Hello!

I am using Ad-Aware SE Plus, Build 1.06r with the lastest definitions. It appears that when I run Ad-Aware it hangs randomly. What I mean is the program halts or freezes on a different executables. The first time that Ad-Aware froze during a scan was on a executable for OpenOffice. The program CHKDSK does not find any problems with the hard drive or any files located on drive C.

Executed RootkitRevealer. No questionable files were detected. Therefore nothing was saved in the text file. I tried to download the software from F-secure called Blacklight but the link does not take me to download the trial version of this software.

Currently Ad-Aware frezzes on C:\Program Files\OpenOffice 2.0\program\spl680mi.dll

Here is output from HjackThis:

Logfile of HijackThis v1.99.1
Scan saved at 3:14:19 AM, on 7/24/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINNT\system32\ssoftsrv.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\wwSecure.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\nvraidservice.exe
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Watch.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Infinite Mind LC\eyeQ\ARLaunch.exe
C:\Program Files\QUICKENW\QWDLLS.EXE
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\Everest Labs\Spydefense\sdc.exe
C:\WINNT\system32\WBEM\unsecapp.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
E:\System Programs\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NVRaidService] C:\WINNT\system32\nvraidservice.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
O4 - HKCU\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Watch.exe"
O4 - Startup: Dragon NaturallySpeaking.lnk = C:\Program Files\ScanSoft\NaturallySpeaking8\Program\natspeak.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: Robotaskbaricon.lnk = C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
O4 - Startup: Spy Sweeper.lnk = C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
O4 - Startup: Spydefense with service.lnk = C:\Program Files\Everest Labs\Spydefense\sdc.exe
O4 - Startup: TrojanHunter Guard.lnk = C:\Program Files\TrojanHunter 4.5\THGuard.exe
O4 - Startup: wwDisp.lnk = C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: MiniEYE-MiniREAD Launch.lnk = C:\Program Files\Infinite Mind LC\eyeQ\ARLaunch.exe
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\QUICKENW\QWDLLS.EXE
O4 - Global Startup: Spyware Doctor.lnk = C:\Program Files\Spyware Doctor\swdoctor.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Search Using Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - C:\Program Files\Agnitum\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1128217103078
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - http://liveca12.custhelp.com/7530-b327h/rnl/java/RntX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{16858E3A-C845-44AA-9F06-4308147CA140}: NameServer = 24.153.22.195,24.153.23.66
O17 - HKLM\System\CS1\Services\Tcpip\..\{16858E3A-C845-44AA-9F06-4308147CA140}: NameServer = 24.153.22.195,24.153.23.66
O17 - HKLM\System\CS2\Services\Tcpip\..\{16858E3A-C845-44AA-9F06-4308147CA140}: NameServer = 24.153.22.195,24.153.23.66
O20 - AppInit_DLLs: C:\Program Files\Agnitum\Outpost Firewall\wl_hook.dll
O20 - Winlogon Notify: WRNotifier - C:\WINNT\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINNT\SYSTEM32\ssoftsrv.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINNT\system32\wwSecure.exe

Here is data from the "Open Misc Tools Section" / Open Uninstall Manager:

Ad-Aware SE Plus
Adobe Acrobat 5.0
Adobe Photoshop 7.0
Agnitum Outpost Firewall Pro
AI RoboForm (All Users)
AI RoboForm Adapter for Firefox/Mozilla/Netscape
AM-DeadLink
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
ATI HYDRAVISION
AVG Anti-Virus 7.0
BB FlashBack
BB FlashBack 1.5.0
BB FlashBack 1.5.1
Before You Know It - French
BiAdmin
BSPlayer
Caere Scan Manager 5.0
Capture NX
Click'N Design 3D
CloneCD
Cloudeight Email Backup Guardian
Color Schemer v3
Contact Plus Personal
Copernic Agent Personal
Cryptainer LE
CSS Tab Designer v2.0
Cubis Gold
DART CD-Recorder 4
Dexster V3.0
Dragon NaturallySpeaking 8
DVD Decrypter (Remove Only)
DVD Shrink 3.2
DVDFab Decrypter 2.9.7.3
DVDIdle Pro 5.9.5.2
eBay Toolbar
Error Messages for Windows
EVEREST Home Edition v2.20
Everest Labs Spydefense 0.9.5 Beta
eyeQ
FairUse Wizard 2
FastStone Image Viewer 1.8
FastStone Photo Resizer 1.4
foobar2000
FrenchNow!
Good Sync version 4.6.1
Google Earth
HijackThis 1.99.1
Hotfix for MDAC 2.53 (KB911562)
HP DeskScan II
Internet Explorer Q832894
iTunes
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 5
jv16 PowerTools 1.3
Lame ACM MP3 Codec
Lexicon English-French
Lotto Pro
Macromedia Dreamweaver MX
Macromedia Extension Manager
Macromedia Fireworks MX
Macromedia Flash MX
Macromedia Flash Player 8
Magic ISO Maker v4.9 (build 0151)
Marvell Miniport Driver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Internet Explorer 5.5 SP2
Microsoft Office 2000 SR-1 Disc 2
Microsoft Office PowerPoint Viewer 2003
Microsoft Speech SDK 5.1
Mozilla (1.7.12)
Mozilla Firefox (1.5.0.4)
Neat Image v5.1 Pro+
Nero 7 Demo
Nikon Message Center
NVIDIA Drivers
OmniPage Pro 10.0
OpenOffice.org 2.0
Photodex Presenter
PowerDVD
Print Server Driver
ProShow Gold
Quicken 2002 Basic
QuickTime
QuickTime Alternative 1.63
RadioTracker 2.0.1.17
Real Alternative 1.44
Realtek AC'97 Audio
Registry Compressor
Registry First Aid Platinum
Scrabble Complete
Security Update for Windows 2000 (KB904706)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Serif PagePlus 7.0
Skype 1.4
SolidConverterPDF
Spy Sweeper
Spybot - Search & Destroy 1.4
Spyware Doctor 3.8
Style Master 4.5.1
SWF Extractor 2.2
SWiSHmax
SWiSHpixTC
SWiSHvideo
Tag&Rename 3.1.7
TheSage
TMPGEnc DVD Author 1.6
Total Recorder 5.3
TrojanHunter 4.5
Update Rollup 1 for Windows 2000 SP4
User Profile Hive Cleanup Service
VanDyke Software SecureFX 3.0
VideoLAN VLC media player 0.8.1
VideoReDo/Plus Version 2-1-0-401
WebPosition 3
WinAVIVideoConverter
Window Washer
Windows 2000 Hotfix - KB842773
Windows 2000 Hotfix - KB890046
Windows 2000 Hotfix - KB891781
Windows 2000 Hotfix - KB893756
Windows 2000 Hotfix - KB894320
Windows 2000 Hotfix - KB896358
Windows 2000 Hotfix - KB896422
Windows 2000 Hotfix - KB896423
Windows 2000 Hotfix - KB896424
Windows 2000 Hotfix - KB896727
Windows 2000 Hotfix - KB899587
Windows 2000 Hotfix - KB899588
Windows 2000 Hotfix - KB899589
Windows 2000 Hotfix - KB900725
Windows 2000 Hotfix - KB901017
Windows 2000 Hotfix - KB901214
Windows 2000 Hotfix - KB902400
Windows 2000 Hotfix - KB905414
Windows 2000 Hotfix - KB905749
Windows 2000 Hotfix - KB908519
Windows 2000 Hotfix - KB908523
Windows 2000 Hotfix - KB908531
Windows 2000 Hotfix - KB911280
Windows 2000 Hotfix - KB911567
Windows 2000 Hotfix - KB912919
Windows 2000 Hotfix - KB913580
Windows 2000 Hotfix - KB914388
Windows 2000 Hotfix - KB914389
Windows 2000 Hotfix - KB917159
Windows 2000 Hotfix - KB917537
Windows 2000 Hotfix - KB917736
Windows 2000 Hotfix - KB917953
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Media Player 9 Hotfix [See KB885492 for more information]
Windows Media Player Hotfix [See Q828026 for more information]
Windows Media Player system update (9 Series)
WinRAR archiver
WinZip
XoftSpy
Yahoo! Messenger

cdplayer..

Only a suggestion from a fellow member.. but are you aware of the recent conflicts with the latest version of Spy Sweeper and AAW? I don't know if you have the installed the most recent version, but if you have, you might try disabling Spy Sweeper and then running an AAW scan.

If it isn't your case, you may wish to look at CalamityJane's prior post regarding freezing issues. Maybe it will help?

Carol

Thanks Carol for replying!

I didn't know about the conflicts with the lastest version of Spy Sweeper and AAW. I will have to read what you have suggested.

Thanks Carol!!

You're quite welcome. There are other threads about it at this forum and many more elsewhere. It seems not to be an "isolated" issue. Good luck with it!

Carol

Carol my problem is the same as psyrah!
I shutdown Spy Sweeper and AAW was able to complete a scan without any problems!
I hope the folks at Lavasoft can resolve this compatibly problem.

Thank you Carol for the pointers!!!

Glad to see Lavasoft's own Forums are back!

I have same issue with freezing and SpySweeper 5.0. Has anybody heard anything re: Lavasoft's progress in solving this problem?

Apparently , they've been aware of it for almost two months(I think?)

Also, has anyone tried just disabling selective 'shields' in SpySweeper e.g I disable the 'Internet Security' shield to easily enable Updates from Spyware Blaster.

Webroot is well-aware of the conflict and are working on it - see this post (2nd page):
http://www.lavasoftsupport.com/index.php?s...=1043&st=20


Spike

I don't know if this will work for everyone, but it worked on 2 desktops and 1 laptop(all Wndows XP Pro):

After right-clicking on SpySweeper icon in notification tray, click on 'Shields' , then the'Windows System' Tab, under 'Critical Shields' UNCHECK

'Memory Shield' AND 'Spy Installation Shield'....Ad-AwareScan should now run...WITHOUT having to disable

SpySweeper (the other 11 shields are still functional!). Once Ad-Aware scan has finished simply RECHECK the

boxes and close the window.

If you can verify this works for others maybe you can help to 'spread' this fix as its easier and safer than having to disable SpySweeper altogether.

I'm sure that the 'Brains' at Lavasoft already know about this, but please pass it on as apparently the functions of ONLY those TWO(2) shields are preventing the Ad-Aware scans, not the entire Spysweeper Program.

Hope This Helps! Jeff