Ineffective Spyware removal

[Guest]

I've downloaded the latest version of AntiSpyware. When I perform a scan,
the program detects about a dozen spyware items. I then remove all these
items and reboot my computer.
But after I reboot and run a new scan, all the same spyware items are still
there. Additionally, the program indicates that I've never conducted a scan
before. I've tried performing this whole process several times without
success. I'd appreciate anyone's help in resolving this matter. Thanks.

 

[Guest]

Hi Mark:

Try running it in Safe mode as some spyware can re-install itself more
readily from full mode.

 

[Bill Sanderson]

Please try the following:

1) update both Microsoft antispyware and your antivirus application. The
last Microsoft antispyware update was about a week ago--so it is possible
we'll get another tonight, but I don't think I'd wait.

2) restart Windows in safe mode--by pressing the f8 function key before the
first Windows screen appears when rebooting or starting up

3) log in as administrator. If you are on XP Home, and have never used this
account, it probably has a null password--just hit enter. (No--this is not a
security issue for reasons I won't go into in this message.)

4) Scan, doing full deep scans with Microsoft Antispyware, and also scanning
with your antivirus--until a complete scan with each app comes through
clean.

If you don't have a resident antivirus that is kept up to date, you may want
to consider restarting in safe mode with networking, and doing a full scan
with a reputable online scanner:

http://safety.live.com (Microsoft--choose the full protection scan)
http://housecall.trendmicro.com (Trend Micro.)
http://security.symantec.com (Norton/Symantec)

It isn't impossible that you'll go through this process and still find you
have problems left behind--but that's how I'd start. I understand that the
product doesn't tell you to do this--but it really does help--in safe mode,
a number of startup vectors are not processed, so some of the less
well-designed spyware and viruses are not running, leaving them easier to
clean.

 

[Guest]

Bill

Thanks for the instructions below. I think it will help me too. But do I
need to install the Antispyware in safe mode to run it in safe mode? The
antispyware doesn't want to run in safe mode and is giving up various error
messages.

Zen

 

[Bill Sanderson]

It actually can't be installed with the standard services running in safe
mode. However, if installed in normal mode, it should run fine in safe
mode.

I'm not certain whether the error messages you are seeing indicate a problem
with Microsoft Antispyware, or interference by active malware with its
operation.

I'd recommend going for additional help, I think. Ewido, Lavasoft's
ad-aware, Spybot Search & Destroy, Sysinternals RootKitRevealer, F-secure's
Blacklight beta are all tools that are free for individual use.

I see the blacklight beta has been extended 'til March of 2006--that's good
news.

Ewido
http://www.ewido.net/en/
ad-aware
http://www.download.com/3000-2144-10045910.html
spybot search & destroy
http://www.download.com/Spybot-Search-Destroy/3000-8022-10289035.html
RootkitRevealer
http://www.sysinternals.com/Utilities/RootkitRevealer.html
Blacklight
http://www.f-secure.com/blacklight/try.shtml

Some of these tools--RootkitRevealer, in particular, may take some advice or
reading of the help files to interpret the results.

--