bunks12 Posted August 11, 2010 Everytime I scan my computer, the same 2 registry problems appear....each time I quarrantine then restart the computer...I immediately do another scan and they are back...info below Trjan Agent/Gen 2 items Regisry Keys HKU\DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 Share this post Link to post Share on other sites
SUPERAntiSpy Posted August 12, 2010 Everytime I scan my computer, the same 2 registry problems appear....each time I quarrantine then restart the computer...I immediately do another scan and they are back...info below Trjan Agent/Gen 2 items Regisry Keys HKU\DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 Please post the entire scan log here for review. Share this post Link to post Share on other sites
bunks12 Posted August 12, 2010 SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 08/11/2010 at 05:52 PM Application Version : 4.33.1000 Core Rules Database Version : 5346 Trace Rules Database Version: 3158 Scan type : Complete Scan Total Scan Time : 00:27:33 Memory items scanned : 567 Memory threats detected : 0 Registry items scanned : 6350 Registry threats detected : 2 File items scanned : 6646 File threats detected : 1 Adware.Tracking Cookie C:\Users\Howard\AppData\Roaming\Microsoft\Windows\Cookies\howard@atdmt[2].txt Trojan.Agent/Gen HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20090604 HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20090604 Share this post Link to post Share on other sites
siliconman01 Posted August 12, 2010 If you are running Windows XP, Vista, or Windows 7, your current version of SAS is significantly out-of-date and should be upgraded. You can upgrade it by right clicking on the SAS brown beetle icon in the systray and selecting "Check for Updates". It will notify you that a new version (V4.41.1000) is available for installation. Let SAS upgrade itself and then run a new complete scan and see if it removes the infections. If it does not remove the infection, reboot your computer into SAFE MODE and run another SAS complete scan. If for some reason, you cannot get SAS to upgrade itself to V4.41.1000 automatically. 1. Uninstall SAS via Control Panel>Programs and Features (Add and Remove Programs for Windows XP) 2. Download and install 4.41.1000 from the link below. https://www.superantispyware.com/ BE SURE that you have updated the Core/Trace definitions to the latest before running your complete scans. Share this post Link to post Share on other sites
bunks12 Posted August 12, 2010 There are new updates to install but when I click to install it tells me only an administrator can perform the install...I'm using Windows 7 and to my knowledge haven't done anything regarding the administrator. Share this post Link to post Share on other sites
mogojohn Posted August 12, 2010 Follow the instructions here https://www.superantispyware.com/supportfaqdisplay.html?faq=84 Share this post Link to post Share on other sites
bunks12 Posted August 13, 2010 Thanks for everyones help so far...I was able to update the software and then redid the scan twice....still getting the same two entries as before: Trjan Agent/Gen 2 items Regisry Keys HKU\DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 Share this post Link to post Share on other sites
siliconman01 Posted August 14, 2010 Thanks for everyones help so far...I was able to update the software and then redid the scan twice....still getting the same two entries as before: Trjan Agent/Gen 2 items Regisry Keys HKU\DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN#20090604 I suspect that these 2 registry keys are locked and SAS cannot remove them. I do not know your level of expertise for manually working with the Windows registry editor so I think the best thing to do is to contact SAS Customer Support and let the SAS gurus work this out for you. https://www.superantispyware.com/precreateticket.html Share this post Link to post Share on other sites