SuperAntispyware

Molotov

I've had SuperAntispyware installed on my PC for a while, but now it takes ages to open (5-10 minutes) and hogs my resources as it does so, although once opened it runs ok.

I've tried reinstalling a number of times with no success.

Am I doing something wrong, or does my PC just not have enough resources for it, and if so is there another alternative?

Thanks

marleyboy

I am assuming you have updated it, however the same procedure happens to me, but once running it will run smoothly in the background, I think its just a case of it checking the system before activation, bigger hard drives and more programs will inevitably take it longer to initialize. Dont quote me on this, I am just going of my own experience with it.

Molotov

marleyboy wrote: »

I am assuming you have updated it, however the same procedure happens to me, but once running it will run smoothly in the background, I think its just a case of it checking the system before activation, bigger hard drives and more programs will inevitably take it longer to initialize. Dont quote me on this, I am just going of my own experience with it.

Thanks.
Yes, it updates and runs ok once it's started - it just takes so long to initially open.

According to most experts, it seems to be the best antispyware program, but it's becoming a bit of a drag to use.
I used to use Spybot and Adaware, but they seemed to fall out of favour, what's the next best alternative?

RussJK

Molotov wrote: »

I used to use Spybot and Adaware, but they seemed to fall out of favour, what's the next best alternative?

I think Spybot is still worth using for the immunisation function, although the scan seems obsolete. Threatfire is useful, along with Avast and MBAM (protection module).

Molotov

RussJK wrote: »

I think Spybot is still worth using for the immunisation function, although the scan seems obsolete. Threatfire is useful, along with Avast and MBAM (protection module).

I already have MBAM - is the protection module paid-for?

I'm pretty well covered already with SpywareGuard & SpywareBlaster rather than Spybot, but I've heard of Threatfire before so may give that a try, thanks.

RussJK

Molotov wrote: »

I already have MBAM - is the protection module paid-for?.

Yes the protection module is payed for. I bought three licences once when I found a discount code... worth it, if just as a donation. MBAM has helped me more than any other antimalware program has.

aliEnRIK

proba good idea to post a hijack log to determine if anythings rujning that shouldnt be. SAS runs fine generally so I suspect your infected or whatever

Download HIJACK THIS (Make sure you click 'DOWNLOAD THIS VERSION')
http://www.filehippo.com/download_hijackthis/2894/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

Molotov

Thanks Rik - I've reinstalled the latest version and done a general clear-up and it's better, but here's my hijack log anyway:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:40:42, on 11/04/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\MSL\ThreatFire\TFService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\MSL\ThreatFire\TFTray.exe
C:\MSL\Rainlendar2\Rainlendar2.exe
C:\MSL\Siber Systems\RoboTaskBarIcon.exe
C:\MSL\SpywareGuard\sgmain.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Webshots\webshots.scr
C:\MSL\SpywareGuard\sgbhp.exe
C:\MSL\Mozilla Firefox\firefox.exe
C:\MSL\Defraggler\Defraggler.exe
C:\MSL\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\MSL\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\MSL\Siber Systems\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\MSL\Siber Systems\roboform.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ThreatFire] C:\MSL\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\MSL\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKCU\..\Run: [TClockEx] C:\MSL\TClockEx\TCLOCKEX.EXE
O4 - HKCU\..\Run: [Rainlendar2] C:\MSL\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [RoboForm] "C:\MSL\Siber Systems\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [SandboxieControl] "C:\MSL\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SpywareGuard.lnk = C:\MSL\SpywareGuard\sgmain.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: Customize Menu - file://C:\MSL\Siber Systems\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\MSL\Siber Systems\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\MSL\Siber Systems\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\MSL\Siber Systems\RoboFormComSavePass.html
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\MSL\Siber Systems\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\MSL\Siber Systems\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\MSL\Siber Systems\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\MSL\Siber Systems\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\MSL\Siber Systems\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\MSL\Siber Systems\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (Egg Money Manager Digital Safe) - https://moneymanager.egg.com/Pinsafe/accounttracking.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab
O16 - DPF: {EA516A52-D223-47AF-80B3-DCDDEFD34BD0} (CPlayerCtl Object) - http://download.fra.real.com/dmgr/HelixDownloadManager.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A390D5D9-4351-4330-A63F-1BB76CF59FE8}: NameServer = 62.24.128.190 62.24.128.191
O20 - Winlogon Notify: !SASWinLogon - C:\MSL\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ThreatFire - PC Tools - C:\MSL\ThreatFire\TFService.exe

--
End of file - 7132 bytes

aliEnRIK

You have far too much security running which is probably why SAS isnt happening

Id definitely uninstall THEATFIRE as its useless next to Avira
Id remove SPYWAREGUARD

TICK and FIX these ~
R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)


Whether you uninstall those items or not ~
Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be) ~ if there are loads of 'SNAPSHOT' pages then leave them out

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download

fiddiwebb

Also you could run the portable version of Superantispyware if you wanted from a USB stick it does say "The scanner does NOT install anything on your Start Menu or Program Files", you just need to open SAS from your USB stick, update the definition files and run it.

If you do use the portable version then it would be best to uninstall the one you use just now unless of course it is he paid version?

http://www.superantispyware.com/portablescanner.html