Jump to content
Rannilas

XP sp3

Recommended Posts

I'm running SAS in safe mode as part of the instruction given here and the program just closes itself while scanning after about 45 to 50 minutes. What should I do? What do you need from me to be able to answer that question? ;) lol

Share this post


Link to post
Share on other sites

I just successfully scanned the registry by itself. I'll keep scanning bit by bit to see if it's crashing somewhere in particular.

Share this post


Link to post
Share on other sites

It's dying while it's scanning the quarantine director of trend micro\internet security\quarantine

Specifically, the last file I saw it processing was UCApyxetoqb_f38.VIR

Share this post


Link to post
Share on other sites

I went to add the quarantine directory to the excluded list and it crashed the program. This made me suspicious. Using a command line to list the contents of the directory I got a cmd.exe - Application Error that read "The instruction at "0x7c9118e9" referenced memory at "0xfffffff8". The memory could not be "read". Click on OK to terminate the program."

This just happen to occur as the dir command was listing UACpyxetoqb_f38.VIR whose timestamp coincides with the previous trojan I had finished removing before this new highjacker kicked in.

Share this post


Link to post
Share on other sites

What happens with SAS scanner if you completely clear out the Trend Micro Quarantine folder and empty your recycle bin? And what version of SAS are you using?

Share this post


Link to post
Share on other sites

Try unchecking the Kernel Direct and Direct Disk Access options under the scanning control preferences of SUPERAntiSpyware and try the scan again. Let us know the results.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...