Real-time protection and PSEXEC

[Mark]

The issue I wish to address the real time protection
either acts to slowly or in this case flat out doesn't
work. A co-worker and I are both running Anti-Spyware
beta and noticed an issue when running PSEXEC (Info on
psexec can be found here:
http://www.windowsitpro.com/Windows/Article/ArticleID/4291
9/42919.html). When running PSEXEC, it installs a
service on a remote computer, the issue is that you are
able to install and run the command line utilities on a
remote computer before the real-time protection pops up
with its notification and balks at the attempt to install
the service. Even though it ran I choose to block the
request to install the service, I have checked the logs
and it shows that I blocked it; However, after being
blocked it is still able to run. Anti-Spyware, instead
of giving the "Allow or Block" popup, now gives an
approved popup. Anti-spyware hasn't even attempted to
block the installation of the service.

I wanted to inform everyone so that perhaps the issue can
be addressed.

 

[Bill Sanderson]

Thanks--this is the right place to report this issue.

We've had a discussion in these groups about whether the description of
PSEXEC is appropriate and accurate, and I think that may change.

You are reporting a different, issue, though, and my take on your issue is
that it is a performance-related one--I've seen other situations in which I
get an instantaneous (or at least timely) alert on my machine, while another
user performing the same operation (I was testing using a URL change in IE)
got a pop-up well after the operation had completed

Performance bugs are a focus of this beta, so thanks for the report--
Microsoft reads these groups, and if they need additional information or
clarification, they'll let us know.