PDA

View Full Version : Scan NEVER finds anything



kalki
2008-09-13, 14:50
Hi all, since I upgraded to 1.6.0.30 the scan runs through the motions but never finds anything, not even usage tracks. I add spyware just to test the prog and it finds nothing. I'm still running 98se on this box and yes I have cleaned out all traces of previous versions and reinstalled. Any advice would be appreciated as spybot is one prog I would hate to have to part with..thanks

md usa spybot fan
2008-09-13, 18:14
kalki:

Go into Spybot > Mode > Advanced mode (answer yes to the warning message if necessary) > Settings > File Sets. You will see a list of files that contain the signatures for various types of detections. Make sure every thing is checked except the last two items. The last two items, Usage Tracking and Tracks.uti, are for usage tracks and are not normally checked by default.

What spyware are you adding to test with?

kalki
2008-09-14, 06:15
Hi MD, already checked the file sets and I had usage etc checked as well, tried to pick up Alexa, Internet Optimizer, CWS.Gonnasearch and no luck with any of them or with usage tracking. Guess if there's no reports of this happening to anybody else I might have to gig a little deeper.

Tuco1
2008-09-23, 10:36
I'm having the same problem. I've tried uninstalling spybot s&d & reinstalling but that didn't help, I also tried turning off zonealarm while scanning but again no luck. Have checked File Sets & all boxes are already checked except for the last two.

Any help much appreciated. :)

md usa spybot fan
2008-09-23, 11:11
Tuco1:

What are you expecting to find?

During the running of a Spybot scan ("Check for problems") the status bar in the lower left hand corner of the screen shows the following:
"Running bot-check(xxxxx/yyyyy:zzzzzz)" where:
[list] xxxxx = Current check count.
yyyyy = Total check count.
zzzzz = Malware check being performed.
What is the yyyyy value?

_____

If you would to see if Spybot picks up tracking cookies, I attached a file that contains some tracking cookies (they are not actual tracking cookies, I just simulated some):
Download the cookies.txt file to a known location.
Go into Internet Explorer » File (menu) » select Import and Export.
In the Import/Export Wizard click Next » select Import Cookies » navigate (browse) to the file you just downloaded » click Next » click Finish.
Run another scan.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Then paste (Ctrl+V) those results to a new post in this thread.

Tuco1
2008-09-23, 11:42
Tuco1:

What are you expecting to find?

During the running of a Spybot scan ("Check for problems") the status bar in the lower left hand corner of the screen shows the following:
"Running bot-check(xxxxx/yyyyy:zzzzzz)" where:
[list] xxxxx = Current check count.
yyyyy = Total check count.
zzzzz = Malware check being performed.
What is the yyyyy value?


_____

If you would to see if Spybot picks up tracking cookies, I attached a file that contains some tracking cookies (they are not actual tracking cookies, I just simulated some):
Download the cookies.txt file to a known location.
Go into Internet Explorer » File (menu) » select Import and Export.
In the Import/Export Wizard click Next » select Import Cookies » navigate (browse) to the file you just downloaded » click Next » click Finish.
Run another scan.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Then paste (Ctrl+V) those results to a new post in this thread.

Thanks for the reply. Yes I was only really expecting to find tracking cookies (I rarely find anything worse thankfully). With the old version of s&d I would always & I mean ALWAYS find plenty of tracking cookies, even after only a short time browsing, but with the new version, I haven't found one single thing.

I never use IE, can I follow your above instructions with Firefox? I'll run another scan anyway & see what the yyyyy value is.

Thanks again :)

EDIT: yyyyy value is 286336

md usa spybot fan
2008-09-23, 12:19
Tuco1:

Your scan count of 286336 is correct as of the 2008-09-17 updates.

I don't use Firefox, but I believe in Firefox 3 you can import cookies using the Import option found under the File menu in Firefox.

Tuco1
2008-09-23, 13:05
It seems to have found them OK:


Hint of the Day: Click the bar at the right of this to see more information! ()


CasaleMedia: Tracking cookie (Internet Explorer: mark) (Cookie, nothing done)


Advertising.com: Tracking cookie (Internet Explorer: mark) (Cookie, nothing done)


DoubleClick: Tracking cookie (Internet Explorer: mark) (Cookie, nothing done)


Right Media: Tracking cookie (Internet Explorer: mark) (Cookie, nothing done)



--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---

2008-08-14 blindman.exe (1.0.0.8)
2008-08-14 SDFiles.exe (1.6.0.4)
2008-08-14 SDMain.exe (1.0.0.6)
2008-08-14 SDUpdate.exe (1.6.0.9)
2008-08-14 SDWinSec.exe (1.0.0.12)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-08-18 TeaTimer.exe (1.6.2.23)
2006-06-01 unins000.exe (51.41.0.0)
2008-09-23 unins001.exe (51.49.0.0)
2008-08-14 Update.exe (1.6.0.7)
2008-08-14 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-08-14 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-08-14 Tools.dll (2.1.5.7)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-09-02 Includes\Adware.sbi (*)
2008-09-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-09-02 Includes\Hijackers.sbi (*)
2008-09-02 Includes\HijackersC.sbi (*)
2008-09-09 Includes\Keyloggers.sbi (*)
2008-09-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-09-09 Includes\Malware.sbi (*)
2008-09-16 Includes\MalwareC.sbi (*)
2008-09-02 Includes\PUPS.sbi (*)
2008-09-11 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-09-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-09-02 Includes\Spyware.sbi (*)
2008-09-16 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-09-16 Includes\Trojans.sbi (*)
2008-09-16 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

It's strange, I can't believe that I haven't picked up one single genuine cookie while browsing over the last couple of weeks. It's impossible.

md usa spybot fan
2008-09-23, 13:17
Tuco1:

Spybot's immunization blocks the same tracking cookies that the "Check for problems" finds. So if you immunize or block third party cookies within the browser (see this FAQ (http://www.safer-networking.org/index.php?page=faq&detail=37) for how), I would not expect you to find any tracking cookies.

Tuco1
2008-09-23, 13:24
I have never immunized or blocked third party cookies. I have not done anything different with the newer version of s&d than I did with the older version & yet it always found tracking cookies. http://www.cheesebuerger.de/images/smilie/konfus/a050.gif

Thanks once again. :)