- Community Home
- >
- Servers and Operating Systems
- >
- Legacy
- >
- Internet Products
- >
- Re: Microsoft Windows Anti Spyware Beta released
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-06-2005 09:09 AM
тАО01-06-2005 09:09 AM
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en&Hash=S6C53V5
It does require that you have a legal copy of windows but the download is free.
Just ran it on my PC. It came up with three false positives. It seemed to think that the presence of nsldapssl32v30.dll meant that I had Timbuctu remote control installed when in fact the dll is included with hundreds of programs. It also flagged my sniffer program winpcap as a threat but did admit that it was a low risk. Finally it said it found searchsquire and wanted to remove it. Actually the only mention of searchsquire is in my restricted zone so it was offering to remove it from my restricted zone.
Looking at its Advanced Tools it has something called System Explorer which lets you look at BHOs and other interesting things. Tackily says that spybot s&d's BHO is an unknown threat but since it identifies its own System Shell and a dozen Windows LSPs as unknown threats I guess it's just a beta flaw.
Wish I had a good istsvc or vx2 or coolwebsearch infection to try it on.
Ron
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-06-2005 11:03 AM
тАО01-06-2005 11:03 AM
Re: Microsoft Windows Anti Spyware Beta released
Here is the MS press release, announcing they bought GIANT:
http://www.microsoft.com/presspass/press/2004/dec04/12-16GIANTPR.asp
Here is another interesting take on this acquisition:
http://www.pcworld.com/news/article/0,aid,118983,00.asp
We all know that MS is being dragged kicking and screaming into the anti-spyware business, because so many people are fed up with the security sieve called IE. My personal feeling is that IE needs to be re-written and re-designed, with SECURITY as the #1 priority. MS obviously has the resources to do it. All it would take is the nod from Bill.
I will try this beta version on the VX2-infected PC we talked about, but I am not expecting much.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=781562
:-) Jay
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-06-2005 12:01 PM
тАО01-06-2005 12:01 PM
Re: Microsoft Windows Anti Spyware Beta released
This was run on my primary home PC, which is not having any problems at all:
http://orion.neiu.edu/~jbollyn/spyware/ms-anti-spyware.jpg
:-) Jay
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-06-2005 12:35 PM
тАО01-06-2005 12:35 PM
Re: Microsoft Windows Anti Spyware Beta released
go:
http://h20239.www2.hp.com/techcenter/security/index.htm Choose Got Spyware or choose Intermute to get software.
I am download Anti Spyware . I will try and compare Anti Spyware and SpySubtract.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-07-2005 02:33 AM
тАО01-07-2005 02:33 AM
Re: Microsoft Windows Anti Spyware Beta released
I guess it's not going to put me out of business anytime soon.
Ron
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-07-2005 06:27 AM
тАО01-07-2005 06:27 AM
SolutionI think MAS did a pretty good job on the VX2-infected PC. There were quite a few other things (spyware/malware/data miners/tracking cookies, etc.) as well. I just ran MAS in normal XP mode (not Safe Mode). After the scan, I did not see any mention of having found VX2, but I just took all the default suggestions to delete or ignore the things MAS found.
After reboot, I ran HJT ver. 1.99.0, which found the LSP problem I had noticed before. When you try to delete the LSP entries, this current HJT version says 'sorry I can't do it, but check here' and provides this link:
http://www.cexx.org/lspfix.htm
I ran LSPfix which did fix the problem. With previous versions of HJT, you could check the LSP checkboxes, but the problem would return after reboot.
So this PC is clean now; I have rebooted several times. I ran the Ad-Aware VX2 add-in, and VX2 was not found.
We are probably going to install MAS (when RTM is available), replacing Spybot S&D, on the client PCs on my network.
So it seems, from what you say, MAS is a mixed bag. We will need to try it on more infected PCs to get a better idea, of how useful MAS is.
:-) Jay
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-07-2005 12:51 PM
тАО01-07-2005 12:51 PM
Re: Microsoft Windows Anti Spyware Beta released
In fairness to MS, it is only Beta1 software. They still have time to mess it up some more. ;-)
I ran it on 2 machines so far. Ran clean on my nephew's and on mine flagged only one item, RealVNC. It did however offer pretty good text describing how RealVNC is not truly malicious unless you're not aware that it's on your system. I haven't been able to run it on an infected system yet.
Make a great day!
Roger
Roger
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-10-2005 03:44 AM
тАО01-10-2005 03:44 AM
Re: Microsoft Windows Anti Spyware Beta released
So what I say so far, MAS is a useful tool, but it does not put our other tools out of business.
MAS did prevent http://seeq.com from changing the IE home page. MAS gives a popup dialog 'are you sure you want to allow this?' so you click the 'block' button.
:-) Jay
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2005 11:40 AM
тАО01-12-2005 11:40 AM
Re: Microsoft Windows Anti Spyware Beta released
It seems like every day I get a call from someone on my network who is reporting either unusual popups, or general slowness with a lot of unusually heavy HDD activity.
I don't think it is worthwhile to run *any* of our anti-spyware tools in normal winXP mode. My current strategy is to first update the following in normal winXP mode: Spybot S&D, Ad-Aware SE (with the VX2 plugin), and MAS. Then reboot into Safe Mode to run the scans. Then scan with HJT v1.99.0.
One thing I do like about MAS: When you first run it, MAS will give popups asking if various changes are to be allowed or blocked, and then MAS will remember those choices. Realtime detection/blocking and automatic definition updates are critical, and MAS does a good job with these features. Antispyware software needs to be as transparent as possible to the user, like AV software currently is.
Lately I have been seeing a lot of CoolWWWSearch.Yexe. CWShredder does not detect it, but our ordinary tools detect and remove it *when*run*in*safe*mode. CWS does not give annoying popups, but it does give heavy HDD activity, especially at logon.
:-) Jay
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2005 07:55 PM
тАО01-12-2005 07:55 PM
Re: Microsoft Windows Anti Spyware Beta released
http://langa.com/newsletters/2005/2005-01-13.htm#2