Bargain Buddy

[Dash]

Hi, I'm running the beta as well as Norton Internet
Security 2005. Norton has been finding spyware, such as
Bargain Buddy, but Microsoft AntiSpyware has yet to
notice it.

I've noticed this on my other computer with something
other than Bargain Buddy. Norton states that the files
identified are compressed within "C:\WINDOWS\system32
\netut80ex.vxd".

Is AntiSpyware not seeing these because it doesn't scan
compressed files?

I downloaded the latest definitions and tried again (I
always use a complete scan) and still nothing.

Anyone else have a similar problem?

 

[sivad]

Spy Sweeper (by Webroot) detects Adlogix, but MS
Antispyware does not. I've attempted to send a report of
suspected spyware, but I get an error message to check
proxy settings and the report is not sent.

BTW, Adlogix is installed anytime I start Internet
Explorer (even disconnected from the internet). Webroot
recommends running a scan in Safe Mode, but I am unable
to start Windows in Safe Mode. I hit F8, select Safe
Mode, but after booting up I get a message the Windows
did not start successfully. I've reinstalled XP, but to
no avail.

I have you created a suspected spyware report and
submitted to Microsoft?

 

[Dick Cardy]

Hi, I'm running the beta as well as Norton Internet
Security 2005. Norton has been finding spyware, such as
Bargain Buddy, but Microsoft AntiSpyware has yet to
notice it.

I've noticed this on my other computer with something
other than Bargain Buddy. Norton states that the files
identified are compressed within "C:\WINDOWS\system32
\netut80ex.vxd".

Is AntiSpyware not seeing these because it doesn't scan
compressed files?

I downloaded the latest definitions and tried again (I
always use a complete scan) and still nothing.

Are you doing a Quick Scan. Try it again using Deep Scan

Dick

 

[Andre Da Costa]

Maybe it will if you scan in safe mode. If it is legitimate spyware, you can
always send in a report by clicking Tools > Suspected Spyware Report.

 

[Bill Sanderson]

I think it is unlikely that it is the compressed file issue.

When you mention NIS finding this spyware, is NIS also unable to clean
this--i.e. it keeps coming back?

If you are seeing things that are resistant to cleaning, I would recommend
updating definitions on all products involved, and restarting in safe mode
and scanning with both Microsoft Antispyware and your antivirus program.