SpyBot S & D Help please

[gerry]

Hello from a newbie;

I have installed Spybot to try to get rid of some nasty malware and I have a
question. From time-to-time a window opens (it states its from Spybot)
stating:
"Spybot S&D has detected an important registry entry that has been changed"
I goes on to describe the "category, value and entry"., and then offers the
option to let the change go through or to block it.
Here's the dilemma;
I haven't a clue whether it is actually Spybot asking the question or some
other devious ******* pretending to be Spybot.
If the change has been made, are they suggesting that be denying the change
I can reverse it?
Since I don't know what to do I could make the situation worse so I block
each change. even though the thought has crossed my mind that I may be
stopping Spybot from doing its job. There is no mention of this window in
the Spybot tutorial, nor is it mentioned at all on the Spybot website and
forums haven't been helpful at all.

I'm also using Ad-aware and a full Norton complement, completely updated but
my efforts are just not paying off!

I'm losing whatever confidence I had, folks, and really would rather not
pack up the unit and go, tail between my legs, to an "expert" who will fix
it, I am sure, but I will have learned nothing and will just have to repeat
the exercise at some time in the future.

Thanks to you all for your patience, and I look forward to any constructive
suggestions.

Gerry Pyper
Salt Spring Island BC

[Beauregard T. Shagnasty]

gerry wrote:

> .. completely updated but my efforts are just not paying off!

You didn't mention what you do when email arrives with attachments, nor
what browser you are using. Do you know there are secure browsers?

http://k75s.home.att.net/tips.html

--
-bts
-Friends don't let friends drive Vista

In article <13ulit7cv1bqg45@corp.supernews.com>,
notforgenerause@nospam.com says...
> Hello from a newbie;
>
> I have installed Spybot to try to get rid of some nasty malware and I have a
> question. From time-to-time a window opens (it states its from Spybot)
> stating:
> "Spybot S&D has detected an important registry entry that has been changed"
> I goes on to describe the "category, value and entry"., and then offers the
> option to let the change go through or to block it.
> Here's the dilemma;
> I haven't a clue whether it is actually Spybot asking the question or some
> other devious ******* pretending to be Spybot.
> If the change has been made, are they suggesting that be denying the change
> I can reverse it?
> Since I don't know what to do I could make the situation worse so I block
> each change. even though the thought has crossed my mind that I may be
> stopping Spybot from doing its job. There is no mention of this window in
> the Spybot tutorial, nor is it mentioned at all on the Spybot website and
> forums haven't been helpful at all.
>
> I'm also using Ad-aware and a full Norton complement, completely updated but
> my efforts are just not paying off!
>
> I'm losing whatever confidence I had, folks, and really would rather not
> pack up the unit and go, tail between my legs, to an "expert" who will fix
> it, I am sure, but I will have learned nothing and will just have to repeat
> the exercise at some time in the future.
>
> Thanks to you all for your patience, and I look forward to any constructive
> suggestions.
>
> Gerry Pyper
> Salt Spring Island BC
>
>
>
You do not say what the OS is, so I will assume Windows XP of some type.
You also do not provide any details on what changes are being blocked,
but if we assume it is some sort of malware, I might do the following
based on what you have on your PC.

1. Boot your PC into Safe Mode (F5)

2. Bring up Windows Task Manger (CTL-ALT-DEL) and see if there are any
processes running that you do not recognize and end them if you can.
If by chance you end a wrong one, you can always reboot and not end it a
second time. If you have only essential processes running, this should
stop most malware that might interfere with the cleaning process.

3. Run both Spybot S&D and Adaware in turn and see what they turn up. I
might even run them a second time to confirm they removed all that they
can.

I am sure there are more knowledgeable people in this group who can be
of more assistance than I can and hopefully they will chime in and make
some suggestions.

The other option is to look for a "HiJackThis" forum. They might be
able to better help you clean up your PC.

Good Luck

[Dustin Cook]

"gerry" <notforgenerause@nospam.com> wrote in
news:13ulit7cv1bqg45@corp.supernews.com:

> Hello from a newbie;
>
> I have installed Spybot to try to get rid of some nasty malware and I
> have a question. From time-to-time a window opens (it states its from

Do you know the name of the malware? If not, that's okay...

You will find expert help and learn a thing or two by following the
instructions offered below; copied from the FAQ


Appendix 2. Forums where you can get expert advice for Hijack This! logs.

Download and run HijackThis.
Trend Micro's version 2.0.2 build of HijackThis may be obtained
below;
(http://www.trendsecure.com/portal/en...ijackthis.php?
page=hijackthis)

Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/foru...howtutorial=42)

Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.

*Note, //registration// *is* required prior to posting a log.
- Not listed in any particular order -

(http://aumha.net/viewforum.php?f=30)
(http://forums.spywareinfo.com/index.php?&showforum=18)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/cleanup)
(http://forum.malwareremoval.com/viewforum.php?f=11)
(http://www.cybertechhelp.com/forums/...splay.php?f=25)
(http://www.atribune.org/forums/index.php?showforum=9)
(http://www.geekstogo.com/forum/Malwa..._Logs_Go_Here-
f37.html)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://www.techmonkeys.co.uk/forums/viewforum.php?f=8)
(http://forum.networktechs.com/forumdisplay.php?f=130)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://forums.spywaretimes.com/index.php?showforum=2)
(http://www.bluetack.co.uk/forums/ind...?showforum=172)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/...p?showforum=18)
(http://www.malwarebytes.org/forums/i...hp?showforum=7)
(http://www.wilderssecurity.com/forumdisplay.php?f=26)
(http://makephpbb.com/phpbb/viewforum.php?f=2)
(http://forums.techguy.org/54-security/)
(http://forums.security-central.us/forumdisplay.php?f=13)
(http://castlecops.com/forum67.html)
(http://gladiator-antivirus.com/forum...?showforum=170)
(http://www.theeldergeek.com/forum/index.php?s=
2e9ea4e19d3289dd877ab75a8220bff6&showforum=29)



--
Regards,
Dustin Cook - http://bughunter.it-mate.co.uk
BugHunter v2.2e AntiMalware Removal Utility