Jump to content
Chicken_Salad

Spyware Protector

Recommended Posts

I can't get this off the system. Ran SAS multiple times, disabled system restore, safe mode. Everything I've read here that might help. It's still there. Program is called Spyware Protector. Here's the log

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 02/10/2009 at 03:04 PM

Application Version : 4.25.1012

Core Rules Database Version : 3748

Trace Rules Database Version: 1715

Scan type : Complete Scan

Total Scan Time : 00:21:49

Memory items scanned : 419

Memory threats detected : 2

Registry items scanned : 5893

Registry threats detected : 8

File items scanned : 19652

File threats detected : 6

Trojan.Unclassified/C00-WL/A

C:\WINDOWS\SYSTEM32\__C0092E12.DAT

C:\WINDOWS\SYSTEM32\__C0092E12.DAT

Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\__c0092E12

Trojan.Unclassified/C00-Installer

C:\DOCUME~1\OWNER\LOCALS~1\TEMP\3.TMP

C:\DOCUME~1\OWNER\LOCALS~1\TEMP\3.TMP

[A00F28D84.exe] C:\DOCUME~1\OWNER\LOCALS~1\TEMP\_A00F28D84.EXE

C:\DOCUME~1\OWNER\LOCALS~1\TEMP\_A00F28D84.EXE

C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\3.TMP

C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\_A00F28D84.EXE

C:\WINDOWS\Prefetch\3.TMP-02003525.pf

Trojan.Unclassified/C00-WL

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Asynchronous

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#DllName

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Impersonate

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Startup

HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Logon

If anyone can help, thank you.

Share this post


Link to post
Share on other sites

Hello!

If you open that Rogue antispyware and try to buy it, then can you locate that page and send it to samples[at]superantispyware.com. (DO NOT BUY THIS FAKE ANTISPYWARE!)

Also, try updating SAS, because newest database is 3750 (core)

Share this post


Link to post
Share on other sites

Thx, Lager. I've updated a few more definitions. This morning updated again and still have the problem. I'll keep updating and wait until the superantispyware ppl get this bugger figured out :mrgreen: I've never had a problem SAS didn't eventually 0wN 8)

Share this post


Link to post
Share on other sites
Thx, Lager. I've updated a few more definitions. This morning updated again and still have the problem. I'll keep updating and wait until the superantispyware ppl get this bugger figured out :mrgreen: I've never had a problem SAS didn't eventually 0wN 8)

Submit a support request here and we can run a custom diagnostic:

https://www.superantispyware.com/csrcreateticket.html

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...