hi there and thanks again
here is the uninstall log:
3ivx D4 4.5.1 (remove only)
Abacast Client
Acer Arcade
Acer eManager for Notebook
Acer eNetManagement
Acer ePowerManagement
Acer GridVista
Adobe Acrobat 7.0.1 and Reader 7.0.1 Update
Adobe Acrobat 7.0.2 and Reader 7.0.2 Update
Adobe Acrobat 7.0.3 and Reader 7.0.3 Update
Adobe Photoshop CS
Adobe Reader 7.0
BlueSoleil
CC_ccProxyExt
ccCommon
CCleaner (remove only)
ccPxyCore
CuteFTP 7 Professional
ewido anti-malware
Freecom Personal Media Suite 2.18
Google Earth
HDAUDIO Soft Voice Modem with SmartCP
High Definition Audio Driver Package - KB888111
HijackThis 1.99.1
Intel(R) Graphics Media Accelerator Driver for Mobile
Intel(R) PROSet/Wireless Software
iPod for Windows 2005-02-07
iTunes
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 6
Java 2 Runtime Environment, SE v1.4.2_05
Launch Manager
LiveUpdate 2.7 (Symantec Corporation)
Macromedia Dreamweaver 8
Macromedia Extension Manager
Macromedia Fireworks 8
Macromedia Flash 8
Macromedia Flash 8 Video Encoder
Macromedia Flash Player 8
Macromedia Flash Player 8
Macromedia Flash Player 8 Plugin
mCore
Microsoft Office Professional Edition 2003
mMHouse
Mozilla Firefox (1.5.0.3)
mPfMgr
mProSafe
MSN Messenger 7.5
MSRedist
mWlsSafe
Napster
Napster Burn Engine
Nero 6 Ultra Edition
Nero Digital
Nokia Connectivity Cable Driver
Nokia PC Suite
Norton AntiSpam
Norton AntiSpam
Norton AntiVirus 2006
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security 2006 (Symantec Corporation)
Norton PartitionMagic 8.0
Norton Protection Center
Norton WMI Update
Norton WMI Update
NTI Backup NOW! 4
NTI CD & DVD-Maker
PowerProducer
QuickTime
RealPlayer
REALTEK Gigabit and Fast Ethernet NIC Driver
Realtek High Definition Audio Driver
Remove DivX Pro Codec
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
SPBBC
Spybot - Search & Destroy 1.4
SymNet
Synaptics Pointing Device Driver
tunebite 2.1.1.3
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Vodafone Mobile Connect
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WinRAR archiver
XviD Video Codec 04102002-1 (Koepi's build with EPSZ ME)
Yahoo! Messenger with BT Communicator
and here is the spy sweeper session log:
********
04:01: | Start of Session, 13 May 2006 |
04:01: Spy Sweeper started
04:01: Sweep initiated using definitions version 677
04:02: Starting Memory Sweep
04:12: Memory Sweep Complete, Elapsed Time: 00:10:49
04:12: Starting Registry Sweep
04:13: Found Trojan Horse: trojan agent winlogonhook
04:13: HKLM\software\microsoft\mssmgr\ (9 subtraces) (ID = 937101)
04:13: Found Adware: cws-aboutblank
04:13: HKU\S-1-5-21-1031877099-4067085528-3117116503-1005\software\microsoft\internet explorer\main\ || search page_bak (ID = 115925)
04:13: HKU\S-1-5-21-1031877099-4067085528-3117116503-1005\software\microsoft\internet explorer\main\ || search page_bak (ID = 774883)
04:13: Registry Sweep Complete, Elapsed Time:00:00:42
04:13: Starting Cookie Sweep
04:13: Found Spy Cookie: yieldmanager cookie
04:13: claire francis@ad.yieldmanager[1].txt (ID = 3751)
04:13: Found Spy Cookie: adrevolver cookie
04:13: claire francis@adrevolver[3].txt (ID = 2088)
04:13: claire francis@adrevolver[2].txt (ID = 2088)
04:13: Found Spy Cookie: a cookie
04:13: claire francis@a[1].txt (ID = 2027)
04:13: Found Spy Cookie: serving-sys cookie
04:13: claire francis@serving-sys[2].txt (ID = 3343)
04:13: Found Spy Cookie: questionmarket cookie
04:13: claire francis@questionmarket[2].txt (ID = 3217)
04:13: Cookie Sweep Complete, Elapsed Time: 00:00:00
04:13: Starting File Sweep
04:13: Warning: Failed to open file "c:\pagefile.sys". Access is denied
04:13: Warning: Failed to open file "c:\hiberfil.sys". Access is denied
04:24: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
04:24: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
04:39: Warning: Failed to open file "c:\windows\temp\sqlite_hm0rfeyxtatkzcb". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\networkservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\networkservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\ntuser.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3efb785d-bb43-4ec6-aaa3-b3ee154448cc.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsbd3e74c7-6e62-48bf-a316-6e0e645ab549.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs868291c5-fec2-48e2-98f0-7747084fb022.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf66d832d-9ade-4814-a5ee-7077454f2f2e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e7f0680-a4e3-4d8a-aeb7-8d67b16ab492.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsef89637b-ea27-4be2-93ac-1a9b334387c5.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs64381444-8b05-4a22-8277-6c2a186227f8.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs08eb6c07-587a-4344-b3fb-7e4c4fb2c204.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsccdb7caa-6f18-4514-a73c-fedb0accbfb2.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs87874e0c-5ac4-4eca-a5dc-54f068ddaab3.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs69967483-17c7-4cb0-8ddf-035b09a121d8.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscseacb8d53-f228-48c3-82aa-c58326702d0d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5281aa0c-9fde-4f9c-9db8-3884da13f90a.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3e53c521-b3d4-49af-8369-c443189f1e60.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3541826c-e55f-4728-94f6-618d12f74c5c.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc103b39b-bbeb-4e51-9260-bce2ce503d3c.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0c83f2f8-be5e-4fc9-b63f-0460c9a5a449.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsccc0111e-ec74-4892-ad07-7e4bb577fa29.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs32d3bff0-b62d-4462-86a8-333e15312f8e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs63ae993e-d81c-40b3-ab37-7d3ca04237ab.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs0008c43a-dc94-4404-927d-f6b90a00a431.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4530b957-3dae-44e2-817e-be6f4edd7528.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs425b5997-062e-487e-8b92-52c4fbe65d62.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs883ce148-890f-42ba-b237-f35dd37f31e3.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6e78dce4-fd45-48d8-b384-73fbaef053ab.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3348079a-a60e-4276-a100-79e3391f8ba5.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9203b86a-a58e-46fb-ab3c-b6d18f661bcf.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs242b3f38-992f-41f6-8258-cf8f206f3b83.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscfd1652b-9100-4e2d-9f62-0dd76e6bc77f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs60585d60-28ef-4078-9a8b-9a5c1928144e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4da3990b-45fc-478f-a15f-5812c1c30998.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc2a7d379-e820-4e53-8e46-a578f407b1f5.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd5b23437-ab79-43ac-87ca-82a7e64db87d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9806b1e5-699e-4828-9726-f2c6ad9d06f2.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs96ecef32-8021-43ef-be6c-d65e62cdcaa2.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdd263b73-e37b-43aa-af99-66cd7763856e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdd92c384-52bf-4784-be11-91056aa0051d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2664e6b8-b52a-4fdf-934c-62178aca4875.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs90f1e4d8-23f9-4f54-900a-a321ebd5e712.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa3fbeaa1-8063-4a1b-8ef0-6a15402ccf89.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc66d69bf-4ade-4856-b890-6f3bc2ca4c15.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs857766d1-7c34-4d81-90ea-574a81c773c2.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsdbb9c9ba-b07e-403e-830c-b07b2707ba4d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs903040e0-209a-4905-a7c2-c6507472842d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs255e7c53-093d-4bfd-ae3b-ab0a891fccc3.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse90763ea-892d-44f3-b39a-03363b66b595.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs09761e95-bbb7-4f84-ab8f-8b31e086c1ee.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6ae2eefd-3e73-4c45-abf5-9ee02628bd05.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb5f4c64a-d71b-490d-bca8-1513fd22ad16.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8bb61317-7949-4d02-b6cd-054f4c6d4c94.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb95ad323-116a-44a1-bb82-6201f3647517.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs78892a8c-085f-46d5-b40f-239f44fade8f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsea75be7a-4d71-4445-b067-59b12e588408.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb3c1b6e5-03ff-4574-9818-f8d43a65d31f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs248c0940-082b-475c-aeae-7f8e304f8990.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2bcb20f7-4d91-495b-92a2-6ea330057cc3.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs19a93036-93e6-4642-a707-0eb468cfef33.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3db9f947-9c87-4df1-9d19-2c4f0d894e4f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs36dda86c-1855-4f1d-84b7-9b25dee6483f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2d1ebe1c-28f0-4edc-9d1d-0727ddd1ee59.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7e60e828-7790-4c9e-aa5e-d09518acf44e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs61aee65a-1282-46fa-bcc7-27db318ac5cc.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs2fdc7935-5561-4406-a41d-a01099c1d2ee.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4b35c27c-7360-43f3-8f69-ac7b790f1abf.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs241c6fd0-1cb0-4ec6-b57d-fa8e449bda4d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs76d76417-656c-42a8-9187-29eb8bed36f9.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9ad124a2-5e53-485a-97a1-495c2107e0ad.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf9c5fdc0-b51f-4301-9097-48a8ccec348f.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs4f4b3e6c-87b6-4a68-a9a3-f480509499b9.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs047593df-2654-4fe2-802c-90ff4a6f10ba.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscscce405d5-a4c4-4a10-8999-eb3fc0dae9aa.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc27744dc-9365-457d-8914-b709b422ce85.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs3be425e2-00df-44b1-92e7-3b0c9a2d5489.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs39fd8fb1-1610-47f3-9c47-1ae74a4895e2.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5f8ee549-8e26-4f56-b26d-0651ece155ff.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf817ecea-34c7-4a2d-9ef0-68fc248a6833.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5c3f5b09-dcdc-4140-968a-797599ea9690.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs6d0e2570-3423-46c7-8e55-a3d440a46f69.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs503ce354-8437-42b5-942e-3bc5b118966e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs414b7e04-ba2b-4ec5-8e8a-447b49ddf792.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs21a27270-36cd-48fa-9d4c-5060065b7e17.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs7cb07dfa-939b-44cd-83bb-8c631451b37c.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsf7449745-8145-45d7-a544-bb5e595fc8e7.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs1e269818-11a9-416d-98a0-c8eb9646646e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs07709158-fd0c-4206-9d56-a5871e856cb7.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5c805af8-4510-462f-a67c-314e2ecd0ab1.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs945ead03-0e92-4ffa-af1f-dc102dc8709a.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs5afe2c6f-89e4-42b8-bf0f-244b105e6b0d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs654fe541-2bfc-4d49-aac2-cac1c995635a.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs49db7e01-70b8-4bef-9ecb-0315449a0b7e.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb1b968a5-a48e-4653-bc49-cc8384e4f0f0.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs8d6e53bc-bd95-4604-b8ab-b576510a59b0.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsc11f6aaf-ad89-4ae7-8337-044de539e580.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs505b9d06-a51e-464e-b3ab-e12afcffa6e8.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs959c4bfe-a045-4920-8333-c400c3ed9ba5.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsa584312e-6cf0-4055-b5de-88ef260c66bd.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsd61d7252-3def-4161-bfb7-b9b41e783376.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb062da28-3c61-45a3-b117-89a466340516.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs64e95d8a-2706-4acb-a0cc-3f2607eeb015.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsfd512840-c70b-4cea-92da-f1268881820d.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb08a4eee-fe0d-46e3-962e-8e01d5b23002.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscse8b768ea-3b14-4ea7-ba7a-aa71db5e8c43.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscsb2dd4fd2-eec9-4bb7-9cd3-4246ae18bc74.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\localservice\application data\webroot\spy sweeper\temp\sscs9fb08e80-d58b-47cb-8838-e63d2f989284.tmp". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\claire francis\ntuser.dat". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\claire francis\ntuser.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\claire francis\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
04:45: Warning: Failed to open file "c:\documents and settings\claire francis\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
04:46: Warning: Failed to open file "c:\documents and settings\claire francis\application data\mozilla\firefox\profiles\qwt0ir7d.default\par ent.lock". The process cannot access the file because it is being used by another process
04:48: Warning: Failed to open file "c:\program files\common files\symantec shared\ccpd-lc\symlcrst.dll". The process cannot access the file because it is being used by another process
05:02: Warning: Failed to open file "c:\program files\norton internet security\norton antivirus\savrt\0435nav~.tmp". The process cannot access the file because it is being used by another process
05:02: Warning: Failed to open file "c:\program files\norton internet security\norton antivirus\savrt\0819nav~.tmp". The process cannot access the file because it is being used by another process
05:27: File Sweep Complete, Elapsed Time: 01:13:25
05:27: Full Sweep has completed. Elapsed time 01:25:12
05:27: Traces Found: 18
12:26: Removal process initiated
12:26: Quarantining All Traces: cws-aboutblank
12:26: Quarantining All Traces: trojan agent winlogonhook
12:26: Quarantining All Traces: a cookie
12:26: Quarantining All Traces: adrevolver cookie
12:26: Quarantining All Traces: questionmarket cookie
12:26: Quarantining All Traces: serving-sys cookie
12:26: Quarantining All Traces: yieldmanager cookie
12:27: Removal process completed. Elapsed time 00:01:12
********
03:53: | Start of Session, 13 May 2006 |
03:53: Spy Sweeper started
03:59: Your spyware definitions have been updated.
04:01: | End of Session, 13 May 2006 |
and the hijack this log:
Logfile of HijackThis v1.99.1
Scan saved at 06
13, on 15/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\WINDOWS\RTHDCPL.EXE
C:\acer\epm\epm-dm.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\Acer\eRecovery\Monitor.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\HJT\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.btbroadbandstart.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\ypager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\ypager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by103fd.bay103.hotmail.msn.co...s/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) -
http://das.microsoft.com/activate/ca...ail/DASAct.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/Ms...Downloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Npfittice - Politecnico di Torino - (no file)
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
thanks again
Claire
