WARNING RE: Spybot Advanced settings

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by pegg, May 29, 2004.

  1. pegg

    pegg MajorGeek

    I read something in the Software section ("Is this Safe?") that made me check something in Spybot under Advanced Settings.

    I went in and looked under the Ignore products, dialers, etc. There are several options and many different items to check IF you want Spybot to ignore them in a check -- but that means you're asking to leave a potential problem on your system.

    I don't rememer EVER going in there and checking any of the IGNORE products, dialers, etc.

    BUT -- there were several products, dialers and other things checked that I know I want Spybot to look for (and it has looked and found them in the past) -- but come to think of it, they haven't been found recently.

    How did the box get checked? hmmmm -- call me crazy but it wasn't I.

    Maybe others want to go in to those settings too periodically and "check what's checked!"

    I posted some of the above message (in the Software section) and then alanc replied with:
    Quote: "You're not alone, I have noticed the very same thing. I may have absentmindedly added one or two, but not all the ones that are there." :confused: (end of alanc quote)

    So I thought this should be a new thread here in case it's a new problem others weren't aware of.
     
  2. Kodo

    Kodo SNATCHSQUATCH

    Just did a fresh install of 1.3.. none of the items were checked.
     
  3. HUDIK

    HUDIK Sergeant

    Thanks a lot for the info of the 'ignore' items in Spybot S&D (v.1.3) pegg. Went to check the 'ignore', and sure enough there were some ticked, and I have n e v e r ticked any off. Keeping an eye on this one..........
    Appreciate your eagle eye :)
     
  4. pegg

    pegg MajorGeek

    This can't just be happening to me

    This can't just be happening to me now!

    I'm at my mom's and just installed Spybot all fresh and new on her computer. Ran it today. Thought I should take my own advice and check this out and found 4 things checked here -- meaning on a "check", Spybot would ignore these products -- the things we want it to look for!!!
     
  5. TheDoug

    TheDoug MajorGeek

    I'm curious, too, as to why-- on a dozen or so installations of v1.3 with the latest updates, mostly on XP machines-- that the total number of immunization products varies, as does the number of total problems on the main problem scan. BTW, my fresh installs also have the mysterious four products checked to ignore.
     
  6. ANHEDONIC

    ANHEDONIC Will Title For Food

    new.net and mysearch were 2 items out of 4 that were checked on mine...
     
  7. pegg

    pegg MajorGeek

    Yep, those were 2 of the 4 on this one...I was so busy unchecking them I didn't really pay attention. This was on Windows 98 (but I don't think that's what matters). I just downloaded it July 20th.

    Something's not right there.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Very strange Kodo. I commented in the previous post Pegg was mentioning too about seeing 4 items that were always set to ignore by default. After seeing this message by you I went to a brand new WinXP PC (just out of the box and just added to my network at work). I just installed SpyBot 1.3 Final and checked the Ignore Products list under the All products tab. Here is what I found (same as last time), 4 items set to be ignored:

    LSP.New.net
    MySearch
    New.net
    Sidestep


    Does anyone know whether Ad-aware properly addresses those four items? Have we been covering our butts by always requesting both SpyBot and Ad-aware to be run? Gotta look into this!
     
  9. Laurie

    Laurie Private E-2

    Where/how do I find and access the Advanced Settings you mentioned? I don't see anything for this on the main menu.

    I've had Spybot running for less than two weeks now. Ever since I installed it, my computer is *much* slower accessing the Internet. This has me worried! Has anyone else experienced a slower computer after installing Spybot?

    Laurie
     
  10. TheDoug

    TheDoug MajorGeek

    At the top next to File it says Mode-- choices are Default and Advanced. If you change to advanced there will be a Settings folder in the left column. Spybot 1.3 has a couple of new features that run resident, but I don't find them to cause any apparent slowdown.
     
  11. Laurie

    Laurie Private E-2

    I found these 4 checked:

    LSP.New.net
    MySearch
    New.net
    SideStep

    Anybody know what they are or if I'll regret unchecking any of these? (They are now unchecked). I wonder if any of these could have caused my computer to slow down when on the Internet.

    Laurie
     
  12. krazykrl

    krazykrl Sergeant Major

    I found the same items checked, they must be there by default since I happened to have a bran new system next to me that I loaded Spybot on just a few hours ago. Someone should notify the creator in case he knows.
     
  13. Laurie

    Laurie Private E-2

    One of them must have been allowing some pop-ups because after unchecking the four items, I visited a site I normally visit everyday, and for the first time, I didn't have to click away their annoying pop-up ads :)

    Laurie
     
  14. pegg

    pegg MajorGeek

    This is weird...you WILL NOT regret unchecking them. I don't know about "slowing down" access but they're in the list because you WANT Spybot to check them in a scan and get rid of them (unless you know you want them and YOU HAVE chosen to keep them).

    They shouldn't be checked by default in new Spybot installs ??????? But - yeah, I know they are so-- what's going on here?
     
  15. ANHEDONIC

    ANHEDONIC Will Title For Food

    just curious if anyone's scanned their PC With spybot after unchecking those 4 items and actually found anything related to them?


    taken from: http://www.spysweeper.com/mysearch-uninstall.html


    "Mysearch uninstall Introduction: MySearch is a browser hijacker which runs as an IE toolbar providing search features, and a homepage-/search-hijacker, targeted at the sites run by MyWay. What is MySearch and what exactly does it do?

    MySearch is a trojan that may reset your browser's home page and/or search settings to point to other sites. Such sites are sometimes porn sites, often loaded with advertisting. Such homepage hijackers may prevent you from changing your browser’s homepage. It would slow the performance of Internet Explorer.

    It exists in the following variants :
    MySearch: This was the first variant, targeted at mysearch.com.
    MyWay: It used different filenames and targeted at myway.com.
    MyWeb: This is a new variant targeted at mywebsearch.com. It is also known as MyWay Speed Bar.
    The MySearch and MyWay variants come bundled with Grokster, Morpheus, WeatherBug, and software from mgshareware.com. MySearch has also been reported to be installed by the FavoriteMan parasite. The MyWeb variant is bundled with software like Popswatter, SmileyCentral, My Mail Stamp from “Fun Web Products”."
     
  16. Laurie

    Laurie Private E-2

    -- search settings to point to other sites . . . . It would slow the performance of Internet Explorer. --

    I had both of these happen after dealing with Spam Blocker Utility (which loaded on Hotbar). Searches were directed to wrong sites a few times but not many times. My computer was slowed down. I deleted everything I could and then installed and ran Spybot. The computer was still slow for some days until I unchecked those four boxes in the advanced settings.

    You mentioned MySearch, MyWay, MyWeb, etc. Is there any point searching all folders and files for these, to see if any are on my computer? Thanks.

    Laurie
     
  17. ANHEDONIC

    ANHEDONIC Will Title For Food


    Laurie just follow these instructions for how to do a full system scan with Spybot: http://www.lavahelp.com/howto/fullscan/index.html
     
  18. terrytheturk

    terrytheturk Private E-2

    my pc died from tons of stuff a mth back, but my spybot has been with me for some time and i have never had any of the boxes checked as i look at all the programes to see if clever programe that know we have these, it would be clever to eat them first.

    but all seems well, but when i first installed spy sweeper it found 14 things that spybot missed.
    Regards
    Terry
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What is the exact version number of SpyBot you are using?
     
  20. pegg

    pegg MajorGeek


    Hey, terrytheturk, got an answer for us? I'm curious too! ;)
     
  21. BlindTyldak

    BlindTyldak Private E-2

    I just checked mine, I had the same four items checked.

    new.net
    Sidestep
    MySearch
    LSPNew.net

    My version was installed about 5 days ago.
     
  22. BlindTyldak

    BlindTyldak Private E-2

    Hmmm . . . mine is also listing system internals that I checked to ignore, and I didn't check any. Does anyone know if these are standard to ignore for system stability, or is this another warning sign?

    %JavaDir%\QTJava.zip (Missing shared DLL file)
    install.exe (wrong app path)
    MsoHtmEd.exe (wrong app path)
    winnt32.exe (wrong app path)
     
  23. goldfish

    goldfish Lt. Sushi.DC

    Same here. The only thing I'd recommend ignoring is DSOExploit.
     
  24. BlindTyldak

    BlindTyldak Private E-2

    Okay, I unchecked the four, and also unchecked my Java.zip that it was ignoring. I had run Spybot 5 minutes before unchecking those items, and ran it again. On the new search it found:

    5 DSO Exploits
    2 Common Hijackers
    1 IGetNet

    IGetNet I had never seen before.
     
  25. pegg

    pegg MajorGeek

    Can you tell me why?
     
  26. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm a little confused by your statement "mine is also listing system internals that I checked to ignore, and I didn't check any." Either you checked them or you did not. It can't be both.
     
  27. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Because in most of the cases (not all) they are incorrect messages. It is a bug in SpyBot. What Goldie should have said was "If you are up to date with all of your Microsoft Critical Updates you can set SpyBot to ignore the DSO Exploits."
     
  28. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I believe IGetNet is now showing because you remove the ignore of new.net
     
  29. pegg

    pegg MajorGeek

    Well - WHO ISN'T up-to-date with Critical Updates, eh? You shouldn't be coming around here very long without at LEAST having that simple thing done!

    RIGHT? I'm talking to YOU now, and you know who you are. :)


    Thanks for the explanation.
     
  30. pegg

    pegg MajorGeek

    I like to BUMP this once in a while because NEW people might not realize they should check some of this out.
     
  31. cranky old lady

    cranky old lady Private E-2

    I downloaded Spybolt 1.2 from here last week and just check to see if there was an update. Is v. 1.3 a fee copy? The only items on 1.2 is File, Language, and Help. I remember seeing the term 'ignore list' on one of the programs but downloaded several spyware programs at once and now I can't find it. Do I have to pay to have v. 1.3? M.
     
  32. Just Playin

    Just Playin MajorGeek

    It's free.
     
  33. boneyeye

    boneyeye Corporal

    Hi Chaslang,
    Just to let you know that I had the same prob. with Spyot S+D 1.3 Ver. as all else here. Unchecked the same 4, then ran new scan and found nothing. Just my 2Cents. Bye.Thanks to all in Major Geeks for your good work and dedication. Have learned a lot from here. Boneyeye.
     
  34. pegg

    pegg MajorGeek

    version 1.3 final

    Hey cranky -- I love your sign in name....welcome to Major Geeks.

    Go to: http://majorgeeks.com/download2471.html and it's the download for version 1.3 final (I don't know where you picked up version 1.2 from here but...)

    Once you load it, see the directions posted already about going to "advanced mode" and finding the "ignore products" and then seeing if any are "checked" -- they shouldn't be, but that's what we're finding, that some are.

    Like we've said, if you're up-to-date with all your Microsoft Critical updates and have a firewall, antivirus, adaware, etc. then you can check the box for DSO Exploits (that's the one and only one I have checked) because that's been found to be something SpyBot finds but is ok to leave alone.

    There shouldn't be a problem with the 1.3 download...let us know if there is.
     
  35. pegg

    pegg MajorGeek

    Re: version 1.3 final

    The reason I also mentioned DSO Exploits was because I was getting info from two threads mixed. But to clarify here's what's in another thread called: 5 DSO Exploits Keep Coming Back

    I said:

    chaslang added:
     
  36. Laurie

    Laurie Private E-2

    But is there a possibility that someday DSO Exploits could indeed cause a problem? I'm leaving it unchecked. Now that I know it is currently okay for it to appear after SpyBot checks my computer (and supposedly someday they will fix this bug so that it doesn't appear unless it truly indicates a problem), it doesn't bother me seeing it appear on the list of things found.

    Laurie
     
  37. Adrynalyne

    Adrynalyne Guest

    I can name at least one member, who thinks he is too good for the updates, and tried to sway MG members his way.
     
  38. Adrynalyne

    Adrynalyne Guest

    I just did my first install ever of spybot on this machine and I have the same four items set to ignore.
     
  39. pegg

    pegg MajorGeek

    Actually -- I thought about this too -- anyone have an answer?
     
  40. pegg

    pegg MajorGeek

    The question remains WHY is this happening when these 4 were never set to ignore in any of the ever installs of spybot before? Anyone contacted SpyBot themselves about this?

    Is it just the program we're all downloading from here and we should change it to another link?
     
  41. Herk

    Herk Private E-2

    Interesting. I just checked mine and it came up with these entries which were checked:
    LSP New.Net
    MySearch
    New.Net
    SideStep

    I'd like to know what's doing it.
     
  42. Adrynalyne

    Adrynalyne Guest

    I think its pretty simple.

    The application itself is doing it.

    I've never been infected by any of those.

    I'd wager a format, clean install would still show it.

    Thats ok. I like Ad Aware better anyway.
     
  43. cranky old lady

    cranky old lady Private E-2

    Re: version 1.3 final

     
  44. Adrynalyne

    Adrynalyne Guest

    Re: version 1.3 final

    Well, I downloaded Spybot from here, not 4 hours ago and I noticed the problem.
     
  45. pegg

    pegg MajorGeek

    Re: version 1.3 final

    Yeah, she's going to have those 4 items checked no doubt, but she'll have the 1.3 version, not 1.2 (she said she downloaded the 1.2 version from here "last week" -- )
     
  46. cranky old lady

    cranky old lady Private E-2

    Re: version 1.3 final

    Pegg...I checked out my emails on this subject and both Juno and Google gave me the link to SpyBolt S&D v.1.2 but that was at the end of April or the begining of May. Not sure when I downloaded it. I do not know how to find out what date you downloaded a program on XP...actually, I still miss X-Tree Gold which told me everything I wanted to know about my files and a lot I never learned besides.

    Like everyone else, those 4 items were checked:
    LSP New.net
    My Search
    New.net
    SideStep

    That MYSearch or MytWeb is the one the got in my system and I know now it was from downloading Smiley Central. AND I loved that MYWEBSEARCH toolbar!!!! I also had the M-3 blue toolbar from the lop variant that did odd things in VIEW ->TOOLS. The name 'flaw user' had to be checked to get Google up , if I clicked on Google the blue M-3 toolbar showed up. I still don't know if these two are part of MY Sesrch. When I used CCShredder those disappeared.

    I think I will leave DOS Exploits unchecked for now. Cranky
     
  47. cranky old lady

    cranky old lady Private E-2

    Re: version 1.3 final

    OK..would you please go over the MSKB and MG... again, I don't want any kittens on my conscience. cranky
     
  48. pegg

    pegg MajorGeek

    create date

    Go to start, all programs, find the program you want to know about, right click on it, go down to properties and click on it and then you'll see "create date" -- that should be it.

    Or you can find the program in Explore and do the same thing (you right click on start, click "explore" and find the program there)
     
  49. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: version 1.3 final

    Are you asking what MSKB and MG mean?

    MSKB = Microsoft Knowledge Base : http://support.microsoft.com/default.aspx?scid=fh;EN-US;KBHOWTO

    MG = Majorgeeks

    Adrynalyne is just telling you that everyone has the same abilities to do the searches that we do. So just goto MSKB and or MG's and search for a topic before posting a question that you could answer for yourself. (Otherwise the kitty looses its head! :eek: )
     
  50. nykkistarr

    nykkistarr Private E-2

    i have had problems with spybot not responding on my computer. it never really found alot of problems when the other spyware programs did.

    i use bps spyware, which you can get a free download of, pull up bps spyware in google. its only an evaluation copy, you can go to bestserials.com to get a keycode. i love this program. i also use lavasoft adaware which is free, unless you want the professional version. these are the two i use the most. it seems like i am always dealing with spyware. i just unistalled my spybot today because i got tired of it not responding! nykk
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds