Ad-Aware SE (Posting Instructions | Freezing Help | Updates)

[Corrine]

Before posting your logfile, please do the following:

Note: Some Files and Folders may be Hidden, by design. Please ensure that "Show Hidden Files and Folders" is enabled.  (Instructions: How to make Windows show all files) . Reverse this process after your system is clean.

1) If you have not already installed Ad-Aware SE 1.06, please download it from  http://lavasoft.element5.com/support/download/ 

2) Run the Webupdate feature. (Click on the Globe icon, Click connect, Click OK, Click Finish.)

3) Set up the Configurations (Gear wheel at the top) as follows:

General Button > Safety & Settings: Check (Green) all three.
Advanced Button > Logfile Detail Level: All options under this should be checked (Green).
Tweak Button
> Scanning Engine: Check "Obtain command line of scanned processes"
> Log Files: Please check only:

• "Include basic Ad-Aware settings in logfile"
  
• "Include additional Ad-Aware settings in logfile"

Click on "Proceed"

4) Click on "Scan Now"

5) Please deselect "Search for negligible risk entries" as negligible risk entries (MRU's) are not considered to be a threat.
If these are included in your logfile it will be removed and we will not give advice on them. They are the user's choice.

6) Run the scanner using the Full Scan (Perform full system scan) mode. A full scan is the in-depth scan mode that scans your whole computer for Spyware infections. When performing a full scan the following scan settings are used:

• Full Memory Scan is performed
  
• Registry Scan is performed
  
• Deep Registry scan is performed
  
• Cookie-Scan is performed
  
• Favorites are scanned
  
• Hosts file is scanned
  
• Conditional scans are performed
  
• Archive files are scaned
  
• All fixed drives are scanned
  

6) When the scan has completed, click "Show Logfile". Copy/paste the complete log file in a thread of your own. Do not quarantine or remove anything at this time, just post a complete logfile. This sometimes takes 2-3 posts to get it all posted. You will know you are at the end when you see the "Summary of this scan" information has been posted.

Important: If these guidelines are not followed, your logfile may be edited out and you would then have to redo the settings and rescan and repost the logfile, so please do this before posting.

Thanks,

Malware Response Team
_________________
Freedomlist.com (2000 - 2010)



Take a walk through my Security Garden

[Corrine]

Note: Because the logfiles are over 10.000 characters, after posting your logfile, you may see a message looking something like the following:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
| Long message! - click here to read the rest of the post (+)|
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Please click that message to expand the post. Check that your entire log has posted and the summary at the end shows.
_________________
Freedomlist.com (2000 - 2010)



Take a walk through my Security Garden

[Corrine]

Ad-Aware SE freezing, stalling or unable to quarantine can be caused by many different situations. We have found that almost all freezing issues that are resolved were due to corrupted files or some other machine issue. That does not mean that Ad-Aware SE will successfully run on all machines, but this is no different than any other software. There are simply too many operating systems and program combinations for any program to run in all possible environments.

Collected here are solutions that have been found will generally work. Although I have updated the original document a number of times, thanks go to the following for their contributions, including suggestions, solutions and verbage for the original document: appetiser, cannymum, EASTER, Eric the Red, IAMSKINZ, Option^Explicit, rmetzger, Sigma and Totro.

NOTE: to receive individual attention, please create a topic of your own, kindly indicating what actions you have taken, including a debugf log if you still cannot complete a scan.

Launch Ad-Aware SE and check for any Definition File updates. Click on the gear to access the Configuration Menu. Click on Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion".

Manually Clean 'Temporary Internet Files'
Clean the following directory contents (but not the directory folder). Please disconnect from the Internet (for broadband (DSL/Cable) users, it is recommended that you disconnect the cable connection) and close All open browsers.

Cleaning 'Temporary Internet Files'


1. C:\Windows\Temp\, C:\WINNT\Temp\, or C:\TEMP\
   
   
2. "C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet Files\" <=This will delete all your cached Internet content including cookies.
   
   
3. "C:\Documents and Settings\<Your Profile>\Local Settings\Temp\"
   
   
4. "C:\Documents and Settings\<Your Profile>\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\"
   
   
5. "C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\" <=This will delete all the other users cached Internet content including cookies.
   
   
6. "C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\"
   
   
7. "C:\Documents and Settings\<Any other users profile>\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\"
   
   
8. Empty your "Recycle Bin," including extended recycle bins, such as "Norton's Protected Recycle Bin"
   
   
9. Shutdown/Restart the computer (except when specifically told not to)
   

Notes:


1. Some Files and Folders may be Hidden, by design. Please ensure that "Show Hidden Files and Folders" is enabled. target="_blank" class="postlink">How to make Windows show all files
   
   
2. Java Cache folders may be named slightly differently depending on version. Locate the lowest lever below 'cache' for deletion.
   
   
3. You may have other areas that need to be cleaned as well. Drive C: may not be your %SystemDrive%, substitute accordingly.
   
   
4. If having difficulty deleting files, consider rebooting in Safe Mode ( http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406 )
   and repeating the process.
   

Using CCleaner to "Clean TemporaryInternet Files"
Download CCleaner from the link at the upper right of this page: http://www.filehippo.com/download_ccleaner.html .

Instructions for using CCleaner:

1. Before first use, check under Options > Advanced > UNcheck "Only delete files in Windows Temp folder older than 48 hours".
2. A pop up box will appear advising this process will permanently delete files from your system.
3. To protect logon cookies that you wish to retain, under Options > Cookies. Select and using the arrow move those cookies to the "Cookies to keep" column.
4. Then select the items you wish to clean up.

In the Windows Tab:

Clean all entries in the "Internet Explorer" section.
Clean all the entries in the "Windows Explorer" section.
Clean all entries in the "System" section.
Clean all entries in the "Advanced" section.
Clean any others that you choose.

In the Applications Tab:

Clean all in the Firefox/Mozilla section if you use it.
Clean all in the Opera section if you use it.
Clean Sun Java in the Internet Section.
Clean any others that you choose.

5. Click the "Run Cleaner" button and it will scan and clean your system.
6. Click exit.
7. Shutdown/restart the computer.

Conditional Scan
For Ad-Aware SE Plus and Professional customers experiencing freezing during the conditional scan, please use the following command line option*:

Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown) for your version of Ad-Aware SE:

"C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +procnuke +cskip
"C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" +procnuke +cskip

Additional Steps:
Please try the following:

• Disk Defragmentation, followed with a thorough Check or Scan Disk, depending upon your version of Windows
  
  
• Online Scan: Do an online scan at one or more of the sites listed below and follow any removal instructions.
  
  BitDefender
  Panda
  F-Secure
  TrendMicro
  A2 Trojan Scan
  
  To scan individual files, please go to: http://virusscan.jotti.org/ . Upload the file in the "File to upload & scan" box at the upper left. If Jotti reports the file is infected, please provide that information in your post topic.
  
  
• Safe Mode Scan: ( target="_blank" class="postlink">http://service1.symantec.com/SUPPORT/tsgen...001052409420406 )
  
  
• Real-time AV Monitors: Only while disconnected from the Internet, try scanning with the AV software shut down.
  
  
• Real-time Monitoring Programs: See target="_blank" class="postlink">"How to Disable Real Time Monitoring Programs"
  
  
• Command Line Scan: Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown) for your version of Ad-Aware SE:
  "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" /full +procnuke
  "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" /full +procnuke
  "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +procnuke
  
  
• Stop/Start Method: Start the scan, however cancel BEFORE the scan reaches the point of stalling -- say after 20 objects are detected. Then click cancel and click on the logfile. Remove any objects you choose and rescan. Again stop the scan before it reaches the point of stalling and remove any addiitonal objects. For highly infected systems, it may also be necessary to shutdown/restart between scans.
  
  
• Selective Removal: For severely infected machines, it is not always possible to remove all objects at the same time. It is necessary to quarantine in smaller groups. Start with "tracking cookies" and include other families detected, but not removing more than around 60 objects at a time. If a "family" has 60 or more objects detected, select only that family for removal with that scan. Shutdown/restart between removals.
  
  
• Malware Shutdown: Some malware can target programs designed to remove them so if you find Ad-Aware SE is being shutdown during a scan or will not start try using the +immortal option.
  
  -- Click "Start" > select "Run" > type the appropriate text shown in bold below (including the quotation marks and with the same spacing as shown). Select the Professional, Plus or Personal command depending on the version of Ad-Aware SE you have.
  
  "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" /full -mru +auto +immortal
  "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" /full -mru +auto +immortal
  "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +immortal
  
  Then click on the OK button to run the command. For Professional and Plus versions the scan will start scanning and automatically remove items found. For the Personal Edition you need to start the scan manually and you will need to reboot your PC to close Ad-Aware SE.
  
  
• +Debugf Log: If none of the above works and you are an Ad-Aware SE Plus or Professional license holder and you still can NOT complete a scan, please do the following and submit that log to Lavasoft Research. For Ad-Aware SE Personal users, with the Lavasoft Support Forums closed, please post the debug log as a reply and I will send it to LS SteveJ at Lavasoft Research. Although I will do my best, there is no guarantee that your issue will be addressed.
  
  Launch Ad-Aware SE. Click on "Preferences" > "Tweak" > "Logfiles". Check (ON) this tweak: "Include used command line parameters in logfile".
  
  Next:, click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown) for your version of Ad-Aware SE:
  
  "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" +debugf
  "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" +debugf
  
  The +debugf will create a log (debug output) in the Ad-Aware folder if the program freezes. In a topic of our own, copy the last five lines only of the debuglog-file (NOT closing AAW, or doing any modifications to its current state). The debuglog will show us at which particular operation it hangs. We need that information. Also, post the logfile. You can close Ad-Aware SE after that.
  

*Note: For command line scans, the path shown between the quotes is the default location of Ad-Aware SE, if you installed to a different directory please adjust it to the correct location. For Ad-Aware SE Personal, when the GUI launches, you will need to click Start > Select Full System Scan > Click Next.
_________________
Freedomlist.com (2000 - 2010)



Take a walk through my Security Garden

[Corrine]

Ad-Aware is designed to provide advanced protection from known Data-mining, aggressive advertising, Parasites, Scumware, selected traditional Trojans, Dialers, Malware, Browser hijackers, and tracking components. With the release of Ad-Aware SE Personal edition, Lavasoft takes the fight against Spyware to the next level.

With Lavasoft’s all new Code Sequence Identification (CSI) technology, you will not only be protected from known content, but will also have advanced protection against many of their unknown variants. To further protect you, Ad-Aware SE Personal Edition also has the capability to scan and list Alternate Data Streams (ADS) in NTFS enabled volumes. In combination with the new scanning engine, Ad-Aware SE will scan your computer faster and more thoroughly than ever before!

Ad-aware is compatible with Microsoft® Windows® 98/Me/NT/2000 and XP Home and Professional.
Product Info:  Ad-Aware® SE 1.06 
_________________
Freedomlist.com (2000 - 2010)



Take a walk through my Security Garden

[Corrine]

Ad-Aware thread unpinned. If help is needed with Ad-Aware SE, I will assist, however, I generally use other tools now.

Ad-Aware SE updates are available in  this thread  at LandzDown Forum.

Regards and Happy New Year.
_________________
Freedomlist.com (2000 - 2010)



Take a walk through my Security Garden