SpyBot S&D Scan result... in Security

SpyBot S&D Scan result... in Security http://www.dslreports.com/forum/r17300182 en Sun, 29 Nov 2009 08:15:59 EDT Sun, 29 Nov 2009 08:15:59 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17449692 Mele20 :

said by JackCam614

:

Aloha Mele,

I'm delighted to hear that you are PAU with that nagging mystery. (grammar?) ;) Well Done.

Jack

Grammar is correct..."pau" is used a LOT here. Waitress in restaurant: "Are you pau?" (finished with the meal). Co-worker: "When will you be done with the copier? I need to use it." "I'm almost pau". Friday afternoon at 4:30PM: "I'm pau work ...it's pau hana time! (finished (pau) work (hana) so it is party time). :D
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17449692 Wed, 13 Dec 2006 03:59:44 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17446145 jabarnut : That's great news Mele!
Glad you got it sorted out.

I'm using AVG and not Kaspersky, so who knows.

At some point, maybe I'll try removing AVG and running a scan....might get lucky.

This is one of those 'stranger than science' things of course, because, just as I'm sure that many people who are running Kaspersky never had this problem, there are probably configurations out there similar to mine without a problem as well.
So many possibilities that something like this is always hard to pin down.
Oh well...as I said, I rarely run Scans anymore with Spybot, but If I ever decide to 'experiment' a little, I'll certainly post the results.

I'm glad hear at least one of us in no longer bumfuzzled ;)
--
I had a life once.....now I have a Computer and a Modem.]]> http://www.dslreports.com/forum/remark,17446145 Tue, 12 Dec 2006 15:50:07 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17444824 JackCam614 : Hey claudeo,

Thanks for your input. Good info.

Jack]]> http://www.dslreports.com/forum/remark,17444824 Tue, 12 Dec 2006 12:19:16 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17444785 JackCam614 : Aloha Mele,

I'm delighted to hear that you are PAU with that nagging mystery. (grammar?) ;) Well Done.

Jack]]> http://www.dslreports.com/forum/remark,17444785 Tue, 12 Dec 2006 12:14:17 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17442993 claudeo : There is a simple way to delete the temporary internet files and the infamous .dat file without running into the "file in use" problem, as long as you know where to look for those files and you are careful enough not to delete stuff that should not be deleted. You just need to have two accounts with administrator privileges defined on the system. As admin, you can go into the local settings for another user and delete anything you want. Just don't try this with fast user switching (even if your configuration allows fast switching), because you need to actually be logged off as a user in order for another user with admin rights to be able to clean up your mess. ]]> http://www.dslreports.com/forum/remark,17442993 Tue, 12 Dec 2006 01:27:49 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17442182 Libra : Hi Mele,
I'm happy to hear you figured it out and got it fixed.
Sincerely, Libra]]> http://www.dslreports.com/forum/remark,17442182 Mon, 11 Dec 2006 22:41:59 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17441314 Mele20 : MYSTERY SOLVED!!

It was Kaspersky. I had tried turning off realtime protection and then exiting KAV and that made no difference. Since that made no difference in the scan time and the beta version I got of the new MP1 version was AFTER my problem started, I didn't think it was this new MP1 version. But something changed in KAV after Sept 24 that caused the problem. I just uninstalled KAV and then rebooted and ran RegClean and then started a Spybot scan using the Sept 24 definitions and went in the kitchen...came back and wow! The scan was pau! err...finished...(pau is Hawaiian for finished). It took 6 min and 41 seconds so if I update the definitions now to the latest it will probably take 7min 30 sec as it did before whatever changed in KAV.

Since I was in the kitchen while it ran, I don't know if it caused heavy kernel access but I would think not...I think that was KAV also.

I uninstalled KAV to install the new F-Prot so I hope it doesn't interefere with Spybot.

I'm off to the Spybot and KAV forums to post about it. I wonder if the few others I have seen complaining of long scan times now also have KAV.

EDIT: I just updated Spybot to the Dec 8 definitions and ran another scan. This time it scanned in 5:38 seconds! NO excessive CPU usage and no heavy kernel access.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17441314 Mon, 11 Dec 2006 20:34:19 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17380812 JackCam614 : Mele,

"Bumfuzzled" yet once again. (Was that Southern Hawaii, or Southern US ?) ;)
Obviously I should not have jumped to judgment in suggesting that it was your machine, and that Spybot was off the hook. I was glad to see jabanut posting that he was experiencing the same problem. Errr, glad that you posted, jabanut, not glad that you were having a problem. :D

However, 2,815 sets of eyballs here at BBR, plus 231 sets over at the Spybot Forum, yet only 2 reports of problems.
Let me see.... Mele in Hilo, HI, the wettest city in the USA and jabanut in Galaxy M31, believed to be void of H20. Mayhaps Spybot doesn't play well with 'extremes'? :p

I guess, as Mele suggested, "Maybe more folks will report this to Spybot boards and maybe that will lead to some answers."

Jack]]> http://www.dslreports.com/forum/remark,17380812 Fri, 01 Dec 2006 20:49:32 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17380117 Mele20 : Maybe more folks will report this to Spybot boards and maybe that will lead to some answers. But Jack and I have quite similar computers and he isn't affected...sooooo...maybe we just have to remain "bumfuzzled". :D :p

I only do Spybot scans after an update of the definitions as Spybot never finds anything except the occasional FP. I noticed the long scan after the Oct 13 definitions update and then again recently after the update. Since you haven't been doing any scans in a long while it wouldn't help to look in the log to see when was the last normal scan but for me that confirmed that the problem began after Sept 24.

However, installing Spybot with the Sept 24 definitions yesterday was also slow scan so that sounds like my computer...very confusing.

--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17380117 Fri, 01 Dec 2006 18:34:40 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17379935 jabarnut : Wish I could be more help Mele, but I don't think it's specifically your Computer either.

What ever is causing the problem, the same thing happens with mine (I've since tried it on another Computer and it's horribly slow as well).

Unless we're just 'unlucky' or our machines have something in common (I can't imagine what that would be), then I'm bumfuzzled too. :D

As I said, I have very little to go on (even though I've always kept the program up to date, it's been ages since I bothered to run scans with it).
Guess I'm just a 'good boy' with my surfing habits and I got tired of it never finding anything worth mentioning. :)

Therefore, I really can't come anywhere near close to a time where this 'slow scan' change may have taken place.

A mystery for sure.
--
I had a life once.....now I have a Computer and a Modem.]]> http://www.dslreports.com/forum/remark,17379935 Fri, 01 Dec 2006 18:00:27 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17379850 Mele20 :

said by jabarnut

:

A little hint.....if you run it minimized, the scans go a lot faster. (At least, that's how I remember it).

Good luck

That is what I did Oct 14 and then again recently...ran it minimized and I checked after about 6-7 minutes and it had just finished a small portion. So, I minimized it again and let it run a long time ...yet it took about 25 minutes. It took even longer after I got the most recent definitions and that was also minimized the first time. Then I decided something was wrong and began running it maximized and watching it. I remember that minimizing it used to make the scan faster but it doesn't seem to do so anymore.

What I find stranger than the long scan time is what seems to me to be very excessive Kernel usage throughout the scan until the end when bookmarks are scanned. I think the two go together and something is causing both and may or may not be something on my computer.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17379850 Fri, 01 Dec 2006 17:46:32 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17379810 Mele20 : It would appear from what Jabarnut says after your post that maybe Spybot isn't off the hook at all. It certainly is a mystery.

As for PCPitstop tests, that is weird that you haven't seen radically different results in tests there and we both have hyperthreading machines from Dell. Yes, Belarc Advisor correctly identifies the monitor as a Dell 1901 flat panel with the correct date of acquistion (Oct 2003) and gives the correct serial number. I pointed this fact out to PCPitstop forums but, as I said, Dave and the co-owner of the site whose name I forget, don't post now in the forums so I didn't get a good explanation.

I suggested in my posts that PCPitstop would be better off going back to not being able to identify the monitor at all rather than misidentify it and give a completely inaccurate serial number. PC Pitstop could not identify this monitor when I got it in Oct 2003 so that area of the test was blank. I did have to return the first one as DOA and the second and the third also had power supply problems and one would not come out of test mode if I used the DVI cable but worked on Analog. I went through four of them before I got a good one. I didn't test at PCPitstop though until after I got the good one and it didn't identify the monitor at all until this year. I asked several times from November 2003 onward why PCPitstop couldn't identify the monitor and was given vague answers and now they finally "identify" it incorrectly! The only part they have correct is that it is a Dell monitor.

I think 'bumfuzzled" is a Southern saying but I'm not sure. I've been saying it for a long time. :D
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17379810 Fri, 01 Dec 2006 17:38:04 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17378200 jabarnut :

said by Mele20

:

...As for Spybot, I think it and my computer just don't get along any more.

For what it's worth, I've noticed my scans take quite a bit longer than they did in the "old days".

I just tested it on one of my OLDER machines (an Athlon T-Bird 1GHz with 1 Gig of ram), and it took the better part of 25 minutes (Spyware check only).

I can't say how long it's been this way as I rarely bother to run full scans anymore.
I do know that it only took 5 or 6 minutes on this machine some time ago.

A little hint.....if you run it minimized, the scans go a lot faster. (At least, that's how I remember it).

Good luck
--
I had a life once.....now I have a Computer and a Modem.]]> http://www.dslreports.com/forum/remark,17378200 Fri, 01 Dec 2006 13:01:34 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17378138 JackCam614 : Mele,

~~Damn~~ Darn. I'm sorry this didn't work out for you. :( Oh well, we gave it the old college try. ;)

I should have mentioned that sometimes you would have to close IE in order to delete those hidden files in IE cache.
I discovered that on my own, via trial and error.
I'm disappointed to hear that PC Pitstop has apparently deteriorated in performance. I personally have not seen the radical changes in my machines performance tests. (Yep, as you know, I also have Hyper Threading. Dell Dimension Series 8400, P-4 550 (3.4Ghz) 1GB DDR2 SDRam at 400MHz)
The misidentification of your monitor and it's serial number is really odd. If I recall correctly, you had to return a monitor or 2 to Dell for some reason. Maybe switching monitors so often just 'bumfuzzled' the Pitstop diagnostic tests. ('bumfuzzled', your word. I don't know where you got it, but I love it.) I'm curious, does Belarc Advisor correctly ID your monitor and Serial Number?

Anyhoo, I'm sorry you haven't been able to resolve your Spybot scanning problem. That is a real puzzler. It would appear to be a problem that is unique to your machine, so Spybot is off the hook on this one.

Jack

edited for typo]]> http://www.dslreports.com/forum/remark,17378138 Fri, 01 Dec 2006 12:48:54 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17376175 Mele20 : Thanks for the instructions. :)

I can't delete those. I get errors that if I do that the computer will not work. There are only 249 files altogether in 3 folders. I don't think 249 IE temp files are the reason for the dramatic slowdown in Spybot scanning.

edit: I got most of them deleted by doing it a different way with IE closed.

I can get to PCPitstop now on IE... earlier it would only load partially and then hang. I remembered the problem back in Oct when it did this was because I did not have it in the Trusted Zone and when I did put it there, I had to lower the Trusted Zone settings to the lowest possible before PCPitstop would fully load. It was still in the Trusted Zone today but I had put the settings for that zone back like I usually have them...so I had to lower them further before PCPitstop would load.

I don't want to run a test there. It is a fair amount of hassle to do one because you have to shut everything down first and I have two virtual machines running and also have my True Image showing as a virtual drive on my hard drive. PCPitstop would scan the entire virtual drive. I don't want it doing that and don't want to shut that down right now.

The last tests I did there in October, PCPitstop informed me that I have a serial number and monitor that I have never heard of. I immediately posted in the forums and the bad error (the serial number it reported was not even close to the correct one) was shrugged off by one poster and NO ONE from PCPitstop bothered to answer my post. The site is not good anymore I don't think. If that test can dream up a serial number for a nonexistent monitor then who knows what else is inaccurate? And the site's two creators no longer post in the forums to help folks.

I ran tests there on Oct 10 which was three days before the Spybot slowdown so I don't think there is anything wrong with my computer. PCPitstop said I had an extremely fast computer...faster than almost any others that have tested there. (It's very fast for a Pentium 4 (3.8 Ghz with 800 FSB, 2GB RAM and the nVidia 7800GTX card, but faster than some of the new dual cores)??? It never said anything like that when the computer was new in February, rather it told me my computer was "average" and could be improved. I had the saved tests from last February and then the October ones. So, I also asked about this discrepancy in the forums and was told that PCPitstop was unable, in February, to test my computer accurately because it is a hyperthreading CPU and supposedly by October they were finally able to test these computers. But back in February, they said nothing about not being able to accurately test my computer when their tests detected hyperthreading and they should not have misled me with inaccurate results! I was really surprised because the 8300 that this XPS was a replacement for, also was hyperthreading and I wondered with it too, three years ago, why I didn't get better scores at PCPitstop...so all this time they have been unable to accurately test hyperthreading computers (much less the new dual cores) but they never told anyone...except maybe in a forum reply. Thus, I have lost a lot of the respect I once had for that site.

As for Spybot, I think it and my computer just don't get along any more. ]]> http://www.dslreports.com/forum/remark,17376175 Fri, 01 Dec 2006 02:06:36 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17375548 JackCam614 : Mele,

I couldn't 'grab' the whole page, but I C&P'ed the "Solution". Here you go.

Solutions
For manual deletion, use this method:

1. Open an Explorer folder window (for example, double-click My Computer). From the Explorer menu select Tools | Folder Options | View. Make sure that you have checked the box next to "Show hidden files and folders" and uncheck "Hide protected operating system files".
2. Start Internet Explorer and click Tools | Internet Options | General tab | Settings | View Files.
3. IE should have opened up a folder window, typically viewing a folder with the name of C:\Windows\Temporary Internet Files. Put your cursor in the Address area of the folder window and add the name \content.ie5 to the name, so in our example the Address bar would now read c:\Windows\Temporary Internet Files\content.ie5.
4. You should see a series of four or more folders with random eight-character names like ADOZMZS1. Delete each of these randomly named folders. You may get an error that some files are in use, this is normal if you are currently at a web site since those files are in the cache. Hold down the Shift key when deleting the files so they do not go to the Recycle Bin.
5. If desired, reset the folder options you changed in step 1.
In some cases, the IE cache index (INDEX.DAT) file may be damaged and should be deleted. Microsoft documents 306837 and 293402 have additional information on symptoms of the problem and how to remove the file.

Piece of cake, Mele. Let's hope this works for you.

Jack]]> http://www.dslreports.com/forum/remark,17375548 Thu, 30 Nov 2006 23:23:42 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17375410 JackCam614 :

said by Mele20

said by JackCam614

:

You certainly have every reason to feel frustrated at this point. May I suggest you run a free 'Full PC Tuneup' at PC Pitstop. »pcpitstop.com/

Mele,

No, I did not mean "Optimize 1.5", I meant the free "Full PC Tuneup" that is at the heart of the PC Pit stop site.

I understand that you are having a problem running this, but I can post the detailed instructions regarding a fix for the "Internet Explorer Cache Overflow". It's really quite simple, and I will grab a copy from the site and post it here for you. Sorry I'm taking a while to get back to you, but my phone is really keeping me busy at the moment. I'll get it to you ASAP.

Thanks for your patience,

Jack]]> http://www.dslreports.com/forum/remark,17375410 Thu, 30 Nov 2006 23:01:09 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17375193 Indy Sabre : Mele20, Have you tried CCleaner to remove browser and windows temp files?

»www.ccleaner.com/
]]> http://www.dslreports.com/forum/remark,17375193 Thu, 30 Nov 2006 22:26:45 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17373438 Mele20 :

said by JackCam614

:

You certainly have every reason to feel frustrated at this point. May I suggest you run a free 'Full PC Tuneup' at PC Pitstop. »pcpitstop.com/

Did you mean run this: PC Pitstop Optimize 1.5? That is a scam. You download it and run it and it tells you all this stuff it will fix and then won't fix a thing unless you buy it. It says FREE test but it is a scam.

If you meant just run a PCPitstop scan, I can't. IE chokes on the site and won't load it. Most likely due to my having had IE7 beta on this computer for a while. PCPitstop still doesn't work with IE7 and even though I removed IE7 long ago, I had a horrible time a month or two ago trying to get PCPitstop to load on IE. It loads fine on Fx but you can't run tests on Fx.

I used to really like PCPitstop and have used it since its inception many years ago. But recently....well, when I was having all these problems there earlier and I posted in their forums...gee...they have stripped down their forums drastically and Dave never posts regularly anymore...just a few regular users seem to do the help ....but there is no help now, when you have problems, from the owners like there used to be.

Do you happen to know of any other program (free) that will remove Temp files? The PC Pitstop Optimize test showed I have a fair amount of Temp files (261828 KB) but very little Internet Cache. Removing Temp files manually is a pain unless there is a way I have forgotten for doing it easily (probably is a way and I've just forgotten) as when you select all and then try to delete it hangs on a file that is in use. I think there is a simple way to exclude a file like that and yet have the deletion process not stop but go on to delete the other files. I can't recall how to do it though as I haven't done it in a long time.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17373438 Thu, 30 Nov 2006 18:21:08 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17373428 JackCam614 : :D I'm glad you share my appreciation of the English language. Somehow "rude" just didn't quite cut it. ;)

I hope you can get the Full PC Tuneup test running properly for you. We may get lucky, and find the 'bug' that's interfering with your machine running the Spybot S&D. Once again, Good Luck. And please keep us posted.

Jack]]> http://www.dslreports.com/forum/remark,17373428 Thu, 30 Nov 2006 18:19:20 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17372880 Mele20 : "boorish lout" is a perfect description of how the "Advisor" first acted. :D I got a big laugh out of your colorful term. ;) Probably good that you restrained yourself...he has been reading this thread too and has linked it to his reply in the Spybot forum so he may still see it and if so ....well, he asked for it. ;)

I'll run the PCPitstop test...hope I can. I had an awful time a couple of months ago being able to run anything there. I don't recall what I did to finally fix it but I posted in their forums so if I have trouble again, I can refresh my memory (if I still can't recall the fix) by reading my posts there. I hardly ever use IE so I doubt that is the problem (but I do hae to use it with PC Pitstop).. I know I had cache issues with IE back when I used to use it a lot.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17372880 Thu, 30 Nov 2006 16:58:15 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17371510 JackCam614 : Aloha Mele,

I have been following the thread at the Spybot Forum, and it appears that the 'Adviser', md USA spybot fan has made an attempt at redeeming himself. (I'm glad I restrained myself, and deleted the descriptive adj. "boorish lout" from my last post, prior to posting.) ;)

You certainly have every reason to feel frustrated at this point. May I suggest you run a free 'Full PC Tuneup' at PC Pitstop. »pcpitstop.com/
I have found them to be a very reputable, spam free, security/privacy conscious operation.

My first guess is that you may have an 'Internet Explorer Cache Overflow' problem. All versions of IE have a bug in the way they handle the browser cache. If you do, a solution for manual deletion from hidden operating system files can be found there.

I know you are not going to 'quit', or 'give up' on this problem, ;) and PC Pitstop may help you find a solution.

Good Luck,
Jack

Edit; Link to IE Cache Overflow details (del. Oooops, TMI)]]> http://www.dslreports.com/forum/remark,17371510 Thu, 30 Nov 2006 13:09:54 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17369220 Mele20 : Mahalo for your support and kind words. :) md usa spybot fan replied again earlier today with a very long, informative post about his scanning, his computer, and all the possible reasons the scan might be longer including the splitting of some of the definition files in the Oct 13 definitions. His conclusion though was:

"I don't think that any of the above will real help solve your problem. Do you keep backups that would allow you to return Spybot to the state it was in on 2006-09-24? That way running Spybot with those detection files would conclusively point to whether or not it was changes to Spybot or something that changed in your system that caused the radical change in the elapsed time of the Spybot scan."

So, I uninstalled Spybot yet again and ran RegCleaner. (I couldn't see how to get the tool Libra

mentioned to run...was I supposed to click on "merge")? I then had Acronis TI assign a virtual drive letter to the Image I had made on Oct 6. I then copied the Spybot file from that image to the host machine. It had, of course, the Sept 24 definitions when the scan had been 7.5 minutes. I didn't update the definitions but just ran a scan. This time I watched with Process Explorer instead of Task Manager. With PE I can hover the mouse on either end of the window and see the current usage for each CPU. I can't do that in Task Manager. The CPU access seemed to be much more balanced this time but the Kernel access was extremely heavy.

md usa spybot fan said in his post:

"The amount of CPU used by the Kernel on your system seems extremely high compared to my observations during the running of the Spybot scan above. Although I did not attempt to quantify the utilization, I would say on the average it was maybe 20% - 25% and during extended periods of time was near zero."

For me the heavy Kernel access was almost all the time and did not abate until very suddenly when it dropped to nothing toward the end of the scan when bookmarks are scanned. The scan took 23:23! Ugh. That was with Sept 24 definitions.

So, it looks like something changed on my computer between Sept 24 and Oct 14 and that change is permanent and is the cause of the way too long scans with the heavy Kernel access. I have no idea what it could be. I may never know. VERY FRUSTRATING.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17369220 Thu, 30 Nov 2006 02:42:40 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17365214 JackCam614 : I read your posts over at the SpyBot forum, and I found nothing that should elicit such a rude response. Nor did I find anything in his post that might assist you in the resolution of your problem.

Regarding your reply to his post. May I commend you for showing a great deal of restraint, and taking the moral high ground.

His PS;----------->

ps: I personally find your comment "Gee, it's been about 72 hours since I posted and asked for some help" unwarranted and somewhat grating. Three weeks between your September 24th and the October 14th scans and another six weeks to report that you suspected a problem. Exactly what do you expect?
__________________

In my opinion, totally uncalled for.

Jack]]> http://www.dslreports.com/forum/remark,17365214 Wed, 29 Nov 2006 15:18:36 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17362453 Mele20 : I posted again Tuesday morning and thought I wrote a nice post. I did get a reply finally which I just read and replied to.

I'm not keeping Spybot as I am convinced something is wrong and I see no reason to put such a load on my computer for over 30 minutes especially seeing that one CPU is taxed a lot more than the other and that the kernel access is so high during the scan. But that team member who replied tried to tell me that the small increase in scan times that he has seen is the same as the huge increase I have seen. He ignored my questions about the heavy kernel access and one CPU being accessed much more than the other during the scan. Maybe that is normal but I sure doubt it and he could have alleviated my concern if that activity is normal but he didn't.

He also said that something must have changed in my system. Not true. He also intimated that the longer scan times are because I have more files. I actually have 5GB MORE SPACE now because I uninstalled MS Office Beta and Vista beta that I never tried but did download when it first was made available. I ran another scan after I uninstalled those programs and the scan was still at 30 minutes.

He also criticized me for waiting so long to report this and then being "impatient". Gee...I wasn't sure I had a problem until these last definitions! He was rude to me.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17362453 Wed, 29 Nov 2006 04:02:28 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17348730 Mele20 : Thank you Libra. That was an interesting thread. I don't think mine is hanging plus seems it would have started way before October...but I guess it could be hanging as while I watched it...I was looking at Process Explorer a lot and didn't keep my eyes on the little tabulator at the bottom all the time..so I guess it could have hung and then become ok...and maybe hung again, off and on...Maybe I should have run a scan when I reinstalled before I updated the definitions...maybe there is something about the Oct 13 definitions this computer doesn't like.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17348730 Mon, 27 Nov 2006 03:08:19 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17348134 Libra : Hi Mele,
I vaguely remember a problem with hyperthreading and Spybot. I doubt this is the problem, since it just started happening in October. Here's a link to that problem in case your scan is actually hanging:

»forums.spybot.info/showthread.ph···hreading

Hopefully someone from Spybot will respond to this problem soon.

Sincerely, Libra]]> http://www.dslreports.com/forum/remark,17348134 Sun, 26 Nov 2006 23:37:31 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17347444 JackCam614 : Mele,

You're very welcome.
And don't worry about hijacking this thread, as long as you get your problem resolved, that's the only thing that matters. :)

Jack]]> http://www.dslreports.com/forum/remark,17347444 Sun, 26 Nov 2006 21:28:00 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17347304 Mele20 : Evidently I was composing another post there while you posted. I saw yours when I posted mine. :D

Thank you! You worded your post just great...I got a kick out of it and I think it should help.

Had I realized that I would end up practically taking over your thread, I would have started a new one and not said anything in yours. I'm sorry about that.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17347304 Sun, 26 Nov 2006 21:05:48 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17347213 JackCam614 : Mele20,

I am aware that you are fully capable of fending for yourself, but I took the liberty of giving Team Spybot a little friendly prod on your thread over there. I hope you don't mind, but I figured it couldn't hurt. ;)

Good Luck,

Jack]]> http://www.dslreports.com/forum/remark,17347213 Sun, 26 Nov 2006 20:48:41 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17347030 Mele20 : Darn. I didn't remember about that tool. Thanks for mentioning it. I already uninstalled it using its uninstaller and reinstalled and got every set up right (unchecked the boxes Spybot has on ignore, etc.) and changed skins (I cannot read anything with the default skin in the left column it is so pale). I didn't use the copy I have in Downloaded Programs folder because it said the File version was 0.0.0.0 and that seemed odd. So I went to Spybot's site and downloaded a fresh version. It too says the file version is 0.0.0.0 so I did not need to be concerned about that.

I just finished another scan. I turned off KAV just in case the new MP1 version was somehow affecting Spybot. This time I ran process explorer instead of just monitering with Task Manager. The scan took 30 minutes and CPU usage total was 70% most of the time. I did nothing on the computer. Just watched Spybot for 30 minutes. Almost all the CPU usage was Kernel access. I don't know if that is normal for Spybot as I used to not watch Spybot running because it scanned fast and I had no reason to watch it. Very heavy Kernel access. The usage was about 40-45% Spybot and the rest was System...now why would System use 25-30% CPU when the only thing happening was Spybot running? Maybe that is normal also?...but the long scan time and a total of 70% CPU usage average when doing nothing but running Spybot can't be right. One processor seemed taxed much more heavily...that seems odd too.

I'm going to post again in Spybot's forum. I think I will wait and see if they tell me I need to use the uninstaller tool.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/

]]> http://www.dslreports.com/forum/remark,17347030 Sun, 26 Nov 2006 20:14:35 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17346561 Libra : You're welcome Jack. :)

Mele, You're probably aware of it, but I thought I'd mention it. Spybot has a tool to use when you uninstall Spybot (it removes all registry items, etc.). Here's a link to it if you haven't removed Spybot yet.

»www.safer-networking.org/en/faq/27.html

I hope reinstalling corrects the slow scan problem.

Sincerely, Libra]]> http://www.dslreports.com/forum/remark,17346561 Sun, 26 Nov 2006 18:49:28 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17346360 Mele20 : Unfortunately, it appears I am being ignored as there are no replies (one reply but I couldn't edit my post so I replied to add more data) from anyone. Spybot team members (4 of them) have replied to posts since mine. :( This is the weekend but with team members replying, today, to other posts...well...I will wait until tomorrow. Maybe I am the only one with this problem and the four team members have no idea how to help? Yuck if that is the case but why not post and tell me at least to reinstall it and that someone would be around on Monday who knows more, etc. Maybe I should just try uninstalling and reinstalling as if I am the only one with this problem then likely it is due to corruption in Spybot. I think I will shut down my virtual machines, reboot, uninstall and reinstall and run a scan. Let's hope that fixes it.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17346360 Sun, 26 Nov 2006 18:05:24 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17344655 JackCam614 : Hi Libra,

Thanks for the extremely helpful input. It would seem my post identifying the 50,909 as detections/definitions of malware/spyware was correct after all. Now I don't feel quite as foolish. ;) :)

Most importantly, your input will help Mele in diagnosing her problem. Like yourself, I'm curious about what may be causing Mele's problem. SpyBot prides itself on its fast scanning time, so I suspect they will be anxious to assist Mele with diagnostics and repair.

Thanks Again,

Jack]]> http://www.dslreports.com/forum/remark,17344655 Sun, 26 Nov 2006 11:53:44 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17343352 Libra : You're welcome Mele. I thought my scans were taking a little longer last month also, but nothing like what you've been experiencing. I'm also curious about what is causing this and hope it can be fixed soon.
Sincerely, Libra]]> http://www.dslreports.com/forum/remark,17343352 Sun, 26 Nov 2006 02:06:41 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17342280 Mele20 : I checked the logs and the long scan times began Oct 14 after I got new definitions. The last scan before that was on Sept 24 and it took only seven minutes and 30 seconds. All the scans before Oct 14 were about 7 minutes. All scans from Oct 14 onward are very long, use up to 100% CPU and and each scan since that date has been LONGER by about 5 minutes than the one before it. Something is definitely wrong. I posted earlier today at the Spybot forums.

I should have remembered that the 50,909 is the number of malware it scans for. I spent some time today and looked all through my settings for Spybot and read the manual again and saw then what that number was for. I never have scanned for tracks.

Thanks for the reminder and for the feedback about how much time your scan takes. I wonder what is wrong? I am very curious now to hear from the Spybot team. Maybe all it needs is uninstalling and reinstalling but I think I will wait for a Spybot response.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17342280 Sat, 25 Nov 2006 21:59:10 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17342022 Libra : Hi Mele and Jack,
I didn't update Spybot when I read this thread about the problem, but I just updated it now to the 11-24-06 definitions. The 50,909 number at the bottom is the number of malware Spybot is scanning for. (If you have the tracks scanned also, the number will be higher.)
On our XP computer with a Pentium 4 3.0 GHz cpu with hyperthreading (80 GB harddrive) the scan took 5.19 minutes on the Admin account and 3.13 and 2.28 minutes on the limited user accounts. It took 9.19 minutes on my Windows 98se computer.
35 minutes seems pretty long for a scan.
Sincerely, Libra]]> http://www.dslreports.com/forum/remark,17342022 Sat, 25 Nov 2006 21:10:53 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17341006 Mele20 : Ah...I didn't realize they were the same on yours and mine (those numbers). I'll go ask in Spybot's forum. ]]> http://www.dslreports.com/forum/remark,17341006 Sat, 25 Nov 2006 17:39:34 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17339683 JackCam614 :

said by Mele20

:

That is strange. I have 160GB drive (148GB available in the beginning ...Dell uses the rest). I am using 110GB. I have a Pentium IV at 3.8 GHz hyperthreading CPU. It makes no sense why my scan would take 35 minutes and yours 6 minutes when there is not that much difference in the amount of files or the speed of our computers.

What do you mean "detections"? Isn't the 50,909 the number of files Spybot scans? It doesn't show any number at first and then it shows what it is scanning currently on the left and on the right the total number it will scan...correct?

I'm probably in error regarding the number of "detections". This was an assumption on my part inasmuch as our 50,909 number is "Exactly" the same. No way could we both have the same number of files on our computers.
It could be the number of files that SpyBot chooses to scan, but I'll not make any more foolish "assumptions". ;)

This is really going OT for this thread. Perhaps you could start a new post, and get some responses from more knowledgeable BBR Members.

Good Luck,
Jack]]> http://www.dslreports.com/forum/remark,17339683 Sat, 25 Nov 2006 12:46:07 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17338472 Mele20 : That is strange. I have 160GB drive (148GB available in the beginning ...Dell uses the rest). I am using 110GB. I have a Pentium IV at 3.8 GHz hyperthreading CPU. It makes no sense why my scan would take 35 minutes and yours 6 minutes when there is not that much difference in the amount of files or the speed of our computers.

What do you mean "detections"? Isn't the 50,909 the number of files Spybot scans? It doesn't show any number at first and then it shows what it is scanning currently on the left and on the right the total number it will scan...correct?
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17338472 Sat, 25 Nov 2006 05:15:37 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17337330 JackCam614 : I re-ran a scan for comparative purposes.

CPU usage stayed mostly between 50-60%. Scan time 5:57 Mins. You may have a lot more files, but I know I have a 'Bunch of Em'.(I'm using 92GB of a 160GB Drive) The 50,909 Files is apparently the number of 'Detections'. I'm running a P4 3.4GHz and I think your machine is as fast or faster if I recall? Hmmmmm. Puzzling.

Jack]]> http://www.dslreports.com/forum/remark,17337330 Fri, 24 Nov 2006 22:12:51 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17336043 Mele20 : No problems found but the CPU usage stayed between 60-100%. I must have a lot more files on this computer (I do need to clean it) than you. It took 32 minutes to scan 50,909 files.]]> http://www.dslreports.com/forum/remark,17336043 Fri, 24 Nov 2006 18:04:15 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17334325 JackCam614 : Aloha Mele20,

Re: New Detections Update 2006-11-24.

Downloaded from TDS(USA) Approximately 3 secs.

Scan time, 5:05 Mins.

Sorry Mele, if forgot to check my CPU usage for comparison with yours. Good Luck with your DL and Scan this time around.

Jack]]> http://www.dslreports.com/forum/remark,17334325 Fri, 24 Nov 2006 11:49:16 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17334287 JackCam614 : SpyBot Updated 2006-11-24. False Positive Fixed.

Thanks Team Spybot.

Jack]]> http://www.dslreports.com/forum/remark,17334287 Fri, 24 Nov 2006 11:40:45 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17316378 JackCam614 : Please Note....

To anyone who detected this False Positive and deleted it, Team Spybot says to use the recover feature to put it back.

See---------->

»forums.spybot.info/showthread.php?p=53772

Jack]]> http://www.dslreports.com/forum/remark,17316378 Tue, 21 Nov 2006 10:40:17 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17311953 Mele20 : Good! Glad that got sorted and you did it the right way IMO. I thought it was most likely a FP partly because you are not likely to be picking up stuff like CWS. ;) Of course, there is always the possibility that any of us could get a nasty but never a good idea to jump to conclusions one way or the other.

As for my problem, this is the second set of definitions where Spybot has used a huge amount of CPU when scanning. I have about the same amount of files on this computer as were on my Dell that was returned to them back last February. So, I am a bit puzzled at the length of the scan too. It didn't use to take 30 minutes...but that is ok if the CPU usage was less.

Yes, I have had the more common spybot problems but not that often...I did have to abort the download this time though as I didn't notice it somehow had set itself on a server in Europe but not Safer so it was taking forever to download like I was on the slowest dialup. So, I aborted and switched to Safer and got them very quickly. Maybe I will mosey over to the Spybot forums and ask about the excessive CPU usage. I still love Spybot...even if it has a few warts.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17311953 Mon, 20 Nov 2006 17:55:19 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17310629 JackCam614 : Aloha Mele,

Long time no chat.. ;)

Sorry to hear about your scanning problem. It's the first I've read of this type of Spybot problem. Usually it's about downloading new definitions and bad check sums. Hopefully it's a one time 'glitch' for you?

I totally concur with your last paragraph, and I'm encouraged that you agree with my chosen coarse of action.

Update:

Said by MisterW, TeamSpybot Member, on their website today------>
-----------------------------------------------------------
" Hi,

thanks for reporting. These false positives will be fixed in the next detection update scheduled for the end of the week."
-----------------------------------------------------------

All The Best,
Jack]]> http://www.dslreports.com/forum/remark,17310629 Mon, 20 Nov 2006 14:22:28 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17308936 Swoop0 : Don't know why all the thought behind this thread is. All spyware/adaware/anti-virus programs will not find the same things. Here is some general info on this malware you have. »www.pcanswers.co.uk/tips/default···onid=616 Some are not kept updated, some are good, and some are excellent. This particular coolwebsearch is just junk. DELETE IT with Spybot if it will in fact delete it. If not do a google search and find a specific proggie that will get rid of it. Here's a list from Spybot of what they have targeted. See anything familiar?

here is the list of hijackers from spybot S&D:

"// 322 products on list:
180Search.Solutions
2020Search
7FaSSt
ActualNames.AdvSearch
AdGoblin
Adpowerzone
AdRoar.Cpr
AdsStore
Adtomi.YahooStocks
AdultLinks.QaBar
AdultLinks.QcBar
AdultStore
Adware.Syslibie
Agent-BR2
Agobot
AllCyberSearch
Allwebsearcher
Anal-Oral.WinMain
ATLEvents.ATLEvents
Avenue A, Inc.
BDHelper
BeateUhse
BestHomepage
Bestsearch.Scvhost
BestTo
olBars
BlazeFind.Bridge
BlazeFind.SearchBarCash
BlazeFind.SearchEnhancer.ISTbar
Blazefind.SearchRelevancy
BrowserAid.INetP
C2.lop
Celebrita
ClearSearch.Net
CleverIEHooker.Jeired
CNetAdd
CnsMin
CnsMin.EasyService
CnsMin.mm
CommanderNet
CoolWWWSearch
CoolWWWSearch.008k
CoolWWWSearch.Aboutblank
CoolWWWSearch.Addclass
CoolWWWSearch.Aff.Iedll
CoolWWWSearch.Aff.Madfinder
CoolWWWSearch.Aff.Winshow
CoolWWWSearch.Alfasearch
CoolWWWSearch.AllCyberSearch
CoolWWWSearch.BadZoneMap
CoolWWWSearch.BlowSearch
CoolWWWSearch.Bootconf
CoolWWWSearch.Botnet
CoolWWWSearch.CameUp
CoolWWWSearch.Control
CoolWWWSearch.Ctfmon32
CoolWWWSearch.Datanotary
CoolWWWSearch.Dnsrelay
CoolWWWSearch.Dreplace
CoolWWWSearch.Feat2DLL
CoolWWWSearch.Feat2Installer
CoolWWWSearch.Feat2Installer.ADS
CoolWWWSearch.Gonnasearch
CoolWWWSearch.Googlems
CoolWWWSearch.HomeSearch
CoolWWWSearch.HTMLEdit
CoolWWWSearch.ICOO Loader
CoolWWWSearch.IEFeatInst
CoolWWWSearch.IEFeatSL
CoolWWWSearch.Leftovers
CoolWWWSearch.Loadbat
CoolWWWSearch.Msconfd
CoolWWWSearch.Msconfig
CoolWWWSearch.mshp
CoolWWWSearch.Msinfo
CoolWWWSearch.Msoffice
CoolWWWSearch.Msspi
CoolWWWSearch.Mupdate
CoolWWWSearch.Oemsyspnp
CoolWWWSearch.OleHelp
CoolWWWSearch.Oslogo
CoolWWWSearch.PopupBlocker
CoolWWWSearch.Qttasks
CoolWWWSearch.SearchHook
CoolWWWSearch.SearchKlick
CoolWWWSearch.Service
CoolWWWSearch.SlawSearch
CoolWWWSearch.SmallM
CoolWWWSearch.Smartfinder
CoolWWWSearch.SmartSearch
CoolWWWSearch.SmartSearch-Gal
CoolWWWSearch.Svchost32
CoolWWWSearch.Svcinit
CoolWWWSearch.SVCPack
CoolWWWSearch.Tapicfg
CoolWWWSearch.TheRealSearch
CoolWWWSearch.Toolband
CoolWWWSearch.ToonComics
CoolWWWSearch.Vrape
CoolWWWSearch.WCADW
CoolWWWSearch.WinProc32
CoolWWWSearch.WinRes
CoolWWWSearch.WinSearch
CoolWWWSearch.Xmlmimefilter
CoolWWWSearch.Xplugin
CoolWWWSearch.XPlugin
CoolWWWSearch.Xxxvideo
CoolWWWSearch.Yexe
CoolWWWSearch.Zonealarm
Cool-XXX
Copiloto
Crackspider
CyberSearch
Da Hang Ji Ye
DailyToolbar
DaRu.Revolto
DatingSearch
DesktopSearch
DeskwareSearchAddon
DotcomToolbar.LinkSummary
Duolaimi
Dynamic Desktop Media
eStart
eUniverse.IncrediFind
eUniverse.SearchBar
eUniverse.UpdMgr
E-Ventures N.V.
Evirgola
eXact Advertising.BargainsBuddy
ExPup
EZ-Searching
FastFinder BHO
FastSeeker
FCB
Ferret
Fizzlebar
Flashtrack Flashenhancer
FreeHQMovies
FreeScratchAndWin
FunWebProducts
German Porn Hijack
GIGAsearch
GlobalWebSearch
GoCyberSearch
GrandVirtualCasinoLoader
Grokster.Install
Grokster.Mayan
GTDownloader
Gwtbob
Hastalavista
HotAndSexy
HotsearchBar
Hyperlinker
IAGold
IEMonit.Adult
IEPlugin.Search
Iesar
IGetNet
IGetNet.ClearSearch
I-Lookup
I-Lookup.abeb
I-Lookup.GWS
I-Lookup.SpiderSearch
I-Lookup.Windec
Inet Delivery
ISearchTech.CSearch
ISearchTech.Glophone
ISearchTech.ISTbar
ISearchTech.ISTsvc
ISearchTech.Netscape Plugin
ISearchTech.PowerScan
ISearchTech.Qidion
ISearchTech.SideFind
ISearchTech.Slotch
iSearchToolbar
IStartHere
IVolti
Iwantsearch
Jethomepage
KEXplorer
LoadFonts
LoadHTML.BHOPopup
Lolita4All
Look2Me.BM2
LookThru
LoudMarketing.WinFavorites
Lycos.SideSearch
MafiaPics
MarketDart
Masterbar
Matrix
Matrix Technology Network.Search Engine
MBKW-Bar
Media Access
MediaLoads
MediaTickets
Mirar
Moncher
MoneyGainer
MSInfoSys
MSN Messenger Polygamy
MTC.MakeMeSearch.com
MT-Dials
Munga_Bunga
Muul.SiteHistory
MySoft
MyToolBar
MyTotalSearchBar
Naupoint
NavExcel Websearch
NavFailure
Network Essentials.Search-Exe
Network Essentials.WindowEnhancer
NetzAny
Newspopupper
OnlyVirgins.Reg32
Outwar
PassThisOn
PlanColumbia
PlugInAccessPorn
Popmonster
PopMonster
Porn Hijacker
Possible hijacker
PowerSearch
PrimeSoft.SafeSearch
PrizeSurfer.RSync
Process Guard Killer 2
Prolivation
ProWeb
QHosts
RapidBlaster
RapidBlaster.LiveGirls
RedSheriff
RegistryOptimizer
Roar
RocketSearch
Roings
RSLocal
SafeguardProtect.Veevo
Scheo.com
Search4All
SearchAccurate
SearchALot
SearchAndBrowse
SearchAndClick
SearchBy
SearchCentrix
SearchDotCom
SearchEx
SearchForge
SearchForIt
Searchingall
SearchLocate/SideBar
SearchOMatic
Search-System
SearchV.WinShow
SearchWWW.IEToolbar
SearchXL
SecondPower
Secret-Crush
SeekSeek
SexArena
SexBeastsDoItOnline
SexOcean
Sexy
ShareDocs
ShopAtHome
ShopNav
Shorty-BHO
Simplenter
SmileyWorld
Special Offers Network
SpeedPhrase
Spex
StartPage.IG.
StartSurfing
Stickypops.com
SubSearch
Superlogy.com
SuperSexPass
SuperSpider
SurferBar
System1060
Tango
TargetSearch
Teenshowering
Teenslook
TinyBar.A
TinyBar.C
TinyBar.Generic
TLIEFlash
TNS-Search
ToolbarCC
TopSearcher
TV Media
TX4.BrowserAd
UCSearch.ArmBender
UnderageHost
Unosearch
Virtual Grub
VisiCom.SearchCentric
W3adv
WebAssist.MyFreeInternetUpdate
WebEntrance
WebRebates.TopRebates
WebResponseAttachments
WhazIt
Wild Media
WindowsIE
Windowssearch
WinEssential.Jraun.Kanhaiya
Winsecure
WonWebLauncherControl
Wow Access
xshanghai.com
Xupiter
Xupiter.BrowserWise
Xupiter.OrbitExplorer
Xupiter.Sqwire
XXSWare Inc.
XXXToolbar.com
Zoo"]]> http://www.dslreports.com/forum/remark,17308936 Mon, 20 Nov 2006 08:50:51 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17305715 Mele20 : Yesterday, when I read this thread, I didn't know there were new definitions so I went and got them and did a scan. No problems. But Spybot used between 65-100% of CPU for 30 minutes while scanning! :( I couldn't really use my computer during the scan. That hasn't been the case in the past with Spybot. What is going on with them?

It sounds to me like you have a FP but I would, like you, want to know before I acted. System Restore doesn't always work nor does restore from Spybot ....better be prudent from the get-go.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/]]> http://www.dslreports.com/forum/remark,17305715 Sun, 19 Nov 2006 17:23:42 EDT From Spybot http://www.dslreports.com/forum/remark,17305088 wcweaver : Ugly new CoolWWWSearch variant [link] 21. January 2004

CoolWWWSearch.SmartKiller (v1 and v2) is a new, real ugly variant of CoolWWWSearch. When running, it will close every browser window you use to visit a large list of anti-spyware-sites, and even will close Spybot-S&D and some other anti-spyware applications as well.

So if your copy of Spybot-S&D (or the anti-spyware application of your choice) closes a few seconds after starting, or your browser closes whenever you try to visit an anti-spyware site, check our CWS.SmartKiller removal utility on this page.

»www.safer-networking.org/files/delcwssk.zip]]> http://www.dslreports.com/forum/remark,17305088 Sun, 19 Nov 2006 15:10:01 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17305074 JackCam614 :

said by Window Man

:

I have always deleted anything from coolwww and never had any problems

Hey Window Man, tyscoj, and cork1958....

I addition to being in agreement with Cudni, I'm also just trying to be a good 'netizen'. ;)

CalamityJane

said....

"...Darn! That sure isn't much to go on. Let me see if I can find any TeamSpybot member to take a look.

If it is a FP they would want to know."

If TeamSpybot were not interested, they would not have sent 2 members over here to check this out.

Regards,
Jack]]> http://www.dslreports.com/forum/remark,17305074 Sun, 19 Nov 2006 15:05:32 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17304754 Window Man : I have always deleted anything from coolwww and never had any problems]]> http://www.dslreports.com/forum/remark,17304754 Sun, 19 Nov 2006 13:50:35 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17304329 tyscoj : Then do a system restore...or let S&D restore the last fix for you?!

I'm in the same boat, anything that S&D finds gets deleted...never had a problem either!]]> http://www.dslreports.com/forum/remark,17304329 Sun, 19 Nov 2006 12:23:58 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17303787 JackCam614 : What Cudni said. ;)

Jack]]> http://www.dslreports.com/forum/remark,17303787 Sun, 19 Nov 2006 10:27:16 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17303237 Cudni : what if it wasn't anything to do with CoolWWW but rather it was identified in error and on deletion something breaks?

Cudni]]> http://www.dslreports.com/forum/remark,17303237 Sun, 19 Nov 2006 07:02:02 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17303227 cork1958 : 2 pages just for a reply to something Spybot wants to remove, and that subject is related to CoolWWWSearch?

Man! Delete that crap and ANYTHING to do with coolwww EVERYTIME you see it!

Spybot has NEVER messed up my systems and I let it delete EVERYTHING, EVERYTIME! No questions asked.
--
Do the walk
Zenwalk Linux 3.0]]> http://www.dslreports.com/forum/remark,17303227 Sun, 19 Nov 2006 06:54:46 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302715 JackCam614 :

said by LonnyRjones

:

Thanks Jack

Im almost possitive thats a false possitive
To be sure fallow this thread
»forums.spybot.info/showthread.php?p=53772

Hello LonnyRjones,

You're very welcome. I'll keep an eye on that thread.

Jack]]> http://www.dslreports.com/forum/remark,17302715 Sun, 19 Nov 2006 00:46:52 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302664 LonnyRjones : Thanks Jack

Im almost possitive thats a false possitive
To be sure fallow this thread
»forums.spybot.info/showthread.php?p=53772]]> http://www.dslreports.com/forum/remark,17302664 Sun, 19 Nov 2006 00:28:03 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302555 JackCam614 : Hello tashi1,

As per your request:

Regards,
Jack

SpybotSD.Report.txt 45,864 bytes

]]> http://www.dslreports.com/forum/remark,17302555 Sat, 18 Nov 2006 23:56:05 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302506 JackCam614 : Hello tashi1,

Sorry for the delay. We 'cross posted', and I didn't see your post until my return. I'll follow your directions and post back ASAP.

Jack]]> http://www.dslreports.com/forum/remark,17302506 Sat, 18 Nov 2006 23:40:44 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302226 JackCam614 : Jane,

Will do. I'll be poppin in and out, have some work to take care of. Be back shortly.

And Thanks Again, Jane.

Jack]]> http://www.dslreports.com/forum/remark,17302226 Sat, 18 Nov 2006 22:23:56 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302208 tashi : Hello

This may be false positive.

[*]Close all browsers
[*]Open SpyBot
[*]Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except

[*]Uncheck[ ] do not report disabled or known legitimate Items.
[*]Uncheck[ ] Include a list of services in report.
[*]Uncheck[ ] Include uninstall list in report.
[*]Uncheck[ ] Include list of Winsock LSPs in report
[*]Now select (near the top) view report.
[*]Click export and in the 'save in' box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and post that report.

It may take more than one post.

Regards.
tashi
Team Spybot]]> http://www.dslreports.com/forum/remark,17302208 Sat, 18 Nov 2006 22:20:04 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17302142 CalamityJane : Hang on Jack! I've requested a few Spybot experts - we're not getting the reports/info we need here. And thanks for YOUR patience :)]]> http://www.dslreports.com/forum/remark,17302142 Sat, 18 Nov 2006 22:08:29 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301996 JackCam614 :

said by Cudni

:

try deselecting everything except Include results of last check and Startup list

Cudni

Cudni,

Thanks. Here ya go.

Jack

]]> http://www.dslreports.com/forum/remark,17301996 Sat, 18 Nov 2006 21:41:24 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301952 Cudni : try deselecting everything except Include results of last check and Startup list

Cudni]]> http://www.dslreports.com/forum/remark,17301952 Sat, 18 Nov 2006 21:30:00 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301939 CalamityJane : Rats! Where, oh, where is Bubba

when I need him here?

Running a scan again to see why you don't have that one. :)]]> http://www.dslreports.com/forum/remark,17301939 Sat, 18 Nov 2006 21:28:00 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301936 JackCam614 :

said by Cudni

:

What happens when you click View report button?

Cudni

Cudni,

I get a "Full Report" that is very extensive. Methinks to big to post? 3.2/MBs to be exact. I've got it, but I doubt if I should try and post it?

Jack]]> http://www.dslreports.com/forum/remark,17301936 Sat, 18 Nov 2006 21:27:31 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301892 JackCam614 : Jane,

I had tried that. I'm not seeing what you are?

Jack

]]> http://www.dslreports.com/forum/remark,17301892 Sat, 18 Nov 2006 21:17:43 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301845 CalamityJane : Ok, hit *view Previous report* at the top and then you should get a choice of logs to pick from.

Choose *Spybot.results.txt*

]]> http://www.dslreports.com/forum/remark,17301845 Sat, 18 Nov 2006 21:08:04 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301837 Cudni : What happens when you click View report button?

Cudni]]> http://www.dslreports.com/forum/remark,17301837 Sat, 18 Nov 2006 21:06:16 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301808 JackCam614 : Jane,

I have a new scan open. I'm in the Advanced user mode>tools>view report. I am unable to find your requested "SpybotSD.results.txt".

Appreciate your patience with me. :p

Jack

]]> http://www.dslreports.com/forum/remark,17301808 Sat, 18 Nov 2006 20:58:50 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301596 CalamityJane : Jack, could you open Spybot, in the Advanced user mode,
choose *tools* then
*view report*
Choose *previous report* (unless you still have the current one open)
Then choose the one that says SpybotSD.results.txt

Copy that back here please:
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2007
Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,17301596 Sat, 18 Nov 2006 20:15:17 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301562 CalamityJane : Darn! That sure isn't much to go on. Let me see if I can find any TeamSpybot member to take a look.

If it is a FP they would want to know.

{And I know you keep your PC clean, so I kinda think it might be if nothing else is finding it} :)
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2007
Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,17301562 Sat, 18 Nov 2006 20:09:58 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301546 JackCam614 :
Hey koma3504,

I ran full scans of ewido and Kaspersky online scanners and came up clean.

More info to Calamity Jane for analysis as posted above.

Thanks NanDog for the link. At least I'm not alone. ;)

Jack]]> http://www.dslreports.com/forum/remark,17301546 Sat, 18 Nov 2006 20:04:50 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301508 JackCam614 : Hey CalamityJane,

Results from clipboard----->

CoolWWWSearch.GonnaSearch: User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-18\Software\Classes\CLSID

--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-06-04 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-11-17 Includes\Cookies.sbi (*)
2006-10-13 Includes\Dialer.sbi (*)
2006-11-17 Includes\DialerC.sbi (*)
2006-11-03 Includes\Hijackers.sbi (*)
2006-11-17 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2006-11-17 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2006-10-13 Includes\Malware.sbi (*)
2006-11-17 Includes\MalwareC.sbi (*)
2006-10-20 Includes\PUPS.sbi (*)
2006-11-17 Includes\PUPSC.sbi (*)
2006-11-17 Includes\Revision.sbi (*)
2006-10-13 Includes\Security.sbi (*)
2006-11-17 Includes\SecurityC.sbi (*)
2006-10-13 Includes\Spybots.sbi (*)
2006-11-17 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-11-17 Includes\Trojans.sbi (*)
2006-11-17 Includes\TrojansC.sbi (*)

I hope I did this correctly, and this is what you were looking for? I've not used this feature prior to this.

Thanks for the help,

Jack]]> http://www.dslreports.com/forum/remark,17301508 Sat, 18 Nov 2006 19:55:34 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17301091 CalamityJane : That isn't enough information to determine whether it is or isn't a false or true detection. I rather doubt it is real if your machine has been clean up until the update and nothing else was found. If was really coolwebsearch you would likely have a LOT more found than that one item in the registry.

Could you right click on it and copy the results (not the full report) to clipboard so we can see exactly what is being found.
--
It takes a disaster to make a woman out of a female
Microsoft MVP/Windows Security 2003-2007
Proud Member of ASAP (Alliance of Security Analysis Professionals)]]> http://www.dslreports.com/forum/remark,17301091 Sat, 18 Nov 2006 18:29:24 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17300525 NanDog : There's also a thread 'bout this over at Castle Cops (but no definite answer as whether it's a FP or not):

»www.castlecops.com/t172247-Spybo···rch.html
--
See ya across the Rainbow Bridge, my good and faithful friend!]]> http://www.dslreports.com/forum/remark,17300525 Sat, 18 Nov 2006 16:54:34 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17300315 JackCam614 : Hey koma3504,

Thanks for the reply. (The first, and extremely thorough to boot) ;)

I'll run those online scans you suggested. I think I will do so prior to deleting it. I'm curious to determine if it is a false positive. My search prior to posting indicates it should be a 'Browser Hijacker' or 'Browser Redirect'. My IE7 has exhibited no such behavior.
I have to take care of a business commitment first, but I'll get to it ASAP and get back to you.
Thanks again for the assistance.

Jack]]> http://www.dslreports.com/forum/remark,17300315 Sat, 18 Nov 2006 16:14:27 EDT Re: SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17300258 koma3504 : Delete it
Can't believe out of 15 viewers im the first to comment.
and to be on the safe side.
Run these
»www.housecall.trendmicro.com

»www.ewido.net/en/onlinescan

»www.bitdefender.com/scan8/ie.html

»usa.kaspersky.com/services/free-···nner.php
--
† Koma †
If YOu Don't Think It's Possable!! It's Acually A Reality!! The best way to predict the future is to invent it. Alan Kay!!
Ya Don't Know The signal Till Ya Ride It!!
Voice Break's There's Trouble!!]]> http://www.dslreports.com/forum/remark,17300258 Sat, 18 Nov 2006 16:02:27 EDT SpyBot S&D Scan result... http://www.dslreports.com/forum/remark,17300182 JackCam614 : After installing the latest update, my scan showed this problem. I ran my resident Anti-Virus, PcCillin and CW-Shredder and both came up clean.
Would I be safe in letting S&D remove this registry key?
Possible False Positive?...

Please advise.

TIA
]]> http://www.dslreports.com/forum/remark,17300182 Sat, 18 Nov 2006 15:48:19 EDT