WD fails to remove

Discussion in 'Security and Anti-Spyware Community' started by Guest, Jun 7, 2006.

  1. Guest

    Guest Guest

    WD found some bad things on my PC and tried to remove them. Succeded in all
    but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    tell, the bad guys are still on my PC. What do I do now?
    --
    H.R.Oswald
     
    Guest, Jun 7, 2006
    #1
    1. Advertisements

  2. Guest

    Guest Guest

    Hello H.R.Oswald,

    Can you provide the name of the 'things'.

    Since you don't say what the error message number is, I'm guessing, but I
    would imagine the detections are either in an archive file (zip type
    compressed file) which Defender doesn't remove, since such files could
    contain other wanted/needed information, or they are in a restore folder
    which also isn't touched by Defender, or they are in a quarantine fºlder.
    All occurrences are harmless in that state but could cause a problem if
    uncompressed or restºred.

    You should see what files are involved by examining the system event lºg:
    Do a start, run, eventvwr.msc, **click OK**, then click ºn

    **System**, then View, then Filter, and scroll down the " event sºurce"

    control to reach Windefend, that will give you a view of just Windows
    Defender-related events.

    Look for events with yellow triªngles

    Then make a decision as to either deleting/ignoring/manually cleaning them
    or in the other case emptying your restore folder and creating a new restore
    point as described in these fºrums.

    For the benefit of the community reading this post, please rate the pºst.

    I hope this post is helpful.

    Let us know how it works ºut.

    Еиçеl
    --
    "Howard" wrote:

    > WD found some bad things on my PC and tried to remove them. Succeded in all
    > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > tell, the bad guys are still on my PC. What do I do now?
    > --
    > H.R.Oswald
     
    Guest, Jun 7, 2006
    #2
    1. Advertisements

  3. Guest

    Guest Guest

    Hi Engel,
    The "things" I was refering are : 'NewDotNet' (High); 'WebHancer' (High);and
    Marketscore.InternetAccelera...'(Severe). All had the number 0x8007817
    associated with it,
    Does this help somewhat.
    Howard
    --
    H.R.Oswald


    "Engel" wrote:

    > Hello H.R.Oswald,
    >
    > Can you provide the name of the 'things'.
    >
    > Since you don't say what the error message number is, I'm guessing, but I
    > would imagine the detections are either in an archive file (zip type
    > compressed file) which Defender doesn't remove, since such files could
    > contain other wanted/needed information, or they are in a restore folder
    > which also isn't touched by Defender, or they are in a quarantine fºlder.
    > All occurrences are harmless in that state but could cause a problem if
    > uncompressed or restºred.
    >
    > You should see what files are involved by examining the system event lºg:
    > Do a start, run, eventvwr.msc, **click OK**, then click ºn
    >
    > **System**, then View, then Filter, and scroll down the " event sºurce"
    >
    > control to reach Windefend, that will give you a view of just Windows
    > Defender-related events.
    >
    > Look for events with yellow triªngles
    >
    > Then make a decision as to either deleting/ignoring/manually cleaning them
    > or in the other case emptying your restore folder and creating a new restore
    > point as described in these fºrums.
    >
    > For the benefit of the community reading this post, please rate the pºst.
    >
    > I hope this post is helpful.
    >
    > Let us know how it works ºut.
    >
    > Еиçеl
    > --
    > "Howard" wrote:
    >
    > > WD found some bad things on my PC and tried to remove them. Succeded in all
    > > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > > tell, the bad guys are still on my PC. What do I do now?
    > > --
    > > H.R.Oswald
     
    Guest, Jun 7, 2006
    #3
  4. Guest

    Guest Guest

    Hi,

    Right click My Computer > Properties > System Restore Tab.

    Turn off System Restore, restart your computer.

    This flushes out system restore.

    Once you've restarted, re-enable system restore if you wish.

    Reboot

    Done

    Try a manual scan.

    For the benefit of the community reading this post, please rate the pºst.

    I hope this post is helpful.

    Let us know how it works ºut.

    Еиçеl
    --

    "Howard" wrote:

    > Hi Engel,
    > The "things" I was refering are : 'NewDotNet' (High); 'WebHancer' (High);and
    > Marketscore.InternetAccelera...'(Severe). All had the number 0x8007817
    > associated with it,
    > Does this help somewhat.
    > Howard
    > --
    > H.R.Oswald
    >
    >
    > "Engel" wrote:
    >
    > > Hello H.R.Oswald,
    > >
    > > Can you provide the name of the 'things'.
    > >
    > > Since you don't say what the error message number is, I'm guessing, but I
    > > would imagine the detections are either in an archive file (zip type
    > > compressed file) which Defender doesn't remove, since such files could
    > > contain other wanted/needed information, or they are in a restore folder
    > > which also isn't touched by Defender, or they are in a quarantine fºlder.
    > > All occurrences are harmless in that state but could cause a problem if
    > > uncompressed or restºred.
    > >
    > > You should see what files are involved by examining the system event lºg:
    > > Do a start, run, eventvwr.msc, **click OK**, then click ºn
    > >
    > > **System**, then View, then Filter, and scroll down the " event sºurce"
    > >
    > > control to reach Windefend, that will give you a view of just Windows
    > > Defender-related events.
    > >
    > > Look for events with yellow triªngles
    > >
    > > Then make a decision as to either deleting/ignoring/manually cleaning them
    > > or in the other case emptying your restore folder and creating a new restore
    > > point as described in these fºrums.
    > >
    > > For the benefit of the community reading this post, please rate the pºst.
    > >
    > > I hope this post is helpful.
    > >
    > > Let us know how it works ºut.
    > >
    > > Еиçеl
    > > --
    > > "Howard" wrote:
    > >
    > > > WD found some bad things on my PC and tried to remove them. Succeded in all
    > > > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > > > tell, the bad guys are still on my PC. What do I do now?
    > > > --
    > > > H.R.Oswald
     
    Guest, Jun 8, 2006
    #4
  5. Guest

    Guest Guest

    Hi,
    Ran the scan and no bad guys showed up. I guess I'm clear for the moment.
    Thanks for all your help.
    Howard
    --
    H.R.Oswald


    "Engel" wrote:

    > Hi,
    >
    > Right click My Computer > Properties > System Restore Tab.
    >
    > Turn off System Restore, restart your computer.
    >
    > This flushes out system restore.
    >
    > Once you've restarted, re-enable system restore if you wish.
    >
    > Reboot
    >
    > Done
    >
    > Try a manual scan.
    >
    > For the benefit of the community reading this post, please rate the pºst.
    >
    > I hope this post is helpful.
    >
    > Let us know how it works ºut.
    >
    > Еиçеl
    > --
    >
    > "Howard" wrote:
    >
    > > Hi Engel,
    > > The "things" I was refering are : 'NewDotNet' (High); 'WebHancer' (High);and
    > > Marketscore.InternetAccelera...'(Severe). All had the number 0x8007817
    > > associated with it,
    > > Does this help somewhat.
    > > Howard
    > > --
    > > H.R.Oswald
    > >
    > >
    > > "Engel" wrote:
    > >
    > > > Hello H.R.Oswald,
    > > >
    > > > Can you provide the name of the 'things'.
    > > >
    > > > Since you don't say what the error message number is, I'm guessing, but I
    > > > would imagine the detections are either in an archive file (zip type
    > > > compressed file) which Defender doesn't remove, since such files could
    > > > contain other wanted/needed information, or they are in a restore folder
    > > > which also isn't touched by Defender, or they are in a quarantine fºlder.
    > > > All occurrences are harmless in that state but could cause a problem if
    > > > uncompressed or restºred.
    > > >
    > > > You should see what files are involved by examining the system event lºg:
    > > > Do a start, run, eventvwr.msc, **click OK**, then click ºn
    > > >
    > > > **System**, then View, then Filter, and scroll down the " event sºurce"
    > > >
    > > > control to reach Windefend, that will give you a view of just Windows
    > > > Defender-related events.
    > > >
    > > > Look for events with yellow triªngles
    > > >
    > > > Then make a decision as to either deleting/ignoring/manually cleaning them
    > > > or in the other case emptying your restore folder and creating a new restore
    > > > point as described in these fºrums.
    > > >
    > > > For the benefit of the community reading this post, please rate the pºst.
    > > >
    > > > I hope this post is helpful.
    > > >
    > > > Let us know how it works ºut.
    > > >
    > > > Еиçеl
    > > > --
    > > > "Howard" wrote:
    > > >
    > > > > WD found some bad things on my PC and tried to remove them. Succeded in all
    > > > > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > > > > tell, the bad guys are still on my PC. What do I do now?
    > > > > --
    > > > > H.R.Oswald
     
    Guest, Jun 8, 2006
    #5
  6. Guest

    Guest Guest

    Hi Howard,

    Thanks for letting us know the outcome!
    (¯`·._.·Еиçеl·._.·´¯)
    --

    "Howard" wrote:

    > Hi,
    > Ran the scan and no bad guys showed up. I guess I'm clear for the moment.
    > Thanks for all your help.
    > Howard
    > --
    > H.R.Oswald
    >
    >
    > "Engel" wrote:
    >
    > > Hi,
    > >
    > > Right click My Computer > Properties > System Restore Tab.
    > >
    > > Turn off System Restore, restart your computer.
    > >
    > > This flushes out system restore.
    > >
    > > Once you've restarted, re-enable system restore if you wish.
    > >
    > > Reboot
    > >
    > > Done
    > >
    > > Try a manual scan.
    > >
    > > For the benefit of the community reading this post, please rate the pºst.
    > >
    > > I hope this post is helpful.
    > >
    > > Let us know how it works ºut.
    > >
    > > Еиçеl
    > > --
    > >
    > > "Howard" wrote:
    > >
    > > > Hi Engel,
    > > > The "things" I was refering are : 'NewDotNet' (High); 'WebHancer' (High);and
    > > > Marketscore.InternetAccelera...'(Severe). All had the number 0x8007817
    > > > associated with it,
    > > > Does this help somewhat.
    > > > Howard
    > > > --
    > > > H.R.Oswald
    > > >
    > > >
    > > > "Engel" wrote:
    > > >
    > > > > Hello H.R.Oswald,
    > > > >
    > > > > Can you provide the name of the 'things'.
    > > > >
    > > > > Since you don't say what the error message number is, I'm guessing, but I
    > > > > would imagine the detections are either in an archive file (zip type
    > > > > compressed file) which Defender doesn't remove, since such files could
    > > > > contain other wanted/needed information, or they are in a restore folder
    > > > > which also isn't touched by Defender, or they are in a quarantine fºlder.
    > > > > All occurrences are harmless in that state but could cause a problem if
    > > > > uncompressed or restºred.
    > > > >
    > > > > You should see what files are involved by examining the system event lºg:
    > > > > Do a start, run, eventvwr.msc, **click OK**, then click ºn
    > > > >
    > > > > **System**, then View, then Filter, and scroll down the " event sºurce"
    > > > >
    > > > > control to reach Windefend, that will give you a view of just Windows
    > > > > Defender-related events.
    > > > >
    > > > > Look for events with yellow triªngles
    > > > >
    > > > > Then make a decision as to either deleting/ignoring/manually cleaning them
    > > > > or in the other case emptying your restore folder and creating a new restore
    > > > > point as described in these fºrums.
    > > > >
    > > > > For the benefit of the community reading this post, please rate the pºst.
    > > > >
    > > > > I hope this post is helpful.
    > > > >
    > > > > Let us know how it works ºut.
    > > > >
    > > > > Еиçеl
    > > > > --
    > > > > "Howard" wrote:
    > > > >
    > > > > > WD found some bad things on my PC and tried to remove them. Succeded in all
    > > > > > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > > > > > tell, the bad guys are still on my PC. What do I do now?
    > > > > > --
    > > > > > H.R.Oswald
     
    Guest, Jun 8, 2006
    #6
  7. Guest

    Guest Guest

    Do not use these instructions. You will lose your restore points.

    The pinheads at microsoft are aware that they have problems with their WD
    anti-spyware and that it will not remove NewDotNet or
    Marketscore.InternetAccelerator.

    william shake_speer






    "Engel" wrote:

    > Hi,
    >
    > Right click My Computer > Properties > System Restore Tab.
    >
    > Turn off System Restore, restart your computer.
    >
    > This flushes out system restore.
    >
    > Once you've restarted, re-enable system restore if you wish.
    >
    > Reboot
    >
    > Done
    >
    > Try a manual scan.
    >
    > For the benefit of the community reading this post, please rate the pºst.
    >
    > I hope this post is helpful.
    >
    > Let us know how it works ºut.
    >
    > Еиçеl
    > --
    >
    > "Howard" wrote:
    >
    > > Hi Engel,
    > > The "things" I was refering are : 'NewDotNet' (High); 'WebHancer' (High);and
    > > Marketscore.InternetAccelera...'(Severe). All had the number 0x8007817
    > > associated with it,
    > > Does this help somewhat.
    > > Howard
    > > --
    > > H.R.Oswald
    > >
    > >
    > > "Engel" wrote:
    > >
    > > > Hello H.R.Oswald,
    > > >
    > > > Can you provide the name of the 'things'.
    > > >
    > > > Since you don't say what the error message number is, I'm guessing, but I
    > > > would imagine the detections are either in an archive file (zip type
    > > > compressed file) which Defender doesn't remove, since such files could
    > > > contain other wanted/needed information, or they are in a restore folder
    > > > which also isn't touched by Defender, or they are in a quarantine fºlder.
    > > > All occurrences are harmless in that state but could cause a problem if
    > > > uncompressed or restºred.
    > > >
    > > > You should see what files are involved by examining the system event lºg:
    > > > Do a start, run, eventvwr.msc, **click OK**, then click ºn
    > > >
    > > > **System**, then View, then Filter, and scroll down the " event sºurce"
    > > >
    > > > control to reach Windefend, that will give you a view of just Windows
    > > > Defender-related events.
    > > >
    > > > Look for events with yellow triªngles
    > > >
    > > > Then make a decision as to either deleting/ignoring/manually cleaning them
    > > > or in the other case emptying your restore folder and creating a new restore
    > > > point as described in these fºrums.
    > > >
    > > > For the benefit of the community reading this post, please rate the pºst.
    > > >
    > > > I hope this post is helpful.
    > > >
    > > > Let us know how it works ºut.
    > > >
    > > > Еиçеl
    > > > --
    > > > "Howard" wrote:
    > > >
    > > > > WD found some bad things on my PC and tried to remove them. Succeded in all
    > > > > but three - two marked 'High' and remaining marked 'Severe'. As far as I can
    > > > > tell, the bad guys are still on my PC. What do I do now?
    > > > > --
    > > > > H.R.Oswald
     
    Guest, Jun 10, 2006
    #7
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. Greg

    won't remove ignored after selecting remove.

    Greg, Feb 23, 2005, in forum: Security and Anti-Spyware Community
    Replies:
    1
    Views:
    568
    Ron Chamberlin
    Feb 24, 2005
  2. Pak Hanafi

    AntiSpy fails to identify or remove LOP. Fix coming?

    Pak Hanafi, Mar 3, 2005, in forum: Security and Anti-Spyware Community
    Replies:
    5
    Views:
    987
    Bill Sanderson
    Mar 8, 2005
  3. Brian Paterson

    AntiSpyWare FAILS TO FIND ALL SPYWARE

    Brian Paterson, Apr 18, 2005, in forum: Security and Anti-Spyware Community
    Replies:
    7
    Views:
    840
    D@annyBoy
    Apr 23, 2005
  4. Chim

    Suspected Spyware Reporting Tool fails

    Chim, Jun 22, 2005, in forum: Security and Anti-Spyware Community
    Replies:
    1
    Views:
    233
    Ron Chamberlin
    Jun 23, 2005
  5. ken foster

    Beta fails to locate spyware

    ken foster, Aug 6, 2005, in forum: Security and Anti-Spyware Community
    Replies:
    2
    Views:
    281
    Guest
    Aug 8, 2005
  6. Guest

    If AUTO UPDATE fails since 4-25-06

    Guest, Apr 26, 2006, in forum: Security and Anti-Spyware Community
    Replies:
    5
    Views:
    322
    Tom Emmelot
    Apr 27, 2006
  7. Guest

    Dfndr update fails - the wrong diskette is in the drive !!

    Guest, Apr 27, 2006, in forum: Security and Anti-Spyware Community
    Replies:
    7
    Views:
    893
    Guest
    Apr 27, 2006
  8. Guest

    Defender fails to remove Adware-Qoologic

    Guest, Jun 14, 2006, in forum: Security and Anti-Spyware Community
    Replies:
    2
    Views:
    431
    Guest
    Jun 14, 2006
Loading...