Application Error: The instruction at...

[Dugie]

v 1.6.2.46, Latest detection update: 29/07/2009.
On July 10, I added /ALLHIVES to shortcut's command line.

On July 30, after "Check for problems," none found, I began getting these errors after closing the program:

S S&D Application Error: The instruction at "0x0a1340c2" referenced memory at "0x0a3ddec8". The memory could not be "read". OK to terminate program

followed by

Error Runtime Error 216 at 0A1340C2 OK

It's happens every time now, same two error pop ups, but with varying hex numbers. Is this serious? Should I remove /allhives?

Thanks!

[spybotsandra]

Hello,

Can you please give us the full command line parameter and path?
Thanks.

Best regards
Sandra
Team Spybot

[Dugie]

Hello,

Can you please give us the full command line parameter and path?
Thanks.

Best regards
Sandra
Team Spybot

Hi Sandra,

From the shortcut's Properties, "Target":
"C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /advancedmode /allhives

and "Start in": "C:\Program Files\Spybot - Search & Destroy\"

I removed the \allhives command, but still get the error messages.
Thank you!

[spybotsandra]

Hello,

I am not sure if we support the advanced mode command line - it is unknown to me.
You will find our command line parameters here:
http://www.safer-networking.org/en/faq/30.html

I would suggest to remove this one.

Best regards
Sandra
Team Spybot

[Dugie]

Hello,

I am not sure if we support the advanced mode command line - it is unknown to me.
You will find our command line parameters here:
http://www.safer-networking.org/en/faq/30.html

I would suggest to remove this one.

I removed the /advancedmode and /allhives commands, ran a scan, found no problems, still got the two errors.

[NotGeordie]

http://forums.spybot.info/showthread.php?t=50441

Hey Dugie, check the link to the other thread. Lots of people seem to be having the same problem since the 29 July update.

Regards.

[Dugie]

http://forums.spybot.info/showthread.php?t=50441

Hey Dugie, check the link to the other thread. Lots of people seem to be having the same problem since the 29 July update.

Regards.

Thanks, NotGeordie! I wish I could move or copy my post to that link.

[spybotsandra]

Hello,

This problem you experience may be caused by an infection. Just to make sure you are not infected with a rootkit, please run a scan for rootkits. Rootkits are a technology that is more and more often used by malware to hide themselves on system level, making themselves invisible to standard tools. Our RootAlyzer shows you anything that uses certain rootkit technologies, even if it's not in Spybot-S&Ds detection database.

The RootAlyzer is a single tool which goes through the file system, the registry and process related lists. When you start RootAlyzer, it performs a very quick scan of a few important places, taking about a second on modern machines. To check the full system, you have the possibility of choosing a Deep Scan.

Currently, the RootAlyzer is a work in progress (with a new project tools category in our forum to track bugs and feature requests), but it's already helping to easily locate most of the current malware rootkits. It is compatible with Windows NT/2000/XP/2k3 and Vista. If you like to check out the new RootAlyzer you will find it in our forum: http://forums.spybot.info/showthread.php?t=24185

Here is also the direct download link.

Please set your computer to show all files.

* Double-click My Computer.

* Click the Tools menu, and then click Folder Options.

* Click the View tab.

* Clear "Hide file extensions for known file types."

* Under the "Hidden files" folder, select "Show hidden files and folders."

* Clear "Hide protected operating system files."

* Click Apply, and then click OK.

Please select the tab 'deep scan' and let it fully scan your Pc. The scan will take a moment, please be patient. After the scan is done please click on 'pack suspicious files' which is located right at the bottom. This will create a .cab file on your desktop which contains the log and the suspicious files the scan has found. Please send us an e-mail (with this .cab file as attachment) to: detections(at)spybot.info .

Please also download gmer: www.gmer.net and let it do a full scan on your Pc. Subsequent you will be allowed to save the log created during the scan. Please also send us this log.

Thanks!

Best regards
Sandra
Team Spybot