problem with a virus?

[lmsems]

1) I had a file blogon come into my teatimer. I chose to deny but spybot would not allow it no matter how many time i hit deny

2) I downloaded updated version of spybot and it looks like one of the detection tools did not download and said bad checksum 07/16/08

3) i ran the search and destroy and got like 10 things when i selected fix problems everything got a green check mark howevere smitfraud and win32.renos for some reason got some very large green checks it looked wierd

also i then got a Spybot dialog box with a red x saying Failing to load C:\Program Files\Spybot - Search Destroy\DelZip179.dll

can anyone help not sure if im posting this in the right spot so please any direction on how to resolve this would be helpful.

[spybotsandra]

Hello,

1. That is probably refered to your infection.

2. If you search for updates and a 'HTTP Error 403' or 'bad checksum' is displayed, this has a simple reason - millions of people trying to download from the same server.

In order to overcome the problem, please have a second look at the update-menu-bar after searching for new updates. Therefore choose the update site from the navigation bar on the left. Now you'll see the update menu bar. It has a pull-down item to select a mirror. Click the arrow beside it, and select a different location (try the ones located nearest to you first), where you'll most probably have better chances to download. For a better understanding we have placed a picture at this link on our website:
http://www.safer-networking.org/en/howto/update.html
In section 4 you'll see how to select a download location nearest to you.

If this sounds too difficult please try to download the updates manually:
http://www.safer-networking.org/en/download/index.html
Here is the direct download link (http://www.spybotupdates.com/updates/files/spybotsd_includes.exe).
Just download and run that file - it is self-installing.

The information about "bad checksum" is also available in our FAQ:
http://www.safer-networking.org/en/faq/20.html

For more information please do also have a look into our forum:
Bad Checksum (http://forums.spybot.info/showthread.php?t=63&highlight=checksum)

3. Please try to delete the files seperately after a scan.
This error message appears if too many bad files are found and should be deleted in one run.

If this does not help please delete the recovery function in Spybot - Search & Destroy.

Select "Settings" --> "Settings" from the toolbar on the left.
In the section "Main settings" please untick the checkbox in front of all three items "Create backups......".
That should solve the problem.

Or run a scan in safe mode:
http://www.computerhope.com/issues/chsafe.htm
That should fix it.

Best regards
Sandra
Team Spybot

[cbfregistering]

I'm here looking for solutions to the same problem.

No, it's not the fault of busy servers... It wasnt a 403, etc.

There is some kind of virus out there which has taken control of my spybot.

Initially I had problems just like the Original Poster.

I uninstalled, reinstalled, updated to all the new definitions, etc...

Spybot appeared to update successfully and ran a scan successfully reporting ZERO errors. Now, all i had needed to do previously to get some spyware to remove was go just about anywhere and i'd get a few back like Double-click and a couple of others.

But its been over a month now (yes, ive been lazy in trying to fix this) and i can still update "fine" and find nothing when I scan.

However, serving as a warning for me to do something about the problem, today while watching some video files AVG came up with a virus warning; Near identical to another recent warning which i kind of ignored.

The first was "generic10.AFOV" trojan

today, only minutes ago, "Backdoor.SDbot3.ABEX"

Both were found in System Volume Information\_restore (which i can't get into! and restore was supposed to be off, AND the first was on the system disk, C:, the later d:\ for files)

I can update now, scan and find a 100% spyware free computer. This is obviously not the case! Since i've had this problem for a while i imagine its quite widespread - but since Spybot just appears not only to be functioning - but working flawlessly - perhaps the majority of people have not noticed?

So what is known about this spybot corrupting virus? Whats being done? What can I do?

thanks.

ps. What are the odds spybot IS working perfectly and I've found no spyware in over a month and Backdoor.SDbot3.ABEX has nothing to do with spybot, anyway?

[cbfregistering]

Has this potential threat been brought to the attention of anyone who cares, spybot forums?

[spybotsandra]

Hello,

Which version of Spybot do you run?
It is not possible for any anti-spyware-tool to detect every threat because the spyware sector is growing and developing too fast.
So it might happen that one anti-spyware-tool detects something that the other misses.
Therefore it is recommendable to run more than one security software.

But if you are infected the next time we can locate the threat also in your bug report, although nothing is present after a scan. That would help to improve our database. :-)

Best regards
Sandra
Team Spybot