Text 65742, 96 rader
Skriven 2011-06-05 20:34:00 av Ed Vance (6633.windowsa)
Ärende: MSERT.EXE
=================
I ran the Microsoft Safety Scanner (MSS) program overnight and found out
that it showed some programs it thought were infected.

Some of the programs were ones that the web site I downloaded it from
says it would come up as a False Positive when the computer is scanned.
I remember reading about that when I downloaded a program from Nirsoft.

One in the listing that took me by surprise was SIW-SETUP.EXE which the
scanner says has Adware:Win32/OpenCandy.

WOW!, I wonder if Jean knows of this?

Here is the list of what MSS found as Potentially unwanted software:

RemoteAccess:Win32/TightVNC        CROSSLOOPSETUP.EXE

Adware:Win32/OpenCandy             SIW-SETUP.EXE

Joke:Win32/Kokegift.A              GIFT.EXE

HackTool:Win32/Passview            NIRSOFT_PACKAGE_BETA_100.ZIP

HackTool:Win32/Fgdump              OPHCRACK-WIN32-INSTALLER-3.2.1.EXE

HackTool:Win32/Fgdump              OPHCRACK-WIN32-INSTALLER-3.2.1.EXE

I didn't select any of the files to be deleted but after I clicked on
the Next button the next screen showed this:

Malware                                 Scan results
-------                                 ------------

Spyware:Win32/Aureate                   Partially removed

TrojanClicker:Win32/Yabector.gen        Partially removed

Adware:Win32/OpenCandy                  Detected, not removed

HackTool:Win32/Fgdump                   Detected, not removed

HackTool:Win32/Passview                 Detected, not removed

HackTool:Win64/Fgdump                   Detected, not removed

Joke:Win32/Kokegift.A                   Detected, not removed

RemoteAccess:Win32/TightVNC             Detected, not removed

I noticed the first two items were Partially removed automatically by
MSS without alerting me beforehand.

After I d/l CROSSLOOPSETUP.EXE on 7/31/2008, I d/l RCSETUP117.EXE and
UBUNTU fEISTY.HTM that day also.

Sometimes I read about a program and d/l it but don't install it.

I checked the Program Files directory but it doesn't have any programs
on that date in the listing, so I don't think I Ran either of those two
.EXE files.
The two filenames aren't listed in Program Files either.

Ilooked around Program Files for the other filenames and only SIW was
found.

The program GIFT.EXE was dated 2/10/1999 and was sent to me as a joke
from one of my friends.

It offers to present a Coaster for my soft drink, when I click on the
button it makes the CD Tray open up on the Desktop computer.  ;-)

I d/l the Nirsoft file on 4/16/2010.

I d/l Ophcrack on 4/29/2009 after reading about it.
IIRC it is a program to help find the Password on the computer when
someone has forgotten it.
I might be wrong but that is what I think I d/l it for.

After I viewed the second listing I clicked on the link that said:

For further assistance, please ask the community or submit a support
case.

I decided to submit a support case but to my surprise instead of a
screen where I could type my comments about MSS to Microsoft it was some
kind of Chat Room thingy where I could select who I wanted to Chat with
from Microsoft Support.

After seeing that I closed the Tab in FireFox for that session.
Bah Humbug!

I don't believe I will d/l and run MSS anymore ever again.


 * SLMR 2.1a #T348 * Laughter: The no side-effect tranquilizer.
--- SBBSecho 2.12-Linux
 * Origin: telnet & http://cco.ath.cx - Dial-Up: 502-875-8938 (1:2320/105.1)