Finds the same spyware over and over again

[Internet User]

How good is MS AntiSpyware at learning?

I ask because it seems that I am removing spyware that I have removed before
and there does not seem to be any evidence of an ability to recognize what
has already been removed and prevent it from installing via Real Time
protection.

Shouldn't there be a connection between what the user has actually
experienced on his machine and what the Real Time Protection looks for and
protects against?

For example stuff that has been repeatedly detected and removed:

eXact Downloader Trojan Downloader
eXact BargainBuddy Adware

Delfin Media Viewer Adware

Clear Search Browser Modifier

 

[Bill Sanderson]

I've seen this and I don't think it indicates a failure of the real time
protection, but more likely, incomplete removal.

I'd recommend restarting in safe mode by pressing the F8 key before the
initial Windows screen comes up--and doing full scans until a scan comes up
clean--probably two scans.

If that doesn't clear it up, you've still got an infection in place. You
should submit a Tools, suspected spyware report and describe the
circumstances--that'll help improve the product in the long term, but won't
really help you directly, I'm afraid. Then I'd suggest going to a spyware
forum and using HijackThis and logs posted to the forum to get this stuff
clean.

http://www.aumha.org is one site I'd recommend where you can both download
HijackThis and post logs in a forum designed for that purpose.

 

[rookie]

I am having the same problem. It seems to me that the
same spyware keeps coming back. The program needs to have
an additional feature built in, that would immunize the
system from the same files coming back over and over
again. I purposely go to sites that i know have spyware
and adware and continually get the same files. This
problem should be addressed before I would consider buying
the final release.

 

[Bill Sanderson]

Check your list of Browser Helper Objects--BHO's--in Tools, advanced tools,
System Explorers.

Consider blocking any that are marked as unidentified.

The real-time checkpoints and agents SHOULD be blocking new stuff from
coming in--so you've got something in place and actively helping things
along.