Wierd bug

[Gidi]

I tried once to update my spyware definitions manually,
and it said that it has upgraded from 5719 to 5721.
But then every time i try to manually update it does th
ing... it downloads every time the update the definitions
to version 5721 and installs them again and again,
despite the fact that it had done so before!

 

[Andre Da Costa]

This is a bug, somebody experiencing a similar problem in NG's earlier.

From BK:
After using the auto-updater to update to Defs 5721,
I ran the FCIV utility in

http://support.microsoft.com/kb/841290/

on the file "gcThreatAuditScanData.gcd". I got
values of MD5 and SHA-1 different from those in

http://support.microsoft.com/default.aspx?scid=kb;en-
us;892519

 

[wunay]

Bill
I have twigged after going onto the web, and found that
Multibot Pro Security Disabler installs the folder called
Winlogon.exe which is exactly what you had advised me to
do to test the correct functioning of Antispy. I had not
realised the connection between your advice and Multibot
and when I did, I found that I had left the folder behind
on one of the occasions that I tested the setup, in fact
I must have done it twice. Upon removal of these two
folders (that I had created) all seems to be working OK.

Thank you, much appreciated.

regards

 

[Bill Sanderson]

No problem.

The REAL Multibot doesn't create that directory. It is, in fact, created by
a particular antivirus product as a form of "innoculation" against multibot.

An earlier thread in these groups where a user with excellent detective
skills found this to be the source of that warning on his machine led me to
using this as a testing tool.

The subdirectory itself is absolutely safe, but the result can be scary--I
guess I need to describe it more carefully.

--