Chicken_Salad Posted February 10, 2009 I can't get this off the system. Ran SAS multiple times, disabled system restore, safe mode. Everything I've read here that might help. It's still there. Program is called Spyware Protector. Here's the log SUPERAntiSpyware Scan Loghttps://www.superantispyware.com Generated 02/10/2009 at 03:04 PM Application Version : 4.25.1012 Core Rules Database Version : 3748 Trace Rules Database Version: 1715 Scan type : Complete Scan Total Scan Time : 00:21:49 Memory items scanned : 419 Memory threats detected : 2 Registry items scanned : 5893 Registry threats detected : 8 File items scanned : 19652 File threats detected : 6 Trojan.Unclassified/C00-WL/A C:\WINDOWS\SYSTEM32\__C0092E12.DAT C:\WINDOWS\SYSTEM32\__C0092E12.DAT Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\__c0092E12 Trojan.Unclassified/C00-Installer C:\DOCUME~1\OWNER\LOCALS~1\TEMP\3.TMP C:\DOCUME~1\OWNER\LOCALS~1\TEMP\3.TMP [A00F28D84.exe] C:\DOCUME~1\OWNER\LOCALS~1\TEMP\_A00F28D84.EXE C:\DOCUME~1\OWNER\LOCALS~1\TEMP\_A00F28D84.EXE C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\3.TMP C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\_A00F28D84.EXE C:\WINDOWS\Prefetch\3.TMP-02003525.pf Trojan.Unclassified/C00-WL HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12 HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Asynchronous HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#DllName HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Impersonate HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Startup HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__C0092E12#Logon If anyone can help, thank you. Share this post Link to post Share on other sites
Lagerx Posted February 10, 2009 Hello! If you open that Rogue antispyware and try to buy it, then can you locate that page and send it to samples[at]superantispyware.com. (DO NOT BUY THIS FAKE ANTISPYWARE!) Also, try updating SAS, because newest database is 3750 (core) Share this post Link to post Share on other sites
Chicken_Salad Posted February 11, 2009 Thx, Lager. I've updated a few more definitions. This morning updated again and still have the problem. I'll keep updating and wait until the superantispyware ppl get this bugger figured out I've never had a problem SAS didn't eventually 0wN Share this post Link to post Share on other sites
SUPERAntiSpy Posted February 13, 2009 Thx, Lager. I've updated a few more definitions. This morning updated again and still have the problem. I'll keep updating and wait until the superantispyware ppl get this bugger figured out I've never had a problem SAS didn't eventually 0wN Submit a support request here and we can run a custom diagnostic: https://www.superantispyware.com/csrcreateticket.html Share this post Link to post Share on other sites
