Spybot Update 8/30/04 False Positive?

Discussion in 'other anti-malware software' started by Bubba, Aug 30, 2004.

Thread Status:
Not open for further replies.
  1. actually... deleting everything that said search200 didn't work... i still get it when i open internet explorer...
     
  2. Infinity

    Infinity Registered Member

    Joined:
    May 31, 2004
    Posts:
    2,651
  3. johnx3200

    johnx3200 Registered Member

    Joined:
    Sep 5, 2004
    Posts:
    6


    Yes the same here. I stop get update on the older Ver of SpyBot so I up graded. As you see I stop getting update 9/2/04 Hmmmm o_O Life gose on :)
    Here my log

    9/1/2004 9:30:55 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/1/2004 4:21:07 PM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/1/2004 4:22:55 PM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/2/2004 7:24:40 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/2/2004 7:28:53 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/2/2004 7:30:42 AM downloaded update Detection rules
    9/2/2004 7:30:42 AM - URL: http://www.spybotupdates.biz/updates/files/includes.zip
    9/2/2004 7:30:42 AM - Local file: C:\Program Files\Spybot - Search & Destroy\Updates\includes.zip
    9/2/2004 7:31:16 AM downloaded update English help
    9/2/2004 7:31:16 AM - URL: http://www.spybotupdates.biz/updates/files/help.english.zip
    9/2/2004 7:31:16 AM - Local file: C:\Program Files\Spybot - Search & Destroy\Updates\help.english.zip
    9/2/2004 7:31:24 AM downloaded update English help for TeaTimer
    9/2/2004 7:31:24 AM - URL: http://www.spybotupdates.biz/updates/files/helpres.english.zip
    9/2/2004 7:31:24 AM - Local file: C:\Program Files\Spybot - Search & Destroy\Updates\helpres.english.zip
    9/2/2004 7:38:31 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/4/2004 7:29:11 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/4/2004 7:29:34 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/8/2004 1:13:19 PM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/9/2004 7:34:11 PM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/14/2004 11:10:56 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
    9/14/2004 11:11:48 AM Downloaded update info file. (http://security.kolla.de/updates/spybotsd.ini)
     
  4. johnx3200

    johnx3200 Registered Member

    Joined:
    Sep 5, 2004
    Posts:
    6
    Has any here heard of there computter talking. Every now and than I hear my computter say standby or good to be here and a lot of other noise. I would like to know how or why it's doing it HELP !!! please :rolleyes: Oh and to stop it :mad:
    ty a lot
     
  5. ursamajoran

    ursamajoran Registered Member

    Joined:
    Sep 20, 2003
    Posts:
    12
    Bubba I think these posts are confusing people in regards to SearchForIt. Some of these people are checking the item in ignore products in Spybot S&D. People if you check it in ignore products you are leaving the protection for it in Spybot S&D disabled. You have to click on the + next to the red SearchForIT. The entry that drops down

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C109664B-CEB1-420B-B353-D55A561536DD}

    then has to be clicked on to highlight it (in grey) then you can select "Exclude This Detection From Further Searches" Don't pick "Exclude This Product From Further Searches" Now make sure the kill bit (protection) is still enabled in Spyware Blaster.
     
  6. ursamajoran

    ursamajoran Registered Member

    Joined:
    Sep 20, 2003
    Posts:
    12
    JohnX3200 There is a new worm that uses Microsofts speech engine to talk to you. I would advise you to do a scan for W32.Amus.A@mm if your computer has suddenly started talking to you and is calliing himself mister hamsi LOL Sorry worms aren't funny but...............

    W32/Amus-A is a worm which runs on the Windows platform.
    The worm replicates by including the executable as an email attachment.
    W32/Amus-A attempts to use the Microsoft Speech engine to read the following greeting to 'listening' users:
    "How are you? I am back. My name is mister hamsi. I am seeing you. Haaaaaaaa. You must come to turkiye. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule. Gule."


    http://www.sophos.com/virusinfo/analyses/w32amusa.html
     
  7. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    I agree....we sure don't want any confusion....but....unless I missed a post....the only post referrencing ignore products ....is the one you just made. The suggestion given....not only in this thread but in the other Searchforit threads....is to re-enable the entry in SpywareBlaster and when you scan with Spybot again....right click that item and select ignore....until Spybot releases an updated definition file.

    Again....confusion is the last thing we want.
     
  8. haskings2000

    haskings2000 Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    7
    Hi , I am another who after taking seach for it with Spybot found that it is actually ans Killbit from SpywareBlaster that it does not recognize, I hope you may tell Mr. {may god save forever his soul} Patrick Kolla about this
    Question

    I have just recently switched to Opera , I was tired of all the updates for IE, as I undestand opera does not allow active X , i will still keep on using Spywareblaster as usual{ due the fact that I have not uninstalled IE } from my machine.

    Is there any security measure I should take for ito_O

    thansk for all your help
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.