Running Spybot and Windows Defender – Windows 10

User of Windows 10 may have noticed that Windows Defender will stop running in Windows 10 when Spybot is installed. Windows will disable this program if it detects another antivirus program on your PC in order to prevent conflict between the multiple antivirus programs installed. The Free Edition of Spybot also falls into this category, because it contains antivirus components from the paid editions.

You can avoid this issue with Spybot by following the instructions below.

Please go to:
Start Center > Settings (tick “Advanced User Mode” if you do not see “Settings”) > System Services

Here, click “Stop” beside “Security Center Service”. Untick “Active after every reboot” for this service.

Click “Apply” and “OK”, and reboot your PC.

When it restarts, you should be able to run Defender with Spybot.

However, the antivirus programs can conflict now and cause issues. To avoid this with Spybot, please also disable Live Protection / Real-Time Protection in either Spybot or Windows Defender.

Instructions for disabling Spybot’s Live Protection can be found here.


FAQ Category: Download & Installation, Error Messages, Internet Protection, Known Issues, Live Protection, Spybot 2, System Services

Spybot 2.5 Prompt – Post Windows 10 Spybot-install

If you have installed Spybot recently, you may have noticed the appearance of a “Post Windows 10 Spybot-install” file on your Desktop after installation.

What is it?

This file was included in our updates for users upgrading to Windows 10.

During the upgrade process, Spybot is likely to be uninstalled. It can be reinstalled by running this file, which will survive the upgrade process.

What do I do with it?

If you do not plan to upgrade to Windows 10, this file can be deleted. You can get this file back if you need to by reinstalling Spybot.

You can also delete the folder:
C:\Program Files\Common Files\AV\Spybot – Search and Destroy

If you do plan to upgrade to Windows 10, or already have, you can run this file to install Spybot 2.5. Changes have been made to this version of Spybot to improve compatibility.

If this does not work, please see here for instructions to reinstall Spybot.


FAQ Category: Download & Installation, Error Messages, Known Issues, Spybot 2, Updates

Spybot Search & Destroy Update Failed

If your issue has begun since upgrading to Windows 10, or installing a new update for Windows 10, see here.

 

If this is not the case, please try running Spybot as an administrator.

You can do this by right-clicking the Spybot icon and choosing the option to “run as administrator”. This must be done to give Spybot the permissions it needs on your PC to function correctly.

 

If this does not work, this could be a proxy issue.

Please go to:
Start Center > Settings (tick “Advanced User Mode” if you do not see “Settings”) > Internet Protection

In Internet Protection, please untick “Use Spybot Proxy” and “Use own proxy to download updates” if either of these is ticked.

Click “Apply” and “OK” and restart Spybot.

 

If this does not work, please go again to:
Start Center > Settings > Internet Protection

In Internet Protection, please tick “Use own proxy to download updates” and choose the option to “Import proxy settings from Internet Explorer”.

Click “Apply” and “OK” and restart Spybot.

If this also does not work, please contact our support team.


FAQ Category: Error Messages, Spybot 2, Updates

Windows 10 Installation/Upgrade/Update Removed Spybot

If your copy of Spybot was not reinstalled correctly during the upgrade/update process to Windows 10, you can uninstall and reinstall Spybot using the instructions below to see if this solves your issue.

Please open our uninstall tool page.

Here, download all 3 files; “unins000.exe”, “unins000.msg” and “unins000.dat”.

(A simple way to check if your PC is 32 or 64-bit is to check if your “C:” folder contains a folder called “Program Files (x86)”. If it does, it is 64-bit.)

These will download to your Downloads folder or other default location.

Copy these files to your Spybot program folder at:
C:\Program Files (x86)\Spybot – Search & Destroy 2

or for 32-bit PCs:
C:\Program Files\Spybot – Search & Destroy 2

Once these have been copied, run “unins000.exe” (the one in your Spybot program folder) as an administrator to remove any traces of Spybot from your PC.

You can then download Spybot 2.4 from the link below:
http://spybot-mirror.com/files/spybot-2.4.exe

This can be upgraded to version 2.5 by running the “Post Windows 10 Spybot-install” file on your Desktop. This file can then be deleted.


FAQ Category: Download & Installation, Error Messages, Known Issues, Spybot 2

What is the Start Center?

The Start Center is the home of all of Spybot’s tools and features.

This is the main window you see when you open Spybot.

Here, the options are categorized as Basic, Advanced and Extra tools (such as System Scan or Startup Tools).

You can also view Live Protection, Internet Protection and the Update Status from the Start Center as well as a helpful “Tip of the day”.

To view all of Spybot’s tools and features, tick the checkbox next to Advanced User Mode.


FAQ Category: Spybot 2, Start Center

What is Advanced User Mode?

Advanced User Mode allows you to view all of Spybot’s tools and features from within the Start Center.

When you open the Spybot Start Center, by default, only the Basic tools are shown.

This is designed for simple users who do not want to worry about some of the more advanced features that Spybot has to offer.

If you would like to use Spybot’s Advanced and Extra tools, tick the checkbox beside Advanced User Mode, located at the bottom left of the Start Center.


FAQ Category: General, Spybot 2, Start Center

How do I open Spybot with Administrator privileges?

Windows may sometimes tell you that you are not allowed to operate at the administrator level when you try to run a program.

You can solve this problem as follows:

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

This applies to the following versions of Windows:

– Windows Vista
– Windows 7
– Windows 8 / 8.1
– Windows 10


FAQ Category: General, Spybot 2, Start Center

How do I check my Spybot version?

To check your Spybot version, open the Spybot Start Center.

Under the Spybot logo on the top left corner of the Start Center, you should see the Spybot Edition written in blue writing.

If you are a licensed user you should also have “+AV” written in red writing.

For more information on your Edition and License, you can click the blue writing which will open the “License Overview” window.


FAQ Category: Spybot 2, Spybot License, Start Center

How do I view Spybot Help?

To view Spybot Help, open Spybot’s Start Center and click on “Help” in the top left corner of the Start Center.

This will open the Spybot Help file.


FAQ Category: General, Spybot 2, Start Center

How do I view the Spybot License Agreement?

To view the Spybot License Agreement with Spybot installed, you can go to:
Start Center > Help (top left corner of the Start Center) > About Start Center > License

Two versions of this can also be found on our website:
For Home Users
For Business Users


FAQ Category: Spybot 2, Spybot License, Start Center

It constantly says “This software is being updated” in the Start Center.

It states in the Start Center “This software is being updated” because in the Licensed Editions Updates are performed automatically through a scheduled task.

Even though Spybot may not be currently updating, it is set to update automatically.

We are going to improve this in the next version to make it less confusing to our users.

We apologise for the inconvenience.


FAQ Category: Known Issues, Spybot 2, Start Center, Updates

The update service has stopped. How do I start it again?

If you receive a message telling you that the Update Service has stopped, you must re-enable the service.

To enable the Update Service:

– Open Spybot by right-clicking on the Spybot icon, and choosing the option to “Run as Administrator”.

– Go to Settings (tick “Advanced User Mode” if you do not see “Settings”).

– In Settings, choose “System Services”.

– Here you can start the “Update Service”.

– Make sure you tick the check box that says “Active after every reboot”.

– Click “Apply” and “OK”, and restart Spybot.


FAQ Category: Spybot 2, Updates

How do I schedule updates in Spybot 2?

To schedule Updates:

– Open Spybot’s “Start Center” by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to “Settings” (tick “Advanced User Mode” if you do not see “Settings”).

– Go to “Schedule”.

OR

– Open Spybot’s “Start Center” by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to “Update” (tick “Advanced User Mode” if you do not see “Update”).

– Click on “configure Schedules”.

This will open the Schedule tab with Settings.
– Click on “Add” for the Update task, if it has not already been added.

– Click “Edit”. (This will open up the Windows Task Scheduler).

– In the top left of the Task Scheduler, click on the small black arrow beside “Task Scheduler Library”.

– This will then show you subfolders of the Task Scheduler.

– Click on “Safer Networking”.

– Click on Spybot – Search & Destroy”.

– Right-click on the “Check for updates” task and then click properties.

– Go to the “Triggers” tab and then click “Edit”.

– Here, you can set the parameters for when and how you want the scan to run.


FAQ Category: Spybot 2, Task Scheduling, Updates

How do I view the update log in Spybot 2?

To view the Update Log:

– Open Spybot by right-clicking on the Spybot icon and click “Run as Administrator”.

– Click “Advanced User Mode”.

– Click on “Update”.

– Click on “Show Update Log”.

This open the Update.log file.


FAQ Category: Spybot 2, Updates

Can I manually download Updates for Spybot 2?

It is possible to manually download the antispyware definitions.

You can download the manual update file from here:

https://www.safer-networking.org/updates/files/spybotsd_includes.exe

When you run the file it will ask you to select a folder.

Please select the Spybot program folder:
C:\Program Files (x86)\Spybot – Search & Destroy 2

The files will be added to the “Includes” folder within the Spybot program folder.

Unfortunately it is not possible to download the Antivirus definitions manually.


FAQ Category: Spybot 2, Updates

How do I update Spybot 2?

To Update Spybot:

– Open Spybot by right-clicking on the Spybot icon and click “Run as Administrator”.

– Click “Advanced User Mode”.

– Click on “Update”.

This will open a separate Update Window, which will search for new updates.

If new updates are found, clicking “Update” in the Update window will download and install them.

If the Updates fail on their 1st attempt, please click the update button again.

The update should then test your Update Status to see when you last updated.

You can also click on Show Details to view more information about the files and definitions that were downloaded.


FAQ Category: Spybot 2, Updates

Why do I need to Update Spybot 2?

It is important to update Spybot regularly to ensure that you have all of the latest definition updates installed on your PC.

By having the latest defitition updates installed, it means you are better protected and more likely to detect and eliminate the most recent forms of malware.

Our analysts work full-time developing new detection rules and techniques to deal with this ever increasing number of threats.

You can view the latest definition updates in the following link:

https://www.safer-networking.org/about/updates/


FAQ Category: General, Spybot 2, Updates

What is a System Scan?

The System Scan is an on demand scanner which allows you to run a complete check of your System to see if there are any  malicious threats installed on your computer.

The System Scan will search for spyware, trojans and other forms of malware.

If you are using a licensed edition, the System Scan will also search for viruses.

You can also schedule the System Scan to run automatically in the licensed editions.


FAQ Category: Spybot 2, System Scan

How do I perform a System Scan?

To perform a System Scan please do the following:

– Open Spybot by right-clicking on the Spybot Start Center icon and click “Run as Administrator”

– Click on System Scan.

This will open a new System Scan window and the scan will begin automatically.

If you have not downloaded and installed any signature updates, the System Scan will not begin automatically and you will be required to install the latest definition updates.

Once the updates have been installed, you can Start the System Scan.


FAQ Category: Spybot 2, System Scan

How do I remove the detected threats?

Once the scan has completed, click on “Show Scan Results”.

This will then show all the detected threats on your machine.

To remove these threats, press the “Fix Selected” button.

When the items have been fixed, a green tick appears beside each entry.


FAQ Category: Spybot 2, System Scan

How do I scan other hard drives with Spybot?

To scan other drives with Spybot, please do the following:

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.
– Click on “System Scan”.
– A System Scan window will open and a scan will begin automatically.
– Click on “Stop Scan”.
– Click on the dropdown arrow beside “Show scan results”, and click “Scan with different options”.
– Here, you can select/deselect drives to be included in the System Scan.


FAQ Category: Spybot 2, System Scan

The detected items were not removed during the scan. How do I remove these items?

If the detected items were not removed by a scan, you can try to remove them again by running SDCleaner manually.

– Navigate to the Spybot program folder:
C:\Program Files (x86)\Spybot – Search & Destroy 2

– Right-click the file “SDCleaner(.exe)”, file and choose the option to “Run as Administrator”.

– Click on “Rescan Detected”. This will open up the System Scan Window and scan for all the items that were previously detected in a scan.

– When the scan is finished you can select “Fix Selected” in the SDCleaner window.

Alternatively, you can try a scan in Safe Mode as the malware could be affecting the removal process.

To do this, reboot your PC. As it is restarting, hold “F8” until a boot menu appears.

In the boot menu, choose “Safe Mode with Networking”.

You can then open Spybot as an administrator in this mode and perform another scan.

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to System Scan.

Once you have scanned using Spybot, restart your machine through the Shutdown options.

Please see the following links for more information on entering Safe Mode.

Windows 10
Windows 8
Windows 7
Windows Vista
Windows XP


FAQ Category: Known Issues, Spybot 2, System Scan

The System Scan did not detect any threats on my machine. What can I do?

If the System Scan did not detect any items on your machine, it is possible that you have not installed all of the latest updates.

Please download and install Spybot’s latest definition updates:

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to Update (tick “Advanced User Mode” if you do not see “Update”)

Once the update is complete, perform another scan with Spybot.

If you experience any issues downloading updates, please see here.

If Spybot still does not detect any threats on your PC, you can try performing a scan in Safe Mode:

To do this, reboot your PC. As it is restarting, hold “F8” until a boot menu appears.

In the boot menu, choose “Safe Mode with Networking”.

You can then open Spybot as an administrator in this mode and perform another scan.

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to System Scan.

Once you have scanned using Spybot, restart your machine through the Shutdown options.

Please see the following links for more information on entering Safe Mode.

Windows 10
Windows 8
Windows 7
Windows Vista
Windows XP

If Spybot still cannot detect or remove this threat, it is likely that you have a new threat or a new variation of a known threat.

We recommend consulting the malware removal section of our forum.


FAQ Category: Known Issues, Spybot 2, System Scan

How do I view previous scan results?

You can view previous scan results by opening SDCleaner.exe:

– Navigate to the Spybot program directory then run SDCleaner.exe:
C:\Program Files (x86)\Spybot – Search & Destroy 2

Or for 32-bit PCs:
C:\Program Files\Spybot – Search & Destroy 2

– Right-click the file “SDCleaner.exe” and choose the option to “Run as Administrator”.

This will then display the results of your last System Scan.


FAQ Category: Spybot 2, System Scan

How do I scan different drives on my PC?

There are two ways to scan different drives, such as external drives or networked PCs:

If you wish to include the entire drive in your scan, go to:
Start Center > System Scan

In the “System Scan” window, click “Stop Scan” if the scan has started automatically. This message will then change to “Show Scan Results”.

Click the dropdown arrow beside “Show Scan Results” and select “Scan with different options”.

Here, you can choose to select/deselect any drives connected to your PC to include in the System Scan.

If you wish to scan a specific folder:
– Navigate to the File/Folder/Drive, right-click on it, click “Spybot – Search & Destroy” in this menu, and then click “Scan Folder”.

To use this option, System Integration must be enabled.


FAQ Category: Spybot 2, System Scan

How do I schedule a System Scan?

Note: *  Task Scheduling is only available in the licensed editions of Spybot

By default, the System Scan is set to run on (Default Setting).

To schedule a System Scan:

– Open Spybot’s “Start Center” by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Tick “Advanced User Mode”.

– Go to “Settings”.

– Go to “Schedule”, and click on “Add” beside the System Scan task.

– Click “Edit” (This will open up the Windows Task Scheduler).

– In the top left of the Task Scheduler, click on the small black arrow beside “Task Scheduler Library”.

– This will then show you subfolders of the Task Scheduler.

– Click on “Safer Networking”.

– Click on Spybot – Search & Destroy”.

– Right click on the “Scan the system” task, and then click properties.

– Go to the “Triggers” tab, and then click “Edit”.

– Here, you can set the parameters for when and how you want the scan to run.


FAQ Category: Settings, Spybot 2, System Scan, Task Scheduling

How do I scan all user accounts on my PC?

To scan all user accounts on your machine:

– Open Spybot’s “Start Center” by right-clicking on the icon  and choosing “Run as administrator”.

– Click “Advanced User Mode”.

– Go to “Settings”.

– Go to the “Scope” tab and select “Scan the running system and all of its users, including those not logged in”.

– This should scan all profiles and files that are selected in which permission is given for, independent of the current user.


FAQ Category: Spybot 2, System Scan

How do I use the Temporary File Cleaner?

The “Clean Up Temporary Files” option appears in the system scan when there are 100 or more temporary files present. If there are less than 100 files present, the option is not visible in the System Scan window.
If you clicked to hide the Temp file cleaner, it should reappear the next time there is 100 files or more are present as the files should have been removed before being able to hide the temp file cleaner.


FAQ Category: Spybot 2, System Scan

How to enable/disable System Services?

You can enable or disable Spybot System Services from within Spybot – S&D’s Settings: 
– Open Spybot by right-clicking on the Spybot icon, and choosing the option to “Run as Administrator”.
– Tick “Advanced User Mode” in the Start Center.
– Go to “Settings”, then choose the “System Services” tab.
– Here, you will see the Security Center Service, the Scanner Service and the Update Service.

These services should be enabled by default. To disable a service, click the Stop button beside the service you would like to disable. If you want to disable it permanently, you must also untick the checkbox beside “Active after every reboot”.
If you would like to enable a service, you can click “Start” beside the service you would like to enable. You must also tick the checkbox beside “Active after every reboot”.
– Click “Apply” and “OK”, and restart Spybot.


FAQ Category: Settings, Spybot 2, System Services

What is Live Protection?

Live Protection is Spybot’s Real-Time Protection.

This scans all programs before they start to prevent any infections or threats from entering your system.

This helps to keep to your PC clean from malware and is the 1st line of defense against malicious programs.

Live Protection is the updated version of Spybot’s TeaTimer.

Live Protection is available in all licensed editions of Spybot.


FAQ Category: Live Protection, Settings, Spybot 2

How do I disable Live Protection?

To disable Live Protection:

– Open Spybot by right-clicking on the Spybot icon and clicking “Run as administrator”.

– Click on the Live Protection status in the Start Center.

– This will open the Live Protection Settings window.

– Untick the checkbox beside “Scan all programs before they start”.

– Click on “Show Live Protection Advanced Controls”.

– Click on “Uninstall Live Protection”.

You may receive an error saying that “The Live Protection System Driver could not be deactivated/uninstalled. A reboot might be needed to completely deactivate Live Protection.”

You must restart your PC for the changes to take effect.

After your PC has restarted, Live Protection should now be disabled.


FAQ Category: Live Protection, Settings, Spybot 2

How do I enable Live Protection?

To enable Live Protection:

– Open Spybot by right-clicking on the Spybot icon and clicking “Run as administrator”.

– Click on the Live Protection status in the Start Center.

– This will open the Live Protection Settings window.

– Tick the checkbox beside “Scan all programs before they start”.

– Click on “Show Live Protection Advanced Controls”.

– Click “Install Live Protection”.

You may receive an error saying that “Live Protection System Driver could not be installed”, you will have to restart your PC and try to install after the reboot.

– You must restart your PC to enable Live Protection.

– After your PC has restarted, go to the Live Protection tab in Spybot’s Settings.

– Click “Install Live Protection”.

– You can then click “Activate Live Protection”.

Live Protection should now be enabled and actively protecting your PC.


FAQ Category: Live Protection, Settings, Spybot 2

What is Live Protection : Partial?

Live Protection : Partial means that Spybot will no longer “Scan all programs before they start”.

This means that Spybot will no longer scan all new process when they begin on your PC.

It will still continue scan any active processes that are open, just not any new processes that begin.

You can set Live Protection to Partial by unticking the checkbox beside “Scan all program before they start” in the Live Protection Settings window.

To get to Live Protection Settings window:

– Open Spybot by right clicking on the Spybot icon and clicking “Run as administrator”.

– Click on the Live Protection status in the Start Center.


FAQ Category: Live Protection, Settings, Spybot 2

What is SDONACCESS.exe?

SDONACCESS.exe is the file that is related to Spybot’s Live Protection.

This is the process that scans all programs before they start.


FAQ Category: Live Protection, Settings, Spybot 2

How do I enable Live Protection?

To enable Live Protection:

– Open Spybot by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Click on the Live Protection status in the Start Center.

This will open up the Live Protection Settings.

– If you see “Live Protection is not installed”, click on “Show Live Protection advanced controls”.

– Click on “Install Live Protection”.

If you receive an error message saying “Live Protection System Driver could not be installed”, you will have to restart your PC in order to re-attempt the installation.

Once you have restarted your machine, please open Spybot.

You should see a dialog asking you whether or not to install Live Protection.

Click Yes.

Live Protection should now be enabled.

If you do not see this dialog, you will have to reinstall Spybot.

Before reinstalling Spybot, you must uninstall the old installation.

Please see here for instructions on how to uninstall Spybot.

Alternatively, you can run the Spybot installer, which will detect the current installation and offer to uninstall it.

Once you have uninstalled Spybot and restarted your machine the installation should begin automatically.

Spybot 2.4 can be downloaded from here.

If you are a licensed user, you can download your license installer from the original email that was sent to at the time of purchase.

If you do not have your license installer, you can request that your license be resent to you by filling in the form here.

During the installation process you should see a dialog prompting you to “Install Live Protection”.

Click “Yes”.

If Live Protection is still not enabled, please go to the Live Protection settings in Spybot, and then click “Install Live Protection”.

When Live Protection has been successfully installed, you can then click “Activate Live Protection”.

Live Protection will then be enabled and actively protecting your PC.


FAQ Category: Live Protection, Settings, Spybot 2

After installing Spybot 2 +AV my PC is running extremely slow.

This could possibly be caused by Spybot’s Live Protection.

This scans all programs before they start to prevent any infections or threats from entering your system.

The benefit of this is that it keeps your system free from malware and other harmful threats.

The downside is that Live Protection must scan all processes to keep your PC clean.

This can cause a huge slow down of your PC.

To disable Live Protection:

– Open Spybot by right clicking on the Spybot icon and clicking “Run as administrator”.

– Click on the Live Protection status in the Start Center.

– This will open the Live Protection Settings window.

– Untick the checkbox beside “Scan all programs before they start”.

– Click on “Show Live Protection Advanced Controls”.

– Click on “Uninstall Live Protection”.

You must restart your PC for the changes to take effect.

After your PC has restarted, Live Protection should now be disabled.

If you have another AV program with real time protection, you should disable it or Spybots Live Protection as 2 active AV programs can cause severe damage to your PC.

Please see the following link which gives information running more than one AV program:
http://www.pcworld.com/article/2034141/one-antivirus-program-is-better-than-two.html


FAQ Category: Known Issues, Live Protection, Settings, Spybot 2

After installing Spybot 2 +AV certain programs wont open and my internet is slow.

This could possibly be caused by Spybot’s Live Protection.

This scans all programs before they start to prevent any infections or threats from entering your system.

The benefit of this is that it keeps your system free from malware and other harmful threats.

The downside is that Live Protection must scan all processes to keep your PC clean.

This can cause a huge slow down of your PC.

To disable Live Protection:

– Open Spybot by right clicking on the Spybot icon and clicking “Run as administrator”.

– Click on the Live Protection status in the Start Center.

– This will open the Live Protection Settings window.

– Untick the checkbox beside “Scan all programs before they start”.

– Click on “Show Live Protection Advanced Controls”.

– Click on “Uninstall Live Protection”.

You must restart your PC for the changes to take effect.

After your PC has restarted, Live Protection should now be disabled.

If you have another AV program with real time protection, you should disable it or Spybots Live Protection as 2 active AV programs can cause severe damage to your PC.

Please see the following link which gives information running more than one AV program:
http://www.pcworld.com/article/2034141/one-antivirus-program-is-better-than-two.html


FAQ Category: Known Issues, Live Protection, Settings, Spybot 2

Live Protection is conflicting with my other AV Program.

If you are using another antivirus program that contains Live Protection, Real-time Protection or some equivalent, this could be conflicting with Spybot’s Live Protection and causing your issue.

You can avoid this by disabling Live Protection on either Spybot or your other antivirus program.

To disable “Live Protection” on Spybot, please do the following:

– Open Spybot by right clicking on the Spybot icon and click “Run as Administrator”.

– Click “Advanced User Mode”

– Go to “Settings” then click on the “Live Protection“ tab.

– Untick the checkbox for “Scan programs before they start”.

– Click “Apply“ and then “OK“.

There is also a button for “Show Live Protection advanced controls” on this page.

If you click this button you will see two options:

“Uninstall Live Protection (might need reboot)”

or

“Deactivate Live Protection”.

You can choose either of these.


FAQ Category: Known Issues, Live Protection, Settings, Spybot 2

I am trying to disable Live Protection but I receive the following error: “The Live Protection System Driver could not be deactivated/uninstalled. A reboot might be needed to completely deactivate Live Protection.”

In the Live Protection Settings, if you click on “Uninstall Live Protection”, you may receive an error saying that “The Live Protection System Driver could not be deactivated/uninstalled. A reboot might be needed to completely deactivate Live Protection.”

You must restart your PC for the changes to take effect, even though you may still receive the error message.

When you restart your PC, Live Protection should now be disabled.


FAQ Category: Error Messages, Known Issues, Live Protection, Settings, Spybot 2

How do I restore previously removed items?

If you want to restore previously removed items for whatever reason you can do this using Spybot’s “Quarantine“.

– Open Spybot by right clicking on the Spybot icon and choosing the option to “Run as Administrator”.

– Go to Quarantine.

– Once “Quarantine“ has been started feel free to select the product you want to restore and hit “Restore selected“.


FAQ Category: Quarantine, Spybot 2, System Scan

What is the Quarantine?

The Quarantine feature allows you to view all of the previously detected items that were removed during a System Scan. These files have been moved to a quarantined location on your PC which prevents them from posing a security threat to your system.

If you would like to make more room on your PC’s hard drive, the Quarantine gives you the option to fully remove threats from your PC.

You can also use the Quarantine to restore items that were mistakenly removed during the System Scan.

To view the Quarantine:

– Open Spybot’s “Start Center” by right-clicking on the Spybot icon and choosing the option to “Run as administrator”.

– Go to “Quarantine”.


FAQ Category: Quarantine, Spybot 2

What does Purge Old do?

Purge Old allows you to completely remove items from your system.

When you click on “Purge Old” a window will open allowing you to select a date.

The date you select determines which files will be deleted.

– Open Spybot “Start Center” by right clicking on the icon  and choosing  “Run as administrator”.

– Go to “Quarantine”.

– Click on Purge Old then enter the desired date.


FAQ Category: Quarantine, Spybot 2

What does Purge Selected do?

You can remove items completely from your system by Purging the selected items:

– Open Spybot’s “Start Center” by right clicking on the icon  and choosing  “Run as administrator”.

– Go to “Quarantine”.

– Select the items you wish to remove and then click “Purge Selected”.

– Once these items have been “Purged”, they cannot be restored.

Purge Selected allows you to select which files you want to permanently remove from your PC.

Once you have selected all the desired items, you can click Purge selected to permanently remove the files from your PC.


FAQ Category: Quarantine, Spybot 2

How do I view the Quarantine log?

To view the Quarantine log:

– Open Spybot’s “Start Center” by right-clicking on the icon and choosing the option to “Run as administrator”.

– Go to “Quarantine”.

– Click on “Show repair logs”.


FAQ Category: Quarantine, Spybot 2

How do I restore previously removed files that are in Quarantine?

If you want to restore previously removed files for whatever reason you can do this using Spybot’s “Quarantine“.

Quarantine can be either launched via the Start Center.

– Open Spybot by right clicking on the Spybot icon and click “Run as Administrator”

– Go to Quarantine.

They can also be found in SDTray’s program list.

– Right click on the Spybot – Search & Destroy icon in your system tray beside the Windows clock and navigate to “Basic Tools“ then “Quarantine“.

– Once “Quarantine“ has been started feel free to select the product you want to restore and hit “Restore selected“.


FAQ Category: Quarantine, Spybot 2

What is the File Scan?

The File Scan is an on demand tool that allows you to scan single files and folders on your PC.

The File Scan uses the same detection signatures to search for malware, including viruses in licensed editions, as the System Scan does.

The File Scan is available in all editions of Spybot 2.

You can Open the File Scan from the Start Center or under the Basic Tools section in the System Tray.

You can also start the File Scan by opening SDFiles.exe in the Spybot directory.

C:\Program Files (x86)\Spybot – Search & Destroy 2


FAQ Category: File Scan, Spybot 2

How do I scan a file using File Scan?

To scan a file using the File Scan, please open File Scan window.

– Open Spybot by right clicking on the Spybot icon and choosing “Run as Administrator”.

– Got to File Scan.

This will open the File Scan in a separate window.
File Scan 1

– Click on Add File(s) to allow you to pick which files to scan.

– You can then navigate to the desired file(s) then click “Open”.

If you want to add more than one file from the same directory, you can hold the “AltGr” key on your keyboard then select each File then press “Open”.

You can also scan a single file by right clicking on the file, clicking on “Spybot – Search & Destroy” then clicking on Scan File.
Note: Windows Explorer Integration must be enabled to use this option.
File Scan 3

If the File is clean, a green tick should appear beside the file in the results list.

File Scan 2

If the File is infected you can click “Remove Malware”.


FAQ Category: File Scan, Spybot 2

How do I scan a folder using the File Scan?

To scan a folder using the File Scan, please open then “File Scan” window from the Start Center.

– Open Spybot by right-clicking on the Spybot icon and choosing “Run as Administrator”.

– Go to File Scan.

This will open the File Scan in a separate window.

File Scan 1

– Click on the “Add Folder(s)” option in the left hand menu.

This will allow you to navigate to the desired folder and then select it to be scanned.

You can also scan a single folder by right clicking on the file, clicking on “Spybot-Search & Destroy” then clicking on Scan Folder.

Note: Windows Explorer Integration must be enabled to use this option.

File Scan 4

The scanner will then scan all the files contained within the selected folder(s).

Each file will be listed in the results list.

If a File is clean, a green tick should appear beside it in the results list.

File Scan 2

If a File contained within the folder is infected you can click “Remove Malware”.


FAQ Category: File Scan, Spybot 2

What is Immunization?

The Immunization feature provides Internet Protection by preventing users from entering malicious, untrusted or potentially dangerous websites.

This is done by adding malicious entries to the Windows hosts file.

It also prevents tracking cookies from entering your system and blocks known spyware installers (and similar baddies) already included in Spybot’s database.


FAQ Category: Immunization, Spybot 2

How do I perform Immunization?

To perform Immunization:

– Open Spybot’s “Start Center” by right clicking on the icon  and choosing  “Run as administrator”.

– Go to “Immunization”

– Click “Check System”, then click “Apply Immunization”.


FAQ Category: Immunization, Spybot 2

When I run Immunization it says items are still unprotected. How do I fix this?

You need to run the immunization with elevated privileges, otherwise all global immunizations will fail.

To ensure that Immunization is applied correctly, Please disable all other security programs that you run and close all browsers and any other programs during the work with Spybot – Search & Destroy.

To Immunize your browser:

– Open Spybot “Start Center” by right clicking on the icon  and choosing  “Run as Administrator”.

– Go to “Immunization”

– Click “Check System”, then click “Apply Immunization”.

The main reasons why Immunization would fail are:

– A path is not detected.

– The object is blocked by something; e.g. a security program.

– The user does not have appropriate rights for Immunizing an object.


FAQ Category: Immunization, Spybot 2

How do I view the Immunization log?

To view the Immunization log:

– Open the Spybot Start Center by right-clicking the Spybot icon and choosing the option to “Run as Administrator”.

– Open “Immunization”.

– Click “Show previous Logs”.

If you cannot access this folder, you may need to change your folder properties:

– Open Windows Explorer (or any folder).

– Press the “Alt” button, then go to “Tools”, then “Folder Options”.

– Click on “View”, then select “Show Hidden Files, Folders and Drives”.


FAQ Category: Immunization, Spybot 2

How do I undo Immunization?

You can undo Immunization if you wish, to see if it causing any issues with access to certain websites.

To undo Immunization:

– Open the Spybot – Search & Destroy “Start Center“.

– Go to Immunization and select “Undo Immunization”.


FAQ Category: Immunization, Spybot 2

How do I reset the hosts file?

You can reset the hosts file to its original configuration.

To do this, please first undo your immunization by going to:
Start Center > Immunization

In Immunization:
Click “Undo Immunization”.

You can then navigate to the hosts file location:
C:\Windows\system32\drivers\etc\

This folder contains your “hosts” file, along with many regularly-created backups of the hosts file.

You can then delete the hosts file and the backup host files and restore a default hosts file.

TO do this, please see the following link on how to restore the hosts file:
https://support.microsoft.com/kb/972034

Please do not delete other files located in this folder.


FAQ Category: Immunization, Spybot 2

How do I download Spybot 2 – Search & Destroy?

To download Spybot 2:

Please go to our Downloads page, where you can download Spybot 2 from one of our trusted mirror sites.

These mirrors allow you to securely download Spybot 2 from one our partners.

https://www.safer-networking.org/mirrors/

Alternatively, you can download Spybot 2 directly from the link below:

http://spybot-mirror.com/files/spybot-2.4.exe

You will then be prompted by your browser to download Spybot-2.4.exe.

1

This will be downloaded to your default download location.


FAQ Category: Download & Installation, General, Spybot 2

How do I install Spybot 2 – Search & Destroy?

To begin the installation of Spybot, double click on the “spybot-2.4.exe” file.

You will then be asked to select your desired language for the installation.

Once you have selected the desired language, the installation wizard will begin.

Please follow the prompts in the wizard to complete the Installation.

By selecting “I want to be protected without having to attend to it myself”, the wizard will install Spybot with its default settings.

By selecting “I want more control, more feedback and responsibility”, the installer will allow you to customize some of the installation settings.

1-Install 1

It is recommended to restart your PC after installing Spybot.

After your PC has restarted you can open Spybot by double clicking on the Start Center icon on the Desktop.

Please update your Spybot database before performing a scan.


FAQ Category: Download & Installation, Spybot 2

How do I install my Spybot license?

Please download the “spybot2-license.exe” file which you should have received in an email, shortly after purchasing Spybot.

If you did not receive your Spybot license please go to the link below:
https://www.safer-networking.org/contact/resend-license/

Please run the file to begin the installation.

The installer will install your license files.

If this is your 1st time installing Spybot, the installer will detect that Spybot has not been installed and download the latest version.

If you already have the Free Edition installed, the installer will detect the installation and add your license files to the program, activating all of the features of your Paid Edition.

If you are replacing an existing license, the installer will detect the old license and will as you if you would like to “Install New License” or “Keep Existing License”.

When you re-open Spybot, you should now have a fully licensed version.


FAQ Category: Download & Installation, Spybot 2, Spybot License

How do I uninstall Spybot 2 – Search & Destroy?

To uninstall Spybot 2, go to the “Programs & Features” section of the Windows Control Panel.

– Open the Start Menu.

– Type “Control Panel” into the search box.

– Click on “Small Icons” in the “View by” dropdown menu.

– Click on “Programs & Features”.

You can then scroll down to “Spybot – Search & Destroy” then click on it then press “Uninstall”.

This will open the uninstallation wizard.

1-Uninstall 2

Before uninstalling Spybot, it is recommended to undo Immunization to avoid issues with the uninstallation process.

It is also recommended to view Spybot’s Quarantine unless there are any items that you would like to restore which were accidentally removed by Spybot.

Once you uninstall Spybot 2 you cannot restore these files.

After Spybot has been uninstalled it is recommended to delete the following folders:

C:\Program Files\Spybot – Search & Destroy2
C:\ProgramData\Spybot – Search & Destroy2

Please note that the Application Data Folder is hidden.

So if you can’t find this folder please check your folder properties.

– Open Windows Explorer (or any folder).
– Click on “Organise”, then go to “Folder and search options”.
– Click on “View”, then select “Show Hidden Files, Folders and Drives”

You should then restart your PC for the changes to take affect on your PC.


FAQ Category: Download & Installation, Spybot 2

How do I upgrade to the latest version of Spybot 2?

To upgrade to the latest version of Spybot, please download the Spybot installer from here:

http://spybot-mirror.com/files/spybot-2.4.exe

1-Uninstall

When you run the installer it will detect the older installation of Spybot and ask you to uninstall it.

This will run the uninstall wizard.

Once you have uninstalled the older version of Spybot, please restart your PC.

When your PC has restarted, the installation wizard should begin automatically.

Follow the steps in the installation wizard to complete the upgrade to the latest version.


FAQ Category: Download & Installation, Spybot 2

How do I reinstall Spybot 2?

To reinstall Spybot, please download the Spybot installer from here:

http://spybot-mirror.com/files/spybot-2.4.exe

When you run the installer it will detect the older installation of Spybot and ask you to uninstall it.

1-Uninstall

This will run the uninstall wizard.

Once you have uninstalled the older version of Spybot, please restart your PC.

When your PC has restarted, the installation wizard should begin automatically.

Follow the steps in the Installation wizard to complete the reinstallation of Spybot.

If you are using a licensed edition, you will need to redownload and run your license installer from the email you were sent at the time of purchase.

If you do not have access to your installer, you can request it from here:

https://www.safer-networking.org/contact/resend-license/


FAQ Category: Download & Installation, Spybot 2

When I try to uninstall Spybot it says that the unins000.msg / unins000.exe file(s) is missing. How do I replace it?

It is possible that the unins000.msg/unins000.exe file(s) was mistakenly deleted by another security program or the file(s) has become corrupted.

Missing unins000

To replace the file(s), you can download them for our Download Missing Files page:

Missing Files

Once you have downloaded the file(s), please copy them to the Spybot directory:
C:\Program Files (x86)\Spybot – Search & Destroy 2


FAQ Category: Download & Installation, Error Messages, Known Issues, Spybot 2

I installed the program in English but it opens in a foreign language. How do I set it back to English?

If you have installed Spybot in a foreign language, you can change the language back to English  from within Spybot’s Settings.

This may be difficult as the program is in a different language so the instructions are slightly misleading.

To change the language please do the following:

– Open the Spybot “Start Center”.

Start Center 2.4- Settings

– Click “Advanced User Mode”.

– Go to “Settings”.

– Then click on the “Language” tab.

You can then select your desired language.

Settings - Languages

Alternatively you could reinstall Spybot.

The 1st window of the installer allows you to select what language you would like to install Spybot in.

Please see the link below for instructions on how to reinstall Spybot:

https://www.safer-networking.org/faq/how-do-i-reinstall-spybot/


FAQ Category: Download & Installation, Known Issues, Languages, Spybot 2

How to create a bootable CD

Creating a bootable CD involves a handful of steps that are explained in detail here.

Requirements

Windows Automated Installation Kit

The first thing you need is the Windows Automated Installation Kit, also called WAIK. This software includes all the Windows files that need to be put onto the CD, and tools to create that CD, which we cannot use, for legal reasons, from your current installation.

Trac3595-SDBootCD-WAIK-missing

If the WAIK is not installed, Boot CD Creator will offer you to download it. The download will happen in the form of a file ending with the extension .iso. To install the AIK, there are multiple ways, depending on your preferences:

  • use your favorite DVD burning software to burn this image to a real DVD; for example, with Windows Explorer itself, right-click the downloaded file, and press ”Burn” after having inserted a blank DVD.Trac3595-Explorer-on-WAIK-ISOTrac3595-Explorer-burn-WAIK-ISO
  • use a packer to extract the .iso to a subfolder; for example using 7-Zip,
    or WinRAR.
    Trac3595-SDBootCD-iso-extract
  • use an image mounting software like Daemon Tools to mount the image.

Once you’ve got there, you need to start installation from the place where you’ve burned or extracted or mounted the image.

Sometimes, the installation of the WAIK needs other software to be installed first. If it asks you to install DotNET, look for the exact version of DotNET requested, and install just that. Newer versions are not downwards compatible, but can co-exist. The WAIK install CD menu should offer installation of the correct DotNET.

Trac3595-SDBootCD-WAIK-found

Once the WAIK is installed, the Prerequisite panel within the Boot CD Creator will be shown with a green bar, and all other panels can be used now.

Configuration

Applications

Trac3595-SDBootCD-application-list

In Applications to include, you can select other applications that should appear on the CD. To do that, click the arrow button at the right to expand it. For standard malware cleaning, the standard setup to include Spybot 2 is sufficient.

Settings

Trac3595-SDBootCD-settings

All Settings can be skipped as well if you want to, they just provide you an option to customize the CD. The Shell selection allows you to let the CD start up like old Spybot CDs would do, but the new Safer-Networking Shell, which is default starting with Spybot 2.3, is recommended.

You can also select whether your computer will boot from the CD right away, or only if you press a key within a short amount of time. This is useful if you’ve got your boot order set to always boot from CD first and forget the CD within the drive.

Finally, by setting a language and country, you can control that the CD will for example accept your keyboard input instead of having a foreign mapping. This should default to your current systems language.

CD creation

Once you’re done checking the list of Applications and Settings, or right away if you just want to go ahead and skip them, the CD image creation panel is the one where you’ll get your CD. You can just accept the default location and press the Create CD image button. It might take a few minutes for Boot CD Creator to combine all the necessary files and create an .iso image of your bootable CD.

Trac3595-SDBootCD-creation

Again, burn this to a CD using your favorite application, or even use Windows Explorer, see above instructions on how to burn the WAIK ISO image, just do it on the file just created, usually stored at C:\SpybotBootCD\SpybotBootCD.iso.

CD usage

Make hardware boot the CD

To use your CD as a startup medium for your computer, you might need to tell it to look for bootable media in your CD-ROM drive. Most computers offer a key you can press right after powering it on.
Trac3595-BIOS-BootKey-hl

Once that key is pressed, you’ll get a menu representing all drives that could be used for booting, including the CD or DVD one.

Trac3595-BIOS-BootKeyMenu-hl

By selecting this drive, your computer will start the Windows version included on the CD.
Trac3595-SDBootCD-cd-booting

Using the CD

In contrast to your regular system, the CD will show a toolbar representing all actions that might be of help when it comes to using Spybot to clean or repair your computer.

Trac3595-SDBootCD-CD-showing-shell

Adding up to date signatures

If you want to use the CD regularly without having to recreate it with up to date signatures every time, you can update them by running updates from an attached USB stick.

Since Spybot is completely in memory when running from the CD, you should recreate an up to date CD from time to time to avoid updates to signatures getting too big and taking up too much memory.

Antimalware

Antimalware signature updates can be added using the manual 1.6 updater. This updater can be found on our Download page at the bottom.

Antivirus

To update antivirus signatures, you can download the full signature installer.

Scanning and cleaning

At the bottom in the ”Spybot 2 Basic” menu, you can initiate a ”System Scan”. From this point, you can follow the instructions in another “how to”.


FAQ Category: Boot CD Creator, Spybot 2, Spybot Tools

How to configure Notifications

Notifications Configuration

Notifications can be configured from the ”Notifications” tab in Spybot’s Settings. Pressing ”Edit” will open a details window where you can add, change or remove different notifications.

For the home user, the easiest and yet most powerful notifications are probably Pushover and Boxcar. Depending on the delivery methods you choose, you might need to provide some details for new notifications.

The Settings tab includes a ”Test” button you can use to check whether notifications are delivered as expected.

Boxcar

To set up delivery via Boxcar (e.g. to your iPhone, iPod or iPad), install Boxcar from the iTunes Store, then enter the e-mail address you use to set it up in Spybot.

Email via SimpleMAPI

If you’ve got a mail program installed and don’t just use e-mail through a webmail interface, your computer most likely supports SimpleMAPI. You need to set up the e-mail address that should be used as the sender, and the one to receive the notification.

One disadvantage (and advantage from another point of view) of this method is that the computer might first ask the user if the message should be sent, so it won’t notify right away on unattended computers.

Email via SMTP

The second e-mail method avoids the user confirmation, but needs more details. Next to the sender and receiver e-mail addresses, you need to specify the SMTP server information, including host name and, if necessary, username and password. You can find these details if your search your email providers documentation for the keyword ”SMTP”.

Growl

Growl is a desktop computer notification system well known on Macintosh computers, but also available for Windows. If you want a local Growl installation to notify you, you don’t need to enter any details. You can also set up remote computers running Growl to receive notifications, but in this case, they still need to be without password (we’ll be updating this feature to support password protected Growl installations in the future).

HTTP

HTTP notifications might be of interest to network administrators, since they allow easy communication with other existing services. To set up a HTTP notification, you just need to enter an URL to be contacted, and specify how details are transmitted. For example

http://localhost:22280/tell?title=<$TITLE>&text=<$TEXT>&url=<$URL>&urltitle=<$URLTITLE>

The templates that can be used as part of the URL are:

  • <$TITLE>: will be replaced with title of notification.
  • <$TEXT>:will be replaced with text of notification.
  • <$URL>: will be replaced with URL of notification, if specified.
  • <$URLTITLE>: will be replaced with title of URL of notification, if specified.

Jabber/XMPP

XMPP is the protocol used by Google Talk (if you haven’t started using Hangout) or Facebook Messenger, as well as many independent providers. To set it up, you need the same details you would need to set it up in any other Chat application (like for example Pidgin).

  • host (required): specify Jabber server hostname.
  • port (optional): specify Jabber server port, defaults to 5222.
  • username (required): specify username to log into server.
  • password (required): specify password of user to log into server.
  • to (required): comma-separated lists of receivers.

Logfile

You can have all notifications written to a file as well, to be able to check what you should have received, for example. You’ll need to specify the name of the file notifications should be appended to, and can optionally adjust how each notification should look like using the following templates:

  • <$TITLE>: will be replaced with title of notification.
  • <$TEXT>: will be replaced with text of notification.
  • <$URL>: will be replaced with URL of notification, if specified.
  • <$URLTITLE>: will be replaced with title of URL of notification, if specified.
  • <$CRLF>: a line break

Pushover

To set up delivery via Pushover (e.g. to your Android smartphone or tablet, iPhone, iPod or iPad), install Pushover Notifications from the iTunes Store or Google Play Store, then enter your Pushover key. You can find this key by starting Pushover and looking for it on its Settings page.

SNPP

The Simple Network Paging Protocol is for the tech savvy administrator and can be used to communicate with existing network paging. There also are SNPP to SMS services on the Internet that could be used to set up SNPP to inform you via Short Message Service. Setup needs the host name and pager ID, with optionally a port if it’s not the default. These settings are provided by the SNPP provider.

Spybot Tray

This is the default notification – Spybot’s tray icon will show text in the lower right corner of your screen whenever new notifications are distributed.

Syslog

Syslog is another service for network communication of system messages, in use only by tech savvy administrators. Host and optionally port can be provided here.

Windows Alert message

This notification method will simply have a Windows message be shown on your desktop. If the computer in question is running Terminal Services, the session ID can be specified as well. Unless you are looking for special Terminal Services solutions, you probably should simply be using the Spybot Tray notification if you want a message on your desktop.

Windows Event Log

This notification method needs no configuration – when added, it will write entries to the Windows’ event log. This can help administrators to get a better understanding of relations of malware appearance to other system events.


FAQ Category: Notifications, Settings, Spybot 2

Why do I see “Internet protection: basic” in Spybot’s Start Center?

SDDisableProxyResultIf your Internet protection is set to ‘Basic’ the most likely reasons are that when the software was installed the default setting was ‘Disabled’ or when updates were installed the setting was changed automatically. This setting can also be changed by the user.

The ‘Proxy’ feature filters all Internet traffic thus it can reduce your browsing performance. While this provides maximum protection it can sometimes be annoying. We therefore issued an update to 2.1 and released a new Software installer (Spybot 2.1.20 SR 1). This update turns off the Proxy and so the Start Center to display “Internet protection: basic” instead of “full”.

If speed is not an issue and you want all data coming from the internet to be filtered, you can enable the proxy by opening the Start Centre selecting ‘Settings’ clicking the “Internet Protection” tab and ticking the box ‘Use Spybot proxy’.


FAQ Category: Internet Protection, Known Issues, Settings, Spybot 2

How to write my own detection rules?

If you decide to create detection rules on your own, you should visit our Wiki,                          which offers an overview and descriptions to the available rules and file parameters.                    You should also visit our OpenSBI forum .


FAQ Category: Open SBI, Spybot 2, Spybot Tools

How to refresh the system whitelist?

When you first install Spybot +AV you will have the option to create a whitelist. This is a list of programs that are known to be safe. This will speed up the scanning process as these files will not be scanned in the future unless they have been altered in some way.

30 days after the time Spybot +AV was installed this option will no longer appear in the ‘Start Center’. The reason for this happening is that it is recommended not to create a whitelist on systems that have been in use for some time as you may ‘whitelist’ files that have become infected.

If you want to refresh your whitelist and the option is no longer available in the ‘Start Center’ it can still be done manually. To do this navigate to the folder where Spybot is installed, locate the executable file ‘SDPrepPos.exe’ and run it. You will now be prompted to create a whitelist.


FAQ Category: Spybot 2, Start Center, Whitelist

How to remove the system whitelist?

 

You can delete the whitelist file in the Includes sub-folder of the Spybot – Search & Destroy install folder, which is by default:

Windows XP:

C:\Program Files\Spybot – Search & Destroy 2\Includes\PosSystem.sbs

Windows Vista or higher:

C:\Program Files (x86)\Spybot – Search & Destroy 2\Includes\PosSystem.sbs

 


FAQ Category: Spybot 2, Start Center, Whitelist

How to create a report?

You have different options to create logs with Spybot – Search & Destroy.

1. The easiest would be after a scan. After performing a System Scan with Spybot 2 you can choose “Save scan log…” from the navigation bar on the left. You can now choose where to save the log.

2. You can also start from the Start Center to create a more detailed report. After choosing the “Advanced User Mode” by ticking the checkbox to activate it you can click on “Create Report”. Make sure the lastest logs are available and are activated. Now click on “Create log archive”. The log file archive is now on your Desktop.

3. If you also want to create a HijackThis log please open the Spybot 2 Start-Center.
Choose the “Advanced User Mode” by ticking the checkbox to activate it. Now click on “Startup Tools”. If being asked what you want to do choose “Save a log file”. Go the tab “Logs”. Make sure all 10 checkboxes are ticked on top. Now click on “Create SBSD log” and “Create HJT log”. Afterwards click on the “Save” button. You can now choose where to save the log.


FAQ Category: Report Creator, Spybot 2, Spybot Tools

How do I use the quarantine feature?

If you want to restore previously removed files for whatever reason you can do this via the Quarantine module. Quarantine can be either launched via the Start Center or can also be found in SDTray’s program list.
Just right click on the Spybot – Search & Destroy icon in your system tray beside the Windows clock and navigate to “Basic Tools“ → “Quarantine“. Once “Quarantine“ has been started feel free to select the product you want to restore and hit “Restore selected“.
If you want to get rid of fixed entries permanently just hit the purge selected button.


FAQ Category: Quarantine, Spybot 2

In which languages is Spybot – Search & Destroy available?

Spybot 2.4 is currently available in the following languages:

  • English
  • Croatian
  • French
  • German
  • Hungarian
  • Italian
  • Polish
  • Russian
  • Spanish
  • Ukrainian

Spybot 2 is also being translated into other languages by volunteers, which will take some time. Other languages will be added in later versions of Spybot 2.


FAQ Category: General, Languages, Settings, Spybot 2

How to enable/disable plugins?

Available plugins can be managed by accessing the Spybot’s Settings using the Start Center or the Spybot taskbar tray icon.

To do this using the Settings, go to:
Start Center > Settings (tick “Advanced User Mode” if you do not see “Settings”) > System Integration

To do this using the taskbar tray icon, right-click the Spybot tray icon and go to:
Advanced Tools > Settings
In Settings, choose “System Integration”.

Available plugins can be installed or uninstalled using the right-hand side of the System Integration window.


FAQ Category: Settings, Spybot 2

How to enable/disable services?

You can manage Spybot – Search & Destroy’s services in the Settings module. You can either access the “Settings“ module via the Spybot’s Start Center (you have to switch to advanced mode previously) or via SDTray (the small Spybot 2 icon beside your systems clock in the taskbar) → “Advanced Tools“ → “Settings“.
Once “Settings“ has been opened switch to the “System Services“ tab. Depending on your operating system you can change the status via a drop down menu (Windows Vista and higher).
If you are running Windows XP you can “Start“ or “Stop“ the services via the button to the right.
If you want to un-/install a service, just right click and select “Un-/Install“. With the checkbox “Active after every reboot“ you can change the service’s behavior on system start. Beside the configuration options in the Settings module, you can also edit the Services via the Windows service management console.


FAQ Category: Settings, Spybot 2

How to enable/disable non critical dialogs?

Spybot – Search & Destroy can show you plenty of assistant dialogs.
If you disabled those dialogs by mistake, you can re-enable these dialogs easily via “Settings“. You can either access the “Settings“ module via the Spybot’s Start Center (you have to switch to advanced mode previously) or via “SDTray“ (the small Spybot 2 icon beside your systems clock in the taskbar) → “Advanced Tools“ → “Settings“. Once Settings has been opened switch to the “Dialogs“ tab and make sure the checkbox “Show various non-critical dialogs“ has been marked.


FAQ Category: Settings, Spybot 2

How to exclude products from the search?

You can edit the ignore list in the “Settings“ module to exclude a product from further searches. In order to do so you have to run the Start Center, switch to “Advanced User Mode” and then open “Settings”. Now browse to the “Ignore List“ tab. Via the “Add“ button you will get a list of products to be excluded. Just select the product you want to exclude and hit “OK“.
Settings can also be launched via SDTray (the small Spybot – Search & Destroy icon beside your systems clock in the taskbar).


FAQ Category: General, Spybot 2, System Scan

How to switch to another language?

Spybot – Search & Destroy supports different languages. You can easily switch to your favorite available language.
You can either access the settings module via the Spybot’s Start Center (you have to switch to advanced mode previously) or via “SDTray“ (the small Spybot 2 icon beside your systems clock in the taskbar) → “Advanced Tools“ → “Settings“.
Once “Settings“ has been opened switch to the “Language“ tab and click on the desired language.


FAQ Category: Languages, Settings, Spybot 2

How to disable the proxy?

Here is how to disable the proxy:

  • Open the Spybot – Search & Destroy “Start Center“.
  • Click on “Advanced User Mode” at the bottom left of the “Start Center”.
  • Rightclick on “Settings“ and choose “Run as administrator”.
  • Choose the tab “Internet Protection”.
  • Here you can untick the checkbox in front of “Use Spybot proxy”.

You can also access this setting by choosing “Configure Proxy“ in the “Updater“ menu on the left.


FAQ Category: Settings, Spybot 2, Spybot Proxy

How does the new update service work?

Updates are installed automatically when using a paid Edition.
Spybot – Search & Destroy will create a task to keep your Spybot 2 up to date automatically.
Regardless if you are logged in as an administrator or not, thanks to the Update Service Spybot 2 will be able to update every file without any further interaction.
To have a look or change the scheduler entries, please open the Updater and select “Configure schedules” from the navigation bar on the left.
You can also access this setting by opening the Start Center,clicking on Settings and choosing the tab Schedule.
Here you can Add, Edit or Remove Scheduler entries. It is recommended to use the default entries here that have been created by Spybot 2.


FAQ Category: Spybot 2, Updates

Why do I get a bad checksum error?

If you search for updates and a ‘bad checksum’ error is displayed, this has a simple reason – millions of people trying to download from the same server. Please try again later.
Or download the updates manually.
Please use the Spybot – Search & Destroy program folder as Destination Folder to store the update:
(by default)
Windows XP: C:\Program Files\Spybot – Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot – Search & Destroy 2


FAQ Category: Spybot 2, Updates

Why does Spybot – Search & Destroy freeze when doing an update?

SDUpdate can freeze up if the servers are reacting very slowly. This can happen the day new updates are released (usually on Wednesdays), when too many people try to download them at the same time. But Spybot 2 isn’t really freezed up, it’s just delayed. There are a few solutions for this problem:
1. Wait a minute, it should be active again.
2. You can still use the manual updater.
Download the current one and install it, and you’ll be up-to-date. Here is the direct-update-link where you can reach the latest update everytime.
Please use the Spybot 2 program folder as Destination Folder to store the update, by default:
Windows XP: C:\Program Files\Spybot – Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot – Search & Destroy 2


FAQ Category: Spybot 2, Updates

What files do I need to update?

A general recommendation is that you download all updates presented when you do a “Search for updates”. Updates usually can be divided into the following categories:

Essentials
The files listed here are Spybot program files that are needed by Spybot to run properly. It is highly recommended to download files suggested for download in this section.

Support
These files are also important to be kept up to date. They are used e.g. for the Whitelisting.

Detection updates :
Responsible for the detection rate are these files. That is why it is highly recommended to download them whenever there are updates available.
These are usually named:
Detection rules, Advanced detection library, Detection support library or Some plugin.

Help updates:
As the name already indicates, these are for those who like to read up some information on Spybot 2.


FAQ Category: Spybot 2, Updates

Why do I receive “Error retrieving update info file“?

1. The error message “Error retrieving update info file” usually appears when Spybot – Search & Destroy has accidently imported bad Internet Explorer proxy settings. In this case, it helps just to disable the proxy option in Spybot 2. You can access this setting by choosing “Configure Proxy“ in the Updater menu on the left. Or you open the Spybot 2 “Start Center“ and click on “Settings“. Choose the tab “Internet Protection“. Here you can deselect “Use Spybot Proxy“. Now click “Apply“ and “OK“.

2. Please check your firewall.
Most people who do not have problem #1 do have Spybot 2 accidentally blocked in their firewall.

3. If nothing else works, you can still use the manual updater, which is available on the website:  Detection Updates


FAQ Category: Spybot 2, Updates

How to update?

Using a Home or higher Edition updates are automated. Spybot – Search & Destroy will create Windows task scheduler entries to keep your Spybot 2 up to date automatically. Regardless if you are logged in as an administrator or not, thanks to our Update Service Spybot 2 will be able to update every file without any further interaction from you. Of course manually updates like in the Free Edition are possible, too.
To perform the updates manually:
Please open the “Spybot 2 Start Center” by double clicking. Now activate the “Advanced User Mode” at the bottom by ticking the check-box. Under “Advanced Tools” you will find “Update” which you can simply tick.
Here you have two options:
You can use the “Update” button on the lower right or choose “Update” through the menu on the left. You also have the possibility to start the Updates through the Spybot 2 tray icon (on the lower right of your Desktop beneath your clock). Just rightclick the Spybot 2 tray icon and choose “Update”.


FAQ Category: Spybot 2, Updates

Are there any known compatibility issues?

There should be no problems with the compatibility.
If there are issues concerning realtime components, you can disable Live Protection or services that could cause this conflict in Spybot’s Settings.


FAQ Category: General, Spybot 2

Why does SDCleaner/SDDelfile run on every startup?

Sometimes Spybot – Search & Destroy can not delete all files. Some files used by Windows are running in the background. If you would delete these files before the application they are involved in ends, your system might become instable. That is the reason why you sometimes have to restart your system to complete the cleaning process.
In this case the SDCleaner/SDDelfile destroys the found items, before they are activated. If you do not want this option you can easily disable it in the SDCleaner itself. Go to the Spybot 2 folder, by default:
Windows XP: C:\Program Files\Spybot – Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot – Search & Destroy 2
and open the SDCleaner.exe.
Uncheck the checkbox in front of “Run cleaner on system startup”.


FAQ Category: General, Spybot 2, System Scan

How to switch to the free version?

Once your licence has expired Spybot – Search & Destroy will show you a dialog offering three choices. If you want to continue using Spybot 2 without renewing your licence just choose “Switch to Free Edition“.


FAQ Category: General, Spybot 2, Spybot License

Is there any replacement for TeaTimer / Resident?

With each paid Spybot 2 Edition there is the new Live Protection available. This Live Protection monitors every process created or running on your system and scans each process. Malicious processes are blocked even before they start. If you have another antivirus engine running you can choose to disable Live Protection.
Live Protection allows the user to choose to run or suppress any starting process.


FAQ Category: Live Protection, Settings, Spybot 2

Does Spybot – Search & Destroy Support Windows 8?

There should be no problems with the compatibility under Windows 8 (also 64 bit):
http://www.safer-networking.org/about/compatibility/
For all those using Windows 8.1, please use Spybot 2.2 or later. Spybot 2.2 solves any incompatibility issues and allows to run Spybot on Windows 8.1 systems.

 

 

 


FAQ Category: General, Spybot 2

Are there any command line parameters that can be used?

Depending on the installed version of Spybot – Search & Destroy you can use command line parameters to automate Spybot’s tasks.
To get a list of the available command line parameters run cmd.exe and browse to the Spybot 2 directory.
That is by default for Windows XP:
C:\Program Files\Spybot – Search & Destroy 2
and for Windows Vista, Windows 7 or Windows 8:
C:\Programs (x86)\Spybot – Search & Destroy 2

Now type “modulename.exe /help”, e.g.“SDScan.exe /help“.


FAQ Category: General, Spybot 2

Why do other spyware programs appear to find spies in Spybot – Search & Destroy’s directory?

Please have a look at the path where such a program has found the spyware.
As Spybot 2 has no spyware integrated, this must be a false alarm.
The reason for such a false alarm is simple: Spybot 2 saves quarantine files of the problems you have fixed, to make it possible to recover them in case something has stopped working after the fix.
If the file found is in the Quarantine directory which would be here:

Windows XP: C:\Documents and Settings\All Users\Application Data\Spybot-Search & Destroy\Quarantine

Windows Vista or Windows 7 or Windows 8: C:\Users\All Users\Spybot-Search & Destroy\Quarantine

it is such a quarantine file. It is no longer of any harm, as the file cannot be started anymore.
But once you are sure you do not need the backup, go to the Quarantine section inside Spybot 2 and purge those files.
Current versions compress the quarantine files into password-protected zip archives,
thus avoiding other spyware applications will give false alarms.
Some programs might notify you that they cannot access these zip archives – this can easily be ignored.

As the quarantine files are named after the threat some programs might also naively detect the backups as threats just because of the file name. This can also be ignored.


FAQ Category: General, Spybot 2

Is Spybot – Search & Destroy compatible with WinPE/BartPE bootable?

Yes, Spybot 2 offers full support for PE in general and PEBuilder.
You can download the necessary plugin here, or just run Spybot-S&D from your harddisk after booting a PE disk.
Once run from your bootable PE CD, Spybot 2 will automatically scan all registry and drives it can find. Furthermore we have our own bootable edition.
Spybot 2 Personal Edition includes the BootCD Creator which makes creating a Boot CD child’s play.


FAQ Category: Boot CD Creator, Spybot 2, Spybot Tools

Is Spybot – Search & Destroy compatible with other resident protection?

Usually there are no problems with the compatibility.

If you also plan to use the Live Protection of Spybot +AV together with your already installed antivirus software, you might experience a decrease in system speed.
In general we recommend to run only one AV solution.


FAQ Category: General, Live Protection, Settings, Spybot 2

What is the Repair Environment?

Executing the Repair Environment opens a new Windows Desktop in which the Start Center runs to allow the use of Spybot – Search & Destroy in a way where other software cannot interact and manipulate it as easily.
The Windows Login screen and the User Account Control dialogs use the same technology to prevent keyloggers and other malware to have access and control.
A practical use of the Repair Environment would be where Spybot 2 itself cannot be started any more, where it repeatedly closes out of the blue, seems to take actions on its own, or where malware that is known to exist on the system and that is known to be detectable does not appear in Spybot’s results.


FAQ Category: Repair Environment, Spybot 2, Spybot Tools

Why does Spybot – Search & Destroy flag changes in the Windows Security Center?

Spybot 2 detects registry changes associated with Microsoft Security Center;
they are listed as “Windows Security Center”. This is neither a false positive nor a bug.
It is just an information about a potential threat – Spybot 2 only wants to bring to your attention that someone or something disabled one or more notifications in the Windows Security Center, e.g. the notifications that your virus protection is not active or not up-to-date.
If you changed the settings yourself you can safely tell Spybot 2 to exclude those detections from further scans.
In order to do so you have to run the Start Center, switch to advance mode and start Settings.
Now browse to the “Ignore List“ tab. Via the “Add“ button you will get a list of products to be excluded. Just select the product you want to exclude and hit “OK“.
Settings can also be launched via SDTray (the small Spybot 2 icon beside your systems clock in the taskbar).
The same is true if you have another security solution installed (like McAfee Security Center or Norton Internet Security).
These programs disable announcements of Window Security Center in order to signal things by themselves.
The reason why the changes are flagged by Spybot 2 is that there are also malware programs that disable the notifications so the user does not take note of his security tools not being effective.
More information is available in our forum: Windows Security Center


FAQ Category: General, Spybot 2

What can I do if Spybot – Search & Destroy freezes during the scan?

1. Please disable all other security programs that you run and close all other programs during the work with Spybot 2.
2. Also run a scan in safe mode.
3. It should also help to deactivate the scanning for usage tracks and Cookies.
In order to do so you have to run the Start Center, switch to advance mode and start Settings.
Now browse to the “Categories“ tab. Here untick the checkboxes in front of “Malware detection –  Cookies.sbi“ and “Usage Tracks – Tracks.uti“.
Afterwards hit “Apply“ and “OK“. Settings can also be launched via SDTray
(the small Spybot 2 icon beside your systems clock in the taskbar).
4. If this does not help, please delete the contents of your Windows temp folder and try it again.
5. Also, you might want to disable the “Create system restore point“ when fixing spyware/usage tracks option.
Therefore run the Start Center, switch to advance mode and start Settings.
Now browse to the “Dialogs“ tab. Disable the checkboxes in front of Cleaner:
“Offer to create a system restore point.“ and “Create restore point if dialog not shown.“.
Afterwards hit “Apply“ and “OK“.


FAQ Category: Known Issues, Spybot 2, System Scan

Why does Spybot – Search & Destroy also remove IE toolbars that seem useful to me?

Nearly all add on IE toolbars make the web access easier for you.
Sadly, to tailor their information to your needs, they need to collect data about you;
and most privacy statements are unclear about how they do use this data beside sending you what they think is what you want.


FAQ Category: Spybot 2, System Scan

What is the immunization feature and what are the other permanent protection options?

Spybot – Search & Destroy offers the Immunization – a feature to allow you to immunize your computer against certain spyware.
It also allows you to use native browser settings to block cookies, malware installations,
bad websites and other threats via ActiveX.


FAQ Category: Immunization, Spybot 2

Which browsers does Spybot – Search & Destroy support?

Spybot – Search & Destroy has dedicated support for most browsers.
It can, for example immunize these browsers, or create restricted access shortcuts for your safety.
Where we list product versions, these are the ones that have been tested;
other versions are likely to be supported depending what changes have been made to them.
Unlisted browsers that are clones of listed browsers are also likely to be supported
(e.g. most IE based browsers and many Google Chrome variants use the same cache location and formats).

Internet Explorer & clones

Mozilla based browsers

Opera browsers

Opera (4, 6.x, 7.x, 8.x, 9.x, 10.x)

Webkit based browsers

Other browsers


FAQ Category: General, Spybot 2

Why did the Whitelist link disappear (from the Start Center)?

The option to create a whitelist is only being offered on systems that are not older than 30 days.
If your system has been installed more than 30 days ago, the Whitelist Creator can not be started via the Start Center. If you still want to create a whitelist you can use the ‘SDPrepPos’ in the Spybot – Search & Destroy program folder, by default:
Windows XP: C:\Program Files\Spybot – Search & Destroy 2
Windows Vista or Windows 7 or Windows 8: C:\Programs (x86)\Spybot – Search & Destroy 2

Warning:
A Whitelist should only be created on a system that is known to be uninfected.
We recommend that you only use it on a new system, after all software has been set up,
but before connecting it to the Internet.


FAQ Category: Spybot 2, Start Center, Whitelist

Why are some of my favourite internet sites blocked?

In that case the immunization has to be undone. To do so run the Start Center and click on “Immunization“. On the navigation bar on the left you can “Undo immunization“.
Please note: Now the bad downloads will not be blocked any longer! You may have to restart your computer. Then try again to open your favourite pages. Do not forget to Immunize again after visiting that page.


FAQ Category: Immunization, Internet Protection, Known Issues, Spybot 2, Spybot Proxy

Why does the immunization “not work”?

On Windows Vista / Windows 7 / Windows 8, you need to run the immunization with elevated privileges, otherwise all global immunizations will fail.
To elevate, right-click the Spybot – Search & Destroy shortcut and choose Run as Administrator.
Spybot 2 will offer you to run the Immunization elevated if you do not run it as described above.
If you have chosen to not have this dialog shown again when it was previously shown,
you can re-enable it by using the Dialogs tab of the Settings window.

If you think nothing has been immunized, please make sure you have clicked on “Check system” which can be found on the navigation bar on the left. This will check for already applied immunization.

In order to immunize correctly please close all open browsers.
Also using more than one security software with resident protection can cause conflicts.
Please take a look at this thread in our forum: Various reasons for incomplete immunization


FAQ Category: Immunization, Spybot 2

Why did the Startup Tools assistant dialog disappear?

This dialog will only be displayed for a limited period of time.
Once Startup Tools has finished loading all registry and file details,
the dialog will disappear and Startup Tools will switch to the main window.


FAQ Category: Spybot 2, Spybot Tools, Startup Tools

How to revert to a backup?

In order to revert to a registry backup, run Windows in Safe Mode.

Be sure that hidden files are shown.
Now execute the two files (or maybe it is just one of them) regusers.reg and reglocal.reg in the following folder:

Windows XP: C:\Documents and Settings\All Users\Application Data\Spybot – Search & Destroy\Backups\

Windows Vista or Windows 7 or Windows 8: C:\ProgramData\Spybot – Search & Destroy\Backups\

Answer Yes when prompted to add its contents to the Registry.
Subsequent please reboot.


FAQ Category: General, Spybot 2

How to download Spybot – Search & Destroy?

There are two options to download Spybot 2:

  1. You can choose a download location on our website. The displayed mirrors are either partners who provide servers to host Spybot, or our own servers. You can download from any of these, they are secure and all provide the latest version of Spybot.
  2. You can also choose the direct installation file.

Please always run Spybot as an Administrator to ensure it can function correctly, and download all updates before performing a scan.


FAQ Category: Download & Installation, Spybot 2

Are the found items really Rootkits?

Malware sometimes uses rootkit technology to hide itself at system level.
This makes it undetectable for standard tools. Our plugins help Spybot – Search & Destroy to detect this form of malware.
Our Rootkit Scan tool shows anything that uses certain rootkit technologies. But items with rootkit properties detected here are not necessarily malware. Sometimes, legit software uses rootkit technologies to hide registration data or other information it does not want the user to see in any case. So please keep in mind that a Rootkit Scan only flags suspicious stuff, not identifying just bad stuff. If you get ‘No admin in ACL’ this thread in our forum should help explaining. If you are not sure about the found items, please ask for ‘help’ in our RootAlyzer Forum before you delete anything. The deletion is final and can not be recovered through the Quarantine. If you still want to remove the found items it is strongly recommended to create a system restore point before doing that.


FAQ Category: RootAlyzer, Rootkit Scan, Spybot 2, Spybot Tools

How to Uninstall Spybot 2

Spybot – Search & Destroy will uninstall from the Windows Add/Remove Software control panel without problems. The following directories will not be removed during the uninstall procedure, if you want those folder to be deleted, you will have to remove them by hand:

Windows XP: C:\Documents and Settings\All Users\Application Data\Spybot – Search & Destroy\
Windows Vista or Windows 7 or Windows 8: C:\ProgramData\Spybot – Search & Destroy (Please note that the Application Data Folder is hidden. So if you cannot find this folder please check your folder properties.)

Explanation: this folder contains the backup (the quarantined files) that Spybot 2 creates. If the Uninstall would remove this folder as well, this would mean that those backups would be gone. We saw it a few times that new users uninstalled Spybot 2 in panic after they have experienced a small problem, thus removing the backup that would have undone any changes.


FAQ Category: Download & Installation, Spybot 2

How to use Scripting?

The script editor allows you to create complex malware detection patterns using our OpenSBI syntax and the Pascal language. A most simple script that you also implement using a simple .sbi file as well would be this:

begin sbiFile(‘<$FILE_DATA>’,’\Malware.txt’,’filesize=182,md5=83C36C493D7A254F9DE2ED63B3F92548′); end.

Now imagine you want some user input or custom calculation, because malware is individual to your system.

var sName, sFilename: String;
begin
    InputQuery(‘Username’, ‘Please enter’, sName);
    sFilename := ‘C:\Users\’ + sName + ‘\test.txt’;
    sbiFile(‘test’, sFilename, ‘filesize=10’);
    ShowMessage(‘Did look for ‘ + sFilename);
end.

This demonstrates interaction with the user. In reality, you could of course just use the proper path template for scanning all users directories (see the OpenSBI Wiki). Also, the use of scripting will be more in complex calculations and conditions than user interaction.


FAQ Category: Open SBI, Spybot 2

How can I get administrator rights under Windows Vista / Windows 7 / Windows 8?

To open Spybot as administrator, simply right click on the Spybot desktop icon or the start menu icon and click “Run as Administrator”:

Admin Rights

Then you can right-click on the module’s icon you are about to run and select “Run as administrator”

.


FAQ Category: General, Spybot 2, Start Center

How to renew my licence?

Once your licence is about to expire there are different ways to easily get a renewal. You can either use our order form or run the Start Center and select “Renew licence” in the “Your licence is expiring soon” dialog.


FAQ Category: General, Spybot 2, Spybot License