Real Time Protection Deactivated

[HowardD]

I'm running into a case now where something seems to be
deactivating the Real Time Protection. After doing a
standard scan, I noticed this was the case. Spyware was
loaded right back on there, VX2.EServ ane eUniverse
updater in particular.

I killed the suspect running processes: TSA.exe, TSA2.exe
and gccrnr.exe, ran another scan and cleaned it off. Ran
one more scan just to make sure it wsa still clean.
Rebooted the PC. The Real Time Protection came up as
being in-active and more spyware was being loaded onto
the PC. Made sure these processes wen't running.

 

[anonymous]

For VX2 type of spyware, try use Ad-Aware SE with VX2
cleaner plugin. It works pretty good for me on many many
cases.

I think Microsoft's Anti-Spyware works best if you have a
clean system to begin with. Try some other well know anti-
spyware out there for system clean up (Ad-Aware, Spybot),
then install Microsoft's Anti-Spyware for the future
protection.

 

[Steve Wechsler [MVP]]

I'm running into a case now where something seems to be
deactivating the Real Time Protection. After doing a
standard scan, I noticed this was the case. Spyware was
loaded right back on there, VX2.EServ ane eUniverse
updater in particular.

I killed the suspect running processes: TSA.exe, TSA2.exe
and gccrnr.exe, ran another scan and cleaned it off. Ran
one more scan just to make sure it wsa still clean.
Rebooted the PC. The Real Time Protection came up as
being in-active and more spyware was being loaded onto
the PC. Made sure these processes wen't running.

Howard,

First try running MSAS after you've End Processed the suspected ones
while you are offline. Reboot to Safe Mode, ensure the Processes are
still inactive, run MSAS once more. Empty all Temp and TIF folders prior
to rebooting then empty the Recycle Bin.

If that doesn't work email me and I'll give you a link to another tool.


Steve Wechsler (akaMowGreen)
MVP Windows Server
AumHa VSOP