PDA

View Full Version : spybot infected?



biker mike
2010-04-17, 19:55
I am getting help on cleaning the drive
recently I was infected, or still in process of getting rid of, the xp defender virus and the google redirect, at the start of the infection, spoybot was affected, when starting spybot, the xp defender would start, and ave.exe, reinstalling spybot stopped it, but more cleaning of the drive is needed,

I noticed when reinstalling, the Immunized domains and such are still as they were, (not zero ) protected. Now without updating I see unprotected domains and IPs turn up when I check, is this normal? how do I fully remove spybot and reinstall ? what file do I look for the immunizations, I fear the virus may have added to the immunzations. I am getting help on cleaning the drive,,, mainly are the new unprotected domians and ips normal or is there something wrong????

----------------------
Edit
http://forums.spybot.info/showthread.php?p=368176#post368176

drragostea
2010-04-18, 05:13
Spybot-Search&Destroy is not infected. I think you have trouble Immunizing your machine because your computer is infected. The best thing to do now is to find help on this forum.

The malware forum is a good place start:
http://forums.spybot.info/forumdisplay.php?f=22
-
But FIRST, please read this thread by tashi:
http://forums.spybot.info/showthread.php?t=288
-
It will give you everything you need to know and start your way to clean your machine.

biker mike
2010-04-20, 15:58
hmmm seems that after uninstalling spybot completely, and deleting the hidden files, then reinstalling, spybot is now working correctly.
during the infection "xp defender" spybot was changed, it turned on the teatimer , which I never use or select at install, bringing up spybot for a scan would make the xp defender pops appear with a file ave.exe. shuting down the process ave,exe, would disable spybot and stop the zp defender popups after the computer was cleaned,no more pop ups but one of the hidden files for spybot was causing some domains and ips to show as unprotected without even doing an update. again after uninstalling spybot completely, and deleting the hidden files, then reinstalling, spybot is now working correctly.
its not the first time spybot was targeted and teatimer presenting a problem, dont shoot the messenger, would love to recreate, but, I aint going thru that again