PDA

View Full Version : I have two spybots: one rouge one genuine?



CrowDriver
2008-11-25, 15:46
According to the website URL directly below in the Windows 'add/remove' programs box an entry called 'search and destroy' is malware and should be removed. More specifically it says this:

Search and Destroy:<===This is a rogue. Do not confuse this with Spybot Search & Destroy which is valid!!!

http://forums.majorgeeks.com/showthread.php?t=79754

I am trying to remove the 'search and destroy' and leave Spybot Search and Destroy.
Unfortunately windows will not remove the program, when I try it says something like 'unable to remove because file is in use'.

I've tried rebooting, shutting down Spybot and then trying the deletion of Search and Destroy (not Spybot), but am unable to remove the rogue program.

The rogue shows no mal effects on my system and is apparently not doing anything ill at this time.

Also: what I think is a rogue could be an earlier version of Spybot meaning I have two legitimate versions installed. The Spybot Search and Destroy Help does not show a version number so I cannot determine which version I have installed?

katana
2008-11-27, 15:20
Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
Please Read All Instructions Carefully
If you don't understand something, stop and ask! Don't keep going on.
Please do not run any other tools or scans whilst I am helping you
Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those few things, everything should go smoothly http://www.countingcows.de/laechel.gif

Please ensure that any USB/Flash/External drives are connected whilst we are cleaning your machine.

Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe
----------------------------------------------------------------------------------------

Download and Run RSIT

Please download Random's System Information Tool by random/random from here (http://images.malwareremoval.com/random/RSIT.exe) and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open:

log.txt will be opened maximized.
info.txt will be opened minimized.

Please post the contents of both log.txt and info.txt.

katana
2008-12-04, 12:43
Due to inactivity, this thread will now be closed.

Note:If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.