jcb Report post Posted June 23, 2010 Several days ago, I began getting this for every scan: SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 06/23/2010 at 04:21 PM Application Version : 4.39.1002 Core Rules Database Version : 5110 Trace Rules Database Version: 2922 Scan type : Quick Scan Total Scan Time : 00:20:06 Memory items scanned : 561 Memory threats detected : 0 Registry items scanned : 2286 Registry threats detected : 1 File items scanned : 9163 File threats detected : 29 System.BrokenFileAssociation HKCR\.exe (I deleted the tracking cookies including the flash cookies) I thought this had been dealt with - is it really an error in the registry? My system: Windows XP Pro, IE 8 Thank you. Share this post Link to post Share on other sites
Seth Report post Posted June 25, 2010 Welcome to the SAS forum. Update SAS by right clicking on the SAS tray icon and choosing "Check For Updates". If the file in question re-appears with subsequent scans, then please post the SAS scan log for further analysis. Share this post Link to post Share on other sites
jcb Report post Posted June 25, 2010 1. I did a complete scan earlier tonight in safe mode, and there was only 4 cookies found...nothing else. 2. I manually updated a few minutes ago (my SAS checks for updates every 8 hours). 3. Most recent scan: Please let me hear from you; this is really worrisome. Thank you. SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 06/24/2010 at 10:54 PM Application Version : 4.39.1002 Core Rules Database Version : 5117 Trace Rules Database Version: 2929 Scan type : Quick Scan Total Scan Time : 00:16:54 Memory items scanned : 549 Memory threats detected : 0 Registry items scanned : 2286 Registry threats detected : 1 File items scanned : 8182 File threats detected : 6 System.BrokenFileAssociation HKCR\.exe Adware.Tracking Cookie C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@invitemedia[2].txt C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@specificmedia[1].txt C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@msnportal.112.2o7[1].txt C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@adinterax[2].txt C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@ad.wsod[2].txt C:\Documents and Settings\jcb.PC272393594253\Cookies\jcb@kontera[1].txt Share this post Link to post Share on other sites
Seth Report post Posted June 25, 2010 No need to worry, as the registry item found isn't an infection. Was the item checked off when SAS found it? If not, go ahead and put a check beside the item and allow SAS to fix it. If it still appears, then please submit a Customer Support Request and refer them to this thread. https://www.superantispyware.com/csrcreateticket.html Share this post Link to post Share on other sites
jcb Report post Posted June 25, 2010 No need to worry, as the registry item found isn't an infection. Was the item checked off when SAS found it? If not, go ahead and put a check beside the item and allow SAS to fix it. If it still appears, then please submit a Customer Support Request and refer them to this thread. ------------------------------------------------ I apologize, Seth, I do not know what is meant by "checked off"; I also do not know how to put a check beside the item. Thanks. I see "Enable System File Checker" in Repairs tab; that it? Share this post Link to post Share on other sites
Seth Report post Posted June 25, 2010 You're welcome. When the scan completes, there will be a box to the left of HKCR\.exe. If there isn't a check-mark in that box, then left click on it and the check-mark will appear. Without that check-mark, SAS will not remove/repair the item found. Share this post Link to post Share on other sites
jcb Report post Posted June 25, 2010 Seth, I was just making sure I understood what you were saying; yes of course, the checkmark is always there. Every time I scan though, I get the same results, so apparently SAS is not removing/repairing it. Is next step posting to the link you gave for a "ticket"? Janis Share this post Link to post Share on other sites
Seth Report post Posted June 25, 2010 Is next step posting to the link you gave for a "ticket"? Yes. Share this post Link to post Share on other sites
blazerbob Report post Posted July 10, 2010 Yes. I was getting this same message when I did a scan. It would not go away. My system was slow to boot and it was still getting infected by trojans. I noticed the Windows messenger Icon in my system tray. I didn't remember installing the program. Removing Window messenger solved all my problems. Hope this helps. Share this post Link to post Share on other sites
