WD Spynet

[plun]

Hi

How is Spynet voting trigged ?

Example:
File Name: lsass.exe
Display Name: Microsoft LSA Shell (Export Version)
Description: LSA Shell (Export Version)
Publisher: Microsoft Corporation
Digitally Signed By: NOT SIGNED
File Type: Program
Auto Start: No
File Path: C:\WINDOWS\system32\lsass.exe
File Size: 13312 Bytes
File Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Date Installed: 2003-01-18 21:28:26
Process ID: 1388
User Name: NT INSTANS\SYSTEM
Services: IPSEC Services, Protected Storage, Security Accounts Manager
Classification: Not yet classified
Ships With OS: Yes
SpyNet Voting: Not Available

Or

File Name: SITEADV.EXE
Display Name: SITEADV.EXE
Description: Not Available
Publisher: Not Available
Digitally Signed By: NOT SIGNED
File Type: Program
Auto Start: No
File Path: C:\PROGRAM\SITEADVISOR\SITEADV.EXE
File Size: 32768 Bytes
File Version: Not Available
Date Installed: 2006-01-08 21:32:39
Process ID: 3444
User Name: DUNDERII\
Classification: Not yet classified
Ships With OS: No
SpyNet Voting: Not Available

Protocol Local Address Foreign Address State
TCP 192.168.0.122:3964 69.64.185.86:80 CLOSE_WAIT


No scans, just RTP...............

I cannot get any thing to show up in "Allowed items" windows..

regards
plun

 

[Steve Dodson [MSFT]]

Voting data is triggered when enough people (who have opted in to Spynet)
perform a specific action on an unknown file.

--
-steve

Steve Dodson [MSFT]
Windows Defender Beta Lead
MCSE, CISSP
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[plun]

Hi

Thanks Steve !

--
plun

Voting data is triggered when enough people (who have opted in to Spynet)
perform a specific action on an unknown file.

--
-steve

Steve Dodson [MSFT]
Windows Defender Beta Lead
MCSE, CISSP
http://blogs.technet.com/stevedod
--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

Hi

How is Spynet voting trigged ?

Example:
File Name: lsass.exe
Display Name: Microsoft LSA Shell (Export Version)
Description: LSA Shell (Export Version)
Publisher: Microsoft Corporation
Digitally Signed By: NOT SIGNED
File Type: Program
Auto Start: No
File Path: C:\WINDOWS\system32\lsass.exe
File Size: 13312 Bytes
File Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Date Installed: 2003-01-18 21:28:26
Process ID: 1388
User Name: NT INSTANS\SYSTEM
Services: IPSEC Services, Protected Storage, Security Accounts Manager
Classification: Not yet classified
Ships With OS: Yes
SpyNet Voting: Not Available

Or

File Name: SITEADV.EXE
Display Name: SITEADV.EXE
Description: Not Available
Publisher: Not Available
Digitally Signed By: NOT SIGNED
File Type: Program
Auto Start: No
File Path: C:\PROGRAM\SITEADVISOR\SITEADV.EXE
File Size: 32768 Bytes
File Version: Not Available
Date Installed: 2006-01-08 21:32:39
Process ID: 3444
User Name: DUNDERII\
Classification: Not yet classified
Ships With OS: No
SpyNet Voting: Not Available

Protocol Local Address Foreign Address State
TCP 192.168.0.122:3964 69.64.185.86:80 CLOSE_WAIT


No scans, just RTP...............

I cannot get any thing to show up in "Allowed items" windows..

regards
plun