Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: Problems with Trojans.sbi

  1. #11
    Senior Member Terminator's Avatar
    Join Date
    Sep 2006
    Location
    LV-426
    Posts
    349

    Lightbulb

    You are using a vastly out-of-date version of Spybot (1.4) the latest is 1.6.0.30 follow THESE instructions on how to uninstall Spybot, then install Spybot 1.6.0.30.
    If it ain't broke, don't fix it!

  2. #12
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    widgetwilk:

    The current errors with the Trojans.sbi and TrojansC.sbi files that started with the 2008-04-09 updates are caused by new detection rules that are incompatible with versions of Spybot prior to 1.5.2. These new detection rules use the new Anti-Rootkit plugins #1, #2 and #3 that only have been offered as updates to Spybot 1.5.2 and are included in Spybot 1.6. If you upgrade to Spybot 1.6 you will not only eliminate the error messages but in also will be performing rootkit searches while doing a Spybot "Check for problems".

    If there is a reason that you cannot upgrade to Spybot 1.6, you can try the Anti-Rootkit plugins #1, #2 and #3 with Spybot 1.4, but they are not officially supported. From post #11 in the following thread:

    Quote Originally Posted by PepiMK View Post
    Well, you can download the manual installer for the newest anti-rootkit plugins and install them on 1.4 as well. They do have a compatibility mode when loaded by 1.4, but not with official support
    Note: "... but not with official support ".

    The downloads for the Anti-Rootkit plugins are on the following Web page:

    This item:
    • Anti rootkit plugins 1.0 - product description
      md5: EE7278BC89D4557CFD7127EACC37EE70

      Supported only for version 1.5.2 or above!
      This adds improved capabilities to find rootkits. Only needed if you do not want to use the update function integrated into Spybot-S&D.

    Please note: Supported only for version 1.5.2 or above!

    The direct download link is:
    __________

    Note: If you continue to run Spybot 1.4, the following error and possibly other most likely will not be corrected with the plugins:

    Code:
    C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys
    The rule set for the Delf.Spool.cn detection does not appear to use the Anti-rootkit plugins. You can try to eliminate the error by running the scan without scanning for "Delf.Spool.cn":
    • Go into Spybot > Mode > Advanced mode > Settings > Ignore products.
    • Locate the item that you what to exclude from the scan ("Delf.Spool.cn") and check it.

    __________

    To see the Include errors.log:
    • Go into Spybot > Mode > Advanced mode > Tools > View Reports.
    • Then click the View previous reports button on the top of the right hand pane.
    • Look for the "Include errors" file
    • Highlight it and click open (or double click on it).

    For another method, see this this post.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #13
    Junior Member
    Join Date
    Aug 2008
    Posts
    5

    Default

    Sorry all what you said looked far to complicated, so I removed Spybot and downloaded new version, did a scan and this is what appeared.

    Hint of the Day: Click the bar at the right of this to see more information! ()


    Right Media: Tracking cookie (Internet Explorer: Owner) (Cookie, nothing done)



    --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

    2008-07-07 blindman.exe (1.0.0.8)
    2008-07-07 SDFiles.exe (1.6.0.4)
    2008-07-07 SDMain.exe (1.0.0.6)
    2008-07-07 SDShred.exe (1.0.2.3)
    2008-07-07 SDUpdate.exe (1.6.0.8)
    2008-07-07 SDWinSec.exe (1.0.0.12)
    2008-07-07 SpybotSD.exe (1.6.0.30)
    2008-07-07 TeaTimer.exe (1.6.0.20)
    2006-01-26 unins000.exe (51.41.0.0)
    2008-08-03 unins001.exe (51.49.0.0)
    2008-07-07 Update.exe (1.6.0.7)
    2008-07-07 advcheck.dll (1.6.1.12)
    2007-04-02 aports.dll (2.1.0.0)
    2005-05-31 borlndmm.dll (7.0.4.453)
    2005-05-31 delphimm.dll (7.0.4.453)
    2008-06-14 DelZip179.dll (1.79.11.1)
    2008-07-07 SDHelper.dll (1.6.0.12)
    2008-06-19 sqlite3.dll
    2008-07-07 Tools.dll (2.1.5.7)
    2005-05-31 UnzDll.dll (1.73.1.1)
    2005-05-31 ZipDll.dll (1.73.2.0)
    2008-07-22 Includes\Adware.sbi (*)
    2008-07-15 Includes\AdwareC.sbi (*)
    2008-06-03 Includes\Cookies.sbi (*)
    2008-06-03 Includes\Dialer.sbi (*)
    2008-07-29 Includes\DialerC.sbi (*)
    2008-07-23 Includes\HeavyDuty.sbi (*)
    2008-07-10 Includes\Hijackers.sbi (*)
    2008-07-08 Includes\HijackersC.sbi (*)
    2008-07-29 Includes\Keyloggers.sbi (*)
    2008-07-29 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2008-07-23 Includes\Malware.sbi (*)
    2008-07-29 Includes\MalwareC.sbi (*)
    2008-07-23 Includes\PUPS.sbi (*)
    2008-07-29 Includes\PUPSC.sbi (*)
    2007-11-07 Includes\Revision.sbi (*)
    2008-06-18 Includes\Security.sbi (*)
    2008-07-29 Includes\SecurityC.sbi (*)
    2008-06-03 Includes\Spybots.sbi (*)
    2008-06-03 Includes\SpybotsC.sbi (*)
    2008-07-23 Includes\Spyware.sbi (*)
    2008-07-29 Includes\SpywareC.sbi (*)
    2008-06-03 Includes\Tracks.uti
    2008-07-30 Includes\Trojans.sbi (*)
    2008-07-29 Includes\TrojansC.sbi (*)
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll


    to me it looks the same as before.

  4. #14
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    Widgetwilk:

    Quote Originally Posted by widgetwilk View Post
    Sorry all what you said looked far to complicated, so I removed Spybot and downloaded new version, …
    Wise decision. Unless there is a compelling reason not to use the most resent software that affects system security, it is usually prudent to keep it up to date.

    Quote Originally Posted by widgetwilk View Post
    … to me it looks the same as before.
    Differences that caused the errors:

    Quote Originally Posted by widgetwilk View Post
    --- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

    2005-05-31 SpybotSD.exe (1.4.0.3)
    2007-06-06 Plugins\TCPIPAddress.dll

    Quote Originally Posted by widgetwilk View Post
    --- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

    2008-07-07 SpybotSD.exe (1.6.0.30)
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  5. #15
    Junior Member
    Join Date
    Aug 2008
    Posts
    5

    Default

    So are you saying I am now alright?
    if so thank you very much

  6. #16
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    widgetwilk:

    Yes, you sould be "OK" now with the latest version and updates.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •