Results 1 to 9 of 9

Thread: Can't remove 13 entries after many tries.

  1. #1
    Junior Member
    Join Date
    Jun 2013
    Posts
    6

    Default Can't remove 13 entries after many tries.

    Hello to everybody. I'm new on this forum but not on spybot.

    Few days ago i had to format my pc and now i'm trying to get everything perfect and clean before a new HDD image.

    The matter is that spybot v2.1 can't remove these entries and i tried many many times by a normal scan, fix, quarentine, etc. And there's still shit. So I would be glad to receive some help to finish this job because I'm not able to do it by myself till today.

    My OS: Windows 7 64bits professional
    Spybot version: 2.1

    Search results from Spybot - Search & Destroy

    19/06/2013 14:36:36
    Scan took 00:28:58.
    13 items found.

    Delta.Toolbar: [SBI $15E43F9C] Settings (Registry Key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\DataMngr

    Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
    HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

    Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

    MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\S-1-5-21-1204199601-931382146-3057335051-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

    Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

    Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

    Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
    HKEY_USERS\S-1-5-21-1204199601-931382146-3057335051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

    History: [SBI $49804B54] Browser: History (5) (Browser: History, nothing done)


    Cookie: [SBI $49804B54] Browser: Cookie (33) (Browser: Cookie, nothing done)



    --- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

    2013-05-16 blindman.exe (2.1.18.151)
    2013-05-16 explorer.exe (2.1.18.177)
    2013-05-16 SDBootCD.exe (2.1.18.109)
    2013-05-16 SDCleaner.exe (2.1.18.110)
    2013-05-16 SDDelFile.exe (2.1.18.94)
    2013-05-16 SDFiles.exe (2.1.18.135)
    2013-03-20 SDFileScanHelper.exe (2.1.16.1)
    2013-05-16 SDFSSvc.exe (2.1.18.208)
    2013-05-16 SDHookHelper.exe (2.1.18.2)
    2013-05-16 SDHookInst32.exe (2.1.18.2)
    2013-05-16 SDHookInst64.exe (2.1.18.2)
    2013-05-16 SDImmunize.exe (2.1.18.130)
    2013-05-16 SDLogReport.exe (2.1.18.107)
    2013-05-16 SDOnAccess.exe (2.1.18.4)
    2013-05-16 SDPESetup.exe (2.1.18.3)
    2013-05-16 SDPEStart.exe (2.1.18.86)
    2013-05-16 SDPhoneScan.exe (2.1.18.28)
    2013-05-16 SDPRE.exe (2.1.18.22)
    2013-05-16 SDPrepPos.exe (2.1.18.10)
    2013-05-16 SDQuarantine.exe (2.1.18.103)
    2013-05-16 SDRootAlyzer.exe (2.1.18.116)
    2013-05-16 SDSBIEdit.exe (2.1.18.39)
    2013-05-16 SDScan.exe (2.1.18.177)
    2013-05-16 SDScript.exe (2.1.18.53)
    2013-05-16 SDSettings.exe (2.1.18.136)
    2013-05-16 SDShell.exe (2.1.18.2)
    2013-05-16 SDShred.exe (2.1.18.107)
    2013-05-16 SDSysRepair.exe (2.1.18.101)
    2013-05-16 SDTools.exe (2.1.18.150)
    2013-05-16 SDTray.exe (2.1.18.127)
    2013-05-16 SDUpdate.exe (2.1.18.91)
    2013-05-16 SDUpdSvc.exe (2.1.18.76)
    2013-05-16 SDWelcome.exe (2.1.18.129)
    2013-05-15 SDWSCSvc.exe (2.1.18.2)
    2013-06-17 unins000.exe (51.1052.0.0)
    1999-12-02 xcacls.exe
    2012-08-23 borlndmm.dll (10.0.2288.42451)
    2012-09-05 DelZip190.dll (1.9.0.107)
    2012-09-10 libeay32.dll (1.0.0.4)
    2012-09-10 libssl32.dll (1.0.0.4)
    2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
    2013-05-16 SDAV.dll
    2013-05-16 SDECon32.dll (2.1.18.113)
    2013-05-16 SDECon64.dll (2.1.18.113)
    2013-04-05 SDEvents.dll (2.1.16.2)
    2013-05-16 SDFileScanLibrary.dll (2.1.18.12)
    2013-05-16 SDHook32.dll (2.1.18.2)
    2013-05-16 SDHook64.dll (2.1.18.2)
    2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
    2013-05-16 SDLicense.dll (2.1.18.0)
    2013-05-16 SDLists.dll (2.1.18.4)
    2013-05-16 SDResources.dll (2.1.18.7)
    2013-05-16 SDScanLibrary.dll (2.1.18.131)
    2013-05-16 SDTasks.dll (2.1.18.15)
    2013-05-16 SDWinLogon.dll (2.1.18.0)
    2012-08-23 sqlite3.dll
    2012-09-10 ssleay32.dll (1.0.0.4)
    2013-05-16 Tools.dll (2.1.18.36)
    2012-12-18 Includes\Adware.sbi (*)
    2013-06-12 Includes\AdwareC.sbi (*)
    2010-08-13 Includes\Cookies.sbi (*)
    2012-11-14 Includes\Dialer.sbi (*)
    2012-11-14 Includes\DialerC.sbi (*)
    2012-11-14 Includes\HeavyDuty.sbi (*)
    2012-11-14 Includes\Hijackers.sbi (*)
    2012-11-14 Includes\HijackersC.sbi (*)
    2012-11-14 Includes\iPhone.sbi (*)
    2012-11-14 Includes\Keyloggers.sbi (*)
    2012-12-18 Includes\KeyloggersC.sbi (*)
    2013-05-29 Includes\Malware.sbi (*)
    2013-06-12 Includes\MalwareC.sbi (*)
    2012-11-14 Includes\PUPS.sbi (*)
    2013-06-12 Includes\PUPSC.sbi (*)
    2012-11-14 Includes\Security.sbi (*)
    2012-11-14 Includes\SecurityC.sbi (*)
    2013-05-22 Includes\Spyware.sbi (*)
    2013-05-08 Includes\SpywareC.sbi (*)
    2011-06-07 Includes\Tracks.sbi (*)
    2012-11-19 Includes\Tracks.uti (*)
    2013-01-16 Includes\Trojans.sbi (*)
    2013-05-13 Includes\TrojansC-02.sbi (*)
    2013-06-12 Includes\TrojansC-03.sbi (*)
    2013-03-14 Includes\TrojansC-04.sbi (*)
    2013-05-08 Includes\TrojansC-05.sbi (*)
    2013-04-19 Includes\TrojansC.sbi (*)

    If you need anyother information from my computer just let me know!

    Thank you in advance,
    Mameludas.
    Last edited by tashi; 2013-06-19 at 23:22. Reason: Moved from the malware forum

  2. #2
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,483

    Default

    Did you rightclick and run the scan as Admin?
    http://www.safer-networking.org/faq/...indows-vista7/
    That might help to remove this one:
    Delta.Toolbar: [SBI $15E43F9C] Settings (Registry Key, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\DataMngr
    As for the rest,they`re Usage Tracks,and some may return as you use your computer,even if they were fixed originally:
    Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
    HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

    Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

    MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\S-1-5-21-1204199601-931382146-3057335051-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
    HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

    MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

    Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

    Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

    Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
    HKEY_USERS\S-1-5-21-1204199601-931382146-3057335051-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

    History: [SBI $49804B54] Browser: History (5) (Browser: History, nothing done)


    Cookie: [SBI $49804B54] Browser: Cookie (33) (Browser: Cookie, nothing done)
    http://www.safer-networking.org/faq/usage-tracks/

  3. #3
    Junior Member
    Join Date
    Jun 2013
    Posts
    6

    Default

    Thank you for your answer, so i just have to take care of the Delta Tool bar entry. Cool :D.

    You scared me, when you asked for running as administrator the system scan. I did'nt remember if i did, so that i did it again as admin to be sure.

    Here you have the Print Screen:
    Sin título.jpg

    I remember i already deleted this line from regedit by hand before. I don't know why there's still this problem. I went to regedit and looked for DataMngr on HKEY_LOCALMACHINE/SOFTWARE/ to delete it. I don't know if i did wrong, but i have a HDD image before editing anything. So i can make it back if needed.

    Here you have a print screen of my regedit:
    regedit.png

  4. #4
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,483

    Default

    Thanks for the screen print.
    Looks like the DataMngr isn't in your registry anymore.Did Spybot still detect it after it ran a scan on startup?

  5. #5
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,483

    Default

    If it did,please see here(I just noticed it.):
    http://forums.spybot.info/showthread...-Delta-Toolbar

  6. #6
    Junior Member
    Join Date
    Jun 2013
    Posts
    6

    Default

    Yes, Spybot still detect delta toolbar after i erase it in the regedit manually.

    So the problem is that spybot detects it, and SDcleaner says it can't remove it. it's already removed i think... but why still detected? I don't know if it's totally removed

    Thx for you time
    Last edited by mameludas; 2013-06-21 at 20:56.

  7. #7
    Junior Member
    Join Date
    Jun 2013
    Posts
    6

    Default

    FIXED!!

    I found the solution over here.

    I used a tool colled Adwcleaner.exe. It worked perfectly and here there's the screenshot:
    Attached Images Attached Images

  8. #8
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,483

    Default

    Good,glad it worked.

  9. #9
    Junior Member
    Join Date
    Jun 2013
    Posts
    6

    Default

    Here there's the adwcleaner's log:

    Edit


    And there's no more Delta toolbar problems. I'm happy.


    Thank you for your time!
    Mameludas.
    Last edited by tashi; 2013-06-24 at 06:13. Reason: Sorry, the log was removed. Only Spybot-S&D logs in this forum please unless requested by Team. :-)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •