Origin and meaning of strange numbers

[whrx]

I have used Spy Bot many times, but usually set it going, and then leave the room.

 

This time, out of boredom, I watched as the numbers and descriptions flew by showing each (item or ??) that the program was scanning.

 

The numbers kept asending, so I believe this indicated progress toward a number in the 60000 range. Also I could read some of the descriptions and am astounded at many of them. Some samples are: Casino xxx, casino yyy, fake anti virus, ad watch, and so on and so forth.

 

Some of the descriptions seemed logical but several dozen (as above) did not.

 

As a newby, I have no idea of what the numbers refer to, and I especially don't understand where and why I'm getting such short but strange messages; I can't detect any affect on performance, but would prefer to eliminate them.

 

Thanks to all for any help on this

 

PS: I'm running VISTA

[Corona]

Spybot is okay, but it also scans for malware that's been outdated for 5+ years if not longer. If you live in a 3rd world country definitely run a full scan with Spybot once, get rid of what it finds, uninstall Spybot and then download the free version of MBAM (Malwarebytes Anti-Malware). Install it, update it, and run a full scan. After that only a quick scan will be necessary to keep your PC clean. MBAM quick scans are about 8 minutes long, much better than Spybots' 30+ minute benchmark.

[hazelnut]

Not sure if you are still able to do this but you used to be able to play a game in spybot while doing a scan. Can you still do this?

 

http://malektips.com/spybot_search_and_destroy_0043.html

 

Taken from this page here

 

http://malektips.com/spybot_search_and_des...p_and_tips.html

[login123]

 

Yep, sure can. Goodness gracious, Hazelnut, is there anything you don't know? Well, errr, if there was, how would you know it? Never mind. Back to the game.

[Andavari]

Hazelnut, is there anything you don't know?

She would make a good intelligence officer!

[razz]

I agree with Corona - very good advice. MBAM quick scans are very fast and because of this I make it a practice to perform a quick scan every day. The actual time naturally depends on the # of objects scanned. Below shows a portion of the MBAM log from my scan yesterday.

Scan type: Quick Scan

Objects scanned: 114257

Time elapsed: 14 minute(s), 51 second(s)

[razz]

She would make a good intelligence officer!

Yes, no doubt about it!

[login123]

She would make a good intelligence officer!

 

You betch'a. I have used SnD since, well, basically forever, and didn't know about that game.

 

More on point, to whrx, most here hold that SnD is outdated, replaced by newer, better applications. I use it anyway, does no harm, doesn't slow this machine down appreciably although the Tea Timer uses about 3 times more memory than anything else on here. The Tea Timer has caught baddies that got past everything else.

 

I did notice an speed improvement in another machine when SnD was uninstalled. Not much, but it is an older machine and every little bit helps.

 

One problem has arisen just today, though, that needs watching. After an update, a popup appeared saying SnD had

"Encountered and terminated Fraud.SoftCop in C:\WINDOWS\system32\shadow\ShadowService.exe!"

and

"Encountered and terminated Fraud.SoftCop in C:\Program Files\Microsoft Office\Office\OSA.EXE!"

I chose the option to allow them to continue to run. They are maybe false positives, and will be reported to Spybot, but I sure wouldn't like for any app to destroy those exe files.

[whrx]

I think I have misled some of you.

 

In no way has Spy Bot flagged any of the strange messages, they just flash by

 

This adds to the strangness of the whole thing, eg: "casino xxx" has to have come from SOMEWHERE, else how could SB scan it??

 

Have run MALB and watched as it scanned.....no strange messages.

 

Unless someone sees a flaw, I plan to ignore SB unless it flags something.

 

Since MALB show what it is scanning, while SB just uses numbers......another plus for MALB

 

 

FWIW I do live in Col.................expecting 2' of snow by AM

[hazelnut]

Could it be the spybot host file you are see a list of?

 

 

''Hosts File tab. Spybot comes with its own hosts file, which contains an extensive list of Web sites known for spyware; you can view this list on the Hosts File tab. When this file is installed, no content from any of the sites in it will be displayed. To install the Spybot hosts file, click on the Hosts File tab.

 

At the top of the Hosts File screen, click on Add Spybot-S&D Hosts List. The Spybot hosts file will now be used instead of your default hosts file. To remove the Spybot hosts file, click on Remove Spybot-S&D Hosts List.

 

Note: Using the Spybot hosts file can cause decreased performance. Read the FAQ included with Spybot to correct these problems for your version of Windows.''

 

Taken from here

 

http://www.softpanorama.org/Malware/Spywar...uidelines.shtml

[Corona]

"Encountered and terminated Fraud.SoftCop in C:\Program Files\Microsoft Office\Office\OSA.EXE!"

 

(Is that exclamation point for real? It has the same effect as HAXXORZ!!!111!!!.)

You're the 2nd person that's mentioned SoftCop in a malware situation. I know someone on another forum who has RoadRunner internet service whose online A/V protection somehow relies on this POS rogue.

[login123]

Yes, the exclamation point is for real, it is a straight cut and paste from the spybot log.

 

Post about the false positive in the Spybot Forum. Apparently one of the updates gave a lot of false positives.

 

Not sure what you mean? What is the significance of the exclamation point?

[whrx]

Thanks to all of you who have helped me....especially Hazelnut!

 

I have followed your advice HN, and once again realize I'm in way over my head. In SnD, one explanation that may apply (but I doubt it) is that every time the user clicks on a site, that info is stored "deep inside WIN". Since never in my life have I ever entered any of the supposed casino sites, that cannot explain things. You mentioned that SnD contains a list of potential danger spots. While it seems a very strange way to go, apparently those sites are included in the scan...just as though they were on your own computer!

 

I read their tutorial and rate it the worst I have ever seen; large chunks are covered by example pages that I could not remove.

 

Also, I could not find any way to delete anything but I no longer care a whit. SnD icon is relegated to "seldom useful programs" on my desk top. I may run it once in a while JIC, but will totally ignore those wierd messages as they pass by.

 

THANKS AGAIN TO ALL.......over and out

[Corona]

Don't you know? The fact that you got 3 feet of snow in Colorado before Halloween proves that you're evil.