S&D Will Not Load

[diggerdave]

When I click on the short cut I get the hour glass for 1/2 a second then nothing. Tried to start it from Windows Explorer with the same result. I've been using Spybot for years without any troubles.

[Matt]

Hi diggerdave,

welcome to Safer Networking Forums. :)

When did you use Spybot last without having problems?

Did you already scan your pc for Malware/Trojans/Spyware?

Do you have other problems too? If yes, please tell me.

Best regards,
-Matt-

[diggerdave]

Thanks for your quick response.

This condition started about 4 days ago.
I have scanned with AVG, SuperAntispyware, and Malwarebytes.
Other problems:
Firefox popup blocker was disable-now enabled
Unable to connect to safer-networking.org-used hosts file to redirect to IP address

[Matt]

I have scanned with AVG, SuperAntispyware, and Malwarebytes.

Did they find anything?

[diggerdave]

No, here are the logs from the programs I ran.

SuperAntiSpyware:No infections reported

Malwarebytes' Anti-Malware 1.33
Database version: 1654
Windows 5.1.2600 Service Pack 3

2/7/2009 10:48:49 AM
mbam-log-2009-02-07 (10-48-49).txt

Scan type: Quick Scan
Objects scanned: 50869
Time elapsed: 1 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:

Logfile of Trend Micro HijackThis v2.0.2

[Matt]

Don't post HJT-logs in the Spybot forum! For more information read the thread Please do not post HJT logs in the Spybot Forum (http://forums.spybot.info/showthread.php?t=1266) from tashi.

Malware sometimes blocks Spybot and Safer Networking. Just to be sure, please read the sticky thread "BEFORE you POST" (http://forums.spybot.info/showthread.php?t=288) and after that open a new thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22).

A security expert will help you there.

I can't help you yet.

Best regards,
-Matt-

[diggerdave]

Thank You!

[kaa_63]

This happened also to me, and is caused by a worm - see link below.


http://www.bitdefender.com/VIRUS-1000462-en--Win32.Worm.Downadup.Gen.html

I followed their removal recommendations (you'll find it on the bottom of the link page) and eliminated the worm.

BUT!... SPYBOT still not working properly - TeaTimer present in bar and active, updates available, but scaning interface is not present, event the process look like being started (Task manager). Tried also to reset configuration.ini and reinstall.

Any ideas?

[drragostea]

kaa, have you tried renaming the Spybot desktop icon?

[kaa_63]

Thanks, drragostea for your support... actually I'm never using the desktop icon for launching SD.

After several installs/uninstalls, I suspected that somewhere must be a file keeping bad information on SD configuration as settled by the worm... looking attentively (SD not present) in a search report, I discovered AND DELETED a spybotxxxx.pf file in c:/windows/prefetch... and performed a new install, SD Fully working!

Hope this will help..

[Turkey21]

Had exactly the same problem as Dave.Unable to update/start Spybot at all.Scanned with AdAware which
found 'Win32.worm.brontok'.After quarantinening Spybot is working as before