Spybot only displays 2 warnings

[snifferpro]

Spybot is only detecting the following issues every time I run it:

Microsoft.WindowsSecurityCenter.AntiVurusOveride and
Microsoft.WindowsSecurityCenter.FirewallOveride

It never finds any other spyware which I find hard to believe as prior
to release 1.5.2, it found the above 2 and several others.

I have uninstalled and reinstalled a couple of times and always get the
same results.

I am also running ZoneAlarm Firewall, AdAware 2007, ASquared and
Symantec Antivirus Corporate.

Once a week I scan my system starting with Spybot, then Ad-aware,
then Asquared.

Any ideas?

Thanks

[md usa spybot fan]

snifferpro:

Please read the following thread:

• Help please...
  http://forums.spybot.info/showthread.php?t=24738

If that situation does not exactly fit your particular case, please post either a Checks.yymmdd-hhmm.log or a Fixes.yymmdd-hhmm.log as I asked freebird442 to do.

[snifferpro]

I checked my logs folder and it only goes back to 092907.

I read the link you provided and it would appear that the update
to 1.5 and immunizing has made the difference. I use Firefox exclusively.

I'm not quite sure how Spybot is blocking the items I was getting before
as Spybot is not usually running when I am surfing.

Can you enlighten me a bit further on this.

Attached are the logs from 092907:

29.09.2007 06:17:21 - ##### check started #####
29.09.2007 06:17:21 - ### Version: 1.5
29.09.2007 06:17:21 - ### Date: 9/29/2007 6:17:21 AM
29.09.2007 06:17:23 - ##### checking bots #####
29.09.2007 06:25:09 - found: Microsoft.WindowsSecurityCenter.AntiVirusOverride Settings
29.09.2007 06:34:49 - found: DoubleClick Tracking cookie (Internet Explorer: Dick)
29.09.2007 06:34:50 - found: DoubleClick Tracking cookie (Firefox: default)
29.09.2007 06:34:51 - ##### check finished #####



--- Report generated: 2007-09-29 06:36 ---

Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride

DoubleClick: [SBI $4CDCC3D5] Tracking cookie (Internet Explorer: Dick) (Cookie, fixed)


DoubleClick: [SBI $4CDCC3D5] Tracking cookie (Firefox: default) (Cookie, fixed)



--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2007-09-29 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2007-09-26 Includes\Cookies.sbi (*)
2007-07-25 Includes\Dialer.sbi (*)
2007-09-26 Includes\DialerC.sbi (*)
2007-08-29 Includes\Hijackers.sbi (*)
2007-09-26 Includes\HijackersC.sbi (*)
2007-07-25 Includes\Keyloggers.sbi (*)
2007-09-26 Includes\KeyloggersC.sbi (*)
2007-09-12 Includes\Malware.sbi (*)
2007-09-26 Includes\MalwareC.sbi (*)
2007-09-05 Includes\PUPS.sbi (*)
2007-09-26 Includes\PUPSC.sbi (*)
2007-09-26 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-09-26 Includes\SecurityC.sbi (*)
2007-09-12 Includes\Spybots.sbi (*)
2007-09-26 Includes\SpybotsC.sbi (*)
2007-08-21 Includes\Tracks.uti
2007-09-12 Includes\Trojans.sbi (*)
2007-09-26 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll


Thanks.

[drragostea]

Hello, snifferpro. I have received the same error in the past. The cause was that I've set Windows Security Center (SP2) not to monitor my firewall nor AV. Thus, this will be detected. Have you changed your Windows Security Center settings lately?

[md usa spybot fan]

snifferpro:

... it would appear that the update to 1.5 and immunizing has made the difference. ... I'm not quite sure how Spybot is blocking the items I was getting before as Spybot is not usually running when I am surfing. ...

Immunization in Spybot 1.5.

The immunization process adds entries to the system registry and/or files to either:

1. Restrict the things that certain sites (domains) you are accessing through your browser are allowed to do.
   --- or ---
2. Blocks the access to the certain sites (domains) entirely.

The items listed under "Internet Explorer (32 bit) " and "Internet Explorer (32/64 bit) " add entries to the system registry to add restrictions while using Internet Explorer.

• Items listed as "... (Cookies)" block the storing of cookies from certain sites.
• Items listed as "... (Domains)" and "... (IPs)" add sites to the restricted sites zone.
  • "... (Domains)" are added to the restricted sites zone by domain name.
  • "... (IPs)" are added to the restricted sites zone by IP Address.
  Adding sites to the restricted zone blocks their ability to store cookies, download ActiveX processes as well as placing other restrictions on those sites depending on your settings for restricted zone sites within Internet Explorer.
  
• Items listed as "... (Plugins)" block the download/execution of specific ActiveX processes.

The items listed under Mozilla products such as "Firefox" add entries to Mozilla's profile hostperm.1 file to add restrictions while using products such as "Firefox".

• Items listed as "... (Cookies)" prohibit sites from storing cookies.
• Items listed as "... (Images)" prohibit sites from displaying images.
• Items listed as "... (Installations)" prohibit sites from initiating extensions installations.
• Items listed as "... (Popups)" prohibit sites from opening popup windows.

The item listed under "System" adds entries to the system's HOSTS file.

• Item listed as "Global (Hosts)" adds entries to the system HOSTS file, equating site names (domain names) to the localhost (your system), affectively blocking access to those sites.

Although Spybot is not running when you access the internet via one of your browsers, the protection added to the browser by the immunization process is protecting you.