Microsoft Antispyware Notice

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hey everyone, i was just wondering how i can turn this off without disabling
the real time protection. it pops up every few seconds and it's quite
annoying.

Thanks.
 
I think we need to see more about what the content of this message is.

I've seen this kind of post before--and one possible concurrent aspect is
that there may be a subdirectory of \program files\microsoft antispyware
which is filling up at a rapid rate with blocked files of some sort.

One possibility is that you have something in place that needs cleaning, and
one step towards doing that would be to restart Windows in safe mode by
pressing the f8 Function key before the first Windows screen appears, and
doing full, deep scans with Microsoft Antispyware until a scan comes through
clean--additionally, scanning with your updated antivirus is also a good idea.

But--see if you can tell us more about what the notice says--then we may be
able to give more accurate advice.
 
It just says:
An Application Change has been blocked.

Microsoft Antispyware has blocked a pissible Windows Trojan
C:\WINDOWS\svchost.exe from running.

Name: svchost.exe
File path: C:\WINDOWS\svchost.exe

This program was blocked based on your previous input.

i blocked it when i first downloaded it, and it won't go away unless i put
it on disable real time protection.
 
Jane - this is, indeed a trojan trying to take over your machine--you need to
get it removed--turning off the messages won't solve the problem.

There are a number of possibilties for the identity of the trojan. I would
recommend starting by doing what I mentioned before--update your antivirus,
and Microsoft Antispyware, then restart in safe mode, and scan with both,
until scans with each come through clean.

You should see messages indicating something being cleaned with the scans.
Let us know what happens--and whether these messages continue after this is
done--i.e. the safe mode boot and multiple scans until clean.
 
Bill said:
Jane - this is, indeed a trojan trying to take over your machine--you
need to get it removed--turning off the messages won't solve the
problem.

There are a number of possibilties for the identity of the trojan. I
would recommend starting by doing what I mentioned before--update
your antivirus, and Microsoft Antispyware, then restart in safe mode,
and scan with both, until scans with each come through clean.

You should see messages indicating something being cleaned with the
scans. Let us know what happens--and whether these messages continue
after this is done--i.e. the safe mode boot and multiple scans until
clean.

For those wondering why c:\windows\svchost.exe is a trojan is that the
system version of svchost.exe resides in
C:\windows\system32\svchost.exe;
C:\windows\ServicePackFiles\i386\svchost.exe;
C:\windows\system32\dllcache\svchost.exe.

Q
 
For those wondering why c:\windows\svchost.exe is a trojan is that the
system version of svchost.exe resides in C:\windows\system32\svchost.exe;
C:\windows\ServicePackFiles\i386\svchost.exe;
C:\windows\system32\dllcache\svchost.exe.
Thanks!
 
Thank you, I will definitely try that.

While I'm on here, I have another problem. When I'm trying to check my
e-mail or do what ever on the internet, my Internet Explorer would just
randomly close down. Then sometimes I would get this error message before it
closes down. I don't know exactly what the message said, but I can post that
later when I get the message again.

-Jane
 
Here's what it said....

Error caused by Hewlett-Packard Company: No specific solution found

Thank you for submitting an error report.

Problem description

An analyst at Microsoft has investigated this problem and determined that an
unknown error occurred in HP OfficeJet COM Event Manager. This software was
created by Hewlett-Packard Company.

Solution

Microsoft has researched this problem with Hewlett-Packard Company, and they
do not currently have a solution for the problem that you reported. Below is
a list of recommendations to take that may help prevent the problem from
recurring.

Contact Hewlett-Packard Company for support or product updates.

maybe i should contact HP?
 
This behavior could be caused by spyware or other malware which attaches
itself to Internet Explorer, and is not well-written (which is typical.)

Getting the system cleaned up is the first priority, then we can see whether
this behavior goes away, or whether further work might be needed.

--
 
Compartmentalizing--i.e. looking at this message completely separately from
the other issue, this is what I would do:

Assuming that you do, in fact, have an HP printer or other hardware
device--a scanner or camera, perhaps, with software installed on your
system?

I'd recommend downloading the latest drivers or software for that device
from www.hp.com and then either upgrading the current drivers, using the
downloaded file, or removing the current drivers or software, and
reinstalling from the download.

If you are up to it, you can try to verify whether what exists at the
download site is, in fact, newer than what you have installed. Uninstalling
and then reinstalling is more likely to fix problems with the drivers, but I
can't say for certain that you won't lose something in the process--not sure
what devices or software might be involved.. An update should be safe.


--
 
Back
Top