Spyware???

[[dnb]junglist]

Here are the results of a scan I just ran on Spybot:


--- Search result list ---
Windows Security Center.AntiVirusDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

WildTangent: Library (File, nothing done)
C:\WINDOWS\wt\WDInUsePlugin.dll

WildTangent: Library (File, nothing done)
C:\WINDOWS\wt\webdriver.dll

WildTangent: Global settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\WildTangent

WildTangent: Program directory (Directory, nothing done)
C:\WINDOWS\wt\

WildTangent: Program directory (Directory, nothing done)
C:\Program Files\WildTangent\

WildTangent: Program directory (Directory, nothing done)
C:\WINDOWS\wt\webdriver\

WildTangent: Program directory (Directory, nothing done)
C:\WINDOWS\wt\updater\

WildTangent: Program directory (Directory, nothing done)
C:\WINDOWS\wt\wtupdates\

WildTangent: Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\wtwebdriver

Windows Security Center.FirewallDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0


I'm not sure what the two "Windows Security Center" entries are - anyone know if this is spyware?

Thanks

[Martoch]

I assume this is XP SP2? It looks like you just have your antivirus/firewall notifications turned off in the Microsoft Security Center settings. Are they turned off? You know, the little yellow shield that appears in your system tray if you actually use that little annoying notification...you can go into 'change the way Security Center alerts me', uncheck the boxes.

If you're really concerned about spyware, try these if you haven't already:

Adaware
http://www.download.com/Ad-Aware-SE-...-10045910.html

Spy Sweeper
http://www.download.com/Webroot-Spy-...-10373771.html

Spyware Doctor
http://www.download.com/Spyware-Doct...-10377263.html

Microsoft Antispyware Beta
http://www.download.com/Microsoft-Wi...ml?tag=lst-0-1

A-Squared
http://www.emsisoft.com/en/software/download/

CWShredder
http://www.softpedia.com/get/Interne...Shredder.shtml

Ewido Security Suite
http://www.download.com/Ewido-Securi...-10326287.html



Install them, update them, reboot into safe mode, run complete system scans.
(Spyware Doctor, Spy Sweeper, and Ewido are trial versions, but are fully functional...just uninstall them when you're done scanning/removing spyware)

Report back with your findings.

Download HijackThis
http://www.merijn.org/files/hijackthis.zip

Run your results through both analyzers or post them here and somebody would probably do it for you.
http://www.techimo.com/forum/t137826.html


What all do you have starting up with Windows? You can run a simple startup detection program to help you find out.
Autoruns
http://www.sysinternals.com/ntw2k/fr...autoruns.shtml

[[dnb]junglist]

yes, sp2.

I do have the notifications turned off, but it's been that way for 6 months, since my last install. I wouldn't have thought much of it, if this had shown up then - maybe a spybot update???

Hijackthis and adaware show nothing out of the ordinary, so maybe that's all it is?

[Atomic Rooster]

That's odd SpyBot picked up the Windows Security settings. Never seen that one before. Try an update, it can't hurt.