[f-16]

I currently have Spy ware doctor 4.0 and Spybot 1.5.2 on my system.

Is there a difference between these two programs? Do I need both? Don't they do the same type of spyware scanning?

Any other info on these programs would be helpful.

Thanks

Scott.

[stantley]

Spyware Doctor is one of the better anti-spyware programs and I would use that for real-time protection and scanning. But it's good to have several scanners since they can catch different things, so I would still keep Spybot, but not activate TeaTimer. However you could still use the Immunize and Hosts functions.

You could also get SpywareBlaster and a-squared Free.

[Gizzy]

Hi f-16,

usually it's good to have more than 1 anti-spyware program because what one misses the other catches,

though some people are saying that spybot doesn't catch as much as others do (I still like it and use it though),

which version of spyware doctor are you running? the free or paid version?

[f-16]

It is the pay version. I have had it for more than 5 years and have never had a problem with it. The big pain is that it has to be updated every 4 days or so. So I am constantly downloading updates, It also takes a long time to load in the system tray on start up.

SpyBot, I have had for about 7 years and never had any problems. I recently update to the latest version. It also takes a while to load at start up. I have not activated Tea Timer.

The product descriptions for both tools says the same thing basically. Which is why I wondered why I should have both activate on start-up?

Scott

[stantley]

If you have the default settings and don't have TeaTimer turned on then Spybot shouldn't run at system startup.

Check Settings > Automation > System Start and make sure it's set to 'No Automation'.

[f-16]

Thanks. I just checked and Tea Timer is ON.

I think SpyBot (System startup settings) may have found a problem with a few files.

This is what Spybot is saying:
system32.exe------AGOBOT-KU WORM
pathex.exe----------MKMOOSE-A WORM
vchost.exe----------DELF-UX TROJAN
MSPF.exe----------SDBOT WORM
dllvirtual.exe-------DADOBRA-IW TROJAN
dllvirtual.dll---------DADOBRA-IW TROJAN
dllvirtual.js---------DADOBRA-IW TROJAN

I have unchecked the registry value to deactivate it from the registry, and will reboot to see if there are any problems.

Too be continued...

[stantley]

It looks like you've got some definite problems there, maybe you should post a HJT log.

Go to this site http://www.trendsecure.com/portal/en...?page=download.

Click on 'Download HijackThis Installer'.

*Save HJTInstall.exe to your desktop, or to the location where you normally download.
*Double-click on HJTInstall.exe.
*Click on Install.
*By default it will install to C:\Program Files\Trend Micro\HijackThis.
*Once installed, it will launch Hijackthis.
*Click on the 'Do a system scan and save a logfile button'. It will scan and the log will open in notepad.
*Click Save to save the log file.
*Click on 'Edit > Select All' then click on 'Edit > Copy' (or Ctrl-C) to copy the entire contents of the log.
*Start a new thread on the Malware Removal forum and Paste (or Ctrl-V) the log in the message.

*DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[f-16]

OK. The registry item was de-activated without any trouble.

I think it was an old registry item/entry from a while back. The files are NOT on the system, but the registry entry for those files was still in the registry. Luckily it was not active. I de-activated the registry entry without any trouble using SpyBot. No crisis. I also ran HJT and it looked ok.

So all is well.... for now.

Scott.