View Full Version : Help.... a different long duration of scan!!
hi.... i got stuck when i was scanning... every1 saying they got stuck during the scanning of coolWWWSearch.HomeSearch...
but mine is different.... i got stuck at 29256/76994:Win32.Agent.pz...
i used a lot of methods recommended from the forumers here but it still doesnt solve it... i tried the advanced setting of setting beta updates and managed to update 1 file but i nv tried the tealtimer.... i also tried turning off my avast anti virus....and its doesnt work.... i tried downloading a software to scan its memory stuff and no problem found.... T_T
any1 plz assist me in this??
btw...mine is the 1.4 version
spybotsandra
2007-09-05, 11:09
Hello,
Please upgrade your program, version 1.5 is available!
First, please uninstall the old version according to this link:
http://www.safer-networking.org/en/howto/uninstall.html
Now, you can download the new version here:
http://www.safer-networking.org/en/mirrors/index.html
Or choose the direct installation file:
http://www.spybotupdates.com/files/spybotsd15.exe
Don't forget to update afterwards!
Here is a tutorial:
http://www.safer-networking.org/en/howto/update.html
We hope you enjoy 1.5 even more than our previous releases!
Best regards
Sandra
Team Spybot
:sad: :sad: T_T...... i tried...got stuck again at the same thing.... damn....
ok to further update ...i disabled the scanning of win32.pz (there are 2 files of them) and i tried scanning again...
but now, it turned out to be stuck at 34653/76767 Worldsecurityonline.FakeAlert... OMG
so i really dont know how to handle this....any helps?
spybotsandra
2007-09-05, 11:58
Hello,
So you have upgraded to version 1.5?
Please delete the contents of your Windows temp folder and try it again.
You can also try the following:
- select "Settings" --> "Settings" in the navigation bar on the left and untick the checkbox in front of "display confirmation dialogs"
- exit Spybot-S&D so the settings are saved
- run Spybot-S&D and "Check for problems" again
Expect it to run slowly, it appears to hang. Please be patient - it should clear with the problems fixed.
If it still doesn't work please select "Settings" --> "Settings" from the toolbar on the left. In the section "Main settings" please untick the checkbox in front of "Create system restore point when fixing spyware/usage tracks".
Best regards
Sandra
Team Spybot
hi...u mean just enter the windows folder and click temp folder and delete all the stuff inside????
spybotsandra
2007-09-05, 12:14
Hello,
Yes.
Please also do the following:
Clean your Cache and Cookies in IE:
* Close all instances of Outlook Express and Internet Explorer
* Go to Control Panel > Internet Options > General tab
* Click the "Delete Cookies" button
* Next to it, Click the "Delete Files" button
* When prompted, place a check in: "Delete all offline content",
click OK
Clean your Cache and Cookies in Firefox (In case you also have
Firefox installed):
* Go to Tools > Options.
* Click Privacy in the menu on the left side of the Options window.
* Click the Clear button located to the right of each option
(History, Cookies, Cache).
* Click OK to close the Options window
Alternatively, you can clear all information stored while browsing
by clicking Clear All.
A confirmation dialog box will be shown before clearing the
information.
Clean other Temporary files + Recycle bin
* Go to start > run and type: *cleanmgr* and click ok.
* Let it scan your system for files to remove.
* Make sure Temporary Files, Temporary Internet Files, and Recycle
Bin are the only things checked.
* Press OK to remove them.
Best regards
Sandra
Team Spybot
:laugh::laugh:
hi spybotsandra..... finally my problems is solved... many thanks to you man.... appreciate ur help....
but erm...i actually got another problem but i not sure whether its a kind of spyware or something.... i think its off topic but really thankful to u if u could help
everytime i start my dell computer, the task manager auto startup.... i dont know why....
initially, whenever i startup, i get an error saying taskmanager file missing.... at C:\Documents and Settings\Neo Hui Xiang....
so i decided to copy a task manager from the windows to this path C:\Documents and Settings\Neo Hui Xiang and restart it...
what i get now is not an error anymore but its always the task manager auto startup....
this problem stays very long already.... T_T... hope that any1 can help on this...
spybotsandra
2007-09-05, 12:43
Hello,
Probably you had something in the start up processes that you have deleted.
It seems that it is not deleted completely - so some file is left and therefore you get the error message.
Would help to what file it points exactly in your documents and settings.
Best regards
Sandra
Team Spybot
the below is the items i have inside my C:\Documents and Settings\Neo Hui Xiang...
Incase u cant see (quite small)... i listed the items below...
1).housecall6.6 (folder)
2)Bluetooth Software (folder)
3)Cookies (folder)
4)Desktop (folder)
5)Favorites (icon)
6)My Documents (folder)
7)Start Menu (folder)
8)UserData (folder)
9)NTUSER (unknown icon)
10)ntuser.dat.rmbak (unknown icon)
11)taskmgr (icon)
12) dxva_sig (notepad)
and error stop when i copy and paste the taskmgr from the windows to this folder.... is there a way to stop it from popping out everytime the window just starts?
Any procedures?
and further update... i saw this in system startup under tools in spybot.... below shows 2 picx.... is this related to the autostartup of task manager i have?? and should i delete the 2 entry??
http://img104.imageshack.us/img104/4716/picx2lp8.jpg (http://imageshack.us)
http://img402.imageshack.us/img402/1316/picx1pu7.jpg (http://imageshack.us)
spybotsandra
2007-09-05, 14:46
Hello,
Did you already check the autostart menu in your windows control panel (if the taskmanager is activated here)?
I guess it is just a false setting - no infection.
The items you have mentioned:
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:
* C:\Windows\System32
If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com/avcenter/venc/data/trojan.satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com/avcenter/venc/data/spyware.familykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.
The information from Paul Collins' Startup list is static information to help you decide the validity of the entry.
There is no scan involved to actually determine if your particular entry is good or bad.
You can find Paul Collins' Startup list here:
Startup Applications List
http://www.sysinfo.org/startuplist.php
Best regards
Sandra
Team Spybot
oO..... maybe its too much of my imagination i guess... but where do u find the autostart thing in control panel?
i only saw scheduled task though... clicked it and nothing inside it....
any procedures to disabled the autostartup task manager? Sorry for the trouble as i pretty much a computer newbie though... mind explaining the procedures? Many thanks :)
spybotsandra
2007-09-05, 15:27
Hello,
A report might be the easiest way.
There we can see where the taskmanger.exe is being loaded.
Probably it is loaded in a winlogon or a service.
Please send us a complete bug report. In order to do so, please run Spybot - Search & Destroy and switch to Advanced Mode via the menu item Mode, let it scan, try to fix the problems (!) and then go to "Tools" --> "View Report". Tick all the 10 checkboxes (leave "Do not report disabled or known legitimate items" unchecked) you can find there and click on "View Report". Now choose "Export" and save the file to your desktop. Please attach this file to your email and send it again to detections(at)spybot.info.
Please mark it to this post:
http://forums.spybot.info/showthread.php?t=17605&page=2
Best regards
Sandra
Team Spybot