貌似广告倒不弹出来了，
O20 - Winlogon Notify: NetCache - C:\WINNT\system32\j22q0cf5ef2.dll
这个居然还在！

spy sweeper扫描如下：
——————————————————————————————
********
15:34: |      Start of Session, 2005年11月2日      |
15:34: Spy Sweeper started
15:34: Sweep initiated using definitions version 564
15:34: Starting Memory Sweep
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  Found Adware: icannnews
15:35:  Detected running threat: C:\WINNT\system32\t8r8li9u18.dll (ID = 83)
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:35:  Detected running threat: C:\WINNT\system32\porfnw.dll (ID = 83)
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36:  Detected running threat: C:\WINNT\system32\guard.tmp (ID = 83)
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36: Memory Sweep Complete, Elapsed Time: 00:01:20

—————————>to be continue...

(2)
15:36: Starting Registry Sweep
15:36:  Found Adware: cnsmin
15:36:  HKCR\interface\{1bb0abbe-2d95-4847-b9d8-6f90de3714c1}\  (8 subtraces) (ID = 106174)
15:36:  HKCR\interface\{be08f6bc-c3e6-4149-beb1-cb449e1b372e}\  (8 subtraces) (ID = 106178)
15:36:  HKLM\software\classes\typelib\{7354662f-caa3-448b-bc01-04f55a2dca35}\  (9 subtraces) (ID = 106206)
15:36:  HKLM\software\classes\typelib\{19069804-2cf0-4357-b696-ba6e9aad99ef}\  (9 subtraces) (ID = 106207)
15:36:  HKLM\software\cnnic\ (ID = 106210)
15:36:  HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\winnt\downloaded program files\cnsmin.dll (ID = 106248)
15:36:  HKCR\typelib\{4158db95-de71-41ff-bea1-2c3d1c679df1}\  (9 subtraces) (ID = 106260)
15:36:  HKCR\typelib\{7354662f-caa3-448b-bc01-04f55a2dca35}\  (9 subtraces) (ID = 106261)
15:36:  HKCR\typelib\{19069804-2cf0-4357-b696-ba6e9aad99ef}\  (9 subtraces) (ID = 106262)
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:36:  Found System Monitor: sc-keylog
15:36:  HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\explorer\  (6 subtraces) (ID = 140468)
15:36:  Found Trojan Horse: iedown
15:36:  HKCR\clsid\{d0a29c6c-aa71-4423-8c4a-5998b774c448}\  (21 subtraces) (ID = 144126)
15:36:  HKCR\gliedown.iedown\  (5 subtraces) (ID = 144127)
15:36:  HKCR\gliedown.iedown.1\  (3 subtraces) (ID = 144128)
15:36:  HKCR\interface\{2f6385b1-1dc1-4278-8700-31d52f995112}\  (8 subtraces) (ID = 144129)
15:36:  HKLM\software\classes\clsid\{d0a29c6c-aa71-4423-8c4a-5998b774c448}\  (21 subtraces) (ID = 144130)
15:36:  HKLM\software\classes\gliedown.iedown\  (5 subtraces) (ID = 144131)
15:36:  HKLM\software\classes\gliedown.iedown.1\  (3 subtraces) (ID = 144132)
15:36:  HKLM\software\classes\interface\{2f6385b1-1dc1-4278-8700-31d52f995112}\  (8 subtraces) (ID = 144133)
15:36:  HKLM\software\classes\typelib\{c997be00-8ffa-4784-8da4-34722569ff82}\  (9 subtraces) (ID = 144134)
15:36:  HKCR\typelib\{c997be00-8ffa-4784-8da4-34722569ff82}\  (9 subtraces) (ID = 144135)
15:36:  Found Adware: virtumonde
15:36:  HKCR\msevents.msevents\  (5 subtraces) (ID = 749130)
15:36:  HKCR\msevents.msevents.1\  (3 subtraces) (ID = 749136)
15:36:  HKLM\software\classes\msevents.msevents\  (5 subtraces) (ID = 749153)
15:36:  HKLM\software\classes\msevents.msevents.1\  (3 subtraces) (ID = 749157)
15:36:  Found Trojan Horse: trojan-downloader-conhook
15:36:  HKLM\software\classes\clsid\{00dbdac8-4691-4797-8e6a-7c6ab89bc441}\  (3 subtraces) (ID = 833627)
15:36:  HKCR\clsid\{00dbdac8-4691-4797-8e6a-7c6ab89bc441}\  (3 subtraces) (ID = 833628)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnsautoupdate (ID = 106221)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnsenable (ID = 106222)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnshint (ID = 106223)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnslist (ID = 106224)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnsmenu (ID = 106225)
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\main\ || cnsreset (ID = 106226)
15:36:  Found Adware: findthewebsiteyouneed hijacker
15:36:  HKU\S-1-5-21-1409082233-1606980848-682003330-500\software\microsoft\internet explorer\search\searchassistant explorer\main\ || default_search_url (ID = 555437)
15:36: Registry Sweep Complete, Elapsed Time:00:00:07
15:36: Starting Cookie Sweep
15:36:  Found Spy Cookie: yieldmanager cookie
15:36:  administrator@ad.yieldmanager[2].txt (ID = 3751)
15:36: Cookie Sweep Complete, Elapsed Time: 00:00:00
15:36: Warning: Failed to open file "c:\pagefile.sys". 拒绝访问。
15:36: Starting File Sweep
15:36:  Found Adware: look2me
15:36:  installer.exe (ID = 168558)
15:36:  Found Adware: isearch desktop search
15:36:  mte3ndi6odoxng.exe (ID = 178687)
15:36:  icont.exe (ID = 65722)
15:36:  wghext.dll (ID = 163672)
15:36:  czrsrv.dll (ID = 163672)
15:36:  wvspdmod.dll (ID = 163672)
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:36:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  Found Adware: apropos
15:37:  atmtd.dll (ID = 166754)
15:37:  gliedown2.dll (ID = 79911)
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  atmtd.dll._ (ID = 166754)
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  Warning: Failed to open file "c:\winnt\system32\t8r8li9u18.dll". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\ktnsl7571.dll". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\porfnw.dll". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\software.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\default.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\security". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\security.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\system.alt". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\sam". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\sam.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\system". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\software". 进程无法访问文件，因为另一个程序正在使用此文件。
15:37:  Warning: Failed to open file "c:\winnt\system32\config\default". 进程无法访问文件，因为另一个程序正在使用此文件。
_________>to be continue...

(3)
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:37:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:38:  Found Adware: isearch toolbar
15:38:  cmdinst.exe (ID = 154747)
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:38:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  cnsminex.dll (ID = 53263)
15:39:  cnsminex.ini (ID = 53264)
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:39:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscse00d4b35-f1d4-47bd-837f-59c7d9906ac7.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs7d7ea23a-73a2-4908-a8f8-5d27e65c80c6.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsf0612a93-cae0-4ed6-a710-9ab4ab4b330f.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsc78c4a7c-bffc-4eef-b1fd-ef52d401399b.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsfa3d2422-2ed5-45c3-8df0-1eb4f0b188af.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1f394a28-6f3f-4701-a855-81edf99b26b7.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs10ef0f4a-9cc4-4ae7-a6bc-6d9765d5a7b9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs90590080-3ef5-4e47-bba0-8b114340dc73.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs0ae150ed-59c7-455c-9ad4-add4abed41ed.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs90a38ae8-d161-447a-a612-26f710cb5bdb.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs30b41a8f-ce85-474c-9295-b65192ec1814.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs01bd82fc-6abe-4f09-809a-697c05895d2b.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs4faf3751-8b86-4d8c-82ff-f344b5d50a03.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs3ee3a69a-4f67-461c-bcd2-55dd43001f76.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
_____________>to be continue...

(4)
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs688915d2-80ff-4a89-8337-971d34a95344.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscscdad80f9-3c28-4c90-855e-77639d9acb41.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs14d2c238-fd34-4a33-ac53-cb62e0bac7a9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs7381b328-33e3-408a-ac97-c173b6935301.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsd4e876b1-f79c-4bfb-b01c-766ffa0db82a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs5a42c486-49be-4e9d-bbe3-306537683a2c.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs222b85d0-f50c-4901-a141-0dcdffee2d73.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsbf765f25-ef20-44c1-8875-72d452be500c.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscseaff0743-ee69-42a2-be82-fc697d15ce4a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsd85af2d7-7dea-430c-9890-81a3914f486b.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs701a77ba-4b53-450b-8c26-e5d4e56d67ae.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1d4ea6c4-f192-48b6-bf59-7553662eccd9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb9442aaf-31ff-4b66-92ab-f7fb3111b1c3.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsdb48b5f7-9955-4380-9a36-454a665740cf.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsa6cd9948-903c-44da-b3ad-8fed816e4406.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs6d1db31b-0aee-42f6-979a-e1c366df5ff4.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs3135e5f8-7496-435f-95f8-d892f43e4be2.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs8d915fbe-597c-4f8d-9736-a4eeb409371a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs50a8fdce-7176-431f-9cad-233e54459017.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsc8ecdc44-ad71-4cb6-ad64-6af9b418fbed.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs26a20731-5f1d-4048-8974-eee4e6c98d26.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs562a4a1a-d719-42d3-b8ef-cb5470282572.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs4960392e-d2cb-4d16-8347-c579de84c615.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs33072c58-1063-4f96-b4fa-2745ad959b0e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs75217be1-8281-4628-aeee-b04592e30409.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb8d398a0-c257-423b-9ee7-4d7e57f74219.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsc88a9b93-6a4c-4d5a-962b-5e7dbe11e73e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsd027bce9-4c3c-49dc-8ae6-fb1d56a7e3f7.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs415a73e5-db4d-4a9a-b6f3-62021d3d81a3.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs35f99d3b-0cfa-40a5-bf72-a1553767b98a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsc0a89381-6f10-4587-b969-17af35e98529.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs7737382b-c67f-4dea-bc35-46a99e53d0a6.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsf01bf926-d6e0-4e51-b0c5-9110f4eab5e4.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs2f0a1584-ff65-45ec-ba29-80f230c5e3e9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsddee9fdb-8e7c-441b-ae2c-88a02756de02.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs99790651-b677-4483-8fd0-ec9c247bdab1.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs7760c4e1-b123-4978-8207-1ca746289cf7.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs97ba5f50-877d-4e6e-bf58-26816f0b7da9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs7135563a-aeee-41c1-a58f-89928094425e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsbf63ca47-1686-40f8-986b-242683e3f255.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb9057cb4-4029-4e44-b819-6c8eee23ac51.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs6dba8f59-adad-403c-b6e3-b8e97ebff8c0.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscse23c77a5-66aa-43a4-bc99-6defef822c00.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs3d07ffed-446d-4b65-8907-9826366604ce.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs2ee914a7-e215-494e-9806-c8d2de5351e8.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs685581b2-fa86-438d-9c1b-8b171fc0c2c5.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
_____________>to be continue...

(5)
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs91878f3d-bf7e-4d6d-bca2-42fdd6feca58.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs34e3fa02-e93b-4618-898a-378d1ce5927b.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs48642309-7ced-45a6-a6c6-48e7789267af.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1d9a3722-2c53-44cf-b00e-7cb70a23a6d3.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb10b4622-bb0f-4a79-986f-888a7872845e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1e7a2b41-f75a-491c-bf45-8f6adc7d6062.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsee8b2000-0790-41e5-a912-db2ea587d8f7.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs70ee130f-6678-44ad-889d-492181d220bb.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs8d68b953-a5dd-458f-a210-e37e99e64fe9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1a4870e2-343e-4cdf-be44-ef3cbe96afad.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs2977ab70-a380-4735-81b0-7baf8dc1623e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs5e767820-4c29-420a-8e3c-8f667cb9ffe6.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs14b94eb2-340b-44ce-ba0e-4ee449788452.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs55bed9fc-7c1c-4303-bd65-783ee0c0677e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscse3bb7338-a846-42f0-a19a-5069bf0f1939.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsacac0a0c-14c6-447b-bb25-be0e0022d82f.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsac92dea1-88aa-4cc0-836c-5739a5b09852.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs6989f320-c5a1-477d-9055-16e44038ab72.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsf5a0131c-a55f-4e1b-b676-2626451e1ace.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscse61b5dc3-2d9d-42a4-a8be-161b30b4a3b2.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs761e4867-b5f6-473b-9f1a-a4a7810b13c4.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs132bf290-8513-4149-8044-63240004a1cd.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb6cfadbe-81c7-47cd-88f4-9060bd201f35.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsc42e11bc-73f2-4903-964b-0776c2e6009e.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsdb28dad8-f8bf-49f0-9b0c-849044ac1e7a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs5e01671c-2915-475d-8598-a3295f1ebeb9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs8e172509-48af-47c3-abe7-5eda22cc64ae.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs5d95a2b5-9fb1-4773-825f-d89aefff2e79.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsb4db5b78-5666-4ee4-b257-a48d35b04cff.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs867b67fd-8ca6-4002-a421-926efbd51cfb.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsfcfd371d-1227-45bd-a641-223d3305bee6.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs1ec746b2-37aa-4724-8c69-aece8890a646.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
_____________>to be continue...

(6)
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsf93e8c67-0eb0-438a-b5e9-15079e14a05a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs5a0e6f85-d9ea-4f10-bd09-380fb5e55054.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs584dc302-5179-4f44-b427-a4744b9763f5.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsfb4ed6d5-effd-4723-858d-c752bf3d4a34.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsbc505888-f189-4601-b5d5-94f802f39d9b.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs0de737e1-eff2-45b6-a843-37e11d751811.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs107eb6a3-eb0f-45f8-abb0-9751d5a5f7d6.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs67f2bebd-f3fb-419e-b265-c8c11f90f9be.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs37785753-822b-4eea-875d-9243a21b55f9.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs3660818e-0473-4633-926e-dfa48c9f0c9a.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscs80d5d9d0-41e5-4433-9e3b-aca62d187226.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\all users\application data\webroot\spy sweeper\temp\sscsa2003c5c-491e-4198-a568-7b09a1a4a8dc.tmp". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\administrator\ntuser.dat". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\administrator\ntuser.dat.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\administrator\local settings\application data\microsoft\windows\usrclass.dat". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  Warning: Failed to open file "c:\documents and settings\administrator\local settings\application data\microsoft\windows\usrclass.dat.log". 进程无法访问文件，因为另一个程序正在使用此文件。
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:40:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:41:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:41:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:41:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
_____________>to be continue...

(7)
_____________>to be continue...

（8）
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:44:  5d2dc39a-58b7-4938-9b80-731958 (ID = 144946)
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45: File Sweep Complete, Elapsed Time: 00:09:37
15:45: Full Sweep has completed.  Elapsed time 00:11:10
15:45: Traces Found: 231
15:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
_____________>to be continue...

（9）
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:46: Removal process initiated
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  Quarantining All Traces: look2me
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  Quarantining All Traces: iedown
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:46:  Quarantining All Traces: sc-keylog
15:46:  Quarantining All Traces: trojan-downloader-conhook
15:46:  Quarantining All Traces: apropos
15:46:  Quarantining All Traces: cnsmin
15:47:  Quarantining All Traces: findthewebsiteyouneed hijacker
15:47:  Quarantining All Traces: icannnews
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  icannnews is in use.  It will be removed on reboot.
15:47:    C:\WINNT\system32\t8r8li9u18.dll is in use.  It will be removed on reboot.
15:47:    C:\WINNT\system32\porfnw.dll is in use.  It will be removed on reboot.
15:47:    C:\WINNT\system32\guard.tmp is in use.  It will be removed on reboot.
15:47:  Quarantining All Traces: isearch desktop search
15:47:  Quarantining All Traces: isearch toolbar
15:47:  Quarantining All Traces: virtumonde
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:47:  Quarantining All Traces: yieldmanager cookie
15:47:  Preparing to restart your computer. Please wait...
15:47: Removal process completed.  Elapsed time 00:00:44
********
15:33: |      Start of Session, 2005年11月2日      |
15:33: Spy Sweeper started
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
15:34: Your spyware definitions have been updated.
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
15:34:
| End of Session, 2005年11月2日      |