Panda on-Line found some spyware

[Ellen]

Hi All,

I submitted today the new version of Panda On-Line
(http://www.pandasoftware.com/activescan/com/activescan_principal.htm) and
it is checking for spyware now as well.

It is nice that Panda On-Line Scan searches for Spyware, but it will not
remove it, so that is kind of a disappointing.
It found some spyware on my laptop, which is not discovered by
Ad-Aware/Spybot or Microsoft Anti-Spyware and well:

Incident: Adware:Adware/MediaTickets
Status: No disinfected
Location: Windows Registry

If I search for MediaTickets or *MediaTickets* via Run/RegEdit/Search,
nothing was found, so... I donno...

_________________
Best regards,
Ellen

 

[Bill Sanderson]

One way to learn a bit more about such critters is a google search such as:

mediaTickets removal symantec

This will find you a couple of Symantec articles on variants of this
critter, with some manual removal instructions.

If all there is are traces in the registry--no actual files in place, this
probably is either a false positive or a remnant of some kind of a past
problem--perhaps nothing to worry about.

(I'm scanning now )

 

[Ellen]

Hi Bill,

personally I think it is a false positive, since I found a number of removal
instructions, but .... nothing found.
Since I had done a Quick Restore 2 weeks ago, I doubt it, it something to
worry about.

Unfortunately Panda is very hard to reach somehow!

Best Regards,
Ellen

 

[Bill Sanderson]

I had an unsatisfactory ending to the Panda scan I started it rather late,
and it went on interminably, and, at the end, apparently the results screen
was a popup--at any rate, a popup was blocked by IE6, and when I enabled it,
it took me back to the beginning of the scan.

So--I never saw the results. At last glance, it had found a single infected
entity, so I'm not too worried--I keep eicar lying around, among other
things.

Trend Micro has done them one better--their scan removes as well, and does
Spyware and a check for missing critical updates, as well.
http://housecall.trendmicro.com

 

[Ellen]

Hi Bill,

I use Housecall as well... in addition to my regular Anti-virus program, I
always run a second one, just to be sure...
My IE6 does not block the pop-up from Panda, so... Must have allowed it
somehow.. LOL

Thanks anyways!

Ellen