3:55 PM: ApplicationMinimized - EXIT
3:55 PM: ApplicationMinimized - ENTER
3:54 PM: File System Shield: found: Trojan Horse: trojan looksy, version 1.0.0.0 -- File System Read/Write allowed
3:54 PM: File System Shield: found: Trojan Horse: trojan looksy, version 1.0.0.0 -- File System Read/Write allowed
Operation: File Access
Target:
Source: C:\PROGRAM FILES\MSN\MSNCOREFILES\MSN6.EXE
2:26 PM: Tamper Detection
2:13 PM: ApplicationMinimized - EXIT
2:13 PM: ApplicationMinimized - ENTER
1:50 PM: BHO Shield: found: -- BHO installation allowed at user request
1:50 PM: Warning: no filename sent to VerifyFileSignature
1:39 PM: ApplicationMinimized - EXIT
1:39 PM: ApplicationMinimized - ENTER
1:39 PM: Startup Shield: Entry Allowed: Anti Trojan Elite
1:38 PM: ApplicationMinimized - EXIT
1:38 PM: ApplicationMinimized - ENTER
1:23 PM: ApplicationMinimized - EXIT
1:23 PM: ApplicationMinimized - ENTER
1:17 PM: ApplicationMinimized - EXIT
1:17 PM: ApplicationMinimized - ENTER
1:16 PM: ApplicationMinimized - EXIT
1:16 PM: ApplicationMinimized - ENTER
1:15 PM: License Check Status (0): Success
1:13 PM: ApplicationMinimized - EXIT
1:13 PM: ApplicationMinimized - EXIT
1:13 PM: ApplicationMinimized - ENTER
1:13 PM: ApplicationMinimized - ENTER
1:13 PM: Startup Shield: Entry Allowed: Anti Trojan Elite
1:12 PM: ApplicationMinimized - EXIT
1:12 PM: ApplicationMinimized - ENTER
1:12 PM: Startup Shield: Entry Allowed: Anti Trojan Elite
1:12 PM: Startup Shield: Entry Allowed: Anti Trojan Elite
1:11 PM: ApplicationMinimized - EXIT
1:11 PM: ApplicationMinimized - ENTER
1:01 PM: Sent error log: C:\Documents and Settings\Administrator\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
1:01 PM: Sent error log: C:\Documents and Settings\Administrator\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
12:58 PM: ApplicationMinimized - EXIT
12:58 PM: ApplicationMinimized - ENTER
6:57 AM: Traces Found: 15
6:57 AM: Full Sweep has completed. Elapsed time 01:44:38
6:57 AM: File Sweep Complete, Elapsed Time: 00:16:44
Not enough storage is available to process this command
6:56 AM: Warning: Unable to sweep compressed file: System Error. Code: 8.
6:53 AM: Warning: TCompressedFile.GetStreams(2): Stream read error
6:52 AM: Warning: SweepDirectories: Cannot find directory "e:". This directory was not added to the list of paths to be scanned.
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssmsdc14dbbd-d188-4aba-8e14-b104a7056906.tmp". The operation completed successfully
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssmsd4609694-2783-46f0-88b5-00641d437d17.tmp". The operation completed successfully
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssmscc25b843-a5bf-4307-a9f9-64b1e41302c7.tmp". The operation completed successfully
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssms9fa4eae2-be4a-4e98-80fb-5b47872599f0.tmp". The operation completed successfully
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssmsbb685c49-1270-4186-a77c-f45a46fb3f2d.tmp". The operation completed successfully
6:50 AM: Warning: Failed to open file "c:\documents and settings\networkservice\application data\webroot\spy sweeper\temp\ssms4a42a908-5868-431a-aef9-fe0ac91963e0.tmp". The operation completed successfully
6:45 AM: C:\WINDOWS\system32\qhcripkfeh.dll (ID = 1324599)
6:45 AM: Found Trojan Horse: trojan looksy
6:41 AM: c:\windows\system32\koos.exe (ID = 526035)
6:41 AM: c:\windows\system32\kprof (ID = 526055)
6:41 AM: c:\windows\system32\poof (ID = 526056)
6:40 AM: Starting File Sweep
6:40 AM: Warning: SweepDirectories: Cannot find directory "a:". This directory was not added to the list of paths to be scanned.
6:40 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
6:40 AM: Starting Cookie Sweep
6:40 AM: Registry Sweep Complete, Elapsed Time:01:21:46
6:39 AM: HKU\S-1-5-21-1960408961-1767777339-725345543-500\software\microsoft\windows\currentversion\ext\ stats\{ba2325ed-f9eb-4830-8fce-0bc35b16969b}\ (ID = 1887336)
6:39 AM: Found Adware: whenu searchbar/pricebandit
6:39 AM: HKLM\software\microsoft\removerp\ (ID = 3160720)
6:39 AM: HKLM\software\microsoft\internet explorer\searchscopes\{5b4c3b43-49b6-42a7-a602-f7acdca0d409}\ (ID = 3105536)
6:39 AM: Found Adware: onestep search
6:39 AM: HKLM\system\currentcontrolset\services\poof\ (ID = 2136492)
6:39 AM: HKLM\system\currentcontrolset\services\kprof\ (ID = 2136484)
6:39 AM: HKLM\system\controlset001\enum\root\legacy_poof\ (ID = 2135588)
6:39 AM: HKLM\system\controlset001\services\poof\ (ID = 2108973)
6:39 AM: HKLM\system\controlset001\services\kprof\ (ID = 2108965)
6:39 AM: Found Trojan Horse: trojan wopla
6:29 AM: Error: LogError w/o exception.
5:40 AM: ApplicationMinimized - EXIT
5:40 AM: ApplicationMinimized - ENTER
5:40 AM: ApplicationMinimized - EXIT
5:40 AM: ApplicationMinimized - ENTER
5:40 AM: ApplicationMinimized - EXIT
5:40 AM: ApplicationMinimized - ENTER
5:39 AM: ApplicationMinimized - EXIT
5:39 AM: ApplicationMinimized - ENTER
5:36 AM: ApplicationMinimized - EXIT
5:36 AM: ApplicationMinimized - ENTER
5:36 AM: ApplicationMinimized - EXIT
5:36 AM: ApplicationMinimized - ENTER
5:34 AM: ApplicationMinimized - EXIT
5:34 AM: ApplicationMinimized - ENTER
5:33 AM: ApplicationMinimized - EXIT
5:33 AM: ApplicationMinimized - ENTER
5:32 AM: ApplicationMinimized - EXIT
5:32 AM: ApplicationMinimized - ENTER
5:31 AM: ApplicationMinimized - EXIT
5:31 AM: ApplicationMinimized - ENTER
5:31 AM: ApplicationMinimized - EXIT
5:31 AM: ApplicationMinimized - ENTER
5:30 AM: ApplicationMinimized - EXIT
5:30 AM: ApplicationMinimized - ENTER
5:27 AM: ApplicationMinimized - EXIT
5:27 AM: ApplicationMinimized - ENTER
5:23 AM: ApplicationMinimized - EXIT
5:23 AM: ApplicationMinimized - ENTER
5:21 AM: ApplicationMinimized - EXIT
5:21 AM: ApplicationMinimized - ENTER
5:19 AM: ApplicationMinimized - EXIT
5:19 AM: ApplicationMinimized - ENTER
5:18 AM: Starting Registry Sweep
5:18 AM: Memory Sweep Complete, Elapsed Time: 00:05:50
5:17 AM: ApplicationMinimized - EXIT
5:17 AM: ApplicationMinimized - ENTER
5:15 AM: ApplicationMinimized - EXIT
5:15 AM: ApplicationMinimized - ENTER
5:14 AM: Detected running threat: C:\WINDOWS\system32\jkkjk.dll (ID = 676)
5:14 AM: Detected running threat: C:\WINDOWS\system32\tuvtsrp.dll (ID = 676)
5:14 AM: Found Adware: virtumonde
5:12 AM: Starting Memory Sweep
5:12 AM: HKLM\software\microsoft\windows\currentversion\run \ || runner1 (ID = 2191081)
5:12 AM: Found Trojan Horse: trojan-downloader-waverevenue
5:12 AM: Start Full Sweep
5:12 AM: Sweep initiated using definitions version 1113
5:12 AM: Your spyware definitions have been updated.
5:10 AM: Informational: ShieldEmail: Start monitoring port 25 for mail activities
Keylogger: Off
5:10 AM: Informational: ShieldEmail: Start monitoring port 110 for mail activities
E-mail Attachment: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites: Off
Hosts File Shield: On
Internet Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
File System Shield: On
Execution Shield: On
System Services Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
5:10 AM: Shield States
5:10 AM: License Check Status (0): Success
5:10 AM: Spyware Definitions: 1036
5:09 AM: Spy Sweeper 5.5.7.124 started
5:09 AM: Spy Sweeper 5.5.7.124 started
5:09 AM: | Start of Session, Friday, March 21, 2008 |
***************