View Full Version : Spybot Hang on Boot Scan
PugLuv78
2012-10-26, 19:29
Hello, I am having a slight problem. I run spybot and everything is fine. However, it wants to do a boot scan so it can delete something. I click ok and restart my computer. It starts running fine until down bottom it says "MYPOINTS" and then at this point it hangs. It will hang for a couple hours allowed or until I manually restart my computer. How can I get spybot to do a bootscan without hanging at MYPOINTS?
Thank you,
Cathy
You could temporarily get Spybot to ignore MyPoints to see if the scan will complete,as long as that isn't what it is running on startup to delete.Before you start your next scan,open Spybot,click Mode,select Advanced Mode,then Settings,Ignore Products.On the All Products tab,scroll through until you find MyPoints,and checkmark it.
Also,can you tell me what Spybot is finding when it offers to run on startup?
PugLuv78
2012-10-27, 21:53
You could temporarily get Spybot to ignore MyPoints to see if the scan will complete,as long as that isn't what it is running on startup to delete.Before you start your next scan,open Spybot,click Mode,select Advanced Mode,then Settings,Ignore Products.On the All Products tab,scroll through until you find MyPoints,and checkmark it.
Also,can you tell me what Spybot is finding when it offers to run on startup?
Thank you for the responce. Interestingly enough, the bootscan got past MYPOINTS after I turned myscreansaver off. However, it simply hung on eblast (or something like that) so I excluded it. Then it hung on somethinge else.
Frankly, I'm not sure it's even worth the hassle of using bootscan. When I run spybot from my desktop everything gets found and deleted fine....except babaloyn toolbar. I don't have babaloyn installed and it keeps showing up on my scans from desktop. This is what prompts Spybot to scan from boot.
Love spybot, but since babaloyn is the only thing prompting a bootscan and I know it's not installed maybe I should just leave well enough alone.
Thanks for any information though, I would appreiate any ideas.
Cathy
You're welcome. :)
Okay,you can uncheck MyPoints and eblast in ignore products,then,so that Spybot will search for them again.
Could you show me your logfile?
Open SpyBot.
Check for problems.
At the end of the scan,when Spybot prompts to run at startup,click No. Instead,right click on the results list, select "Copy results to clipboard".
Paste (Ctrl+V) those results here.
PugLuv78
2012-10-28, 02:36
I used an attachment for the log you asked for. It was too long and wouldn't allow me to post. In fact, it was so long I zipped it to send it. Hope this sheds some light,
Cathy
:thanks:
That looks like it's your full Spybot logfile,and unfortunately,the top part was cut off.That's the part I wish to look at. :)
Could you open Spybot,click Mode,Advanced Mode,Tools,View Report,then View Previous Report.Scroll through until you find a fixes log with the date of your most recent scan.It is in this format:Fixes.yymmdd-hhmm.
Doubleclick it,it will open in the Spybot window.Rightclick,select Select All,then rightclick and Copy and Paste it here.
PugLuv78
2012-10-29, 01:32
That looks like it's your full Spybot logfile,and unfortunately,the top part was cut off.That's the part I wish to look at. :)
Could you open Spybot,click Mode,Advanced Mode,Tools,View Report,then View Previous Report.Scroll through until you find a fixes log with the date of your most recent scan.It is in this format:Fixes.yymmdd-hhmm.
Doubleclick it,it will open in the Spybot window.Rightclick,select Select All,then rightclick and Copy and Paste it here.
Oh, ok. Here is it what it says,
--- Report generated: 2012-10-27 20:30 ---
Babylon.Toolbar: [SBI $E02AA723] Settings (Registry key, fixing failed)
HKEY_USERS\S-1-5-21-2414097465-866054100-2422946111-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Right Media: Tracking cookie (Internet Explorer: User) (Cookie, fixed)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2012-10-26 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2012-10-24 Includes\Adware.sbi (*)
2012-10-24 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2012-09-26 Includes\DialerC.sbi (*)
2012-01-31 Includes\HeavyDuty.sbi (*)
2012-10-16 Includes\Hijackers.sbi (*)
2012-09-25 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2012-03-13 Includes\Keyloggers.sbi (*)
2012-03-13 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2012-08-28 Includes\Malware.sbi (*)
2012-10-24 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2012-10-15 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2012-06-19 Includes\Security.sbi (*)
2011-12-13 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-09-05 Includes\Spyware.sbi (*)
2012-09-04 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2011-09-28 Includes\Trojans.sbi (*)
2012-10-22 Includes\TrojansC-02.sbi (*)
2012-10-24 Includes\TrojansC-03.sbi (*)
2012-10-09 Includes\TrojansC-04.sbi (*)
2012-08-31 Includes\TrojansC-05.sbi (*)
2012-10-19 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
This looks much cleaner. Hope this helps!
Yes,it does,thank you. :)
I hope you don't mind,but enough people have posted here that Spybot is detecting basically the same thing that is listed in your logfile,and most tell me they don't have babylon toolbar installed.So,I'm kind of curious to see what it is named.If you wouldn't mind,I'd like to look before continuing on.
Could you please open Spybot,click Mode,Advanced Mode,Tools,BHOS.In the Spybot window rightclick and select Copy to Clipboard,then paste it here.
PugLuv78
2012-10-30, 17:31
Sure, anything I can do to help.
Here we go.
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2012-10-26 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2012-10-24 Includes\Adware.sbi
2012-10-24 Includes\AdwareC.sbi
2010-08-13 Includes\Cookies.sbi
2010-12-14 Includes\Dialer.sbi
2012-09-26 Includes\DialerC.sbi
2012-01-31 Includes\HeavyDuty.sbi
2012-10-16 Includes\Hijackers.sbi
2012-09-25 Includes\HijackersC.sbi
2010-09-15 Includes\iPhone.sbi
2012-03-13 Includes\Keyloggers.sbi
2012-03-13 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2012-08-28 Includes\Malware.sbi
2012-10-24 Includes\MalwareC.sbi
2011-02-24 Includes\PUPS.sbi
2012-10-15 Includes\PUPSC.sbi
2010-01-25 Includes\Revision.sbi
2012-06-19 Includes\Security.sbi
2011-12-13 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2012-09-05 Includes\Spyware.sbi
2012-09-04 Includes\SpywareC.sbi
2010-03-08 Includes\Tracks.uti
2011-09-28 Includes\Trojans.sbi
2012-10-22 Includes\TrojansC-02.sbi
2012-10-24 Includes\TrojansC-03.sbi
2012-10-09 Includes\TrojansC-04.sbi
2012-08-31 Includes\TrojansC-05.sbi
2012-10-19 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} (AcroIEHelperStub)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: AcroIEHelperStub
CLSID name: Adobe PDF Link Helper
Path: C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelperShim.dll
Short name: ACROIE~2.DLL
Date (created): 7/27/2012 4:51:32 PM
Date (last access): 8/16/2012 8:13:24 PM
Date (last write): 7/27/2012 4:51:32 PM
Filesize: 63944
Attributes: archive
MD5: BA0ED7AA3C36A8DA27DED1D6B3508158
CRC32: BFE061AC
Version: 10.1.4.38
{53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Spybot-S&D IE Protection
description: Spybot-S&D IE Browser plugin
classification: Legitimate
known filename: SDHelper.dll
info link: http://www.safer-networking.org/
info source: Safer-Networking Ltd.
Path: D:\PROGRA~2\SPYBOT~1\
Long name: SDHelper.dll
Short name:
Date (created): 10/26/2012 12:49:02 PM
Date (last access): 10/26/2012 12:49:02 PM
Date (last write): 1/26/2009 3:31:02 PM
Filesize: 1879896
Attributes: archive
MD5: 022C2F6DCCDFA0AD73024D254E62AFAC
CRC32: 5BA24007
Version: 1.6.2.14
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (Java(tm) Plug-In SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In SSV Helper
Path: C:\Program Files (x86)\Java\jre7\bin\
Long name: ssv.dll
Short name:
Date (created): 9/25/2012 12:02:30 AM
Date (last access): 10/18/2012 12:50:52 PM
Date (last write): 9/25/2012 12:02:30 AM
Filesize: 449512
Attributes: archive
MD5: A7A6954E500715117B64B414AB81CB44
CRC32: EE09721D
Version: 10.9.2.5
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (avast! WebRep)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: avast! WebRep
Path: D:\Program Files\AVAST Software\Avast\
Long name: aswWebRepIE.dll
Short name: ASWWEB~1.DLL
Date (created): 10/23/2012 9:42:54 PM
Date (last access): 10/23/2012 6:17:30 AM
Date (last write): 10/23/2012 6:17:30 AM
Filesize: 1227224
Attributes: archive
MD5: 34F609E26764F610426C1D7DE2192B75
CRC32: 8322B7B1
Version: 7.0.1473.755
{9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live ID Sign-in Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Windows Live ID Sign-in Helper
Path: C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\
Long name: WindowsLiveLogin.dll
Short name: WINDOW~1.DLL
Date (created): 8/18/2009 11:32:12 AM
Date (last access): 7/21/2012 8:57:48 PM
Date (last write): 8/18/2009 11:32:12 AM
Filesize: 403840
Attributes: archive
MD5: D46ED7D33E847CD9E78E9F02910536B5
CRC32: A5B7CE0C
Version: 6.500.3165.0
{AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Google Toolbar Helper
description: Google toolbar
classification: Open for discussion
known filename: googletoolbar.dll
info link: http://toolbar.google.com/
info source: TonyKlein
Path: C:\Program Files (x86)\Google\Google Toolbar\
Long name: GoogleToolbar_32.dll
Short name: GOOGLE~1.DLL
Date (created): 9/17/2012 12:49:50 AM
Date (last access): 9/17/2012 12:49:50 AM
Date (last write): 10/3/2012 6:32:48 PM
Filesize: 192144
Attributes: archive
MD5: 300E3336B7BD92A29404E6157521C120
CRC32: CA9846A2
Version: 7.4.3230.2052
{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files (x86)\Java\jre7\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 9/25/2012 12:02:30 AM
Date (last access): 10/18/2012 12:50:52 PM
Date (last write): 9/25/2012 12:02:30 AM
Filesize: 155384
Attributes: archive
MD5: EB47E405A9222CA595E5E763B4156529
CRC32: 712D0563
Version: 10.9.2.5
Thank you very much,I've been wondering about that for ages.I appreciate it :)
I don't see it there,I might have been mistaken about the item in your logfile being a bho.
There was a recent false positive with Babylon Toolbar,but the false positives listed don't match the one in your logfile:
http://forums.spybot.info/showthread.php?t=66912
Since it isn't being fixed,you could ask for help in malware removal.
Please read "Before you post":
http://forums.spybot.info/showthread.php?t=288
Malware Removal:
http://forums.spybot.info/forumdisplay.php?f=22