PDA

View Full Version : SpybotSD.exe not running



BrettZOIX
2008-07-11, 20:04
I installed 1.6 successfully but it wouldn't run. The icon showed up in the lower right but I couldn't open it from there either.

I had just manually removed some components of XPSecurityCenter in order to get web browsing available again. Spybot detected and removed an entry for Braviax from startup. This led me to believe that Spybot's protections were partially in place. However, I was still unable to run Spybot manually and initiate a full scan.

Following the desktop shortcut, I tried running it from it's folder in Program Files to no result. Recognizing some symptoms from a previous problem, I renamed the SpybotSD.exe to SpybotSD2.exe (arbitrary name). Doubleclicking on it and it started up flawlessly with the initial run helper box and everything. After updating and doing a full scan, it turned up minimal threats, but one active trojan. The full entry escapes my memory since it was a client's computer, but it found a directory named WSNPOEM which had something running in memory and could not be cleaned. It recommended a scan on reboot which I started.

At this point, the client (who pays by the hour) was willing to do a full wipe and reinstall. It's scheduled for later, but I was wondering if there are any other insights. I am told the reboot scan would not clean it out.

Symptoms:
IE7 takes 20-30 seconds to open a fresh window or tab.
Something at startup automatically changing homepage to google.
Broken Norton product.
IE7 wouldn't download anything automatically (had to click those links that say "If your download doesn't start in 60 seconds, click here").
SpybotSD.exe won't run or give any errors when we tried.
Javascript errors on normally functional pages (fresh java install didn't help).


The main point of this is to try renaming SpybotSD.exe if it doesn't run. It should function again, but I'd like to know what causes the shutdown of security services like this. And possible fixes for this, obviously.

drragostea
2008-07-12, 00:38
This looks like a malware infection... which attempts to disable security programs like Spybot-SD from running...
--
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
--

Convince your client... that there's still time. Time to purge all the malware in the computer.