Results 1 to 8 of 8

Thread: Trojans.sbi - include error

  1. #1
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default Trojans.sbi - include error

    After the 2007-08-08 updates, I am getting the following message during a scan:

    Warning

    There were problems in the include file C:\Program Files\Spybot - Search _Destroy\Indudes\Trojans.sbi See 'Include errors.log' for details.

    OK
    The contents of the Include errors.log:

    Code:
    C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  2. #2
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello MD,

    Do you already have downloaded the TCP/IP Settings plugin update?

    Best regards
    Sandra
    Team Spybot

  3. #3
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    My mistake!!!

    I renamed the file last week experimenting with something and forgot to rename it back.

    My apologies.

    Regards,
    md usa spybot fan

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  4. #4
    Junior Member
    Join Date
    Aug 2007
    Location
    Illinois
    Posts
    7

    Default Same message today trying to clean a Trojan.

    Quote Originally Posted by md usa spybot fan View Post
    After the 2007-08-08 updates, I am getting the following message during a scan:


    The contents of the Include errors.log:

    Code:
    C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+
    I too receive this message, but no such log file exists, AND worse, the il-effects of the virus persist.

    Any suggestions?

  5. #5
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    Please download the following update (using the integrated update facility should resolve the problem): TCP/IP Settings plugin - !TCP/IP Settings plugin (65 KB) - 2007-06-06

    After the successful download of the "TCP/IP Settings plugin" (plugtcpip.zip - which contains two (2) files (install-plug1.ini and TCPIPAddress.dll), the update routine should have:

    *
    1. Extracted the TCPIPAddress.dll file into the following directory/folder (assuming the default installation directory/folder was used):
    o C:\Program Files\Spybot - Search & Destroy\Plugins
    2. Restarted SpybotSD.exe so that the new TCPIPAddress.dll was loaded in SpybotSD.exe.

    There are several ways to overcome the problem.
    Try the following:

    * Unzip (extract) the plugtcpip.zip file that's in your update folder to some known location.
    * Then copy the TCPIPAddress.dll from that location into the Plugins folder.
    * Make sure that you restart SpybotSD.exe (if running) before attempting a scan again.

    For more informations please do also have a look at our forum:
    Problems with 2007-06-06 ßDetection rules (beta)
    http://forums.spybot.info/showthread.php?t=14546

    Best regards
    Sandra
    Team Spybot

  6. #6
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Thanks for the feedback, this may be an issue with Spybot S&D, please see this information:
    http://forums.spybot.info/showthread.php?t=16699

    I would like to see a new HJT log, I can't see how the services could return if they are disabled. Perhaps we need to delete those services.

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  7. #7
    Junior Member
    Join Date
    Aug 2007
    Posts
    1

    Default

    Quote Originally Posted by md usa spybot fan View Post
    After the 2007-08-08 updates, I am getting the following message during a scan:


    The contents of the Include errors.log:

    Code:
    C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+
    Can u help me fix this problem

  8. #8
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    re: The following message:

    Warning

    There were problems in the include file C:\Program Files\Spybot – Search Destroy\Indudes\Trojans.sbi See 'Include errors.log' for details.
    You need the TCP/IP plugin with the new rule set included in beta updates on 2007-06-06 and regular updates starting on 2007-06-13 or else you will get the above error.

    The TCP/IP settings plugin enables Spybot to use new rules which can detect IP addresses entered by malware and exchange them with non harmful entries.

    To download and install the TCP/IP plugin you either have to:
    1. Download the following update using the integrated update facility:
      • TCP/IP Settings plugin - !TCP/IP Settings plugin (65 KB) - 2007-06-06


      --- or (if you do not use the integrated update facility) ---

    2. Download and execute the following item from the Downloads Web page:
      • TCP/IP Plugin 1.0 - product description - product description
        md5: 7FD95B7E814EA2F56AEACE3613B4A0E9

        This adds capabilities to find and replace malicious network settings. Only needed if you do not want to use the update function integrated into Spybot-S&D.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •