Symantec CE can't get rid of SPYWARES??

[ABAMOTO]

I have an user who once was infected with spywares. I used Ad-aware and Symantec to scan and clean the computer. Everything seemed fine until later...

After the next weekly scheduled scan was done on that user's computer, many spywares were found (some repeated and some new)again! I went to Scan History (from Symantec System Center) trying to remotely delete the spywares and it would tell me that the file cannot be located or cannot be deleted, etc.

Sometimes I would perform a manual scan right after the scheduled scan (which would found threats). However, no spyware was detected from the manual scan.

Did Symantec clean all that user's spywares after each scheduled scan, or basically the spyware was never gotten rid of from the root?

 

[Auger282]

spyware isnt always easy to remove.

http://www.microsoft.com/spyware

Try the spyware forum

 

[darksasami]

SAV 9 can identify spyware, but it doesn't have a lot of functionality for removing it. Last I heard, they're working on a new version with more spyware removal features.

Hanlon's Razor: Never attribute to malice that which is adequately explained by stupidity.

 

[rwullems]

should be included in version 10, soon to be released I believe.

Robert Wullems
Network Specialist
SCP/SCE/SCM/CNX/MCP/MCSA/Network+/CNA
***************************************
If you can Sniff it, you can solve it!
***************************************

 

[ABAMOTO]

Thanks for the input.
However, the main point is not about removing them, but identifying them.

Currently my spyware just comes and goes from that user's machine (scanned by SAV). Is there a bug from SAV or the spywares were killed but they just replicated themselves from time to time??

 

[glacierxx]

Use SpyBot, it works great

"evil prospers when good men do nothing”