Problems while running spybot [Archive]

lmhjcr

2008-06-13, 14:34

Hello,
I was running Spybot this morning and during the scanning process I got a pop up screen stating:
There were Problems in the include file in C:\ProgramFiles\Spybot-Search_Destroy\Includes\Trojans.sbi.
See 'include errors.log' for details

and then a few minutes later I got the same message except that the it was for \TrojansC.sbi

I did go to my C:\ProgramFiles\Spybot Folder and noticed that there are 2 "includes" folders. One is titled Includes and the other is titled Includes(2) both which were created on 5/24/08 one at 3:23:24 PM and the includes(2) folder at 6:49:09AM

When the scan was completed it stated "Congratulations! No immediate threats were found.

Any ideas?

md usa spybot fan

2008-06-13, 16:26

lmhjcr:

More information:

What version of Spybot are you running (Spybot » Help » About)?

If you are not running Spybot 1.5.2.20, upgrading to Spybot 1.5.2 will solve the problem (Mirror selection - The home of Spybot-S&D! (http://www.spybot.info/en/mirrors/index.html)).

The current errors with the Trojans.sbi and TrojansC.sbi files that started with the 2008-04-09 updates are caused by new detection rules that are incompatible with versions of Spybot prior to 1.5.2. These new detection rules use the new Anti-Rootkit plugins #1, #2 and #3 that only have been offered as updates to Spybot 1.5.2. If you upgrade to Spybot 1.5.2 you will not only eliminate the error messages but in also will be performing rootkit searches while doing a Spybot "Check for problems".

If there is a reason that you cannot upgrade to Spybot 1.5.2, you can try the Anti-Rootkit plugins #1, #2 and #3 with Spybot 1.4, but they are not officially supported. From post #11 (http://forums.spybot.info/showpost.php?p=186129&postcount=11) in the following thread:
Problems in Spybot S&D Includes-trojanC
http://forums.spybot.info/showthread.php?t=27194

Note: "... but not with official support ;)".

The downloads for the Anti-Rootkit plugins are on the following Web page:
Downloads - The home of Spybot-S&D!
http://www.spybot.info/en/download/index.html
This item:
Anti rootkit plugins 1.0 - product description
md5: EE7278BC89D4557CFD7127EACC37EE70

Supported only for version 1.5.2 or above!
This adds improved capabilities to find rootkits. Only needed if you do not want to use the update function integrated into Spybot-S&D.
Please note: Supported only for version 1.5.2 or above!

The direct download link is: http://www.spybotupdates.com/files/spybotsd_plugins.exe
__________

Note: If you continue to run Spybot 1.4, the following error most likely will not be corrected with the plugins:

C:\Program Files\Spybot - Search & Destroy\Includes\TrojansC.sbi | Delf.Spool.cn | <$SYSDIR>\ntdoss04.sys
The rule set for the Delf.Spool.cn detection does not appear to use the Anti-rootkit plugins. You can try to eliminate the error by running the scan without scanning for "Delf.Spool.cn":
Go into Spybot > Mode > Advanced mode > Settings > Ignore products.
Locate the item that you what to exclude from the scan ("Delf.Spool.cn") and check it.
__________

To see the Include errors.log:
Go into Spybot > Mode > Advanced mode > Tools > View Reports.
Then click the View previous reports button on the top of the right hand pane.
Look for the "Include errors" file
Highlight it and click open (or double click on it).
For another method, see this this post (http://forums.spybot.info/showpost.php?p=180819&postcount=2).