View Full Version : I lost control over my pc
Since I've downloaded SB 1.6, I can't access any application, not even SB.
I tried to get to Add and remove program to disinstall but I get a SB window
scanning the files. I'm not very technical but I tried getting to add and remove by safe mode, I tried system restore, no luck, I need help.
Do you get any error messages when trying to open applications?
What does the Spybot window scanning files look like when you try to open Add/Remove Programs?
What operating system do you have?
I have windows XP, I don't get an error message I get a window:
Spybot- Search & Destroy
Filename Status
Spybot-Search & Destroy (Malware)
rundl32.exe nothing found
Spybot- Search & Destroy (heuristic)
rundl32.exe nothing found
Scan finished
Close
That is Spybot's single file scanner.You get that window opening whenever you try to open any application,or just when you try to open add/remove programs?Also,the window is opening whenever you doubleclick any application?
129260,
I downloaded spybot from a link on a french forum that took me to fileforum.betanews.com
Zenobia,
I get that window opening whenever I doubleclick any application not just Add/Remove programs. Also I lost everything on the tool bar and my firewall and antivirus are no longer working.
Okay.Usually that window opens when rightclicking a file and selecting Scan with Spybot S&D.I think I saw a similar problem posted on the forum.
First things first,though.Could you confirm something for me?
rundl32.exe nothing found
Is that a typo?Or does the rightclick scanner actually say rundl32.exe?I'm not being nit-picky,I just need to know,so I can decide where to go from here. :)
You are correct, it is a typo, it says rundll32.exe when I click Add/Remove.
Okay,thanks.Running short on time right now,will try to be back tonight to see if I can help you out.
You're welcome. :)
I honestly don't know if this will work or not for you.You probably will just get the Spybot file scanner again.But,try going to Start->Run.Copy and paste this into the run box:
"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Include the quotes.If the box asking if you'd like to uninstall Spybot pops up,click Yes,then go from there.Let me know if you're planning on reinstalling Spybot again.
Please post back and let me know what happens,even if it works,because your firewall and antivirus not working needs to be dealt with. :)
O.K. I copied and pasted and clicked, and I got a window that says
Windows cannot open this file:
File: unins000.exe
To open this file windows needs to know what program created it.
Windows can go on line to look it up automatically, or you can manually
select from a list of programs on your computer.
I'm not sure about what you meant about the quotes.
I meant that you should copy and paste the whole line including the quote marks(these->"")when copying and pasteing the line into the run box.
Could you go to C:\Program Files\Spybot - Search & Destroy and tell me if there is a unins000.exe file in there?
When you first downloaded Spybot,did you run a scan,before you started having problems opening applications?
Yes the file is there.
I did run the scan, before the problem started. I started having the problem the following day, at first I coul still open Outlook and then that nothing.
Okay,good.You should be able to get in to post a Spybot log,so what was removed can be seen,if anything.
Please go to Start,then Run and copy and paste in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs,if your main drive is C:\.If not,put in your main drive letter instead.
If you only ran one scan,then there should be only one Fixes logfile.Please doubleclick that,go to edit,select all,then rightclick in the window,select Copy,then paste the logfile here.If it doesn't fit into one post,breaking it up into two posts should work.
O.K. The first line is in french, not very important I think but just in case it says:
Advise of the day: Click on the right for more informations.
--- Report generated: 2008-08-28 09:41 ---
Le conseil du jour: Cliquez sur la barre située à droite pour voir plus d'informations! ()
Netcom3Cleaner: [SBI $F5C804B8] Réglages (Clé du registre, fixed)
HKEY_USERS\S-1-5-21-279399184-2047561319-2808855929-1007\Software\SpyClean
Netcom3Cleaner: [SBI $AFB12C3C] Réglages (Clé du registre, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netcom3
Netcom3Cleaner: [SBI $7432AADA] Réglages (Clé du registre, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Netcom3
ErrorSmart: [SBI $905F6A0F] Réglages (Valeur du registre, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\ErrorSmart\
ErrorSmart: [SBI $879FA510] Fichier journal (Fichier, fixed)
C:\Documents and Settings\Patricia Carydia\Application Data\ErrorSmart\Log\2008 Feb 24 - 06_29_25 PM_421.log
ErrorSmart: [SBI $879FA510] Fichier journal (Fichier, fixed)
C:\Documents and Settings\Patricia Carydia\Application Data\ErrorSmart\Log\2008 Feb 24 - 06_30_49 PM_234.log
ErrorSmart: [SBI $7B416CCA] Donnée (Fichier, fixed)
C:\WINDOWS\Tasks\ErrorSmart Scheduled Scan.job
--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---
2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-08-28 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-08-05 Includes\Adware.sbi (*)
2008-08-26 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-06-03 Includes\Dialer.sbi (*)
2008-08-05 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-08-19 Includes\Hijackers.sbi (*)
2008-08-26 Includes\HijackersC.sbi (*)
2008-08-05 Includes\Keyloggers.sbi (*)
2008-08-26 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-08-27 Includes\Malware.sbi (*)
2008-08-26 Includes\MalwareC.sbi (*)
2008-08-05 Includes\PUPS.sbi (*)
2008-08-26 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-08-26 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-08-12 Includes\Spyware.sbi (*)
2008-08-26 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi (*)
2008-08-27 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
.
Logs used to show more,but I see mine are the same.But,should try to get Spybot off your computer temporarily,so you can get checked out in malware removal.Please see here:
http://www.spybot.info/en/howto/uninstall.html
Since you cannot get Spybot uninstalled,try removing it that way.
Please let me know how it went,and post back.Thanks :)
No luck, When I try deleting the spybot file I get an Error Deleting file or folder window that says: Cannot delete SDHelper.dll: Access is denied
Make sure the disk is not full or write-protected and that the file is not currently in use.
Try booting into safe mode without networking,then deleting the Spybot folder.