Microsoft Antispyware interfering with file transfers

[R. Hinse]

Having installed the beta version of the new MS antispyware
I couldn't transfers files from one computer to another on
a microsoft peer-peer network with explorer.

Trying to transfer a file on a Win98SE machine to a Win2K
machine within the Win2K explorer causes a hang. The
antispyware is installed on the Win2K machine. I can,
however transfer files back and forth if I use explorer on
the Win98 box.

If I disable antispyware on the Win2K machine, the problem
is corrected. I don't know if this is a problem with the
original install or with any of the updates that have been
installed automatically.

Since this is beta software, I'm not expecting a solution
to this problem, but I hope it serves as a bug
notification.

If anyone has a solution, I'd love to hear about it.

 

[Bill Sanderson]

I don't have a sure fix for your particular installation. You can work
around it by disabling real-time protection via the workaround paragraph in
this KB article:

http://support.microsoft.com/kb/892375 End users may be prompted to allow or
block administrative actions that originate from a central management tool
after they install Windows AntiSpyware (Beta) on a computer that is managed
by Systems Management Server 2003

I do wonder, however, whether machines with this symptom, in fact, have some
form of malware in place which has this effect--I've not been able to find
any indication of this when I've asked various things in these groups,
though.

 

[Ray Hinse]

I still had problems after disabling the real time
feature. I had to uninstall to resume normal network
file transfer features.

Using Pest Patrol, Spybot Search & Destroy, and a few
other spyware removal tools, I'm pretty confident that
there was no other malware interfering with the OS prior
to installing the Microsoft Antispyware beta. I think
it is probably mute testimony that the MS product was
causing the problem since there is no evidence of any
problem now.

There were several instances of a NetBT 4311 event error
in the event log but that is still occurring with no
apparent ill effect.

 

[Bill Sanderson]

Thanks - this isn't a symptom that is reported frequently--not absolutely
sure this is the only report, but there aren't more that a handful. Some
machines definitely see a substantial performance hit, but my experience has
been that removing the real-time protection code running on the system
alleviates that. I'm surprised that you needed to uninstall.