PC Review
Forums
Newsgroups
Microsoft AntiSpyware
Spyware Discussion
Spyware not working?
Forums
Newsgroups
Microsoft AntiSpyware
Spyware Discussion
Spyware not working?
![]() |
Spyware not working? |
|
|
Thread Tools | Rate Thread |
|
|
#1 |
|
Guest
Posts: n/a
|
Why is my Spyware not working. I have been using it for a
long time and it finds nothing and yet today I run TrendMicro free online spyware and it finds 15 issues (below). What is the problem? I thought about buying the real version but not sure now. Steve Results: We have detected 15 vulnerability/vulnerabilities on your computer. Risk Level Issue How to Fix Critical This security update addresses and resolves a vulnerability in Internet Explorer that could allow remote code execution. A Web page can be crafted to exploit this vulnerability such that an arbitrary application can be executed on visiting systems with the same priviledge as the currently logged on user. MS04-040 Important This security advisory explains the two discovered vulnerabilities in Microsoft Word for Windows 6.0 Converter, which is used by WordPad in converting Word 6.0 to WordPad file format. Once exploited, this remote code execution vulnerability could allow a malicious user or a malware to take complete control of the affected system if the affected user is currently logged on with administrative privileges. MS04-041 Critical A remote code execution vulnerability exists in HyperTerminal because of a buffer overrun. If a user is logged on with administrator privileges, an attacker could exploit the vulnerability by constructing a malicious HyperTerminal session file that could potentially allow remote code execution and then persuade a user to open this file. This malicious file may enable the attacker to gain complete control of the affected system. This vulnerability could also be exploited through a malicious Telnet URL if HyperTerminal had been set as the default Telnet client. MS04-043 Important This security update addresses and resolves two windows vulnerabilites, both of which may enable the current user to take control of the affected system. Both of these vulnerabilites require that the curernt user be able to log on locally and execute programs. They cannot be exploited remotely, or by anonymous users. A privilege elevation vulnerability exists in the way that the Windows Kernel launches applications. This vulnerability could allow the current user to take complete control of the system. A privilege elevation vulnerability exists in the way that the LSASS validates identity tokens. This vulnerability could allow the current user to take complete control of the affected system. MS04-044 Critical This update resolves a newly-discovered, publicly reported vulnerability. A vulnerability exists in the HTML Help ActiveX control in Windows that could allow information disclosure or remote code execution on an affected system. MS05-001 Critical This update resolves several newly-discovered, privately reported and public vulnerabilities. An attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system, install programs, view, change, or delete data, or create new accounts that have full privileges. MS05-002 Important This update resolves a newly-discovered, privately reported vulnerability. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs, view, change, or delete data, or create new accounts with full privileges. While remote code execution is possible, an attack would most likely result in a denial of service condition. MS05-003 Important A vulnerability in ASP.NET allows an attacker to bypass the security of an ASP.NET Web site, and access a machine. The attacker gains unauthorized access to some areas of the said Web site, and is able to control it accordingly. The actions that the attacker could take would depend on the specific content being protected. MS05-004 Important This remote code execution vulnerability exists in the way Windows handles drag-and-drop events. An attacker could exploit the vulnerability by constructing a malicious Web page that could potentially allow an attacker to save a file on the users system if a user visited a malicious Web site or viewed a malicious e-mail message. MS05-008 Critical This remote code execution vulnerability exists in the processing of PNG image formats. An attacker who successfully exploits this vulnerability could take complete control of an affected system. MS05-009 Critical This remote code execution vulnerability exists in Server Message Block (SMB). It allows an attacker who successfully exploits this vulnerability to take complete control of the affected system. MS05-011 Critical This privilege elevation vulnerability exists in the way that the affected operating systems and programs access memory when they process COM structured storage files. This vulnerability could grant a currently logged- on user to take complete control of the system.;This remote code execution vulnerability exists in OLE because of the way that it handles input validation. An attacker could exploit the vulnerability by constructing a malicious document that could potentially allow remote code execution. MS05-012 Critical This vulnerability exists in the DHTML Editing Component ActiveX Control. This vulnerability could allow information disclosure or remote code execution on an affected system. MS05-013 Critical This update resolves known vulnerabilities affecting Internet Explorer. An attacker who successfully exploits these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. MS05-014 Critical A remote code execution vulnerability exists in the Hyperlink Object Library. This problem exists because of an unchecked buffer while handling hyperlinks. An attacker could exploit the vulnerability by constructing a malicious hyperlink which could potentially lead to remote code execution if a user clicks a malicious link within a Web site or e-mail message. MS05-015 |
|
|
|
#2 |
|
Guest
Posts: n/a
|
Steve wrote:
> Why is my Spyware not working. I have been using it for a > long time and it finds nothing and yet today I run > TrendMicro free online spyware and it finds 15 issues > (below). > > What is the problem? I thought about buying the real > version but not sure now. Well, all of that is secutity advices. Go to Windowsupdate and update ! -- plun |
|
|
|
#3 |
|
Guest
Posts: n/a
|
plun wrote:
> Steve wrote: > >> Why is my Spyware not working. I have been using it for a long time >> and it finds nothing and yet today I run TrendMicro free online >> spyware and it finds 15 issues (below). >> >> What is the problem? I thought about buying the real version but not >> sure now. > > > Well, all of that is secutity advices. > > Go to Windowsupdate and update ! One more thing, this will help you. http://www.microsoft.com/athome/security/default.mspx -- plun |
|
|
|
#4 |
|
Guest
Posts: n/a
|
This report details missing critical patches to Windows.
These are obtained via AutoUpdate and/or WindowsUpdate. Please use these facilities, and download all offered Critical patches. Microsoft Antispyware does not substitute for any of the three primary protective steps we all need to take with our computers: www.microsoft.com/protect -- FAQ for Microsoft Antispyware: http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm "Steve" <anonymous@discussions.microsoft.com> wrote in message news:433101c520df$5a467550$a601280a@phx.gbl... > Why is my Spyware not working. I have been using it for a > long time and it finds nothing and yet today I run > TrendMicro free online spyware and it finds 15 issues > (below). > > What is the problem? I thought about buying the real > version but not sure now. > > > Steve > > Results: > We have detected 15 vulnerability/vulnerabilities on your > computer. > Risk Level Issue How to Fix > Critical This security update addresses and resolves a > vulnerability in Internet Explorer that could allow remote > code execution. A Web page can be crafted to exploit this > vulnerability such that an arbitrary application can be > executed on visiting systems with the same priviledge as > the currently logged on user. MS04-040 > Important This security advisory explains the two > discovered vulnerabilities in Microsoft Word for Windows > 6.0 Converter, which is used by WordPad in converting Word > 6.0 to WordPad file format. Once exploited, this remote > code execution vulnerability could allow a malicious user > or a malware to take complete control of the affected > system if the affected user is currently logged on with > administrative privileges. MS04-041 > Critical A remote code execution vulnerability exists in > HyperTerminal because of a buffer overrun. If a user is > logged on with administrator privileges, an attacker could > exploit the vulnerability by constructing a malicious > HyperTerminal session file that could potentially allow > remote code execution and then persuade a user to open > this file. This malicious file may enable the attacker to > gain complete control of the affected system. This > vulnerability could also be exploited through a malicious > Telnet URL if HyperTerminal had been set as the default > Telnet client. MS04-043 > Important This security update addresses and resolves two > windows vulnerabilites, both of which may enable the > current user to take control of the affected system. Both > of these vulnerabilites require that the curernt user be > able to log on locally and execute programs. They cannot > be exploited remotely, or by anonymous users. A privilege > elevation vulnerability exists in the way that the Windows > Kernel launches applications. This vulnerability could > allow the current user to take complete control of the > system. A privilege elevation vulnerability exists in the > way that the LSASS validates identity tokens. This > vulnerability could allow the current user to take > complete control of the affected system. MS04-044 > Critical This update resolves a newly-discovered, publicly > reported vulnerability. A vulnerability exists in the HTML > Help ActiveX control in Windows that could allow > information disclosure or remote code execution on an > affected system. MS05-001 > Critical This update resolves several newly-discovered, > privately reported and public vulnerabilities. An attacker > who successfully exploited the most severe of these > vulnerabilities could take complete control of an affected > system, install programs, view, change, or delete data, or > create new accounts that have full privileges. MS05-002 > Important This update resolves a newly-discovered, > privately reported vulnerability. An attacker who > successfully exploited this vulnerability could take > complete control of an affected system. An attacker could > then install programs, view, change, or delete data, or > create new accounts with full privileges. While remote > code execution is possible, an attack would most likely > result in a denial of service condition. MS05-003 > Important A vulnerability in ASP.NET allows an attacker to > bypass the security of an ASP.NET Web site, and access a > machine. The attacker gains unauthorized access to some > areas of the said Web site, and is able to control it > accordingly. The actions that the attacker could take > would depend on the specific content being protected. > MS05-004 > Important This remote code execution vulnerability exists > in the way Windows handles drag-and-drop events. An > attacker could exploit the vulnerability by constructing a > malicious Web page that could potentially allow an > attacker to save a file on the users system if a user > visited a malicious Web site or viewed a malicious e-mail > message. MS05-008 > Critical This remote code execution vulnerability exists > in the processing of PNG image formats. An attacker who > successfully exploits this vulnerability could take > complete control of an affected system. MS05-009 > Critical This remote code execution vulnerability exists > in Server Message Block (SMB). It allows an attacker who > successfully exploits this vulnerability to take complete > control of the affected system. MS05-011 > Critical This privilege elevation vulnerability exists in > the way that the affected operating systems and programs > access memory when they process COM structured storage > files. This vulnerability could grant a currently logged- > on user to take complete control of the system.;This > remote code execution vulnerability exists in OLE because > of the way that it handles input validation. An attacker > could exploit the vulnerability by constructing a > malicious document that could potentially allow remote > code execution. MS05-012 > Critical This vulnerability exists in the DHTML Editing > Component ActiveX Control. This vulnerability could allow > information disclosure or remote code execution on an > affected system. MS05-013 > Critical This update resolves known vulnerabilities > affecting Internet Explorer. An attacker who successfully > exploits these vulnerabilities could take complete control > of an affected system. An attacker could then install > programs; view, change, or delete data; or create new > accounts with full user rights. MS05-014 > Critical A remote code execution vulnerability exists in > the Hyperlink Object Library. This problem exists because > of an unchecked buffer while handling hyperlinks. An > attacker could exploit the vulnerability by constructing a > malicious hyperlink which could potentially lead to remote > code execution if a user clicks a malicious link within a > Web site or e-mail message. MS05-015 > > > |
|
|
|
#5 |
|
Guest
Posts: n/a
|
Hi Mate I must admit i just scanned your log briefly and
didnt read into the details but it doesnt appear to have picked up any spyware/adware etc.. it seems to be just advising you to get the latest Microsoft Patches from Windows Update to plug a few vulnerabilities in various MS products.If you have all the latest updates installed then this could be a problem but if not then its just general advise which i dont think MS Antispy does at present it just scans for Spyware,If the Trend scanner had picked up spyware issues then you could argue its not working but the trend scanner looks like its just saying you should get the patches that are available to prevent any possible attack entries. Plus as far as i know the MS Antispy when released will be free to home user's who have a genuine windows installation on their pc. Hope this helps Andy |
|
|
|
#6 |
|
Guest
Posts: n/a
|
Andy,
Thanks. It looked to me, a novice, like I was really infected with something. I feel better about it now. Yes, I downloaded it free but I understand after the Beta, there will be a charge for use. I know I need to keep current and this stuff really bothers me. Thanks again, Stephen >-----Original Message----- >Hi Mate I must admit i just scanned your log briefly and >didnt read into the details but it doesnt appear to have >picked up any spyware/adware etc.. it seems to be just >advising you to get the latest Microsoft Patches from >Windows Update to plug a few vulnerabilities in various >MS products.If you have all the latest updates installed >then this could be a problem but if not then its just >general advise which i dont think MS Antispy does at >present it just scans for Spyware,If the Trend scanner >had picked up spyware issues then you could argue its not >working but the trend scanner looks like its just saying >you should get the patches that are available to prevent >any possible attack entries. > >Plus as far as i know the MS Antispy when released will >be free to home user's who have a genuine windows >installation on their pc. > >Hope this helps > >Andy >. > |
|
|
|
#7 |
|
Guest
Posts: n/a
|
Steve - it will be available with no additional cost for licensed Windows
customers. -- FAQ for Microsoft Antispyware: http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm "Steve" <anonymous@discussions.microsoft.com> wrote in message news:2fdd01c520e7$85e3cc00$a501280a@phx.gbl... > Andy, > > Thanks. It looked to me, a novice, like I was really > infected with something. I feel better about it now. > > Yes, I downloaded it free but I understand after the Beta, > there will be a charge for use. > > I know I need to keep current and this stuff really > bothers me. > > Thanks again, > Stephen > > >>-----Original Message----- >>Hi Mate I must admit i just scanned your log briefly and >>didnt read into the details but it doesnt appear to have >>picked up any spyware/adware etc.. it seems to be just >>advising you to get the latest Microsoft Patches from >>Windows Update to plug a few vulnerabilities in various >>MS products.If you have all the latest updates installed >>then this could be a problem but if not then its just >>general advise which i dont think MS Antispy does at >>present it just scans for Spyware,If the Trend scanner >>had picked up spyware issues then you could argue its not >>working but the trend scanner looks like its just saying >>you should get the patches that are available to prevent >>any possible attack entries. >> >>Plus as far as i know the MS Antispy when released will >>be free to home user's who have a genuine windows >>installation on their pc. >> >>Hope this helps >> >>Andy >>. >> |
|
![]() |
|
| Thread Tools | |
| Rate This Thread | |
|
|

Main Page 

