Paul Christian Posted May 26, 2010 ID:256828 Share Posted May 26, 2010 Hello all!MWB Realt Time protection keeps detecting Adware.Agent I need to try to nib the source in the bud.Vista 64bitAdware.Agent in question is :C:\Program Files (x86)\Internet Today\....." "\Automated Content Enhancer\...." "\Customized Platform\..........et cetera:There was a subsequent cleanup with MWB, then Super Anti Spyware, Eset Online Scan, et cetera.Those full scans came up clean.Every Subsequent MWB full scan has come up clean.Running FSecure online scan right now.The folders that keep making MWB pop up don't exist.What do you guys need from me? Link to post Share on other sites More sharing options...
Paul Christian Posted May 27, 2010 Author ID:257376 Share Posted May 27, 2010 Here's my log file guys! Thanks for your help.Windows Vista 64bitMalicious Software Removal Quick scan (clean)Last SuperAntiSpwyare (Portable version) - full scan - cleanSpybot Search and Destroy found some cookies and Zango entries.Yesterday, the real time protection in MWB was barking at me all day about folders and files that don't exist. I even tried uninstalling and reinstalling MWB in the event that there was some sort of anomoly of detecting "phantom" files and folders.I've shown hidden files/folders, and unhid protected files/folders as well. Those folders and files don't exist.Here's the protection log from today, Though yesterday's is much longer--------------------------------------------------------------------------------------------------------09:27:18 James & Sally MESSAGE Protection started successfully09:27:22 James & Sally MESSAGE IP Protection started successfully10:33:01 James & Sally DETECTION C:\PROGRAM FILES (X86)\AUTOMATED CONTENT ENHANCER\4.3.0.5570\LRI.DLL Adware.Agent QUARANTINE10:33:02 James & Sally ERROR Quarantine failed: UtilityReadFile failed with error code 3--------------------------------------------------------------------------------------------------------Here's the full scan log:-------------------------------------------------------------------------------------------------------Malwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4148Windows 6.0.6001 Service Pack 1Internet Explorer 7.0.6001.180005/27/2010 10:47:02 AMmbam-log-2010-05-27 (10-47-02).txtScan type: Full scan (C:\|)Objects scanned: 275415Time elapsed: 59 minute(s), 52 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)------------------------------------------------------------------------------------------------------------------------Here's the DDS.PIF log from yesterday. Could not get DDS.SCR to run yesterday. Cannot get DDS.SCR .COM or .PIF to run today-------------------------------------------------------------------------------------------------------------------------DDS (Ver_10-03-17.01) - NTFSX64 Run by HOMECOMPUTER$ at 11:31:49.61 on Wed 05/26/2010Internet Explorer: 7.0.6001.18000Microsoft Link to post Share on other sites More sharing options...
Paul Christian Posted May 28, 2010 Author ID:257872 Share Posted May 28, 2010 I keep getting pushed to the bottom of the 2nd page. Can anyone help? Link to post Share on other sites More sharing options...
Staff miekiemoes Posted May 28, 2010 Staff ID:257881 Share Posted May 28, 2010 Hi Paul,From what I understand here, those folders were detected previously? Now they are gone, but the PM module (protection module) still finds them? In that case it's because of the Vista superfetch feature.So, to resolve this, disable superfetch, reboot, clean the prefetch folder and enable superfetch again. That should fix it. Link to post Share on other sites More sharing options...
Staff screen317 Posted July 7, 2010 Staff ID:280531 Share Posted July 7, 2010 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts