Anti-Spyware crashed my network

installed and ran scan, it reported two problems. I
removed them, restarted and had no network connection. I
had to remove anti-spyware and restore to get back my
network. be carefull

what exactly were the two problems reported? please post complete details.

Bill R wrote:
> installed and ran scan, it reported two problems. I
> removed them, restarted and had no network connection. I
> had to remove anti-spyware and restore to get back my
> network. be carefull


--
Barb Bowman
Expert Zone Columnist
http://www.microsoft.com/windowsxp/expertzone
MS-MVP (Windows)

I had a similar problem. One item was found and, when it
was removed, I loat all network connectivity.

The item was webHancer and it said the infected file was
C:\WINDOWS\system32\sporder.dll

I have not got webHancer so far as I know. It doesn't
appear in the Add/Remove list, and it is not detected by
AdAware or SpyBot.

Hope this is relevant and useful.

>-----Original Message-----
>what exactly were the two problems reported? please post
complete details.
>
>Bill R wrote:
>> installed and ran scan, it reported two problems. I
>> removed them, restarted and had no network connection.
I
>> had to remove anti-spyware and restore to get back my
>> network. be carefull
>
>
>--
> Barb Bowman
> Expert Zone Columnist
> http://www.microsoft.com/windowsxp/expertzone
> MS-MVP (Windows)
>
>
>.
>

This typically means a trojan or malicious program has
control of your machine and needed the deleted file to
function and is now punishing you.

>-----Original Message-----
>installed and ran scan, it reported two problems. I
>removed them, restarted and had no network connection. I
>had to remove anti-spyware and restore to get back my
>network. be carefull
>.
>

That's helpful information--do you have a third-party VPN client installed
on your machine?

What vendor information/copyright is present in the sporder.dll?
(try right-clicking on that file and look at the various information
presented)

"Doug Allen" <anonymous@discussions.microsoft.com> wrote in message
news:185401c4f411$f4f0ce20$a501280a@phx.gbl...
>I had a similar problem. One item was found and, when it
> was removed, I loat all network connectivity.
>
> The item was webHancer and it said the infected file was
> C:\WINDOWS\system32\sporder.dll
>
> I have not got webHancer so far as I know. It doesn't
> appear in the Add/Remove list, and it is not detected by
> AdAware or SpyBot.
>
> Hope this is relevant and useful.
>
>>-----Original Message-----
>>what exactly were the two problems reported? please post
> complete details.
>>
>>Bill R wrote:
>>> installed and ran scan, it reported two problems. I
>>> removed them, restarted and had no network connection.
> I
>>> had to remove anti-spyware and restore to get back my
>>> network. be carefull
>>
>>
>>--
>> Barb Bowman
>> Expert Zone Columnist
>> http://www.microsoft.com/windowsxp/expertzone
>> MS-MVP (Windows)
>>
>>
>>.
>>

This is definitely a possibility, but another may be a false positive on a
file involved in network connectivity--either way, we need details to
triage.

<anonymous@discussions.microsoft.com> wrote in message
news:0ed901c4f414$3b16cdd0$a601280a@phx.gbl...
> This typically means a trojan or malicious program has
> control of your machine and needed the deleted file to
> function and is now punishing you.
>
>>-----Original Message-----
>>installed and ran scan, it reported two problems. I
>>removed them, restarted and had no network connection. I
>>had to remove anti-spyware and restore to get back my
>>network. be carefull
>>.
>>

>-----Original Message-----
>what exactly were the two problems reported? please post
complete details.
>
I don't remember the two files, I think it called it a
hacker something said it was in the start up program and
to remove it there were three reg keys listed. I have a
spyware program running and when it find's thing I just
delete it and never had a problem sooo I did not pay
attention.


>Bill R wrote:
>> installed and ran scan, it reported two problems. I
>> removed them, restarted and had no network connection.
I
>> had to remove anti-spyware and restore to get back my
>> network. be carefull
>
>
>--
> Barb Bowman
> Expert Zone Columnist
> http://www.microsoft.com/windowsxp/expertzone
> MS-MVP (Windows)
>
>
>.
>

Same thing here, its a piece of crap.
>-----Original Message-----
>installed and ran scan, it reported two problems. I
>removed them, restarted and had no network connection. I
>had to remove anti-spyware and restore to get back my
>network. be carefull
>.
>

Exactly the same thing happened to me. But in my case
Spyware Blaster, Spyware Guard and AdAware failed to
detect webHancer.

Chris Turner


>-----Original Message-----
>I had a similar problem. One item was found and, when it
>was removed, I loat all network connectivity.
>
>The item was webHancer and it said the infected file was
>C:\WINDOWS\system32\sporder.dll
>
>I have not got webHancer so far as I know. It doesn't
>appear in the Add/Remove list, and it is not detected by
>AdAware or SpyBot.
>
>Hope this is relevant and useful.
>

Hi

I'm not the person you responded to but had exactly the
same problem as him. I followed your advice and came up
with "Copyright (C) Microsoft Corp. 1981-1996".


>-----Original Message-----
>That's helpful information--do you have a third-party VPN
client installed
>on your machine?
>
>What vendor information/copyright is present in the
sporder.dll?
>(try right-clicking on that file and look at the various
information
>presented)