Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Another Antispyware = Another Attack Or Fp?


  • Please log in to reply
6 replies to this topic

#1 donp3

donp3

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:40 PM

Posted 16 January 2008 - 07:00 AM

Hi, I have been using spybot + spynomore + NAV for many months now. After I posted about Saudi hackers on here, I got an all clear from Panda Active scan and all other scans using my other software proved negative, (has they have for some time BTW).

Reading other threads here led me to download Xoftspy as it was voted the no. 1 free download recently. Surprise surprise, I have been infected with CWS Oslogo, a very high risk and if I pay 40USD it will be removed.

Can anyone tell me if this is genuine, and why do my other scans not show anything? As soon as I try something new I have another threat that only they can remove. It's so frustrating.

(Edited to include this) A free scan by spyware doctor shows 6 threats and 40 infections, including trojan-pws tanspy, and rogueantispyware.malwaredestructor.

Regards, Don.

Edited by donp3, 16 January 2008 - 09:15 AM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,051 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:40 PM

Posted 16 January 2008 - 09:15 AM

XoftSpy is a program that was previously listed as a rogue product on the Rogue/Suspect Anti-Spyware Products List because of concerns with False positives, questionable license terms, and the use of aggressive, deceptive advertising, including exploitation of the name "Spybot". It has since been delisted but in my opinion it is not a very effective program compared to others with a proven track record like those mentioned in BC's List of Virus & Malware Resources or one of the other Trustworthy Anti-Spyware Products.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 donp3

donp3
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:40 PM

Posted 17 January 2008 - 06:37 AM

Thanks quietman, I am now using spybot, NAV, + I have been experimenting with other freeware like Spygaurd + Spywareblaster. They all give clear results, but a free scan from Spyware doctor shows 1 registry item infected with Trojan-PWS.tanspy. Should I believe this IYO? I think I'm obscessing a bit, but want to be sure.

Regards, Don.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,051 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:40 PM

Posted 17 January 2008 - 07:57 AM

Spyware Doctor is a Trustworthy Anti-Spyware Product but any of these programs can be prone to an occassional false positive. However, I'm more inclined to trust SD and would allow it to fix what it finds.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 donp3

donp3
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:40 PM

Posted 18 January 2008 - 02:41 AM

Thanks again quietman, Just to push my luck one last time. Superantispyware only picked up tracking cookies, and nothing in the registry. I'm happy to pay for spyware doctor on your recommendation, but it's the only software out of the 8 I've tried that detects a potentially malicious trojan, and it's the only one that wants cash to remove it. I would appreciate your thoughts/advise before making the final choice.

Best regards, Don.

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,051 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:40 PM

Posted 18 January 2008 - 08:24 AM

You should have at least one anti-malware tool that offers real time protection. SD is one such program, Counterspy is another and there are others. In your case here, SD is not finding a trojan (phyiscal file) so there is no active infection to be concerned about. SD is finding a registry entry which is probably just a remnant left over after your cleaning.

Even if you invest in SD, be aware that no single product is 100% foolproof and can detect and remove all threats at any given time. The security community is in a constant state of change as new infections appear. Each vendor has its own definition of what constitutes malware and scanning your computer using different criteria will yield different results. The fact that each program has its own definition files means that some malware may be picked up by one that could be missed by another. Thus, a multi-layered defense using several anti-spyware products (including an effective firewall) to supplement your anti-virus combined with common sense and safe surfing habits provides the most complete protection.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 justjustin

justjustin

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:12:40 PM

Posted 04 March 2008 - 01:21 PM

I don't know about NAV, I have not use it yet so I am not confirmed it is genuine or not, but be aware from rogue antispyware, I have used 'Adware Alert' from www.adwarealert.com and this is really bad, they can not check my system properly and not working well :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users