False Positive for VX2

[Krony]

I've done the following in various orders over the past
weeks and continue to have the same problem, which I think
may indicate a false positive for VX2 with MSAS.

I have MSAS set to run every night at 2:00 AM on my PC
which is running XP Pro with SP2. In the morning, not
every morning but some mornings, MSAS says that it found
VX2 Transponder and IEPlugin. I remove them from my
system.

I run MSAS and it finds nothing. I run AdwareSE and it
finds nothing. I run the Adware VX2 Tool and it says
system is clean (this tool runs in a very quickly ~ 30 to
45 seconds, which seems too quick. Is that correct?)

I reboot and run all tools. I've even booted in safe mode
and run all tools. Everything comes back clean.

The next morning MSAS sometimes comes back as showing
nothing found but, more often than not, comes back as
having found VX2 and IEPlugin again.

Again run Adware SE and Adware VX2 Tool and it does not
find what MSAS has found. I even run the other tools
before I use MSAS to remove the spyware and it does not
find anything.

Is MSAS really fidning somethnig or is this a false
positive? Has anyone else seen this? Comments?
Suggestions?

 

[plun]

-----Original Message-----
Is MSAS really fidning somethnig or is this a false
positive? Has anyone else seen this? Comments?
Suggestions?

Hi

I think you have a new VX2 variant. MSAS finds some
"fingerprints" but cant remove this variant.

Is this a PC with only one user or several accounts ?

Send a spyware report to MS about this, menu tools.

Then follow this:

http://aumha.org/a/quickfix.php

 

[Krony]

There are four user accounts on the PC. I run all of the
scans from my account with admin privileges. One other
account has admin and the other two are limited accounts.

Will send a report to MS.

Will look at the link you sent.

Thanks

 

[Andre Da Costa]

Limited and multiple account scanning is not supported in this beta 1
release of MSAS, will be fixed by beta 2.