SpywareBlaster 3.1 released!

Yes,

No problems at all

 

I use both, and they do work fine!

 

What is the windows process/service associated with SpywareBlaster3.1? The only exectuable I could find is the spywareblaster.exe process. However, when I close out of the program the process terminates. I would like to confirm that after I "enable all protection" and close out that the program is still actually protecting my box.

Does anyone know the specific process that does this please? THANKS!

Mike

 

Hi Mike,

SpywareBlaster works by placing Kill bits in your registry ...

ie. HKEY_CURRENT_USER\software\microsoft\windows\currentversion\internet settings\zonemap\domains\searchsquire.com

Value is 4

which blocks the domain/software ... so SB 3.1 only needs to run to add these registry keys ... the keys inturn protect you.

Sorry, I couldn't word it better ... I hope this makes sense.

HTH

dog -

 

Dog...
thanks for the reply..

I verified that I do have that key with a value of 4. However, I guess my questions now would be... if all the program does when it runs (or when the spywareblaster.exe process is active) is create this key with a value of 4, my next questions would be...

1) why don't I just create this manually and not install the program (hypothetically would this protect my pc?)

2) I am confused as to how the database works into this..Each time a user runs an update there has to be a list of possible threats that is updated. Don't you need a process to read this list and enforce the prevention of creating new (malicious) registry keys?

Mike

 

Hi Mike,

Yes, you could insert your own kill bits ... theorethically, but how would you go about doing all the research, SB database is extensive and a culmination of a lot of work and expertise/experience. It's all provided in a very nice package ... free of charge thanks to Javacool - minus donations ... as serves space comes at a price and Javacool's deserves a donation to help with his costs and any excess for his efforts. This statement is only my opinion, donations are NOT required, but appreciated.

As to updates ... new items added to the database, are separated by SB when downloaded and it adds the new reg. keys as required. It's not designed to protect your registry per say ... only to prevent the addition of known malware reg. keys., Active X etc.

To protect your registry in general you can use Spybot 1.3 ... which employs it's teatimer.exe to monitor registry changes, or DiamondCS regprot, which does the same, I use both. I'll post the links below.

Hope that helps.

dog -

*edit* I re-read your post ... the example key I posted was just one of 2942 in the database ... there isn't a single fix all entry so to speak ... there are many ... and the database is regularly added to. Sorry if I misunderstood what you wrote and I hope this helps.

 

Hi Mike,

Here's the Links.

Spybot 1.3

DiamondCS Freeware located on the second half of the page ... lots of useful tools ... RegistryProt is what I mentioned above.

dog -

edit - Here are some other info SB 3.1 and Here

addition Spybot info although off topic in this thread Here

 

Dog... THANKS a lot for the info and informative links! They were very helpful.. I agree about the donations too. I just want to better understand first and feel confident that any freeware is even doing anything for me before I donate.

Unfortunately, I am still somewhat confused as to how a "kill bit" actually works within the registry. If anyone is out there who actually works on SpywareBlaster, it would nice to have the option to be prompted when a kill bit action occurs. (Pardon my terminology here.. just not familiar with kill bits) I imagine this may get to be quite anoying though.
This would let users, who want to be alerted of this , know that the program is actually working in the background although there is no active process associated with it. Just a suggestion though.. and hey.. this is "free" so I really don't want to come across the wrong way because I am grateful that there are talented people out there helping end users, myself included, freely use the internet without having to worry; as much..

In basic terms though...SpywareBlaster 3.1 solely prevents the addition of malicious reg keys, while the other programs Dog mentioned, appear to perform both removal and some prevention of malicious processes, reg entries monitoring (both good and bad... for the Spybot teatimer) ... does this sound right?

Mike

 

Hi Mike,

This link will explain KIll Bits better ... Microsoft Knowledge Base

Another of Javacool's products provides "active" protection = Spyware Guard and works inconjunction with SB 3.1.

The teatimer and regprot ... more than anything notify you of any registry change ... giving you the option to allow or deny it ... again I use both, they're both great proggies.

Spybot immunize feature also works similarly to SB 3.1 in blocking known bad CLSID, works in conjunction with SB (you'll see this if you run immunize in spybot) it also reconizes that SB's database is more extensive ... so in effect Patrick also reconizes and commends Javacools work ... so to speak.

To clean your registry safely ... old/invaild enteries you could use something like regseeker ... available Here

This is the official Javacool Support Forum ... Javacool is always checking in and answers questions ... he will probable respond with an answer ... so check back to see.

dog -

*edit* Javacool - Question Starts with Post 154

 

AWESOME DOG! Great MS kb article find.. exactly what I was looking for .. thank you much for clearing this up! it makes perfect sense now why there is no process.

Do you or does anyone know if the following programs will function properly if installed on the same box?

SPYBOT S&D 1.3 (with Teatimer enabled)
AD-WARE 6.0
SPYWAREBLASTER 3.1
SPYWAREGUARD 2.2
NORTON PERSONAL FIREWALL AND NAV

any installation recomendations? does anyone know of any potential issues?

Mike

 

Spyware Guard & TeaTimer do pretty much the same thing, but they are fine toegther if u wanna double access everything

i currently run all the programs above no problem (without Spybot's teatimer enabled)

i dont use nav, so i cant say..

hope this helps

 

Hi Mike,

Yes, I have all those proggies installed ... including Norton & teatimer ... No problems at all. Regprot is great too! You'll find lots of useful proggies on this site as well as http://www.wilders.org ... I'd mention more but it would be offtopic in this thread ... if you register as user here (it's free) you can send me a PM (private message) and I could send you some links or start a thread in Software/Services forum and many here will happily reply.

HTH

dog -

 

I have tip for new record in database

webtoolbars.com

 

Hi:

I have tried several times to download SpywareBlaster 3.1 and get the following error when I run the program:

"This program has been damaged, possibly by a bad sector of the hard drive or a virus. Please reinstall it."

I have removed the program (via Add / Remove Programs) and I keep getting the same message. I also have downloaded from several differect sites with no luck. Anu help would be appreciated.

Thanks,
Don

 

look here

This Program Has Been Damaged...

regards

 

Post by kosilast split off as HijackThis log was posted. Can be seen here,

https://www.wilderssecurity.com/showthread.php?p=188314#post188314

Renamed, HijackThis Log.


snowbound

 

G'day there!
Hope someone can help me. I just installed and ran SpywareBlaster 3.1. I've been having trouble with spam and hijackers, so in the last two weeks, I've installed AdAware, Spybot S&D, and this one.
(I have to mention I'm a newbie, so please be patient!)
After it finished running I looked in my IE Browser Pages, and I've recognised the addresses of porn sites I have in my restricted sites on my HD!
One was a page I've been having trouble with lately. It's been popping up at any time.
It stated "This item is a Search Assistant related item for the Local Machine Search Assistant."
This address appears 4 times!
Another one looks like a variant of that address, it appears twice.
Also there are two files I recognise as another popup porn site.
It states: "This item is the Local Machine's Default_Page_URL", and "This item is the Local Machine's homepage, or start page."
I did have trouble with them until I added them in my restricted sites a while ago. I scanned for them and they were gone. Now they're back again? I don't understand how that could be. I couldn't find where to delete them...can anyone enlighten a computer illiterate idjit please?
Thanks in advance,
Lacey

 

Hi Lacey,

Welcome to Wilders'

Follow this post by LWM Here and post your log ( start a new thread - new thread button is located in the upper left corner ) in this Forum

Remember do not fix anything with Hijack This ... Post a log and an expert will provide instruction ... be patient as many of the experts live in different time zones, but you will receive assistance shortly.

HTH

dog -

 

Thanks Dog! Sorry 'bout that. Guess I'm still treading water here!
Lacey

 

Hi Lacey,

No apology needed ... you haven't done anything wrong ... I'm just directing you to the appropriate forum, so you'll receive the help you require ... Sorry, if you interpreted what I posted differently, it wasn't my intent.

We're Glad your Here. Enjoy your stay ... It's a great Community!

dog -

 

You said to post if you have any problems. I do!

I downloaded 3.1 without a problem. However, when I attempted to install, I get the message as follows:

"C:\WINNT\system32\MSINET.OCX
An error occurred when trying to replace the existing file:
DeleteFile Failed: code 32
The process cannot access the file because it is being used by another process. Abort Retry Cancel."

I've tried several times with nothing but Win2K running, and can't get past this. Do I have to be logged on with Admin authority to accomplish this? What is the MSINET.OCX anyway? Why are you deleting it?

 

Hi Winkers.

Welcome to Wilders.

Take a look at this link,

https://www.wilderssecurity.com/showthread.php?t=5169

Post back and let u s know if it solved your problem.


snowbound

 

I too saw something strange: the last update is from '04-05-18 and updating dat files from my 3.1-version seems to have a fake-connect without visibility.
Because i did not trust the update function, i did not reload the 3.1 version.
I have not seen a 3.0 vs after i have installed 3.1 without problems.
But if something like CWShredder is not updated enough (against 'coolweb' stuff) maybe it cleans something to get your SWB updated?

grtz

 

Alohas from Hawaii...I've searched all over the forum, but I can't find anyone with a similar problem that I've had when I installed Spywareblaster & SpywareGuard. This is what I'm running on my PC:

XP Pro with Logitech diNovo Bluetooth Keyboard, Media Pad & Mouse and Spysweeper along with Norton Anti-Virus and Norton System Utilities...

When I installed Spywareblaster & SpywareGuard, it installed without any problems, but when I rebooted my PC, it hangs up for a bit and then it doesn't load up some of my startup programs like "BTT Tray" Used for my bluetooth devices, Norton System Utilities, and Spysweeper. I ran Norton System Utilities to see if it could have fixed the problem, but no luck. I get the same problem with I restart my PC. Had no choice, but to do a System Restore. I've got it to work with my PC at the office, but my home PC didn't like it. Can anyone help me find a solution? Mahalos in advance.

DoubleVision19 @ 16:36 Hawaiian time