| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 60418 | 2005-08-01 04:18:00 | Spybot & Network Activity | CYaBro (73) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 377159 | 2005-08-01 04:18:00 | Just noticed that, on 2 out 6 PC's I have in front of me at the moment, when running a scan in Spybot V1.3 or V1.4, the network activity lights are on solid in the taskbar and by the time the scan has finished the PC's have downloaded about 10MB of data! It is definitely Spybot because when I stop the scan the lights go out. Has anybody else noticed the before? What would Spybot need to download from the net while running a scan? I can disconnect the network cable and the scan still runs fine. Why is it only happening on 2 PC's? I could install ZoneAlarm or similar to see what is trying to access the internet but I'm sure it will just tell me it's Spybot. |
CYaBro (73) | ||
| 377160 | 2005-08-01 13:24:00 | spybot support forum (forums.net-integration.net) More importantly what remote site is Spybot connecting to? |
gibler (49) | ||
| 377161 | 2005-08-01 22:49:00 | What mode do you have Spybot in?, Default or Advanced. If you switch from Default to Advanced you get a warning about possible damage to your system. Just run on line in Default mode with no activity signs from Zone Alarm Pro. |
FrankS (257) | ||
| 377162 | 2005-08-01 23:20:00 | Actually, running Spybot in advanced mode is not dangerous at all; quite the counter . In default or simple mode you cannot see if you have had certain searched-for options turned off or not . In advanced mode, all settings and allowed searches are much more easily controllable and you can see if something has left you open for infestation . It seems that much malware actually fears Spybot and the first thing it tries to do is cause Spybot to malfunction with an eye toward protecting itself, (the spyware) . Whenever Spybot acts up or strangely, suspect the worst! Without the advanced mode, you will never know if Spybot is functioning correctly or not, and you may be infested right now given the strange actions of Spybot as you indicate . I personally start Spybot and have the settings made to get updates automatically before the scan . When the download is complete (if there was a need for one at all), then the next page lets me also manually check for updates . . . just to make sure . Then I goto the SETTINGS area in the tree and click on the IGNORE PRODUCTS area to check to see if anything has been checked off to not be searched for . This is a big CLUE! If malware has inserted itself, you'll see a checkmark in one of the boxes . Remove it . A different way to remove any checkmarks is to right click in the big window and select "DESELECT ALL" . That will remove all checks from all the boxes . I don't want anything left out of my scans! I have seen at various times things like 180SearchSolutiions and SideStep have their boxes checked, and I didn't do it! I then Immunize manually and hit the GREEN + again just to make sure . My current IMMUNIZE count is 6606 blocked products . Then I run the scan . There are so many options in the advanced mode that it can be a little scary, but just read it carefully and one will see the benefits of having it in this mode . BTW: turn on TEATIMER too . . it is available in the advanced mode The current version of Spybot is 1 . 4 and the last detection update was 2005-07-30 . |
SurferJoe46 (51) | ||
| 377163 | 2005-08-01 23:35:00 | are you sure its not auto updates or spyware thats been running ?? | tweak'e (69) | ||
| 377164 | 2005-08-02 00:43:00 | Spybot is running in default mode on all. Have tried advanced mode, made no difference. It is definitely spybot as the network activity stops and starts whenever you stop or start a scan. I have checked for viruses and spyware etc but found nothing. Ran HijackThis and can't see anything that shouldn't be in there. |
CYaBro (73) | ||
| 377165 | 2005-08-02 01:16:00 | I understand the ADVANCED MODE part, but have you investigated the options there? I goto the SETTINGS area in the tree and click on the IGNORE PRODUCTS area to check to see if anything has been checked off to not be searched for . This is a big CLUE! If malware has inserted itself, you'll see a checkmark in one of the boxes . Remove it . A different way to remove any checkmarks is to right click in the big window and select "DESELECT ALL" . That will remove all checks from all the boxes . This set of instructions you should follow . . it seems to me that you have something phoning home on you, and spybot has more than likely been turned off for that intruder . Check this out first and see what's going on . . . just having and running the advanced mode is not a guarantee that it hasn't been messed with and not doing it's job . Like I said b4, if Spybot is acting weird, fix it first . Spybot does not need internet connex to work except for updates and additional skins or extensions . . . . and they don't take much time at all, and certainly won't be getting done while the scan is running . . . . . . . . . . . |
SurferJoe46 (51) | ||
| 1 | |||||