Jump to content

Spybot Search & Destroy v1.4 Defs Update


TeMerc

Recommended Posts

Updated detection rules 621KBEnglish target description files 53KBSome people may have others depending on the options they have. 2005-06-02 Dialer+ TripleSexoes + WebDialer + Consul-Info B.V + Newdial + IDialer \+ Aconti Hijacker+ ISearchTech.Sidefind + CoolWWWSearch.PopupBlocker + HotsearchBar Malware+ EnConfidence + DyFuCA.InternetOptimizer + ISearchTech.ISTsvc + EffectiveBandToolbar + AbetterInternet Spyware+ Targetsaver Trojan+ Crowt-A \+ Winser http://www.safer-networking.org/en/home/index.html

Link to comment
Share on other sites

  • Replies 187
  • Created
  • Last Reply

Top Posters In This Topic

  • TeMerc

    180

  • striker

    4

  • ebrke

    2

  • hkspike

    1

Top Posters In This Topic

2005-06-10Adware+ DealHelperDialer++ Newdial.ital + Sysweb Telecom + ClickYesToEnterLtd. + Aconti + Browserplugin.com ++ All-In-One Telcom ++ Cbit-Solutions + One2BillHijacker++ CoolWWWSearch.BadZoneMap (11) ++ CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.PopupBlocker + CleverIEHooker.Jeired ++ MyToolBar ++ Virtual Grub + CoolWWWSearch.Aff.Winshow + ISearchTech.SideFind ++ Agobot + Look2Me.BM2 + Avenue A, Inc.Malware+ E2Give + Apphunter ++ Trek Blue Error Nuker (2) ++ IRC-Worm 1.4 ++ Forbot ++ GetPostLog + MediaMotor + Pacimedia ++ ad-behavior ++ AzeSearchSpyware+ Targetsaver + 180Solutions.SearchAssistant (13) + 180Solutions.SearchAssistant.Boomerang ++ 180Solutions.Zango (2)Trojan++ Dloader-BKhttp://www.safer-networking.org/en/home/index.html

Link to comment
Share on other sites

Has anybody had any issues with MS Internet Explorer after this update. Suddenly IE just crashes and the MS help says this?This SpyBot update is the only recent change to any Add-Ons running. I've had a look in Safe Mode and the SpyBot Add-On is the only one without a clear name. No spyware, no viruses.Guess I will have to disable them one at a time.Andy

Link to comment
Share on other sites

2005-06-17Dialer+ MainPean + PhonCom + Consul-Info B.V + Carima Enterprises Limited + Tele Team Work Aps + eGroup.InstantAccess + Wabgcom + Holistyc + Dialerweb.RuboskizoHijacker+ Searchingall + CoolWWWSearch.BadZoneMap (11) + CoolWWWSearch.Feat2Installer.ADSMalware+ MTC.Saristar + CallingHome.biz + Mosaic1 + PacimediaSpyware+ 180Solutions.SearchAssistant (4) ++ 180Solutions.SearchAssistant.BoomerangTrojan+ WintrimSpybot Search & Destroy Home PageNote: Beta Detections for Advanced Users Only, Use At Your Own Risk For more on 'Beta' Detections and what they mean, read here

Link to comment
Share on other sites

2005-06-24 Dialer+ Tango ++ TIBS Hijacker++ MoneyGainer ++ xxsware Inc. + ISearchTech.PowerScan + ISearchTech.SideFind (9) Keylogger++ Dumaru Malware++ Adware.ZioCom.B ++ kz515.com + AzeSearch + ISearchTech.ISTsvc (22) + ClimaxBucks.InternetOptimizer Spybot Search & DestroyNote: Beta Detections for Advanced Users Only, Use At Your Own Risk For more on 'Beta' Detections and what they mean, read here

Link to comment
Share on other sites

2005-06-30 Dialer++ DerBiz + WebInstall ++ FCI Inc.FCDialer Hijacker++ Media Access + CoolWWWSearch.Aff.Winshow ++ CoolWWWSearch.BadZoneMaps + CoolWWWSearch Malware+ Adware.ZioCom.B (8) ++ SpywareNo + Switp ++ NeedEdware + GAIN.Dashbar ++ Firewall_Anti Spyware+ ShopAtHome Trojan++ PWS-Banker.C Don't forget to re-immunizeSpybot Search & Destroy Home

Link to comment
Share on other sites

2005-07-07 Dialer+ TIBS Hijacker+ ISearchTech.ISTbar + Agent-BR2 + Simplenter Malware+ AzeSearch + ISearchTech.YSB + Switp + DyFuCa.InternetOptimizer + Universal Boards.Plugin + AbetterInternet (2) + Ettray + AV-Gold + Cashsaver + Abetterinternet.imGiant Spyware+ Exact Advertising.BargainsBuddy + 180Solutions.SearchAssistant + eZula HotText Trojan+ Prorat-D + StartPage-N + CWS.WinSecurityCenter + MSN_trojan + ICQ_trojan Spybot Search & destroy Home

Link to comment
Share on other sites

2005-07-15 Hijacker+ SearchForIt + TNS-Search Malware+ Abetterinternet (2) + Look2Me (2) Spyware+ eZula HotText + Targetsaver + GAIN.DashBar + WhenU.ClockSync + VX2.ABetterInternet + IEPlugin Trojan+ Haxdoor-H Spybot Home Page

Link to comment
Share on other sites

  • 2 weeks later...

2005-07-30Dialer+ CarpeDiem VarsHijacker+ ISearchTech.ISTbarMalware+ AbetterInternet.Aurora + MediaMotor + AproposMedia + Spy Sheriff ++ Web-Nexus + Switp + ISearchTech.YSB + DyFuCa.InternetOptimizerSpyware++ ExactAdvertising.BargainsBuddy + 180Solutions.SearchAssistantTrojan+ SearchForitTotal: 258241 fingerprints in 27659 rules for 1631 products.Spybot Search & Destroy

Link to comment
Share on other sites

2005-08-05 Hijacker+ Network Essentials.Search-Exe + CoolWWWSearch.HomeSearch Malware+ Trek Blue Error Nuker ++ DDE Control ++ ShowMyBar + AbetterInternet.Aurora ++ RealDownloadExpress ++ Zippy + CoolWWWSearch (8) Spyware+ 180Solutions.SearchAssistant (6) Trojan++ Hookdump ++ Qoologic (7) Total: 258460 fingerprints in 27694 rules for 1636 products.Spybot Search & Destroy

Link to comment
Share on other sites

  • 2 weeks later...

2005-08-13 Dialer++ EGDACCESS Hijacker+ MTC.MakeMeSearch.com Malware+ Smitfraud-C. + AV-Gold + PSGuard ++ Rbot-VN ++ LSA PUPS++ Wareout Spyware++ BHO.Explorer.DSManager + IwantSearch Trojan+ Peper ++ ShowWnd ++ CDownCom Total: 260344 fingerprints in 28201 rules for 1650 products.Spybot Search & Destroy

Link to comment
Share on other sites

2005-08-19 Dialer++ Sfonditalia ++ Sgrunt Hijacker++ CoolWWWSearch.SearchKlick Malware+ PSGuard + AzeSearch + Look2Me Security++ Zonemap.Ranges ++ Zonemap.Domains Trojan++ PSGuard.msmsgs ++ BeastDo.Pztrain ++ Dluca.CWAD Total: 261331 fingerprints in 28427 rules for 1659 products.Spybot Search & Destroy

Link to comment
Share on other sites

With the August 19th defs update, the dreaded DSO exploit has reared its ugly head yet again.There are 2 ways to deal with this, tho, the Spybot forums recommend you let Spybot fix them, and they will not return, or, you can just set them to ignore:

  • Open Spybot Search & Destroy.
  • In the Mode menu click "Advanced mode" if not already selected.
  • Choose "Yes" at the Warning prompt.
  • Expand the "Settings" menu.
  • Click "Ignore products".
  • Click the "Security" tab.
  • Check the "DSO Exploit" box.
  • In the File menu click "Exit" to exit Spybot Search & Destroy.

If you get the "DSO Exploit" detection with Spybot 1.4 you can fix it. Now it fixes that detection properly so that it is not a repeditive detection.
I did just this, and it worked fine on 2 boxes.Source: Spybot Forum
Link to comment
Share on other sites

2005-08-26 Dialer++ ConnectMePlus Hijacker+ C2.lop ++ MT-Dials ++ GTDownloader ++ WebResponseAttachments ++ TLIEFlash Malware+ AbetterInternet.Aurora + Winfixer Trojan++ IESP2.Spyzm + ISearchTech.ISTbar ++ PWS.LDPinch Total: 261131 fingerprints in 28415 rules for 1658 productsSpybot Search & Destroy

Link to comment
Share on other sites

2005-09-02 Hijacker+ AdultStore + Wild Media + TNS-Search + ShoptAtHome + 180Search.Solutions Malware+ Spy Sheriff + AbetterInternet.Aurora + Smitfraud-C. + SurfSideKick Spyware+ WhenU.Search.Desktoptoolbar + Exact Advertising.BargainsBuddy Trojan+ CnsMin.ZsMod + CnsMin + Yahoo.YiSouBar + RouterLayer.TDL ++ QDiagHUpdate Total: 262490 fingerprints in 28746 rules for 1672 products.Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

2005-09-09 Hijacker+ C2.lop + ShopAtHome Malware+ AbetterInternet.Aurora + SurfSideKick + WinFixer + Smitfraud-C. + Spy Sheriff (2) Spyware+ Sumom.A Trojan+ Elitum.EliteBar + Anyforce.Bot + Windows AdTools Total: 262873 fingerprints in 28878 rules for 1672 products.Spybot Search & Destroy

Link to comment
Share on other sites

2005-09-16Dialer++ Realdialer Hijacker+ CoolWWWSearch.Feat2DLL (44) + CoolWWWSearch.Feat2Installer (29) + CoolWWWSearch.Homesearch (15) + CoolWWWSearch.Service (15) ++ CoolWWWSearch.mshp (10) + CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.SearchKlick + Network Essentials.Search-Exe Malware+ ISearchTech.ISTsvc + ISearchTech.ISTsvc_Updater (12) ++ ISearchTech.ISTdownload (87) + PSGuard Total: 271713 fingerprints in 30158 rules for 1675 products.Spybot Search & Destroy

Link to comment
Share on other sites

2005-09-23 Hijacker+ CoolWWWSearch.Feat2Installer (13) + CoolWWWSearch.Feat2Installer.ADS (10) + CoolWWWSearch.Service (11) + CoolWWWSearch.Feat2DLL (58 ) ++ QuickNavigate + ISearchTech.ISTDownloader Total: 273759 fingerprints in 30439 rules for 1674 products.Spybot Search & Destroy

Link to comment
Share on other sites

2005-09-30 Hijacker++ NWS-Search + CoolWWWSearch.Feat2Installer (5) + CoolWWWSearch.Service (2) + CoolWWWSearch.Feat2DLL + CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch Malware+ AzeSearch + Spy Sheriff + Smitfraud-C. Trojan++ Winsoftware.Common ++ Winsoftware.WinAntiSpyware2005 ++ Winsoftware.WinAntiVirus2005pro ++ PWS.PDPinch Total: 275583 fingerprints in 30880 rules for 1682 products.Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

Updates: 2005-06-10Adware+ DealHelperDialer++ Newdial.ital + Sysweb Telecom + ClickYesToEnterLtd. + Aconti + Browserplugin.com ++ All-In-One Telcom ++ Cbit-Solutions + One2BillHijacker++ CoolWWWSearch.BadZoneMap (11) ++ CoolWWWSearch.Feat2Installer.ADS + CoolWWWSearch.PopupBlocker + CleverIEHooker.Jeired ++ MyToolBar ++ Virtual Grub + CoolWWWSearch.Aff.Winshow + ISearchTech.SideFind ++ Agobot + Look2Me.BM2 + Avenue A, Inc.Malware+ E2Give + Apphunter ++ Trek Blue Error Nuker (2) ++ IRC-Worm 1.4 ++ Forbot ++ GetPostLog + MediaMotor + Pacimedia ++ ad-behavior ++ AzeSearchSpyware+ Targetsaver + 180Solutions.SearchAssistant (13) + 180Solutions.SearchAssistant.Boomerang ++ 180Solutions.Zango (2)Trojan++ Dloader-BK Spybot Search & Destroy

Link to comment
Share on other sites

Definition Details from Oct 7 update2005-10-07Dialer++ TIBS Hijacker++ CWS.SearchAssistant + C2.lop + ShopAtHome ++ CoolWWWSearch.IELinks + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Malware+ AV-Gold + ISearchTech.ISTDownloader (5) + SurfSideKick + Spy Sheriff + ISearchTech.ISTsvc + DyFuCa.InternetOptimizer + AbetterInternet + AzeSearch ++ Smitfraud.C Security++ Windows Security Center.TaskManager Spyware+ Exact Advertising.BargainsBuddy + 180Solutions.SearchAssistant Trojan+ MZS.Spoolserver32 Total: 234434 fingerprints in 24613 rules for 1711 products.

Link to comment
Share on other sites

2005-10-14 Dialer++ TIBS Hijacker++ Service68 + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL + C2.lop Malware+ Spyware Cleaner ++ SpyTrooper + Smitfraud-C. Trojan+ MZS.Spoolserver32 ++ IPFW Total: 234464 fingerprints in 24643 rules for 1693 products.Note: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

There is update info posted on the Spybot archive page, yet, when you click the 'check for updates' button, your told none are available.From this Spybot forum thread:

There is an impending change in the Download Mirrors to attempt to fix the Bad Checksum problems we've seen so much lately. I'm not certain this is the reason, but it would obviously explain a delay if so.Since the actual updates and the Update History are really seperate items, one will always occur before the other. Since the files themselves must be locked down well before they are actually released, I'd think it's surprising this isn't the more common situation. I can recall another time this occured only a few weeks ago and I believe it took about a day before the files themselves released.Either way, would you rather they took the time to answer your question or worked on whatever the issue is that's causing the delay? I'd prefer the former myself.
Link to comment
Share on other sites

2005-10-21 Dialer+ AxFreeAccess Hijacker+ CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL + 180Solutions.SearchAssistant Malware+ Smitfraud-C (2) PUPS+ WareOutSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

2005-10-28 Hijacker+ CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Spyware+ Exact Advertising.BargainsBuddy Trojan+ Elitum.EliteBarSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

2005-11-04 Hijacker+ Smitfraud-C. + StarWare + FatPickle + Cram Toolbar + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Keylogger+ GoldenKeylogger Malware+ SurfAccuracy + SpySpotter + Nat PUPS+ New.Net + Registry Cleaner (2) + Download Accelerator Plus Spyware+ Huntbar Trojan+ Elitum.EliteBar Spybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

Nov. 11 2005Hijacker++ MaxSearch + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Malware++ Adware.Webext ++ SpywareBomber ++ WorldAntiSpy PUPS+ Registry Cleaner Security++ Desktop.ActiveDesktop + Desktop.Explorer ++ Windows.System Trojan++ DKandSuns Fake Security Toolbar + Spy SheriffSpybot Search & DestroyNote: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Edited by TeMerc
Link to comment
Share on other sites

Nov 18 2005Hijacker+ Metastop + SmitFraud-C. + CoolWWWSearch.Feat2Installer + CoolWWWSearch.Service + CoolWWWSearch.Feat2DLL Malware+ WinFixer2005 + SpyBlocs Spyware+ SpywareNuker Trojan+ Spy Sheriff Spybot Search & Destroy Note: If you use IE-SPYAD, Spybot Search & Destroy, SpywareGuide Blocklist, SpywareBlaster, a hosts file or any combination of those, please read this information from Eric Howes, on how the protection offered in each, affect the other. Specifically as it relates to 'Restricted Sites', 'Immunization' and hosts files.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...