Jump to content

david banner

Members
  • Content Count

    40
  • Joined

  • Last visited

Posts posted by david banner


  1. I have been infected with malware which prevents me from running programs which launch other programs / process (e.g changing the time / date) if I try a popup appears telling me that my "interntd security settings prevented one or more files from being opened"

    Also if I search for a program on the start menu in windows 7 (64bit) (e.g SUPERAntiSpyware) a link called "Programs" and only that link appears and if I try to run it I get the same error as above

    SAS shows me I have 2 reistry entries but despite rebooting to remove they show up again on the next scan sad.gif

    the 2 keys are :

    (x86) HKLM\Software\Microsoft\Windows NT\Current Version\Image File Execution Options\EHSHELL.EXE

    and

    (x86) HKLM\Software\Microsoft\Windows NT\Current Version\Image File Execution Options\EHSHELL.EXE#Debugger

    I can't post the log as notyhing happens when I click the link

    Can anyone help? it's driving me mad!

    Is this it?

    http://www.file.net/process/ehshell.exe.html. Think SAS too may FP today says irfanview is trojan :x


  2. Can anyone help? Is this a false positive?

    File details: C:\Program Files\SystemScheduler\wscheduler.exe

    Size: 98,304 bytes

    Created: 08 July 2008

    Modified: 16 June 2008

    SUPERAntiSpyware log:

    Generated 10/31/2011 at 09:09 PM

    Application Version : 5.0.1134

    Core Rules Database Version : 7874

    Trace Rules Database Version: 5686

    Scan type : Complete Scan

    Total Scan Time : 00:12:52

    Operating System Information

    Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)

    Administrator

    Memory items scanned : 594

    Memory threats detected : 1

    Registry items scanned : 43160

    Registry threats detected : 1

    File items scanned : 9276

    File threats detected : 1

    Trojan.Agent/Gen-Autorun[swisyn]

    [WScheduler] C:\PROGRA~1\SYSTEMSCHEDULER\WSCHEDULER.EXE

    C:\PROGRA~1\SYSTEMSCHEDULER\WSCHEDULER.EXE

    C:\PROGRA~1\SYSTEMSCHEDULER\WSCHEDULER.EXE

    All advice gratefully recieved,

    Tiptoe

    Scotland

    Have you system scheduler on your pc? See

    http://www.splinterware.com/products/wincron.htm

    and https://forums.superantispyware.com/index.php?/topic/6693-wshedulerexe/


  3. The public pre-release testing is supposed to start this week. The final public release depends on what issues are found during the pre-release testing.

    ok thanks for that. is there anywhere one can reg to get email when final public release ready? If not will watch out for it. It always seems to find tracking cookies others miss even though i have my cookies deleted by winpatrol. must look in temp files?

  4. You cannot start an update via the Task Scheduler (SSUpdate.exe). The update is controlled internally via communications between SuperAntiSpyware.exe and SSUpdate.exe. This is changed in the upcoming new V5.0 which uses Task Scheduler for both updates and scheduled scans.

    ok thanks when will v 5 be available?

×
×
  • Create New...