Windows spyware removal tool...

Wertz

Well ike any other XP user I've been getting a d/l of this from the windows update site every month since it went live....but I've yet to see it either run or show any evidence that it even does anything....the onscreen message says it will run when it finishes d/ling, but all I see is a message telling me the d/l has finished.

Does this thing run in the background and only inform you if it's found something? Or does it just run in the BG and not even tell you if it's found and/or removed spyware? Or does it have to be manually launched or what?
I'm fairly fastidious about running a check every week, so tende to be relatively free of spyware but I've also read that this tool is very good at what it does, so I'd like to know if it's actually doing what it should be doing....any help much appreciated as usual.

Fanny Cradock

are you talking about windows antispyware beta? if so, dont bother as it's a pile of crap!

after running about 20 scans it has found only 3 pieces of spyware. that's probably 50 times less effective than spyware doctor.

Wertz

Maybe I am, maybe I amn't....this is something that comes in every month or so on an automatic windows update...and seemingly never does anyhting (which I'm assuming is good since it might mean I have no infection?)
ILike I said I already run spybot and adaware once a week so I think I'm relatively okay....just more curious than anything...

aidan_walsh

Malicious Software Removal Tools homepage.

Microsoft wrote:

The Microsoft Windows Malicious Software Removal Tool checks computers running Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any infection found. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed.

Microsoft releases an updated version of this tool on the second Tuesday of each month, and as needed to respond to security incidents. You can run the tool from this Web page anytime or download it to your computer.

Wertz

Ah...good spotting aidan; 0/10 for reading comprehension on my part ...but, um, doesn't even basic AV s/w packages stop the like of the worms mentioned above?
I assume the lack of any alert means my machine is clean though, which I spose is the most important thing

atheist

The two I recommend are spybot from http://security.kolla.de and adaware from http://lavasoft.de
Both coexist with what Microsoft got and crippled from Giant software, (removing kazza detection) and each other. You may want to tone down the alerts in each not to worry about cookies.

John R

Wertz wrote:

Maybe I am, maybe I amn't....this is something that comes in every month or so on an automatic windows update...and seemingly never does anyhting (which I'm assuming is good since it might mean I have no infection?)
ILike I said I already run spybot and adaware once a week so I think I'm relatively okay....just more curious than anything...

It has to be set to scan, either manually or as a set event. It doesn't scan automatically everytime it updates.
From what I recall (I deleted the rotten prog ages ago after it "expired" and froze up one of my PCs on startup) it was a system hog so if it is running you will know about it.

AdAware, Spybot S+D and Spyware doctor are better, run at least two of them regularly and delete the Microsoft rubbish would be my advice.

Another thing I highly reccommend is to turn on the Spybot S+D Resident, it is included in the main program. It stops blacklisted progs installing and locks down the registry, anytime a program tries to alter the registry you get a warning and can decide to allow the change or not. Better to stop the nastys before they get on your system in the first place.

aidan_walsh

Wertz wrote:

Ah...good spotting aidan; 0/10 for reading comprehension on my part ...but, um, doesn't even basic AV s/w packages stop the like of the worms mentioned above?
I assume the lack of any alert means my machine is clean though, which I spose is the most important thing

Many packages would remove those alright, but lets face it, Joe Sixpack isn't going to update his definitions unless he has a reason to, in which time its too late. The thinking at MS with this is that Windows Updates are usually set on by default, and Windows will bitch and moan like a motherf... if it isn't (I know, I have it off, preferring the website update). Of course, as John pointed out, it doesn't scan by default, so its of little benefit that way either. They can always point to it as being their little measure though.

John R

aidan_walsh wrote:

They can always point to it as being their little measure though.

Of course if they just fixed the gaping holes in their sh1tty browser in the first place... :mad:

Wertz

John R wrote:

Of course if they just fixed the gaping holes in their sh1tty browser in the first place... :mad:

Microsoft have a browser?

As for automatic...with dsl you don't notice it d/l in the background. I had it turned off back in 56k land...memories of d/ling sp1 on dial-up...

smeggle

John R wrote:

Of course if they just fixed the gaping holes in their sh1tty browser in the first place... :mad:

They supposedly have in I.E. 7.0 (Guffaws) I had my mate who's a microgeek extaolling it's virtues the other day - It even has 'Tabbed' browsing says he! I was sort of respectfully "WoW! How cool - we;ve been using them in FF for .... like as long as I can remember...

He has as a beta release (Get's all these weird discs every month being a Certified microgeeker )

As to ms anti spyware? Hasn't been around near long enough to be trusted and considering microsofts track record in these areas nor would I be trusting it any time soon. (Tested it and failed it in less than 30minutes).

Spybot and Ad-Aware have proven to be consistant leaders in this area. Best to use the tried and trusted I reckon, than chance microsoft beta 'have a go hero' stuff IMO.