite: The Toshiba Computing Forum powered by
CompuServe.
9:08 AM: Allowed IE Favorite: Gas Prices in California
9:08 AM: Allowed IE Favorite: GasBuddy.com - Find cheap gas prices in your
city
9:08 AM: Allowed IE Favorite: globeofblogs.com
9:08 AM: Allowed IE Favorite: ADA Home Page - ada.gov - Information and
Technical Assistance on the Americans with Disabilities Act
9:08 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:08 AM: Allowed IE Favorite: CA DMV
9:08 AM: Allowed IE Favorite: California State Assembly
9:08 AM: Allowed IE Favorite: California State Senate
9:08 AM: Allowed IE Favorite: City of Fairfield
9:08 AM: Allowed IE Favorite: City of Vacaville
9:08 AM: Allowed IE Favorite: Commissaries.com - Welcome!
9:08 AM: Allowed IE Favorite: David Grant Medical Center
9:08 AM: Allowed IE Favorite: EPA AIRNow
9:08 AM: Allowed IE Favorite: Find California Code
9:08 AM: Allowed IE Favorite: FirstGov -- Your First Click to the US
Government
9:08 AM: Allowed IE Favorite: Franchise Tax Board - Homepage
9:08 AM: Allowed IE Favorite: http--www.co.solano.ca.us-
9:08 AM: Allowed IE Favorite: IRS.gov Home
9:08 AM: Allowed IE Favorite: MOAA Legislative Affairs
9:08 AM: Allowed IE Favorite: Sacramento County, CA
9:08 AM: Allowed IE Favorite: Sacramento, City
9:08 AM: Allowed IE Favorite: Search Bills
9:08 AM: Allowed IE Favorite: Solano County
9:08 AM: Allowed IE Favorite: State of California
9:08 AM: Allowed IE Favorite: State of Nevada web site
9:08 AM: Allowed IE Favorite: The official U.S. time - clock
9:08 AM: Allowed IE Favorite: Travis Air Force Base, California - Public Web
Site
9:08 AM: Allowed IE Favorite: H3R Full service Halon and Clean Agent
Specialist
9:08 AM: Allowed IE Favorite: Harbor Freight Tools - Quality Tools at the
Lowest Prices
9:08 AM: Allowed IE Favorite: Hartnett Family Genealogy Forum
9:08 AM: Allowed IE Favorite: health facts and fears
9:08 AM: Allowed IE Favorite: Hoover's Online - Home Page
9:08 AM: Allowed IE Favorite: inkjet & toner refill kits
9:08 AM: Allowed IE Favorite: Inkjet cartridges and printer supplies -
InkSell.com
9:08 AM: Allowed IE Favorite: Intelius The world's largest and most accurate
public records source!
9:08 AM: Allowed IE Favorite: JOKES.COM HOME
9:08 AM: Allowed IE Favorite: KGO AM 810 Legal Resource Center Featuring
Leading Attorneys
9:08 AM: Allowed IE Favorite: Sacramento County Bar Association WebSite
9:08 AM: Allowed IE Favorite: FreedomWare
9:08 AM: Allowed IE Favorite: Leonard's Page 1
9:08 AM: Allowed IE Favorite: Toshiba Computer Accessories
9:08 AM: Allowed IE Favorite: Toshiba Product Information
9:08 AM: Allowed IE Favorite: Toshiba Solutions
9:08 AM: Allowed IE Favorite: Toshiba Warranty & Service Programs
9:08 AM: Allowed IE Favorite: Ask IRIS
9:08 AM: Allowed IE Favorite: Email Subscription
9:08 AM: Allowed IE Favorite: How to Get Help
9:08 AM: Allowed IE Favorite: Software Downloads
9:08 AM: Allowed IE Favorite: Support Bulletins
9:08 AM: Allowed IE Favorite: Virtual Tech
9:08 AM: Allowed IE Favorite: mamarocks
9:08 AM: Allowed IE Favorite: abc7news.com
9:08 AM: Allowed IE Favorite: ABCNEWS.com Home
9:08 AM: Allowed IE Favorite: AETV.com
9:08 AM: Allowed IE Favorite: C-SPAN Full Schedule
9:08 AM: Allowed IE Favorite: CBS 5 - San Francisco
9:08 AM: Allowed IE Favorite: CNN.com
9:08 AM: Allowed IE Favorite: Dateline Front Page 1110 PM ET Sunday, July
07, 2002
9:08 AM: Allowed IE Favorite: FOXNews.com
9:08 AM: Allowed IE Favorite: History Channel
9:08 AM: Allowed IE Favorite: Home & Garden Television
9:08 AM: Allowed IE Favorite: KGO
9:08 AM: Allowed IE Favorite: KOVR13.COM YOUR JUMPPOINT TO SACRAMENTO -
STOCKTON - MODESTO
9:08 AM: Allowed IE Favorite: KQED Public TV, Radio and Interactive
9:08 AM: Allowed IE Favorite: KRON 4 Home
9:08 AM: Allowed IE Favorite: KSFO AM 560, Gold
9:08 AM: Allowed IE Favorite: KSFO AM 560
9:08 AM: Allowed IE Favorite: KVIE - PBS for California's Central Valley -
KVIE Channel 6 & Cable 7
9:08 AM: Allowed IE Favorite: National Review Online
9:08 AM: Allowed IE Favorite: News10 - Index Page
9:08 AM: Allowed IE Favorite: Outdoor Life Network - Home
9:08 AM: Allowed IE Favorite: MSN.com
9:08 AM: Allowed IE Favorite: Customize Links
9:08 AM: Allowed IE Favorite: Windows Media
9:08 AM: Allowed IE Favorite: Windows
9:08 AM: Allowed IE Favorite: Radio Station Guide
9:08 AM: Allowed IE Favorite: Real.com R

#12 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 12:37 PM

10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:27 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:27 AM: Shield States
10:27 AM: Spyware Definitions: 723
10:26 AM: Spy Sweeper 5.0.5.1286 started
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
10:52 PM: Tamper Detection
9:22 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:20 PM: Shield States
9:20 PM: Spyware Definitions: 723
9:19 PM: Spy Sweeper 5.0.5.1286 started
8:38 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
8:37 PM: Automated check for program update in progress.
8:34 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
8:32 PM: Warning: A required privilege is not held by the client
8:32 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
8:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 PM: Shield States
8:32 PM: Spyware Definitions: 723
8:31 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:18 PM: Warning: A required privilege is not held by the client
8:18 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:17 PM: Shield States
8:17 PM: Spyware Definitions: 723
8:16 PM: Spy Sweeper 5.0.5.1286 started
10:37 PM: Spy Sweeper 5.0.5.1286 started
10:28 PM: Spy Sweeper 5.0.5.1286 started
3:06 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
3:05 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
1:49 PM: Your definitions are up to date.
1:49 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:29 PM: Tamper Detection
12:45 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
12:44 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
12:43 PM: Shield States
12:43 PM: Spyware Definitions: 723
12:42 PM: Spy Sweeper 5.0.5.1286 started
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
10:47 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:46 AM: Shield States
10:46 AM: Spyware Definitions: 723
10:45 AM: Spy Sweeper 5.0.5.1286 started
10:48 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:48 PM: IE Tracking Cookies Shield: Removed clickzs cookie
10:48 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:47 PM: Shield States
10:47 PM: Spyware Definitions: 723
10:46 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
1:15 PM: Warning: A required privilege is not held by the client
1:15 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:13 PM: Shield States
1:13 PM: Spyware Definitions: 722
1:12 PM: Spy Sweeper 5.0.5.1286 started
8:33 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 AM: Warning: A required privilege is not held by the client
8:33 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:32 AM: Warning: A required privilege is not held by the client
8:32 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 AM: Shield States
8:32 AM: Spyware Definitions: 722
8:31 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
8:03 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:03 AM: Shield States
8:02 AM: Spyware Definitions: 722
8:01 AM: Spy Sweeper 5.0.5.1286 started
9:18 PM: Common Ad Sites Shield: On
8:53 PM: Spy Sweeper 5.0.5.1286 started
8:35 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:15 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
7:15 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:15 PM: Shield States
7:15 PM: Spyware Definitions: 722
7:14 PM: Spy Sweeper 5.0.5.1286 started
6:49 PM: Warning: The handle is invalid
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
6:48 PM: Warning: A required privilege is not held by the client
6:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Spy Installation Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:48 PM: Shield States
6:47 PM: Spyware Definitions: 722
6:44 PM: Spy Sweeper 5.0.5.1286 started
4:29 PM: Spy Sweeper 5.0.5.1286 started
4:11 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:07 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:06 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
3:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:31 PM: Shield States
3:31 PM: Spyware Definitions: 722
3:30 PM: Spy Sweeper 5.0.5.1286 started
1:48 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:19 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:19 PM: Shield States
1:19 PM: Spyware Definitions: 721
1:18 PM: Spy Sweeper 5.0.5.1286 started
8:56 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
7:50 AM: Warning: Access is denied
7:50 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:50 AM: Warning: A required privilege is not held by the client
7:50 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:50 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
7:50 AM: Warning: A required privilege is not held by the client
Windows Messenger Service Shield: On
7:50 AM: Warning: The handle is invalid
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:50 AM: Shield States
7:50 AM: Spyware Definitions: 721
7:49 AM: Spy Sweeper 5.0.5.1286 started
10:18 PM: IE Tracking Cookies Shield: On
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:14 PM: Shield States
10:14 PM: Spyware Definitions: 721
10:13 PM: Spy Sweeper 5.0.5.1286 started
9:50 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:41 PM: Shield States
1:41 PM: Spyware Definitions: 691
1:39 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:21 PM: Shield States
1:21 PM: Spyware Definitions: 721
1:20 PM: Spy Sweeper 5.0.5.1286 started
11:46 AM: Spyware Definitions: 721
11:45 AM: Spy Sweeper 5.0.5.1286 started
11:33 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:08 PM: Shield States
2:08 PM: Spyware Definitions: 718
2:06 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:53 AM: Warning: Access is denied
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:52 AM: Shield States
9:52 AM: Spyware Definitions: 718
9:51 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:43 AM: Shield States
9:43 AM: Spyware Definitions: 718
9:42 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:28 AM: Shield States
9:28 AM: Spyware Definitions: 718
9:27 AM: Spy Sweeper 5.0.5.1286 started
9:09 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:15 PM: Shield States
2:15 PM: Spyware Definitions: 718
2:14 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:39 AM: Shield States
9:39 AM: Spyware Definitions: 718
9:38 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp.log". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: S-1-5-21-1497286466-1809067083-516276246-1006 could not be
unmapped. Error Code 87
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:48 AM: Shield States
9:48 AM: Spyware Definitions: 718
9:46 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:43 PM: Tamper Detection
9:11 PM: Your definitions are up to date.
9:10 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:19 PM: Tamper Detection
9:36 AM: Warning: Access is denied
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:35 AM: Warning: Access is denied
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:34 AM: Shield States
9:34 AM: Spyware Definitions: 718
9:33 AM: Spy Sweeper 5.0.5.1286 started
9:10 PM: Your spyware definitions have been updated.
9:09 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
3:39 PM: Shield States
3:39 PM: Spyware Definitions: 717
3:38 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:18 AM: Shield States
9:18 AM: Spyware Definitions: 717
9:17 AM: Spy Sweeper 5.0.5.1286 started
9:08 PM: Your definitions are up to date.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:46 PM: Shield States
8:45 PM: Spyware Definitions: 717
8:44 PM: Spy Sweeper 5.0.5.1286 started
8:21 PM: Spy Sweeper 5.0.5.1286 started
7:19 PM: Spy Sweeper 5.0.5.1286 started
4:51 PM: Your spyware definitions have been updated.
4:50 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
4:12 PM: Shield States
4:12 PM: Spyware Definitions: 716
4:11 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
6:19 PM: Shield States
6:18 PM: Spyware Definitions: 716
6:17 PM: Spy Sweeper 5.0.5.1286 started
4:57 PM: Spy Sweeper 5.0.5.1286 started
2:55 PM: Your spyware definitions have been updated.
10:29 PM: IE Security Shield: found: C:\PROGRAM FILES\SPYBOT - SEARCH &
DESTROY\SPYBOTSD.EXE -- IE Security modification denied
10:27 PM: BHO Shield: found: SDHelper.dll-- BHO installation allowed at user
request
4:31 PM: Removal process completed. Elapsed time 00:00:16
4:31 PM: Quarantining All Traces: mywebsearch cookie
4:31 PM: Quarantining All Traces: 2o7.net cookie
4:31 PM: Removal process initiated
4:29 PM: Traces Found: 2
4:29 PM: Full Sweep has completed. Elapsed time 01:35:02
4:29 PM: File Sweep Complete, Elapsed Time: 01:07:04
3:22 PM: Starting File Sweep
3:22 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
3:22 PM: leonard@mywebsearch[2].txt (ID = 3051)
3:22 PM: Found Spy Cookie: mywebsearch cookie
3:22 PM: leonard@2o7[2].txt (ID = 1957)
3:22 PM: Found Spy Cookie: 2o7.net cookie
3:22 PM: Starting Cookie Sweep
3:22 PM: Registry Sweep Complete, Elapsed Time:00:02:17
3:20 PM: Starting Registry Sweep
3:20 PM: Memory Sweep Complete, Elapsed Time: 00:25:26
2:54 PM: Starting Memory Sweep
2:54 PM: Sweep initiated using definitions version 714
2:54 PM: Spy Sweeper started
2:54 PM: | Start of Session, Monday, July 10, 2006 |
********
2:54 PM: | End of Session, Monday, July 10, 2006 |
2:54 PM: Your definitions are up to date.
2:54 PM: Updating spyware definitions
3:25 PM: Allowed Startup entry: srePostpone
3:25 PM: Processing Startup Alerts
1:37 PM: Your spyware definitions have been updated.
1:36 PM: Your spyware definitions have been updated.
9:51 PM: Allowed IE Favorite: Satellite Tracking
9:51 PM: Processing Internet Explorer Favorites Alerts
9:37 PM: Allowed IE Favorite: International Space Station
9:37 PM: Processing Internet Explorer Favorites Alerts
1:35 PM: Your definitions are up to date.
8:31 AM: Allowed IE Favorite: KCRA 3 Home
8:31 AM: Processing Internet Explorer Favorites Alerts
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Processing Startup Alerts
8:40 PM: Allowed Startup entry: My Web Search Bar
8:40 PM: Processing Startup Alerts
8:40 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
8:39 PM: BHO Shield: found: -- BHO installation allowed at user request
8:39 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
1:33 PM: Your spyware definitions have been updated.
1:32 PM: Your spyware definitions have been updated.
1:31 PM: Your spyware definitions have been updated.
1:30 PM: Your spyware definitions have been updated.
1:29 PM: Your spyware definitions have been updated.
2:52 PM: Traces Found: 0
2:52 PM: Full Sweep has completed. Elapsed time 01:23:12
2:52 PM: File Sweep Complete, Elapsed Time: 01:00:51
1:51 PM: Starting File Sweep
1:51 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
1:51 PM: Starting Cookie Sweep
1:51 PM: Registry Sweep Complete, Elapsed Time:00:01:46
1:49 PM: Starting Registry Sweep
1:49 PM: Memory Sweep Complete, Elapsed Time: 00:20:23
1:29 PM: Starting Memory Sweep
1:29 PM: Sweep initiated using definitions version 706
1:29 PM: Spy Sweeper started
1:29 PM: | Start of Session, Sunday, June 25, 2006 |
********
1:29 PM: | End of Session, Sunday, June 25, 2006 |
1:27 PM: Your definitions are up to date.
1:27 PM: Updating spyware definitions
10:47 AM: Removed Startup entry: srePostpone
10:47 AM: Processing Startup Alerts
2:37 PM: Your spyware definitions have been updated.
2:37 PM: Your spyware definitions have been updated.
2:36 PM: Your spyware definitions have been updated.
2:35 PM: Your spyware definitions have been updated.
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
2:35 PM: Your spyware definitions have been updated.
2:32 PM: Your spyware definitions have been updated.
8:41 AM: Allowed Startup entry: Zone Labs Client
8:41 AM: Processing Startup Alerts
2:32 PM: Your spyware definitions have been updated.
2:31 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
6:38 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
8:28 AM: Allowed Startup entry: updateMgr
8:28 AM: Processing Startup Alerts
6:34 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Processing Startup Alerts
7:19 PM: Allowed Startup entry: My Web Search Bar
7:19 PM: Processing Startup Alerts
7:19 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
7:18 PM: BHO Shield: found: -- BHO installation allowed at user request
7:18 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
6:29 PM: Your spyware definitions have been updated.
6:28 PM: Your spyware definitions have been updated.
6:27 PM: Your spyware definitions have been updated.
9:45 PM: The Spy Communication shield has blocked access to: csx.adservs.com
9:44 PM: The Spy Communication shield has blocked access to: csx.adservs.com
8:09 PM: Allowed IE Favorite: AFPC - Air Force Personnel Center
8:09 PM: Allowed IE Favorite: Air Force Link - Home
8:09 PM: Processing Internet Explorer Favorites Alerts
10:11 AM: Your spyware definitions have been updated.
9:48 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:48 AM: Processing Internet Explorer Favorites Alerts
9:43 AM: Allowed IE Favorite: Air Force Link - Home
9:43 AM: Processing Internet Explorer Favorites Alerts
10:10 AM: Your spyware definitions have been updated.
10:09 AM: Your spyware definitions have been updated.
10:08 AM: Your spyware definitions have been updated.
7:53 AM: Allowed Startup entry: WorkFlowTray
7:53 AM: Allowed Startup entry: Opware14
7:53 AM: Allowed Startup entry: OpScheduler
7:53 AM: Allowed Startup entry: CamCheck
7:53 AM: Allowed Startup entry: Apoint
7:53 AM: Allowed Startup entry: AdaptecDirectCD
7:53 AM: Processing Startup Alerts
7:52 AM: Removed Startup entry: TosHKCW.exe
7:52 AM: Removed Startup entry: Share-to-Web Namespace Daemon
7:52 AM: Removed Startup entry: 00THotkey
7:52 AM: Removed Startup entry: Corel Desktop Application Director 8.LNK
7:52 AM: Removed Startup entry: Screen Shot Deluxe 4.0.lnk
7:52 AM: Removed Startup entry: CreataCard Gold 3 Forget Me Not Reminders
Tray Icon.lnk
7:52 AM: Removed Startup entry: Forget Me Not.lnk
7:52 AM: Removed Startup entry: Microsoft Works Calendar Reminders.lnk
7:52 AM: Processing Startup Alerts
5:52 PM: Allowed Startup entry: MSConfig
5:52 PM: Processing Startup Alerts
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
11:07 AM: Traces Found: 0
11:07 AM: Full Sweep has completed. Elapsed time 01:03:50
11:07 AM: File Sweep Complete, Elapsed Time: 00:46:05
10:21 AM: Starting File Sweep
10:21 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:21 AM: Starting Cookie Sweep
10:21 AM: Registry Sweep Complete, Elapsed Time:00:01:39
10:19 AM: Starting Registry Sweep
10:19 AM: Memory Sweep Complete, Elapsed Time: 00:15:56
10:03 AM: Starting Memory Sweep
10:03 AM: Sweep initiated using definitions version 670
10:03 AM: Spy Sweeper started
10:03 AM: | Start of Session, Sunday, May 07, 2006 |
********
10:03 AM: | End of Session, Sunday, May 07, 2006 |
10:03 AM: Your definitions are up to date.
10:03 AM: Updating spyware definitions
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:48 AM: Your spyware definitions have been updated.
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:48 AM: Your spyware definitions have been updated.
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:47 AM: Your spyware definitions have been updated.
10:46 AM: Your spyware definitions have been updated.
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:41 AM: Your spyware definitions have been updated.
11:43 AM: Traces Found: 0
11:43 AM: Full Sweep has completed. Elapsed time 01:03:10
11:43 AM: File Sweep Complete, Elapsed Time: 00:46:36
10:57 AM: Starting File Sweep
10:57 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:57 AM: Starting Cookie Sweep
10:57 AM: Registry Sweep Complete, Elapsed Time:00:01:42
10:55 AM: Starting Registry Sweep
10:55 AM: Memory Sweep Complete, Elapsed Time: 00:14:42
10:40 AM: Starting Memory Sweep
10:40 AM: Sweep initiated using definitions version 663
10:40 AM: Spy Sweeper started
10:40 AM: | Start of Session, Sunday, April 23, 2006 |
********
10:40 AM: | End of Session, Sunday, April 23, 2006 |
10:40 AM: Your definitions are up to date.
10:40 AM: Updating spyware definitions
10:47 AM: Your spyware definitions have been updated.
10:45 AM: Your spyware definitions have been updated.
10:44 AM: Your spyware definitions have been updated.
10:42 AM: Your spyware definitions have been updated.
1:17 PM: Allowed IE Favorite: Pace Products Products
1:17 PM: Processing Internet Explorer Favorites Alerts
10:41 AM: Your spyware definitions have been updated.
10:39 AM: Your spyware definitions have been updated.
2:08 PM: Allowed Startup entry: SpybotSnD
2:08 PM: Processing Startup Alerts
11:34 AM: Traces Found: 0
11:34 AM: Full Sweep has completed. Elapsed time 00:56:20
11:34 AM: File Sweep Complete, Elapsed Time: 00:40:17
10:54 AM: Starting File Sweep
10:54 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:54 AM: Starting Cookie Sweep
10:53 AM: Registry Sweep Complete, Elapsed Time:00:01:40
10:52 AM: Starting Registry Sweep
10:52 AM: Memory Sweep Complete, Elapsed Time: 00:14:12
10:38 AM: Starting Memory Sweep
10:38 AM: Sweep initiated using definitions version 652
10:38 AM: Spy Sweeper started
10:38 AM: | Start of Session, Sunday, April 09, 2006 |
********
10:38 AM: | End of Session, Sunday, April 09, 2006 |
10:37 AM: Your definitions are up to date.
10:37 AM: Updating spyware definitions
11:38 AM: Your spyware definitions have been updated.
11:38 AM: Your spyware definitions have been updated.
11:37 AM: Your spyware definitions have been updated.
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
10:56 AM: Your spyware definitions have been updated.
7:48 AM: Allowed IE Favorite: gethuman database
7:48 AM: Processing Internet Explorer Favorites Alerts
10:52 PM: Removed Startup entry: CF1DelUnicows
10:52 PM: Removed Startup entry: CF1DelEXE
10:52 PM: Removed Startup entry: CF1DelMsvcr
10:52 PM: Processing Startup Alerts
3:06 PM: Allowed Startup entry: SpybotSnD
3:06 PM: Processing Startup Alerts
11:54 AM: Traces Found: 0
11:54 AM: Full Sweep has completed. Elapsed time 00:58:06
11:54 AM: File Sweep Complete, Elapsed Time: 00:39:49
11:14 AM: Starting File Sweep
11:14 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
11:14 AM: Starting Cookie Sweep
11:14 AM: Registry Sweep Complete, Elapsed Time:00:01:50
11:12 AM: Starting Registry Sweep
11:12 AM: Memory Sweep Complete, Elapsed Time: 00:16:16
10:56 AM: Starting Memory Sweep
10:56 AM: Sweep initiated using definitions version 646
10:56 AM: Spy Sweeper started
10:56 AM: | Start of Session, Sunday, April 02, 2006 |
********
10:56 AM: | End of Session, Sunday, April 02, 2006 |
10:56 AM: Your definitions are up to date.
10:56 AM: Updating spyware definitions
8:41 AM: Your spyware definitions have been updated.
8:30 AM: Your spyware definitions have been updated.
8:29 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:10 AM: Allowed Startup entry: Zone Labs Client
8:10 AM: Processing Startup Alerts
6:02 PM: Allowed Startup entry: nmapp
6:02 PM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
8:25 AM: Allowed Startup entry: E6TaskPanel
8:25 AM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
7:49 AM: Your spyware definitions have been updated.
7:47 AM: Your spyware definitions have been updated.
11:06 AM: Traces Found: 0
11:06 AM: Full Sweep has completed. Elapsed time 00:51:55
11:06 AM: File Sweep Complete, Elapsed Time: 00:35:14
10:30 AM: Starting File Sweep
10:30 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:30 AM: Starting Cookie Sweep
10:30 AM: Registry Sweep Complete, Elapsed Time:00:01:48
10:29 AM: Starting Registry Sweep
10:29 AM: Memory Sweep Complete, Elapsed Time: 00:14:40
10:14 AM: Starting Memory Sweep
10:14 AM: Sweep initiated using definitions version 636
10:14 AM: Spy Sweeper started
10:14 AM: | Start of Session, Sunday, March 19, 2006 |
********
10:14 AM: | End of Session, Sunday, March 19, 2006 |
8:16 AM: Allowed IE Favorite: AutoColorLibrary Color Chip Selector
8:16 AM: Processing Internet Explorer Favorites Alerts
11:06 AM: Your spyware definitions have been updated.
11:06 AM: Your spyware definitions have been updated.
10:52 AM: Your spyware definitions have been updated.
8:12 AM: Allowed IE Favorite: JC Whitney
8:12 AM: Processing Internet Explorer Favorites Alerts
7:22 PM: Allowed IE Favorite: JC Whitney Aftermarket Auto Parts &
Accessories for Cars, Trucks, Motorcycles & More
7:22 PM: Processing Internet Explorer Favorites Alerts
9:08 AM: Allowed IE Favorite: 50 Best Tips & Tricks
9:08 AM: Allowed IE Favorite: Acronym Finder Look up 238,000+ acronyms-
abbreviations & their definitions
9:08 AM: Allowed IE Favorite: Acronym lookup
9:08 AM: Allowed IE Favorite: Acronyms in IRC & eMail; Common Emoticons
(Smileys)
9:08 AM: Allowed IE Favorite: Commissary Shopper News
9:08 AM: Allowed IE Favorite: StarBits - Acronyms, Abbreviations, and so on
9:08 AM: Allowed IE Favorite: AdventurePages.com
9:08 AM: Allowed IE Favorite: American Science & Surplus
9:08 AM: Allowed IE Favorite: Anything I Can Do
9:08 AM: Allowed IE Favorite: AnyWho Internet Directory Assistance; Yellow
Pages, White Pages, Toll-Free Numbers, Maps and Directions
9:08 AM: Allowed IE Favorite: Applebee's $50 card
9:08 AM: Allowed IE Favorite: AH Owners' Assn of British Columbia
9:08 AM: Allowed IE Favorite: AHC Western Australia
9:08 AM: Allowed IE Favorite: Alpine 500
9:08 AM: Allowed IE Favorite: Antique Automobile Radio, modern stereo for
vintage cars
9:08 AM: Allowed IE Favorite: Archives for the healeys@autox.team.net list
Mailing List
9:08 AM: Allowed IE Favorite: Austin Healey 100 Restoration Site
9:08 AM: Allowed IE Favorite: Austin Healey Club (UK)
9:08 AM: Allowed IE Favorite: Austin Healey Club of America
9:08 AM: Allowed IE Favorite: Austin Healey Club of Oregon Home Page
9:08 AM: Allowed IE Favorite: Austin Healey Parts Spares Accessories
Restoration - Cape International
9:08 AM: Allowed IE Favorite: Austin Healey Parts –– Discount Austin Healey
Replacement Parts
9:08 AM: Allowed IE Favorite: Austin-Healey Club USA
9:08 AM: Allowed IE Favorite: Austin-Healey Sports and Touring Club
9:08 AM: Allowed IE Favorite: Austin-Healeys.com, Dickson's
9:08 AM: Allowed IE Favorite: Auto Farm - The Austin Healey Parts Source
9:08 AM: Allowed IE Favorite: automobile-portal.com
9:08 AM: Allowed IE Favorite: AutoWeek - Premier Source for Auto News,
Reviews, Motorsports Info
9:08 AM: Allowed IE Favorite: Big Healeys, Roger Los
9:08 AM: Allowed IE Favorite: British Car Forum Contents
9:08 AM: Allowed IE Favorite: British Car Specialists
9:08 AM: Allowed IE Favorite: British Car Week
9:08 AM: Allowed IE Favorite: British Sports Car Restorations
9:08 AM: Allowed IE Favorite: british tool whitworth tools sockets wrenches,
taps & dies, BSW, BSF, british association
9:08 AM: Allowed IE Favorite: British Wire Wheel Home
9:08 AM: Allowed IE Favorite: Cape International
9:08 AM: Allowed IE Favorite: Car Talk
9:08 AM: Allowed IE Favorite: Cars in Movies
9:08 AM: Allowed IE Favorite: Cascade AH Club, Washington
9:08 AM: Allowed IE Favorite: Classic Auto Lubes
9:08 AM: Allowed IE Favorite: Classic Cars
9:08 AM: Allowed IE Favorite: Clikadjust_0
9:08 AM: Allowed IE Favorite: Complete Automobilist
9:08 AM: Allowed IE Favorite: DIY Autoparts
9:08 AM: Allowed IE Favorite: Don Barrow - For Magnifiers, Tripmeters,
Romers, Average Speed Tables, Plotlights, Compasses, Glowlights, Cagelights,
Chronolig
9:08 AM: Allowed IE Favorite: Dun-Rite Tool Company
9:08 AM: Allowed IE Favorite: Engine Oil Filter Study
9:08 AM: Allowed IE Favorite: Francois Wildi - Tech talks
9:08 AM: Allowed IE Favorite: GGAHC Members Page
9:08 AM: Allowed IE Favorite: Golden Gate Austin Healey Club
9:08 AM: Allowed IE Favorite: Gulf Coast Healey Club
9:08 AM: Allowed IE Favorite: Hazelden, Austin Healey Page
9:08 AM: Allowed IE Favorite: Healey Web - SOL
9:08 AM: Allowed IE Favorite: http--www.bighealey.ltd.uk
9:08 AM: Allowed IE Favorite: Jim Werner's Healey Adventure Site
9:08 AM: Allowed IE Favorite: Just Brits
9:08 AM: Allowed IE Favorite: Macgregor British Car Parts
9:08 AM: Allowed IE Favorite: Minor Classics
9:08 AM: Allowed IE Favorite: Modified Austin Healey Registry
9:08 AM: Allowed IE Favorite: MossMotors.com - Restoration Parts And
Accessories For British Cars
9:08 AM: Allowed IE Favorite: North Texas Austin Healey Club
9:08 AM: Allowed IE Favorite: Northern Bay British Car Club
9:08 AM: Allowed IE Favorite: Pertronix Home
9:08 AM: Allowed IE Favorite: Precision Sportscar
9:08 AM: Allowed IE Favorite: Ruddspeed Ltd - Sales and Restoration of
Austin Healey Classic Cars
9:08 AM: Allowed IE Favorite: Speedograph Richfield ,Classic car,instrument
repairs,speedometer ,clutch, accelerator,Brake cables
9:08 AM: Allowed IE Favorite: Team Healey Texas
9:08 AM: Allowed IE Favorite: The Car Czar - Home
9:08 AM: Allowed IE Favorite: The Healey Factory - Welcome
9:08 AM: Allowed IE Favorite: The Little British Car Company
9:08 AM: Allowed IE Favorite: The MG Store
9:08 AM: Allowed IE Favorite: The United British Sports Car Club
9:08 AM: Allowed IE Favorite: Triple-C Motor Accessories - MINI Cooper, MINI
Cooper S, MG, Triumph etc.
9:08 AM: Allowed IE Favorite: uc2_flat
9:08 AM: Allowed IE Favorite: Utterly Obscure British Car Humour...
9:08 AM: Allowed IE Favorite: Vintage-Sportcar-Touring - Page 1
9:08 AM: Allowed IE Favorite: VintageRally.com - The Source for Vintage and
Historic Auto Rally Information
9:08 AM: Allowed IE Favorite: Wilko's Healey Progress
9:08 AM: Allowed IE Favorite: BART - Bay Area Rapid Transit District
9:08 AM: Allowed IE Favorite: Baylink Ferries of Vallejo California - Ferry
Service to San Francisco
9:08 AM: Allowed IE Favorite: Black Viper's Windows XP Home and Professional
Services Configuration
9:08 AM: Allowed IE Favorite: California Fair Political Practices Commission
-- Welcome to the FPPC Web Site
9:08 AM: Allowed IE Favorite: Centers for Disease Control and Prevention
9:08 AM: Allowed IE Favorite: Classic Motorsports Magazine
9:08 AM: Allowed IE Favorite: Cockeyed.com Always bring your camera
9:08 AM: Allowed IE Favorite: Comics.com Home Page
9:08 AM: Allowed IE Favorite: Annoyances.org
9:08 AM: Allowed IE Favorite: Anonymizer®® Online Privacy and Security
9:08 AM: Allowed IE Favorite: Belarc
9:08 AM: Allowed IE Favorite: Black Viper's Home Page
9:08 AM: Allowed IE Favorite: Bob Cerelli's Windows Page
9:08 AM: Allowed IE Favorite: broadband »» Speed tests
9:08 AM: Allowed IE Favorite: BUSlink USA Inc. -
9:08 AM: Allowed IE Favorite: CompUSA.com - CompUSA.com's Frequent Filler
Program Registration page
9:08 AM: Allowed IE Favorite: Computer Knowledge
9:08 AM: Allowed IE Favorite: Contact Microsoft
9:08 AM: Allowed IE Favorite: Contact Us, .NET Passport
9:08 AM: Allowed IE Favorite: Earthlink Help Page
9:08 AM: Allowed IE Favorite: Everything Computers Home of O'Donnell on
Computers and Personal Computer Secrets
9:08 AM: Allowed IE Favorite: FILExt - The File Extension Source
9:08 AM: Allowed IE Favorite: Howstuffworks How Home Networking Works
9:08 AM: Allowed IE Favorite: LangaList Home Page
9:08 AM: Allowed IE Favorite: Laptop Computing Forum
9:08 AM: Allowed IE Favorite: Microsoft Help and Support
9:08 AM: Allowed IE Favorite: Microsoft TechNet
9:08 AM: Allowed IE Favorite: Microsoft®® .NET Passport One easy way to sign
in and shop online.
9:08 AM: Allowed IE Favorite: NetLingo Dictionary of Internet Words A
Glossary of Online Jargon with Definitions of Terminology & Acronyms
9:08 AM: Allowed IE Favorite: Palm One-Zire21
9:08 AM: Allowed IE Favorite: Performance Tweaks and Tips for Windows 9x-ME-
NT-2000-XP
9:08 AM: Allowed IE Favorite: Pinnacle Systems is the Leader in Digital
Video
9:08 AM: Allowed IE Favorite: Symantec Worldwide Home Page
9:08 AM: Allowed IE Favorite: TechSpot Your PC Hardware resource aka 3D
Spotlight
9:08 AM: Allowed IE Favorite: TechSpot - The PC Enthusiast Information
Resource
9:08 AM: Allowed IE Favorite: TechTV Home
9:08 AM: Allowed IE Favorite: The Hartnett's Page 1
9:08 AM: Allowed IE Favorite: The Kim Komando Radio Show®®--One of the Top
10 Programs in the US
9:08 AM: Allowed IE Favorite: Toshiba Laptop Forum
9:08 AM: Allowed IE Favorite: Update Notification (Leonard Hartnett)
9:08 AM: Allowed IE Favorite: Webroot Software Spyware and Adware
Detection, Removal and Protection
9:08 AM: Allowed IE Favorite: Welcome to EMAZING.com
9:08 AM: Allowed IE Favorite: Window Washer Plugins
9:08 AM: Allowed IE Favorite: Windows Guide Network at WinGuides.com
9:08 AM: Allowed IE Favorite: Windows XP Service Pack 2 (SP2)
9:08 AM: Allowed IE Favorite: WinPlanet - A World of Premium Windows
Information and Tutorials
9:08 AM: Allowed IE Favorite: Your Broderbund Account Home
9:08 AM: Allowed IE Favorite: Zone Labs ZoneAlarm
9:08 AM: Allowed IE Favorite: Darwin Awards
9:08 AM: Allowed IE Favorite: B&Q, diy.com advice
9:08 AM: Allowed IE Favorite: Broderbund
9:08 AM: Allowed IE Favorite: Welcome to Ace Hardware
9:08 AM: Allowed IE Favorite: eBay - The World's Online Marketplace
9:08 AM: Allowed IE Favorite: Federal Communications Commission (FCC) Home
Page
9:08 AM: Allowed IE Favorite: Better Investing - We'll show you how!
9:08 AM: Allowed IE Favorite: Charles Schwab Home
9:08 AM: Allowed IE Favorite: Currency Convertor
9:08 AM: Allowed IE Favorite: DFAS emss, myPay, military pay
9:08 AM: Allowed IE Favorite: Franklin Templeton Home
9:08 AM: Allowed IE Favorite: Motley Fool
9:08 AM: Allowed IE Favorite: myPay Web Site
9:08 AM: Allowed IE Favorite: NETworth TV Show We Show You How to Use the
Net to Increase Your Worth
9:08 AM: Allowed IE Favorite: Quicken.com - Investing Strategies
9:08 AM: Allowed IE Favorite: Quicken.com - Quicken software Home, See Your
Complete Financial Picture in Minutes
9:08 AM: Allowed IE Favorite: Travis CU
9:08 AM: Allowed IE Favorite: U.S. Savings Bonds Online
9:08 AM: Allowed IE Favorite: UBS - UBS Wealth Management USA
9:08 AM: Allowed IE Favorite: Vanguard - The Vanguard Group
9:08 AM: Allowed IE Favorite: Welcome to The Savings Bond Informer
9:08 AM: Allowed IE Favorite: abc7news.com Mr. Food
9:08 AM: Allowed IE Favorite: America's Test Kitchen
9:08 AM: Allowed IE Favorite: Mr. Food - Contact
9:08 AM: Allowed IE Favorite: Compuserve Forum Center
9:08 AM: Allowed IE Favorite: The Toshiba Computing Forum powered by
CompuServe.
9:08 AM: Allowed IE Favorite: Gas Prices in California
9:08 AM: Allowed IE Favorite: GasBuddy.com - Find cheap gas prices in your
city
9:08 AM: Allowed IE Favorite: globeofblogs.com
9:08 AM: Allowed IE Favorite: ADA Home Page - ada.gov - Information and
Technical Assistance on the Americans with Disabilities Act
9:08 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:08 AM: Allowed IE Favorite: CA DMV
9:08 AM: Allowed IE Favorite: California State Assembly
9:08 AM: Allowed IE Favorite: California State Senate
9:08 AM: Allowed IE Favorite: City of Fairfield
9:08 AM: Allowed IE Favorite: City of Vacaville
9:08 AM: Allowed IE Favorite: Commissaries.com - Welcome!
9:08 AM: Allowed IE Favorite: David Grant Medical Center
9:08 AM: Allowed IE Favorite: EPA AIRNow
9:08 AM: Allowed IE Favorite: Find California Code
9:08 AM: Allowed IE Favorite: FirstGov -- Your First Click to the US
Government
9:08 AM: Allowed IE Favorite: Franchise Tax Board - Homepage
9:08 AM: Allowed IE Favorite: http--www.co.solano.ca.us-
9:08 AM: Allowed IE Favorite: IRS.gov Home
9:08 AM: Allowed IE Favorite: MOAA Legislative Affairs
9:08 AM: Allowed IE Favorite: Sacramento County, CA
9:08 AM: Allowed IE Favorite: Sacramento, City
9:08 AM: Allowed IE Favorite: Search Bills
9:08 AM: Allowed IE Favorite: Solano County
9:08 AM: Allowed IE Favorite: State of California
9:08 AM: Allowed IE Favorite: State of Nevada web site
9:08 AM: Allowed IE Favorite: The official U.S. time - clock
9:08 AM: Allowed IE Favorite: Travis Air Force Base, California - Public Web
Site
9:08 AM: Allowed IE Favorite: H3R Full service Halon and Clean Agent
Specialist
9:08 AM: Allowed IE Favorite: Harbor Freight Tools - Quality Tools at the
Lowest Prices
9:08 AM: Allowed IE Favorite: Hartnett Family Genealogy Forum
9:08 AM: Allowed IE Favorite: health facts and fears
9:08 AM: Allowed IE Favorite: Hoover's Online - Home Page
9:08 AM: Allowed IE Favorite: inkjet & toner refill kits
9:08 AM: Allowed IE Favorite: Inkjet cartridges and printer supplies -
InkSell.com
9:08 AM: Allowed IE Favorite: Intelius The world's largest and most accurate
public records source!
9:08 AM: Allowed IE Favorite: JOKES.COM HOME
9:08 AM: Allowed IE Favorite: KGO AM 810 Legal Resource Center Featuring
Leading Attorneys
9:08 AM: Allowed IE Favorite: Sacramento County Bar Association WebSite
9:08 AM: Allowed IE Favorite: FreedomWare
9:08 AM: Allowed IE Favorite: Leonard's Page 1
9:08 AM: Allowed IE Favorite: Toshiba Computer Accessories
9:08 AM: Allowed IE Favorite: Toshiba Product Information
9:08 AM: Allowed IE Favorite: Toshiba Solutions
9:08 AM: Allowed IE Favorite: Toshiba Warranty & Service Programs
9:08 AM: Allowed IE Favorite: Ask IRIS
9:08 AM: Allowed IE Favorite: Email Subscription
9:08 AM: Allowed IE Favorite: How to Get Help
9:08 AM: Allowed IE Favorite: Software Downloads
9:08 AM: Allowed IE Favorite: Support Bulletins
9:08 AM: Allowed IE Favorite: Virtual Tech
9:08 AM: Allowed IE Favorite: mamarocks
9:08 AM: Allowed IE Favorite: abc7news.com
9:08 AM: Allowed IE Favorite: ABCNEWS.com Home
9:08 AM: Allowed IE Favorite: AETV.com
9:08 AM: Allowed IE Favorite: C-SPAN Full Schedule
9:08 AM: Allowed IE Favorite: CBS 5 - San Francisco
9:08 AM: Allowed IE Favorite: CNN.com
9:08 AM: Allowed IE Favorite: Dateline Front Page 1110 PM ET Sunday, July
07, 2002
9:08 AM: Allowed IE Favorite: FOXNews.com
9:08 AM: Allowed IE Favorite: History Channel
9:08 AM: Allowed IE Favorite: Home & Garden Television
9:08 AM: Allowed IE Favorite: KGO
9:08 AM: Allowed IE Favorite: KOVR13.COM YOUR JUMPPOINT TO SACRAMENTO -
STOCKTON - MODESTO
9:08 AM: Allowed IE Favorite: KQED Public TV, Radio and Interactive
9:08 AM: Allowed IE Favorite: KRON 4 Home
9:08 AM: Allowed IE Favorite: KSFO AM 560, Gold
9:08 AM: Allowed IE Favorite: KSFO AM 560
9:08 AM: Allowed IE Favorite: KVIE - PBS for California's Central Valley -
KVIE Channel 6 & Cable 7
9:08 AM: Allowed IE Favorite: National Review Online
9:08 AM: Allowed IE Favorite: News10 - Index Page
9:08 AM: Allowed IE Favorite: Outdoor Life Network - Home
9:08 AM: Allowed IE Favorite: MSN.com
9:08 AM: Allowed IE Favorite: Customize Links
9:08 AM: Allowed IE Favorite: Windows Media
9:08 AM: Allowed IE Favorite: Windows
9:08 AM: Allowed IE Favorite: Radio Station Guide
9:08 AM: Allowed IE Favorite: Real.com R

#13 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 12:50 PM

It looks like section 3 of 4 repeated itself. Hopefully, the following is section 4 which includes the HijackThis log:

10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
10:28 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:27 AM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:27 AM: Shield States
10:27 AM: Spyware Definitions: 723
10:26 AM: Spy Sweeper 5.0.5.1286 started
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
10:52 PM: Tamper Detection
9:22 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:21 PM: Warning: A required privilege is not held by the client
9:21 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
9:20 PM: Warning: A required privilege is not held by the client
9:20 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
9:20 PM: Shield States
9:20 PM: Spyware Definitions: 723
9:19 PM: Spy Sweeper 5.0.5.1286 started
8:38 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
8:37 PM: Automated check for program update in progress.
8:34 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
8:32 PM: Warning: A required privilege is not held by the client
8:32 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
8:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 PM: Shield States
8:32 PM: Spyware Definitions: 723
8:31 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:18 PM: Warning: A required privilege is not held by the client
8:18 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:17 PM: Shield States
8:17 PM: Spyware Definitions: 723
8:16 PM: Spy Sweeper 5.0.5.1286 started
10:37 PM: Spy Sweeper 5.0.5.1286 started
10:28 PM: Spy Sweeper 5.0.5.1286 started
3:06 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
3:05 PM: BHO Shield: found: AcroIEHelper.dll-- BHO installation denied at
user request
1:49 PM: Your definitions are up to date.
1:49 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:29 PM: Tamper Detection
12:45 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
12:44 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
12:43 PM: Shield States
12:43 PM: Spyware Definitions: 723
12:42 PM: Spy Sweeper 5.0.5.1286 started
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
10:48 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
10:47 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:46 AM: Shield States
10:46 AM: Spyware Definitions: 723
10:45 AM: Spy Sweeper 5.0.5.1286 started
10:48 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
10:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
10:48 PM: IE Tracking Cookies Shield: Removed clickzs cookie
10:48 PM: Warning: A required privilege is not held by the client
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
10:47 PM: Shield States
10:47 PM: Spyware Definitions: 723
10:46 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
1:15 PM: Warning: A required privilege is not held by the client
1:15 PM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
1:14 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:13 PM: Shield States
1:13 PM: Spyware Definitions: 722
1:12 PM: Spy Sweeper 5.0.5.1286 started
8:33 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
8:33 AM: Warning: A required privilege is not held by the client
8:33 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
8:32 AM: Warning: A required privilege is not held by the client
8:32 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:32 AM: Shield States
8:32 AM: Spyware Definitions: 722
8:31 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: On
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
8:03 AM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
8:03 AM: Shield States
8:02 AM: Spyware Definitions: 722
8:01 AM: Spy Sweeper 5.0.5.1286 started
9:18 PM: Common Ad Sites Shield: On
8:53 PM: Spy Sweeper 5.0.5.1286 started
8:35 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:15 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
7:15 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:15 PM: Shield States
7:15 PM: Spyware Definitions: 722
7:14 PM: Spy Sweeper 5.0.5.1286 started
6:49 PM: Warning: The handle is invalid
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
6:48 PM: Warning: A required privilege is not held by the client
6:48 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Spy Installation Shield: On
6:48 PM: Warning: A required privilege is not held by the client
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
6:48 PM: Shield States
6:47 PM: Spyware Definitions: 722
6:44 PM: Spy Sweeper 5.0.5.1286 started
4:29 PM: Spy Sweeper 5.0.5.1286 started
4:11 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:07 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
4:06 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
3:32 PM: Warning: A required privilege is not held by the client
Spy Communication Shield: On
3:32 PM: Warning: A required privilege is not held by the client
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
3:31 PM: Shield States
3:31 PM: Spyware Definitions: 722
3:30 PM: Spy Sweeper 5.0.5.1286 started
1:48 PM: Your spyware definitions have been updated.
1:48 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
1:19 PM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
1:19 PM: Shield States
1:19 PM: Spyware Definitions: 721
1:18 PM: Spy Sweeper 5.0.5.1286 started
8:56 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
7:50 AM: Warning: Access is denied
7:50 AM: Warning: A required privilege is not held by the client
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
7:50 AM: Warning: A required privilege is not held by the client
7:50 AM: Warning: A required privilege is not held by the client
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
7:50 AM: Warning: A required privilege is not held by the client
ActiveX Shield: On
7:50 AM: Warning: A required privilege is not held by the client
Windows Messenger Service Shield: On
7:50 AM: Warning: The handle is invalid
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: On
7:50 AM: Shield States
7:50 AM: Spyware Definitions: 721
7:49 AM: Spy Sweeper 5.0.5.1286 started
10:18 PM: IE Tracking Cookies Shield: On
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:14 PM: Shield States
10:14 PM: Spyware Definitions: 721
10:13 PM: Spy Sweeper 5.0.5.1286 started
9:50 PM: Spy Sweeper 5.0.5.1286 started
1:49 PM: Your spyware definitions have been updated.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:41 PM: Shield States
1:41 PM: Spyware Definitions: 691
1:39 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:21 PM: Shield States
1:21 PM: Spyware Definitions: 721
1:20 PM: Spy Sweeper 5.0.5.1286 started
11:46 AM: Spyware Definitions: 721
11:45 AM: Spy Sweeper 5.0.5.1286 started
11:33 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: There is a problem reaching the server. The cause may be in your
connection, or on the server. Please try again later.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:08 PM: Shield States
2:08 PM: Spyware Definitions: 718
2:06 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:53 AM: Warning: Access is denied
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:52 AM: Shield States
9:52 AM: Spyware Definitions: 718
9:51 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:43 AM: Shield States
9:43 AM: Spyware Definitions: 718
9:42 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:28 AM: Shield States
9:28 AM: Spyware Definitions: 718
9:27 AM: Spy Sweeper 5.0.5.1286 started
9:09 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:15 PM: Shield States
2:15 PM: Spyware Definitions: 718
2:14 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:39 AM: Shield States
9:39 AM: Spyware Definitions: 718
9:38 AM: Spy Sweeper 5.0.5.1286 started
9:12 PM: Your definitions are up to date.
9:12 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: Failed to delete profile shadow file
"C:\WINDOWS\Temp\SST3D.tmp.log". Reason: The process cannot access the file
because it is being used by another process
9:48 AM: Warning: S-1-5-21-1497286466-1809067083-516276246-1006 could not be
unmapped. Error Code 87
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:48 AM: Shield States
9:48 AM: Spyware Definitions: 718
9:46 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:43 PM: Tamper Detection
9:11 PM: Your definitions are up to date.
9:10 PM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\WINDOWS\SYSTEM32\ZONELABS\VSMON.EXE
1:19 PM: Tamper Detection
9:36 AM: Warning: Access is denied
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
9:35 AM: Warning: Access is denied
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:34 AM: Shield States
9:34 AM: Spyware Definitions: 718
9:33 AM: Spy Sweeper 5.0.5.1286 started
9:10 PM: Your spyware definitions have been updated.
9:09 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
3:39 PM: Shield States
3:39 PM: Spyware Definitions: 717
3:38 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:18 AM: Shield States
9:18 AM: Spyware Definitions: 717
9:17 AM: Spy Sweeper 5.0.5.1286 started
9:08 PM: Your definitions are up to date.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:46 PM: Shield States
8:45 PM: Spyware Definitions: 717
8:44 PM: Spy Sweeper 5.0.5.1286 started
8:21 PM: Spy Sweeper 5.0.5.1286 started
7:19 PM: Spy Sweeper 5.0.5.1286 started
4:51 PM: Your spyware definitions have been updated.
4:50 PM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
4:12 PM: Shield States
4:12 PM: Spyware Definitions: 716
4:11 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
6:19 PM: Shield States
6:18 PM: Spyware Definitions: 716
6:17 PM: Spy Sweeper 5.0.5.1286 started
4:57 PM: Spy Sweeper 5.0.5.1286 started
2:55 PM: Your spyware definitions have been updated.
10:29 PM: IE Security Shield: found: C:\PROGRAM FILES\SPYBOT - SEARCH &
DESTROY\SPYBOTSD.EXE -- IE Security modification denied
10:27 PM: BHO Shield: found: SDHelper.dll-- BHO installation allowed at user
request
4:31 PM: Removal process completed. Elapsed time 00:00:16
4:31 PM: Quarantining All Traces: mywebsearch cookie
4:31 PM: Quarantining All Traces: 2o7.net cookie
4:31 PM: Removal process initiated
4:29 PM: Traces Found: 2
4:29 PM: Full Sweep has completed. Elapsed time 01:35:02
4:29 PM: File Sweep Complete, Elapsed Time: 01:07:04
3:22 PM: Starting File Sweep
3:22 PM: Cookie Sweep Complete, Elapsed Time: 00:00:01
3:22 PM: leonard@mywebsearch[2].txt (ID = 3051)
3:22 PM: Found Spy Cookie: mywebsearch cookie
3:22 PM: leonard@2o7[2].txt (ID = 1957)
3:22 PM: Found Spy Cookie: 2o7.net cookie
3:22 PM: Starting Cookie Sweep
3:22 PM: Registry Sweep Complete, Elapsed Time:00:02:17
3:20 PM: Starting Registry Sweep
3:20 PM: Memory Sweep Complete, Elapsed Time: 00:25:26
2:54 PM: Starting Memory Sweep
2:54 PM: Sweep initiated using definitions version 714
2:54 PM: Spy Sweeper started
2:54 PM: | Start of Session, Monday, July 10, 2006 |
********
2:54 PM: | End of Session, Monday, July 10, 2006 |
2:54 PM: Your definitions are up to date.
2:54 PM: Updating spyware definitions
3:25 PM: Allowed Startup entry: srePostpone
3:25 PM: Processing Startup Alerts
1:37 PM: Your spyware definitions have been updated.
1:36 PM: Your spyware definitions have been updated.
9:51 PM: Allowed IE Favorite: Satellite Tracking
9:51 PM: Processing Internet Explorer Favorites Alerts
9:37 PM: Allowed IE Favorite: International Space Station
9:37 PM: Processing Internet Explorer Favorites Alerts
1:35 PM: Your definitions are up to date.
8:31 AM: Allowed IE Favorite: KCRA 3 Home
8:31 AM: Processing Internet Explorer Favorites Alerts
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
5:17 PM: The Spy Communication shield has blocked access to:
searchportal.information.com
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Allowed Startup entry: MyWebSearch Email Plugin
8:40 PM: Processing Startup Alerts
8:40 PM: Allowed Startup entry: My Web Search Bar
8:40 PM: Processing Startup Alerts
8:40 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
8:39 PM: BHO Shield: found: -- BHO installation allowed at user request
8:39 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
1:33 PM: Your spyware definitions have been updated.
1:32 PM: Your spyware definitions have been updated.
1:31 PM: Your spyware definitions have been updated.
1:30 PM: Your spyware definitions have been updated.
1:29 PM: Your spyware definitions have been updated.
2:52 PM: Traces Found: 0
2:52 PM: Full Sweep has completed. Elapsed time 01:23:12
2:52 PM: File Sweep Complete, Elapsed Time: 01:00:51
1:51 PM: Starting File Sweep
1:51 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
1:51 PM: Starting Cookie Sweep
1:51 PM: Registry Sweep Complete, Elapsed Time:00:01:46
1:49 PM: Starting Registry Sweep
1:49 PM: Memory Sweep Complete, Elapsed Time: 00:20:23
1:29 PM: Starting Memory Sweep
1:29 PM: Sweep initiated using definitions version 706
1:29 PM: Spy Sweeper started
1:29 PM: | Start of Session, Sunday, June 25, 2006 |
********
1:29 PM: | End of Session, Sunday, June 25, 2006 |
1:27 PM: Your definitions are up to date.
1:27 PM: Updating spyware definitions
10:47 AM: Removed Startup entry: srePostpone
10:47 AM: Processing Startup Alerts
2:37 PM: Your spyware definitions have been updated.
2:37 PM: Your spyware definitions have been updated.
2:36 PM: Your spyware definitions have been updated.
2:35 PM: Your spyware definitions have been updated.
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
9:57 PM: The Spy Communication shield has blocked access to: pussyslot.com
2:35 PM: Your spyware definitions have been updated.
2:32 PM: Your spyware definitions have been updated.
8:41 AM: Allowed Startup entry: Zone Labs Client
8:41 AM: Processing Startup Alerts
2:32 PM: Your spyware definitions have been updated.
2:31 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
2:30 PM: Your spyware definitions have been updated.
6:38 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
6:37 PM: Your spyware definitions have been updated.
8:28 AM: Allowed Startup entry: updateMgr
8:28 AM: Processing Startup Alerts
6:34 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
6:33 PM: Your spyware definitions have been updated.
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Allowed Startup entry: MyWebSearch Email Plugin
7:19 PM: Processing Startup Alerts
7:19 PM: Allowed Startup entry: My Web Search Bar
7:19 PM: Processing Startup Alerts
7:19 PM: BHO Shield: found: MWSSRCAS.DLL-- BHO installation allowed at user
request
7:18 PM: BHO Shield: found: -- BHO installation allowed at user request
7:18 PM: BHO Shield: found: MWSBAR.DLL-- BHO installation allowed at user
request
6:29 PM: Your spyware definitions have been updated.
6:28 PM: Your spyware definitions have been updated.
6:27 PM: Your spyware definitions have been updated.
9:45 PM: The Spy Communication shield has blocked access to: csx.adservs.com
9:44 PM: The Spy Communication shield has blocked access to: csx.adservs.com
8:09 PM: Allowed IE Favorite: AFPC - Air Force Personnel Center
8:09 PM: Allowed IE Favorite: Air Force Link - Home
8:09 PM: Processing Internet Explorer Favorites Alerts
10:11 AM: Your spyware definitions have been updated.
9:48 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:48 AM: Processing Internet Explorer Favorites Alerts
9:43 AM: Allowed IE Favorite: Air Force Link - Home
9:43 AM: Processing Internet Explorer Favorites Alerts
10:10 AM: Your spyware definitions have been updated.
10:09 AM: Your spyware definitions have been updated.
10:08 AM: Your spyware definitions have been updated.
7:53 AM: Allowed Startup entry: WorkFlowTray
7:53 AM: Allowed Startup entry: Opware14
7:53 AM: Allowed Startup entry: OpScheduler
7:53 AM: Allowed Startup entry: CamCheck
7:53 AM: Allowed Startup entry: Apoint
7:53 AM: Allowed Startup entry: AdaptecDirectCD
7:53 AM: Processing Startup Alerts
7:52 AM: Removed Startup entry: TosHKCW.exe
7:52 AM: Removed Startup entry: Share-to-Web Namespace Daemon
7:52 AM: Removed Startup entry: 00THotkey
7:52 AM: Removed Startup entry: Corel Desktop Application Director 8.LNK
7:52 AM: Removed Startup entry: Screen Shot Deluxe 4.0.lnk
7:52 AM: Removed Startup entry: CreataCard Gold 3 Forget Me Not Reminders
Tray Icon.lnk
7:52 AM: Removed Startup entry: Forget Me Not.lnk
7:52 AM: Removed Startup entry: Microsoft Works Calendar Reminders.lnk
7:52 AM: Processing Startup Alerts
5:52 PM: Allowed Startup entry: MSConfig
5:52 PM: Processing Startup Alerts
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
10:05 AM: Your spyware definitions have been updated.
11:07 AM: Traces Found: 0
11:07 AM: Full Sweep has completed. Elapsed time 01:03:50
11:07 AM: File Sweep Complete, Elapsed Time: 00:46:05
10:21 AM: Starting File Sweep
10:21 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:21 AM: Starting Cookie Sweep
10:21 AM: Registry Sweep Complete, Elapsed Time:00:01:39
10:19 AM: Starting Registry Sweep
10:19 AM: Memory Sweep Complete, Elapsed Time: 00:15:56
10:03 AM: Starting Memory Sweep
10:03 AM: Sweep initiated using definitions version 670
10:03 AM: Spy Sweeper started
10:03 AM: | Start of Session, Sunday, May 07, 2006 |
********
10:03 AM: | End of Session, Sunday, May 07, 2006 |
10:03 AM: Your definitions are up to date.
10:03 AM: Updating spyware definitions
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:42 PM: The Spy Communication shield has blocked access to: www.easypic.com
10:48 AM: Your spyware definitions have been updated.
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:07 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:48 AM: Your spyware definitions have been updated.
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:12 PM: The Spy Communication shield has blocked access to:
static.zangocash.com
10:47 AM: Your spyware definitions have been updated.
10:46 AM: Your spyware definitions have been updated.
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:37 PM: The Spy Communication shield has blocked access to:
download.movienetworks.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:33 PM: The Spy Communication shield has blocked access to:
www.dansmovies.com
10:41 AM: Your spyware definitions have been updated.
11:43 AM: Traces Found: 0
11:43 AM: Full Sweep has completed. Elapsed time 01:03:10
11:43 AM: File Sweep Complete, Elapsed Time: 00:46:36
10:57 AM: Starting File Sweep
10:57 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:57 AM: Starting Cookie Sweep
10:57 AM: Registry Sweep Complete, Elapsed Time:00:01:42
10:55 AM: Starting Registry Sweep
10:55 AM: Memory Sweep Complete, Elapsed Time: 00:14:42
10:40 AM: Starting Memory Sweep
10:40 AM: Sweep initiated using definitions version 663
10:40 AM: Spy Sweeper started
10:40 AM: | Start of Session, Sunday, April 23, 2006 |
********
10:40 AM: | End of Session, Sunday, April 23, 2006 |
10:40 AM: Your definitions are up to date.
10:40 AM: Updating spyware definitions
10:47 AM: Your spyware definitions have been updated.
10:45 AM: Your spyware definitions have been updated.
10:44 AM: Your spyware definitions have been updated.
10:42 AM: Your spyware definitions have been updated.
1:17 PM: Allowed IE Favorite: Pace Products Products
1:17 PM: Processing Internet Explorer Favorites Alerts
10:41 AM: Your spyware definitions have been updated.
10:39 AM: Your spyware definitions have been updated.
2:08 PM: Allowed Startup entry: SpybotSnD
2:08 PM: Processing Startup Alerts
11:34 AM: Traces Found: 0
11:34 AM: Full Sweep has completed. Elapsed time 00:56:20
11:34 AM: File Sweep Complete, Elapsed Time: 00:40:17
10:54 AM: Starting File Sweep
10:54 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:54 AM: Starting Cookie Sweep
10:53 AM: Registry Sweep Complete, Elapsed Time:00:01:40
10:52 AM: Starting Registry Sweep
10:52 AM: Memory Sweep Complete, Elapsed Time: 00:14:12
10:38 AM: Starting Memory Sweep
10:38 AM: Sweep initiated using definitions version 652
10:38 AM: Spy Sweeper started
10:38 AM: | Start of Session, Sunday, April 09, 2006 |
********
10:38 AM: | End of Session, Sunday, April 09, 2006 |
10:37 AM: Your definitions are up to date.
10:37 AM: Updating spyware definitions
11:38 AM: Your spyware definitions have been updated.
11:38 AM: Your spyware definitions have been updated.
11:37 AM: Your spyware definitions have been updated.
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:38 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
11:04 AM: The Spy Communication shield has blocked access to:
searchportal.information.com
10:56 AM: Your spyware definitions have been updated.
7:48 AM: Allowed IE Favorite: gethuman database
7:48 AM: Processing Internet Explorer Favorites Alerts
10:52 PM: Removed Startup entry: CF1DelUnicows
10:52 PM: Removed Startup entry: CF1DelEXE
10:52 PM: Removed Startup entry: CF1DelMsvcr
10:52 PM: Processing Startup Alerts
3:06 PM: Allowed Startup entry: SpybotSnD
3:06 PM: Processing Startup Alerts
11:54 AM: Traces Found: 0
11:54 AM: Full Sweep has completed. Elapsed time 00:58:06
11:54 AM: File Sweep Complete, Elapsed Time: 00:39:49
11:14 AM: Starting File Sweep
11:14 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
11:14 AM: Starting Cookie Sweep
11:14 AM: Registry Sweep Complete, Elapsed Time:00:01:50
11:12 AM: Starting Registry Sweep
11:12 AM: Memory Sweep Complete, Elapsed Time: 00:16:16
10:56 AM: Starting Memory Sweep
10:56 AM: Sweep initiated using definitions version 646
10:56 AM: Spy Sweeper started
10:56 AM: | Start of Session, Sunday, April 02, 2006 |
********
10:56 AM: | End of Session, Sunday, April 02, 2006 |
10:56 AM: Your definitions are up to date.
10:56 AM: Updating spyware definitions
8:41 AM: Your spyware definitions have been updated.
8:30 AM: Your spyware definitions have been updated.
8:29 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:28 AM: Your spyware definitions have been updated.
8:10 AM: Allowed Startup entry: Zone Labs Client
8:10 AM: Processing Startup Alerts
6:02 PM: Allowed Startup entry: nmapp
6:02 PM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
8:25 AM: Allowed Startup entry: E6TaskPanel
8:25 AM: Processing Startup Alerts
8:24 AM: Your spyware definitions have been updated.
7:49 AM: Your spyware definitions have been updated.
7:47 AM: Your spyware definitions have been updated.
11:06 AM: Traces Found: 0
11:06 AM: Full Sweep has completed. Elapsed time 00:51:55
11:06 AM: File Sweep Complete, Elapsed Time: 00:35:14
10:30 AM: Starting File Sweep
10:30 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:30 AM: Starting Cookie Sweep
10:30 AM: Registry Sweep Complete, Elapsed Time:00:01:48
10:29 AM: Starting Registry Sweep
10:29 AM: Memory Sweep Complete, Elapsed Time: 00:14:40
10:14 AM: Starting Memory Sweep
10:14 AM: Sweep initiated using definitions version 636
10:14 AM: Spy Sweeper started
10:14 AM: | Start of Session, Sunday, March 19, 2006 |
********
10:14 AM: | End of Session, Sunday, March 19, 2006 |
8:16 AM: Allowed IE Favorite: AutoColorLibrary Color Chip Selector
8:16 AM: Processing Internet Explorer Favorites Alerts
11:06 AM: Your spyware definitions have been updated.
11:06 AM: Your spyware definitions have been updated.
10:52 AM: Your spyware definitions have been updated.
8:12 AM: Allowed IE Favorite: JC Whitney
8:12 AM: Processing Internet Explorer Favorites Alerts
7:22 PM: Allowed IE Favorite: JC Whitney Aftermarket Auto Parts &
Accessories for Cars, Trucks, Motorcycles & More
7:22 PM: Processing Internet Explorer Favorites Alerts
9:08 AM: Allowed IE Favorite: 50 Best Tips & Tricks
9:08 AM: Allowed IE Favorite: Acronym Finder Look up 238,000+ acronyms-
abbreviations & their definitions
9:08 AM: Allowed IE Favorite: Acronym lookup
9:08 AM: Allowed IE Favorite: Acronyms in IRC & eMail; Common Emoticons
(Smileys)
9:08 AM: Allowed IE Favorite: Commissary Shopper News
9:08 AM: Allowed IE Favorite: StarBits - Acronyms, Abbreviations, and so on
9:08 AM: Allowed IE Favorite: AdventurePages.com
9:08 AM: Allowed IE Favorite: American Science & Surplus
9:08 AM: Allowed IE Favorite: Anything I Can Do
9:08 AM: Allowed IE Favorite: AnyWho Internet Directory Assistance; Yellow
Pages, White Pages, Toll-Free Numbers, Maps and Directions
9:08 AM: Allowed IE Favorite: Applebee's $50 card
9:08 AM: Allowed IE Favorite: AH Owners' Assn of British Columbia
9:08 AM: Allowed IE Favorite: AHC Western Australia
9:08 AM: Allowed IE Favorite: Alpine 500
9:08 AM: Allowed IE Favorite: Antique Automobile Radio, modern stereo for
vintage cars
9:08 AM: Allowed IE Favorite: Archives for the healeys@autox.team.net list
Mailing List
9:08 AM: Allowed IE Favorite: Austin Healey 100 Restoration Site
9:08 AM: Allowed IE Favorite: Austin Healey Club (UK)
9:08 AM: Allowed IE Favorite: Austin Healey Club of America
9:08 AM: Allowed IE Favorite: Austin Healey Club of Oregon Home Page
9:08 AM: Allowed IE Favorite: Austin Healey Parts Spares Accessories
Restoration - Cape International
9:08 AM: Allowed IE Favorite: Austin Healey Parts –– Discount Austin Healey
Replacement Parts
9:08 AM: Allowed IE Favorite: Austin-Healey Club USA
9:08 AM: Allowed IE Favorite: Austin-Healey Sports and Touring Club
9:08 AM: Allowed IE Favorite: Austin-Healeys.com, Dickson's
9:08 AM: Allowed IE Favorite: Auto Farm - The Austin Healey Parts Source
9:08 AM: Allowed IE Favorite: automobile-portal.com
9:08 AM: Allowed IE Favorite: AutoWeek - Premier Source for Auto News,
Reviews, Motorsports Info
9:08 AM: Allowed IE Favorite: Big Healeys, Roger Los
9:08 AM: Allowed IE Favorite: British Car Forum Contents
9:08 AM: Allowed IE Favorite: British Car Specialists
9:08 AM: Allowed IE Favorite: British Car Week
9:08 AM: Allowed IE Favorite: British Sports Car Restorations
9:08 AM: Allowed IE Favorite: british tool whitworth tools sockets wrenches,
taps & dies, BSW, BSF, british association
9:08 AM: Allowed IE Favorite: British Wire Wheel Home
9:08 AM: Allowed IE Favorite: Cape International
9:08 AM: Allowed IE Favorite: Car Talk
9:08 AM: Allowed IE Favorite: Cars in Movies
9:08 AM: Allowed IE Favorite: Cascade AH Club, Washington
9:08 AM: Allowed IE Favorite: Classic Auto Lubes
9:08 AM: Allowed IE Favorite: Classic Cars
9:08 AM: Allowed IE Favorite: Clikadjust_0
9:08 AM: Allowed IE Favorite: Complete Automobilist
9:08 AM: Allowed IE Favorite: DIY Autoparts
9:08 AM: Allowed IE Favorite: Don Barrow - For Magnifiers, Tripmeters,
Romers, Average Speed Tables, Plotlights, Compasses, Glowlights, Cagelights,
Chronolig
9:08 AM: Allowed IE Favorite: Dun-Rite Tool Company
9:08 AM: Allowed IE Favorite: Engine Oil Filter Study
9:08 AM: Allowed IE Favorite: Francois Wildi - Tech talks
9:08 AM: Allowed IE Favorite: GGAHC Members Page
9:08 AM: Allowed IE Favorite: Golden Gate Austin Healey Club
9:08 AM: Allowed IE Favorite: Gulf Coast Healey Club
9:08 AM: Allowed IE Favorite: Hazelden, Austin Healey Page
9:08 AM: Allowed IE Favorite: Healey Web - SOL
9:08 AM: Allowed IE Favorite: http--www.bighealey.ltd.uk
9:08 AM: Allowed IE Favorite: Jim Werner's Healey Adventure Site
9:08 AM: Allowed IE Favorite: Just Brits
9:08 AM: Allowed IE Favorite: Macgregor British Car Parts
9:08 AM: Allowed IE Favorite: Minor Classics
9:08 AM: Allowed IE Favorite: Modified Austin Healey Registry
9:08 AM: Allowed IE Favorite: MossMotors.com - Restoration Parts And
Accessories For British Cars
9:08 AM: Allowed IE Favorite: North Texas Austin Healey Club
9:08 AM: Allowed IE Favorite: Northern Bay British Car Club
9:08 AM: Allowed IE Favorite: Pertronix Home
9:08 AM: Allowed IE Favorite: Precision Sportscar
9:08 AM: Allowed IE Favorite: Ruddspeed Ltd - Sales and Restoration of
Austin Healey Classic Cars
9:08 AM: Allowed IE Favorite: Speedograph Richfield ,Classic car,instrument
repairs,speedometer ,clutch, accelerator,Brake cables
9:08 AM: Allowed IE Favorite: Team Healey Texas
9:08 AM: Allowed IE Favorite: The Car Czar - Home
9:08 AM: Allowed IE Favorite: The Healey Factory - Welcome
9:08 AM: Allowed IE Favorite: The Little British Car Company
9:08 AM: Allowed IE Favorite: The MG Store
9:08 AM: Allowed IE Favorite: The United British Sports Car Club
9:08 AM: Allowed IE Favorite: Triple-C Motor Accessories - MINI Cooper, MINI
Cooper S, MG, Triumph etc.
9:08 AM: Allowed IE Favorite: uc2_flat
9:08 AM: Allowed IE Favorite: Utterly Obscure British Car Humour...
9:08 AM: Allowed IE Favorite: Vintage-Sportcar-Touring - Page 1
9:08 AM: Allowed IE Favorite: VintageRally.com - The Source for Vintage and
Historic Auto Rally Information
9:08 AM: Allowed IE Favorite: Wilko's Healey Progress
9:08 AM: Allowed IE Favorite: BART - Bay Area Rapid Transit District
9:08 AM: Allowed IE Favorite: Baylink Ferries of Vallejo California - Ferry
Service to San Francisco
9:08 AM: Allowed IE Favorite: Black Viper's Windows XP Home and Professional
Services Configuration
9:08 AM: Allowed IE Favorite: California Fair Political Practices Commission
-- Welcome to the FPPC Web Site
9:08 AM: Allowed IE Favorite: Centers for Disease Control and Prevention
9:08 AM: Allowed IE Favorite: Classic Motorsports Magazine
9:08 AM: Allowed IE Favorite: Cockeyed.com Always bring your camera
9:08 AM: Allowed IE Favorite: Comics.com Home Page
9:08 AM: Allowed IE Favorite: Annoyances.org
9:08 AM: Allowed IE Favorite: Anonymizer®® Online Privacy and Security
9:08 AM: Allowed IE Favorite: Belarc
9:08 AM: Allowed IE Favorite: Black Viper's Home Page
9:08 AM: Allowed IE Favorite: Bob Cerelli's Windows Page
9:08 AM: Allowed IE Favorite: broadband »» Speed tests
9:08 AM: Allowed IE Favorite: BUSlink USA Inc. -
9:08 AM: Allowed IE Favorite: CompUSA.com - CompUSA.com's Frequent Filler
Program Registration page
9:08 AM: Allowed IE Favorite: Computer Knowledge
9:08 AM: Allowed IE Favorite: Contact Microsoft
9:08 AM: Allowed IE Favorite: Contact Us, .NET Passport
9:08 AM: Allowed IE Favorite: Earthlink Help Page
9:08 AM: Allowed IE Favorite: Everything Computers Home of O'Donnell on
Computers and Personal Computer Secrets
9:08 AM: Allowed IE Favorite: FILExt - The File Extension Source
9:08 AM: Allowed IE Favorite: Howstuffworks How Home Networking Works
9:08 AM: Allowed IE Favorite: LangaList Home Page
9:08 AM: Allowed IE Favorite: Laptop Computing Forum
9:08 AM: Allowed IE Favorite: Microsoft Help and Support
9:08 AM: Allowed IE Favorite: Microsoft TechNet
9:08 AM: Allowed IE Favorite: Microsoft®® .NET Passport One easy way to sign
in and shop online.
9:08 AM: Allowed IE Favorite: NetLingo Dictionary of Internet Words A
Glossary of Online Jargon with Definitions of Terminology & Acronyms
9:08 AM: Allowed IE Favorite: Palm One-Zire21
9:08 AM: Allowed IE Favorite: Performance Tweaks and Tips for Windows 9x-ME-
NT-2000-XP
9:08 AM: Allowed IE Favorite: Pinnacle Systems is the Leader in Digital
Video
9:08 AM: Allowed IE Favorite: Symantec Worldwide Home Page
9:08 AM: Allowed IE Favorite: TechSpot Your PC Hardware resource aka 3D
Spotlight
9:08 AM: Allowed IE Favorite: TechSpot - The PC Enthusiast Information
Resource
9:08 AM: Allowed IE Favorite: TechTV Home
9:08 AM: Allowed IE Favorite: The Hartnett's Page 1
9:08 AM: Allowed IE Favorite: The Kim Komando Radio Show®®--One of the Top
10 Programs in the US
9:08 AM: Allowed IE Favorite: Toshiba Laptop Forum
9:08 AM: Allowed IE Favorite: Update Notification (Leonard Hartnett)
9:08 AM: Allowed IE Favorite: Webroot Software Spyware and Adware
Detection, Removal and Protection
9:08 AM: Allowed IE Favorite: Welcome to EMAZING.com
9:08 AM: Allowed IE Favorite: Window Washer Plugins
9:08 AM: Allowed IE Favorite: Windows Guide Network at WinGuides.com
9:08 AM: Allowed IE Favorite: Windows XP Service Pack 2 (SP2)
9:08 AM: Allowed IE Favorite: WinPlanet - A World of Premium Windows
Information and Tutorials
9:08 AM: Allowed IE Favorite: Your Broderbund Account Home
9:08 AM: Allowed IE Favorite: Zone Labs ZoneAlarm
9:08 AM: Allowed IE Favorite: Darwin Awards
9:08 AM: Allowed IE Favorite: B&Q, diy.com advice
9:08 AM: Allowed IE Favorite: Broderbund
9:08 AM: Allowed IE Favorite: Welcome to Ace Hardware
9:08 AM: Allowed IE Favorite: eBay - The World's Online Marketplace
9:08 AM: Allowed IE Favorite: Federal Communications Commission (FCC) Home
Page
9:08 AM: Allowed IE Favorite: Better Investing - We'll show you how!
9:08 AM: Allowed IE Favorite: Charles Schwab Home
9:08 AM: Allowed IE Favorite: Currency Convertor
9:08 AM: Allowed IE Favorite: DFAS emss, myPay, military pay
9:08 AM: Allowed IE Favorite: Franklin Templeton Home
9:08 AM: Allowed IE Favorite: Motley Fool
9:08 AM: Allowed IE Favorite: myPay Web Site
9:08 AM: Allowed IE Favorite: NETworth TV Show We Show You How to Use the
Net to Increase Your Worth
9:08 AM: Allowed IE Favorite: Quicken.com - Investing Strategies
9:08 AM: Allowed IE Favorite: Quicken.com - Quicken software Home, See Your
Complete Financial Picture in Minutes
9:08 AM: Allowed IE Favorite: Travis CU
9:08 AM: Allowed IE Favorite: U.S. Savings Bonds Online
9:08 AM: Allowed IE Favorite: UBS - UBS Wealth Management USA
9:08 AM: Allowed IE Favorite: Vanguard - The Vanguard Group
9:08 AM: Allowed IE Favorite: Welcome to The Savings Bond Informer
9:08 AM: Allowed IE Favorite: abc7news.com Mr. Food
9:08 AM: Allowed IE Favorite: America's Test Kitchen
9:08 AM: Allowed IE Favorite: Mr. Food - Contact
9:08 AM: Allowed IE Favorite: Compuserve Forum Center
9:08 AM: Allowed IE Favorite: The Toshiba Computing Forum powered by
CompuServe.
9:08 AM: Allowed IE Favorite: Gas Prices in California
9:08 AM: Allowed IE Favorite: GasBuddy.com - Find cheap gas prices in your
city
9:08 AM: Allowed IE Favorite: globeofblogs.com
9:08 AM: Allowed IE Favorite: ADA Home Page - ada.gov - Information and
Technical Assistance on the Americans with Disabilities Act
9:08 AM: Allowed IE Favorite: AFPC - Air Force Personnel Center
9:08 AM: Allowed IE Favorite: CA DMV
9:08 AM: Allowed IE Favorite: California State Assembly
9:08 AM: Allowed IE Favorite: California State Senate
9:08 AM: Allowed IE Favorite: City of Fairfield
9:08 AM: Allowed IE Favorite: City of Vacaville
9:08 AM: Allowed IE Favorite: Commissaries.com - Welcome!
9:08 AM: Allowed IE Favorite: David Grant Medical Center
9:08 AM: Allowed IE Favorite: EPA AIRNow
9:08 AM: Allowed IE Favorite: Find California Code
9:08 AM: Allowed IE Favorite: FirstGov -- Your First Click to the US
Government
9:08 AM: Allowed IE Favorite: Franchise Tax Board - Homepage
9:08 AM: Allowed IE Favorite: http--www.co.solano.ca.us-
9:08 AM: Allowed IE Favorite: IRS.gov Home
9:08 AM: Allowed IE Favorite: MOAA Legislative Affairs
9:08 AM: Allowed IE Favorite: Sacramento County, CA
9:08 AM: Allowed IE Favorite: Sacramento, City
9:08 AM: Allowed IE Favorite: Search Bills
9:08 AM: Allowed IE Favorite: Solano County
9:08 AM: Allowed IE Favorite: State of California
9:08 AM: Allowed IE Favorite: State of Nevada web site
9:08 AM: Allowed IE Favorite: The official U.S. time - clock
9:08 AM: Allowed IE Favorite: Travis Air Force Base, California - Public Web
Site
9:08 AM: Allowed IE Favorite: H3R Full service Halon and Clean Agent
Specialist
9:08 AM: Allowed IE Favorite: Harbor Freight Tools - Quality Tools at the
Lowest Prices
9:08 AM: Allowed IE Favorite: Hartnett Family Genealogy Forum
9:08 AM: Allowed IE Favorite: health facts and fears
9:08 AM: Allowed IE Favorite: Hoover's Online - Home Page
9:08 AM: Allowed IE Favorite: inkjet & toner refill kits
9:08 AM: Allowed IE Favorite: Inkjet cartridges and printer supplies -
InkSell.com
9:08 AM: Allowed IE Favorite: Intelius The world's largest and most accurate
public records source!
9:08 AM: Allowed IE Favorite: JOKES.COM HOME
9:08 AM: Allowed IE Favorite: KGO AM 810 Legal Resource Center Featuring
Leading Attorneys
9:08 AM: Allowed IE Favorite: Sacramento County Bar Association WebSite
9:08 AM: Allowed IE Favorite: FreedomWare
9:08 AM: Allowed IE Favorite: Leonard's Page 1
9:08 AM: Allowed IE Favorite: Toshiba Computer Accessories
9:08 AM: Allowed IE Favorite: Toshiba Product Information
9:08 AM: Allowed IE Favorite: Toshiba Solutions
9:08 AM: Allowed IE Favorite: Toshiba Warranty & Service Programs
9:08 AM: Allowed IE Favorite: Ask IRIS
9:08 AM: Allowed IE Favorite: Email Subscription
9:08 AM: Allowed IE Favorite: How to Get Help
9:08 AM: Allowed IE Favorite: Software Downloads
9:08 AM: Allowed IE Favorite: Support Bulletins
9:08 AM: Allowed IE Favorite: Virtual Tech
9:08 AM: Allowed IE Favorite: mamarocks
9:08 AM: Allowed IE Favorite: abc7news.com
9:08 AM: Allowed IE Favorite: ABCNEWS.com Home
9:08 AM: Allowed IE Favorite: AETV.com
9:08 AM: Allowed IE Favorite: C-SPAN Full Schedule
9:08 AM: Allowed IE Favorite: CBS 5 - San Francisco
9:08 AM: Allowed IE Favorite: CNN.com
9:08 AM: Allowed IE Favorite: Dateline Front Page 1110 PM ET Sunday, July
07, 2002
9:08 AM: Allowed IE Favorite: FOXNews.com
9:08 AM: Allowed IE Favorite: History Channel
9:08 AM: Allowed IE Favorite: Home & Garden Television
9:08 AM: Allowed IE Favorite: KGO
9:08 AM: Allowed IE Favorite: KOVR13.COM YOUR JUMPPOINT TO SACRAMENTO -
STOCKTON - MODESTO
9:08 AM: Allowed IE Favorite: KQED Public TV, Radio and Interactive
9:08 AM: Allowed IE Favorite: KRON 4 Home
9:08 AM: Allowed IE Favorite: KSFO AM 560, Gold
9:08 AM: Allowed IE Favorite: KSFO AM 560
9:08 AM: Allowed IE Favorite: KVIE - PBS for California's Central Valley -
KVIE Channel 6 & Cable 7
9:08 AM: Allowed IE Favorite: National Review Online
9:08 AM: Allowed IE Favorite: News10 - Index Page
9:08 AM: Allowed IE Favorite: Outdoor Life Network - Home
9:08 AM: Allowed IE Favorite: MSN.com
9:08 AM: Allowed IE Favorite: Customize Links
9:08 AM: Allowed IE Favorite: Windows Media
9:08 AM: Al

#14 lenh

lenh
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 21 September 2006 - 01:20 PM

Darn. That one didn't work either. They show up correctly in the Preview window but don't come through correctly in the posting. I'm trying a different approach:

9:08 AM: Allowed IE Favorite: The KCRA Channel.com Local News, Weather,
Sports, Entertainment and Health
9:08 AM: Allowed IE Favorite: The Reporter - RIT
9:08 AM: Allowed IE Favorite: The Sacramento Bee -- sacbee.com -- An online
information service of The Sacramento Bee
9:08 AM: Allowed IE Favorite: TheKCRAChannel.com - Home
9:08 AM: Allowed IE Favorite: TheReporter.Com Vacaville, CA
9:08 AM: Allowed IE Favorite: Welcome to Discovery.com
9:08 AM: Allowed IE Favorite: AMA - American Medical Association Home Page
9:08 AM: Allowed IE Favorite: CEMM.org - Home
9:08 AM: Allowed IE Favorite: DrugDigest
9:08 AM: Allowed IE Favorite: Federal Long Term Care Insurance Program
9:08 AM: Allowed IE Favorite: LTC Partners Home Page
9:08 AM: Allowed IE Favorite: MayoClinic Home
9:08 AM: Allowed IE Favorite: MEDLINEplus Health Information from the
National Library of Medicine
9:08 AM: Allowed IE Favorite: myTRICARE
9:08 AM: Allowed IE Favorite: Prostate Calculator
9:08 AM: Allowed IE Favorite: RxList Drug Information
9:08 AM: Allowed IE Favorite: TRICARE Online
9:08 AM: Allowed IE Favorite: TRICARE, Military Health System - Tuesday,
April 13, 2004
9:08 AM: Allowed IE Favorite: militarylifestyle.com FRONT PAGE
9:08 AM: Allowed IE Favorite: National Trust for Historic Preservation
9:08 AM: Allowed IE Favorite: NEDSITE, A WEB-SITE FOR BUSINESS AND THE WHOLE
FAMILY
9:08 AM: Allowed IE Favorite: No More AOL cds
9:08 AM: Allowed IE Favorite: Olympic Club
9:08 AM: Allowed IE Favorite: palmOne formerly Palm, Inc., Your Destination
for Handhelds, Smartphones, Accessories and Over 20,000 Software Titles
9:08 AM: Allowed IE Favorite: Pendaflex Learning Center
9:08 AM: Allowed IE Favorite: ProxyVote.com
9:08 AM: Allowed IE Favorite: Quackwatch Home Page
9:08 AM: Allowed IE Favorite: Quality Assurance, a word from Moss Motors
9:08 AM: Allowed IE Favorite: RadioShack.com
9:08 AM: Allowed IE Favorite: Antiques and Collectibles, TIAS.com
9:08 AM: Allowed IE Favorite: AnyWho Internet Directory Assistance; Yellow
Pages, White Pages, Toll-Free Numbers, Maps and Directions
9:08 AM: Allowed IE Favorite: Ask Jeeves - Ask.com
9:08 AM: Allowed IE Favorite: Charity Navigator - America's Largest Charity
Evaluator
9:08 AM: Allowed IE Favorite: chiff.com - Your Guide to the Best Sites on
the Web
9:08 AM: Allowed IE Favorite: Dead or Alive - Main Page
9:08 AM: Allowed IE Favorite: Dictionary & Thesaurus
9:08 AM: Allowed IE Favorite: HowStuffWorks - Learn how Everything Works!
9:08 AM: Allowed IE Favorite: Main Page - Wikipedia
9:08 AM: Allowed IE Favorite: Maps, Windows Live Local
9:08 AM: Allowed IE Favorite: Reverse Phone Directory - Cross-Reference
Telephone Number Lookups
9:08 AM: Allowed IE Favorite: SuperPages Yellow Pages, White Pages, Reverse
Phone Book, Map Directions, People Finder, Phone Numbers Search
9:08 AM: Allowed IE Favorite: Telephone Directory - Switchboard Internet
Yellow Pages and White Pages - Maps
9:08 AM: Allowed IE Favorite: Thomas Register - Industry Answers Results
9:08 AM: Allowed IE Favorite: Units of Measurement
9:08 AM: Allowed IE Favorite: WebsterWorldLite Online
9:08 AM: Allowed IE Favorite: Windows Live Local, Maps.Arial
9:08 AM: Allowed IE Favorite: World Wide Words
9:08 AM: Allowed IE Favorite: Zillow.com - Your Edge in Real Estate
9:08 AM: Allowed IE Favorite: Rhodes Triumph Home Page
9:08 AM: Allowed IE Favorite: AltaVista - The Search Company
9:08 AM: Allowed IE Favorite: Ask Jeeves - Ask.com
9:08 AM: Allowed IE Favorite: Dogpile. All results, no mess.
9:08 AM: Allowed IE Favorite: Education Planet - The Education Web Guide
9:08 AM: Allowed IE Favorite: Google Search Term Demo
9:08 AM: Allowed IE Favorite: Google Web Search Features
9:08 AM: Allowed IE Favorite: Google
9:08 AM: Allowed IE Favorite: Invisible-web.net - Searchable databases and
specialized search engines
9:08 AM: Allowed IE Favorite: kartoo
9:08 AM: Allowed IE Favorite: Specialty Search Engines
9:08 AM: Allowed IE Favorite: Welcome to MSN.com
9:08 AM: Allowed IE Favorite: Yahoo!
9:08 AM: Allowed IE Favorite: ZabaSearch.com Free People Search
9:08 AM: Allowed IE Favorite: ZDNet Search IQ Directory of Search Engines
and Specialty Search Directories
9:08 AM: Allowed IE Favorite: [ MetaCrawler®® ]
9:08 AM: Allowed IE Favorite: Search Microsoft.com
9:08 AM: Allowed IE Favorite: SonicOnline Login MyDVD
9:08 AM: Allowed IE Favorite: Support Center
9:08 AM: Allowed IE Favorite: Symantec - Order Issue
9:08 AM: Allowed IE Favorite: The writings of Charles Darwin on the web
9:08 AM: Allowed IE Favorite: Toshiba - Toshiba Group component
9:08 AM: Allowed IE Favorite: TV Listings - [TV Guide Online]
9:08 AM: Allowed IE Favorite: U.S. Senate Senators Home
9:08 AM: Allowed IE Favorite: united.com
9:08 AM: Allowed IE Favorite: UPS Global Home
9:08 AM: Allowed IE Favorite: BreakTheChain.org - Stop Junk E-Mail and
Misinformation
9:08 AM: Allowed IE Favorite: CDC Health-Related Hoaxes & Rumors
9:08 AM: Allowed IE Favorite: F-Secure Security Information Center
9:08 AM: Allowed IE Favorite: HOAXBUSTERS Home Page
9:08 AM: Allowed IE Favorite: McAfee.com - Virus Hoaxes
9:08 AM: Allowed IE Favorite: Snopes
9:08 AM: Allowed IE Favorite: Stiller Research Virus Alphabetic Hoax List
9:08 AM: Allowed IE Favorite: Symantec Security Response - Hoax Page
9:08 AM: Allowed IE Favorite: The AFU & Urban Legends Archive
9:08 AM: Allowed IE Favorite: The Museum of Hoaxes
9:08 AM: Allowed IE Favorite: TruthOrFiction.com
9:08 AM: Allowed IE Favorite: Urban Legends and Folklore
9:08 AM: Allowed IE Favorite: Virus Hoaxes and Netlore. Designed to combat
email hoaxes.
9:08 AM: Allowed IE Favorite: US Chamber of Commerce Directory
9:08 AM: Allowed IE Favorite: USGS National Earthquake Information Center
Earthquake Information for the World
9:08 AM: Allowed IE Favorite: USPS - The United States Postal Service (U.S.
Postal Service)
9:08 AM: Allowed IE Favorite: Vacaville Unified School District
9:08 AM: Allowed IE Favorite: Welcome to Consumer Cellular
9:08 AM: Allowed IE Favorite: Where is the International Space Station
9:08 AM: Processing Internet Explorer Favorites Alerts
10:19 AM: Your spyware definitions have been updated.
10:18 AM: Your spyware definitions have been updated.
11:00 AM: Traces Found: 0
11:00 AM: Full Sweep has completed. Elapsed time 00:43:03
11:00 AM: File Sweep Complete, Elapsed Time: 00:27:57
10:32 AM: Starting File Sweep
10:32 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:32 AM: Starting Cookie Sweep
10:32 AM: Registry Sweep Complete, Elapsed Time:00:01:45
10:31 AM: Starting Registry Sweep
10:31 AM: Memory Sweep Complete, Elapsed Time: 00:13:10
10:17 AM: Starting Memory Sweep
10:17 AM: Sweep initiated using definitions version 623
10:17 AM: Spy Sweeper started
10:17 AM: | Start of Session, Sunday, March 05, 2006 |
********
10:17 AM: | End of Session, Sunday, March 05, 2006 |
10:17 AM: Your definitions are up to date.
10:17 AM: Updating spyware definitions
2:18 PM: Your definitions are up to date.
3:23 PM: Allowed Startup entry: MSMSGS
3:23 PM: Processing Startup Alerts
2:17 PM: Your definitions are up to date.
12:08 PM: Your definitions are up to date.
4:27 PM: Traces Found: 0
4:27 PM: Full Sweep has completed. Elapsed time 00:47:06
4:27 PM: File Sweep Complete, Elapsed Time: 00:28:45
3:58 PM: Starting File Sweep
3:58 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
3:58 PM: Starting Cookie Sweep
3:58 PM: Registry Sweep Complete, Elapsed Time:00:01:55
3:56 PM: Starting Registry Sweep
3:56 PM: Memory Sweep Complete, Elapsed Time: 00:16:12
3:39 PM: Starting Memory Sweep
3:39 PM: Sweep initiated using definitions version 623
3:39 PM: Spy Sweeper started
3:39 PM: | Start of Session, Tuesday, February 28, 2006 |
********
3:39 PM: | End of Session, Tuesday, February 28, 2006 |
12:04 PM: Your spyware definitions have been updated.
11:24 PM: Deletion from quarantine completed. Elapsed time 00:00:05
11:24 PM: Processing: xxxcounter cookie
11:24 PM: Processing: xxx69 cookie
11:24 PM: Processing: tribalfusion cookie
11:24 PM: Processing: trb.com cookie
11:24 PM: Processing: sexlist cookie
11:24 PM: Processing: mediaplex cookie
11:24 PM: Processing: go.com cookie
11:24 PM: Processing: fastclick cookie
11:24 PM: Processing: cws_tiny0
11:24 PM: Processing: coremetrics cookie
11:24 PM: Processing: casalemedia cookie
11:24 PM: Processing: bluemountain cookie
11:24 PM: Processing: belnk cookie
11:24 PM: Processing: atlas dmt cookie
11:24 PM: Processing: adserver cookie
11:24 PM: Processing: adrevolver cookie
11:24 PM: Processing: 2o7.net cookie
11:24 PM: Deletion from quarantine initiated
11:22 PM: Removal process completed. Elapsed time 00:00:17
11:22 PM: Quarantining All Traces: xxxcounter cookie
11:22 PM: Quarantining All Traces: xxx69 cookie
11:22 PM: Quarantining All Traces: tribalfusion cookie
11:22 PM: Quarantining All Traces: trb.com cookie
11:22 PM: Quarantining All Traces: sexlist cookie
11:22 PM: Quarantining All Traces: mediaplex cookie
11:22 PM: Quarantining All Traces: go.com cookie
11:22 PM: Quarantining All Traces: fastclick cookie
11:22 PM: Quarantining All Traces: casalemedia cookie
11:22 PM: Quarantining All Traces: bluemountain cookie
11:22 PM: Quarantining All Traces: belnk cookie
11:22 PM: Quarantining All Traces: atlas dmt cookie
11:22 PM: Quarantining All Traces: adserver cookie
11:22 PM: Quarantining All Traces: 2o7.net cookie
11:22 PM: Removal process initiated
11:15 PM: Traces Found: 16
11:15 PM: Full Sweep has completed. Elapsed time 00:48:18
11:15 PM: File Sweep Complete, Elapsed Time: 00:26:21
10:49 PM: Starting File Sweep
10:49 PM: Cookie Sweep Complete, Elapsed Time: 00:00:05
10:49 PM: leonard@z1.adserver[1].txt (ID = 2142)
10:49 PM: Found Spy Cookie: adserver cookie
10:49 PM: leonard@xxxcounter[1].txt (ID = 3733)
10:49 PM: Found Spy Cookie: xxxcounter cookie
10:49 PM: leonard@www.xxx69[1].txt (ID = 3732)
10:49 PM: Found Spy Cookie: xxx69 cookie
10:49 PM: leonard@tribalfusion[2].txt (ID = 3589)
10:49 PM: Found Spy Cookie: tribalfusion cookie
10:49 PM: leonard@trb[1].txt (ID = 3587)
10:49 PM: Found Spy Cookie: trb.com cookie
10:49 PM: leonard@sexlist[1].txt (ID = 3353)
10:49 PM: Found Spy Cookie: sexlist cookie
10:49 PM: leonard@mediaplex[1].txt (ID = 6442)
10:49 PM: Found Spy Cookie: mediaplex cookie
10:49 PM: leonard@go[2].txt (ID = 2728)
10:49 PM: leonard@fastclick[2].txt (ID = 2651)
10:49 PM: Found Spy Cookie: fastclick cookie
10:49 PM: leonard@dist.belnk[2].txt (ID = 2293)
10:49 PM: leonard@casalemedia[2].txt (ID = 2354)
10:49 PM: Found Spy Cookie: casalemedia cookie
10:49 PM: leonard@bluemountain[2].txt (ID = 2312)
10:49 PM: Found Spy Cookie: bluemountain cookie
10:49 PM: leonard@belnk[1].txt (ID = 2292)
10:49 PM: Found Spy Cookie: belnk cookie
10:49 PM: leonard@atdmt[1].txt (ID = 2253)
10:49 PM: Found Spy Cookie: atlas dmt cookie
10:49 PM: leonard@abclocal.go[2].txt (ID = 2729)
10:49 PM: Found Spy Cookie: go.com cookie
10:49 PM: leonard@2o7[2].txt (ID = 1957)
10:49 PM: Found Spy Cookie: 2o7.net cookie
10:49 PM: Starting Cookie Sweep
10:49 PM: Registry Sweep Complete, Elapsed Time:00:02:10
10:47 PM: Starting Registry Sweep
10:47 PM: Memory Sweep Complete, Elapsed Time: 00:19:29
10:27 PM: Starting Memory Sweep
10:27 PM: Sweep initiated using definitions version 622
10:27 PM: Spy Sweeper started
10:27 PM: | Start of Session, Monday, February 27, 2006 |
********
10:27 PM: | End of Session, Monday, February 27, 2006 |
10:26 PM: BHO Shield: found: googletoolbar2.dll-- BHO installation denied at
user request
12:03 PM: Your spyware definitions have been updated.
10:34 PM: Allowed Startup entry: Zone Labs Client
10:34 PM: Processing Startup Alerts
9:01 PM: Quarantine item removal complete.
9:01 PM: Automatic removal of old quarantine items in progress.
3:56 PM: Allowed Startup entry: Zone Labs Client
3:56 PM: Processing Startup Alerts
2:37 PM: Allowed Startup entry: DeleteMe
2:37 PM: Processing Startup Alerts
1:52 PM: Removed Startup entry: Adobe Reader Speed Launch.lnk
1:52 PM: Processing Startup Alerts
1:39 PM: Allowed Startup entry: updateMgr
1:39 PM: Processing Startup Alerts
1:24 PM: Allowed Startup entry: updateMgr
1:24 PM: Processing Startup Alerts
1:22 PM: Allowed Startup entry: updateMgr
1:22 PM: Processing Startup Alerts
12:01 PM: Your spyware definitions have been updated.
12:00 PM: Your spyware definitions have been updated.
8:04 AM: Allowed IE Favorite: Laptop Computing Forum
8:04 AM: Processing Internet Explorer Favorites Alerts
10:30 PM: Allowed IE Favorite: Motley Fool
10:30 PM: Processing Internet Explorer Favorites Alerts
10:09 PM: The Spy Communication shield has blocked access to: game4all.biz
10:09 PM: The Spy Communication shield has blocked access to: game4all.biz
10:09 PM: The Spy Communication shield has blocked access to: game4all.biz
10:09 PM: The Spy Communication shield has blocked access to: game4all.biz
12:52 PM: Traces Found: 0
12:52 PM: Full Sweep has completed. Elapsed time 00:53:14
12:52 PM: File Sweep Complete, Elapsed Time: 00:33:24
12:18 PM: Starting File Sweep
12:18 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
12:18 PM: Starting Cookie Sweep
12:18 PM: Registry Sweep Complete, Elapsed Time:00:01:54
12:16 PM: Starting Registry Sweep
12:16 PM: Memory Sweep Complete, Elapsed Time: 00:17:43
11:59 AM: Starting Memory Sweep
11:59 AM: Sweep initiated using definitions version 617
11:59 AM: Spy Sweeper started
11:59 AM: | Start of Session, Sunday, February 19, 2006 |
********


HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 11:03:29 PM, on 9/19/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\twain_32\SiPix\SCBlink2\Srvany.exe
C:\WINDOWS\twain_32\SiPix\SCBlink2\USBPNP.exe
C:\Program Files\Cosmi\StealthSurf Pro\wc\wcservice.exe
C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\wwSecure.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\LTSMMSG.exe
C:\Program Files\WDC\SetIcon.exe
C:\Program Files\NuCam\CamCheck\CamCheck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\TOSHIBA\NetDevSw\NetDevSW.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\WINDOWS\System32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\ZoneLabs\isafe.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\toshiba\ivp\netint\netint.exe
C:\toshiba\ivp\ISM\pinger.exe
C:\Program Files\EarthLink TotalAccess\MailClnt.exe
C:\MyFiles\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://my.earthlink.net/channel/START
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dll?p...&ar=msnhome
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchcust.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
localhost:9095
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
<local>
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {60D3AAEB-AA39-4AE0-B2F9-E4AF0613A2A3} -
C:\PROGRA~1\Cosmi\STEALT~1\pop\ABG_PL~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 10
O4 - HKLM\..\Run: [Pinger] "C:\toshiba\ivp\ISM\pinger.exe" /run
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
"C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE" /P23 "EPSON Stylus
C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft
Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [ISUSPM Startup]
"C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common
Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe"
/startintray
O4 - HKLM\..\Run: [REGSHAVE] "C:\Program Files\REGSHAVE\REGSHAVE.EXE"
/AUTORUN
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [SetIcon] "\Program Files\WDC\SetIcon.exe"
O4 - HKLM\..\Run: [CamCheck] "C:\Program Files\NuCam\CamCheck\CamCheck.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Window Washer] "C:\Program Files\Webroot\Washer\wwDisp.exe"
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe"
-winstart
O4 - HKCU\..\RunOnce: [CF1DelMsvcr] cmd /C del
C:\DOCUME~1\Leonard\LOCALS~1\Temp\msvcr71.dll
O4 - HKCU\..\RunOnce: [CF1DelEXE] cmd /C del
C:\DOCUME~1\Leonard\LOCALS~1\Temp\Customer-5.2.2.8.exe
O4 - HKCU\..\RunOnce: [CF1DelUnicows] cmd /C del
C:\DOCUME~1\Leonard\LOCALS~1\Temp\unicows.dll
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat
7.0\Reader\reader_sl.exe
O4 - Global Startup: Display.lnk = C:\Windows\temp\Display.bat
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: Network Device Switch.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - C:\Program Files\EarthLink
TotalAccess\Accelerator\\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - C:\Program Files\EarthLink
TotalAccess\Accelerator\\pac-image.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .avi: C:\Program Files\Netscape\Communicator\Program\PLUGINS\npavi32.dll
O12 - Plugin for .pdf: C:\Program Files\Netscape\Communicator\Program\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wmv: C:\Program
Files\Netscape\Communicator\Program\PLUGINS\npdsplay.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O15 - Trusted Zone: http://update.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
https://www-secure.symantec.com/techsupp/as...rl/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security1.norton.com/SSC/SharedCont...bin/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://a1540.g.akamai.net/7/1540/52/200305.../win/QuickTimeI
nstaller.exe
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) -
https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -
http://download.zonelabs.com/bin/promotion...canner37240.cab
O16 - DPF: {97BB6657-DC7F-4489-9067-51FAB9D8857E} (CWebLaunchCtl Object) -
http://earthlink.cf1live.com/earthlink/sta.../weblaunch2.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} -
https://webresponse.one.microsoft.com/oas/A...eX/FileXfer.cab
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) -
file://D:\trial\intrlnch\IntraLaunch.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry
Information Class) - http://security1.norton.com/SSC/SharedCont...c/bin/cabsa.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
https://www-secure.symantec.com/techsupp/as...rl/SymAData.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Blink2PnP - Unknown owner -
C:\WINDOWS\twain_32\SiPix\SCBlink2\Srvany.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. -
C:\WINDOWS\System32\ZoneLabs\isafe.exe
O23 - Service: CXPT_Service - Cyberspace Headquarters, LLC - C:\Program
Files\Cosmi\StealthSurf Pro\wc\wcservice.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. -
C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation -
C:\PROGRA~1\Dantz\RETROS~1\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation -
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software,
Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. -
C:\WINDOWS\System32\wwSecure.exe

#15 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:12:59 PM

Posted 21 September 2006 - 04:30 PM

I don't see anything in your Spysweeper log that concerns me. Let's see if we can track down that file that Panda says is there.

Please make sure that you can View Hidden Files
  • Click Start -> My Computer
  • Select Tools -> Folder options
  • Select the View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled.
  • Also make sure that 'Display the contents of system folders' is checked.
  • Make sure "Hide extensions for known file types" is unchecked
  • Make sure "Hide protected operating system files (recommended)" is unchecked
  • For more info on how to show hidden files click here.
Now locate this file, and delete it if found.

C:WINDOWS\system32\sdkwt32.exe



If Killbox found it, you should find it safely quarantined in this folder.

C:\!Killbox



What type of internet connection are you using?
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users