removing with Windows Defender

[Guest]

I run WinDef on my PC, and FINALLY ran a full scan (usually I run Smart
Scans). Well, it found a bunch of stuff I never heard of, which is
fine--eZula, Claria.GAIN, NCase, etc.--and I was just going to wipe 'em all
out, but <b>THEN</b> I noticed that most of them--of course--seem to be
attached to screensaver .exes I downloaded. For instance:

Category:
Adware

Description:
This program has potentially unwanted behavior.

Advice:
Review the alert details to see why the software was detected. If you do not
like how the software operates or if you do not recognize and trust the
publisher, consider blocking or removing the software.

Resources:
regkey:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\{82315A18-6CFB-44a7-BDFD-90E36537C252}

bho:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER
OBJECTS\{82315A18-6CFB-44a7-BDFD-90E36537C252}

file:
C:\CHUX STUFF\Down loads\Savers\Xmas-winter\rockwellxmas.exe->(wise0015)

file:
C:\CHUX STUFF\Down
loads\Savers\Xmas-winter\merrylittlechristmas.exe->(wise0015)

f
C:\CHUX STUFF\Down loads\Savers\Autumn-TG\automnss.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\NewEnglandFall.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\ctkentfalls.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\autumnchill.exe->(wise0017)


View more information about this item online

And so on. Now, obviously I know about this stuff when I download it, and I
always DE-select installation of any of this crap when I run the installers.
I run many anti-spyware programs frequently (again Smart or Quick scans). My
question is this: if I instruct WD to remove these items, will it remove my
downloaded .exes, or somehow weasel the nasty stuff out of 'em?

 

[Rock]

I run WinDef on my PC, and FINALLY ran a full scan (usually I run Smart
Scans). Well, it found a bunch of stuff I never heard of, which is
fine--eZula, Claria.GAIN, NCase, etc.--and I was just going to wipe 'em all
out, but <b>THEN</b> I noticed that most of them--of course--seem to be
attached to screensaver .exes I downloaded. For instance:

Category:
Adware

Description:
This program has potentially unwanted behavior.

Advice:
Review the alert details to see why the software was detected. If you do not
like how the software operates or if you do not recognize and trust the
publisher, consider blocking or removing the software.

Resources:
regkey:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\{82315A18-6CFB-44a7-BDFD-90E36537C252}

bho:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER
OBJECTS\{82315A18-6CFB-44a7-BDFD-90E36537C252}

file:
C:\CHUX STUFF\Down loads\Savers\Xmas-winter\rockwellxmas.exe->(wise0015)

file:
C:\CHUX STUFF\Down
loads\Savers\Xmas-winter\merrylittlechristmas.exe->(wise0015)

f
C:\CHUX STUFF\Down loads\Savers\Autumn-TG\automnss.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\NewEnglandFall.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\ctkentfalls.exe->(wise0015)

file:
C:\CHUX STUFF\Down loads\MISC\Themes\autumnchill.exe->(wise0017)


View more information about this item online

And so on. Now, obviously I know about this stuff when I download it, and I
always DE-select installation of any of this crap when I run the installers.
I run many anti-spyware programs frequently (again Smart or Quick scans). My
question is this: if I instruct WD to remove these items, will it remove my
downloaded .exes, or somehow weasel the nasty stuff out of 'em?

There are specfic newsgroups for windows defender issues.

[From a post Courtesy Malke]

- microsoft.private.security.spyware.announcements
- microsoft.private.security.spyware.appcompat
- microsoft.private.security.spyware.general
- microsoft.private.security.spyware.install
- microsoft.private.security.spyware.networking
- microsoft.private.security.spyware.signatures
- microsoft.private.security.spyware.onlinecommunity

These newsgroups can be accessed via NNTP or HTTP. To access these
newsgroups using HTTP, please go to the following location:
http://communities.microsoft.com/newsgroups/default.asp?ICP=spyware&sLCID=us

To access these newsgroups using NNTP, please use the following
information for your NNTP client (such as Microsoft Outlook Express):

- NNTP Server: privatenews.microsoft.com
- Account name: privatenews\spyware
- Password: spyware

NOTE: No password will be required via the HTTP link.

 

[DL]

Screensaver downloads are one of the most common ways of getting
adaware/crap on your system.
If the crap is built into the exe, which it frequently is, you would have to
permenently remove the exe