Distributed Testing, updated to 1.6 and leaving beta status

[PepiMK]

Why shoul they be all in one package?
98% of all users are not interested in RegAlyzer and FileAlyzer I guess

RunAlyzer will be part of 2.0, depending on this milestone.

The general 2.0 milestone can be found here. Most items on that list are currently hidden, but progressing fast, I do think that there will be something to see this year still

SDDT probably won't get integrated. Think about privacy. Regular users might not understand the full meaning of this feature, and would not understand what's transmitted there.

If you see results counts, yes, they are most likely F/Ps. That's mhy we have SDDT Sometimes possibly even intentional, when our detectives try to trigger some. If it would be a real infection and you've specified an emal address, you would receive an email

[Rouke]

okidoki, that's cleared up then..

Another real off-topic question: why's it so that I can't use any forum codes in A normal manner? (IE 7, 8, & opera 9,52 & 9,6?) I'll remove this last part when gotten reply via email-address

Vbulletin isn't that user-friendly (to me it is, i've got loads of forum experiences & this one has been anoying me for quite some while..)

I have to make my own image tags (which isn't that difficult, using clickable-links is simpler tough & then post the image/smiley url inbetween)

everything is on except HTML, which is odd, since I would like to place An ocassional link (for informing purposes only)

[PepiMK]

All BBCode should be enabled, see this help. Links can be placed with the URL tag.

Take a look at your User CP (link at the left of the black bar at the top) and choose Edit Options, you can select between various editor modes there.

With Javascript enabled, even shortcuts are allowed, like Ctrl-I for Italic (don't know the ones for images and links I have to admit ).

HTML is disabled because HTML allows a bit much. Wouldn't want any embedded Flash exploits in forum posts, right?

[Rouke]

No problems in my settings, maybe Vbulletin should adjust some issues (or opera)..
Using Opera 9.6 at this moment.

p.s: you should get a load of extra storage for your pm's since you inbox/whole storage-capabilities for pm-storage is an issue
That's why I suggested looking@my e-mail account that's registerd (and mailing me via that e-mail address)

[EldarXP]

I got a problem on this detection it's been running for more than 4 day without result...
Got any advise to start the next one?

[EldarXP]

Updated to new version it's working fine now...

[captured1104]

I uninstalled my older S&D because my computer is a mess with the spyware 2009. Have to get to that nexxt. For now I need to use the new version and I have doanloaded with out auto updates checked as read about in post. I also disabled the firewall while doing so, just in case. On my desk top but I still can't open it. Please help


Edit -tashi
Malware forum topic:
http://forums.spybot.info/showthread.php?t=42436&page=4

[Acamas]

Scince yesterday, "SDistTestSvc.ex" regularily hangs with 99% CPU usage after a few scans.


The GUI console shows:

(i) 25.10.2008 02:27 Queued tests:
(i) 25.10.2008 02:27 SDDT-Virtumonde.Dll-Yodama.sbi 4074 2008-10-24 11:33:32
(i) 25.10.2008 02:27 SDDT-new-micha.sbi 4089 2008-10-24 14:13:49
(i) 25.10.2008 02:27 SDDT-Virtumonde.sdn-Yodama.sbi 4075 2008-10-24 11:33:35
(i) 25.10.2008 02:27 SDDT-Smitfraud-C.gp_RG-rene.sbi 4094 2008-10-24 17:29:57
(i) 25.10.2008 02:27 SDDT-Win32.Agent.aec-micha.sbi 4078 2008-10-24 14:13:47
(i) 25.10.2008 02:27 SDDT-Netbus-micha.sbi 4079 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-Win32.VB.bco-micha.sbi 4080 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-Win32.Agent.wf-micha.sbi 4081 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-PoisonIvy-micha.sbi 4082 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-Joke.Password-micha.sbi 4083 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-Win32.Autoit.p-micha.sbi 4084 2008-10-24 14:13:48
(i) 25.10.2008 02:27 SDDT-Win32.SdBot.aad-micha.sbi 4085 2008-10-24 14:13:49
(i) 25.10.2008 02:27 SDDT-Win32.VB.dn-micha.sbi 4086 2008-10-24 14:13:49
(i) 25.10.2008 02:27 SDDT-Win32.mIRC.603-micha.sbi 4087 2008-10-24 14:13:49
(i) 25.10.2008 02:27 SDDT-MSNFlood-micha.sbi 4088 2008-10-24 14:13:49

...then...

loading and testing the sbi's - all with "success"

...until SDDT-Virtumonde.sdn-Yodama.sbi (>> which has been tested at last, although it seems to be the first one to be tested according to the list above?!).


There's no "success" after testing SDDT-Virtumonde.sdn-Yodama.sbi

but

- playing a "ping"-sound (like if there would be a dialog box, however, there isn't one!)

- almost freezing CPU by 99% usage by the "SDistTestSvc.ex" process (OK, it's a Pentium III M at 1.1 GHz, however, it's been working fine so fare with all other SaferNW products inclunding SDDT.)

- no chance to stop the process, neither in GUI window ("stop service") nor in the win2K task manager ("stop process") - access denied; however, machine can be shot down w/o probs.


Here are some more details about the context:

SDistTestSvc.ex:
- 21 GDI objects
- 115 handles
- 8 threads
- 5.952 KB memory
- 6.320 KB max. memory
- 5.672 KB virtual memory
- CPU time: 99% usage starts after a few seconds of CPU time

System:
- Win2K SP4 with IE6 on a HP omnibook 6100 with PIIIM at 1.1GHz
- round about 35 other processes running (standard windows stuff, HP/Intel/ATI/Touchpad/deskjet-drivers, AtomiX TimeSync, RoboForm, SD TeaTimer - that's it.)
- NO other task bar applications running

Well, 'm sorry, but seem's to be a bug??

_________

btw.: Plz, keep your comments about w2k/IE6 :P , as I MUST use it for my job!

p.s.: Messengers show'n in my profile are all disabled currently. However, feel free to drop me a line or call/chat me by GoogleTalk: logonautics@googlemail.com.

[Acamas]

Update:

with Standalone: it works fine
1) scans for 30 sec. (sbsdscan.exe: 95%CPU)
2) stops with popup: ~ "It's recommended to reboot..."
3) user input "yes" or "no" (doesn't matter)
4) scans for ~ 60+ sec. (sbsdscan.exe: 95%CPU)
5) after scanning has ended > SDistTestStandAlone.exe: 98%CPU for a few minutes
6) 9x%CPU ends, everything is fine, Standalone can be closed.

with Service: it hangs
1) scans for 30 sec. (sbsdscan.exe: 95%CPU)
2) stops with the wav-sound of a popup; however, there is no popup to click on
3) no popup = no user input >> it hangs!

__________

exe-files @ \\...\SpybotSD\DistTest\

sbsdscan.exe (2008-06-13 09:05:01)
SDistTestConsole.exe (1.6.0.14)
SDistTestStandAlone.exe (1.6.0.12)
SDistTestSvc.exe (1.6.0.10) {now deactivated}

[PepiMK]

Hmmm...

The reboot parameter should be ignored on all nonvisual scanners. I'll tell detectives to make sure this is checked in all detection rules, and make sure there's an additional check inside the code to skip this.