Spybot S&D running ?

[fenix]

Hi, I keep the immuniztion files updated in Spybot and I don't see any settings to shut "it" off so I was wondering it it is a program running that is immunizing my computer, or if it's something like adding protection host files entries.

Reason I'm asking is because don't see it running under
services or processes or the msconfig/startup menu.

Does the immunize process work by blocking ports as well as files ?

 

[satrow]

No, nothing running, it just blocks from within IE security settings (I think!)

It adds domains known to contain bad contents into the Restricted Zone, thus blocking installation of executable code from those pages; it also adds block options for bad executable code by its ID, and it sets known tracking cookies to not be accepted by Internet Explorer.

- Spybot does have a hosts file you could use too, it's under Mode > Advanced > Tools.

 

[bcastner]

Are we forgetting Tea Timer?

http://www.safer-networking.org/en/faq/33.html

 

[fenix]

thx for the relies and link to s&D FAQs.

A quote from FAQs, "As TeaTimer is always running in the background, it takes some resources of about 5 MB."

So it's running, but is it process or service ?

What is it called ?

 

[bcastner]

Process.
Note it is loaded from a RUN key, (KKCU, as a startup item.

Services are installed and run in a completely different fashion.

 

[bcastner]

(KKCU, as a startup item.

should read....

(HKCU), as a startup item.

 

[linney]

A constantly running BHO {53707962-6F74-2D53-2644-206D7942484F} from "Safer Networking Limited."

That's SpyBot's "SDhelper.dll" which is in use by Internet Explorer all the time if you have it installed for use by IE.

Immunization (I believe) is updated sometimes automatically by the updates but usually by clicking on it after updating the SpyBot program. I would imagine that the Immunization file is only in use during the manual scan. I guess reading the Help files and Tutorials would answer your questions or the "Safer Networking Forums" at

http://forums.spybot.info/index.php

If "Tea Timer" was running I think that would show up as a Process. I turned that off some time ago because it was interfering with other programs and Windows Updates in particular. Also the warning message box was a bit "iffy".