PDA

View Full Version : Immunisazion not completing



adsums
2007-10-22, 05:54
I am running Spybot v 1.5.1.17 on Win 2K Pro with ZoneAlarm Pro v 7.0.408.000 and CA AntiVirus v 8.4.0.24.

For 3 or 4 days Spybot has not completed the immunization process.

I have 7977 Uncompleted entries (and 36080 Protected). The Uncompleted entries comprise \Software (Cookies) 148; \Software (Domains) 6857; \Software (IPs) 77; & \Software (Plugins) 895. All other categories are fully immunized.

These Uncompleted entries first appeared after I downloaded the latest available updates. I understand that some entries do not normally become immunized unitl the computer has been re-booted but I have attempted to re-immunize many times (as well as re-booting on numerous occassions).

Still immunization does not complete. Any advice or suggestions?

spybotsandra
2007-10-22, 13:25
Hello,

If you are not immunizing with full administrator rights, Spybot-S&D might not have enough permissions to fully immunize all user accounts.

If you are using Windows Vista, you should also read this FAQ entry about getting Administrator rights under Vista.

As a current solution you can try to "Undo" the Immunisation. Now the bad products are allowed.
Then "Immunize" again. This should solve the problem for now.

Some more information is availible in our forum:
http://forums.spybot.info/showthread.php?p=117162&posted=1#post117162
http://forums.spybot.info/showthread.php?t=78

Another thing though is that immunization only works properly while your browser is closed, since otherwise your browser will overwrite immunization from time to time from the settings it loaded when it was started.

Best regards
Sandra
Team Spybot

adsums
2007-10-23, 06:22
Thanks for your help Sandra. I am sorry to say that I still can't fix the problem. I have followed your advice and the others from the threads you included but to no avail. I am running Win2K Pro with administrator rights.

I tried to undo the immunization for the Uncompleted entries and then to re-immunize them and this achieved a decrease in the Uncompleted entries...but only temporarilly. The Uncompleted entries revert to the way they were (as I first reported them) the next time the immunization panel is opened!!

Any other suggestions would be welcome. In the meantime I am continue to operate with 7977 Uncompleted entries.

md usa spybot fan
2007-10-23, 07:16
Using regedit check the permissions for the follwing registry key:
HKEY_LOCAL_MACHINE

adsums
2007-10-23, 08:05
I know how to use regedit but I don't know how to find out the permissions on one hive like HKEY_LOCAL_MACHINE

How can I check that?

md usa spybot fan
2007-10-23, 08:38
To check permissions on HKEY_LOCAL_MACHINE:
Go into Start > Run… > type "regedit" (no quotes) > then click "OK".
After the Registry Editor starts, right click on HKEY_LOCAL_MACHINE in the left hand pane and select "permissions…".

adsums
2007-10-23, 09:11
Are you sure that is an option with Win2K Pro? There is no permissions button when right clicking on any hive including HKEY_LOCAL_MACHINE.

I have checked the permissions for regedit generally by going to the properties menu of its icon and these are set for full control.

Zenobia
2007-10-23, 09:32
No,I do not think Permissions is available in regedit.exe in windows 2000 with a rightclick.

http://en.wikipedia.org/wiki/Image:Windows_2000_REGEDIT.png
http://en.wikipedia.org/wiki/Windows_2000#System_utilities
http://support.microsoft.com/kb/141377

adsums
2007-10-23, 10:02
I have checked permissions on the hive using regedt32.exe and advise that it includes Administrators and Users, both with Read and Full Control rights.

I will see if deleting the HOSTS file makes any difference to the Uncompleted immunization entries.

Zenobia
2007-10-23, 10:22
I don't think you ought to delete your hosts file.Do you have a backup of it,if you have deleted it already?The entries you showed were unimmunized do not have to do with your hosts file.->


I have 7977 Uncompleted entries (and 36080 Protected). The Uncompleted entries comprise \Software (Cookies) 148; \Software (Domains) 6857; \Software (IPs) 77; & \Software (Plugins) 895. All other categories are fully immunized.

md usa spybot fan
2007-10-23, 10:37
adsums:

I'm sorry about the misinformation on checking permissions.

adsums
2007-10-24, 05:14
I don't think you ought to delete your hosts file.Do you have a backup of it,if you have deleted it already?The entries you showed were unimmunized do not have to do with your hosts file.->
I do have a backup of my HOSTS file and thanks for your concern. I tried to replace the file with an oldrr backed up version (rather than just deleting it) but it made no difference to my immunization completion problem. So your conclusion was absolutely correct!

adsums
2007-10-24, 05:17
adsums:

I'm sorry about the misinformation on checking permissions.
That's fine - I actually learned a fair bit in the process about the important differences between regedit and regedt32.

Zenobia
2007-10-24, 10:50
Good,glad you had a backup.Hosts files aren't really that important anymore,but they're handy to have around to block sites and stuff.
Unfortunately,I don't really have any ideas on why those things won't stay immunized for you other than what was posted before,but you could keep watching the forums and see what gets posted about it.md usa spybot fan is a good one to watch for posts on immunization problems,etc.,he's a whiz at it.He even used to keep track of the immunization counts. :)

adsums
2007-10-25, 04:34
Good,glad you had a backup.Hosts files aren't really that important anymore,but they're handy to have around to block sites and stuff.
Unfortunately,I don't really have any ideas on why those things won't stay immunized for you other than what was posted before,but you could keep watching the forums and see what gets posted about it.md usa spybot fan is a good one to watch for posts on immunization problems,etc.,he's a whiz at it.He even used to keep track of the immunization counts. :)
I will stay tuned for further developments.

Just curious about your remark about HOSTS files not being terribly important anymore etc.. Is that because of general advances in anti-spyware programs (like Spybot) or for other reasons?

Zenobia
2007-10-25, 08:11
I meant hosts files aren't used quite the same as they were used at one time,and if you had deleted yours,you would have been able to get by without it.There's a little history about it on wikipedia:
http://en.wikipedia.org/wiki/Hosts_file
But,it's much better for you to have a hosts file,since it can be used to prevent your computer from connecting to malicious sites,etc,along with some other uses,which you can see listed here under the heading Why Would I Want To Use A Hosts file:
http://www.bleepingcomputer.com/tutorials/tutorial51.html

adsums
2007-10-25, 08:56
I meant hosts files aren't used quite the same as they were used at one time,and if you had deleted yours,you would have been able to get by without it.There's a little history about it on wikipedia:
http://en.wikipedia.org/wiki/Hosts_file
But,it's much better for you to have a hosts file,since it can be used to prevent your computer from connecting to malicious sites,etc,along with some other uses,which you can see listed here under the heading Why Would I Want To Use A Hosts file:
http://www.bleepingcomputer.com/tutorials/tutorial51.html
Thanks.

Zenobia
2007-10-25, 09:24
You're welcome. :)

adsums
2007-11-02, 08:15
Today I downloaded the latest available definition and other update files and tried to immunize (as I wanted to see if my problem had been solved). After immunizing I am still left with Unprotected entries as follows: Software (Cookies) 152; Software (Domains) 7368; Software (IP's) 77; and Software (Plugins) 895. Spybot says I have 38651 Protected items and 8492 Unprotected.

But then I noticed that each of the 4 categories seem to be duplicated in Spybot's Profile list (on the Immunize page) i.e. one listing for Software (Cookies) says 0 Unprotected and 152 Protected, while its duplicate says the opposite!! This is the case for each of the 4 named categories.

1. Perhaps my immunization problem is really no problem at all - maybe just double counting in the Profile list without any other important operational consequences?
3. If so, is it possible to modify or edit the Profile list to eliminate the duplicate categories?