Session Variables

[Ray F.]

1. I am impressed with the MS AntiSpyware tool. -- This
from a Linux geek

2. I ran the diagonstics on the Help -> About page and
came up with what looks like a HijackThis list. Another
feature I like, but I wouldn't mind seeing it available on
the normal pulldown menu items, if not a hot button on the
main screen.

3. Something caught my eye that caused me concern. Here
are lines 9 and 10 from the diagnostic output:

Session.TimeBombDaysRemaining: 147
Session.TimeBombExpirationDate: 7/31/2005

Then I got to thinking that these might be session
variables. Is this the case? If not, what do you think
they mean? Here's the entire readout from the diagnostic:

Microsoft AntiSpyware version 1.0.509
Windows OS: XP
Windows OS Version Info: 148
Windows OS Major Version: 5
Windows OS Minor Version: 1
Windows OS Build: 2600
Current Path: C:\Program Files\Microsoft AntiSpyware
Install Path: C:\Program Files\Microsoft AntiSpyware\
Session.RunMode: 5
Session.TimeBombDaysRemaining: 147
Session.TimeBombExpirationDate: 7/31/2005
Real-time protection running: True
Real-time protection enabled: True
Security Agents Application Enabled: True
Security Agents Internet Enabled: True
Security Agents System Enabled: True
Security Agents Checkpoints: 59
Definitions Update Date: 3/6/2005 7:40:27 AM
AutoUpdater Enabled: 1
AutoUpdater AutoApply Enabled:
Definitions Increment Version: 48/48
Definitions ThreatAuditThreatData: 1255515
Definitions ThreatAuditScanData: 2154768
Definitions DeterminationData: 153134
Software Update Check Date:
AutoUpdater Software Enabled:
TotalThreatsDetected: 9
TotalScansRun: 1
LastScanDate: 3/6/2005 7:40:41 AM
Is US Locale: True
Locale Language: English (United States):English (0409)
Locale Country: United States:United States (1)
Processor Identifier: x86 Family 15 Model 2 Stepping 7
Processor Name: Mobile Intel(R) Pentium(R) 4 - M CPU
2.20GHz
IE Version: 6.0.2900.2180
msvbvm60.dll: 6.0.96.90
vbscript.dll: 5.6.0.8820
gcUnCompress.dll: 1.1.0.0
gcmd5query.dll: 1.0.0.1
openports.dll:
SDelete.dll:
gcASSoapLib.dll: 1.0.0.509
gcPorttoProcess.dll:
gcTCPObjLib.dll: 1.0.0.509
gcasDtServ.exe: 1.0.0.509
gcAntiSpywareLibrary.dll: 1.0.0.509
gcIPtoHostQueue.exe: 1.0.0.509
gcasServ.exe: 1.0.0.509
gcasServAlert.exe: 1.0.0.509
gcasServHook.dll:
gcASHashLibrary.dll:
gcASThreatAudit.dll: 1.0.0.509
gcASCleaner.exe: 1.0.0.509
GIANTAntiSpywareUpdater.exe: 1.0.0.509
gcASPrivacyLib.dll: 1.0.0.509
gcASShredCtxShell.dll:
gcasSWUpdater.exe: 1.0.0.509
gcSoftwareUpdateLib.dll: 1.0.0.509
GIANTSpywareScan.exe:
gcasDtServ Status: Loaded
gcasDtServ IsAuthorized: True
gcAntiSpywareLibrary Status: Loaded
gcAntiSpywareLibrary IsAuthorized: True
gcASThreatAudit Status: Loaded
gcASThreatAudit IsAuthorized: True
Now: 3/6/2005 8:16:32 AM

See anything there that's of concern?

Thanks,

Ray

 

[Ed Barba]

Ray, Tell us what the 9 threats detected were. This should show up after a
full in depth scan of your hard drive. This only shows the various MSAS
components that are currently loaded.
Ed

 

[Bob Dietz]

1. I am impressed with the MS AntiSpyware tool. -- This
from a Linux geek

2. I ran the diagonstics on the Help -> About page and
came up with what looks like a HijackThis list. Another
feature I like, but I wouldn't mind seeing it available on
the normal pulldown menu items, if not a hot button on the
main screen.

3. Something caught my eye that caused me concern. Here
are lines 9 and 10 from the diagnostic output:

Session.TimeBombDaysRemaining: 147

147 more days until this beta version of MS Anti-Spyware expires.

Session.TimeBombExpirationDate: 7/31/2005

The date when this beta version of MS Anti-Spyware will expire.

Then I got to thinking that these might be session
variables. Is this the case? If not, what do you think
they mean? Here's the entire readout from the diagnostic:

Microsoft AntiSpyware version 1.0.509
Windows OS: XP
Windows OS Version Info: 148
Windows OS Major Version: 5
Windows OS Minor Version: 1
Windows OS Build: 2600
Current Path: C:\Program Files\Microsoft AntiSpyware
Install Path: C:\Program Files\Microsoft AntiSpyware\
Session.RunMode: 5
Session.TimeBombDaysRemaining: 147
Session.TimeBombExpirationDate: 7/31/2005
Real-time protection running: True
Real-time protection enabled: True
Security Agents Application Enabled: True
Security Agents Internet Enabled: True
Security Agents System Enabled: True
Security Agents Checkpoints: 59
Definitions Update Date: 3/6/2005 7:40:27 AM
AutoUpdater Enabled: 1
AutoUpdater AutoApply Enabled:
Definitions Increment Version: 48/48
Definitions ThreatAuditThreatData: 1255515
Definitions ThreatAuditScanData: 2154768
Definitions DeterminationData: 153134
Software Update Check Date:
AutoUpdater Software Enabled:
TotalThreatsDetected: 9
TotalScansRun: 1
LastScanDate: 3/6/2005 7:40:41 AM
Is US Locale: True
Locale Language: English (United States):English (0409)
Locale Country: United States:United States (1)
Processor Identifier: x86 Family 15 Model 2 Stepping 7
Processor Name: Mobile Intel(R) Pentium(R) 4 - M CPU
2.20GHz
IE Version: 6.0.2900.2180
msvbvm60.dll: 6.0.96.90
vbscript.dll: 5.6.0.8820
gcUnCompress.dll: 1.1.0.0
gcmd5query.dll: 1.0.0.1
openports.dll:
SDelete.dll:
gcASSoapLib.dll: 1.0.0.509
gcPorttoProcess.dll:
gcTCPObjLib.dll: 1.0.0.509
gcasDtServ.exe: 1.0.0.509
gcAntiSpywareLibrary.dll: 1.0.0.509
gcIPtoHostQueue.exe: 1.0.0.509
gcasServ.exe: 1.0.0.509
gcasServAlert.exe: 1.0.0.509
gcasServHook.dll:
gcASHashLibrary.dll:
gcASThreatAudit.dll: 1.0.0.509
gcASCleaner.exe: 1.0.0.509
GIANTAntiSpywareUpdater.exe: 1.0.0.509
gcASPrivacyLib.dll: 1.0.0.509
gcASShredCtxShell.dll:
gcasSWUpdater.exe: 1.0.0.509
gcSoftwareUpdateLib.dll: 1.0.0.509
GIANTSpywareScan.exe:
gcasDtServ Status: Loaded
gcasDtServ IsAuthorized: True
gcAntiSpywareLibrary Status: Loaded
gcAntiSpywareLibrary IsAuthorized: True
gcASThreatAudit Status: Loaded
gcASThreatAudit IsAuthorized: True
Now: 3/6/2005 8:16:32 AM

See anything there that's of concern?

Look OK to me.

 

[Vanguard]

1. I am impressed with the MS AntiSpyware tool. -- This
from a Linux geek

2. I ran the diagonstics on the Help -> About page and
came up with what looks like a HijackThis list. Another
feature I like, but I wouldn't mind seeing it available on
the normal pulldown menu items, if not a hot button on the
main screen.

3. Something caught my eye that caused me concern. Here
are lines 9 and 10 from the diagnostic output:

Session.TimeBombDaysRemaining: 147
Session.TimeBombExpirationDate: 7/31/2005

Then I got to thinking that these might be session
variables. Is this the case? If not, what do you think
they mean? Here's the entire readout from the diagnostic:

Microsoft AntiSpyware version 1.0.509
Windows OS: XP
Windows OS Version Info: 148
Windows OS Major Version: 5
Windows OS Minor Version: 1
Windows OS Build: 2600
Current Path: C:\Program Files\Microsoft AntiSpyware
Install Path: C:\Program Files\Microsoft AntiSpyware\
Session.RunMode: 5
Session.TimeBombDaysRemaining: 147
Session.TimeBombExpirationDate: 7/31/2005
Real-time protection running: True
Real-time protection enabled: True
Security Agents Application Enabled: True
Security Agents Internet Enabled: True
Security Agents System Enabled: True
Security Agents Checkpoints: 59
Definitions Update Date: 3/6/2005 7:40:27 AM
AutoUpdater Enabled: 1
AutoUpdater AutoApply Enabled:
Definitions Increment Version: 48/48
Definitions ThreatAuditThreatData: 1255515
Definitions ThreatAuditScanData: 2154768
Definitions DeterminationData: 153134
Software Update Check Date:
AutoUpdater Software Enabled:
TotalThreatsDetected: 9
TotalScansRun: 1
LastScanDate: 3/6/2005 7:40:41 AM
Is US Locale: True
Locale Language: English (United States):English (0409)
Locale Country: United States:United States (1)
Processor Identifier: x86 Family 15 Model 2 Stepping 7
Processor Name: Mobile Intel(R) Pentium(R) 4 - M CPU
2.20GHz
IE Version: 6.0.2900.2180
msvbvm60.dll: 6.0.96.90
vbscript.dll: 5.6.0.8820
gcUnCompress.dll: 1.1.0.0
gcmd5query.dll: 1.0.0.1
openports.dll:
SDelete.dll:
gcASSoapLib.dll: 1.0.0.509
gcPorttoProcess.dll:
gcTCPObjLib.dll: 1.0.0.509
gcasDtServ.exe: 1.0.0.509
gcAntiSpywareLibrary.dll: 1.0.0.509
gcIPtoHostQueue.exe: 1.0.0.509
gcasServ.exe: 1.0.0.509
gcasServAlert.exe: 1.0.0.509
gcasServHook.dll:
gcASHashLibrary.dll:
gcASThreatAudit.dll: 1.0.0.509
gcASCleaner.exe: 1.0.0.509
GIANTAntiSpywareUpdater.exe: 1.0.0.509
gcASPrivacyLib.dll: 1.0.0.509
gcASShredCtxShell.dll:
gcasSWUpdater.exe: 1.0.0.509
gcSoftwareUpdateLib.dll: 1.0.0.509
GIANTSpywareScan.exe:
gcasDtServ Status: Loaded
gcasDtServ IsAuthorized: True
gcAntiSpywareLibrary Status: Loaded
gcAntiSpywareLibrary IsAuthorized: True
gcASThreatAudit Status: Loaded
gcASThreatAudit IsAuthorized: True
Now: 3/6/2005 8:16:32 AM

See anything there that's of concern?

That is when the BETA version of MS Antispyware gets replaced but by
what is still unknown. Microsoft has to provide this version of Giant's
AntiSpyware product until that date. As part of a prior contractual
obligation between Giant and Sunbelt to which Microsoft must comply,
signature updates must be provided until July 31, 2005. So Microsoft
has to supply Sunbelt the signature updates for Sunbelt's derivative
anti-spyware product built on the Giant engine until that date. Now you
know why July 31 is the cutoff date for this beta release. After that,
Microsoft doesn't have to supply signatures to Sunbelt.

It is still up in the air as to whether or not Sunbelt's claim that it
has exclusive rights to produce an SDK for the Giant/Microsoft product.
I haven't heard of Microsoft producing an SDK to their AntiSpyware
product so I also haven't heard of a lawsuit brought by Sunbelt against
Microsoft. It sounds like a "personal" version of MSAS will remain free
to end-users but there will be an enterprise version of MSAS and that
will probably need an SDK, so that's when I expect a lawsuit to show up.