View Full Version : Just installed 1.5.2, still suffering from same problem
I have had this problem with a previous version of Spybot (1.4 something) for several months now. About 1/3 of the way through the bot check it will hit CoolWWWSearch and just freeze up, I can leave it on for hours and it makes no progress what so ever. I figured this was some sort of screw up with the version I had, so today I installed version 1.5.2 and ran the bot check. Unfortunately the same thing happened. I think I have some version or remnant of coolwwwsearch somewhere on my computer, and I know that this issue was addressed in one of the stickied threads up top however none of the fixes listed in it has worked. I have tried installing and running cwshredder and I have also run ad-aware but neither finds anything. Interestingly Spybot runs fine in safe mode but doesn't find anything. Thanks in advance for your help.
Could you please edit the shortcut that is used to run Spybot-S&D and include a /verbose in it's link?
It should then look like this (well, with another path probably ;) ):
http://img244.imageshack.us/img244/884/screenshot44spybotsearcmy0.png
When you now do a scan, it'll show a an 8 digit number in the status bar at the bottom, like $1234ABCD, which our detectives can use to look up where exactly it hangs :)
paradoxni
2008-02-14, 13:00
Same problem here.
Spybot 1.5.2 scan reaches CoolWWWSearch then freezes, the spybot process uses 99% of the CPU and just sits there until i close it. This happens in both normal and safemode.
Here is a screenshot of where spybot freezes:
2039
I have uninstalled Adaware and MS Defender, have no other spyware software and disabled AVAST onaccess resident scanner.
Ive used ATF cleaner to empty all TEMP files, disabled system restore and cleaned out any dodgy entries in HijackTHIS, here is the log:
paradoxni
2008-02-15, 13:01
no ideas on what I can do to fix this?
Sorry, didn't see the screenshot yet :) Thanks for the ID!
Are these the updates of this week?
Can't find rule $03E2BA06 yet... that means either the rule has been removed in the last update (or earlier), or changed since then, or I'm searching in the wrong place ;)
Or maybe the search is broken, wrote myself a todo item to check that!
paradoxni
2008-02-15, 17:48
I updated spybot fully yesterday, so unless the update you mention happened after that. Im not at the PC in question at the min so I cannot check.
Well, it seems its indeed our internal ID search that's not fully functioning currently, I'm going to look up that, and when it's working again, I'll see which detection exactly takes place when it hangs.
splashcat
2008-02-16, 06:50
Me too. I upgraded to 1.5.whatever last week, but it hangs on CoolWWWSearch. Downgraded to 1.4, no better, I removed CoolWWWSearch from the Program list, and I now also get the "User Abort" message when in fact I did not abort.
Now, I'm getting "Error during check", a sample:
Error during check!: CoolWWWSearch.Feat2DLL [53] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [57] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [66] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [75] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [84] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [93] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.Feat2DLL [102] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [17] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [27] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [31] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [35] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [43] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [50] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [54] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [88] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [97] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
Error during check!: CoolWWWSearch.HomeSearch [106] (Access violation at address 05381871 in module 'advcheck.dll'. Read of address 445C3A3C) ()
and on and on and on
How did you format your hdd, FAT32 or NTFS? First of all, which operating system do you run? :-D
I am experiencing the same problem with my scans; it freezes my computer on coolwwwsearch. I am anxiously watching this thread to find the solution.
In that case, why don't you answer Busters question as well? Addditional info can never harm ;)
critters
2008-02-25, 20:59
OK, I've been dealing with my sister's vermin-infested computer for weeks. I, too, had the hang-up with coolwwwsearch, so I followed the directions and turned it off. It also seemed to get stuck on Hotsearchbar and TV media, so I turned them off, too. 161 vermin later, I hope things are in MUCH better shape. The problem I had was that I wasn't able to add "/verbose" into the location; I got "The name...specified in the Target box is not valid. Make sure the path and file name are correct." I tried several different ways of diddling the "s or whatever, but it was all variations on the same theme.
On the other hand, I hope to convince my sister to make a donation; y'all have saved her bacon!! :eek:
Well, it seems its indeed our internal ID search that's not fully functioning currently, I'm going to look up that, and when it's working again, I'll see which detection exactly takes place when it hangs.
It's been awhile since this post,...Any information discovered? I feel lost without the ability to run SPYBOT,..I've relied on it for years,....I'm feeling very vulnerable each time I go to the net!!
:oops: Sorry didn't see the previous post,..
I am running Windows XP SP2,..not sure how it was originally formated as I bought it installed,....HP laptop.
I have tried to add "/verbose" to the path but keep getting the previously mentioned error message......
I will try to remove coolwwwsearch and see if that works,...but will that keep SD from identifiing it if I get infected?
critters
2008-02-28, 20:48
I will try to remove coolwwwsearch and see if that works,...but will that keep SD from identifiing it if I get infected? Yes, but at least you can get rid of the rest of the vermin! :yuck:
I guess Windows complains about the spaces in the path. Please enter
"C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe" /verbose instead of
C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe /verbose.
I changed the path in the shortcut,.....The check stops with the following:
Running bot-checkb[24298/112327: CoolWWWSearch;$EABB6094]
critters
2008-03-10, 17:49
I copy/pasted your "verbose" line into properties, but the error message didn't change (ie, "Target box is not valid...").
spybotsandra
2008-03-10, 17:50
Hello,
Did you made a space tab in front of /verbose ?
Best regards
Sandra
Team Spybot
critters
2008-03-10, 18:24
Umm, no? I just copied it from the bb. I'll try it and see...
critters
2008-03-10, 18:29
I just tried this (copied right out of the box in properties):
"C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe" /verbose
Same error msg.
I changed the path in the shortcut,.....The check stops with the following:
Running bot-checkb[24298/112327: CoolWWWSearch;$EABB6094]
?? any suggestions now? I uninstalled SB and reinstalled it and find it still stalls,........I've also since installed AVAST, MALWAREBYTES, AVG, CWSHREDDER and have SPYBLASTER to compensate for the loss of SB. Also I installed HiJACKTHIS and Kaspersky,...all show no files exept Kaspersky,..which shows 3 infected files by a Trojan,....
It was mentioned earlier in a thread to remove CoolWWWSearch from the check list,...can someone walk me through how to do this,...I guess CWShredder can cover the loss of SB on CoolWWWSearch,...although I found it to be he most reliable and effective,....(still want to know why it can't work now though).....
Still looking for help,....
critters
2008-03-10, 20:34
I'm an expert at that!! :eek:
Run Spybot in "Advanced Mode" and go to "Settings" -> "Ignore products". There mark the checkbox in front Coolwwwsearch or whatever you want to skip over.
critters
2008-03-10, 20:40
It's not letting me edit, so here's the PS.
PS-I marked both of the Coolwwwsearch boxes that had nothing else with them; I don't know which one is the actual culprit.
It's not letting me edit, so here's the PS.
PS-I marked both of the Coolwwwsearch boxes that had nothing else with them; I don't know which one is the actual culprit.
Thank you very much critters,....86 checks later SB should ignore anything with CoolWWWSearch,..:2thumb: .however,...this is only the symptoms,...
Anybody know what is causing this problem,...seems to be hitting quite a few users who downloaded the latest version,..?
I just tried this (copied right out of the box in properties):
"C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe" /verbose
Same error msg.
,..I put a space before "verbose",.....and it worked for me,.....
critters
2008-03-10, 23:14
Anybody know what is causing this problem,...seems to be hitting quite a few users who downloaded the latest version,..? VERY good point... My computer has an old version, which doesn't hangup. My sister's has the new version that does, BUT hers, as previously mentioned, was royally infested with vermin.
critters
2008-03-10, 23:19
,..I put a space before "verbose",.....and it worked for me,.....
AH!!! :hair: Before the verbose, not before the slash!! Maybe that IS the ticket!! I can't try it now since I'm not at my sister's house, but I will. :banghead:
ok,...I 'ignored' coolwwwsearch on the scan check,..THEN the scans began freezing again,...I checked the products off on the next scan and it froze again ,.....
Below is my Hijackthis,....analysis,...can anyone help??!! Kasparsky to follow,...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:27:35 PM, on 3/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
... Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:27:35 PM, on 3/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
First, I'm not sure that HijackThis logs should be included in this part of the forum. That aside as you can see from a header for a HT log from my PC, the OS details are the same, and my PC completes the SpybotSD scans without any problems.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:18 PM, on 11/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
I am using Spybot 1.5.2.20 with Resident Browser Helper and TeaTimer active, current update including beta files, AVG antivirus, ZA firewall.
Have you tried not having Windows Defender running when you do your Spybot Scan?
critters
2008-03-11, 12:34
With my sister's, I had to block 2 others, then I put those 2 back in later with no problem.
First, I'm not sure that HijackThis logs should be included in this part of the forum. That aside as you can see from a header for a HT log from my PC, the OS details are the same, and my PC completes the SpybotSD scans without any problems.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:18 PM, on 11/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
I am using Spybot 1.5.2.20 with Resident Browser Helper and TeaTimer active, current update including beta files, AVG antivirus, ZA firewall.
Have you tried not having Windows Defender running when you do your Spybot Scan?
I have windows defender activated, and i can scan with spybot fine as well. idk why its not working for you guys, you could try doing the scans in safe mode. A really bad infection could be making spybot hang up.
Spybot hung up prior to the installation of Defender,...so I'm pretty sure that is not a factor,......The prior version ran just fine,..I didn't have problems until the newest version was downloaded.....mind you WE are not the only two having difficulties,....it seems there are quite a few who are experiencing this occurance,...
Previously a SPYBOT representative had mentioned in this thread that it may be some problem with the new version haven't heard anything from SPYBOT regarding that,...(anyone watching?) They all seemed to have gone away?,...............
:oops: Sorry again,....I'm getting anxious I think and my impatience is getting the best of me,......probably a bit desperate too as noone from SB joining in,....! :sad:
Hello,
Previously a SPYBOT representative had mentioned in this thread that it may be some problem with the new version haven't heard anything from SPYBOT regarding that,...(anyone watching?) They all seemed to have gone away?,...............
spybotsandra posted yesterday, however let's address this:
all show no files exept Kaspersky,..which shows 3 infected files by a Trojan,....
Please follow the procedure in this link:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288) so one of our helpers can take a look at the system. Skip the Spybot-S&D scan for now.
Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you when available.
Regards. :)
Edit: Apprantly you have two anti virus programs installed, Avast4 and Norton AntiVirus.
Norton alone is a resource hog, installed alongside another anti virus program and you have a problem. :lip:
Rule of thumb is one Firewall/one AV to avoid conflicts and loss of program efficiency.