every member of spybot please read here

[AB_Hitman]

ok I've got this virus 3 months ago but i thought AVG anti-virus cleaned it up its called xpdx.sys it downloaded stuff on my PC but i didn't know wheres the virus and today i updated Spybot and I've been using Spybot for a long time so when the update finished i was checking for problems and Spybot found xpdx.sys and 3 more viruses that xpdx.sys downloads here are the names i took lots of screenshots i can send them to the members if they like to fix the problem

Data
C:\WINDOWS\Temp\8AF12AB59DCE7145.tmp

Data
C:\WINDOWS\Temp\AE8AB41F91F72503.tmp

System file
C:\WINDOWS\system32\xpdx.sys

C:\WINDOWS\Temp\7CF28762C38CA0D4.tmp

when it finished scanning i pressed fix selected problems and it fixed them but when i restarted my PC Spbybot was spaming command prompts all over my PC and it was adding viruses for xpdx.sys and it disabled my AVG anti-virus pro plus firewall I couldn't turn on the firewall because Spybot removed all the setting there was nothing to press on, and when i scanned again with Spybot the same results were detected and i pressed again fix selected problems i restarted PC and Spybot started spaming even more and corrupted my windows XP it restarted my pc by it self and windows was corrupted i had to format my pc because of Spybot.

I still have all the screenshots what Spybot was doing to my PC

[tashi]

Hello.


when it finished scanning i pressed fix selected problems and it fixed them but when i restarted my PC Spbybot was spaming command prompts all over my PC and it was adding viruses for xpdx.sys and it disabled my AVG anti-virus pro plus firewall I couldn't turn on the firewall because Spybot removed all the setting there was nothing to press on, and when i scanned again with Spybot the same results were detected and i pressed again fix selected problems i restarted PC and Spybot started spaming even more
Spybot-S&D does not add viruses to computers, however the rootkit you apprantly already had on the machine drops more malware, installs itself in the Registry and may have hid other files, processes, and registry entries on your computer.

Please send the screenshots to detections(at)spybot.info (Replace AT with @)

Include a link back to this topic also.

However as you apprantly had a rootkit on your machine for such a long time, it may have been a good thing that you did reformat.

Best wishes.

[AB_Hitman]

well far as my screenshots show it was adding viruses instead deleting and i never seen Spybot spam before crashed my windows xp

and Spybot did detect only 4 viruses but it did say they were removed but after i restart the viruses were added back by Spybot, no matter how many times you remove the viruses with Spybot they get added back

if you guys try to fix this Spybot problem please do it and i found out only regrun can remove xpdx.sys heres the site if this happens to anyone else
http://www.greatis.com/appdata/d/x/xpdx.sys.htm install it and scan after it removes xpdx.sys go to system32 and delete the xpdx.sys file its no longer a virus remove it anyway

1 question why do 57 host files reset from Immunize everytime i restart i always have to Immunize them everytime i restart my computer

[tashi]

Hello.


and Spybot did detect only 4 viruses but it did say they were removed but after i restart the viruses were added back by Spybot, no matter how many times you remove the viruses with Spybot they get added back
Spybot-Search & Destroy is not designed to find and remove viruses or worms. The program searches for spyware, malware, adware, trojans, hijackers and keyloggers.

I have not seen the screenshots, however if the AVG anti virus program was active at the same time as Spybot-S&D, AVG may have seen infected files being fixed and flagged it. Thus causing the 'false' appearance of Spybot-S&D adding those files.



if you guys try to fix this Spybot problem please do it and i found out only regrun can remove xpdx.sys heres the site if this happens to anyone else
http://www.greatis.com/appdata/d/x/xpdx.sys.htm install it and scan after it removes xpdx.sys go to system32 and delete the xpdx.sys file its no longer a virus remove it anyway
Rather than direct people to a pay for program, I refer members with infections not removed by ordinary means, to the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) They should read this first: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

There are variables involved in a rootkit infection and no one size shoe fits all.
After a log was analysed, the user would be advised if they should change their passwords; and if they do on-line banking inform their banks via phone or in person.



1 question why do 57 host files reset from Immunize everytime i restart i always have to Immunize them everytime i restart my computer
What is your operating system and do you have another program's HOSTS file installed other than Spybot's?

Some users have reported using SpySweeper or SpywareBlaster and shutting them down solves the problem. ZoneAlarm might also block the global hosts. If you go to Firewall in ZoneAlarm on the left and then the main tab in the upper right > click on advance button > General setting "Lock Hosts file".

Further please try the following:

Open Spybot > Immunize > under Windows uncheck Global (Hosts). Go into Spybot > Mode > Advanced Mode > Tools > Hosts file > and then click on "Add Spybot S&D hosts list" button.
Go back into Spybot> Immunize.

The problem that not all global host entries have been immunized has also been discussed in our forum:
http://forums.spybot.info/showthread.php?t=18122&highlight=immunize+global
http://forums.spybot.info/showthread.php?t=19314&highlight=immunize+global
http://forums.spybot.info/showthread.php?t=17913&highlight=immunize+global

Regards.

[AB_Hitman]

i will try to fix my host files thanks i have installed on my pc

AVG anti virus pro plus firewall

super anti spyware

Spybot

Ad-aware 2007