Same Problem - It was caused by Avast
Quote:
Originally Posted by
HubriSonics
Temporary Immunization
When I run an immunization check, I get this message:
"221930 of 221934 entries are already immunized, but 4 are still unprotected!"
Then I apply immunization, after which I get this message:
"All 221934 entries are immunized!"
Then I exit Spybot, relaunch Spybot, and run immunization again. Afterwards, this is the message Spybot displays:
"221930 of 221934 entries are already immunized, but 4 are still unprotected!"
Then I apply immunization again, which results in this message:
"All 221934 entries are immunized!"
Each time I repeat this sequence of actions, I get the same results. I am running Spybot as the Administrator. I am using Spybot 2.4. My OS is 32 bit Windows Vista. Is there any more information that Safer-Networking would like me to provide?
My Solution was to Uninstall Avast
Same issue was running Avast antivirus on the PC that had problems. I copied the host file and compared the host file of another PC running Spybot Search and Destroy which did not have problems This PC was running MS Defender. The host file from the PC running Avast (which stated 4 unprotected) did indeed have four entries less than the PC which had 0 unprotected. The comparison of host files revealed that the missing host file entries had the word avast in the address. (variations download-avast & telecharger-avast) By the way I checked these websites and they are suspected of being bad sites. So the Spybot folks are 100% right and Avast is wrong to delete the entries. Disabling Avast does not correct the problem. Avast had to be totally uninstalled to correct this. In fact even after removing Avast, I had to immunize and recheck a few times before the issue went away. Also as a side note, once Avast was uninstalled I got a pop-up from Spybot indicating that the problem could be due to a 3rd party antivirus or firewall. This helpful message did not appear until after Avast was uninstalled.
Prefer to err on the side of caution
Thank you for validating my research BobxT, however I purposely did not list the full websites for fear someone may click on a potentially malicious link. Web of Trust has negative reviews for these websites plus Spybot also included them in their list. I checked Whois and cannot validate that these websites are associated with Avast. If a site has the word download + a dash + a domain name, that does not mean that this site is necessarily affiliated with that domain. For example download (dash) google.com is not a google server or part of google's domain. I do agree with you that users can continue to use both products and ignore the message if they want. Even though the websites Avast removed from the host file might be legitimate, why take a chance? Best to go to the official https://www.avast.com directly.
Immunization problem (Hosts file) - Discovery Revealed
Hi Guys,
I'm having the same problem below, and I've done some digging, I'll show you my findings:
Quote:
Originally Posted by
HubriSonics
Temporary Immunization
When I run an immunization check, I get this message:
"221930 of 221934 entries are already immunized, but 4 are still unprotected!"
Then I apply immunization, after which I get this message:
....
I've updated my Spybot Search & Destroy 2.6 with Admin rights to the latest signatures followed by a complete immunization
https://drive.google.com/open?id=1cY...bXCdRP6jMej2UM
Since it has complaint about incomplete immunization of the hosts file, I did get rid of all Spybot Search & Destroy hosts file entries
using sed to remove the entries and check that they were reaaly gone with grep.
https://drive.google.com/open?id=1ZJ..._i94c6qCYLrxUY
Then ran Immunization check, and of course, it found out that it the hosts file did not have any antispyware entries. (just a program crosschecking)
https://drive.google.com/open?id=1m-...M_kjWr27UxGoFV
Then I did run the whole Immunization again, and looked for how many entries Spybot Search & Destroy inserted in the hosts file.
Although it seems to have worked, it didn't, because if you looked closely, it did inserted just 4 entries short (15629 - 4) in my case.
https://drive.google.com/open?id=159...8XXdlJl7OvEAyS
So, in my opinion, there are two possible scenarios:
First: The hosts file served by Spybot Update is missing 4 entries.
Second: The number of lines to crosscheck in the Immunization proccess is 4 entries higher than it should.
Independently of the cause, Spybot Search & Destroy 2.6 Developers should take a look at it and sort it out.
Best regards,
Nomad