Add/Remove does not remove Antispy completely

[Wunay]

I found that MS Antispy allowed me to change my homepage
without a problem. I therefore removed the programme from
Add/Remove programmes and also tried from with Antispy
itself. I then re-installed Antispy but was still able to
change my homepage without problem. This suggests that
despite removing the programme it leaves bits behind. Any
ideas (simple) how to correct the problem. Any advice
appreciated.

 

[Bill Sanderson]

Could you rephrase this, perhaps? Why would you NOT want to be able to
change your homepage without a problem?

 

[Wunay]

Bill Sanderson

In an earlier forum it was stated that to find out if
Microsoft Antispy was working that one should try to
change one's home page and if Antispy did not advise you
of that change then Antispy was not functioning. My main
PC does not advise of that change, whereas my other two
PC's do advise. I therefore assume that Antispy is not
functioning on the main PC. I have removed Antispy using
Antispy/Uninstall and removed the directory from
Programmes and re-installed , but still finish up with
the Antispy not advising when the home page is changed,
added to this Antispy has never found a problem.
Is there another way to check if Antispy is working
correctly?

 

[wunay]

Bill Sanderson
In an earlier forum it was stated that Antispy never
seemed to catch anything and the way to check as to it
working correctly was to change your home page and see if
Antispy advised you of that change. My main PC does not
indicate that change whereas both of my other PC's
informed you of the change. I have removed Antispy using
Antispy/Uninstall and removed its directory manually as I
believed that it had left some bits behind. Upon re-
installing I have the same scenario in that I can change
the homepage without comment from Antispy. Antispy never
seemed to have detected any problems previously at any
time. Question - What way is there to remove Antispy
completely alternatively is there any other way of
checking as to its working correctly?

 

[Bill Sanderson]

Sorry for the misunderstanding--that is clear.

Here's an alternative test--I agree that it appears that real-time
protection may not be working.

Go to a command prompt in the \windows (or \winnt) folder, depending.

do this:

md winlogon.exe

(i.e. create a directory named winlogon.exe)

withing about 15 seconds, you should see a red threat alert from Microsoft
Antispyware. You can choose either choice in the alert--remove is a good
one--neither will do anything useful and the alert will repeat.

To remove the alert, simply remove the directory you created above:

rd winlogon.exe

This is an effective test, although I haven't checked it with the newest
definitions. Since it is essentially a false positive, it can be fixed--let
me check.

OK--this test still works with the newest definitions.

--