SUPER long scan times????

[gigglepot]

Hello, yes it shows the bubbles! So I hit "Apply" and "Ok", x out of it and then go back into it and it reverts back to "none", not bubbles. "None" was the screensaver I used when Bubbles wasn't working. I tried all the rest and they all stay, everything except Bubbles.

[Zenobia]

In that case,it would be best to look at one of Spybot's checks.logfiles,just in case,and go from there.That will be a logfile from the Spybot 2.4 scan,it will state the version at the bottom of the logfile.
Could you open Spybot-S&D Start Center,click System scan,over to the left click Show previous logs,open the Checks logfile with the date of when you did your scan(example:Checks.150418-1908),go to Edit,select all,then rightclick and copy,then paste the logfile here?

[gigglepot]

Hello, here is the logfile:

Search results from Spybot - Search & Destroy

5/19/2015 9:12:30 PM
Scan took 00:49:36.
21 items found.

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\cc1.midasplayer.com\kingdom-profile.sol
Properties.size=65
Properties.md5=7D3A350F8793DF4B7DB70BDBE8035513
Properties.filedate=1431909528
Properties.filedatetext=2015-05-17 18:38:48

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\guitartricks.postaffiliatepro.com\pap20.sol
Properties.size=98
Properties.md5=633549A0E43F4BA8CB3494B8960C176A
Properties.filedate=1431728537
Properties.filedatetext=2015-05-15 16:22:17

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\s.delvenetworks.com\cachedPlayerConfiguration.sol
Properties.size=8621
Properties.md5=7C5955D35E56B1C8DFD5B2CD9996B416
Properties.filedate=1432088424
Properties.filedatetext=2015-05-19 20:20:24

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\s.delvenetworks.com\com.conviva.livePass.sol
Properties.size=224
Properties.md5=23E62F805C51C09DD543340CB69D2572
Properties.filedate=1432088431
Properties.filedatetext=2015-05-19 20:20:30

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\s.delvenetworks.com\EdgeQueryPluginData.sol
Properties.size=72
Properties.md5=8DB99CB777F687B260657C6B5624A86E
Properties.filedate=1432088425
Properties.filedatetext=2015-05-19 20:20:25

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\s.delvenetworks.com\player.sol
Properties.size=74
Properties.md5=EFAE057141197E7F72BB105A46090FCC
Properties.filedate=1432088424
Properties.filedatetext=2015-05-19 20:20:24

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\static1.dmcdn.net\com.dm.player.sol
Properties.size=281
Properties.md5=ACF88940D89C8BF2B8799789C011316D
Properties.filedate=1431985272
Properties.filedatetext=2015-05-18 15:41:11

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8URN8KTV\www.dailymotion.com\analytics.sol
Properties.size=419
Properties.md5=E6923E86ABEE8070FB79AD94F23324BA
Properties.filedate=1431985151
Properties.filedatetext=2015-05-18 15:39:10

Statcounter: [SBI $4E2AF2AC] Tracking cookie (Firefox: Owner (default)) (Browser: Cookie, nothing done)


MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name

MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\DirectInput\MostRecentApplication\Name

MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\DirectInput\MostRecentApplication\Id

Windows.OpenWith: [SBI $F7204896] Open with list - .AVI extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AVI\OpenWithList

Windows.OpenWith: [SBI $770C10CF] Open with list - .BLK extension (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BLK\OpenWithList

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-179166284-1700762968-3849658672-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Cookie: [SBI $49804B54] Browser: Cookie (27) (Browser: Cookie, nothing done)


Cache: [SBI $49804B54] Browser: Cache (972) (Browser: Cache, nothing done)


History: [SBI $49804B54] Browser: History (74) (Browser: History, nothing done)


Cookie: [SBI $49804B54] Browser: Cookie (1166) (Browser: Cookie, nothing done)



--- Spybot - Search & Destroy version: 2.4.40.131 DLL (build: 20140425) ---

2014-06-24 blindman.exe (2.4.40.151)
2014-06-24 explorer.exe (2.4.40.181)
2014-06-24 SDBootCD.exe (2.4.40.109)
2014-06-24 SDCleaner.exe (2.4.40.110)
2014-06-24 SDDelFile.exe (2.4.40.94)
2013-06-18 SDDisableProxy.exe
2014-06-24 SDFiles.exe (2.4.40.135)
2014-06-24 SDFileScanHelper.exe (2.4.40.1)
2014-06-24 SDFSSvc.exe (2.4.40.217)
2014-06-24 SDHelp.exe (2.4.40.1)
2014-04-25 SDHookHelper.exe (2.3.39.2)
2014-04-25 SDHookInst32.exe (2.3.39.2)
2014-04-25 SDHookInst64.exe (2.3.39.2)
2014-06-24 SDImmunize.exe (2.4.40.130)
2014-06-24 SDLogReport.exe (2.4.40.107)
2014-06-24 SDOnAccess.exe (2.4.40.11)
2014-06-24 SDPESetup.exe (2.4.40.3)
2014-06-24 SDPEStart.exe (2.4.40.86)
2014-06-24 SDPhoneScan.exe (2.4.40.28)
2014-06-24 SDPRE.exe (2.4.40.22)
2014-06-24 SDPrepPos.exe (2.4.40.15)
2014-06-24 SDQuarantine.exe (2.4.40.103)
2014-06-24 SDRootAlyzer.exe (2.4.40.116)
2014-06-24 SDSBIEdit.exe (2.4.40.39)
2014-06-24 SDScan.exe (2.4.40.181)
2014-06-24 SDScript.exe (2.4.40.54)
2014-06-24 SDSettings.exe (2.4.40.139)
2014-06-24 SDShell.exe (2.4.40.2)
2014-06-24 SDShred.exe (2.4.40.108)
2014-06-24 SDSysRepair.exe (2.4.40.102)
2014-06-24 SDTools.exe (2.4.40.157)
2014-06-24 SDTray.exe (2.4.40.129)
2014-06-27 SDUpdate.exe (2.4.40.94)
2014-06-27 SDUpdSvc.exe (2.4.40.77)
2014-06-24 SDWelcome.exe (2.4.40.130)
2014-04-25 SDWSCSvc.exe (2.3.39.2)
2015-03-25 spybotsd2-install-av-update.exe (2.4.40.0)
2014-05-20 spybotsd2-install-bdcore-update.exe (2.3.39.0)
2014-07-31 spybotsd2-translation-esx.exe
2013-06-19 spybotsd2-translation-frx.exe
2015-03-25 spybotsd2-translation-hrx.exe
2014-08-25 spybotsd2-translation-hux2.exe
2014-10-01 spybotsd2-translation-nlx2.exe
2014-11-05 spybotsd2-translation-ukx.exe
2015-05-14 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2014-04-25 NotificationSpreader.dll
2014-06-24 SDAdvancedCheckLibrary.dll (2.4.40.98)
2015-03-25 SDAV.dll
2014-06-24 SDECon32.dll (2.4.40.114)
2014-06-24 SDECon64.dll (2.3.39.113)
2014-06-24 SDEvents.dll (2.4.40.2)
2014-06-24 SDFileScanLibrary.dll (2.4.40.14)
2014-04-25 SDHook32.dll (2.3.39.2)
2014-04-25 SDHook64.dll (2.3.39.2)
2014-06-24 SDImmunizeLibrary.dll (2.4.40.2)
2014-06-24 SDLicense.dll (2.4.40.0)
2014-06-24 SDLists.dll (2.4.40.4)
2014-06-24 SDResources.dll (2.4.40.7)
2014-06-24 SDScanLibrary.dll (2.4.40.131)
2014-06-24 SDTasks.dll (2.4.40.15)
2014-06-24 SDWinLogon.dll (2.4.40.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2014-06-24 Tools.dll (2.4.40.36)
2015-04-22 Includes\Adware-000.sbi (*)
2015-02-27 Includes\Adware-001.sbi (*)
2015-05-13 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-11-14 Includes\Dialer-000.sbi (*)
2014-11-14 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2014-01-09 Includes\Fraud-000.sbi (*)
2014-01-09 Includes\Fraud-001.sbi (*)
2014-03-31 Includes\Fraud-002.sbi (*)
2014-01-09 Includes\Fraud-003.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-11-14 Includes\Hijackers-000.sbi (*)
2014-11-14 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-11-14 Includes\Keyloggers-000.sbi (*)
2014-09-24 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-11-14 Includes\Malware-000.sbi (*)
2014-11-14 Includes\Malware-001.sbi (*)
2014-11-14 Includes\Malware-002.sbi (*)
2014-11-14 Includes\Malware-003.sbi (*)
2014-11-14 Includes\Malware-004.sbi (*)
2014-11-14 Includes\Malware-005.sbi (*)
2014-02-26 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2015-05-13 Includes\Malware-C.sbi (*)
2014-01-13 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-11-14 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2015-05-13 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2014-11-14 Includes\Spyware-000.sbi (*)
2015-05-06 Includes\Spyware-001.sbi (*)
2015-01-14 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-11-14 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-03-19 Includes\Trojans-005.sbi (*)
2015-03-31 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-07-09 Includes\Trojans-008.sbi (*)
2014-07-09 Includes\Trojans-009.sbi (*)
2015-05-13 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)

[Zenobia]

Okay,there's nothing related to Bubbles.scr in your logfile,so that's good news.

Now,could you go to C:\Windows\System32,then scroll to make sure Bubbles.scr is in that location.Doubleclick it and the bubbles should appear for a couple seconds.This should work,since your preview worked,but it's to see that all is okay,and the file is in the right location.

Also,this is a Windows 7 computer?And it is yours,just to check that it's not something restricted by the IT department or something like that,though I believe in that case it would be greyed out,and you would not be able to select any screensavers.

[gigglepot]

Yes, the Bubbles screensaver is in that location, and when I double clicked it, bubbles came up.
Yes, it is a Windows 7 computer and it is a home computer, so there is no IT department.
Please let me know what to do next. Thanks!

[Zenobia]

Hmm,I wonder why it reverts to none when you set it,but it will run when you doubleclick the file,and when you preview.Plus it is only the one screensaver.That's baffling.
It should not be blocked by teatimer(if that is active),because when you preview bubbles.scr process would run.Unless teatimer is shutting it down after the process starts.Or another security program perhaps.Did the bubbles stay there when you doubleclicked the file for a bit,or did the bubbles appear,and then quickly stop without you moving the mouse or touchpad?

Also,could you open the Spybot 1.6 version,click Mode,then select Advanced Mode,then click Tools.Make sure that Resident is checkmarked in the right pane and then click Resident in the left pane.Let me know if there is a checkmark by Resident "teatimer." There's a picture available on this website.
http://images.malwarehelp.org/TTIMER/MHoTT004.gif

Also,for future reference,just in case,have you ever used regedit?

[gigglepot]

Hi, yes the bubbles stayed for a bit, until I closed it down (not just a few seconds).
Yes, Resident is check marked.
Yes, there is a check mark beside Resident "teatimer".
Yes, I've used regedit but only when someone was telling me what to do in there (I had an issue a little while ago and OCD from Spybot helped me out!).

[Zenobia]

Okay,the bubbles staying for a bit should mean it isn't teatimer.

If you feel relatively confident about it,I have a page you can follow to try to set Bubbles via the registry.However,if you're feeling a bit unsure about it then please don't,that's no problem,the registry can be tricky.
If you do decide to try setting Bubbles via the registry,then please follow this page to back up your registry first:
http://pcsupport.about.com/od/window...-windows-7.htm
Once that is done,then please scroll down this page to Option Three and follow the instructions to set Bubbles through the registry:
http://www.sevenforums.com/tutorials...er-change.html
When you get to number 5,this is the full path that you need to type in:
C:\Windows\System32\Bubbles.scr
Continue right down until you get to number 9.
If you do use this method and have any problems with the instructions or any questions,please ask.

[gigglepot]

Hi, I actually had the courage to edit the registry but it still didn't work! No bubbles, after the minute is up, it just takes me to the password sign in page to access the computer. So I went back in to the registry to maybe try again and noticed the full path you told me to type in was missing! So I retyped it in, hit "OK" and exed out again. Went back in and it's not there......it's as if it won't save that path I keep typing in!

[Zenobia]

Don't worry,it's nothing you did wrong,it's just that for some reason,that registry change won't stay.
And in that case,I think it might be a good idea to look at a teatimer logfile,just in case.
Down beside your computer clock,you should see an icon with a padlock on it,like the one in this image when you click on it,beside the umbrella:
teatimer-systemtray-en.1.png
Rightclick that icon and select Show log.Once notepad opens,go to Edit,select Select All,then rightclick somewhere within notepad and select Copy,then return here and in a reply rightclick and select Paste to show me the Teatimer logfile.

For the password login screen,if you would rather not have that then rightclick somewhere on your desktop,select Personalize,then Screensaver.If there is a checkmark beside "On resume,display login screen",then uncheck it,click Apply,then Ok.