Results 1 to 3 of 3
  1. #1
    Member
    Join Date
    Dec 2007
    Posts
    24
    Points
    0

    Default After running SAS, laptop is super slow - couldn't run hijack or malware

    I went to run Superantispyware (for maintenance purposes only). It said new version available so I downloaded and ran. My laptop is now super slow to the point of being unusable. I wasn't able to run highjack or malware. This is the SAS file that was created.
    Attached Files

  2. #2
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Hi cal4591,

    Please post the logs directly to the forum, do not attach them. I'm going to post your log for you. Can you try a System Restore to a time before you installed SuperAntiSpyware.

    Did you install Printer software recently?

    Click Start, then in the search window in the start menu, you can type rstrui into the search box and hit enter.

    Here's your log,

    SUPERAntiSpyware Scan Log
    SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

    Generated 09/11/2012 at 08:54 PM

    Application Version : 5.5.1016

    Core Rules Database Version : 9210
    Trace Rules Database Version: 7022

    Scan type : Complete Scan
    Total Scan Time : 01:57:01

    Operating System Information
    Windows Vista Business 32-bit, Service Pack 2 (Build 6.00.6002)
    UAC On - Limited User (Administrator User)

    Memory items scanned : 947
    Memory threats detected : 0
    Registry items scanned : 34932
    Registry threats detected : 2
    File items scanned : 72206
    File threats detected : 104

    Adware.Tracking Cookie
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\YY8Y0ORO.txt [ /ad.yieldmanager.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\BEGO5QOU.txt [ /specificclick.net ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\WCWZ36SA.txt [ /ads.undertone.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\6KX3XD6D.txt [ /invitemedia.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\LHGS08A7.txt [ /ads.pointroll.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\3XYPPHE9.txt [ /questionmarket.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\RVYX1N0H.txt [ /tacoda.at.atwola.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\XN8WNQI3.txt [ /bs.serving-sys.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\BLHBTQXJ.txt [ /advertising.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\YCABCZ5G.txt [ /serving-sys.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\S5ZRSMD7.txt [ /doubleclick.net ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\MF2P3SBG.txt [ /revsci.net ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\A92TZC3J.txt [ /imrworldwide.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\8B9E38BN.txt [ /cdn.at.atwola.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\S5TFXQ8U.txt [ /collective-media.net ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\T89EIUWU.txt [ /at.atwola.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\IXFIPMHU.txt [ /atdmt.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\LE2UF4KB.txt [ /ar.atwola.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\MAJNR2YZ.txt [ /pointroll.com ]
    C:\Users\Donna\AppData\Roaming\Microsoft\Windows\Cookies\33RZDJ6S.txt [ /atwola.com ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\1A0342C1.txt [ Cookie:donna@adsonar.com/adserving ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\RKKG1HAQ.txt [ Cookie:donna@ad.yieldmanager.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QCBORRNQ.txt [ Cookie:donna@casalemedia.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\KHAFJDSE.txt [ Cookie:donna@liveperson.net/hc/44153975 ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\22U0VRLA.txt [ Cookie:donna@specificclick.net/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\DBG1ZN04.txt [ Cookie:donna@invitemedia.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9TFK2LHX.txt [ Cookie:donna@c.atdmt.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\7ASWQVB4.txt [ Cookie:donna@advertising.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\6HM9L20D.txt [ Cookie:donna@sales.liveperson.net/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LHT5CPAF.txt [ Cookie:donna@doubleclick.net/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\JYKW4432.txt [ Cookie:donna@fastclick.net/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z8D53U61.txt [ Cookie:donna@interclick.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EJEGH7CJ.txt [ Cookie:donna@atdmt.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EI1SB5OM.txt [ Cookie:donna@media6degrees.com/ ]
    C:\USERS\DONNA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LL3B1KMM.txt [ Cookie:donna@accounts.google.com/ ]
    C:\USERS\DONNA\Cookies\YY8Y0ORO.txt [ Cookie:donna@ad.yieldmanager.com/ ]
    C:\USERS\DONNA\Cookies\BEGO5QOU.txt [ Cookie:donna@specificclick.net/ ]
    C:\USERS\DONNA\Cookies\6KX3XD6D.txt [ Cookie:donna@invitemedia.com/ ]
    C:\USERS\DONNA\Cookies\LHGS08A7.txt [ Cookie:donna@ads.pointroll.com/ ]
    C:\USERS\DONNA\Cookies\3XYPPHE9.txt [ Cookie:donna@questionmarket.com/ ]
    C:\USERS\DONNA\Cookies\RVYX1N0H.txt [ Cookie:donna@tacoda.at.atwola.com/ ]
    C:\USERS\DONNA\Cookies\XN8WNQI3.txt [ Cookie:donna@bs.serving-sys.com/ ]
    C:\USERS\DONNA\Cookies\BLHBTQXJ.txt [ Cookie:donna@advertising.com/ ]
    C:\USERS\DONNA\Cookies\YCABCZ5G.txt [ Cookie:donna@serving-sys.com/ ]
    C:\USERS\DONNA\Cookies\S5ZRSMD7.txt [ Cookie:donna@doubleclick.net/ ]
    C:\USERS\DONNA\Cookies\MF2P3SBG.txt [ Cookie:donna@revsci.net/ ]
    C:\USERS\DONNA\Cookies\A92TZC3J.txt [ Cookie:donna@imrworldwide.com/cgi-bin ]
    C:\USERS\DONNA\Cookies\8B9E38BN.txt [ Cookie:donna@cdn.at.atwola.com/ ]
    C:\USERS\DONNA\Cookies\1A0342C1.txt [ Cookie:donna@adsonar.com/adserving ]
    C:\USERS\DONNA\Cookies\T89EIUWU.txt [ Cookie:donna@at.atwola.com/ ]
    C:\USERS\DONNA\Cookies\IXFIPMHU.txt [ Cookie:donna@atdmt.com/ ]
    C:\USERS\DONNA\Cookies\LE2UF4KB.txt [ Cookie:donna@ar.atwola.com/ ]
    C:\USERS\DONNA\Cookies\MAJNR2YZ.txt [ Cookie:donna@pointroll.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\P6DY92EE.txt [ Cookie:guest@doubleclick.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\5H31GJEH.txt [ Cookie:guest@ar.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\YQ8GD1Q5.txt [ Cookie:guest@atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\7CFXCBG5.txt [ Cookie:guest@cdn.at.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\6CA11TCK.txt [ Cookie:guest@pointroll.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Q1VHYQUN.txt [ Cookie:guest@at.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\RKOZCO4V.txt [ Cookie:guest@advertising.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\5MLDHTHO.txt [ Cookie:guest@tacoda.at.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\W521U5C8.txt [ Cookie:guest@revsci.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\MQK4WPI7.txt [ Cookie:guest@doubleclick.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\GI7G9N0E.txt [ Cookie:guest@imrworldwide.com/cgi-bin ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\4IDRP633.txt [ Cookie:guest@media6degrees.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\KKKUQN4M.txt [ Cookie:guest@mm.chitika.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\GT1RG8FX.txt [ Cookie:guest@invitemedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\6DE5341Y.txt [ Cookie:guest@lucidmedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\KB6BY06B.txt [ Cookie:guest@2o7.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\0OH1S36E.txt [ Cookie:guest@statse.webtrendslive.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\PNEVENLX.txt [ Cookie:guest@trafficmp.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\07OBRAET.txt [ Cookie:guest@synacortoshiba.112.2o7.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y7ZFGVV9.txt [ Cookie:guest@ar.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\EGCLNK2Q.txt [ Cookie:guest@mediaplex.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\8ZPY9HA9.txt [ Cookie:guest@realmedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\AF11102X.txt [ Cookie:guest@adbrite.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\4TKU2BF9.txt [ Cookie:guest@ads.saymedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\UE3IPH6J.txt [ Cookie:guest@atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\X4P200X2.txt [ Cookie:guest@casalemedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\MI4YK276.txt [ Cookie:guest@kanoodle.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\YGI1XNE6.txt [ Cookie:guest@tribalfusion.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\CC5S3K48.txt [ Cookie:guest@questionmarket.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\CQ5VU2PZ.txt [ Cookie:guest@adserver.adtechus.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\CO929VJ3.txt [ Cookie:guest@interclick.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\62AHY37J.txt [ Cookie:guest@c.atdmt.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\KDUPH06U.txt [ Cookie:guest@ru4.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\ELEVP8IU.txt [ Cookie:guest@pointroll.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\QXYXQ5JX.txt [ Cookie:guest@network.realmedia.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\RBSODDEE.txt [ Cookie:guest@collective-media.net/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\PX7OS7XR.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1035391478/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\AN7G18HD.txt [ Cookie:guest@at.atwola.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\97RDS813.txt [ Cookie:guest@advertising.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\39PO4N3T.txt [ Cookie:guest@amazon-adsystem.com/ ]
    C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\82SRP4DA.txt [ Cookie:guest@tacoda.at.atwola.com/ ]
    C:\USERS\GUEST\Cookies\P6DY92EE.txt [ Cookie:guest@doubleclick.net/ ]
    C:\USERS\GUEST\Cookies\5H31GJEH.txt [ Cookie:guest@ar.atwola.com/ ]
    C:\USERS\GUEST\Cookies\YQ8GD1Q5.txt [ Cookie:guest@atwola.com/ ]
    C:\USERS\GUEST\Cookies\7CFXCBG5.txt [ Cookie:guest@cdn.at.atwola.com/ ]
    C:\USERS\GUEST\Cookies\6CA11TCK.txt [ Cookie:guest@pointroll.com/ ]
    C:\USERS\GUEST\Cookies\Q1VHYQUN.txt [ Cookie:guest@at.atwola.com/ ]
    C:\USERS\GUEST\Cookies\RKOZCO4V.txt [ Cookie:guest@advertising.com/ ]
    C:\USERS\GUEST\Cookies\5MLDHTHO.txt [ Cookie:guest@tacoda.at.atwola.com/ ]
    cdn.tremormedia.com [ C:\USERS\GUEST\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\8VY5VG2E ]

    Adware.Zugo
    HKU\S-1-5-21-797065129-3124319711-1380689964-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{9D425283-D487-4337-BAB6-AB8354A81457}
    HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}

    Trojan.Agent/Gen-FakeAlert[Local]
    C:\USERS\DONNA\APPDATA\LOCAL\TEMP\7ZS7597\SETUP\HPOAPD01.EXE
    Last edited by zep516; 09-12-2012 at 12:07 AM.

  3. #3
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,158
    Points
    1301

    Default

    Hi

    Are you still with us ?

    Joe