Microsoft AntiSpyware Beta versus Norton AntiVirus 2004

[Sandi]

I recently downloaded the Beta. I currently also utilize
Norton AntiVirus 2004 with subscription for updates. My
Norton AntiVirus scan of today noted several Adware
threats on my computer as reported below so I immediately
ran a full system scan using the Microsoft AntiSpyware
Beta which reported NO issues detected. Why is there this
descrepancy between these two types of scan?

Category: Threat alerts
Date,Feature,Threat Name,Action Taken,Item
Type,Target,Suspicious Action,Virus Definition
Version,Product Version,User Name,Computer Name,Details
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\remover.dll,Description: The file
C:\WINDOWS\remover.dll is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\nxstinst.exe,Description: The file
C:\WINDOWS\nxstinst.exe is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUpdater.exe,Description: The compressed file
NHUpdater.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUninstaller.exe,Description: The compressed file
NHUninstaller.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHelper.dll,Description: The compressed file NHelper.dll
within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\E7DCA7AB-2139-4190-8B4C-
2298BC,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\E7DCA7AB-2139-4190-8B4C-2298BC is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\AF9CF095-E319-4A91-890B-
6AF1ED,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\AF9CF095-E319-4A91-890B-6AF1ED is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUpdater.exe,Description: The compressed file
NHUpdater.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUninstaller.exe,Description: The compressed file
NHUninstaller.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHelper.dll,Description: The compressed file NHelper.dll
within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\3FC338DE-90FE-4612-9E38-
6CCEBA,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\3FC338DE-90FE-4612-9E38-6CCEBA is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\35D4FDCB-6EDB-4E6C-8F92-
3B3063,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\35D4FDCB-6EDB-4E6C-8F92-3B3063 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\B690E739-CA55-4137-A2B6-
5CB70E,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\B690E739-CA55-4137-A2B6-5CB70E is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\81A5333E-7F07-4072-96C4-
1D082C,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\81A5333E-7F07-4072-96C4-1D082C is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\2E5B2299-C135-4F82-B08B-
3BDE85,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\2E5B2299-C135-4F82-B08B-3BDE85 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\19C54F8C-3B73-4D7E-8A3A-
C658D1,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\19C54F8C-3B73-4D7E-8A3A-C658D1 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\2M Games\ABC
Scrabble\help\STUNTB.exe,Description: The file C:\Program
Files\2M Games\ABC Scrabble\help\STUNTB.exe is a Adware
threat."
2/22/2005 12:27:00 PM,Virus scanner,Adware.WinFetch,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Documents and Settings\Sandi Palumbo\Local
Settings\Temp\IMq.exe,Description: The file C:\Documents
and Settings\Sandi Palumbo\Local Settings\Temp\IMq.exe is
a Adware threat."
2/21/2005 4:38:05 PM,Virus scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502180035,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\remover.dll,Description: The file
C:\WINDOWS\remover.dll is a Adware threat."

 

[Ron Chamberlin]

Hi Sandi,
It seems that the MSAS program has most of the files identified by Norton
already arrested and in Quarantine.

Ron Chamberlin
MS-MVP

 

[mark-602]

-----Original Message-----
I recently downloaded the Beta. I currently also utilize
Norton AntiVirus 2004 with subscription for updates. My
Norton AntiVirus scan of today noted several Adware
threats on my computer as reported below so I immediately
ran a full system scan using the Microsoft AntiSpyware
Beta which reported NO issues detected. Why is there this
descrepancy between these two types of scan?

Category: Threat alerts
Date,Feature,Threat Name,Action Taken,Item
Type,Target,Suspicious Action,Virus Definition
Version,Product Version,User Name,Computer Name,Details
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\remover.dll,Description: The file
C:\WINDOWS\remover.dll is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\nxstinst.exe,Description: The file
C:\WINDOWS\nxstinst.exe is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUpdater.exe,Description: The compressed file
NHUpdater.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUninstaller.exe,Description: The compressed file
NHUninstaller.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHelper.dll,Description: The compressed file NHelper.dll
within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\F66F41D3-1C6F-40A6-9A56-FA6424 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\E7DCA7AB-2139-4190-8B4C-
2298BC,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\E7DCA7AB-2139-4190-8B4C-2298BC is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\AF9CF095-E319-4A91-890B-
6AF1ED,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\AF9CF095-E319-4A91-890B-6AF1ED is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUpdater.exe,Description: The compressed file
NHUpdater.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHUninstaller.exe,Description: The compressed file
NHUninstaller.exe within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
NHelper.dll,Description: The compressed file NHelper.dll
within C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\61FCA21C-0A7D-4B77-9A5B-E75F23 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\3FC338DE-90FE-4612-9E38-
6CCEBA,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\3FC338DE-90FE-4612-9E38-6CCEBA is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\36E73AAF-
2345-4600-B901-622EA0\35D4FDCB-6EDB-4E6C-8F92-
3B3063,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\36E73AAF-2345-4600-B901-622EA0
\35D4FDCB-6EDB-4E6C-8F92-3B3063 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\B690E739-CA55-4137-A2B6-
5CB70E,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\B690E739-CA55-4137-A2B6-5CB70E is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\81A5333E-7F07-4072-96C4-
1D082C,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\81A5333E-7F07-4072-96C4-1D082C is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\2E5B2299-C135-4F82-B08B-
3BDE85,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\2E5B2299-C135-4F82-B08B-3BDE85 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\Microsoft AntiSpyware\Quarantine\32C90C8A-
035A-4161-9BE1-385CF2\19C54F8C-3B73-4D7E-8A3A-
C658D1,Description: The file C:\Program Files\Microsoft
AntiSpyware\Quarantine\32C90C8A-035A-4161-9BE1-385CF2
\19C54F8C-3B73-4D7E-8A3A-C658D1 is a Adware threat."
2/22/2005 12:27:00 PM,Virus
scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Program Files\2M Games\ABC
Scrabble\help\STUNTB.exe,Description: The file C:\Program
Files\2M Games\ABC Scrabble\help\STUNTB.exe is a Adware
threat."
2/22/2005 12:27:00 PM,Virus scanner,Adware.WinFetch,Delete
failed,File,N/A,N/A,200502210008,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\Documents and Settings\Sandi Palumbo\Local
Settings\Temp\IMq.exe,Description: The file C:\Documents
and Settings\Sandi Palumbo\Local Settings\Temp\IMq.exe is
a Adware threat."
2/21/2005 4:38:05 PM,Virus scanner,Adware.NavHelper,Delete
failed,File,N/A,N/A,200502180035,10.0.1.13,Sandi
Palumbo,KCMS-SANDIHOME,",Threat category: AdwareSource:
C:\WINDOWS\remover.dll,Description: The file
C:\WINDOWS\remover.dll is a Adware threat."
.

As far as I know...and my PC RUNS great...there must be a
WebSite to add SUPPORT to any Product you Install...
I get a constant SUPPORT from McAfee for the FILES that
might harm my PC--they get identified and I am OFFERED a
LINK to get MORE INFO..or a REMOVAL TOOL..
This new MS-Anti-Spyware beta1 is most likely headed in
that direction..
I would just DELETE anything that seems suspicious..on my
SYSTEM I have no problem running a RE-Install..and I plan
most Projects so that a RE-Install will follow..anyway..
So far for me..
XP-Home Edition..
Will Re-Install..
Nothing will stop that action..
The Projects I RUN require a RE-Install after-wards
anyway..
So I plan my "chancy" inter-net "surfing" around that
schedule..
What I have found is that the DEVICE Manager needs to be
OPENED..
And a DRIVER Check for Digital-signing and a UPDATEING
Done..
Be SURE to Scan for Hardware CHANGES FIRST.