Problem with spy sweeper. HELP

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Thursday 28.11.2024 / 07:22

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > problem with spy sweeper. help

Browse by topic

Forums

Start a new thread

Problem with spy sweeper. HELP

Jump to:

Posted

Message

Jurgennop

Member

18. May 2006 @ 03:20

Link to this message

Ok,
sometimes spy sweeper reports a new startup entry when i boot,
wextract_cleanup0 which i am told to allow because it's a legit windows and microsoft update
Also,when i go to the windows update site,i can download this update for windows defender,but everytime i downloaded it that same window of spy sweeper pops up and leaves again right away, with the wextract_cleanup0 entry,so i can't always allow to keep that startup entry,because it goes away to fast.even with all my spyware and firewalls disabled,the update can always be downloaded again and again. How can the update say installed correctly,but i can download it every time,is this because my internet active x options are set to too high security.
My HJT log is clean i guess...

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\D-Link\D-Link AirPlus G+ Wireless Adapter Utility\DWLGTI.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hln.be/hlns/cache/homehome.html?10
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Telenet Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic Professional 6\delay.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - Global Startup: D-Link AirPlus G+ Wireless Adapter Utility.lnk = C:\Program Files\D-Link\D-Link AirPlus G+ Wireless Adapter Utility\DWLGTI.EXE
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/...
O18 - Protocol: bt2 - {1730B77B-F429-498F-9B15-4514D83C8294} - (no file)
O18 - Filter: application/x-bt2 - {6E1DDCE8-76BC-4390-9488-806E8FB1AD77} - (no file)
O20 - AppInit_DLLs: interceptor.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[ + quote]

Jurgennop

Member

18. May 2006 @ 07:03

Link to this message

anyone? Please help me out.
i can just keep repeating that same windows defender update from the windows update website,and it always says installed correctly. but then i can just download it again and again,even after rebooting. Is sth wrong with my HjT log?

[ + quote]

Jurgennop

Member

18. May 2006 @ 10:41

Link to this message

please,anyone,how can i download that essential windows defender update from windows update site,i can just keep downloading and downloading,what's strange is also that it says it's downloaded but 0 kb, maybe there's sth in my security settings for internet explorer that doesnt download the update properly,please help me out. Not much use for windows defender if it doesn't update properly.

[ + quote]

Jurgennop

Member

18. May 2006 @ 21:37

Link to this message

can ANYONE pleaseeee help me out????

[ + quote]

Jurgennop

Member

19. May 2006 @ 07:47

Link to this message

doesn't anyone on this whole board how to update succesfully usiongh windows update site????

[ + quote]

Jurgennop

Member

24. May 2006 @ 04:01

Link to this message

windows update worked thanks to a helpful member on this board.

But...lately spysweeper always comes up with this,yet it never did in the past,can anyone tell me how this happens and what it exactly is?
I've used bitcomet always...how can i stop getting these notifications?

[ + quote]

JaPK

Senior Member

24. May 2006 @ 10:01

Link to this message

Hi Jurgennop. BitTorrent seems to be added to the "removal list" in SpySweeper or it might be a false positive ...

Here are the instructions how to move it to the "Ignore" list of SpySweeper -> http://support.webroot.com/ics/support/default.asp?deptID=776

Just follow the instructions in "resolution 1".

[ + quote]

This message has been edited since posting. Last time this message was edited on 24. May 2006 @ 10:03

Jurgennop

Member

24. May 2006 @ 11:02

Link to this message

i'm sorry,i can't find resolution 1 in the link you provided,where is it exactly? and is it safe to move it to the ignore list?thx a million!!

[ + quote]

JaPK

Senior Member

24. May 2006 @ 21:18

Link to this message

Sorry, wrong link.

Go to http://support.webroot.com
-> Press "SpySweeper"
-> Press "5. How can I stop Spy Sweeper from quarantining a particular product?"
-> Now you should be able to find resolution 1

When you remove it to the ignore list, it will be ignored when you scan with SpySweeper.

[ + quote]

This message has been edited since posting. Last time this message was edited on 24. May 2006 @ 21:20

Jurgennop

Member

25. May 2006 @ 01:18

Link to this message

thx!

[ + quote]

JaPK

Senior Member

25. May 2006 @ 05:10

Link to this message

You're welcome :)

[ + quote]

Start a new thread

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > problem with spy sweeper. help


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.