02-05-2012 12:44 PM
About 5-6 times a day I get the message from Trend Micro stating I have to reboot as threats were found. It is always TROJ_SPNR.15A912. Why does this keep coming up and why is it not able to be permanently removed by Trend Micro? I have Trend Micro Titaniium Maximum Security. This happens even if I am logged off and not on the internet.
Also, ever since I installed Trend Micro my computer is slow as molasses on the internet. I have uninstalled and reinstalled and it has made no difference. All of my previous virus programs have been removed. I also have a lot of internet pages load as a blank white page and I have to refresh to get the page I requested.
Please help! Thank you
02-05-2012 12:52 PM
Please run a full system scan using your Trend Micro program then export the log report and attach it here so we can check what file is being detected as such.
02-06-2012 10:21 AM
Thank you for posting the log file. As I checked on it the trojan that trend keeps on detecting is located in the system volume information folder of your computer that is part of the System restore. We need to turn off system restore so trend can clean the infection. You may refer to this link how to disable System Restore. After disabling it, run again another scan and it should be able to take care of that trojan file. Afterwards, you may re-enable the system restore.
Hope this helps.
02-06-2012 08:58 PM
Yes,thats in the system restore...run a small scanner to ensure its gone.
Please download Malwarebytes' Anti-Malware from Here
Double Click mbam-setup.exe to install the application.
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.
02-07-2012 07:22 PM - edited 02-07-2012 07:24 PM
I did what you mentioned, ran the scan again, etc. and rebooted the computer this morning. I then turned it off for the day. When I turned it back on this evening, after about 50 minutes of being on, it still comes up and tells me to reboot. Here is the export log from just that threat that showed up when it told me it found it and told me to reboot again:
02-09-2012 05:21 PM
Did you turn off the system restore before running a scan with trend?
02-18-2012 04:03 PM
Yes, I turned off system restore. I did all of that, and ran malware bytes (I bought a disk copy last week). It removed one piece of malware when I did a flash scan (trace.malware). However, I kept having problems with the TROJ_SPNR constantly reappearing as well as having web pages getting redirected, and I would run malware bytes full scan again and again as well as my virus scan with the restore turned off, etc. and it kept reappearing.
So we put the acronis image I had saved back on my computer from several months ago, and we will see if everything works like it should now.
I appreciate all of your help
02-19-2012 12:41 AM
I would need some logs to analyze your problems..
All RKreport logs located on your desktop.
Download OTL to your Desktop.
C:\Program Files\Common Files\ComObjects\*.* /s
Download aswmbr.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan.
Click the [Scan] button to start scan
On completion of the scan click [Save log], save it to your desktop and post in your next reply.