View Full Version : Question About Fixing Problems
Hi, lately when I run spybot, not all the problems are being removed (even though the message at the end will say all the problems were fixed.) There is no notice about their being problem with fixing the problems, they just aren't being fixed. The truely fixed problems will have a big green check, but several problems still have the box with the small green check like they did before I ran "fix selected problems". I've tried deleting all my cookies/browser history & Ad-Aware archive since I thought maybe this was preventing the fix being applied, but this didn't help. Spybot says these are all browswer entries, when I right click on "jump to location", nothing happens (I thought maybe that would take me to the problem that I could manually delete it.) The stuff not being fixed is AdRevolver, BFast, BurstMedia, Coremetrics, DoubleClick, HitsLink,LinkSynergy, MediaPlex, RightMedia,StatCounter,WebTrendsLive. I think this stuff is just the normal tracking cookies (I'm not having any problems with my computer), I'm just not sure why I can't remove them.
Any suggestions or explanations? Thank you so much for any help.
md usa spybot fan
2009-01-03, 17:18
MSRX92:
Please post a log of the actual detections you are getting so that we know the version and update level of Spybot you are running as well as the browser that you are having difficulty deleting tracking cookies in. To do that, either:
Run another scan.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Then paste those results (Ctrl+V) to a new post in this thread.
Post the Checks.yymmdd-hhmm.txt or the Fixes.yymmdd-hhmm.txt log from a previous scan that shows the detections in question.
By default here are two Checks.yymmdd-hhmm.txt files produced during a scan. The second Checks.yymmdd-hhmm.txt has the details of what the scan found. A Fixes.yymmdd-hhmm.txt file is produced if you fix or attempt to fix something.
There are two methods to copy and post that information from previous scans:
Method 1:
Go into Spybot > Mode > Advanced mode > Tools > View Reports > View Previous reports. Look for the Checks.yymmdd-hhmm.txt or the Fixes.yymmdd-hhmm.txt file that contains the detections that you would like help with. Open it. To copy it to the Clipboard, right click on the listing and select Select All > Right click again and select Copy. Paste (Ctrl+V) the contents of the Clipboard into a new post in this thread.
Method 2
The Checks.yymmdd-hhmm.txt and Fixes.yymmdd-hhmm.txt files are stored in the following folders:
Windows 95 or 98:
C:\Windows\Application Data\Spybot - Search & Destroy\Logs
Windows ME:
C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Logs
Windows NT, 2000 or XP:
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs
Windows Vista:
C:\ProgramData\Spybot - Search & Destroy\Logs
Using Windows Explorer, navigate to the correct Checks.yymmdd-hhmm.txt or the Fixes.yymmdd-hhmm.txt file. Double click on it and it should open with Notepad. To copy it to the Clipboard, right click on the listing and select Select All > Right click again and select Copy. Paste (Ctrl+V) the contents of the Clipboard into a new post in this thread.
Do you use Spybot's immunization feature?
Hi, thanks for helping! :) I have started using immunize, but that was after I realized I had this problem.
Results from latest scan:
------------------------------------------------------------
Hint of the Day: Click the bar at the right of this to see more information! ()
Right Media: Tracking cookie (Internet Explorer: Rhonda) (Cookie, nothing done)
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
BFast: Tracking cookie (Flock: default) (Cookie, nothing done)
BurstMedia: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Flock: default) (Cookie, nothing done)
DoubleClick: Tracking cookie (Flock: default) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Flock: default) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
Statcounter: Tracking cookie (Flock: default) (Cookie, nothing done)
WebTrends live: Tracking cookie (Flock: default) (Cookie, nothing done)
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---
2008-08-14 blindman.exe (1.0.0.8)
2008-08-14 SDFiles.exe (1.6.0.4)
2008-08-14 SDMain.exe (1.0.0.6)
2008-08-14 SDShred.exe (1.0.2.3)
2008-08-14 SDUpdate.exe (1.6.0.9)
2008-08-14 SDWinSec.exe (1.0.0.12)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-09-16 TeaTimer.exe (1.6.3.25)
2006-07-24 unins000.exe (51.41.0.0)
2008-11-09 unins001.exe (51.49.0.0)
2008-08-14 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-08-14 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-11-04 Includes\Adware.sbi (*)
2008-12-29 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-12-22 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-22 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-29 Includes\MalwareC.sbi (*)
2008-12-16 Includes\PUPS.sbi (*)
2008-12-16 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-29 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-12-29 Includes\Trojans.sbi (*)
2008-12-29 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
-------------------------------------------------------------
Copy of the previous fixes:
--------------------------------------------------------------
--- Report generated: 2009-01-02 23:23 ---
Hint of the Day: Click the bar at the right of this to see more information! ()
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
BFast: Tracking cookie (Flock: default) (Cookie, nothing done)
BurstMedia: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
HitsLink: Tracking cookie (Flock: default) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Flock: default) (Cookie, nothing done)
DoubleClick: Tracking cookie (Flock: default) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Flock: default) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
MediaPlex: Tracking cookie (Flock: default) (Cookie, nothing done)
Statcounter: Tracking cookie (Flock: default) (Cookie, nothing done)
WebTrends live: Tracking cookie (Flock: default) (Cookie, nothing done)
AdRevolver: Tracking cookie (Flock: default) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.0 (build: 20080729) ---
2008-08-14 blindman.exe (1.0.0.8)
2008-08-14 SDFiles.exe (1.6.0.4)
2008-08-14 SDMain.exe (1.0.0.6)
2008-08-14 SDShred.exe (1.0.2.3)
2008-08-14 SDUpdate.exe (1.6.0.9)
2008-08-14 SDWinSec.exe (1.0.0.12)
2008-07-30 SpybotSD.exe (1.6.0.31)
2008-09-16 TeaTimer.exe (1.6.3.25)
2006-07-24 unins000.exe (51.41.0.0)
2008-11-09 unins001.exe (51.49.0.0)
2008-08-14 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-08-14 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2008-11-04 Includes\Adware.sbi (*)
2008-12-29 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-12-22 Includes\HijackersC.sbi (*)
2008-12-09 Includes\Keyloggers.sbi (*)
2008-12-22 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-29 Includes\MalwareC.sbi (*)
2008-12-16 Includes\PUPS.sbi (*)
2008-12-16 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-29 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-12-10 Includes\Spyware.sbi (*)
2008-12-10 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-12-29 Includes\Trojans.sbi (*)
2008-12-29 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
-----------------------------------------------------------
drragostea
2009-01-03, 20:55
Are they not being fixed or are they coming back everytime you scan (thus this thread)?
Make sure all browsers are closed and then fix them.
You know, they are merely cookies and you can always clear all the cookies in your browsers manually.
<<Are they not being fixed or are they coming back everytime you scan (thus this thread)?
Make sure all browsers are closed and then fix them.
You know, they are merely cookies and you can always clear all the cookies in your browsers manually. >>
Well that is what I thought, I did clear out all of my cookies and close my browser, and they are still not being fixed. The fixed items will show a big green checkmark after I "fix selected problems", but these items still show the small green checkbox that they need to be fixed. The message though will say "19 items fixed", even if only 3 green checkboxes appear by the fixed items.
Okay, I fixed my own problem. Your question about clearing out cookies did jog my memory--I cleared out the cookies on my IE which I use nearly exclusively, but I also have Netscape & Flock on my computer that I rarely use. I opened them and cleared out the cookies and then ran I ran spybot, no problems were found.
I'm still not sure why Spybot couldn't fix the problems from the other stored cookies...I guess I can add that to my list of reasons why I don't like those browers. :)
Thanks for the help!
drragostea
2009-01-03, 23:44
Glad it was resolved.
But that hit me too. I was a bit stumped on why Spybot could not remove them, but this case isn't unusual either. I guess removing it manually did the job.
Safe surfing.
I cannot find the "button" to post a new post. I apologize. Please put this in the right thread, and would appreciate help in figuring out how to post a new post.
My problem on my Windows Vista machine is that I keep having Webtrends tracking cookies show up in scans.
Spybot isn't catching it and that concerns me.
The following is NOT a spybot log.
Here is the text of the particular thing I'm having trouble with so you have enough information to know what it is. Thank you ahead of time, and sorry I didn't ask the right question to get a response first. Again, the following is NOT a spybot log:
Resident Shield detection
"Infection";"Object";"Result";"Detection time";"Object Type";"Process"
"Found Tracking cookie.Webtrends";"C:\Users\nobodyz\AppData\Roaming\Microsoft\Windows\Cookies\Low\nobodyz@m.webtrends[1].txt";"Potentially dangerous object";"7/2/2009, 5:11:06 PM";"file";"C:\Program Files\CCleaner\CCleaner.exe"
"Found Tracking cookie.2o7";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\jenny@msnportal.112.2o7[1].txt";"Moved to Virus Vault";"6/29/2009, 3:48:06 PM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.2o7";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\jenny@msnportal.112.2o7[1].txt";"Moved to Virus Vault";"6/29/2009, 3:46:28 PM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.2o7";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\jenny@msnportal.112.2o7[1].txt";"Potentially dangerous object";"6/29/2009, 3:45:16 PM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.2o7";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\jenny@msnportal.112.2o7[1].txt";"Moved to Virus Vault";"6/29/2009, 3:36:26 PM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.2o7";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\jenny@msnportal.112.2o7[1].txt";"Moved to Virus Vault";"6/29/2009, 3:33:30 PM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.Zedo";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@zedo[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:33 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Tribalfusion";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@tribalfusion[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:33 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Revsci";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@revsci[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:33 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Realmedia";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@realmedia[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:33 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Adrevolver";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@media.adrevolver[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Webtrends";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@m.webtrends[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Fastclick";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@fastclick[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Doubleclick";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@doubleclick[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Atdmt";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@atdmt[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Advertising";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@advertising[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:32 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Adrevolver";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@adrevolver[2].txt";"Moved to Virus Vault";"6/29/2009, 12:30:31 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Yieldmanager";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@ad.yieldmanager[1].txt";"Moved to Virus Vault";"6/29/2009, 12:30:31 PM";"file";"C:\Windows\System32\svchost.exe"
"Found Tracking cookie.Burstnet";"C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Cookies\Low\jenny@burstnet[2].txt";"Deleted";"6/29/2009, 11:58:33 AM";"file";"C:\Program Files\Internet Explorer\iexplore.exe"
"Found Tracking cookie.Webtrends";"C:\Users\nobodyz\AppData\Roaming\Mozilla\Firefox\Profiles\58qvst4y.default\cookies.sqlite";"Healed";"6/28/2009, 11:36:28 AM";"file";"C:\Program Files\CCleaner\CCleaner.exe"
"Found Tracking cookie.Doubleclick";"C:\Users\nobodyz\AppData\Roaming\Mozilla\Firefox\Profiles\58qvst4y.default\cookies.sqlite";"Healed";"6/28/2009, 2:09:16 AM";"file";"C:\Program Files\CCleaner\CCleaner.exe"
"Found Tracking cookie.Webtrendslive";"C:\Users\nobodyz\AppData\Roaming\Mozilla\Firefox\Profiles\58qvst4y.default\cookies.sqlite";"Healed";"6/25/2009, 7:45:08 PM";"file";"C:\Program Files\Mozilla Firefox\firefox.exe"
Hi. :)
If the webtrends live is a third party cookie,following this might help:
http://www.safer-networking.org/en/faq/37.html
To post a new topic,you'd click the New Thread button down at the bottom or top lower left.This should help explain it better:
http://forums.spybot.info/faq.php?faq=vb_faq#faq_topics