As mentioned in another thread, after installing Defender downloads seem to
be prevented from being saved. I checked further, the particular download
already existed and the download hung for a while at 99% then appeared
complete. The file did eventually save, but did not seem to update details
properly. Creation date remained August 2004 when I expected it to be
updated to 19 Feb 2006. At least it did save the file eventually.
Attempting to delete a file which is in an archive causes a nasty error
0x80508026, which does have an explanation when you resize the header of the
Status column sufficiently. Two options to fix this would be desirable;
allow a multi-line explanation and offer a second level action to delete the
entire cab file.
Definitely need an icon in the tray. I noticed a comment that this should be
available as an option in the near future, Good!
I was running a full scan when I also changed my home page. Since I had set
advanced SpyNet mode, I was alerted which was fine. Unfortunately, I could
not see any of the progress of the scan after that until I hit the Abort
button.
(The full scan found a number of SpyWare and Virus instances in the Norton
Internet Security Quarantine folder).
On the Currently Running Programs option under Software Explorer, it takes
AGES to classify the Microsoft Generic Host Processes, in particular. Some
others as well.
I really feel that I miss some of the features from the Microsoft
AntiSpyware, e.g. the stuff that allows you to look at the various settings
in Internet Explorer. Not having some of these features may be OK when the
system is all clean and dandy, but what if they are already corrupted when
Defender is installed? I look forward to my first infected PC. Incidentally,
can I download Defender on a machine which will not allow using the Version
Checking component because of SpyWare already on it?
There is no obvious way to force a check for updates.
I'll keep an eye out to see what else shows, and what happens on the above
points.
BFN
Dave

Additional.
A new installation (upgrading from Microsoft AntiSpyware), said definitions
were 24 days old, OK, but did not give any real feedback about the update
process, leading even me to start playing with buttons. If it is doing
something, we do need to know that it is doing something.
BFN
Dave
"Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
news:(E-Mail Removed)...
> As mentioned in another thread, after installing Defender downloads seem
> to be prevented from being saved. I checked further, the particular
> download already existed and the download hung for a while at 99% then
> appeared complete. The file did eventually save, but did not seem to
> update details properly. Creation date remained August 2004 when I
> expected it to be updated to 19 Feb 2006. At least it did save the file
> eventually.
> Attempting to delete a file which is in an archive causes a nasty error
> 0x80508026, which does have an explanation when you resize the header of
> the Status column sufficiently. Two options to fix this would be
> desirable; allow a multi-line explanation and offer a second level action
> to delete the entire cab file.
> Definitely need an icon in the tray. I noticed a comment that this should
> be available as an option in the near future, Good!
> I was running a full scan when I also changed my home page. Since I had
> set advanced SpyNet mode, I was alerted which was fine. Unfortunately, I
> could not see any of the progress of the scan after that until I hit the
> Abort button.
> (The full scan found a number of SpyWare and Virus instances in the Norton
> Internet Security Quarantine folder).
> On the Currently Running Programs option under Software Explorer, it takes
> AGES to classify the Microsoft Generic Host Processes, in particular. Some
> others as well.
> I really feel that I miss some of the features from the Microsoft
> AntiSpyware, e.g. the stuff that allows you to look at the various
> settings in Internet Explorer. Not having some of these features may be OK
> when the system is all clean and dandy, but what if they are already
> corrupted when Defender is installed? I look forward to my first infected
> PC. Incidentally, can I download Defender on a machine which will not
> allow using the Version Checking component because of SpyWare already on
> it?
> There is no obvious way to force a check for updates.
> I'll keep an eye out to see what else shows, and what happens on the above
> points.
> BFN
> Dave
>

Hello Dave,

Try going to Windows Update and check for Criticals Updates, this is how I
resolv the same problem. Maybe work for you too.

Good luck

Let us know how you end up.
Еиçеl
--



"Dave Bolt" wrote:

> Additional.
> A new installation (upgrading from Microsoft AntiSpyware), said definitions
> were 24 days old, OK, but did not give any real feedback about the update
> process, leading even me to start playing with buttons. If it is doing
> something, we do need to know that it is doing something.
> BFN
> Dave
> "Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
> news:(E-Mail Removed)...
> > As mentioned in another thread, after installing Defender downloads seem
> > to be prevented from being saved. I checked further, the particular
> > download already existed and the download hung for a while at 99% then
> > appeared complete. The file did eventually save, but did not seem to
> > update details properly. Creation date remained August 2004 when I
> > expected it to be updated to 19 Feb 2006. At least it did save the file
> > eventually.
> > Attempting to delete a file which is in an archive causes a nasty error
> > 0x80508026, which does have an explanation when you resize the header of
> > the Status column sufficiently. Two options to fix this would be
> > desirable; allow a multi-line explanation and offer a second level action
> > to delete the entire cab file.
> > Definitely need an icon in the tray. I noticed a comment that this should
> > be available as an option in the near future, Good!
> > I was running a full scan when I also changed my home page. Since I had
> > set advanced SpyNet mode, I was alerted which was fine. Unfortunately, I
> > could not see any of the progress of the scan after that until I hit the
> > Abort button.
> > (The full scan found a number of SpyWare and Virus instances in the Norton
> > Internet Security Quarantine folder).
> > On the Currently Running Programs option under Software Explorer, it takes
> > AGES to classify the Microsoft Generic Host Processes, in particular. Some
> > others as well.
> > I really feel that I miss some of the features from the Microsoft
> > AntiSpyware, e.g. the stuff that allows you to look at the various
> > settings in Internet Explorer. Not having some of these features may be OK
> > when the system is all clean and dandy, but what if they are already
> > corrupted when Defender is installed? I look forward to my first infected
> > PC. Incidentally, can I download Defender on a machine which will not
> > allow using the Version Checking component because of SpyWare already on
> > it?
> > There is no obvious way to force a check for updates.
> > I'll keep an eye out to see what else shows, and what happens on the above
> > points.
> > BFN
> > Dave
> >
>
>
>

Been there, got the mug and the tee-shirt
No updates though

Another possible problem for the list.
Doing a full scan has been working for 7.5 hours so far, looked at 4434264
files at this point and still looking at some files on C: then some files on
E:
Norton Internet Security only finds about 1500000 files to check and
completes in 4.5 hours.
UPDATE:
As I was writing this message the scan completed, with 4434284 files scanned
in 7 hours 33 minutes and 43 seconds. Found 21 high/severe items, 5 low
items.
Looks like we have a false positive here. msriched.vbx is detected as
Typhoon, a trojan offering severe risk. It does however have the following
version information.
Company: Microsoft Corporation
File Version: 4.0
Internal Name: msriched
Language: English (United States)
Original file name: msriched.vbx
Product Name: Microsoft® Windows(TM) Operating System
Product Version: 4.0
This particular file is in some saved data from a Windows 95 machine, dating
back to 20 Nov 1996.
Everything else looks just fine, although of course some of the detected
threats are inside cab files and will have to be manualy removed.
Regards
Dave
"Engel" <(E-Mail Removed)> wrote in message
news:EE3E835F-4135-49FD-8EFF-(E-Mail Removed)...
> Hello Dave,
>
> Try going to Windows Update and check for Criticals Updates, this is how I
> resolv the same problem. Maybe work for you too.
>
> Good luck
>
> Let us know how you end up.
> ??ç?l
> --
>
>
>
> "Dave Bolt" wrote:
>
>> Additional.
>> A new installation (upgrading from Microsoft AntiSpyware), said
>> definitions
>> were 24 days old, OK, but did not give any real feedback about the update
>> process, leading even me to start playing with buttons. If it is doing
>> something, we do need to know that it is doing something.
>> BFN
>> Dave
>> "Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
>> news:(E-Mail Removed)...
>> > As mentioned in another thread, after installing Defender downloads
>> > seem
>> > to be prevented from being saved. I checked further, the particular
>> > download already existed and the download hung for a while at 99% then
>> > appeared complete. The file did eventually save, but did not seem to
>> > update details properly. Creation date remained August 2004 when I
>> > expected it to be updated to 19 Feb 2006. At least it did save the file
>> > eventually.
>> > Attempting to delete a file which is in an archive causes a nasty error
>> > 0x80508026, which does have an explanation when you resize the header
>> > of
>> > the Status column sufficiently. Two options to fix this would be
>> > desirable; allow a multi-line explanation and offer a second level
>> > action
>> > to delete the entire cab file.
>> > Definitely need an icon in the tray. I noticed a comment that this
>> > should
>> > be available as an option in the near future, Good!
>> > I was running a full scan when I also changed my home page. Since I had
>> > set advanced SpyNet mode, I was alerted which was fine. Unfortunately,
>> > I
>> > could not see any of the progress of the scan after that until I hit
>> > the
>> > Abort button.
>> > (The full scan found a number of SpyWare and Virus instances in the
>> > Norton
>> > Internet Security Quarantine folder).
>> > On the Currently Running Programs option under Software Explorer, it
>> > takes
>> > AGES to classify the Microsoft Generic Host Processes, in particular.
>> > Some
>> > others as well.
>> > I really feel that I miss some of the features from the Microsoft
>> > AntiSpyware, e.g. the stuff that allows you to look at the various
>> > settings in Internet Explorer. Not having some of these features may be
>> > OK
>> > when the system is all clean and dandy, but what if they are already
>> > corrupted when Defender is installed? I look forward to my first
>> > infected
>> > PC. Incidentally, can I download Defender on a machine which will not
>> > allow using the Version Checking component because of SpyWare already
>> > on
>> > it?
>> > There is no obvious way to force a check for updates.
>> > I'll keep an eye out to see what else shows, and what happens on the
>> > above
>> > points.
>> > BFN
>> > Dave
>> >
>>
>>
>>

David C wrote

I first must first say that MSD does not make loads of temp files like beta 1.
Problems:
1. No icon in task bar
2. HELP file out of date. eg describes how to disable realtime protection
when it is not possible.
3. When updating there is no indication of progress.
4. When in Software explorer and Currently Running Programs is selected the
CPU load goes up to almost 100%. Every time.

"Dave Bolt" wrote:

> As mentioned in another thread, after installing Defender downloads seem to
> be prevented from being saved. I checked further, the particular download
> already existed and the download hung for a while at 99% then appeared
> complete. The file did eventually save, but did not seem to update details
> properly. Creation date remained August 2004 when I expected it to be
> updated to 19 Feb 2006. At least it did save the file eventually.
> Attempting to delete a file which is in an archive causes a nasty error
> 0x80508026, which does have an explanation when you resize the header of the
> Status column sufficiently. Two options to fix this would be desirable;
> allow a multi-line explanation and offer a second level action to delete the
> entire cab file.
> Definitely need an icon in the tray. I noticed a comment that this should be
> available as an option in the near future, Good!
> I was running a full scan when I also changed my home page. Since I had set
> advanced SpyNet mode, I was alerted which was fine. Unfortunately, I could
> not see any of the progress of the scan after that until I hit the Abort
> button.
> (The full scan found a number of SpyWare and Virus instances in the Norton
> Internet Security Quarantine folder).
> On the Currently Running Programs option under Software Explorer, it takes
> AGES to classify the Microsoft Generic Host Processes, in particular. Some
> others as well.
> I really feel that I miss some of the features from the Microsoft
> AntiSpyware, e.g. the stuff that allows you to look at the various settings
> in Internet Explorer. Not having some of these features may be OK when the
> system is all clean and dandy, but what if they are already corrupted when
> Defender is installed? I look forward to my first infected PC. Incidentally,
> can I download Defender on a machine which will not allow using the Version
> Checking component because of SpyWare already on it?
> There is no obvious way to force a check for updates.
> I'll keep an eye out to see what else shows, and what happens on the above
> points.
> BFN
> Dave
>
>
>

WD keeps on bogging down my Internet experience, I don't why it decides to
hog my CPU running at 99%. I usually just kill it and its associated
processes. Can anyone tell me why it is doing this. I have Athlon 1800, WinXP
Home, 512MB RAM, Norton Internet Security, Cable Modem and have run MS
Baseline Security Analyzer and full virus scan, both with Norton and Windows
Defender.

"Dave Bolt" wrote:

> As mentioned in another thread, after installing Defender downloads seem to
> be prevented from being saved. I checked further, the particular download
> already existed and the download hung for a while at 99% then appeared
> complete. The file did eventually save, but did not seem to update details
> properly. Creation date remained August 2004 when I expected it to be
> updated to 19 Feb 2006. At least it did save the file eventually.
> Attempting to delete a file which is in an archive causes a nasty error
> 0x80508026, which does have an explanation when you resize the header of the
> Status column sufficiently. Two options to fix this would be desirable;
> allow a multi-line explanation and offer a second level action to delete the
> entire cab file.
> Definitely need an icon in the tray. I noticed a comment that this should be
> available as an option in the near future, Good!
> I was running a full scan when I also changed my home page. Since I had set
> advanced SpyNet mode, I was alerted which was fine. Unfortunately, I could
> not see any of the progress of the scan after that until I hit the Abort
> button.
> (The full scan found a number of SpyWare and Virus instances in the Norton
> Internet Security Quarantine folder).
> On the Currently Running Programs option under Software Explorer, it takes
> AGES to classify the Microsoft Generic Host Processes, in particular. Some
> others as well.
> I really feel that I miss some of the features from the Microsoft
> AntiSpyware, e.g. the stuff that allows you to look at the various settings
> in Internet Explorer. Not having some of these features may be OK when the
> system is all clean and dandy, but what if they are already corrupted when
> Defender is installed? I look forward to my first infected PC. Incidentally,
> can I download Defender on a machine which will not allow using the Version
> Checking component because of SpyWare already on it?
> There is no obvious way to force a check for updates.
> I'll keep an eye out to see what else shows, and what happens on the above
> points.
> BFN
> Dave
>
>
>

You can go to Help, About, and trigger a check for definition updates.
You'll get a baloon that the check has been initiated, then there will be
nothing apparently happening for a good long time--not sure how this
mechanism works, but it isn't speedy.

If you want to see it more directly, drop to a command prompt and run
\program files\windows defender\mpcmdrun.exe SignatureUpdate and watch what
happens--if you like watching paint dry.

The intent is that sig updates will come in automatically via WSUS, or
autoupdate, or by the setting within the program which calls for sig updates
before a scan, and we can all ease our fingers off the update trigger....

--

"Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
news:(E-Mail Removed)...
> As mentioned in another thread, after installing Defender downloads seem
> to be prevented from being saved. I checked further, the particular
> download already existed and the download hung for a while at 99% then
> appeared complete. The file did eventually save, but did not seem to
> update details properly. Creation date remained August 2004 when I
> expected it to be updated to 19 Feb 2006. At least it did save the file
> eventually.
> Attempting to delete a file which is in an archive causes a nasty error
> 0x80508026, which does have an explanation when you resize the header of
> the Status column sufficiently. Two options to fix this would be
> desirable; allow a multi-line explanation and offer a second level action
> to delete the entire cab file.
> Definitely need an icon in the tray. I noticed a comment that this should
> be available as an option in the near future, Good!
> I was running a full scan when I also changed my home page. Since I had
> set advanced SpyNet mode, I was alerted which was fine. Unfortunately, I
> could not see any of the progress of the scan after that until I hit the
> Abort button.
> (The full scan found a number of SpyWare and Virus instances in the Norton
> Internet Security Quarantine folder).
> On the Currently Running Programs option under Software Explorer, it takes
> AGES to classify the Microsoft Generic Host Processes, in particular. Some
> others as well.
> I really feel that I miss some of the features from the Microsoft
> AntiSpyware, e.g. the stuff that allows you to look at the various
> settings in Internet Explorer. Not having some of these features may be OK
> when the system is all clean and dandy, but what if they are already
> corrupted when Defender is installed? I look forward to my first infected
> PC. Incidentally, can I download Defender on a machine which will not
> allow using the Version Checking component because of SpyWare already on
> it?
> There is no obvious way to force a check for updates.
> I'll keep an eye out to see what else shows, and what happens on the above
> points.
> BFN
> Dave
>

There's a checkbox at the very end of the install labelled something like
"start Windows Defender, update the sigs and perform a scan" (very poorly
remembered)--You should also get a baloon tip about as soon as the UI opens
on the new install.

--

"Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
news:%(E-Mail Removed)...
> Additional.
> A new installation (upgrading from Microsoft AntiSpyware), said
> definitions were 24 days old, OK, but did not give any real feedback about
> the update process, leading even me to start playing with buttons. If it
> is doing something, we do need to know that it is doing something.
> BFN
> Dave
> "Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
> news:(E-Mail Removed)...
>> As mentioned in another thread, after installing Defender downloads seem
>> to be prevented from being saved. I checked further, the particular
>> download already existed and the download hung for a while at 99% then
>> appeared complete. The file did eventually save, but did not seem to
>> update details properly. Creation date remained August 2004 when I
>> expected it to be updated to 19 Feb 2006. At least it did save the file
>> eventually.
>> Attempting to delete a file which is in an archive causes a nasty error
>> 0x80508026, which does have an explanation when you resize the header of
>> the Status column sufficiently. Two options to fix this would be
>> desirable; allow a multi-line explanation and offer a second level action
>> to delete the entire cab file.
>> Definitely need an icon in the tray. I noticed a comment that this should
>> be available as an option in the near future, Good!
>> I was running a full scan when I also changed my home page. Since I had
>> set advanced SpyNet mode, I was alerted which was fine. Unfortunately, I
>> could not see any of the progress of the scan after that until I hit the
>> Abort button.
>> (The full scan found a number of SpyWare and Virus instances in the
>> Norton Internet Security Quarantine folder).
>> On the Currently Running Programs option under Software Explorer, it
>> takes AGES to classify the Microsoft Generic Host Processes, in
>> particular. Some others as well.
>> I really feel that I miss some of the features from the Microsoft
>> AntiSpyware, e.g. the stuff that allows you to look at the various
>> settings in Internet Explorer. Not having some of these features may be
>> OK when the system is all clean and dandy, but what if they are already
>> corrupted when Defender is installed? I look forward to my first infected
>> PC. Incidentally, can I download Defender on a machine which will not
>> allow using the Version Checking component because of SpyWare already on
>> it?
>> There is no obvious way to force a check for updates.
>> I'll keep an eye out to see what else shows, and what happens on the
>> above points.
>> BFN
>> Dave
>>
>
>

I've seen that same false positive, and in the same situation--a set of
files saved as a backup of a Win95 machine.
--

"Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
news:(E-Mail Removed)...
> Been there, got the mug and the tee-shirt
> No updates though
>
> Another possible problem for the list.
> Doing a full scan has been working for 7.5 hours so far, looked at 4434264
> files at this point and still looking at some files on C: then some files
> on E:
> Norton Internet Security only finds about 1500000 files to check and
> completes in 4.5 hours.
> UPDATE:
> As I was writing this message the scan completed, with 4434284 files
> scanned in 7 hours 33 minutes and 43 seconds. Found 21 high/severe items,
> 5 low items.
> Looks like we have a false positive here. msriched.vbx is detected as
> Typhoon, a trojan offering severe risk. It does however have the following
> version information.
> Company: Microsoft Corporation
> File Version: 4.0
> Internal Name: msriched
> Language: English (United States)
> Original file name: msriched.vbx
> Product Name: Microsoft® Windows(TM) Operating System
> Product Version: 4.0
> This particular file is in some saved data from a Windows 95 machine,
> dating back to 20 Nov 1996.
> Everything else looks just fine, although of course some of the detected
> threats are inside cab files and will have to be manualy removed.
> Regards
> Dave
> "Engel" <(E-Mail Removed)> wrote in message
> news:EE3E835F-4135-49FD-8EFF-(E-Mail Removed)...
>> Hello Dave,
>>
>> Try going to Windows Update and check for Criticals Updates, this is how
>> I
>> resolv the same problem. Maybe work for you too.
>>
>> Good luck
>>
>> Let us know how you end up.
>> ??ç?l
>> --
>>
>>
>>
>> "Dave Bolt" wrote:
>>
>>> Additional.
>>> A new installation (upgrading from Microsoft AntiSpyware), said
>>> definitions
>>> were 24 days old, OK, but did not give any real feedback about the
>>> update
>>> process, leading even me to start playing with buttons. If it is doing
>>> something, we do need to know that it is doing something.
>>> BFN
>>> Dave
>>> "Dave Bolt" <dave@NO_SPAM_PLEASE_davebolt.fsnet.co.uk> wrote in message
>>> news:(E-Mail Removed)...
>>> > As mentioned in another thread, after installing Defender downloads
>>> > seem
>>> > to be prevented from being saved. I checked further, the particular
>>> > download already existed and the download hung for a while at 99% then
>>> > appeared complete. The file did eventually save, but did not seem to
>>> > update details properly. Creation date remained August 2004 when I
>>> > expected it to be updated to 19 Feb 2006. At least it did save the
>>> > file
>>> > eventually.
>>> > Attempting to delete a file which is in an archive causes a nasty
>>> > error
>>> > 0x80508026, which does have an explanation when you resize the header
>>> > of
>>> > the Status column sufficiently. Two options to fix this would be
>>> > desirable; allow a multi-line explanation and offer a second level
>>> > action
>>> > to delete the entire cab file.
>>> > Definitely need an icon in the tray. I noticed a comment that this
>>> > should
>>> > be available as an option in the near future, Good!
>>> > I was running a full scan when I also changed my home page. Since I
>>> > had
>>> > set advanced SpyNet mode, I was alerted which was fine. Unfortunately,
>>> > I
>>> > could not see any of the progress of the scan after that until I hit
>>> > the
>>> > Abort button.
>>> > (The full scan found a number of SpyWare and Virus instances in the
>>> > Norton
>>> > Internet Security Quarantine folder).
>>> > On the Currently Running Programs option under Software Explorer, it
>>> > takes
>>> > AGES to classify the Microsoft Generic Host Processes, in particular.
>>> > Some
>>> > others as well.
>>> > I really feel that I miss some of the features from the Microsoft
>>> > AntiSpyware, e.g. the stuff that allows you to look at the various
>>> > settings in Internet Explorer. Not having some of these features may
>>> > be OK
>>> > when the system is all clean and dandy, but what if they are already
>>> > corrupted when Defender is installed? I look forward to my first
>>> > infected
>>> > PC. Incidentally, can I download Defender on a machine which will not
>>> > allow using the Version Checking component because of SpyWare already
>>> > on
>>> > it?
>>> > There is no obvious way to force a check for updates.
>>> > I'll keep an eye out to see what else shows, and what happens on the
>>> > above
>>> > points.
>>> > BFN
>>> > Dave
>>> >
>>>
>>>
>>>
>
>