Trojans.sbi - include error

[md usa spybot fan]

After the 2007-08-08 updates, I am getting the following message during a scan:


Warning

There were problems in the include file C:\Program Files\Spybot - Search _Destroy\Indudes\Trojans.sbi See 'Include errors.log' for details.

OK
The contents of the Include errors.log:


C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+

[spybotsandra]

Hello MD,

Do you already have downloaded the TCP/IP Settings plugin update?

Best regards
Sandra
Team Spybot

[md usa spybot fan]

:oops: My mistake!!!

I renamed the file last week experimenting with something and forgot to rename it back.

My apologies.

Regards,
md usa spybot fan

[ThinkingWolf]

After the 2007-08-08 updates, I am getting the following message during a scan:


The contents of the Include errors.log:


C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+

I too receive this message, but no such log file exists, AND worse, the il-effects of the virus persist.

Any suggestions?

[spybotsandra]

Hello,

Please download the following update (using the integrated update facility should resolve the problem): TCP/IP Settings plugin - !TCP/IP Settings plugin (65 KB) - 2007-06-06

After the successful download of the "TCP/IP Settings plugin" (plugtcpip.zip - which contains two (2) files (install-plug1.ini and TCPIPAddress.dll), the update routine should have:

*
1. Extracted the TCPIPAddress.dll file into the following directory/folder (assuming the default installation directory/folder was used):
o C:\Program Files\Spybot - Search & Destroy\Plugins
2. Restarted SpybotSD.exe so that the new TCPIPAddress.dll was loaded in SpybotSD.exe.

There are several ways to overcome the problem.
Try the following:

* Unzip (extract) the plugtcpip.zip file that's in your update folder to some known location.
* Then copy the TCPIPAddress.dll from that location into the Plugins folder.
* Make sure that you restart SpybotSD.exe (if running) before attempting a scan again.

For more informations please do also have a look at our forum:
Problems with 2007-06-06 ßDetection rules (beta)
http://forums.spybot.info/showthread.php?t=14546

Best regards
Sandra
Team Spybot

[pskelley]

Thanks for the feedback, this may be an issue with Spybot S&D, please see this information:
http://forums.spybot.info/showthread.php?t=16699

I would like to see a new HJT log, I can't see how the services could return if they are disabled. Perhaps we need to delete those services.

Thanks

[bigpoppa]

After the 2007-08-08 updates, I am getting the following message during a scan:


The contents of the Include errors.log:


C:\Program Files\Spybot - Search & Destroy\Includes\Trojans.sbi | Zlob.DNSChanger | (85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)(85\.255\.11[0-9]\.[1-2]?[0-9]{1,2}[,]?\s?)+

Can u help me fix this problem

[md usa spybot fan]

re: The following message:


Warning

There were problems in the include file C:\Program Files\Spybot – Search Destroy\Indudes\Trojans.sbi See 'Include errors.log' for details.
You need the TCP/IP plugin with the new rule set included in beta updates on 2007-06-06 and regular updates starting on 2007-06-13 or else you will get the above error.

The TCP/IP settings plugin enables Spybot to use new rules which can detect IP addresses entered by malware and exchange them with non harmful entries.

To download and install the TCP/IP plugin you either have to:
Download the following update using the integrated update facility:
TCP/IP Settings plugin - !TCP/IP Settings plugin (65 KB) - 2007-06-06

--- or (if you do not use the integrated update facility) ---


Download and execute the following item from the Downloads (http://www.spybot.info/en/download/index.html) Web page:
TCP/IP Plugin 1.0 - product description - product description
md5: 7FD95B7E814EA2F56AEACE3613B4A0E9

This adds capabilities to find and replace malicious network settings. Only needed if you do not want to use the update function integrated into Spybot-S&D.