Using on an already spyware infected client but nothing detected !

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Recently tried to help a collegue who had a client with a number of spyware
infections including Popuper, trojan.zlob, sdbot. Unable to access MS Live
scan site due to IE hijack, so cleaned hosts file and IE caches, ran Mcafee
stinger and then installed defender from CDROM and updated, but the scans did
not detect the spyware. Installed Webroot which did detect the infections.

Am a bit concerned that defender didn't work. Whats the best way to use
defender in the infected senario and is there alternative live scan urls
 
The Microsoft Malicious Software Removal Tool distributed monthly as a
critical update removes two of the infections you mention.
http://www.microsoft.com/security/malwareremove/families.mspx

Since there is no list of malware that Defender does detect/remove, I'll
leave that comment for Microsoft. You might indicate to them what OS your
on and what level of Defender you have installed from Help/About.

Current versions:
Windows Defender Version: 1.1.1347.0

Engine Version: 1.1.1481.0

Definition Version: 1.14.1515.17
 
Defender may still have a limited signature library, so anything is possible.
I would have recommended running a HJT! analysis before expecting *ANY*
spyware scanner to identify and/or remove whatever might ail your system.

As far as other online scanners, here is a tidy assortment of tools to
assist anyone who is serious about keeping their system clean and secure:

http://SecorConsulting.net/pages/security.html

The site also has a comprehensive checklist for CIS Security Benchmarks for
XP and an assortment of Identity Theft Prevention measures.
 
Back
Top