re: Continued Spyware Occurences

If anyone could answer this question regarding use of MS's
Anti-Spyware Beta version, it would be appreciated. Upon
running a quick scan (or full scan), various occurences of
spyware /adware are found and removed, but they seem to
re-appear in a day or so, e.g., the dreaded "browserware".
I thought the beta software also dealt with remvoal of
various registery aspects, but could it be to fully remove
such headaches as Browserware, I need to edit the registry
manually? BTW, I also use Spybot and Adaware, but they seem
less capable of detecting stuff than MS's Anti-Spyware

Thanks,
Mike.

"Mike Kelly" <anonymous@discussions.microsoft.com> wrote in message
news:02cb01c529c5$46f22e60$a501280a@phx.gbl
> If anyone could answer this question regarding use of MS's
> Anti-Spyware Beta version, it would be appreciated. Upon
> running a quick scan (or full scan), various occurences of
> spyware /adware are found and removed, but they seem to
> re-appear in a day or so, e.g., the dreaded "browserware".
> I thought the beta software also dealt with remvoal of
> various registery aspects, but could it be to fully remove
> such headaches as Browserware, I need to edit the registry
> manually? BTW, I also use Spybot and Adaware, but they seem
> less capable of detecting stuff than MS's Anti-Spyware
>
> Thanks,
> Mike.

Run the full scan twice in Safe Mode.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/se...ct/default.aspx
http://defendingyourmachine.blogspot.com/

Mike depending on what sites you go to then that stuff
will keep reappering over and over again but look at the
realtime protection for the microsoft antispyware tools.
That will help you out.
>-----Original Message-----
>If anyone could answer this question regarding use of
MS's
>Anti-Spyware Beta version, it would be appreciated. Upon
>running a quick scan (or full scan), various occurences
of
>spyware /adware are found and removed, but they seem to
>re-appear in a day or so, e.g., the
dreaded "browserware".
>I thought the beta software also dealt with remvoal of
>various registery aspects, but could it be to fully
remove
>such headaches as Browserware, I need to edit the
registry
>manually? BTW, I also use Spybot and Adaware, but they
seem
>less capable of detecting stuff than MS's Anti-Spyware
>
>Thanks,
>Mike.
>.
>

Thanks. I don't know what sites I visit that would have
this parasite installed from it. We do a lot of research on
car related products (we make a car accessory), so I guess
this stuff can be attached to any kind of a site? I have
the RT element enabled, but it has never picked anything up
as of yet and you would think it would if something was
trying to install onto your PC?

Thanks for replying.


>-----Original Message-----
>Mike depending on what sites you go to then that stuff
>will keep reappering over and over again but look at the
>realtime protection for the microsoft antispyware tools.
>That will help you out.
>>-----Original Message-----
>>If anyone could answer this question regarding use of
>MS's
>>Anti-Spyware Beta version, it would be appreciated. Upon
>>running a quick scan (or full scan), various occurences
>of
>>spyware /adware are found and removed, but they seem to
>>re-appear in a day or so, e.g., the
>dreaded "browserware".
>>I thought the beta software also dealt with remvoal of
>>various registery aspects, but could it be to fully
>remove
>>such headaches as Browserware, I need to edit the
>registry
>>manually? BTW, I also use Spybot and Adaware, but they
>seem
>>less capable of detecting stuff than MS's Anti-Spyware
>>
>>Thanks,
>>Mike.
>>.
>>
>.
>

Thanks Frank - I'll try that.

>-----Original Message-----
>"Mike Kelly" <anonymous@discussions.microsoft.com> wrote
in message
>news:02cb01c529c5$46f22e60$a501280a@phx.gbl
>> If anyone could answer this question regarding use of MS's
>> Anti-Spyware Beta version, it would be appreciated. Upon
>> running a quick scan (or full scan), various occurences of
>> spyware /adware are found and removed, but they seem to
>> re-appear in a day or so, e.g., the dreaded "browserware".
>> I thought the beta software also dealt with remvoal of
>> various registery aspects, but could it be to fully remove
>> such headaches as Browserware, I need to edit the registry
>> manually? BTW, I also use Spybot and Adaware, but they seem
>> less capable of detecting stuff than MS's Anti-Spyware
>>
>> Thanks,
>> Mike.
>
>Run the full scan twice in Safe Mode.
>
>--
>Frank Saunders, MS-MVP, IE/OE
>Please respond in Newsgroup only. Do not send email
>http://www.fjsmjs.com
>Protect your PC
>http://www.microsoft.com./athome/se...ct/default.aspx
>http://defendingyourmachine.blogspot.com/
>
>
>.
>

This can happen when a malicious process is running to hide itself from
AntiSpyware. We can see and remove bits and pieces of it each time, but it
sometimes takes a few runs (in safe mode) to get a handle on it.

As general guidance, be careful when you receive a pop-up asking to install
an Active X control which the website says you need to run their
application. Make sure you read their privacy policy, and truly "TRUST" that
company with your computer.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
<anonymous@discussions.microsoft.com> wrote in message
news:04f001c52a30$2bf4d6b0$a501280a@phx.gbl...
> Thanks. I don't know what sites I visit that would have
> this parasite installed from it. We do a lot of research on
> car related products (we make a car accessory), so I guess
> this stuff can be attached to any kind of a site? I have
> the RT element enabled, but it has never picked anything up
> as of yet and you would think it would if something was
> trying to install onto your PC?
>
> Thanks for replying.
>
>
>>-----Original Message-----
>>Mike depending on what sites you go to then that stuff
>>will keep reappering over and over again but look at the
>>realtime protection for the microsoft antispyware tools.
>>That will help you out.
>>>-----Original Message-----
>>>If anyone could answer this question regarding use of
>>MS's
>>>Anti-Spyware Beta version, it would be appreciated. Upon
>>>running a quick scan (or full scan), various occurences
>>of
>>>spyware /adware are found and removed, but they seem to
>>>re-appear in a day or so, e.g., the
>>dreaded "browserware".
>>>I thought the beta software also dealt with remvoal of
>>>various registery aspects, but could it be to fully
>>remove
>>>such headaches as Browserware, I need to edit the
>>registry
>>>manually? BTW, I also use Spybot and Adaware, but they
>>seem
>>>less capable of detecting stuff than MS's Anti-Spyware
>>>
>>>Thanks,
>>>Mike.
>>>.
>>>
>>.
>>

Thanks Steve.
>-----Original Message-----
>This can happen when a malicious process is running to
hide itself from
>AntiSpyware. We can see and remove bits and pieces of it
each time, but it
>sometimes takes a few runs (in safe mode) to get a handle
on it.
>
>As general guidance, be careful when you receive a pop-up
asking to install
>an Active X control which the website says you need to run
their
>application. Make sure you read their privacy policy, and
truly "TRUST" that
>company with your computer.
>
>--
>-steve
>
>Steve Dodson [MSFT]
>MCSE, CISSP
>PSS Security
>
>--
>
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>Use of included script samples are subject to the terms
specified at
>http://www.microsoft.com/info/cpyright.htm
>
>Note: For the benefit of the community-at-large, all
responses to this
>message are best directed to the newsgroup/thread from
which they
>originated.
><anonymous@discussions.microsoft.com> wrote in message
>news:04f001c52a30$2bf4d6b0$a501280a@phx.gbl...
>> Thanks. I don't know what sites I visit that would have
>> this parasite installed from it. We do a lot of research on
>> car related products (we make a car accessory), so I guess
>> this stuff can be attached to any kind of a site? I have
>> the RT element enabled, but it has never picked anything up
>> as of yet and you would think it would if something was
>> trying to install onto your PC?
>>
>> Thanks for replying.
>>
>>
>>>-----Original Message-----
>>>Mike depending on what sites you go to then that stuff
>>>will keep reappering over and over again but look at the
>>>realtime protection for the microsoft antispyware tools.
>>>That will help you out.
>>>>-----Original Message-----
>>>>If anyone could answer this question regarding use of
>>>MS's
>>>>Anti-Spyware Beta version, it would be appreciated. Upon
>>>>running a quick scan (or full scan), various occurences
>>>of
>>>>spyware /adware are found and removed, but they seem to
>>>>re-appear in a day or so, e.g., the
>>>dreaded "browserware".
>>>>I thought the beta software also dealt with remvoal of
>>>>various registery aspects, but could it be to fully
>>>remove
>>>>such headaches as Browserware, I need to edit the
>>>registry
>>>>manually? BTW, I also use Spybot and Adaware, but they
>>>seem
>>>>less capable of detecting stuff than MS's Anti-Spyware
>>>>
>>>>Thanks,
>>>>Mike.
>>>>.
>>>>
>>>.
>>>
>
>
>.
>

"Mike Kelly" <anonymous@discussions.microsoft.com> wrote in message
news:02cb01c529c5$46f22e60$a501280a@phx.gbl...
> If anyone could answer this question regarding use of MS's
> Anti-Spyware Beta version, it would be appreciated. Upon
> running a quick scan (or full scan), various occurences of
> spyware /adware are found and removed, but they seem to
> re-appear in a day or so, e.g., the dreaded "browserware".
> I thought the beta software also dealt with remvoal of
> various registery aspects, but could it be to fully remove
> such headaches as Browserware, I need to edit the registry
> manually? BTW, I also use Spybot and Adaware, but they seem
> less capable of detecting stuff than MS's Anti-Spyware
>
> Thanks,
> Mike.


Hi Mike ,
Before u run ur scan try turning off the restore , by this way
theeverything is cleaned completely from ur machine, reply if it was
sucessful bye
regards
charlie

"charlie" <charlie_babu@hotmail.com> wrote in message
news:O$osE55KFHA.1588@cpmsftngsa05.privatenews.microsoft.com...
> Hi Mike ,
> Before u run ur scan try turning off the restore , by this
> way theeverything is cleaned completely from ur machine, reply if it was
> sucessful bye
> regards
> charlie

And I'll ask you the same question I've asked others who offer this advice:
Can you cite first-hand evidence of an active spyware or virus entity
infecting a machine from the System restore storage area?

I see more experienced folks than I am offering this advice, so I may be
wrong, but I don't see this advice as likely to do the user good.

You are throwing away a safety net at the time the user is most likely to
need it.

Viruses and spyware in System Restore points are quite safe--just as they
are in various antivirus or antispyware quarantine areas. Just leave them
there, until the machine is clean and stable--then remove the old restore
points and create a new one.

"Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org> wrote in message
news:%239EiUWDLFHA.1212@cpmsftngsa05.privatenews.microsoft.com
> "charlie" <charlie_babu@hotmail.com> wrote in message
> news:O$osE55KFHA.1588@cpmsftngsa05.privatenews.microsoft.com...
>> Hi Mike ,
>> Before u run ur scan try turning off the restore , by this
>> way theeverything is cleaned completely from ur machine, reply if it was
>> sucessful bye
>> regards
>> charlie
>
> And I'll ask you the same question I've asked others who offer this
> advice:
> Can you cite first-hand evidence of an active spyware or virus entity
> infecting a machine from the System restore storage area?
>
> I see more experienced folks than I am offering this advice, so I may be
> wrong, but I don't see this advice as likely to do the user good.
>
> You are throwing away a safety net at the time the user is most likely to
> need it.
>
> Viruses and spyware in System Restore points are quite safe--just as they
> are in various antivirus or antispyware quarantine areas. Just leave them
> there, until the machine is clean and stable--then remove the old restore
> points and create a new one.

I agree whole heartedly!

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/se...ct/default.aspx
http://defendingyourmachine.blogspot.com/