No idea how to submit OpenSBI file, submitting here then and suggesting one feature.

[Tom.K]

Hello Tom,

Submitting via the OpenSBI Editor is the correct way to post your SBI files. I get this error message when I enter a wrong password. The login works when I enter the correct password. Maybe you just made a typo when entering your password?

Thank you for the SBI file. I am no malware analyst though. So I leave replying to the remainder of your message to someone else.

daemon

After resetting password, re-logging, changing password again, re-logging, still nothing.

Hi Tom,

I think the rules are quite good for a first approach. There are ways to make rules more generally, like using a filerange (filesize>=x,filesize<=y). The idea of a variable pathID for detecting installation paths is a very good idea. There is a website where (nearly) everything is documented: http://wiki.spybot.info. There is also the possibility to work with environments and save some regular expression in variables, for example. This should help here.

I'm using it to check how to use some commands. Though, algorithm prefixes might be still confusing for me as I don't have enough examples in commands in case I want to try more prefixes for one command.

[daemon]

After resetting password, re-logging, changing password again, re-logging, still nothing.

I cannot reproduce this problem. :( Which Windows version and which Spybot version do you use?

daemon

[Tom.K]

I cannot reproduce this problem. :( Which Windows version and which Spybot version do you use?

daemon

Windows 7 x64 SP1, Spybot 2.2.21.0

I've tried to capture packet with WireShark and it's sending my username as this: "Tom%252EK".

Is it possible that's the reason why I can't login properly?

[daemon]

Windows 7 x64 SP1, Spybot 2.2.21.0

I've tried to capture packet with WireShark and it's sending my username as this: "Tom%252EK".

Is it possible that's the reason why I can't login properly?

Hello Tom.K,

I was on vacation for three weeks, so I could not continue on this thread. Sorry for the delay!

"Tom%252EK" looks like Tom.K was URL-encoded twice, which would be a bug in Spybot's OpenSBI editor. I will try to reproduce this bug with our latest internal build and then write a bug report about it.

This would also explain why this works for other users like me who do not have characters in their user name that change when URL-encoded.

daemon

[daemon]

PepiMK just fixed this bug, so the login with "special" characters should work again with Spybot 2.3 final.

daemon

[Tom.K]

Thanks for notifying. I'll wait for 2.3 release then.