Adrevolver and others are not removed by S&D

[vicduran]

Every time I run S&D it finds a series of 10 or more threats: Adrevolver, Advertising.com, Avenue A, Inc., CasaleMedia, DoubleClick, FastClick, MediaPlex, Statcounter, Tradedoubler and Zedo. Sometimes more show up. Apparently S&D fixes theis problems, but if I run it again right away it still find the same things.

Are you aware of it?

[md usa spybot fan]

Many of those threats appear to be "Tracking Cookies" which are minor threats. It would probably be helpful if you posted the actual log of the scan results you are questioning. The log will not only show the actual detections and the nature of those detections that you observed but also show the version of Spybot you are running as well as the update level of the detection files used during that scan.

To produce the log and post the log:
Run another scan.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Then paste those results (Ctrl+V) to a new post in this thread.

[robhenley]

Hi there - I see a very similar list. Spybot claims to remove them, but they are still there if I rescan immediately. So either they were not really removed, or something has immediately restored them. Here are the scan results just after fixing ...

AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


Advertising.com: Tracking cookie (Firefox: default) (Cookie, fixed)


Advertising.com: Tracking cookie (Firefox: default) (Cookie, fixed)


Advertising.com: Tracking cookie (Firefox: default) (Cookie, fixed)


Advertising.com: Tracking cookie (Firefox: default) (Cookie, fixed)


Avenue A, Inc.: Tracking cookie (Firefox: default) (Cookie, fixed)


DoubleClick: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: default) (Cookie, fixed)


MediaPlex: Tracking cookie (Firefox: default) (Cookie, fixed)


MediaPlex: Tracking cookie (Firefox: default) (Cookie, fixed)


Statcounter: Tracking cookie (Firefox: default) (Cookie, fixed)


Statcounter: Tracking cookie (Firefox: default) (Cookie, fixed)


Statcounter: Tracking cookie (Firefox: default) (Cookie, fixed)


Statcounter: Tracking cookie (Firefox: default) (Cookie, fixed)


Tradedoubler: Tracking cookie (Firefox: default) (Cookie, fixed)


Tradedoubler: Tracking cookie (Firefox: default) (Cookie, fixed)


CoreMetrics: Tracking cookie (Firefox: default) (Cookie, fixed)


AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


WebTrends live: Tracking cookie (Firefox: default) (Cookie, fixed)



--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-01-19 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-04-18 advcheck.dll (1.5.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-04-25 Includes\Cookies.sbi (*)
2006-12-08 Includes\Dialer.sbi (*)
2007-04-25 Includes\DialerC.sbi (*)
2007-04-04 Includes\Hijackers.sbi (*)
2007-04-25 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2007-04-25 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-03-21 Includes\Malware.sbi (*)
2007-04-25 Includes\MalwareC.sbi (*)
2007-03-21 Includes\PUPS.sbi (*)
2007-04-25 Includes\PUPSC.sbi (*)
2007-04-25 Includes\Revision.sbi (*)
2006-12-08 Includes\Security.sbi (*)
2007-04-25 Includes\SecurityC.sbi (*)
2007-03-21 Includes\Spybots.sbi (*)
2007-04-25 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2007-04-25 Includes\Trojans.sbi (*)
2007-04-25 Includes\TrojansC.sbi (*)

[robhenley]

ah - I see - they're all Firefox cookies. I'll just remove them via Firefox.
Ta
Rob

[Zenobia]

After you remove 'em through Firefox,you can block most of them,too,if you wish.
http://www.spybot.info/en/faq/37.html

[jp_oates]

:red:can this be done in ie 7?

[Zenobia]

Removing cookies?Yes.Be forewarned,you can't pick and choose which cookies you delete this way,it will delete all your cookies.
Go to Tools->delete browsing history,and select delete cookies,and then say yes to the prompt.
As for blocking third-party cookies,you can do that too.These instructions should still apply:
http://www.spybot.info/en/faq/37.html

Internet Explorer: Open "Internet Options..." from the "Tools" menu. Choose the "Privacy" tab, and raise the Settings to at least Medium; or use the "Advanced..." button to enabled "Override automatic cookie handling" and set "Third-party Cookies" to "Block".

[smokey888x2]

Greetings: I donated too: ) I wish that alone would have made me smarter, ok -- lets see how this goes -- this kind of thing makes me go POOF, I'm absoultely lost:

I just ran Spybot and have 12 named cookies, the first being adrevolver and the one with the most used was Hitbox w/ 6 subjects under it, if that makes any sense. I right clicked finished Spybot run where I got what I mentioned above, posted it once but sure is a lot of information -- much more than what someone posted above (much more) so, I was wondering if that was needed?

I have also went ahead to tools, internet options, privacy, advanced and set Block to third party cookies. If that's ok. Will this cause any problems?

I could use some advice on what to do with the completed check/run/or scan that I did w/ Spybot as noted in paragraph 2 above. thank you for your time.

[smokey888x2]

Here's the main title of the 12

mediaplex, right media, statcounter, webtreands, zedo, hitlink, hitbox, fastclick, double click, casalemedia, burstmedea, adrevolver

[spybotsandra]

@robhenley:
you are using an old version of Spybot which is not being supported anymore.
Please download our current version Spybot - Search & Destroy 1.6.
You will find links to several download locations for this new version on our web site:
http://www.safer-networking.org/en/mirrors/index.html
Please search for new updates after installing Spybot-S&D 1.6.

Doubleclick (and others like Advertising.com, Avenue A, Inc, CasaleMedia, Fastclick, Hitbox, Mediaplex etc.) are so-called tracking cookies. It is quite common for popular websites to employ such tracking cookies from third parties. They use them in order to track the users' surfing habits on their websites. As I said, these cookies are from third parties but they are employed by the site. There is a tool in Spybot-S&D: BrowserHelper, i.e. a bad download blocker for Internet Explorer. With this tool enabled such tracking cookies will be blocked. In order to activate this tool, please run Spybot-S&D and go to the "Tools"->"Resident" page. Checking the checkbox in front of SDHelper will enable the BrowserHelper.

Now open the Tools menu in your Internet Explorer and choose 'Spybot - Search Destroy Configuration'.
There you will find a drop down menu which will appear giving you some options.
http://www.safer-networking.org/en/spybotsd15/index.html (3rd picture)
You should select "Block all bad pages silently".
With that option set the notifications will no longer come up, but you will still have the protection.
Further choose "Spybot-S&D->Immunize" from the navigation bar on the left.
Now the baddies are blocked.

Best regards
Sandra
Team Spybot