falure to detect spyware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have just installed Windows Defender Beta(2), downloaded on another computer.
I know that lsass.exe & scvhost.exe have both been active on my computer
recently. Zone Labs foirtuanlty blocking them for the most part. Internet
searches sugest these are both spyware.
Scanning with Defender it finds something called Host which I instructed it
to remove, but found nothing else!
Also clikcing on 'View More information about this item on line' just goes
to the page that I downloaded Defender from, no information what so ever.
 
Pete said:
I have just installed Windows Defender Beta(2), downloaded on another
computer.
I know that lsass.exe & scvhost.exe have both been active on my computer
recently. Zone Labs foirtuanlty blocking them for the most part. Internet
searches sugest these are both spyware.
Scanning with Defender it finds something called Host which I instructed
it
to remove, but found nothing else!
Also clikcing on 'View More information about this item on line' just goes
to the page that I downloaded Defender from, no information what so ever.
Click to expand...

lsass.exe and scvhost.exe are both windows xp files.
 
Svchost.exe is a Windows XP program; sCvhost.exe had been detected in the
past as a counterfeit infection.
 
Pete - both the files you name can be important and legitimate parts of
Windows.

The key question is their location.

Spyware executables have used both names, but such executables have to live
somewhere else than where the real ones belong. Here's what I see on my XP
SP2 machine--if this matches yours, I wouldn't worry about them:

Directory of E:\WINDOWS\ServicePackFiles\i386

08/03/2004 11:56 PM 13,312 lsass.exe
1 File(s) 13,312 bytes

Directory of E:\WINDOWS\system32

08/03/2004 11:56 PM 13,312 lsass.exe
1 File(s) 13,312 bytes


Directory of E:\WINDOWS\ServicePackFiles\i386

08/03/2004 11:56 PM 14,336 svchost.exe
1 File(s) 14,336 bytes

Directory of E:\WINDOWS\system32

08/03/2004 11:56 PM 14,336 svchost.exe
1 File(s) 14,336 bytes
 
Back
Top