reagannelson Report post Posted December 3, 2010 Hi all! I got an infection and was slowly losing control of my computer. I just download the Pro version of SAS and installed it on my Vista based machine with no problems. I ran a couple of scans and things worked great. The malware is gone, I think. Almost everything seems to be working well. The only problem is, when the real time monitoring SAS starts after boot up, it leave a blank white pop up box in the lower right corner of my monitor. Although it contains a red close "x", I cannot close the box. Right or left clicking on the box does nothing.Can anyone tell me what the problem is? Thanks Share this post Link to post Share on other sites
siliconman01 Report post Posted December 3, 2010 This "sounds" like the white box may be the informational message box that appears when SAS does an definitions update and does not find any updates...or finds that the program needs updated. Try temporarily unchecking realtime protection, reboot, and see if the box appears. Would you please post the scan log of SAS that shows what it quarantined. Also is your Vista machine 32-bit or 64-bit ? Share this post Link to post Share on other sites
reagannelson Report post Posted December 3, 2010 This "sounds" like the white box may be the informational message box that appears when SAS does an definitions update and does not find any updates...or finds that the program needs updated. Try temporarily unchecking realtime protection, reboot, and see if the box appears. Would you please post the scan log of SAS that shows what it quarantined. Also is your Vista machine 32-bit or 64-bit ? I disabled realtime protection and rebooted the machine. At the end of the reboot the SAS box opened on the screen, then when it disappeared the blank white box opend again. I am running Vista 32 bit. Another thing, my search engine stalls after I do a search and select an item to navicate to. If I copy and paste the web page address from below the item, I have no trouble navigating to the page immediately. Here are the logs I have since installing SAS: SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 12/02/2010 at 08:08 AM Application Version : 4.45.1000 Core Rules Database Version : 5767 Trace Rules Database Version: 3579 Scan type : Quick Scan Total Scan Time : 00:13:25 Memory items scanned : 748 Memory threats detected : 0 Registry items scanned : 2522 Registry threats detected : 6 File items scanned : 11214 File threats detected : 61 Adware.Tracking Cookie C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@ad.yieldmanager[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@bellcan.adbureau[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt[4].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt.combing[2].txt media.tattomedia.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] media1.break.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] msnbcmedia.msn.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] naiadsystems.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] oddcast.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] secure-us.imrworldwide.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] securityclick.net [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] vitamine.networldmedia.net [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] www.pornhub.com [ C:\Users\Guest\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\4C7B5QN4 ] C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies\Low\guest@stats.paypal[2].txt C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies\Low\guest@statse.webtrendslive[2].txt C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies\Low\guest@advertising[2].txt C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Cookies\Low\guest@paypal.112.2o7[1].txt acvs.mediaonenetwork.net [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] ads1.msn.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] alotporn.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] babbasex.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] bc.youporn.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] cams.yourfuckbook.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] content3.pornkolt.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] crackle.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] files.adbrite.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] flvtools.spacash.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] gals.teenmodels.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] googleads.g.doubleclick.net [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] hs.interpolls.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] interclick.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] m.uk.2mdn.net [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.fuckedandbound.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.heavy.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.mtvnservices.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.resulthost.org [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.scanscout.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media.tattomedia.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] media1.break.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] msntest.serving-sys.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] naiadsystems.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] oddcast.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] orders.webpower.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] pornotube.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] s-sec.slutload-media.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] secure-us.imrworldwide.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] serving-sys.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] static.plymedia.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] static.sexsearch.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] track.webgains.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] vidii.hardsextube.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] vitamine.networldmedia.net [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.canadaadultfun.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.kinxxx.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.naiadsystems.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.nl-porn.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.pornhub.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.pornotube.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] www.ziporn.com [ C:\Users\Reagan\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\VSC6QRFP ] Trojan.DNS-Changer (Hi-Jacked DNS) HKLM\SYSTEM\CONTROLSET001\SERVICES\TCPIP\PARAMETERS\INTERFACES\{1D0D20EF-F343-4599-90AE-C33E1ABA64E9}#NAMESERVER HKLM\SYSTEM\CONTROLSET003\SERVICES\TCPIP\PARAMETERS\INTERFACES\{1D0D20EF-F343-4599-90AE-C33E1ABA64E9}#NAMESERVER HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{1D0D20EF-F343-4599-90AE-C33E1ABA64E9}#NAMESERVER HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS#NAMESERVER HKLM\SYSTEM\CONTROLSET001\SERVICES\TCPIP\PARAMETERS#NAMESERVER HKLM\SYSTEM\CONTROLSET003\SERVICES\TCPIP\PARAMETERS#NAMESERVER Trojan.Agent/Gen-Cryptor[Egun] C:\PROGRAM FILES\DATALINKII\SERFIND.EXE C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\RACEPAK\FIND COM PORT.LNK SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 12/02/2010 at 10:20 AM Application Version : 4.45.1000 Core Rules Database Version : 5941 Trace Rules Database Version: 3753 Scan type : Quick Scan Total Scan Time : 00:15:25 Memory items scanned : 471 Memory threats detected : 0 Registry items scanned : 1738 Registry threats detected : 0 File items scanned : 21482 File threats detected : 1 Adware.Tracking Cookie C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt.combing[2].txt SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 12/02/2010 at 11:15 AM Application Version : 4.45.1000 Core Rules Database Version : 5941 Trace Rules Database Version: 3753 Scan type : Complete Scan Total Scan Time : 00:48:49 Memory items scanned : 449 Memory threats detected : 0 Registry items scanned : 9031 Registry threats detected : 0 File items scanned : 50987 File threats detected : 80 Adware.Tracking Cookie C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@2o7[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@account.live[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ad.slutload[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ad.yieldmanager[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ad.yieldmanager[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@adcentriconline[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@adcentriconline[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ads-dev.youporn[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ads.bleepingcomputer[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ads.clicksor[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ads.networldmedia[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@ads.youporn[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@adserv2.racingjunk[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@advertise[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@advertising[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@advertising[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@apmebf[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@atdmt[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@bellcan.adbureau[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@brookexxx.weebly[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@bs.serving-sys[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@canadaadultfun[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@casalemedia[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@clicks.fastgetonline[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@clicksor[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@content.yieldmanager[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@content.yieldmanager[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@counter.surfcounters[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@doubleclick[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@gostats[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@mediaplex[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@myroitracking[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@paypal.112.2o7[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@pornhost[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@pornhub[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@pornotube[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@revsci[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@richmedia.yahoo[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@secure-media-sf2p.facebook[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@serving-sys[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@smartadserver[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@statcounter[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@statcounter[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@static.freewebs.getclicky[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@stats.paypal[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@stats.sympatico[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@statse.webtrendslive[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@sympatico.112.2o7[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@tacoda[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@thefind[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@tns-counter[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@tribalfusion[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@tripod[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@web4.realtracker[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.canadaadultfun[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.canadaadultfun[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[10].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[11].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[4].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[5].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[6].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[7].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[8].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.pornhost[9].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@www.youporn[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@xml.trafficengine[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@yieldmanager[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@youporn[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\Low\reagan@zedo[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@apmebf[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt[3].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@bellcan.adbureau[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@citi.bridgetrack[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@mediaplex[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@partypoker[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@youporn[1].txt SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 12/02/2010 at 08:24 PM Application Version : 4.45.1000 Core Rules Database Version : 5946 Trace Rules Database Version: 3758 Scan type : Quick Scan Total Scan Time : 00:17:23 Memory items scanned : 790 Memory threats detected : 0 Registry items scanned : 2640 Registry threats detected : 0 File items scanned : 11225 File threats detected : 5 Adware.Tracking Cookie C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@ad.yieldmanager[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@bellcan.adbureau[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@apmebf[1].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@mediaplex[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt.combing[2].txt SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 12/03/2010 at 07:39 AM Application Version : 4.45.1000 Core Rules Database Version : 5946 Trace Rules Database Version: 3758 Scan type : Quick Scan Total Scan Time : 00:16:27 Memory items scanned : 814 Memory threats detected : 0 Registry items scanned : 2638 Registry threats detected : 0 File items scanned : 11226 File threats detected : 2 Adware.Tracking Cookie C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt[2].txt C:\Users\Reagan\AppData\Roaming\Microsoft\Windows\Cookies\reagan@atdmt.combing[2].txt Share this post Link to post Share on other sites
siliconman01 Report post Posted December 3, 2010 Let's see if revving up to the latest V4.46.1000 will resolve the issue. 1. Go to the link below and download the appropriate SAS Uninstaller Assistant. Save it on your desktop. https://forums.superantispyware.com/index.php?/topic/1344-superantispyware-uninstallation-assistant/ 2. Close down SAS completely. 3. Run the SAS Unstaller Assistant. A reboot will be required at the end of the uninstall. 4. Go to www.superantispyware.com and download/install the latest V4.46.1000. Does this new installation work properly? Share this post Link to post Share on other sites
reagannelson Report post Posted December 3, 2010 Let's see if revving up to the latest V4.46.1000 will resolve the issue. 1. Go to the link below and download the appropriate SAS Uninstaller Assistant. Save it on your desktop. https://forums.superantispyware.com/index.php?/topic/1344-superantispyware-uninstallation-assistant/ 2. Close down SAS completely. 3. Run the SAS Unstaller Assistant. A reboot will be required at the end of the uninstall. 4. Go to www.superantispyware.com and download/install the latest V4.46.1000. Does this new installation work properly? I followed your instructions, removed the old version using the SAS uninstaller, and installed the newest 4.46.1000 version. It did not ask for my registration code but it installed an SAS Pro icon on my desktop. When I double click the icon, or right click and select "open" the program will not start. When I booted in "safe mode", SAS would not run. Windows claimed the path to the file was no longer valid. I checked the directory and the file was right there where it was supposed to be, but it would not run. I ran "rKill" in safe mode and it stopped a file named "conime.exe". Would this file have anything to do with my problems? Share this post Link to post Share on other sites
reagannelson Report post Posted December 3, 2010 I followed your instructions, removed the old version using the SAS uninstaller, and installed the newest 4.46.1000 version. It did not ask for my registration code but it installed an SAS Pro icon on my desktop. When I double click the icon, or right click and select "open" the program will not start. When I booted in "safe mode", SAS would not run. Windows claimed the path to the file was no longer valid. I checked the directory and the file was right there where it was supposed to be, but it would not run. I ran "rKill" in safe mode and it stopped a file named "conime.exe". Would this file have anything to do with my problems? I tried it a second time. The normal icon would not start. I had to start SAS from the Start Menu of Vista and had to use the "SAS Alternate Start" icon. The program ran fine and scanned properly. The white box is no longer a problem. Thanks Silicon. Share this post Link to post Share on other sites
siliconman01 Report post Posted December 3, 2010 Take a look at this link concerning conime.exe. The file is an essential part of Windows. http://www.processlibrary.com/directory/files/conime/ You definitely should not need to start SAS with the Alternate Start. There is still something messed up or missing on your system. I recommend that you create a support ticket and let the SAS gurus take a look at your problem. https://www.superantispyware.com/precreateticket.html Share this post Link to post Share on other sites
