Jump to content
Sign in to follow this  
TeMerc

Spybot Search & Destroy v1.4 Defs Update

Recommended Posts

Updated detection rules 621KBEnglish target description files 53KBSome people may have others depending on the options they have. 2005-06-02 Dialer+ TripleSexoes + WebDialer + Consul-Info B.V + Newdial + IDialer \+ Aconti Hijacker+ ISearchTech.Sidefind + CoolWWWSearch.PopupBlocker + HotsearchBar Malware+ EnConfidence + DyFuCA.InternetOptimizer + ISearchTech.ISTsvc + EffectiveBandToolbar + AbetterInternet Spyware+ Targetsaver Trojan+ Crowt-A \+ Winser http://www.safer-networking.org/en/home/index.html

Share this post


Link to post
Share on other sites

2005-06-10Adware+ DealHelperDialer++ Newdial.ital + Sysweb Telecom + ClickYesToEnterLtd. + Aconti + Browserplugin.com ++ All-In-One Telcom ++ Cbit-Solutions + One2BillHijacker++ CoolWWWSearch.BadZoneMap (11) ++ CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.PopupBlocker + CleverIEHooker.Jeired ++ MyToolBar ++ Virtual Grub + CoolWWWSearch.Aff.Winshow + ISearchTech.SideFind ++ Agobot + Look2Me.BM2 + Avenue A, Inc.Malware+ E2Give + Apphunter ++ Trek Blue Error Nuker (2) ++ IRC-Worm 1.4 ++ Forbot ++ GetPostLog + MediaMotor + Pacimedia ++ ad-behavior ++ AzeSearchSpyware+ Targetsaver + 180Solutions.SearchAssistant (13) + 180Solutions.SearchAssistant.Boomerang ++ 180Solutions.Zango (2)Trojan++ Dloader-BKhttp://www.safer-networking.org/en/home/index.html

Share this post


Link to post
Share on other sites

Has anybody had any issues with MS Internet Explorer after this update. Suddenly IE just crashes and the MS help says this?This SpyBot update is the only recent change to any Add-Ons running. I've had a look in Safe Mode and the SpyBot Add-On is the only one without a clear name. No spyware, no viruses.Guess I will have to disable them one at a time.Andy

Share this post


Link to post
Share on other sites

I have not heard of any IE related problems, does not mean there are none tho.Try dropping a note over at the Official Spybot S&D forumSomeone will help you out I'm sure.Hope that helps.

Share this post


Link to post
Share on other sites

2005-06-17Dialer+ MainPean + PhonCom + Consul-Info B.V + Carima Enterprises Limited + Tele Team Work Aps + eGroup.InstantAccess + Wabgcom + Holistyc + Dialerweb.RuboskizoHijacker+ Searchingall + CoolWWWSearch.BadZoneMap (11) + CoolWWWSearch.Feat2Installer.ADSMalware+ MTC.Saristar + CallingHome.biz + Mosaic1 + PacimediaSpyware+ 180Solutions.SearchAssistant (4) ++ 180Solutions.SearchAssistant.BoomerangTrojan+ WintrimSpybot Search & Destroy Home PageNote: Beta Detections for Advanced Users Only, Use At Your Own Risk For more on 'Beta' Detections and what they mean, read here

Share this post


Link to post
Share on other sites

2005-06-24 Dialer+ Tango ++ TIBS Hijacker++ MoneyGainer ++ xxsware Inc. + ISearchTech.PowerScan + ISearchTech.SideFind (9) Keylogger++ Dumaru Malware++ Adware.ZioCom.B ++ kz515.com + AzeSearch + ISearchTech.ISTsvc (22) + ClimaxBucks.InternetOptimizer Spybot Search & DestroyNote: Beta Detections for Advanced Users Only, Use At Your Own Risk For more on 'Beta' Detections and what they mean, read here

Share this post


Link to post
Share on other sites

thanks, temerc, for the continued updates (on all topics!)

Share this post


Link to post
Share on other sites

2005-06-30 Dialer++ DerBiz + WebInstall ++ FCI Inc.FCDialer Hijacker++ Media Access + CoolWWWSearch.Aff.Winshow ++ CoolWWWSearch.BadZoneMaps + CoolWWWSearch Malware+ Adware.ZioCom.B (8) ++ SpywareNo + Switp ++ NeedEdware + GAIN.Dashbar ++ Firewall_Anti Spyware+ ShopAtHome Trojan++ PWS-Banker.C Don't forget to re-immunizeSpybot Search & Destroy Home

Share this post


Link to post
Share on other sites

2005-07-07 Dialer+ TIBS Hijacker+ ISearchTech.ISTbar + Agent-BR2 + Simplenter Malware+ AzeSearch + ISearchTech.YSB + Switp + DyFuCa.InternetOptimizer + Universal Boards.Plugin + AbetterInternet (2) + Ettray + AV-Gold + Cashsaver + Abetterinternet.imGiant Spyware+ Exact Advertising.BargainsBuddy + 180Solutions.SearchAssistant + eZula HotText Trojan+ Prorat-D + StartPage-N + CWS.WinSecurityCenter + MSN_trojan + ICQ_trojan Spybot Search & destroy Home

Share this post


Link to post
Share on other sites

2005-07-15 Hijacker+ SearchForIt + TNS-Search Malware+ Abetterinternet (2) + Look2Me (2) Spyware+ eZula HotText + Targetsaver + GAIN.DashBar + WhenU.ClockSync + VX2.ABetterInternet + IEPlugin Trojan+ Haxdoor-H Spybot Home Page

Share this post


Link to post
Share on other sites

2005-07-30Dialer+ CarpeDiem VarsHijacker+ ISearchTech.ISTbarMalware+ AbetterInternet.Aurora + MediaMotor + AproposMedia + Spy Sheriff ++ Web-Nexus + Switp + ISearchTech.YSB + DyFuCa.InternetOptimizerSpyware++ ExactAdvertising.BargainsBuddy + 180Solutions.SearchAssistantTrojan+ SearchForitTotal: 258241 fingerprints in 27659 rules for 1631 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-08-05 Hijacker+ Network Essentials.Search-Exe + CoolWWWSearch.HomeSearch Malware+ Trek Blue Error Nuker ++ DDE Control ++ ShowMyBar + AbetterInternet.Aurora ++ RealDownloadExpress ++ Zippy + CoolWWWSearch (8) Spyware+ 180Solutions.SearchAssistant (6) Trojan++ Hookdump ++ Qoologic (7) Total: 258460 fingerprints in 27694 rules for 1636 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-08-13 Dialer++ EGDACCESS Hijacker+ MTC.MakeMeSearch.com Malware+ Smitfraud-C. + AV-Gold + PSGuard ++ Rbot-VN ++ LSA PUPS++ Wareout Spyware++ BHO.Explorer.DSManager + IwantSearch Trojan+ Peper ++ ShowWnd ++ CDownCom Total: 260344 fingerprints in 28201 rules for 1650 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-08-19 Dialer++ Sfonditalia ++ Sgrunt Hijacker++ CoolWWWSearch.SearchKlick Malware+ PSGuard + AzeSearch + Look2Me Security++ Zonemap.Ranges ++ Zonemap.Domains Trojan++ PSGuard.msmsgs ++ BeastDo.Pztrain ++ Dluca.CWAD Total: 261331 fingerprints in 28427 rules for 1659 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

With the August 19th defs update, the dreaded DSO exploit has reared its ugly head yet again.There are 2 ways to deal with this, tho, the Spybot forums recommend you let Spybot fix them, and they will not return, or, you can just set them to ignore:

  • Open Spybot Search & Destroy.
  • In the Mode menu click "Advanced mode" if not already selected.
  • Choose "Yes" at the Warning prompt.
  • Expand the "Settings" menu.
  • Click "Ignore products".
  • Click the "Security" tab.
  • Check the "DSO Exploit" box.
  • In the File menu click "Exit" to exit Spybot Search & Destroy.

If you get the "DSO Exploit" detection with Spybot 1.4 you can fix it. Now it fixes that detection properly so that it is not a repeditive detection.
I did just this, and it worked fine on 2 boxes.Source: Spybot Forum

Share this post


Link to post
Share on other sites

2005-08-26 Dialer++ ConnectMePlus Hijacker+ C2.lop ++ MT-Dials ++ GTDownloader ++ WebResponseAttachments ++ TLIEFlash Malware+ AbetterInternet.Aurora + Winfixer Trojan++ IESP2.Spyzm + ISearchTech.ISTbar ++ PWS.LDPinch Total: 261131 fingerprints in 28415 rules for 1658 productsSpybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-09-02 Hijacker+ AdultStore + Wild Media + TNS-Search + ShoptAtHome + 180Search.Solutions Malware+ Spy Sheriff + AbetterInternet.Aurora + Smitfraud-C. + SurfSideKick Spyware+ WhenU.Search.Desktoptoolbar + Exact Advertising.BargainsBuddy Trojan+ CnsMin.ZsMod + CnsMin + Yahoo.YiSouBar + RouterLayer.TDL ++ QDiagHUpdate Total: 262490 fingerprints in 28746 rules for 1672 products.Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

2005-09-09 Hijacker+ C2.lop + ShopAtHome Malware+ AbetterInternet.Aurora + SurfSideKick + WinFixer + Smitfraud-C. + Spy Sheriff (2) Spyware+ Sumom.A Trojan+ Elitum.EliteBar + Anyforce.Bot + Windows AdTools Total: 262873 fingerprints in 28878 rules for 1672 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-09-16Dialer++ Realdialer Hijacker+ CoolWWWSearch.Feat2DLL (44) + CoolWWWSearch.Feat2Installer (29) + CoolWWWSearch.Homesearch (15) + CoolWWWSearch.Service (15) ++ CoolWWWSearch.mshp (10) + CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.SearchKlick + Network Essentials.Search-Exe Malware+ ISearchTech.ISTsvc + ISearchTech.ISTsvc_Updater (12) ++ ISearchTech.ISTdownload (87) + PSGuard Total: 271713 fingerprints in 30158 rules for 1675 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-09-23 Hijacker+ CoolWWWSearch.Feat2Installer (13) + CoolWWWSearch.Feat2Installer.ADS (10) + CoolWWWSearch.Service (11) + CoolWWWSearch.Feat2DLL (58 ) ++ QuickNavigate + ISearchTech.ISTDownloader Total: 273759 fingerprints in 30439 rules for 1674 products.Spybot Search & Destroy

Share this post


Link to post
Share on other sites

2005-09-30 Hijacker++ NWS-Search + CoolWWWSearch.Feat2Installer (5) + CoolWWWSearch.Service (2) + CoolWWWSearch.Feat2DLL + CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch Malware+ AzeSearch + Spy Sheriff + Smitfraud-C. Trojan++ Winsoftware.Common ++ Winsoftware.WinAntiSpyware2005 ++ Winsoftware.WinAntiVirus2005pro ++ PWS.PDPinch Total: 275583 fingerprints in 30880 rules for 1682 products.Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

Updates: 2005-06-10Adware+ DealHelperDialer++ Newdial.ital + Sysweb Telecom + ClickYesToEnterLtd. + Aconti + Browserplugin.com ++ All-In-One Telcom ++ Cbit-Solutions + One2BillHijacker++ CoolWWWSearch.BadZoneMap (11) ++ CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.PopupBlocker + CleverIEHooker.Jeired ++ MyToolBar ++ Virtual Grub + CoolWWWSearch.Aff.Winshow + ISearchTech.SideFind ++ Agobot + Look2Me.BM2 + Avenue A, Inc.Malware+ E2Give + Apphunter ++ Trek Blue Error Nuker (2) ++ IRC-Worm 1.4 ++ Forbot ++ GetPostLog + MediaMotor + Pacimedia ++ ad-behavior ++ AzeSearchSpyware+ Targetsaver + 180Solutions.SearchAssistant (13) + 180Solutions.SearchAssistant.Boomerang ++ 180Solutions.Zango (2)Trojan++ Dloader-BK Spybot Search & Destroy

Share this post


Link to post
Share on other sites

Definition Details from Oct 7 update2005-10-07Dialer++ TIBS Hijacker++ CWS.SearchAssistant + C2.lop + ShopAtHome ++ CoolWWWSearch.IELinks + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Malware+ AV-Gold + ISearchTech.ISTDownloader (5) + SurfSideKick + Spy Sheriff + ISearchTech.ISTsvc + DyFuCa.InternetOptimizer + AbetterInternet + AzeSearch ++ Smitfraud.C Security++ Windows Security Center.TaskManager Spyware+ Exact Advertising.BargainsBuddy + 180Solutions.SearchAssistant Trojan+ MZS.Spoolserver32 Total: 234434 fingerprints in 24613 rules for 1711 products.

Share this post


Link to post
Share on other sites

2005-10-14 Dialer++ TIBS Hijacker++ Service68 + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL + C2.lop Malware+ Spyware Cleaner ++ SpyTrooper + Smitfraud-C. Trojan+ MZS.Spoolserver32 ++ IPFW Total: 234464 fingerprints in 24643 rules for 1693 products.Note: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

There is update info posted on the Spybot archive page, yet, when you click the 'check for updates' button, your told none are available.From this Spybot forum thread:

There is an impending change in the Download Mirrors to attempt to fix the Bad Checksum problems we've seen so much lately. I'm not certain this is the reason, but it would obviously explain a delay if so.Since the actual updates and the Update History are really seperate items, one will always occur before the other. Since the files themselves must be locked down well before they are actually released, I'd think it's surprising this isn't the more common situation. I can recall another time this occured only a few weeks ago and I believe it took about a day before the files themselves released.Either way, would you rather they took the time to answer your question or worked on whatever the issue is that's causing the delay? I'd prefer the former myself.

Share this post


Link to post
Share on other sites

2005-10-21 Dialer+ AxFreeAccess Hijacker+ CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL + 180Solutions.SearchAssistant Malware+ Smitfraud-C (2) PUPS+ WareOutSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

2005-10-28 Hijacker+ CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Spyware+ Exact Advertising.BargainsBuddy Trojan+ Elitum.EliteBarSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

2005-11-04 Hijacker+ Smitfraud-C. + StarWare + FatPickle + Cram Toolbar + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Keylogger+ GoldenKeylogger Malware+ SurfAccuracy + SpySpotter + Nat PUPS+ New.Net + Registry Cleaner (2) + Download Accelerator Plus Spyware+ Huntbar Trojan+ Elitum.EliteBar Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Share this post


Link to post
Share on other sites

Nov. 11 2005Hijacker++ MaxSearch + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Malware++ Adware.Webext ++ SpywareBomber ++ WorldAntiSpy PUPS+ Registry Cleaner Security++ Desktop.ActiveDesktop + Desktop.Explorer ++ Windows.System Trojan++ DKandSuns Fake Security Toolbar + Spy SheriffSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Edited by TeMerc

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...