PDA

View Full Version : Strange Immunization



xZippy
2008-08-04, 21:26
My problem is very similar to this one (http://forums.spybot.info/showthread.php?t=14471).

I'm running XP Home with SP3. I have the latest version of Spybot, which is 1.6.0, along with the latest updates. No matter how many times I immunize, I always seem to have 27035 unprotected threats. Yes, I am on the administrating user on this machine. Also, the undo thing didn't help either. Can someone help me please?

drragostea
2008-08-05, 01:08
Do you currently use Webroot's SpySweeper? How about ZoneAlarm firewall?

Do you have any browsers open during immunization?

Can you try to Undo the Immunization and Immunize again>

What rows were not immunized?

Ron.M
2008-08-05, 01:35
Dear xZippy & drragostea: :oops: I , too am having the EXACT problem...I have just completed a FULL re-install of Windows XP Pro..I went to MS & downloaded SP 2 ( took 12 ,no typo, twelve hours ) I reloaded SpyBot & got ALL the updates..Now I can not immunize anything.. (37,491 files ? ) I AM the administrator...I tried undo , re-immunized several times ,NO help...I could before my computer crashed...If either of you get an answer or fix , I WOULD really appreciate a reply...As soon as I figure out how to start a separate thread , I will...Thank you both VERY much in advance....Ron.M

drragostea
2008-08-05, 02:46
Ron M... twelve hours for a 75MB seems ridiculous (not ridiculous as in you but the computer) even for a dial-up connection...

Are there any known software or security applications/programs that are currently on your computer that may be causing this (referring to both members)?

Ron.M
2008-08-05, 03:04
Dear xZippy & drragostea : I do NOT want to intrude on xZippy's thread any further...I've had a long day & I will start a NEW thread of my own tomorrow...xZippy: SORRY , did NOT mean to butt in...drragostea: Will contact you after I start new thread...Thanks to BOTH of you....Bye :wav:

drragostea
2008-08-05, 03:11
Well, actually Ron this concerns the same issue, so no need to start a new thread.

Greyfox
2008-08-05, 08:09
My problem is very similar to this one (http://forums.spybot.info/showthread.php?t=14471).

I'm running XP Home with SP3. I have the latest version of Spybot, which is 1.6.0, along with the latest updates. No matter how many times I immunize, I always seem to have 27035 unprotected threats. Yes, I am on the administrating user on this machine. Also, the undo thing didn't help either. Can someone help me please?

So, if 27035 are unprotected, then some others are being protected, and you need to be more specific about which groups are OK and which are not. You haven't said what browser you are using, and at a guess, I think it may be Firefox 3, and that the unprotected items might belong to that, or perhaps some might also relate to the host file, but there is no point guessing and giving you suggestions that are not appropriate when you can provide that information. We also need to know what Antivirus and Firewall software you are using, and whether there is any other spyware detection programs installed on your PC.

xZippy
2008-08-05, 11:59
Well, you can know what threats aren't being blocked by looking at this image (http://img49.imageshack.us/my.php?image=listskr4.png) I uploaded.

I am using Firefox 3 now, which I got just now. Having Firefox 2 nor 3 changes anything in my problem. The only firewall I have is the windows firewall, and I disabled that, did an undo, and immunized again, and no luck. My anti-virus program is NOD32. I have used Spybot for a long time with NOD32 on, and never had this problem until just yesterday. And no, I never ever have browsers open when I try to immunize, let alone use Spybot in general.

Another thing, drragostea, you're not intruding on anything. Better to have two people's problems solved than one.

blues
2008-08-05, 12:18
The only firewall I have is the windows firewall, and I disabled that
you should not disable windows firewall, that wouldnt solve your problem and may be a security risk.

however, i do not know if other firewalls can cause this problem, but you say you only use windows firewall.

xZippy
2008-08-05, 16:04
No, blues... What I mean is, I disabled the firewall momentarily to test the Spybot stuff.

blues
2008-08-05, 17:20
ok, sorry for my misunderstanding:)

Ron.M
2008-08-05, 21:19
OK, xZippy & drragostea , I'm back... For others reading this: I have Windows XP Pro with SP 2 ( I REFUSE to get SP 3) I am using IE 7 with NetZero as my ISP...SpyBot will NOT immunize ANYTHING.. ( I AM newbie & if I knew how , I would upload a immage as xZippy did , but I don't think it would help )..I have 37,491 files with "0" protected... I have tried "undo" & immunize" several times with NO results...My SpyBot file was transfered to CD , before I did a complete FULL re-install of WinXP...(long story) I AM the administrator...After I re-loaded SpyBot & got all the updates is when this :spider: appeared...I use "SB" ONLY offline & ALL programs closed...I ran the file & it found only some cookies which it cleared , so I thought all was well until I tried to immunize...( takes over 2 hrs to complete ).....I hope a "SB" engineer or programmer reads this thread & replies to it WITH a solution...THANKX :hair:

Greyfox
2008-08-06, 10:14
xZippy

See whether whats discussed in this thread is of help
http://forums.spybot.info/showthread.php?p=210760#post210760

Greyfox
2008-08-06, 10:33
Ron.M

The link I gave XZippy to read will not help you as your problem is NOT the same as his. He has an immunisation problem specifically relating to Firefox, where as you don't appear to be using Firefox at all, and to use your words "I have 37,491 files with "0" protected"

An installation of the current Spybot version 1.6.0.30 on XP Pro, with the latest detection updates has a much higher number of immunisations. In lieu of seeing a screen shot of your immunisation screen, my first advice would be to completely uninstall Spybot and clean out any residue. See http://www.spybot.info/en/howto/uninstall.html

Then download a complete new copy of the current Spybot from on of the sites at http://www.spybot.info/en/mirrors/index.html and install it. During the install take care to select the options so that neither the resident IE Browser option or Teatimer is enabled at this stage, and also leave getting the updates until after you have installed the program. When it has installed, go and get the updates using the Search for updates on the main Spybot screen, then try another immunise.

Please post back the result.

xZippy
2008-08-06, 14:44
I am using Firefox 3, and I have reinstalled this program, leaving updates for last. That's how I always do it.

xZippy
2008-08-06, 19:25
Alright, I followed the uninstall guide, and reinstalled it the way Greyfox said, and my problem hasn't gone away. The number went from 27035 to 27131...

Here: http://img374.imageshack.us/img374/1759/spybotstl7.png

drragostea
2008-08-06, 20:36
Hi, xZippy. Do you happen to have more than one account on the current computer?

I took a look at the thread, and the screenshot from xZippy's last post reminded me of when I was using the AlterEgo tool by SaferNetworking.

I'm not sure why there is more than one profile of it (Firefox), and what is more confusing is why is it not immunizing.

Ron.M
2008-08-06, 21:08
:greeting: Greyfox: Thanks for your reply...Will do ALL you ask...This will take some time as I am now downloading Adobe reader..It's 35 mb & I have a slooow download speed ( another website & tech will handle that one for me)..I tried to email you privately, but you apparently have no friends,:rotfl:...Question: can I download 2 or more program/files at the same time without corruption of either file ?? Thanks again, RON

drragostea
2008-08-06, 21:28
Ron, it'll depend on your download speed. And yes, you can download two files without corruption.
Edit: Ron, wasn't this your tread concerning the Adobe Reader file?
http://forums.spybot.info/showthread.php?t=32083
--

Ron.M
2008-08-06, 22:38
:greeting:Drragostrea: Yes , that is another thread I have going...Since I re-installed WinXP Pro , I have a few glitches I need to fix...I just completed downloading Adobe Reader 9 & got the same result...( Completely removed 1st download )I get a message saying that I have to have Windows 2000 with Service Pack 4 installed...I do not have Win 2000 & is there a SP 4 ?? ...It will NOT install...SpyBot asked for registry changes during the download , which I agreed to...I tried to contact Adobe by email , but they have & want me to change to Outlook Express email , which I am not willing to do at this time...My download speed IS VERY slow (much slower) since the re-install....About 3/5 kb per sec...I intend to tackle that issue at the other site we talked about...I have just done a complete uninstall (including the search box remnants)of SpyBot...I'm now going to download the new version...Talk to you later, Thanks, RON:hair:

Ron.M
2008-08-07, 01:30
:greeting: Dear Greyfox: I COMPLETELY removed SpyBot & it's residue...I tried to download the new file , but it timed out on me...:hair: ....I'm also having a severely slow data transfer rate , about 3/5 kbps....I just tried to download Java from it's legal website...Would NOT do it...Something about applets or whatever.... I am a newbie & what was fun has now turned to frustration...If I don't get a reply from here within a couple of days , I'll try a computer tech site to fix this 1st & return to work on the SB problem....I MUST have SB ...MANY thanks to ALL who replied...RON :banghead:

xZippy
2008-08-07, 03:50
Hi, xZippy. Do you happen to have more than one account on the current computer?

I took a look at the thread, and the screenshot from xZippy's last post reminded me of when I was using the AlterEgo tool by SaferNetworking.

I'm not sure why there is more than one profile of it (Firefox), and what is more confusing is why is it not immunizing.
I assume I have one profile on Firefox. I am the only user on the computer, there are no others. I don't know how to access profile info on Firefox 3.

Greyfox
2008-08-07, 08:08
I assume I have one profile on Firefox. I am the only user on the computer, there are no others. I don't know how to access profile info on Firefox 3.

No, you do appear to have two profiles, and it's the same in the first screen shot you provided early in the thread and the last. Maybe you updated from Firefox 2 to Firefox 3 without un-immunising first.

Firefox 3 uses a file named permissions.sqlite
Firefox 2 used a file named hostperm.1

If you have both then it would support the above theory, and my suggestion, providing you currently have Firefox 3 installed, and not Firefox 2 would be to delete hostperm.1

If you do find both, then it also suggests you didn't fully remove one before you installed the other. Un-installing doesn't always remove everything. It's always wise to check for left over folders, preference and configuration files etc.

xZippy
2008-08-08, 03:15
I can't find either files in the Mozilla Firefox folder.

ennui
2008-08-08, 04:04
Alright, I followed the uninstall guide, and reinstalled it the way Greyfox said, and my problem hasn't gone away. The number went from 27035 to 27131...

Here: http://img374.imageshack.us/img374/1759/spybotstl7.png

I am having the exact same problem as xZippy with precisely the same outcome in the image linked in the quote above.

I am on Windows XP pro SP3, Firefox 3, no other programs but Windows firewall, AVG Anti-Virus and Ad-Aware... though I got the same issue with AVG and Ad-Aware uninstalled.

I am also the only user on this computer.


And, I am sure I updated from Firefox 2 to Firefox 3 without un-immunizing first. I also don't see "hostperm.1" anywhere, for deletion (I looked manually as well as using Windows Search for the file).

Greyfox
2008-08-08, 16:34
To those still following this thread.

The location to look for hostperm.1 or permissions.sqlite is
C:\Documents and Settings\username\Application Data\Mozilla\Firefox\?????\

If you have multiple user accounts you will need to check the above for each account (username in the above path)

If you are running Firefox 2 you must have hostperm.1 and NOT permissions.sqlite.

If you are running Firefox 3 you must have permissions.sqlite and NOT hostperm.1

Spybot 1.6 will look for hostperm.1 and if it finds it will assume you are running FF2. If you are actually running FF3 the immunisations won't work.

If it doesn't find hostperm.1, it will assume you are running FF3. If you are runnning FF2 the immunisations won't work.

Hoping this helps.

ennui
2008-08-08, 23:32
I found the appropriate file (in my case, hostperm.1) in the directory "C:\Documents and Settings\username\Application Data\Mozilla\Firefox\Profiles\ax3fijd2.default" but I had to navigate to "C:\Documents and Settings\username" and type in "\Application Data" manually in order to get there.

None the less, I deleted the file and Immunized. Problem persists.
I pressed Undo immunization and Immunized again. Problem persists.
I uninstalled Spybot-S&D and rebooted and reinstalled and, thru the process of program startup, Immunized. Problem persists.

Thank you Greyfox for taking the time to help us with this problem.



Oddly enough, I updated Firefox 3 and Spybot-S&D the exact same on my girlfriend's computer as I do mine and she didn't experience any Immunization problems. O_o;

xZippy
2008-08-09, 07:45
I found the appropriate file (in my case, hostperm.1) in the directory "C:\Documents and Settings\username\Application Data\Mozilla\Firefox\Profiles\ax3fijd2.default" but I had to navigate to "C:\Documents and Settings\username" and type in "\Application Data" manually in order to get there.

None the less, I deleted the file and Immunized. Problem persists.
I pressed Undo immunization and Immunized again. Problem persists.
I uninstalled Spybot-S&D and rebooted and reinstalled and, thru the process of program startup, Immunized. Problem persists.
Same here.

Ron.M
2008-08-10, 02:35
Dear Greyfox & drragostea etc...I'm baaack...I have IMPROVED my data transfer rate...Now I can NOT fully download SpyBot !!! It STOPS at 9.98mb , freezes , then times out , TWICE !!! I NEED this file , even if it's just for the search & destroy part....There just HAS to be a :spider: there...Maybe we can get it somewhere else ?? If anyone has any ideas or tips , I WOULD really appreciate it... Thanks in advance....

Greyfox
2008-08-10, 03:15
ennui,

OK, you found hostperm.1 which is the FF2 file and deleted it.
I assume that permissions.sqlite wasn't there.

You then did an immunise that still didn't work. If you now check in the same place is permissions.sqlite now there and if so what size is it?

I have one computer with FF2 on it, I don't have FF3. If I delete hostperm.1 and then run Spybot 1.6 and try to immunise it doesn't work of course because it thinks I have FF3, but it does put permissions.sqlite there.

Maybe try deleting permissions.sqlite if it is there, then try running FF3 before you open Spybot and try to immunise.

I am concerned about your statement that you couldn't navigate to the folder in question. Were you doing this using Explorer or from a command prompt.

Xzippy - are you able to fully navigate to the folder we are talking about.

xZippy
2008-08-12, 01:51
Yeah, I forgot all about the complicated stuff. I just uninstalled both Firefox and Spybot. I deleted every single known extra installation file I could find on both programs. I used CCleaner to get rid of left over registry crap. I reinstalled both Firefox 3 ans Spybot. Problem solved.

Ron.M
2008-08-12, 21:31
Hello , drragostea & Greyfox: :bighug: Problem SOLVED...Went to WTT & a chap named Doug gave me/us a tip I'll pass on to you all...He said to go to Internet Options , Advanced & reset...Which WORKED...Downloaded SpyBot , installed , updated & ran..Also it immunized FULLY....Many thanks to ALL that helped...:wav:

Terminator
2008-08-12, 23:01
I've just tried Ron.M's suggestion and it seems to have solved my SD helper issue's (Fingers crossed):eek:.

ennui
2008-08-13, 02:40
ennui,

OK, you found hostperm.1 which is the FF2 file and deleted it.
I assume that permissions.sqlite wasn't there.

You then did an immunise that still didn't work. If you now check in the same place is permissions.sqlite now there and if so what size is it?

I have one computer with FF2 on it, I don't have FF3. If I delete hostperm.1 and then run Spybot 1.6 and try to immunise it doesn't work of course because it thinks I have FF3, but it does put permissions.sqlite there.

Maybe try deleting permissions.sqlite if it is there, then try running FF3 before you open Spybot and try to immunise.

I am concerned about your statement that you couldn't navigate to the folder in question. Were you doing this using Explorer or from a command prompt.
First of all, both hostperm.1 and permissions.sqlite were found when I initially deleted hostperm.1

After deleting hostperm.1, the Immunization worked, but it still had the same results as the image quoted in my first post.

At the time of this post, permissions.sqlite is 948KB in size.

When I say that I couldn't navigate to "C:\Documents and Settings\Cody\Application Data" I found that it is because the file "Application Data" was hidden, so no problems there; but, yes, this was in Explorer.

I am now deleting permissions.sqlite and I will restart FF3 as you suggested before trying another Immunization. I will return and edit this post with my results.

ennui
2008-08-13, 02:59
Can't edit my post:

I deleted permissions.sqlite and restarted FF3 and the Immunization still ran with the same results.