Spybot not removing found items

[cwhymer]

Hi, I have been experiencing strange behaviour from Spybot S&D where it is not removing the items it finds even though it says it does.

Unlike normal, the items it finds are not being given the big green checkmark to show they have been dealt with, I am only receiving the popup window saying they have been removed.

Thinking it may have been malware preventing it from working properly, I had posted on the spywareinfoforum for help. After cleaning everything that seemed to be on the machine, the Spybot behaviour continues, so my helper suggested posting here for assistance.

The thread from spywareinfoforum showing what we did to try to fix the challenge is http://www.spywareinfoforum.com/index.php?showtopic=122025

I have also taken a couple of screenshots from Spybot to hopfully help explain the situation, but I am not sure how to reduce the size to meet the forum requirements.

Thanks for your help.

[md usa spybot fan]

cwhymer:

What version of Spybot - Search & Destroy are you running (Spybot » Help » About)?

If you are not running Spybot 1.6.0.30 or above, consider upgrading. The downloads are located here:
Mirror selection - The home of Spybot-S&D!
http://www.spybot.info/en/mirrors/index.html
If you are running Spybot 1.6.0.30 or above, there are two things that you can try to get rid of the things that Spybot-S&D is having difficulty removing:
Try to run it the next time you reboot.
Go into Spybot > Mode > Advanced mode > Settings > Settings > look for "System start" (located half way down the page).
Check the option: "Run program once at next system startup".
Reboot the system.
Run it in Safe mode.
Reboot your system in Safe mode and run Spybot-S&D.
If Spybot still fails to correct the problem, consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum on this site and having someone take a look at your system. But first you should decide which forum you want to continue in, Safer Networking Forums ( http://forums.spybot.info/index.php) or the SpywareInfoForum (http://www.spywareinfoforum.com/), because it is unwise to receive malware removal instructions from two sources concurrently.

If you decide to have an experienced malware removal specialist assist you in this forum , please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum, making sure to post the HijackThis log produced from the above instructions.

[cwhymer]

Hi md,

My version of Spybot is 1.6.0.30, and I tried both your suggestions and still have the same result.

The helper I had at spywareinfoforum was the one that suggested I post here for help, as he considered the machine clean from what he could tell. He thought maybe there was a conflict of some sort between Spybot and some other program(s) on this machine.

I have never had any issues with Spybot in the past, and my use dates back to when it scanned for about 11,000 items, compared to the 360,000+ it looks for today. Needless to say, it is one of my favorite programs to use to clean spyware!!

I may try posting in the Malware Removal forum here to see if the reason can be found why it is not working correctly.

Thanks for your help!!

[dawta]

Hi everyone!
I have a problem which I can't solve by myself:
1.I can't immunize 701 global hosts.
2.I can't remove Fraud.WindowsProtectionSuite (about 52 items.malvare) -> unexpecting error in fixing problems(Cannot create file "C:\Windows\System32\drivers\etc\hosts".Access is denied.
I have XP,I use AVG free,I don't use no ZoneAlarm,no Ad-Aware,Tea Timer is off(I suggest:p:) I use Mozilla 3.5.3,but I have too Interntet Explorer Browser too(but I don't use him at all :FF:
I use Spybot 1.6.2.46.
I can't run pc as Administrator(I don't know how to do it,I haven't password)
I was trying to immunize global hosts by do like that:
"Open Spybot > Immunize > under Windows uncheck Global (Hosts). Go into Spybot > Mode > Advanced Mode > Tools > Hosts file > and then click on the "Add Spybot S&D hosts list" button. Go back into Spybot > Immunize"-> but nothing change!!
I was trying too to go to C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\8gadasx3.default and to remove permissions.sqlite (but by this moment I have and permissions.sqlite(1,18MB) and hostperm.1 (883KB) by the same time.And no matter how many times I delete permissions.sqlite it's appears again.
Please HELP!!!!!

[Gopher John]

See http://kb.mozillazine.org/Profile_folder_-_Firefox#Files


hostperm.1 Previous to 3.0 Per-site preferences for allowing cookies and popups.

hostperm.1 isn't used by Firefox 3.5.3, but may be restoring previous permissions on Firefox startup if permissions.sqlite is deleted. I'm not sure if this is what you are seeing. For some immunizations, you must run in Admin.