SpyBot Freezes then told it has changed

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Multivits, May 24, 2011.

  1. Multivits

    Multivits Private E-2

    Hi Major Geeks
    I have followed the "READ ME" to the letter and am now posting because I "Do Still Have Problems"

    Combofix did not run successfully, so no log I guess.

    MGTools ran in the command prompt but no log exists.

    When I run SpyBot it freezes at 41108 "Please wait scanning download directories" (I even left it over night to check that I wasn't just being impatient).

    I then have to CTRL+ALT+DEL to end program. After SpyBot has ended

    and I try to run Word or Excel I get "Error Null is not a valid operator" this is after SpyBot has been closed.

    If I try and invoke SpyBot again I get "Error SpyBot has changed since last run, since SpyBot can't change itself we suggest you check you system for spyware or viruses immediately".

    I have to re-boot to get normality.

    The SpyBot guys have tried to nut this one out but no success.

    I have just cloned my hard drive, but I did have troubles with SpyBot from the original hard drive (which I will put back in and see if the fault replicates) .

    TIA

    Multivits
     

    Attached Files:

    Last edited: May 24, 2011
  2. Multivits

    Multivits Private E-2

    SpyBot freezes Then told it has Chnaged II

    Hi MG
    I found zip file for MGtools log, I think, on my F:\ and it is attached

    TIA

    Multivits
     
  3. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    The MGlogs.zip did not attach. Please try again.
     
  4. Multivits

    Multivits Private E-2

    MGtools zip file is zip.exe and upload states it is an invalid file format.

    I am not sure this is the correct log file!!

    Thanks

    Multivits
     
  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    It is not zip.exe it is MGLogs.zip and you should find it on the root of your boot drive: C:\ If you cannot find it then you will have to run C:\MGTools.exe again in order to produce it.
     
  6. Multivits

    Multivits Private E-2

    Thanks Kestrel13

    Have run MGTools.exe several times.

    no file called MGLogs.zip appears.

    When running MGTools.exe I see the command line screen and the instruction scroll then it ends and nothing,

    I have MGTools.exe saved on my second drive the F: and run it from there does this matter?

    TIIA

    Multivits
     
  7. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    It needs to be run from the root of you boot drive, usually C:\
     
  8. Multivits

    Multivits Private E-2

    Hi Kestral13
    I have done as requested pls see log attached

    Multivits
     

    Attached Files:

  9. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    I am not seeing any malware in those logs.

    test.exe.exe <--- Is this Combofix renamed? If you were to rename it to only have ONE extension such as jogging.com will it run then???

    Important Notice: A new version of SUPERAntiSpyware is available.
    • Please uninstall your current version (this is necessary).
    • Then download this SUPERAntiSpyware
    • Install this new version. It may tell you that you need to reboot to complete the installation. You must reboot at this time.
    • After the reboot, run SUPERAntiSpyware and immediately click the Check for Updates button to get more updates for the database.
    • Now run a new full scan of your system. And attach this log later.

    What antivirus are you currently using? (Did you uninstall something in order to run the R&R? I see remnants from comodo and Norton.)

    C:\Documents and Settings\All Users\Application Data\XoftSpySE <--- Delete this folder.

    I want you to run TDSSKiller so refer to the below for how to do so.

    TDSSkiller - How to run
     
  10. Multivits

    Multivits Private E-2

    Yes thats combofix renamed, i didn't realise it was doubled.exe will rename it and try and run it.

    Pity no Malware, something is tripping up Spybot, is it lack of memory?? Although Spybot has worked fine for years.

    TIA

    Multivits
     
    Last edited: May 30, 2011
  11. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Yea, to dig a bit deeper get CF and TDSSKiller run and attach the results. (Also the updated version of SAS)
     
  12. Multivits

    Multivits Private E-2

    Hi Kestrel31
    Please see log for SAS (found 9 Adware Tracking Cookies) and for TDSSKiller

    I am not having any success with ComboFix, although I have followed all running notes on the Bleeping Computer website,

    Any help you can give to get CF to run to completion.

    It runs for about 2 minutes (hearing the HDD indexing) then silence on the HDD, even left it over night but did not get to any stages,

    TIA

    Multivits
     

    Attached Files:

  13. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Try in safe mode. Note that because Combofix does not run it does not mean malware is still at play. There can be other reasons too.
     
  14. Multivits

    Multivits Private E-2

    No joy in safe mode either. I have now uninstalled SpyBot and won't use it so problem solved.

    In case its of use to anyone else heres what I got:
    Spybot hangs (usually on "Please wait scanning download directories")
    After ending Spybot with TaskManager it seriously screws up Windows operation

    icons loose their proper graphics and go to default generic icon graphic
    programs won't load and only come up with errors like unrecognised dlls etc
    All desk top icon descriptions (the ones that show when you hover over them) read the same thing i.e the description for Spybot!
    if i try and run Spybot again get error message "Spybot has changed since it was installed, since it can't change on its own run aniti virus or malware now"
    if i do a screen dump to capture error messages I can't paste them to any application because I get not enough memory messages
    only resolution is to re-boot

    Its as if Spybot is having a memory over run

    Thanks for your help

    Kestrrel13

    Over and out

    Multivits Gone.............................
     
  15. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You're welcome. :)

    I do not rate Spybot anyway.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds