Cleaning a customer machine...--Solved--

[allheart55]

I'm just curious....When I booted this machine (it is infected) I came across this pop-up. I recognize the site as a known spyware dumper. Has anyone seen this pop-up before? He is running SAS Pro and PC-Cillin Security Suite.

http://i136.photobucket.com/albums/q162/allheart55/computer%20funny/new-1.jpg

It looks like SAS may be corrupted.

http://i136.photobucket.com/albums/q162/allheart55/computer%20funny/sas-1.jpg

[allheart55]

Every time I attempt to manually scan with SAS I am getting a Direct Disk Access Error. :confused:



http://i136.photobucket.com/albums/q162/allheart55/computer%20funny/sasdds.jpg

[Formermember]

Direct Disk Access has been problematic in SAS, according to my info.
Have you tried Malwarebytes - could be worth a try.

[jcampi]

Cindy, I'm a little curious about the client running SAS Pro AND PC-Cillin Security Suite. Does PC-Cillin provide a built-in antivirus? It sure does appear there is an issue with SAS. What OS is the client running? I'd be tempted to ask an SAS rep. about the possibility of using the pre-release of SAS Pro 4.1. I received this offer from SAS and it works fine (especially on Vista). On four computers running SAS I have never received a Direct Disk Access message. I had a difficult time cleaning up stuff on one client's pc. I did a scan in Safe Mode with Nod32 and SAS and it cleaned up the system with no issue. It can be time consuming, but could do the trick. Have you considered just running SAS in Safe Mode?

[allheart55]

Cindy, I'm a little curious about the client running SAS Pro AND PC-Cillin Security Suite. Does PC-Cillin provide a built-in antivirus? It sure does appear there is an issue with SAS. What OS is the client running? I'd be tempted to ask an SAS rep. about the possibility of using the pre-release of SAS Pro 4.1. I received this offer from SAS and it works fine (especially on Vista). On four computers running SAS I have never received a Direct Disk Access message. I had a difficult time cleaning up stuff on one client's pc. I did a scan in Safe Mode with Nod32 and SAS and it cleaned up the system with no issue. It can be time consuming, but could do the trick. Have you considered just running SAS in Safe Mode?
John, I have never gotten a Direct Disk Access error either and I am running 3 notebooks and 5 desktops with SAS pro. I had to uninstall SAS and reinstall it. He is running Win XP Home with SP 2. It is an E-machine desktop. :smash: Crappy..... I mean... a very nice machine! :D In any case, SAS alone pulled up 393 infected files and 2,217 registry items. I have already wiped and reloaded it. SP 3 is installing right now. Luckily, he backs up his files regularly but he doesn't use an imaging program. PC-Cillin is his antivirus software. It was disabled????? :confused:

[Scotty]

***CLOSED***

The topic in this thread has been closed at the request of allheart55.

Please refrain from any additional posting on this topic unless there is an UPDATE or new information relevant to the original topic.

Additional postings may be removed without notice.

Thank you!
KH Mod Squad