PDA

View Full Version : Fake Subscription Service



Bobbi
2010-08-15, 16:15
Hi,

I lock the Internet, then I run Spybot it finds "Fake Subscription Service." I click to remove it, am told it has been removed. Then if I run Spybot again before doing anything else, I am told it has found "Fake Subscription Service" again. Why? It was supposed to be removed.

On occasion I have run Spybot while connected to the Internet, it removes "Fake Subscription Service" and if I run it immediately again, my system is clean.

Bobbi

Zenobia
2010-08-15, 23:24
Could you please do this?

Open SpyBot.
Check for problems.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Paste (Ctrl+V) those results here.

Widow
2010-09-30, 19:35
FAKE SUBSCRIPTION SERVICE keeps re-appearing on subsequent scans! I, too, have received the fact that the SPYBOT scan has found FAKE SUBSCRIPTION SERVICE. When expanded it shows: "Bookmark [Firefox: Computer Owner {default}] Make-My-Baby [http://www.make-my-baby.com/... and also shows:
"BOOKMARK."

Supposedly, Spotbot removes it; when Spybot is run immediately again, it shows clean. However, days later, it reappears in another SPYBOT scan! :devil: A file search in Windows XP cannot find this bookmark!:sad:

How does one find this "Bookmark" and get rid of it. I'd like to send it to Hades PERMANENTLY?:angel:

tashi
2010-09-30, 19:47
Hello Widow,

Could you please do this?

Open SpyBot.
Check for problems.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Paste (Ctrl+V) those results here.


Could you do that please, as suggested to the topic starter. :)

Best regards.

Widow
2010-09-30, 21:07
When I run SPYBOT, I get the following:

SPYBOT
V.1.6.2.46
FAKE SUBSCRIPTION SERVICE

FAKE.SUBSCRIPTION SERVICE
Bookmark {Firefox, Computer Owner (default}}
Make-My-Baby (http://www.make-my-baby.com/php/baby/v2/control.php?]

http://www.mywot.com/en/scorecard/make-my-baby.com

When I "repair," it indicates "repaired." When I IMMEDIATELY run a new can, it isn't there. However, if I wait a day or two and run the scan again, THERE IT IS AGAIN! #1 - Does "SPYBOT" repair bookmarks or does it just indicate "repaired" when it is really only suppressed temporarily?

How do I get rid of this once and for all and send it to the etherial? :angel:

Widow
2010-09-30, 21:26
When I "repair" FAKE SUBSCRIPTIION SERVICE and then rerun the SPYBOT scan again, it isn't there. However, a day or two later when I run the SPYBOT scan, there it is! The "repair" function of SPYBOT doesn't seem to work with bookmarks! Is this correct? If so, why not?

If not, how do I find this file entry because a manual review of the Firefox bookmarks does not locate it and using the "search" function on Windows XP does not locate it! I'd like to send this to the etherial! :angel:

Any suggestions from anyone? :thanks:



"SPYBOT
V.1.6.2.46
FAKE SUBSCRIPTION SERVICE

FAKE.SUBSCRIPTION SERVICE
Bookmark {Firefox, Computer Owner (default}}
Make-My-Baby (http://www.make-my-baby.com/php/baby/v2/control.php?])"

===========================

Edit
For the safety of our members, please disable the url when posting.
Web Of Trust (WOT) Rating: http://www.mywot.com/en/scorecard/make-my-baby.com

Gopher John
2010-09-30, 22:36
Have you tried deleting the make-my-baby bookmark from within Firefox itself? In Firefox 3.x, Organize Bookmarks and do a search. If found delete it. Then do a search in history, and select Forget about this site. Close Firefox, reboot and then do another scan with SpyBot Search & Destroy.

Zenobia
2010-09-30, 23:48
Widow,when looking through,I can no longer find Fake.Subscription Service listed in Ignore Products.Either I'm missing it,or maybe it has been removed from the list.
Do you have the latest Spybot updates?

Widow
2010-10-01, 05:07
Have you tried deleting the make-my-baby bookmark from within Firefox itself? In Firefox 3.x, Organize Bookmarks and do a search. If found delete it. Then do a search in history, and select Forget about this site. Close Firefox, reboot and then do another scan with SpyBot Search & Destroy.

THERE IS NO "MAKE-MY-BABY bookmark" in Firefox.


THAT IS THE PROBLEM!

Widow
2010-10-01, 05:10
widow,when looking through,i can no longer find fake.subscription service listed in ignore products.either i'm missing it,or maybe it has been removed from the list.
Do you have the latest spybot updates?


YES, I have the latest Spybot update!

Widow
2010-10-01, 05:13
Have you tried deleting the make-my-baby bookmark from within Firefox itself? In Firefox 3.x, Organize Bookmarks and do a search. If found delete it. Then do a search in history, and select Forget about this site. Close Firefox, reboot and then do another scan with SpyBot Search & Destroy.

Since I can't find it, I can't delete it. The first thing I tried to do was
to find it. NO LUCK!

tashi
2010-10-01, 05:37
Widow,

Post #6
Last edited by tashi; Today at 02:04 PM. By the way, no need for large red fonts. ;-)

Gopher John
2010-10-01, 06:30
Make-my-baby likely won't be the name of the bookmark, but the target URL. It may have any name.

Zenobia
2010-10-01, 07:03
A couple times in the past,Firefox bookmarks were flagged by Spybot,and could not be found in Firefox bookmarks manually by the people having the problem.
One here:
http://forums.spybot.info/showthread.php?t=17072
And AliceZ had a recurring problem with this:
http://forums.spybot.info/showthread.php?t=44504&page=3
http://forums.spybot.info/showthread.php?t=52763
http://forums.spybot.info/showthread.php?t=55277

Why that was happening was never really resolved in any posts,that I can recall.
Do you have a large amount of bookmarks in Firefox,or are there just a few in there?
From the description here http://www.mywot.com/en/scorecard/make-my-baby.com make-my-baby is a site where two pictures are uploaded to see what the two peoples' baby might look like if they had one.Do you recall ever visiting/bookmarking a site like that,or perhaps another user on your computer visiting/bookmarking a site similar to that?

Gopher John
2010-10-01, 16:39
Zenobia, in one of the threads you posted, spybotsandra states that SpyBot S&D detects but does not remove bookmarks. See post http://forums.spybot.info/showpost.php?p=358532&postcount=2

Further down in that same thread I outlined the method I used to remove an old URL to a domain that was taken over by rogues that SpyBot S&D alerted on during a scan. See post http://forums.spybot.info/showpost.php?p=358983&postcount=5. At least for me, it worked and never returned.

Zenobia
2010-10-01, 22:13
Further down in that same thread I outlined the method I used to remove an old URL to a domain that was taken over by rogues that SpyBot S&D alerted on during a scan. See post http://forums.spybot.info/showpost.p...83&postcount=5. At least for me, it worked and never returned.
Yes,I know,I used that method to remove the NI,etc. bookmark after I was done messing around,and it never returned for me,either.

I did not post those threads to say that Spybot was not removing bookmarks flagged.I'm well aware it didn't,because at the time I was adding the NI and Spywareinfo bookmarks to get Spybot to detect them so I could follow along.
I posted the threads to show that in the past people were attempting to remove the bookmarks flagged by Spybot manually from their Firefox bookmarks,and they could not find them in their bookmarks to do so.

A couple times in the past,Firefox bookmarks were flagged by Spybot,and could not be found in Firefox bookmarks manually by the people having the problem.
One here:

Whether it was user error or not was never found out for certain.I see I did get Spybot to detect a bookmark on the other account:
http://forums.spybot.info/showpost.php?p=114056&postcount=7

Why Fake.Subscription Service is being detected baffles me.I've looked for it sideways,backwards,upside-down,and until my eyes crossed,and I don't see it listed anywhere in Spybot,anymore.

Gopher John
2010-10-02, 02:11
In SpyBot S&D I went to Settings | Ignore Products, right clicked and exported to a text file. In searching the text file in EditPad Lite, I couldn't find Fake.Subscription Service line there, either. I see what you mean.

Zenobia
2010-10-02, 09:23
Yes,it's very puzzling,isn't it? :)