download.exe

[Jaakan Shorter]

download.exe(~700Kb) is one of the baddest pieces of
spyware I could get my hands on to test beta 1. XP-Sp2 test
PC, HI Speed Cable internet, Avast for Anti-Virus, other
anti spyware programs: Spybot 1.4b2, Adaware SE 1.05, demo
of Spysweeper. Microsoft Windows AntiSpyware (Beta1) installed.

With in a minute of installing download.exe it downloaded a
9 pieces of spyware and about 4 viruses every 10 second.
Total Spyware threats 336

These were removed on full first scan.

RapidBlaster Adware
eXact.BullseyeNetwork Adware
IncrediFind Adware
eXact.CashBack Adware
eXact.NaviSearch Adware
eXact.Downloader Trojan Downloader
eXact.BargainBuddy Adware
EUniverse Updater Browser Hijacker
eXact Search Bar Browser Plug-in

Rebooted, scanned again and removed
Total Spyware threats 5, 3 pieces of spyware

RapidBlaster Adware
eXact.Downloader Trojan Downloader
eXact.BargainBuddy Adware

Those last three kept coming back. Spybot and Adaware found
alot more that were totally missed on scanning. Then I used
Spysweeper to clean up what the rest could not. All missed
surfbuddy.dll


Microsoft Windows AntiSpyware (Beta1).
Real-time Agents, I feel should have stopped and or removed
Download.exe from installing even if I bypassed IE and the
system run blocker. But It did a good job of blocking
unknown and bad apps and not blocking known good apps.
Running the scanner seemed fine, I'm guessing it's mostly
limit by it's Database. Only 3 tools in Advanced tools?
I'd like to see Spynet stats list add to scanner result
database.

ex: threats: xyutg.exe (scanner result, "hover over" )
---Found on Spynet XXXX times
---Date first found on spynet xx/xx/xx
---Date added to database xx/xx/xx

later Jaakan

 

[The Unknown P]

MSAS is evolving as more and more users submit their known
spyware. Future updates will include those definitions and
as more are submitted the tool will become a great deal
more effective. If you have known spyware then submit it
for inclusion in future updates. Tools\Suspected Spyware
Report. That's half the idea of this Beta is to get users
world wide adding to the data base to make it more
effective. TTFN.

 

[Jaakan Shorter]

the Suspected Spyware Report Tool doen't work for me
but Spynet reporting and auto update do work

I still have that spyware file but wish I could find the
site I got it from again.