Scheduling Spybot

[Gene45]

I set up the win 7 scheduler to run spybot when I am not using the machine.

It apparently works fine, BUT:

How do I get to look at the logs to see if anything was found. If I click on the Spybot icon now, it immediately starts an update and scan, with none of the a start up menus.

I can't even turn it off, since I don't get to ever get to see the menus.

I must be missing something. What?

Thanks for any help.

[Zenobia]

Once the update is over,and the scan starts,does a smaller Spybot window open on your screen that says scan in progress,with an end scan button in the middle of it?

[Gene45]

Once the update is over,and the scan starts,does a smaller Spybot window open on your screen that says scan in progress,with an end scan button in the middle of it?

Yes, and if I click it it seems it just sits there forever.
What should happen?

[Gene45]

OK just to be sure I was telling the truth, I tried again.
It did not stop for an update but went right into the scan.

I tried going into the program files and clicking "update" .
The cmd prompt window popped up with the annoucnemtn therwea re no updates available.

This might be true since the scheduled run was less than 12 hours ago.

[spybotsandra]

Hello,

When there are no newer updates it goes right to the scan.
So this might happened here.
There are only updates once a week, usually on Wednesdays.

To take a look at your logs:
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs

Best regards
Sandra
Team Spybot

[Gene45]

Thanks, I found the logs.
Microsoft found it desirable to change the directory structure, I guess if it looks different it must be better.

Here is my log for July 3.

--- Report generated: 2012-07-03 20:31 ---


--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2012-05-19 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2012-01-16 Includes\Adware.sbi (*)
2012-05-08 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2011-11-29 Includes\DialerC.sbi (*)
2012-01-31 Includes\HeavyDuty.sbi (*)
2012-05-16 Includes\Hijackers.sbi (*)
2012-05-16 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2012-03-13 Includes\Keyloggers.sbi (*)
2012-03-13 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2012-04-17 Includes\Malware.sbi (*)
2012-05-16 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2012-05-08 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2011-02-24 Includes\Security.sbi (*)
2011-12-13 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-01-17 Includes\Spyware.sbi (*)
2012-05-08 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2011-09-28 Includes\Trojans.sbi (*)
2012-05-06 Includes\TrojansC-02.sbi (*)
2012-04-30 Includes\TrojansC-03.sbi (*)
2012-05-15 Includes\TrojansC-04.sbi (*)
2012-05-11 Includes\TrojansC-05.sbi (*)
2012-05-16 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll


In the manual runs it used to give encouraging words like " no malicious items found" .

Does this say the same thing or is something missing?

[Zenobia]

I made a scheduled task and my logfile is the same as yours,without the congratulations,no immediate threats were found message,so I assume that's normal on a scheduled run,(though I did stop the scan before it was finished.)

My scheduled scan hung after pressing the Stop Check button,too,but I wasn't sure if yours would do the same.

Now that you can view the logfiles,do you prefer Spybot to stay set up the way it is,or would you prefer to be able to open it manually without it automatically running a scan,outside of the scheduled run?

[Gene45]

I made a scheduled task and my logfile is the same as yours,without the congratulations,no immediate threats were found message,so I assume that's normal on a scheduled run,(though I did stop the scan before it was finished.)

My scheduled scan hung after pressing the Stop Check button,too,but I wasn't sure if yours would do the same.

Now that you can view the logfiles,do you prefer Spybot to stay set up the way it is,or would you prefer to be able to open it manually without it automatically running a scan,outside of the scheduled run?

I guess it does not really matter but it seems odd to me that I turned something on that I can't turn off.

[Zenobia]

Okay,mind you I'm not very familiar with the scheduled scan,since I usually scan manually,but I was able to set up the scheduled scan and update without Spybot doing an autoupdate/autoscan when I opened it manually,and everything seemed good,so you could give it a try,if you like.
If you do it,you'll probably have to delete the old scheduled tasks and create new ones,though,so it's up to you.

First step would be to make sure that the autoscan isn't set up through settings.Your Configuration.ini file should show me that,so you'd go to C:\ProgramData and open the Spybot - Search & Destroy folder.(If ProgramData isn't visible to you,then here is how to temporarily show hidden files and folders - http://www.bleepingcomputer.com/tuto...-windows/#win7 )Doubleclick the Configuration file,click Edit,Select All,then rightclick the highlighted text and Copy,then paste it here.

[Gene45]

Okay,mind you I'm not very familiar with the scheduled scan,since I usually scan manually,but I was able to set up the scheduled scan and update without Spybot doing an autoupdate/autoscan when I opened it manually,and everything seemed good,so you could give it a try,if you like.
If you do it,you'll probably have to delete the old scheduled tasks and create new ones,though,so it's up to you.

First step would be to make sure that the autoscan isn't set up through settings.Your Configuration.ini file should show me that,so you'd go to C:\ProgramData and open the Spybot - Search & Destroy folder.(If ProgramData isn't visible to you,then here is how to temporarily show hidden files and folders - http://www.bleepingcomputer.com/tuto...-windows/#win7 )Doubleclick the Configuration file,click Edit,Select All,then rightclick the highlighted text and Copy,then paste it here.

Here is the configuration file, under program data/spybot".

It looks to me that it does very little, But what do I know

[Installation]
DesktopIcon=Advanced
QuickLaunch=Advanced

[Installation\StartmenuItem]
Easy=0
Advanced=0

[Main]
EasyMode=0
Legals=0
AutoSave=1
CreateBackups=1
CreateTrackBackups=1
CreateSystemBackups=1
CreateSystemRestorePointSpyware=0
CreateSystemRestorePointInternals=0
ConfirmRestorePoint=0
Confirmation=1
Compability=1
Priority=Normal
RecoveryAged=1

[Main\AlertSounds]
AlertSpyFound=0
AlertNothingFound=0

[Main\Priority]
ApplicationOneCPU=0
ScannerOneCPU=0

[Automation]
OfferTempCleaner=1
SystemStart=NoAutomation

[Automation\ProgramStart]
AutoCheck=1
AutoFix=0
RerunAfterFix=0
AutoImmunize=0
DontAsk=0
WaitStart=0
WaitPrograms=0
WaitMore=0

[Automation\SystemStart]
AutoCheck=0
AutoFix=0
WaitStart=0
WaitPrograms=0
WaitMore=0
AutoClose=0

[Automation\WebUpdate]
AutoCheck=0
RemindUpdate=0
CheckBetas=0
CheckAllLanguages=0
CheckSkins=0