Author Topic: Microsoft AntiSpyware Beta1 scans forever  (Read 6241 times)

0 Members and 1 Guest are viewing this topic.

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Microsoft AntiSpyware Beta1 scans forever
« on: February 15, 2006, 10:32:17 PM »
I beleave I have some type of Spyware/Adware that has snuck past Norton Internet Security and MS AntiSpy Beta.

Main symptom: Random new browser windows opening with ads at random times but usually associated with a mouse click on an existing page.

Secondary symptom/issue: MS AntiSpy scans won't complete. It scans files than never finishes looking for hidden files/Scan for Browser Hijackers.

Other suspicious activity: Once and a while shutdown will be halted because a program names GIANTAntiSpyWare (or something similar) can't be closed.

Any suggestions appreciated.

Offline mitch

  • Hero Member
  • *****
  • Posts: 729
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #1 on: February 16, 2006, 01:18:20 AM »
hummm

GIANT anti spyware is what microsoft anti spyware is ( they bought them up and just a quick rename and some windows flavor)

so it looks like there might be a problem with your ms anti-spyware?

when did you update it last( the program) and are you current on the latest dat file?


might uninstall and re install it and see what happens?

NOTE: on the scan forever...how long did you give it?, and were you OFFLINE with other programs shut down ( norton stuff for sure)
and try a full scan?

Offline Aaron Hulett [MSFT]

  • Web Server Manager
  • Administrator
  • Hero Member
  • *****
  • Posts: 1098
  • I take the bus!
    • Microsoft Corporation
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #2 on: February 16, 2006, 01:21:18 AM »
You may wish to try our latest beta of Windows Defender, available at

http://www.microsoft.com/athome/security/spyware/software/default.mspx

This replaces Microsoft Antispyware (Beta).

Aaron
Aaron Hulett | Malware Protection Center | Microsoft Corporation
This post is provided "AS IS" without warranty, and confers no rights.

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #3 on: February 16, 2006, 03:11:10 PM »
hummm

GIANT anti spyware is what microsoft anti spyware is ( they bought them up and just a quick rename and some windows flavor)

so it looks like there might be a problem with your ms anti-spyware?

when did you update it last( the program) and are you current on the latest dat file?


might uninstall and re install it and see what happens?

NOTE: on the scan forever...how long did you give it?, and were you OFFLINE with other programs shut down ( norton stuff for sure)
and try a full scan?

Forever = >6 hours

Looks like I'll unistall and try the new Beta.

Offline mitch

  • Hero Member
  • *****
  • Posts: 729
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #4 on: February 16, 2006, 05:09:00 PM »
the new beta works great for me!
it speeded up- the time from boot to when i can click on the desktop
Quote
when did you update it last( the program) and are you current on the latest dat file?
that's what i wanted ot see what version you had, yep upgrade it

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #5 on: February 17, 2006, 08:54:51 PM »
The new beta finished the scan in record time. Found nothing. I still think I have some sort of mal ware hiding in IE though.

Should I look to any other anti-adware/spyware programs?

Kind of ticked at myself for getting infected. Doubly ticked that neither Norton or MS can find/fix it.  :(

Offline JOSEPH

  • Blogging In 2006
  • Full Member
  • ***
  • Posts: 148
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #6 on: February 17, 2006, 09:35:15 PM »
You may wish to try our latest beta of Windows Defender, available at

http://www.microsoft.com/athome/security/spyware/software/default.mspx

This replaces Microsoft Antispyware (Beta).

Aaron

That's great news plus encouragement  :thumbsup: I also like to suggest that i hope Microsoft also soon considers getting involved on HIPS development of these security solutions soon. They seem to perform exceptionally well as concerns some prevention methods of things from some of my early examinations of them.

Offline mitch

  • Hero Member
  • *****
  • Posts: 729
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #7 on: February 17, 2006, 10:13:37 PM »
dnakase

might click on my signature?
go to the newbie/oldie page and look at "spyware tools"  (free)

and use ccleaner ( do not use the "exceptions" part)
and when was the last time you ran a "error check" or "de-frag" on the system?

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #8 on: February 18, 2006, 06:14:40 AM »
dnakase

might click on my signature?
go to the newbie/oldie page and look at "spyware tools"  (free)

and use ccleaner ( do not use the "exceptions" part)
and when was the last time you ran a "error check" or "de-frag" on the system?

Ran an error check this morning. Was waiting for a l-o-n-g weekend to run de-frag.

Thanks for all your help so far.

Offline Aaron Hulett [MSFT]

  • Web Server Manager
  • Administrator
  • Hero Member
  • *****
  • Posts: 1098
  • I take the bus!
    • Microsoft Corporation
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #9 on: February 19, 2006, 06:32:46 PM »
What malware do you have that we didn't detect?  Any info you have (and files, too) is most helpful.

Thanks,

Aaron
Aaron Hulett | Malware Protection Center | Microsoft Corporation
This post is provided "AS IS" without warranty, and confers no rights.

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #10 on: February 20, 2006, 04:10:29 PM »
In all fairness, Norton did spot something called Winres32.exe. I thought I had delt with  it correctly, but I still to this day get new IE windows with random advertisements. That's why above all I attribute my woes to the BrainDeadUser (Me).

Some seem to be context sesitive. Some of the sites called up in this way are:

www.winfixer.com
www.sexbuddies.com
www.mp3sugar.com

(these I now have in my Restricted Sites list)

Just to name a few. 

I scanned my system after installing Windows Defender and came up clean. Friday night Norton's scan came up clean. Installed CCleaner ran it and I still get the random window w/ad in IE. It seems like more annoyance than anything, but I have no idea what if anything it is telling the world about my activities on this particular PC.

I don't use FoxFire often so I don't know if this effect that program but suspect not.

Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #11 on: February 20, 2006, 04:20:24 PM »
Here is a URL for an ad that opened just after I posted: http://homedraftbeersystems.com/

Don't know that any of this is helpful. Let me know what more I can do on my end.

Thanks

Online winchester73

  • Administrator
  • Hero Member
  • *****
  • Posts: 5124
  • Half a bubble off plumb
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #12 on: February 20, 2006, 05:40:59 PM »
Quote
Some of the sites called up in this way are:

www.winfixer.com
www.sexbuddies.com
www.mp3sugar.com

(these I now have in my Restricted Sites list)

Download HijackThis© Merijn from: http://www.thespykiller.co.uk/files/HJTsetup.exe .

This installer will put HijackThis onto your computer at C:\Program Files\HijackThis (it will make an entry in the Start menu and also provide a desktop shortcut).

At the download prompt, choose "Save". After the download is complete, navigate to the C:\Program Files\HijackThis folder and double-click it to complete the installation.

Double-click the HijackThis icon on your desktop. Choose "Do a system scan and save logfile". The log will open in Notepad and you can copy/paste it here.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member



Offline dnakase

  • Newbie
  • *
  • Posts: 15
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #13 on: February 21, 2006, 02:20:05 AM »
OK, more evidence I'm kind of dense...

Started a full scan this am of Windows Defender, then had to leave for a job. My wife left the program open so I was able to see the results.

Nothing looked aims, but I noticed "review results of scan, so I click on it and find that "Windupdates.MediaGateway" was flagged as a high risk (or annoyance potential) so I clicked remove and it was removed successfully.

I hope this rids me of the ad ware menace!

Wish we could send the people who write these programs to Abu Grabe...

Offline JOSEPH

  • Blogging In 2006
  • Full Member
  • ***
  • Posts: 148
Re: Microsoft AntiSpyware Beta1 scans forever
« Reply #14 on: February 21, 2006, 05:29:49 AM »
Quote
Double-click the HijackThis icon on your desktop. Choose "Do a system scan and save logfile". The log will open in Notepad and you can copy/paste it here.


Good Morning and greets dnakase

If you could also post that hijackthis log Winchester73 ask from you it will help in determining if there are any other leftover files that might try to come back on you again.

WindowsDefender does admirably of course in identification plus the removals but also there can be very new entries that have yet to be identified that hijackthis might be able to flag in addition.

Thanks and best of luck for a clean machine again.