Problems updating Spybot

[Zenobia]

If you aren't able to get on the http://www.spybot.info/en/home/index.html
site to download Spybot,you could try downloading it from here:
http://fileforum.betanews.com/detail...y/1043809773/1
(You'd want the blue button that says Download Now (15,650 kb))

Once it's downloaded,see if this link will work to get you the updates manually:
http://www.spybotupdates.biz/updates...d_includes.exe

What firewall do you use?
Are you having any other noticeable problems on your computer?

I'm not real familiar with external hard drives,I've never used one,but this one lists ten good ones.Articles a bit dated,though,it's from Dec.2008.
http://www.pcworld.com/article/12372...rd_drives.html

[tlhipp]

Hi Zenobia!

Thanks for getting back to me! , and thanks for the article link on the hard drives. Sorry I stuck that in at the end.
How I got it to work:
I deleted 2 p2p programs I never used, deleted my temp files/cookies/etc. Updated and ran my AVG scan (3 hrs!) and it found nothing. This morning I ran my old spybot program so it could find what it could. It found coupon bar (always on mine as I download coupons all the time) and some other one called Zblob or something...DNS trojan? Anyway, I had to re-start and re-scan for the Z-one to get removed, then I was able to update and get the new version of Spybot. I have to do some tasks this am, then I'm going to delete my temp files again and scan with the updated spybot.

Other issues:
Other than my computer slowing to a crawl yesterday,my Internet explorer 7 has had a crash issue since I've downloaded it. It usually happens when I'm runing Itunes at the same time and not always right away. If it doesn't freeze up when I'm using it, I always get an error message that it has to send to Microsoft when I try to close it. Also recently (but I fixed it somehow without ruining my computer) My windows installer was missing or corrupted or something, (I knew because I couldn't install the new version of itunes). Well, AVG had a major faux paux and ID'd all itunes files as trojans, and before I checked, I had deleted enough for my itunes not to work. I found an article on how and which installer to install, and to how to unregister and then re-register it. Apparently it un-registered itself during an update at some point. I also had been getting re-directed to search engines when I try to go to some websites.

Firewall
I only have the one from Windows (and everytime I turn the computer on, it tells me my firewall is not on, and to click the baloon to fix the problem, and when the screen pops up, it says everything is on. Anyway, I read that that is not a good firewall for protection. I use the AVG free edition 8.5 for my other security. What kind of firewall can I use that won't cause a conflict and slow my computer down? (a link to another post is fine since you've probably answered this question a thousand times!)

Thanks again.
Lori

[Zenobia]

Hi.
Glad you were able to get the updated version of Spybot.

After you update and scan with the new version of Spybot,can you let me know if you still get redirected to search engines when you try to go to some websites?

This link lists some different firewalls:
http://www.bleepingcomputer.com/tuto...ial60.html#pop
When I had my XP,I really liked Kerio firewall.I had Zone Alarm free before that,and that was pretty good,too.
If you do download and install another firewall,you should turn off Windows Firewall afterwards,since it's not a good idea to run two firewalls at the same time.
To disable Windows Firewall,click Start,click Run,type Firewall.cpl,and then click OK.
On the General tab, click Off (not recommended),then click OK.

[tlhipp]

Thanks again, and I'll let you know if I have that problem. I haven't noticed it today, but I didn't go many places and do many searches today.

Have a good evening!
Lori

[Zenobia]

Ok,thanks.
I hope you have a good evening,too.

[tlhipp]

I re-scanned, after hardly doing any internet yesterday, and I got 3 different things on scan, 2 that I had just removed that morning, and one new one. This time the new one and the zblob DNS thing was fixed, and the coupon bar had to be removed upon restart. I'm on my hubby's work computer now, so I don't know how it's behaving yet. I'll let you know if it starts.
Thanks,
Lori

[Zenobia]

Could you do another scan with Spybot,then when the scans done,could you rightclick somewhere in the results list and select Copy Results To Clipboard?
Then come back and paste the results here.

[tlhipp]

I re-did the scan after updating and I think this is the log. I "cleaned" it off again and the log looked the same I think. I have since read about this Zlob DNS changer on the site and it sounds like I may have to re-set mymodem or something like that. We have a Sprint 645 series DSL modem (with Embarq now) and a Linksys wirelss modem or router or whatever it is that lets us use the laptop in the living room.
Anyway, here's the log:

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{04E86D13-7EF8-4E7C-8CE3-F1DAC53A3420}\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2008-07-30 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2004-04-27 unins000.exe (51.13.0.0)
2009-07-31 unins001.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-07-28 advcheck.dll (1.6.3.17)
2007-04-02 aports.dll (2.1.0.0)
2004-05-12 borlndmm.dll (7.0.4.453)
2004-05-12 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2004-05-12 UnzDll.dll (1.73.1.1)
2004-05-12 ZipDll.dll (1.73.2.0)
2009-05-19 Includes\Adware.sbi (*)
2009-07-28 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-07-28 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2009-07-28 Includes\HijackersC.sbi (*)
2009-06-23 Includes\Keyloggers.sbi (*)
2009-07-28 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-07-14 Includes\Malware.sbi (*)
2009-07-28 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-07-28 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-07-28 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-07-28 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2009-07-22 Includes\Trojans.sbi (*)
2009-07-28 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

I hope that's what you asked for. If not, let me know. I may not be able to respond instantly because I have work (yay!) during the next few days, and my hubby HATES it when I'm on the computer when he's home, so I try not to, but the small jobs I'm doing require computer reporting, so I might be able to sneak a peek at any messages or at least run the scans and let them run in the evening and report in the morning. Ok, I'll shut up now
Thanks again!
Lori

[Zenobia]

Yes,that's the log I wanted to see.

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10

Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{04E86D13-7EF8-4E7C-8CE3-F1DAC53A3420}\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10

When you have time,could you ask about those entries in the false positives forum?I'm uncertain about them,it's showing when I search on them that they might be from Opendns.
There's a sticky topic at the top to show you how to report a false positive.
http://forums.spybot.info/showthread.php?t=19117

False positives forum:
http://forums.spybot.info/forumdisplay.php?f=16

You can also show a link to this topic if you like when you post in false positives,since your log is already posted here,etc.
http://forums.spybot.info/showthread.php?t=50292

[tlhipp]

It's back to not letting me update spybot anymore or go to the safe networking home page. I don't know if I am kept from other home pages or not. The computer is S L O W again and I scanned with spybot an that DNS changer thing is still there. It let me update my AVG, so that's ok. Looks like I can't use the update feature for my Windows XP. I'm trying from the MS website, but no success there either. I get the IE can't display the webpage. Something is re-directing or blocking the websites. What should I do first? I haven't posted in the false positive forum yet, but I still can, this just doesn't seem false to me, but you probably have another reason for wanting that post. I have to go do things out of the house, so I might not be able to get right back.

Thanks,
Lori