Bancos problem, not sure if items were actually removed

[Guest]

I'm am new to computers and this is also the first time in a discussion
group, I hope I am in the right place...please have a little patience with
me. When I performed the scan this morning it came up with the Bancos
problem. I clicked on remove and it showed that it was processing.
Afterwards when I looked at the summary the item was still there in ignored.
I clicked on it and remove again and it said MASpyware has removed items from
your computer. To manage any threats that were quarantined go to Spyware
Quarantine. I don't have anything in Quarantine. The Spyware scan history
shows : Spyware detected: 1 Removed 0 Quarantined 0. It shows 1 item ignored
when I check the results of the scan. So it says it has removed items from
computer, but in scan history it says 0 removed scan history shows 1 ignored.
How do I find out if anything was removed or not?

 

[Guest]

Hello Avro,

Can you copy and paste the cleaner.log

\program files\microsoft antispyware\cleaner.log

I hope this post is helpful, let us know how it works ºut.
Eиgel

 

[Bill Sanderson]

Engel has made the same suggestion I would have!

Are you also running Symantec or Norton Corporate antivirus?

Is your antivirus application still functional?

 

[Guest]

Running Norton Corporate and yes it is still functional. Like I said I am
new to computers: I don't know how to get to program files to get the
antispyware cleaner log.

 

[Bill Sanderson]

Avro--I think you are in good shape. Let me explain.

1) the detection of PWS.Bancos.a was what is called a "false positive"--i.e.
the actual threat is not really there, but some innocent software is
detected as the named threat.

In this case, apparently registry entries related to Norton and Symantec
Corporate antivirus versions were detected as PWS.Bancos.a

2) If you had succeeded in "cleaning" this theat, it would have disabled
your antivirus application--not good!

The false positive was included in definitions 5805 for Microsoft
Antispyware, which were distributed at some early morning time on Friday,
February 10th.

This was corrected by the distribution of definitions 5807, at about 3 PM
U.S. Eastern standard time, on Friday February 10th.

So--it is important to check whether Microsoft Antispyware has been updated
to the 5807 definitions.

You can do this by:

1) Open Microsoft Antispyware. Go to File, Check for updates.

Then go to Help, about, and see whether it states that definitions 5807 are
in place. If it does, please also hit the Diagnostics button, and look for
a line ending in two numbers separated by a /

This line should read 160/160.

If it does, you are in good shape--the trojan was never on your machine, and
the false positive has been corrected.


--

 

[Guest]

The spyware version was not updated to definition 5807 when I did everything.
I updated it later when I saw on here that there was an update. Seeing my
anti virus program is working should I just ignore the fact that it says
MASpyware has removed the items from your computer, yet in history it shows
it was ignored? Or should I check somewhere to see if something was removed?
If so how do I check?
Thanks for the help.

 

[Bill Sanderson]

I would just ignore the apparent inconsistencies. Beta1 won't be with us
for much longer, I think. As long as the antivirus is still functioning
fine, I wouldn't spend further time investigating.

--

 

[Guest]

Thank you very much for your time and help.

I would just ignore the apparent inconsistencies. Beta1 won't be with us
for much longer, I think. As long as the antivirus is still functioning
fine, I wouldn't spend further time investigating.

 

[Tom Emmelot]

Hello Bill,

glad I don't have Norton!
I think first MS must pay you for this day!!!!
I think you broke a record!!!
Answering so many mail over the same thing in one day!!
Did you have coffee to day?
You must get a Medal Of Honor for this!
Take a beer now and lay back!!!

Regards >*< TOM >*<

Bill Sanderson schreef:

 

[Bill Sanderson]

Thanks--I have had a number of thank-you's for the day, including several
from Microsoft staff. I did, in fact, have some coffee in the morning while
I was waiting for my 17 year old son to have 4 impacted wisdom teeth
removed....

And tonight it is snowing--expected to accumulate up to a foot or so--and
I'll go to the neighbors across the street and watch a movie with their
projector, and have a beer!

--

 

[Bill Sanderson]

You're very welcome--thanks for using these groups for support!
--