Immunization not working...

[Hoffmaister]

Same problem here, been wrestling with it for weeks. I have NONE of the software listed in the "usual reasons" sticky thread.

Windows XP Pro x64
IE8
Avast Home
SpywareBlaster
Spybot S&D

Hi
I have the same config as you, tried everything. But then I go under tools>internet options>advance> reset Internet Explorer settings.(IE8)
Then I run Immunization again, all gone

Hope this help

Arne

[a4nic8er]

Hi
I have the same config as you, tried everything. But then I go under tools>internet options>advance> reset Internet Explorer settings.(IE8)
Then I run Immunization again, all gone

Hope this help

Arne

OK, tried that. Unfortunately all it did was change the sections where the 969 non-immunized items are. See attachment and compare it to the one in my previous post.

[a4nic8er]

@ Hoffmaister: are you running XP Pro 64 bit?

Here's what I have done to try and trace the cause of this problem...

Isolated from internet.
Restored to image from 30 November 2009


NO Microsoft Updates installed!

Disabled SpywareBlaster protection.
Uninstalled Avast! 4.8.
Rebooted.


Immunized.


So far, so good (remember, still no Microsoft updates).
Connected to internet, updated SS&D.



Started SS&D.


Immunized, 1737 items failed. See attachment immudebug1737-1.zip for 990KB immunization debug text file.


Updated and enabled SpywareBlaster protection. No change.
Rebooted. No Change.
Immunized. No change.
Removed Immunization, reset Internet options to default (deleting all personal settings).
Rebooted.
Immunized. Note, all 1737 failures are now in one section - Internet Explorer (64 bit) \Software (Secure Domains). See attachment immudebug1737-2.zip for 293KB immunization debug text file.


Installed 9 Microsoft High Priority updates (may as well, I have proven that they are not causing the problem).



Rebooted.
Installed Avast!5.
Rebooted.
Ran SS&D Immunization again. No change.

Conclusion: The problem arose when only SS&D updates alone were installed. The issue is with SS&D itself, when running on XP 64-bit systems.
*edit* I suspect the issue is with the 658KB "Base trojan horse detections 2009-12-09"

[a4nic8er]

Updated SS&D (yes both updates - screenshot taken midway through update).



Immunized, 1869 items failed (up from 1737, an increase of 132 items). Half of the new detections succeeded. Each of the sections showing 11 items unprotected had 22 prior to imminization attempt.



Immunized again. Slight change to placing of immunization failures, from IE 32 bit to IE 32/64 bit, but still the same number.


Removed Immunization, reset Internet options to default (without deleting all personal settings).
Immunized. Note, all 1869 failures are once again all moved to one section - Internet Explorer (64 bit) \Software (Secure Domains).


New day, same stuff :\

[a4nic8er]

No such issues with XP Pro 32 bit or Windows 7 RC 64 bit on same machine, only XP Pro 64 bit.

[spybotsandra]

Hello,

Did you also undo the immunization and then immunize again?

Best regards
Sandra
Team Spybot

[a4nic8er]

Hello,

Did you also undo the immunization and then immunize again?

Best regards
Sandra
Team Spybot

Yes. I did that and quite a few other things. My actions and the interesting results from them can be easily followed by reading page one of this thread.

*edit* There's even a couple of immunization debug files there too, if anyone at Spybot is interested in looking at them.