PDA

View Full Version : BUG REPORT - Spybot 1.5.2 Threat Information



Alan_B
2008-04-04, 15:08
I would like to report a bug in Spybot 1.5.2 . I have proven the bug by making a side-by-side comparison with Spybot 1.4. I first installed Spybot 1.5.2 with all available updates (including the optional ones). I then installed Spybot 1.4 to a different directory with all available updates (except the one that updates 1.4 to 1.5.2). I then ran a check using both programs and compared the results. Both programs tell me they are checking for 121366 threats in total.

To the right of the Search and Destroy Window is a "side pane" which will open to show threat information if you click it. THE BUG IN SPYBOT 1.5.2 IS THAT NOTHING IS EVER DISPLAYED HERE. Below is a table of results listing the threat, whether Spybot 1.4 has info on the threat and whether Spybot 1.5.2 has info on the threat. The threats are those found on a randomly chosen computer that had not used Spybot hitherto.

Threat 1.4 Info 1.5.2 Info
AdRevolver Yes No
Adviva No No
BlueStreak Yes No
BurstMedia Yes No
CasinoPopupStuff No No
Cassava Yes No
CoolWWWSearch Yes No
DoubleClick Yes No
FastClick No No
FunWeb No No
FunWebProducts Yes No
HitBox Yes No
MediaPlex Yes No
Microsoft WindowsSecurityCenter_disabled Yes No
MyWay.MyWebSearch Yes No
MyWebSearch No No
Pacimedia Yes No
Right Media No No
Statcounter Yes No
Tradedoubler Yes No
Virtumonde Yes No
WebTrends live Yes No
Windows Ad Tools Yes No
Winsoftware.WinAntiVirusPro2006 Yes No
Zedo Yes No

One reason Spybot is highly trusted is BECAUSE it provides this threat information (or rather it used to). PLease give this bug some attention.

md usa spybot fan
2008-04-04, 15:23
The threat description facility in Spybot 1.5.2.20 works fine for me with this detection:
Microsoft.WindowsSecurityCenter_disabled

md usa spybot fan
2008-04-04, 16:06
Alan_B:

Question:

During the latest updates on 2008-04-02 did you check and download the following update?
English descriptions - English target descriptions file (252 KB) - 2008-04-02
The download of the English descriptions which updates the Targets.nfo file is not downloaded by default. It must be manually checked in order for it to be downloaded.

Alan_B
2008-04-04, 18:17
When I install Spybot 1.5.2 I always:

1) Select English
2) Install to the default directory
3) Deselect "Additional Languages" and "Skins to change appearance"
4) Deselect "Create Desktop Icons", "Create a Quick Launch icon" and "Use system settings protection (Tea Timer)"
5) I select Search for Updates on the Wizard and choose Safer Networking 2.
The full set of updates offered are:
Anti-Rootkit plugin #1
Anti-rootkit plugin #2
Anti-rootkit plugin #3
English descriptions
English help
Immunization database

I select the help and descriptions files, which are not selected by default and download.

So the answer to MD USA Spybot fan is "Yes", I always download the descriptions file, but it never does any good!!!

md usa spybot fan
2008-04-04, 19:01
Alan_B:

Since the "Bug" does not seem to be universal (see attachment) for those detections that actually have threat descriptions, I suggest that pursue it as such. I suggest that you indicate the environment you are running under so that it can possibly be determined you are not able to see the threat descriptions while others can.

md usa spybot fan
2008-04-04, 20:43
Related thread by Alan_B (http://forums.spybot.info/member.php?u=38178):
Bug? No threat information.
http://forums.spybot.info/showthread.php?t=26049

Alan_B
2008-04-04, 21:46
Alan_B:

Since the "Bug" does not seem to be universal (see attachment) for those detections that actually have threat descriptions, I suggest that pursue it as such. I suggest that you indicate the environment you are running under so that it can possibly be determined you are not able to see the threat descriptions while others can.

A picture is worth a thousand words but if you have access to the threat information it is because you have set up Spybot differently to me. Can you tell me what options you choose, as I did in an earlier post on this thread.

My envronment is very standard, mostly home computers running Windows XP.

Alan_B
2008-04-04, 22:10
In Spybot 1.4, if you single click a threat in the list you are immediately shown the threat information.

In Spybot 1.5.2 this does not work. You have to double click the threat entry (which also displays the details of the threat file or registry entry) and then click one of the entries below in order to summon-up the threat information. My clue was in the image provided by md usa spybot fan where he had done this and I started wondering why.

So the bug would seem not to be that the information is not there, as I had thought previously, but that it has been hidden in a way it was not hidden before.

So far, I have only tested this with the Microsoft Windows SecurityCenter_disabled entry as I cleaned out all the others.