One of my users did this as well, but it was late last year, so I was able to clean it using Vipre. Have you tried a scan w/ Vipre in Safe Mode?
Sean Rector, MCSE From: Cesare' A. Ramos [mailto:[email protected]] Sent: Wednesday, January 14, 2009 2:49 PM To: NT System Admin Issues Subject: ?? on Spyware 2009 I know this is not the Vipre nor CounterSpy thread but wanted to get feedback from others on this one. We had a system that was running CounterSpy and had the latest patches but the all wise user that was using it, somehow chose to installed Spyware 2009 as they made the decision they were not protected. The application installed and Counterspy was disabled. That is where it began.. We tried some scans with the machine being up using CounterSpy, Vipre, and Malwarebytes. We came across different issues. We made the decision to pull the drive and run the scans from a host system with the drive connected as a slave. Vipre found some issues and addressed them. We then ran Malwarebytes and more malware was found including Spyware 2009. We reran Vipre but reported that all was clean. We ended up using Malwarebytes and all was cleaned. I understand that there is no silver bullet but I would think that if Vipre found Spyware 2008, which was also on the system, it should have atleast found Spyware 2009. Thoughts.. Has anyone come across the Spyware 2008 / 2009 or Anti-Virus 2008 / 2009 family? CAR ________________________________ This e-Mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-Mail in error please notify the sender via returned e-Mail. Please note that any views or opinions presented in this e-Mail are solely those of the author and do not necessarily represent those of the company. Although IDF operates anti-virus programs, it does not accept responsibility for any damage whatsoever that is caused by viruses being passed. ** Think before you print this message. ** > 2008-2009 Season: Tosca | The Barber of Seville > Recently Announced: Virginia Opera's 35th Anniversary Season 2009-2010 Visit us online at www.vaopera.org or call 1.866.OPERA.VA This e-mail and any attached files are confidential and intended solely for the intended recipient(s). Unless otherwise specified, persons unnamed as recipients may not read, distribute, copy or alter this e-mail. Any views or opinions expressed in this e-mail belong to the author and may not necessarily represent those of Virginia Opera. Although precautions have been taken to ensure no viruses are present, Virginia Opera cannot accept responsibility for any loss or damage that may arise from the use of this e-mail or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
