View Full Version : Problems updating Spybot
Elvis316
2009-07-27, 05:40
I am currently having problems updating Spybot S&D from home. Whenever I try running an update, it comes back with a message that "connection cannot be made".
I have turned off firewall, NAV ... even tried running an update without running any program. Still unsuccessful.
I have even tried getting on to the website, but it always comes as blocked. Is there any virus, malware, spyware, etc. that blocks Spybot from making connection to server or the website.
Currently using the forum through the office as it doesnt work at home.
Please help ... I am getting really frustrated.
I have even tried getting on to the website, but it always comes as blocked
What message do you get,if any,when you try to go onto the website?
Are you having any other noticeable problems with your computer?
Elvis316
2009-07-27, 07:46
Just like the usual response when you type in a wrong web-address.
"The Web site cannot be found"
I was just wondering whether there might be a certain virus, malware, spyware, etc. which might be blocking Spybot from connecting to the server and the website for downloading any new updates.
I have even tried downloading the new version of Spybot ... but cannot proceed as the installation tries to connect to the server to update and install the latest definations.
Hi Elvis316,
:welcome: to Safer Networking Forums.
the reason for your problems could be Malware. Just to make sure, here is what you can try:
Spybot doesn't run - What you should do (http://forums.spybot.info/showthread.php?t=50194)
It's worth a try.
Hi,Matt.How are you? :)
Spybot is able to run,it just cannot update.
So I was thinking Elvis316 might want to skip ahead to the end of the Spybot doesn't run FAQ and get checked out in the malware removal forum.
The instructions are here:
http://forums.spybot.info/showthread.php?t=288
Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22
Hi,Matt.
Hi Zenobia! :greeting:
How are you? :)
I'm fine. :D: I've lots of freetime at the moment... muha:
How are you?
Spybot is able to run,it just cannot update.
I am aware of this fact. As you already know, Step # 4 of my sticky post will bring the user to the Malware Removal Forum as well.
Step # 1 - # 3 aren't such a big thing. Moreover, perhaps Spybot can update in safe mode (with network drivers) or it will update because of rename SpybotSD.exe. ;)
Sorry for my intervention. I'll omit it in the future. :red:
So I was thinking Elvis316 might want to skip ahead to the end of the Spybot doesn't run FAQ and get checked out in the malware removal forum.
The instructions are here:
http://forums.spybot.info/showthread.php?t=288
Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22
QFT :bigthumb:
How are you?
I'm good. :)
Elvis316
2009-07-29, 03:45
Thanks Zenobia & Matt.
I have started a thread in the Malware Removal forum.
http://forums.spybot.info/showthread.php?t=50343
Good luck in malware removal. :)
I have a bad feeling about this, and I don't even have enough hard drive space to do a backup before trying all the diagnosing magic y'all use. I'm average-ish when it comes to computer stuff, so please forgive my ignorance.
I get this message when trying to update (old version) or download (new version).
server name or address could not be resolved
What should I do first?
Thanks,
Lori
I have WindowsXP Pro, ie7, firefox 3 (I think).
Also, can someone recommend a not overly priced portable hard drive I can use to (maybe?) keep hooked up to a usb port to transfer my pictures and itunes so it doesn't take up hard drive space and I can still access them when I'm on the computer. (Is that possible?) Anyway, I need to clean out some space so I can do backup.
If you aren't able to get on the http://www.spybot.info/en/home/index.html
site to download Spybot,you could try downloading it from here:
http://fileforum.betanews.com/detail/Spybot-Search-Destroy/1043809773/1
(You'd want the blue button that says Download Now (15,650 kb))
Once it's downloaded,see if this link will work to get you the updates manually:
http://www.spybotupdates.biz/updates/files/spybotsd_includes.exe
What firewall do you use?
Are you having any other noticeable problems on your computer?
I'm not real familiar with external hard drives,I've never used one,but this one lists ten good ones.Articles a bit dated,though,it's from Dec.2008. :)
http://www.pcworld.com/article/123728/top_10_external_hard_drives.html
Hi Zenobia!
Thanks for getting back to me! :D:, and thanks for the article link on the hard drives. Sorry I stuck that in at the end.
How I got it to work:
I deleted 2 p2p programs I never used, deleted my temp files/cookies/etc. Updated and ran my AVG scan (3 hrs!) and it found nothing. This morning I ran my old spybot program so it could find what it could. It found coupon bar (always on mine as I download coupons all the time) and some other one called Zblob or something...DNS trojan? Anyway, I had to re-start and re-scan for the Z-one to get removed, then I was able to update and get the new version of Spybot. I have to do some tasks this am, then I'm going to delete my temp files again and scan with the updated spybot.
Other issues:
Other than my computer slowing to a crawl yesterday,my Internet explorer 7 has had a crash issue since I've downloaded it. It usually happens when I'm runing Itunes at the same time and not always right away. If it doesn't freeze up when I'm using it, I always get an error message that it has to send to Microsoft when I try to close it. Also recently (but I fixed it somehow without ruining my computer) My windows installer was missing or corrupted or something, (I knew because I couldn't install the new version of itunes). Well, AVG had a major faux paux and ID'd all itunes files as trojans, and before I checked, I had deleted enough for my itunes not to work. I found an article on how and which installer to install, and to how to unregister and then re-register it. Apparently it un-registered itself during an update at some point. I also had been getting re-directed to search engines when I try to go to some websites.
Firewall
I only have the one from Windows (and everytime I turn the computer on, it tells me my firewall is not on, and to click the baloon to fix the problem, and when the screen pops up, it says everything is on. Anyway, I read that that is not a good firewall for protection. I use the AVG free edition 8.5 for my other security. What kind of firewall can I use that won't cause a conflict and slow my computer down? (a link to another post is fine since you've probably answered this question a thousand times!)
Thanks again.
Lori
Hi. :)
Glad you were able to get the updated version of Spybot. :)
After you update and scan with the new version of Spybot,can you let me know if you still get redirected to search engines when you try to go to some websites?
This link lists some different firewalls:
http://www.bleepingcomputer.com/tutorials/tutorial60.html#pop
When I had my XP,I really liked Kerio firewall.I had Zone Alarm free before that,and that was pretty good,too. :)
If you do download and install another firewall,you should turn off Windows Firewall afterwards,since it's not a good idea to run two firewalls at the same time.
To disable Windows Firewall,click Start,click Run,type Firewall.cpl,and then click OK.
On the General tab, click Off (not recommended),then click OK.
Thanks again, and I'll let you know if I have that problem. I haven't noticed it today, but I didn't go many places and do many searches today.
Have a good evening!
Lori
Ok,thanks.
I hope you have a good evening,too. :)
I re-scanned, after hardly doing any internet yesterday, and I got 3 different things on scan, 2 that I had just removed that morning, and one new one. This time the new one and the zblob DNS thing was fixed, and the coupon bar had to be removed upon restart. I'm on my hubby's work computer now, so I don't know how it's behaving yet. I'll let you know if it starts.
Thanks,
Lori
Could you do another scan with Spybot,then when the scans done,could you rightclick somewhere in the results list and select Copy Results To Clipboard?
Then come back and paste the results here. :)
I re-did the scan after updating and I think this is the log. I "cleaned" it off again and the log looked the same I think. I have since read about this Zlob DNS changer on the site and it sounds like I may have to re-set mymodem or something like that. We have a Sprint 645 series DSL modem (with Embarq now) and a Linksys wirelss modem or router or whatever it is that lets us use the laptop in the living room.
Anyway, here's the log:
Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10
Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{04E86D13-7EF8-4E7C-8CE3-F1DAC53A3420}\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2008-07-30 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2004-04-27 unins000.exe (51.13.0.0)
2009-07-31 unins001.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-07-28 advcheck.dll (1.6.3.17)
2007-04-02 aports.dll (2.1.0.0)
2004-05-12 borlndmm.dll (7.0.4.453)
2004-05-12 delphimm.dll (7.0.4.453)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2004-05-12 UnzDll.dll (1.73.1.1)
2004-05-12 ZipDll.dll (1.73.2.0)
2009-05-19 Includes\Adware.sbi (*)
2009-07-28 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-07-28 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2009-07-28 Includes\HijackersC.sbi (*)
2009-06-23 Includes\Keyloggers.sbi (*)
2009-07-28 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-07-14 Includes\Malware.sbi (*)
2009-07-28 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-07-28 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-07-28 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-07-28 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2009-07-22 Includes\Trojans.sbi (*)
2009-07-28 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
I hope that's what you asked for. If not, let me know. I may not be able to respond instantly because I have work (yay!) during the next few days, and my hubby HATES it when I'm on the computer when he's home, so I try not to, but the small jobs I'm doing require computer reporting, so I might be able to sneak a peek at any messages or at least run the scans and let them run in the evening and report in the morning. Ok, I'll shut up now:)
Thanks again!
Lori
Yes,that's the log I wanted to see. :)
Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #1 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10
Zlob.DNSChanger: [SBI $041D1396] TCP/IP Settings #2 (Undefined) (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{04E86D13-7EF8-4E7C-8CE3-F1DAC53A3420}\DhcpNameServer=208.67.220.220,208.67.222.222 204.117.214.10
When you have time,could you ask about those entries in the false positives forum?I'm uncertain about them,it's showing when I search on them that they might be from Opendns.
There's a sticky topic at the top to show you how to report a false positive.
http://forums.spybot.info/showthread.php?t=19117
False positives forum:
http://forums.spybot.info/forumdisplay.php?f=16
You can also show a link to this topic if you like when you post in false positives,since your log is already posted here,etc.
http://forums.spybot.info/showthread.php?t=50292
It's back to not letting me update spybot anymore or go to the safe networking home page. I don't know if I am kept from other home pages or not. The computer is S L O W again and I scanned with spybot an that DNS changer thing is still there. It let me update my AVG, so that's ok. Looks like I can't use the update feature for my Windows XP. I'm trying from the MS website, but no success there either. I get the IE can't display the webpage. Something is re-directing or blocking the websites. What should I do first? I haven't posted in the false positive forum yet, but I still can, this just doesn't seem false to me, but you probably have another reason for wanting that post. I have to go do things out of the house, so I might not be able to get right back.
Thanks,
Lori
It would probably be best if you ask for help in Malware Removal then,and skip posting in false positives. :)
Please read and follow the procedures here:
http://forums.spybot.info/showthread.php?t=288
Malware Removal:
http://forums.spybot.info/forumdisplay.php?f=22