Bill Sanderson
I now find that the agents are seemingly working OK but
the problem in respect of creating winlogon.exe etc still
in evidence. I have just had a red WARNING Microsoft
Antispyware Alert that "MULTIBOT PRO DISABLER IS TRYING
TO INSTALL" I clicked on the Removal icon and it was
displayed that the threat was being removed. The
suggestion followed that one should run Antispy to ensure
that all bits are removed. I ran Antispy and it followed
through but reported no problems, despite the red warning
coming up again whilst Antispy was running. I now find
that I am unable to remove the red warning and all this -
while the telephone cable was disconnected due to
impending electrical storms.
Any suggestions as I am unable to remove the Red Warning
-----Original Message-----
BINGO!! We have lift off Houston. thanks for the prompt
reply.
Agents now activated, but can still change the Web
homepage and create a folder called winlogon.exe without
any response from Antispy. Could this be a separate
problem?
Regards
-----Original Message-----
Ah--thanks--I think that rings a bell for me.
try this fix, and sorry for being slow on the uptake:
------------------------------------------------------ --
-
-
We believe we have a workaround which is better than
installing the VB6 SP.
Can we have users who experience this problem try the
following:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll"
(without the quotes).
3) Close and re-open Windows AntiSpyware
Please let me know if this is working.
--
-steve
Steve Dodson [MSFT]
MCSE, CISSP
PSS Security
--
This posting is provided "AS IS" with no warranties,
and
confers no rights.
Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm
Note: For the benefit of the community-at-large, all
responses to this
message are best directed to the newsgroup/thread from
which they
originated.
--
message
I have uninstalled Antispy using Add/Remove, manually
removed the programme directory, used Reg Cleaner to
remove remnants from registry and CCleaner to tidy up.
Downloaded the latest version of Antispy and re-
installed. On the Real Time Protection Page it shows
the
Agents, Internet, System and Application as being
active
but with no checkpoints being displayed (as opposed
to
my
other two PC's which show 9, 25 and 25 checkpoints) If
you hover the mouse over each of the Agents it
displays a
dialogue box showing current status - Active but the
Activate and Deactivate checkboxes are greyed out. If
you
then click on Manage Agent settings it takes you to
yet
another dialogue box but there are no checkpoints in
these. On both of my other PC's it displays the
checkpoints and their function.
Despite all the changes I have made from the outset
this
is as previously experienced. The only programmes
offering protection as I see it are Norton Firewall
and
Norton Antivirus. If you can suggest any other type of
programme that may be causing the problem I would be
grateful for advice, although both of my other PC's
are
running virtually the same programmes.
Any help in resolving this would be appreciated as I
feel
that Antispy could be worth the trouble
-----Original Message-----
The normal uninstall/reinstall operation leaves behind
many files.
Here are two other options which may work better, for
various reasons. You
may already have tried them--if so, tell us.
1) update install. Control panel, add or remove
programs, Microsoft
Antispyware, change, update
then re-test
2) If that doesn't do the job uninstall, then delete
the
installation folder
and any subfolders. Then reinstall
Do you have any other programs providing active
protection that might
interfere with setting up new startup entries?
--
message
Bill Sanderson
I have tried the test as you suggested i.e. Create a
directory called winlogon.exe and it was created
with
no
response from MS Antispy which confirms that it it
is
not
functioning. As before I have uninstalled and re-
installed sevarl times, all with the same result. I
would
appreciate any further comments.
-----Original Message-----
Wunay - I believe I have answered this question--
probably in a different
group. If you post the same question multiple
places,
it creates extra
work--both for those who answer, and you, in trying
to
find the answer.
Here's my current test:
Go to a command prompt in the Windows (or WINNT)
directory.
md winlogon.exe
(i.e. create a directory called winlogon.exe)
Within 15 seconds, you should get a red alert
message
from Microsoft
Antispyware. I've verified this on the newest
definitions available at this
writing.
You can choose either choice in the dialog box--
neither
will do anything
good or bad.
the command:
rd winlogon.exe
will remove the directory created, and eliminate the
prompts from Microsoft
Antispyware.
--
in
message
Bill Sanderson
In an earlier forum it was stated that Antispy
never
seemed to catch anything and the way to check as
to
it
working correctly was to change your home page and
see
if
Antispy advised you of that change. My main PC
does
not
indicate that change whereas both of my other PC's
informed you of the change. I have removed Antispy
using
Antispy/Uninstall and removed its directory
manually
as I
believed that it had left some bits behind. Upon
re-
installing I have the same scenario in that I can
change
the homepage without comment from Antispy. Antispy
never
seemed to have detected any problems previously at
any
time. Question - What way is there to remove
Antispy
completely alternatively is there any other way of
checking as to its working correctly?
.
.
.
.
