MS AntiSpyware works

[Guest]

I have used it for a short time (for about 2 weeks) but I have not had any
problem with any of it (at least not that I'm aware of). Ihave used version
1.0.615 and am currently using version 1.0.701 with Windows XP sp2
Thanks,
Jim

 

[Guest]

I have this message shows in start up inspector gcasServ
Filename C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
Params
Required Not recommended
Startup Location LM Run
Memory Usage 2.5 MB
Peek Memory Usage 5.4 MB
Comments Added by a variant of the RBOT WORM! Do not confuse with the
Microsoft AntiSpyware executable of the same name

 

[Bill Sanderson]

That's a confusing message. That is the correct location and name for a
genuine executable which is part of Microsoft Antispyware.

Update your antivirus and do a full scan of your machine. If RBOT is not
found, I would use whatever feedback mechanisms are available for startup
inspector to try to get this issue corrected by them.

 

[Guest]

That's a confusing message. That is the correct location and name for a
genuine executable which is part of Microsoft Antispyware.

Update your antivirus and do a full scan of your machine. If RBOT is not
found, I would use whatever feedback mechanisms are available for startup
inspector to try to get this issue corrected by them.

Thanks for the advice, update and anti virus scan ran ok, I downloaded MSAS
from the Microsoft website so I am confident that the programme is sound.
www research of gcasServ.exe only Network Techs and Start up Knowledge Base
web sites state that there is a prob and that is if the start up name is
ccapp for the process gcasServ.exe its a RBot worm derivative they both say
that if start up name is gcasServ then its Microsofts prog.

 

[Bill Sanderson]

Thanks for the advice, update and anti virus scan ran ok, I downloaded
MSAS
from the Microsoft website so I am confident that the programme is sound.
www research of gcasServ.exe only Network Techs and Start up Knowledge
Base
web sites state that there is a prob and that is if the start up name is
ccapp for the process gcasServ.exe its a RBot worm derivative they both
say
that if start up name is gcasServ then its Microsofts prog.

If I'm understanding this correctly then this is a limitation of the startup
inspector? It sounds as though it can spot the executable name and source
file location, but cant't check the name of the actual image in memory--so
the report has to be checked further manually??

This isn't good--there are 18,000,000 users of Microsoft Antispyware out
there, and I would bet that a substantial number of startup inspector users
also use Microsoft Antispyware--seems like this will cause a significant
number of support issues.