Re: Searchwww - Final Thread?



Hi Panda_man.

First, thank you for all your help.

Spybot has an advanced mode that has a lot of features. If you switch to
advanced mode it actually warns you that the settings can do harm to your PC
if you do not know what you are doing. I used advance mode, underestimating
the harm it could do!

In advanced mode it has an application called "Tea Timer" which provides
real time protection against programs trying to change your system settings.
I used this mode thinking that the protection would be good. I liked the way
it notified me of all the registry changes that were going on and often
asked me if I wanted to allow the changes.

I think the problem occurred when a Spybot upgrade had a fault. The text of
the "allow" "prevent" buttons were 'hidden'. So when it caught a program
trying to do something good (remove a bad setting), it gave me the option to
allow or prevent the action. I think I got the buttons mixed up and pressed
prevent when I also had "remember this decision" checked. In effect I set
Spybot to prevent other applications from removing the Searchwww. I may not
have got the logic right in this explanation, but the effect was the same.

So every time Microsoft Antispyware tried to remove Searchwww, Spybot simply
restored the settings. I have turned off Tea Timer, and set Spybot to normal
mode.

One interesting offshoot of the HJT episode was my introduction to the
Killbox application that deletes hard to delete files and processes. It
looks like a very powerful (and dangerous) tool.

I did have one problem. The Active scan (remote scanning by Panda) was not
able to complete. I think Windows picked it up as a 'DEP'. So I am about 90%
through.

One of the greatest benefits for me has been all the learning I have
obtained.

I don't think anyone is measuring this, but the internet is expanding the
world's collective knowledge at a fantastic pace. If we could translate the
learning we obtain into creative applictions for each of our areas of
specialization, we could all be geniuses in our respective fields!

Anyway - back to reality.

Thanks again for everything.

....Tony
"Panda_man" <Pandaman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5B711DF7-2F75-4432-B7D5-4AD9C2F9E1E7@xxxxxxxxxxxxxxxx
> "tosime" wrote:
>
>> My apologies for starting a new thread on Searchwww. The previous threads
>> have become too unwieldy for me to work with.
>>
>> I have posted my HJT (Hijack This) log to one of the forums and a kind
>> person has helped me isolate the problem.
>>
>> It looks like a Spybot setting was restoring Searchwww each time
>> Microsoft
>> Antyspyware deleted it. I have corrected this (and other) items. Right
>> now I
>> am doing an Active Scan with a Panda utility. (Is this one of your
>> programs
>> Panda_man?)
>
>
> Panda_man >> No ,I am not a programmer and I don't write
> software.However,good choice for checking your computer for ALL kind of
> threats.
>
> I was wondering if you could share with me what this SpyBot S&D settings
> is
> that restores the malware?
>
> Prevention is always better than cure !
> In order to prevent from being infected , learn yourself (and everyone
> who
> uses the computer) how to protect your computer.
> http://free.hit.bg/fightmalware/homepage_en.htm
>
>
> Panda_man
> --
> Prevention is always better than cure !
> Panda TruPrevent - the most intelligent technology to combat unknown
> malware
> http://www.pandasoftware.com
> http://free.hit.bg/fightmalware/homepage_en.htm


.


Quantcast