Problems in Spybot S&D Includes-trojanC

My Pc Crashes When I Finish Scan

I am getting the same weird error message and then when I go to finish the scan, i.e. finish and fix selected problems, as soon as i do that, my computer goes blank, shuts itself down and restarts. Then I get a message from Microsoft telling me the comp. has suffered a major error. Microsoft directed me to the help centre and advised that it was some sort of driver error due to new hardware being installed and advised a system restore; I did that and it still has not fixed anyhting. S&D has never caused me a problem before; ever... The issue appears to be when it comes time to cleanout the "usage tracks" (GREEN), specifically in the Log section (in fact, after doing hundreds of scans, this is the first time I've ever seen those usage tracks).

Is it a bug? A virus on my PC? i tried updating $&D and rerunning. I also immunised (separate issue; i can't immunize everything and usually I can) Is there something fatally wrong with my S&D since my last update (yesterday) Should i simply uninstall???? Help, please..I hate computers
 
Thanks

PepiMK and md usa spybot fan you have been most helpful.
I have been so impressed with the kindness and patience of the team here at Spybot. So many people who are inexperienced, unknowledgeable feel so lost and to have such helpful human beings on board is so refreshing and so relieving. I hope not to need your help in future but I feel calmer knowing you are all here. God bless.
 
Error Message

Excuse me for jumping in but I am having the same Trojan problem as well as the Update Problem.

I have version 1.5.1.15 running under Vista Home Premium and I can't update because after searching for updates I get a message that no updates are available.
 
Error Message

spybotsandra said:
Hello,

You seem to be using a dated version of Spybot-S&D.
Please download our current version Spybot - Search & Destroy 1.5.2. That should fix it.
You will find links to several download locations for this new version on our web site:
http://www.safer-networking.org/en/mirrors/index.html
Please search for new updates after installing Spybot-S&D 1.5.2.

Best regards
Sandra
Team Spybot
Click to expand...


I followed your suggestion and it worked. Thanks. I guess the moral is "don't believe everything you read" especially if it's from the Upgrade site.
 
Yet another ERROR MESSAGE

I have 1.4 and would like to keep it, I installed the root kit plugin at the time of my last post and it had fixed the problem. Now after the May 28 update there is a new error message. What plugin can solve this latest bug?

The reason I use 1.4 is that when I used the update feature in January to advance to 1.5.2 I had a problem thereafter with having to start computer in SAFE MODE and also my antivirus program would no longer uninstall, so I went back to 1.4 which I really like. I hope there is a way to solve this latest issue with 1.4 the root kit was easy and worked.
 
GEEWIZ said:
I have 1.4 and would like to keep it, I installed the root kit plugin at the time of my last post and it had fixed the problem. Now after the May 28 update there is a new error message. What plugin can solve this latest bug?

The reason I use 1.4 is that when I used the update feature in January to advance to 1.5.2 I had a problem thereafter with having to start computer in SAFE MODE and also my antivirus program would no longer uninstall, so I went back to 1.4 which I really like. I hope there is a way to solve this latest issue with 1.4 the root kit was easy and worked.
Click to expand...
Same problem here. 1.4 was working fine after installing the plugins until the May 28 updates.
 
Lancer:

It is difficult to help you. You indicated "Same problem here". Assuming that you are referring to GEEWIZ's post, neither you nor GEEWIZ have indicated what the error message you are getting nor the content of the "Include errors.log" if that is applicable to the error message.

The only thing that I can offer is that using Spybot 1.5.2.20 there have been no new plugins offered for downloading and using the current 2008-05-29 detection rule updates the scan seems to run fine.
 
md usa spybot fan said:
Lancer:

It is difficult to help you. You indicated "Same problem here". Assuming that you are referring to GEEWIZ's post, neither you nor GEEWIZ have indicated what the error message you are getting nor the content of the "Include errors.log" if that is applicable to the error message.

The only thing that I can offer is that using Spybot 1.5.2.20 there have been no new plugins offered for downloading and using the current 2008-05-29 detection rule updates the scan seems to run fine.
Click to expand...
Error message = "There were problems in the include file C:\Program Files\Spybot - Search Destroy\Includes\TrojansC.sbi"

My Include errors.log:

C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys

Where can I get the May 29, 2008 update? The program says I am up to date with May 28, 2008, which is the same as what is listed at http://spybot.info/en/updatehistory/index.html
 
Lancer:

My mistake. The latest updates were 2008-05-28.

__________

The rule set for the Delf.Spool.cn detection does not appear to use the Anti-rootkit plugins. You can try to eliminate the error by running the scan without scanning for "Delf.Spool.cn":
  • Go into Spybot > Mode > Advanced mode > Settings > Ignore products.
  • Locate the item that you what to exclude from the scan ("Delf.Spool.cn") and check it.
 
Excluding Delf.Spool.cn stops the error. I'll be watching the "Detection rules for Delf.Spool.cn and/or the file ntdoss04.sys" thread in False Positives for new information. Thank you md.
 
I am getting the message about TrojansC.sbi or something similar and it tells me to check my Includes errors.log I am using Spybot 1.4 with the latest definitions and don't recall getting these messages when I ran a scan about a month ago(4/26/08 to be precise).

C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+
C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+
C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Win32.Agent.frl | <$FILE_SYSTEM>
C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Win32.Agent.frl | <$FILE_EXE>
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Zlob.DNSChanger | <$FILE_EXE>
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Zlob.DNSChanger | <$FILE_EXE>
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Zlob.DNSChanger.rtk | <$FILE_EXE>
 
hokiewolf:

Upgrading to Spybot 1.5.2 will solve the problem (Mirror selection - The home of Spybot-S&D!).

The current errors with the Trojans.sbi and TrojansC.sbi files that started with the 2008-04-09 updates are caused by new detection rules that are incompatible with versions of Spybot prior to 1.5.2. These new detection rules use the new Anti-Rootkit plugins #1, #2 and #3 that only have been offered as updates to Spybot 1.5.2. If you upgrade to Spybot 1.5.2 you will not only eliminate the error messages but in also will be performing rootkit searches while doing a Spybot "Check for problems".

If there is a reason that you cannot upgrade to Spybot 1.5.2, you can try the Anti-Rootkit plugins #1, #2 and #3 with Spybot 1.4, but they are not officially supported. From post #11 in the following thread:
PepiMK said:
Well, you can download the manual installer for the newest anti-rootkit plugins and install them on 1.4 as well. They do have a compatibility mode when loaded by 1.4, but not with official support ;)
Click to expand...
Note: "... but not with official support ;)".

The downloads for the Anti-Rootkit plugins are on the following Web page:
This item:
  • Anti rootkit plugins 1.0 - product description
    md5: EE7278BC89D4557CFD7127EACC37EE70

    Supported only for version 1.5.2 or above!
    This adds improved capabilities to find rootkits. Only needed if you do not want to use the update function integrated into Spybot-S&D.
Please note: Supported only for version 1.5.2 or above!

The direct download link is:__________

Note: If you continue to run Spybot 1.4, the following error most likely will not be corrected with the plugins:

Code: 
C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys
To prevent that error for the time being you can exclude it from the scan. See this post.
 
You must log in or register to reply here.
Back
Top