View Full Version : System Scan won't scan.
Deaf Dave
2013-03-22, 04:31
The System Scan will not open to scan.
I am able to update, immunize, Rootkit Quick as well as Rootkit Deep scan.
I am also able to access my logs, everything but do a system scan! When I click to open the system scan, the scan icon appears in the notify tray and does not appear on my desktop. The scan will not start or appear on the desktop and there is no activity reported by the task manger. I have even uninstalled and re-installed to no avail. Anyone have any idea how to fix this?
Thank you
spybotsandra
2013-03-22, 13:07
Hello,
Does the SDScan run in the taskmanager?
Best regards
Sandra
Team Spybot
Deaf Dave
2013-03-23, 01:15
no, the task manager shows no SpyBot S&D activity.
as mentioned I have uninstalled and reinstalled it twice. it didn't help.
I have Win7 Home Premium SP 1 (64 bit) if that's of any help.
spybotsandra
2013-03-25, 12:45
Hello,
Please open the SDScan.exe manually from your Spybot folder:
Windows XP: C:\Program Files\Spybot - Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot - Search & Destroy 2
Do you run any other security software?
How long did you wait for the scan to come up?
Best regards
Sandra
Team Spybot
Deaf Dave
2013-03-26, 06:12
Hi Sandra,
I tried to run the program manually from the Programs (x86) folder and the SDSScan.exe never opens nor does the Task Manager show any activity.
Also, the TeaTimer does not show in Task Manager.
I have run antivirus (SuperAntiSpyware, Avast Internet Security, Bit Defender) and antimalware (Avast & MalwareBytes) scans and none reported any infections. These are my usual security programs other than Windows Defender. I also ran TDSSKiller & Sophos Virus Removal Tool and these came up clean also. So it would appear that my system is free of 'bugs'.
I usually ran the SDScan.exe once a month (Updates & Immunizations daily) and never had a problem until the last time I tried to run it. I hope this helps.
Thank you.
My System Scan is not working either, from both the Start Center and the executable file itself in the Spybot folder.
All the commands are italicised as if it were running, but none of the menu commands can be used.
Anyone know what's going on here?
bbnetwork
2013-04-07, 08:14
Please download Hijackthis, rename the executable and run it as Administrator.
Into Hijackthis select "Perform a scan and safe a logfile".
Please copy the content of this log into forum.
Hijackthis isn't allowed to be posted in this forum section,bbnetwork(it also isn't used here anymore):
No Malware logs are to be posted in any of our other forums.
From:
http://forums.spybot.info/showthread.php?t=288
Hijackthis isn't allowed to be posted in this forum section,bbnetwork(it also isn't used here anymore):
From:
http://forums.spybot.info/showthread.php?t=288
So ... where do I go from here?
Start scan, Pause scan, Stop scan, Fix selected, and Save scan log... are all italicized and unusable when I try to start a System Scan
:confused:
Could you attempt to start a System Scan again,and then start Task Manager,select the Processes tab,scroll down and see if sdscan.exe is listed there?
bbnetwork
2013-04-08, 12:41
@Ptath too:
Did you try, if the protected Repair.Enviroment of Spybot is working?
You also could start Windows in Safe-Mode and try a Scan with Spybot there.
Does the Scan freeze in Safe-Mode too?
Do you use any AntiVirus-Software?
Could you attempt to start a System Scan again,and then start Task Manager,select the Processes tab,scroll down and see if sdscan.exe is listed there?
I checked that out and have attached a screen print to show it is not running.
Paul
http://img16.imageshack.us/img16/5503/spybotandtaskmanager.png
Okay,thanks.
I see from your task manager,it looks like you have Windows 8,is that correct? :)
I was able to do this with no apparent problems,so maybe you can try it.
First,could you follow this post to Show Extensions for Known File Types:
http://www.groovypost.com/howto/windows-8-display-file-extensions/
Then,could you go to C:\Program Files (x86)\Spybot - Search & Destroy 2(or C:\Program Files\Spybot - Search & Destroy 2,whichever applies.)Locate SDScan.exe,rightclick and select Copy,then paste it within the Spybot folder.You might have to say yes to UAC when pasting it into the Spybot folder.
That should give you SDScan - Copy.exe.
Rightclick SDScan - Copy.exe,select Rename,and remove the whole Sdscan.exe,including the .exe extension.
Please rename it to screen.scr
If prompted with "If you change a file name extension, the file may become unusable...",please select yes.
Doubleclick screen.scr,are you able to Start a Scan,or is it still italicized?
@Ptath too:
Did you try, if the protected Repair.Enviroment of Spybot is working?
You also could start Windows in Safe-Mode and try a Scan with Spybot there.
Does the Scan freeze in Safe-Mode too?
Do you use any AntiVirus-Software?
I use Webroot SecureAnywhere.
Okay,thanks.
I see from your task manager,it looks like you have Windows 8,is that correct? :)
I was able to do this with no apparent problems,so maybe you can try it.
First,could you follow this post to Show Extensions for Known File Types:
http://www.groovypost.com/howto/windows-8-display-file-extensions/
Then,could you go to C:\Program Files (x86)\Spybot - Search & Destroy 2(or C:\Program Files\Spybot - Search & Destroy 2,whichever applies.)Locate SDScan.exe,rightclick and select Copy,then paste it within the Spybot folder.You might have to say yes to UAC when pasting it into the Spybot folder.
That should give you SDScan - Copy.exe.
Rightclick SDScan - Copy.exe,select Rename,and remove the whole Sdscan.exe,including the .exe extension.
Please rename it to screen.scr
If prompted with "If you change a file name extension, the file may become unusable...",please select yes.
Doubleclick screen.scr,are you able to Start a Scan,or is it still italicized?
Still cannot start a scan after following these instructions.
The menu items are all still italicized.
You should still be able to run a System Scan without running as Administrator,but just to see what happens,could you open Spybot-S&D Start Center,then rightclick System Scan,and select Run As Administrator.Does the scan start,or does it still show the System Scan window with Start a scan italicized? :)
You should still be able to run a System Scan without running as Administrator,but just to see what happens,could you open Spybot-S&D Start Center,then rightclick System Scan,and select Run As Administrator.Does the scan start,or does it still show the System Scan window with Start a scan italicized? :)
Did not run ... everything still italicized.
bbnetwork
2013-04-10, 05:36
Did you try, if the protected Repair.Enviroment of Spybot is working?
You also could start Windows in Safe-Mode and try a Scan with Spybot there.
Does the Scan freeze in Safe-Mode too?
Asking this again since you did not reply to it.
I'm seeing that the F8 method for safe mode no longer works in Windows 8.Maybe you've been in safe mode on your computer before,but I thought I'd put on these instructions,just in case you haven't. :)
http://www.bleepingcomputer.com/tutorials/start-windows-8-in-safe-mode/
Did the System Scan run okay before,and it just suddenly started not working?
I'm seeing that the F8 method for safe mode no longer works in Windows 8.Maybe you've been in safe mode on your computer before,but I thought I'd put on these instructions,just in case you haven't. :)
http://www.bleepingcomputer.com/tutorials/start-windows-8-in-safe-mode/
Did the System Scan run okay before,and it just suddenly started not working?
For Zenobia and bbnetwork:
I appreciate the responses.
Booting in Safe Mode did not help. All five scan option menu items are still italicized.
In Spybot Advanced Mode, I tried "Repair Environment" but its functionality is only available to licensed users. I'm just a basic user. I also tried "System Repair" and followed instructions and fixed what that module found, but scan still doing the same thing.
I think this started sometime in the past month. It was working fine previously but, due to an unforeseen hospital stay I had not performed a manual scan and the machine was turned off for most of that month. It was upon my return from the hospital that I encountered the current problem when I tried to do a manual scan.
Sorry to hear you had an unexpected hospital stay.
Is the only problem you're having on your computer Spybot not running the System Scan?Everything else seems normal? :)
Could you open Spybot-S&D Start Center,click System Scan,then over to the left,click Show Previous Logs.There should be a bunch of Checks logfiles there with the dates and times at the end of them(it will be named something like this,for an example:Checks.130223-0232.txt)
Could you scroll down to the Checks logfile with the latest available date,doubleclick it to open it,then go to Edit,Select All.Rightclick the highlighted text,then select Copy,then Paste it here,please.
Sorry to hear you had an unexpected hospital stay.
Is the only problem you're having on your computer Spybot not running the System Scan?Everything else seems normal? :)
Could you open Spybot-S&D Start Center,click System Scan,then over to the left,click Show Previous Logs.There should be a bunch of Checks logfiles there with the dates and times at the end of them(it will be named something like this,for an example:Checks.130223-0232.txt)
Could you scroll down to the Checks logfile with the latest available date,doubleclick it to open it,then go to Edit,Select All.Rightclick the highlighted text,then select Copy,then Paste it here,please.
As requested, here's the last log. Everything else seems to be running fine:
Search results from Spybot - Search & Destroy
2/15/2013 10:05:06 AM
Scan took 00:14:01.
22 items found.
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\eaassets-a.akamaihd.net\analytics.sol
Properties.size=393
Properties.md5=FE8CC58ACED49CEF9C24FE85AC7A0485
Properties.filedate=1360946069
Properties.filedatetext=2013-02-15 08:34:29
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\login.yahoo.com\loginCache.sol
Properties.size=158
Properties.md5=54B843CB4BAA938E95B57473E2DD4590
Properties.filedate=1360097212
Properties.filedatetext=2013-02-05 12:46:52
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\player.ooyala.com\auth.sol
Properties.size=70
Properties.md5=0A7B3EF71FB8DD5D35ACDB5620ECF116
Properties.filedate=1359764698
Properties.filedatetext=2013-02-01 16:24:57
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\player.ooyala.com\auth2.sol
Properties.size=295
Properties.md5=2065FC105637C1278B9EE3ED0CB6AF92
Properties.filedate=1359767743
Properties.filedatetext=2013-02-01 17:15:43
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\player.ooyala.com\perf.sol
Properties.size=127
Properties.md5=D8EB9F330A7C095F8551F9600D5C1F78
Properties.filedate=1359767732
Properties.filedatetext=2013-02-01 17:15:31
Macromedia.FlashPlayer.Cookies: [SBI $6AA61750] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\s.ytimg.com\videostats.sol
Properties.size=275
Properties.md5=236860A2C5296934D7B0FF0B02FAE588
Properties.filedate=1360947076
Properties.filedatetext=2013-02-15 08:51:15
Macromedia.FlashPlayer.Cookies: [SBI $1EF45977] Text file (File, nothing done)
C:\Users\paulmhine\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\2VZADRUH\skype.com\#ui\preferences.sol
Properties.size=219
Properties.md5=50EE9A8FF22A28ED9E8D7DAC6DBF67B5
Properties.filedate=1360817891
Properties.filedatetext=2013-02-13 20:58:10
Right Media: [SBI $8E73A7FB] Tracking cookie (Internet Explorer (User): paulmhine) (Browser: Cookie, nothing done)
Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\Internet Explorer\TypedURLs
MS Direct3D: [SBI $7FB7B83F] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\MostRecentApplication\Name
MS DirectDraw: [SBI $EB49D5AF] Most recent application (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication\Name
MS DirectInput: [SBI $9A063C91] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\DirectInput\MostRecentApplication\Name
MS DirectInput: [SBI $7B184199] Most recent application ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\DirectInput\MostRecentApplication\Id
Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources
Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName
Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID
Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-2042559852-2415469099-4157972602-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber
Cookie: [SBI $49804B54] Browser: Cookie (38) (Browser: Cookie, nothing done)
Cache: [SBI $49804B54] Browser: Cache (1150) (Browser: Cache, nothing done)
History: [SBI $49804B54] Browser: History (865) (Browser: History, nothing done)
Cookie: [SBI $49804B54] Browser: Cookie (7) (Browser: Cookie, nothing done)
--- Spybot - Search & Destroy version: 2.0.12.131 DLL (build: 20121113) ---
2012-11-13 blindman.exe (2.0.12.151)
2012-11-13 explorer.exe (2.0.12.173)
2012-11-13 SDBootCD.exe (2.0.12.109)
2012-11-13 SDCleaner.exe (2.0.12.110)
2012-11-13 SDDelFile.exe (2.0.12.94)
2012-11-13 SDFiles.exe (2.0.12.135)
2012-11-13 SDFileScanHelper.exe (2.0.12.1)
2012-11-13 SDFSSvc.exe (2.0.12.205)
2012-11-13 SDImmunize.exe (2.0.12.130)
2012-11-13 SDLogReport.exe (2.0.12.107)
2012-11-13 SDPESetup.exe (2.0.12.3)
2012-11-13 SDPEStart.exe (2.0.12.86)
2012-11-13 SDPhoneScan.exe (2.0.12.27)
2012-11-13 SDPRE.exe (2.0.12.13)
2012-11-13 SDPrepPos.exe (2.0.12.10)
2012-11-13 SDQuarantine.exe (2.0.12.103)
2012-11-13 SDRootAlyzer.exe (2.0.12.116)
2012-11-13 SDSBIEdit.exe (2.0.12.39)
2012-11-13 SDScan.exe (2.0.12.173)
2012-11-13 SDScript.exe (2.0.12.53)
2012-11-13 SDSettings.exe (2.0.12.130)
2012-11-13 SDShred.exe (2.0.12.105)
2012-11-13 SDSysRepair.exe (2.0.12.101)
2012-11-13 SDTools.exe (2.0.12.150)
2012-11-13 SDTray.exe (2.0.12.127)
2012-11-13 SDUpdate.exe (2.0.12.89)
2012-11-13 SDUpdSvc.exe (2.0.12.76)
2012-11-13 SDWelcome.exe (2.0.12.126)
2012-11-13 SDWSCSvc.exe (2.0.12.2)
2013-01-24 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2012-11-13 SDAdvancedCheckLibrary.dll (2.0.12.98)
2012-11-13 SDECon32.dll (2.0.12.113)
2012-11-13 SDECon64.dll (2.0.12.113)
2012-11-13 SDEvents.dll (2.0.12.2)
2012-11-13 SDFileScanLibrary.dll (2.0.12.9)
2012-11-13 SDHelper.dll (2.0.12.88)
2012-11-13 SDImmunizeLibrary.dll (2.0.12.2)
2012-11-13 SDLists.dll (2.0.12.4)
2012-11-13 SDResources.dll (2.0.12.7)
2012-11-13 SDScanLibrary.dll (2.0.12.131)
2012-11-13 SDTasks.dll (2.0.12.15)
2012-11-13 SDWinLogon.dll (2.0.12.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2012-11-13 Tools.dll (2.0.12.36)
2012-11-13 UninsSrv.dll (2.0.12.52)
2012-12-18 Includes\Adware.sbi (*)
2013-01-22 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2012-11-14 Includes\Dialer.sbi (*)
2012-11-14 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2012-11-14 Includes\Hijackers.sbi (*)
2012-11-14 Includes\HijackersC.sbi (*)
2012-11-14 Includes\iPhone.sbi (*)
2012-11-14 Includes\Keyloggers.sbi (*)
2012-12-18 Includes\KeyloggersC.sbi (*)
2012-11-21 Includes\Malware.sbi (*)
2013-01-22 Includes\MalwareC.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2013-01-22 Includes\PUPSC.sbi (*)
2012-11-14 Includes\Security.sbi (*)
2012-11-14 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2012-11-14 Includes\Spyware.sbi (*)
2012-11-14 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2013-01-16 Includes\Trojans.sbi (*)
2013-01-17 Includes\TrojansC-02.sbi (*)
2013-01-22 Includes\TrojansC-03.sbi (*)
2013-01-21 Includes\TrojansC-04.sbi (*)
2012-11-14 Includes\TrojansC-05.sbi (*)
2012-12-03 Includes\TrojansC.sbi (*)
Thanks for posting your latest Checks logfile. :)
Looks like it was standard stuff,just some flash cookies,a few tracking cookies and some usage tracks.
I tried removing SDScanLibrary.dll or anything else that looked like it might be connected to SDScan.exe from my Spybot - Search & Destroy 2 folder to see if I could get the same italicized results as you,but removing anything resulted in a warning from Spybot that it was missing files.
I tried removing the Includes,but Spybot will still scan with those gone,it just only takes a few seconds.
Ending process in Task Manager on SDScan.exe always resulted in the System Scan window closing.
If anything was preventing SDScan from starting,your booting into safe mode would hopefully prevent that,and it would run.
I'd ordinarily suspect that it might be some sort of malware stopping SDScan from running,but since your computer was off for nearly a month and everything is acting normal,I am a bit skeptical of that being the problem.
I also tried opening Remove Temporary files,Disable 3rd Party cookies,etc. both while a scan was running and when it wasn't to see if you might be being prompted by a window hidden behind System Scan,but that always resulted in either Start Scan or Pause scan and Stop scan,still being selectable.
I don't think this can be the problem,but please do start System Scan and then minimize the System Scan window and the Start Center window to the taskbar,just to be sure. :)
Zenobia ...
No hidden windows.
I tried another uninstall/reinstall via the Control Panel, but all 5 Scan menu items are still italicized. All other Start Center functions run normally.
Okay,sorry to hear the reinstall didn't work.
Since you've tried just about everything,would you like to get checked out in the malware removal forum,just in case it's something hidden?
They don't ordinarily do checkups in there,but Spybot is a security program,and it's not being able to run could possibly be due to some sort of malware,so it should be okay for you to post in there. :)
There are instructions here:
http://forums.spybot.info/showthread.php?t=288
Malware Removal:
http://forums.spybot.info/forumdisplay.php?f=22
You could also add a link to this thread in your post.
If you do go to malware removal,and nothing is found,once you are all done there and your thread is closed,then you can come back here,and we can see if we can think of anything else to try.
Okay,sorry to hear the reinstall didn't work.
Since you've tried just about everything,would you like to get checked out in the malware removal forum,just in case it's something hidden?
They don't ordinarily do checkups in there,but Spybot is a security program,and it's not being able to run could possibly be due to some sort of malware,so it should be okay for you to post in there. :)
There are instructions here:
http://forums.spybot.info/showthread.php?t=288
Malware Removal:
http://forums.spybot.info/forumdisplay.php?f=22
You could also add a link to this thread in your post.
If you do go to malware removal,and nothing is found,once you are all done there and your thread is closed,then you can come back here,and we can see if we can think of anything else to try.
As you requested, I posted all the required information at that forum. The link is http://forums.spybot.info/showthread.php?p=439563#post439563
I'll post back here when they close that thread.
Since I also tried a reinstall, unsuccessfully, I also checked out Task Manager after attempting to run a Scan. Yes, the scan utility was there and had the following information:
Spybot_S&D Scanner Service [32 bit]
CPU 0%
Memory 21.8 MB
Disk 0 MB/s
Network 0 Mbps
When I ended the "task", nothing apparently happened. It just went away from the Task Manger. It came back when I tried to start a scan again ... only by closing the Start Center completely since all 5 scan menu items were still italicized.
Glad to see you posted in Malware Removal. :bigthumb:
It gets quite busy in there sometimes,so it may be a couple of days before you get a reply,so probably a little bit of a wait.
And I hope you have a great weekend :)
Hey,there. :)
I did find a little something that might be worth a try,though I'm unsure if it will work or not,where you already tried disabling Webroot SecureAnywhere.
I can run it by you as soon as shelf life is all done with your thread,if you'd still like to try to get SDScan to run.
Hey,there. :)
I did find a little something that might be worth a try,though I'm unsure if it will work or not,where you already tried disabling Webroot SecureAnywhere.
I can run it by you as soon as shelf life is all done with your thread,if you'd still like to try to get SDScan to run.
Well, seems like the malware forum could not fix me so, I'll take your suggestion!
:thanks:
It's very doubtful this will work,though,since you've tried starting Spybot while you were in safemode,etc.,and Webroot SecureAnywhere wouldn't be running then,so please don't get your hopes up. :)
I did find where a couple of times some programs weren't running when people had Webroot Secureanywhere installed,though.
The instructions varied.Try these ones,and see if it makes sense:
Open Webroot SecureAnywhere.
Click on System Tools on the left-hand side of the software,and then click on "System Control".
Press the "Start" button under "Control Active Processes".
Look for Spybot,SDScan.exe,or anything that seems Spybot related,and check to see if it is being monitored or blocked.
It's very doubtful this will work,though,since you've tried starting Spybot while you were in safemode,etc.,and Webroot SecureAnywhere wouldn't be running then,so please don't get your hopes up. :)
I did find where a couple of times some programs weren't running when people had Webroot Secureanywhere installed,though.
The instructions varied.Try these ones,and see if it makes sense:
Open Webroot SecureAnywhere.
Click on System Tools on the left-hand side of the software,and then click on "System Control".
Press the "Start" button under "Control Active Processes".
Look for Spybot,SDScan.exe,or anything that seems Spybot related,and check to see if it is being monitored or blocked.
Zenobia:
These are the following processes found:
SDUpdate.exe
SDTray.exe
SDWSCSvc.exe
SDFSSvc.exe
SDUpdSvc.exe
They are all being allowed.
Zenobia:
These are the following processes found:
SDUpdate.exe
SDTray.exe
SDWSCSvc.exe
SDFSSvc.exe
SDUpdSvc.exe
They are all being allowed.
Okay,there shouldn't be any problems there,since they're all Allowed,and any of those being blocked or monitored shouldn't interfere,anyways.
You don't see SDScan.exe in Control Active Processes in Webroot Secureanywhere unless SDScan.exe is running.
But,the program seems to Allow SDScan.exe(on my computer,anyways),and manually blocking it puts it into Webroot Secureanywhere's Quarantine,which causes Spybot to prompt you to run an Update because part of itself is missing,plus you get a warning from Webroot Secureanywhere that a blocked process is trying to run,so I assume that's not the problem.
Getting Webroot Secureanywhere to monitor sdscan.exe doesn't seem to stop the Spybot scan from running,either,so I assume that's not the problem either.
If you want to doublecheck your's,you could doubleclick Webroot SecureAnywhere,click PC Security,then Quarantine over to the left,then View Quarantine,and look through and see if SDSCan.exe is listed there anywhere.
And then Detection Configuration below it,and look to see if SDScan.exe is Blocked or Monitored in there.
It doesn't look like it should be a Windows 8 and Spybot compatibility problem,since it got two votes in the compatibility center:
https://www.microsoft.com/en-us/windows/compatibility/win8/CompatCenter/ProductDetailsViewer?Name=SpyBot-Search%20and%20Destroy&vendor=Safer%20Networking&Locale=1033&ModelOrVersion=2&BreadCrumbPath=spybot-search%20and%20destroy&Type=Software&tempOsid=win8
http://www.safer-networking.org/faq/does-spybot-sd-2-support-windows-8/
It's weird that your scan won't run,though.I really can't think of anything else that might be stopping the scan at the moment. :scratch:
[QUOTE=It's weird that your scan won't run,though.I really can't think of anything else that might be stopping the scan at the moment. :scratch:[/QUOTE]
I checked "Quarantine" and there is nothing in there. I also checked "Detection Configuration" and the only thing in there is rfagent64.exe and it is Allowed.
:rockon:
rfagent64.exe should be Registry First Aid Agent,so looks like nothing related to Spybot in Detection Configuration. :)
There's a post on this forum about registry cleaners,in general:
http://forums.spybot.info/showthread.php?t=30038
rfagent64.exe should be Registry First Aid Agent,so looks like nothing related to Spybot in Detection Configuration. :)
There's a post on this forum about registry cleaners,in general:
http://forums.spybot.info/showthread.php?t=30038
RFA was removed and made no difference to the fact that the 5 scan menu items are italicized.
I downloaded the latest version today, version 2.1.18.0, in the hopes that it might contain a fix but, nope, 5 scan menu items italicized. Also, the new box on the right of the menu says "Last System Scan. Your computer has not been scanned yet! The scan will not include extended antivirus checks.". and the Start Scan drop-down box on the right is greyed out.
Ptath
I'm sorry to hear that.I'm sorry to say I still haven't thought of what might be stopping your Spybot from scanning. :sad:
As determined as your Spybot is not to scan,no matter what I did to mine it still insisted on starting up and scanning(and trust me,I roughed my copy up quite a bit!).If I think of anything else,or see anything similar to what you're experiencing with it,I'll post it here. :)
dawnmarie01
2013-08-05, 17:36
Could you attempt to start a System Scan again,and then start Task Manager,select the Processes tab,scroll down and see if sdscan.exe is listed there?
I have tried all of the above steps as well and am still having the same problem. I did check my Task Manager, and NO, sdscan.exe is not listed. So it's not running. Please help!
Thanks.
Unfortunately,I'm most likely not able to help since the original problem was never resolved,and I've never seen a solution posted anywhere.
Your menu items are italicized also?
I have just updated spybot and now it will not do a system scan,everything else is working.When I click on it .it appears in the system tray ,if I hover the mouse over it .it shows in the tray,but just comes up as a outline on the screen.I am running windows7 64 bit avg antivirus and privatefirewall 7.
snowy12
Hello. :)
I have just updated spybot and now it will not do a system scan,everything else is working.
Did you mean you checked for updates,or did you mean that you installed a newer version of the program?
I did updates .then tried to run a full scan,when I clicked on the scan icon nothing happens .The screen that should come up is visible in the task bar but when I I make it full size it's just a black box
Is it just a plain black box,or does it have a little white cursor or anything in it?
Try starting your computer in safe mode,then opening the Spybot scan.Is it still the same?
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/#windows7
And which version and edition of Spybot do you have?The reason I ask is so I know the best way to go about it if it looks like uninstalling and reinstalling Spybot later on looks like a good option to try. :)
Hi
I am running Spybot 2 on windows 7 64 bit with AVG free and privatefirewall 7.
i just tried to do a scan in safe mode with the same result .It appears several users are having the same or similar problems.
snowy12
You could try uninstalling Spybot from add/remove programs.
After rebooting,if you see the Spybot folder still there when you look in C:\Program Files (x86)\Spybot - Search & Destroy 2,try rightclicking and deleting it.
Redownload and reinstall,to see if the scan will run:
http://www.safer-networking.org/dl/
The firewall you mentioned,it's this one?
http://www.privacyware.com/personal_firewall.html
In the directions,I see it detects and blocks malware.
http://www.privacyware.com/personal_firewall_2.html
Malware: Virus, Spware, Trojan and Worm Defense ―
Viruses, Spyware, Trojans and Worms are all forms of malware that replicate, spread, steal personal information, and inflict damage to computers. Privatefirewall detects activity characteristic of malware infection such as attempts to access protected file objects, execution of WinAPI functions, and initiation of unknown processes, among others. Once detected, Privatefirewall blocks the malware and alerts you of the security incident.
I see it alerts you,though.If it does block and alert,do you know if it blocks and alerts the next time it encounters what it blocked?
It appears several users are having the same or similar problems.
I looked for people mentioning similar problems,but didn't find it.If it's posted online in an open,non-private place,could I get a link to it?It might not tell me anything,but I could look and see if there are any similarities with those posting,such as they all use a certain program,or the system scan stopped working when they updated,or anything like that. :)
deemac01
2016-03-05, 04:05
My System Scan is not working either, from both the Start Center and the executable file itself in the Spybot folder.
All the commands are italicised as if it were running, but none of the menu commands can be used.
Anyone know what's going on here?
For whatever reason, this seemed to work (running Windows 10). Started in Safe Mode. Started SDScan.exe from Windows Explorer - no good, all System Scan options greyed and italicised. Tried to checked if anything at all worked by starting SDSysRepair.exe from Windows Explorer (think I had to be elevated to Administrator privileges). Inconsistency Check was available as an option, so ran it. Inconsistency Check found multiple broken entries. Thought it was a good idea to select them all and delete. I don't know what I was doing, or why I was doing it...but I had got to a point where I was about to unplug the computer and take it to a repair shop.
Checked SDScan.exe again. 'Start a Scan' option now working. Hmmm, not sure if I have caused more bad than good, but happier now.
Janitor Tzap
2016-04-23, 01:44
I too have been effected by this.
But I found that the SDScan.exe had been replaced with a non-functioning one of the same name.
After I dug through the Spybot - Search & Destory 2 folder.
I came across a program that should not of been there, explorer.exe.
I right clicked on it, and looked at the properties.
I found that it was really the SDScan.exe.
I deleted the Fake SDScan.exe, then renamed explorer.exe, back too SDScan.exe.
Now my System Scan is working again.
But I've done multiple scans using Malwarebytes Anti-Malware, SuperAntiSpyware, and my Zone Alarm Virus\Malware Scan.
All have come up with zilch.
This is worrisome.:fear:
mickmackmike
2017-05-14, 05:03
Was freezing on automatic update,,, so was suspecting virus/malware hijack
was able to manually update
search for direct-update-link where you can reach the latest update everytime.
Please use the Spybot 2 program folder as Destination Folder to store the update, by default:
Windows XP: C:\Program Files\Spybot – Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot – Search & Destroy 2
I just downloaded the program, tried to run the program but all items under "system scan" - start a scan / pause scan / stop scan / Fix selected / Save Scan Log are all italicized and greyed out. I tried restarting my computer a couple more times and reading through the forum for any helpful info, but wasn't able to find any. Was anyone able to fix this issue?
Thank you!
That can happen if you need to download the updates. Please see here:
https://www.safer-networking.org/faq/system-scan-button-greyed-out
Please let me know if that works. :)