Prolivation: Help

Spybot has just started to detect 'Prolivation' in my system. I'm not sure what it is exactly but Spybot lists it as a 'Hijackers.sbi' and it shows up in my registry in Windows\Current Version\URL\Default....and in Prefixes (i.e. it has two locations) and is listed by Spybot as a 'registry change'.

Even though I 'fix' it with Spybot, it reappears immediately as if it were self-replicating.

Is there any way to get rid of it permanently?

 

Try updating Spybot and then scanning again.

 

Thanks Brett....I've done that and although Spybot 'fixes' it, if I immediately run Spybot again, they reappear to be fixed again.

I have no idea what a hijacker.sbi is but I don't get a warm feeling about having this thing always there.

 

Maybe this will help.

 

Brett....thanks once again. I wasn't aware that information was there. Now, if I can just follow it.........

 

Good luck

 

Spybot 1.1 (which I installed to a new folder without removing version 1.0) still found the three provilation "false-positives" even though I had the latest includes files until I went to the Online Updates within the 1.1 program and downloaded both the 10-23-02 "application updater" and the 11-1-02 "MAIN APPLICATION Updated 1.1 Application Release 3" (1164kb). The errors stopped after that.

 

Alice, I've also downloaded all the recent updates and my problem with Prolivation still exists.

Are you suggesting that Spybot is showing 'false positives'?

 

These are most likely false positives -see the thread here,
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi?s=3dd01f2b192affff;act=ST;f=28;t=537 and elsewhere on the net-integration forum.


Hve you updated to version 1.1before getting all the online updates?? Version 1.1 is available for download here:
http://security.kolla.de/index.php?lang=en&page=download

It will install in a new Spybot Search & Destroy 1.1 folder.

I had to first update to version 1.1 of the Spybot SD program (I used the zipped version, then extracted the contents to C:\Program Files) and then I got the application updater and application version 1.1 Release 3 update using the online updates feature.

 

Thanks Alice...yes, I have 1.1 installed and have downloaded all the updates.

These may be false positives or they may be this, from a net-integrations forum:

Prolivation also hacks your Iereset.inf file.

That's the file that's used when you go to Internet Options > Programs and hit "reset web settings ".

Instead of restoring the default search and startpages, and other stuff, it adds Prolivation back... :blink:

So don't press that button before you've extracted a fresh copy of Iereset.inf from your Internet Explorer cabs to your Windows\Inf directory.

Once I figure out how to do this, I'll see if it works.

 

You might consider searching your hard drive for a VBS file that may be "hijacking" your settings.

 

In my case, after updating to version 1.1 I still had three Prolivation detections, the Iereset.inf file and two registry entries. I never "fixed" any of these and I still have my original Iereset.inf file, located in C:\Windows\Inf\ dated July 23, 2001 (from my IE5.5sp2 install).

After updating version 1.1 with not only the latest 'Includes' but also with the 'Application updater' and the 'Main application' Release 3 for Spybot-S&D, I no longer got any Prolivation detections so these were "false posivies" for me. You case might be different since it is always possible that you have a real Prolivation detection, not a false positive.

To make sure you are running Release 3, go to Help. About in the Spybot SD 1.1 program window. You can also find SpybotSD.exe in the main program folder, Right-click, click the version tab and make sure it is 1.1.0.3.

I noticed that there is also a mainapp.zip download for Spybot 1.1 Release 3 in the right hand column at http://security.kolla.de/ under all-in-one downloads, Main app (1.1 rel 3, to be UNZIPPED to the main Spybot-S&D folder and renamed to SpybotSD.exe) so that's another way you can update to 1.1 release 3, if the Online updates isn't bringing it up for you.

I see you just added a new post to the thread here, so let's see if PepiMK or another of the Spybot gurus answers :

SpyBotS&D 1.X > Prolivation

 

Alice! Thank you!

Seems I never did have Release 3, although the on-line updater indicated that I had all the current releases installed! So much for trusting that facility again!

And thanks for pointing me to the all-in-one download from Kolla's site. I've never done any of that kind of downloading and re-naming after plugging away at it, and several unsuccessful attempts to install/rename, I have release 3 installed and zero Prolivation.

I'll also make a follow up post in Net-Integrataion to close that discussion.

You folks are the best!

 

You're welcome. I know from reading the net-integration forums that sometimes that online updater doesn't work!

I'm glad you were able to get the manual 1.1 rel3 "mainapp" update done. I've noticed that installing and updating Spybot SD can get a bit complicated, especially with the zip file extractions.