Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: logs  (Read 4081 times)

0 Members and 1 Guest are viewing this topic.

876543219

    Topic Starter


    Beginner

    Thanked: 3
    logs
    « on: September 18, 2009, 05:16:44 AM »
    My computer has being running good and i don't think it has any viruses but i thought i would run these three logs and post them just in case.



    I did get the lates updates for these

    And i was wondering why if superantyspyware doesn't give me live protection why do i have to turn it of everytime i turn my computer off it will show a end program now i notice when i turn of avira live protection it does run faster and if there are any of the other programs that i have giving me live protection that i don't know about because my computer is slower than a pc i have that's a 700 mhz on the internet

    I have avira antivirus superantspyware hijackthis malwarebytes antimalwar and ccleaner

    and i was also wondering if there are any other good free anti virus programs i could try my nortan and avg trials both expired is there any way i could extend them

    Superantispyware log


    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 09/18/2009 at 11:53 AM

    Application Version : 4.27.1002

    Core Rules Database Version : 4090
    Trace Rules Database Version: 2030

    Scan type       : Complete Scan
    Total Scan Time : 03:24:05

    Memory items scanned      : 454
    Memory threats detected   : 0
    Registry items scanned    : 4433
    Registry threats detected : 0
    File items scanned        : 16412
    File threats detected     : 41

    Adware.Tracking Cookie
       C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[1].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@apmebf[2].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@burstbeacon[1].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[1].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@casalemedia[1].txt
       C:\Documents and Settings\Administrator\Cookies\administrator@burstbeacon[2].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
       C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\guest@247realmedia[1].txt
       C:\Documents and Settings\Guest\Cookies\guest@2o7[1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\guest@atdmt[1].txt
       C:\Documents and Settings\Guest\Cookies\guest@bluestreak[1].txt
       C:\Documents and Settings\Guest\Cookies\guest@chitika[2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][3].txt
       C:\Documents and Settings\Guest\Cookies\guest@doubleclick[1].txt
       C:\Documents and Settings\Guest\Cookies\guest@fastclick[2].txt
       C:\Documents and Settings\Guest\Cookies\guest@kontera[2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\guest@mediaplex[2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][2].txt
       C:\Documents and Settings\Guest\Cookies\guest@overture[1].txt
       C:\Documents and Settings\Guest\Cookies\guest@questionmarket[1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\guest@trafficmp[2].txt
       C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
       C:\Documents and Settings\Guest\Cookies\guest@tribalfusion[1].txt













    Malwarebytes' Anti-Malware 1.41
    Database version: 2819
    Windows 5.1.2600 Service Pack 3

    9/18/2009 12:04:47 PM
    mbam-log-2009-09-18 (12-04-47).txt

    Scan type: Full Scan (C:\|)
    Objects scanned: 149556
    Time elapsed: 3 hour(s), 27 minute(s), 36 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)







    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 8:26:56 AM, on 9/18/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\COMPUT~1\cac.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
    R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Computer Alarm Clock] C:\PROGRA~1\COMPUT~1\cac.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
    O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - AppInit_DLLs: C:\WINDOWS\system32\prio.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Google Update Service (gupdate1c9c1374ac7f430) (gupdate1c9c1374ac7f430) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    --
    End of file - 7461 bytes




    « Last Edit: September 19, 2009, 06:31:35 PM by 876543219 »
    Believe half of what you see and none of what you hear                     microsoft windows xp professional  version 2002 service pack 3 celeron 2.80ghz 20gb hardrive 504mb ram

    876543219

      Topic Starter


      Beginner

      Thanked: 3
      Re: Logs
      « Reply #1 on: September 19, 2009, 05:56:48 PM »
      Do you think my computer is virus free
      Believe half of what you see and none of what you hear                     microsoft windows xp professional  version 2002 service pack 3 celeron 2.80ghz 20gb hardrive 504mb ram

      CBMatt

      • Mod & Malware Specialist


      • Prodigy

      • Sad and lonely...and loving every minute of it.
      • Thanked: 167
        • Yes
      • Experience: Experienced
      • OS: Windows 7
      Re: logs
      « Reply #2 on: September 20, 2009, 04:17:42 AM »
      Please refrain from bumping your posts.  This is a very busy section, so we can't respond immediately there are only a couple of malware specialists and we have to work with 100's of users each week.  When you bump your post, it can cause delays and increase your waiting time.  Feel free to read this:
      http://www.computerhope.com/forum/index.php/topic,69848.0.html

      Anyway, your logs look clean.  However, I am concerned that each scan took you over three hours.  A scan shouldn't take more than an hour, and that's on a large drive.  Of course, this may have been caused by the fact that you were scanning with SAS and MBAM at the same time.  This is a bad thing to do because as witnessed here, it can greatly increase the scanning time.  But worse than that, two scanners running at once will often cause conflicts and it may cause them to not detect infections properly.  In the future, you should scan with one at a time.  It'll be quicker and more effective.

      As for SAS needing to close when you shutdown...you are receiving that error because SAS isn't being closed properly before you shutdown your computer.  Although the free version doesn't offer live protection, it will sometimes automatically run when you turn on your computer.  To change this, start SAS and click on Preferences.  On the first tab, under Start-Up Options, uncheck Start SUPERAntiSpyware when Windows starts.  That should take care of that issue for you.

      AVG is a free program, by the way.  You can download and use it free of charge.  However, it is advised that you only have one anti-virus.  Because you already have Avira, I would suggest simply sticking with it.  Their success rates are neck-and-neck, so it's hard to say which one is better.  So, if Avira is working for you, then I think it's best to keep it.

      Also, I urge you to get a firewall for further protection.  You're vulnerable without one, so you should look into getting either ZoneAlarm, Kerio Personal Firewall, or Comodo.  They're all good free firewalls.  Just be sure you only have one installed at a time!  Download the firewall of your choice, disconnect from the internet, disable Windows Firewall, and install your new firewall.
      Quote
      An undefined problem has an infinite number of solutions.
      —Robert A. Humphrey