ScanNow fails to run after being triggered by a suspicious layer

[jgarcia]

After being prompted by the following alert, I am offered
the option of ignoring or running a scan. When choosing a
scan, it fails to initiate one, and simply close the window.

A Layered Service Provider (LSP) has been added to your system.

About Winsock Layered Service Providers: LSP (Layered
Service Provider) are important mechanisms that third-party
developers use to extend the functionality of Windows
networking. However, they are sometime also manipulated by
spyware, system hijackers, and other potentially unwanted
software. Spyware can use LSPs to see all traffic being
transported over your network connection. You should use
extreme caution when deleting these objects. If they are
removed improperly, you can experience failure of some
networking components, including complete loss of Internet
connectivity.

 

[Bill Sanderson]

Had you just completed an update to Sun's Java? Perhaps because of a
notification icon in the system tray?

This sounds like a bug--that the scan didn't run. Thanks for that report.

The underlying reason for the notification should be worth pursuing,
though--and the Sun java update does create this alert in my experience.

 

[Steve Dodson [MSFT]]

What program installed the LSP? I would love to attempt a repro to test.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[Bill Sanderson]

I've seen this alert after some Sun Java upgrades. I'm not clear whether
they were Windows 2000 or XP (most likely XP) and whether they were from on
1.5 version to another, or from a 1.4 version to a 1.5 version.

Sun has released a new 1.5 version in the last week or so, and I've
definitely seen this alert in the course of installing this update
(automatically downloaded by Sun's applet) in this time period.

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

What program installed the LSP? I would love to attempt a repro to test.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.