MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

Anyone else getting this message from Microsoft AntiSpyware Beta1? (yeah,
it's misspelled "Personsal", not "Personal", just as in my title). Just got
this for the first time this morning. Far as I can tell, didn't do anything
different in past 24 hrs that would account for this. I'm wondering if an
MSAS update perhaps is creating a false positive, since the file it
complains about is:

c:\program files\spywareblaster\unins000.exe

SpywareBlaster uninstall program?!

TIA

Jim

Re: MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

Hi Jim.

I have seen this too, with Microsoft AnitSpyware Beta 1. It showed up
with my scan this afternoon.

Regards,
Canadian Cowboy


Jim wrote:
> Anyone else getting this message from Microsoft AntiSpyware Beta1? (yeah,
> it's misspelled "Personsal", not "Personal", just as in my title). Just got
> this for the first time this morning. Far as I can tell, didn't do anything
> different in past 24 hrs that would account for this. I'm wondering if an
> MSAS update perhaps is creating a false positive, since the file it
> complains about is:
>
> c:\program files\spywareblaster\unins000.exe
>
> SpywareBlaster uninstall program?!
>
> TIA
>
> Jim
>
>

Re: MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

>Jim wrote:
>> Anyone else getting this message from Microsoft AntiSpyware Beta1? (yeah,
>> it's misspelled "Personsal", not "Personal", just as in my title). Just got
>> this for the first time this morning. Far as I can tell, didn't do anything
>> different in past 24 hrs that would account for this. I'm wondering if an
>> MSAS update perhaps is creating a false positive, since the file it
>> complains about is:
>>
>> c:\program files\spywareblaster\unins000.exe
>>
>> SpywareBlaster uninstall program?!
>>
>> TIA
>>
>> Jim

(bottom-shifted top post)
On Fri, 22 Apr 2005 19:25:09 -0600, Canadian Cowboy
wrote:

>Hi Jim.
>
>I have seen this too, with Microsoft AnitSpyware Beta 1. It showed up
>with my scan this afternoon.
>
>Regards,
>Canadian Cowboy

I know I've heard not to post "me too's", but in this case it seems
appropriate. I'm getting the same warning from Microsoft AntiSpyware.
I can't think of anything I've done in the last few days that would
explain it.

I posted a message about this here:
http://communities.microsoft.com/newsgroups/default.asp?ICP= spyware
(Clcik on "Announcements" in the left navigation pane to see.)
This appears to have been undocumented other than in this thread.

Greg Conquest


------ Greg Conquest ------
http://gregconquest.com

(temporary sig test)
(IGNORE the e-mail addresses below)
spam_me_silly_8204@yahoo.com
wham_me_silly_8204@yahoo.com
(no replies to any mail sent here)
(if you want my *real* address)
(just check my web page)

Re: MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

Thanks guys, just wanted a sanity check, didn't even know the MSAS NG
existed, I'll check there next time. Apparently now a KNOWN false positive.

Jim


"Greg Conquest" wrote in message
news:cshj61htvm2eivej6on72ndl4a8931iiev@4ax.com...
> >Jim wrote:
> >> Anyone else getting this message from Microsoft AntiSpyware Beta1?
(yeah,
> >> it's misspelled "Personsal", not "Personal", just as in my title).
Just got
> >> this for the first time this morning. Far as I can tell, didn't do
anything
> >> different in past 24 hrs that would account for this. I'm wondering if
an
> >> MSAS update perhaps is creating a false positive, since the file it
> >> complains about is:
> >>
> >> c:\program files\spywareblaster\unins000.exe
> >>
> >> SpywareBlaster uninstall program?!
> >>
> >> TIA
> >>
> >> Jim
>
> (bottom-shifted top post)
> On Fri, 22 Apr 2005 19:25:09 -0600, Canadian Cowboy
> wrote:
>
> >Hi Jim.
> >
> >I have seen this too, with Microsoft AnitSpyware Beta 1. It showed up
> >with my scan this afternoon.
> >
> >Regards,
> >Canadian Cowboy
>
> I know I've heard not to post "me too's", but in this case it seems
> appropriate. I'm getting the same warning from Microsoft AntiSpyware.
> I can't think of anything I've done in the last few days that would
> explain it.
>
> I posted a message about this here:
> http://communities.microsoft.com/newsgroups/default.asp?ICP= spyware
> (Clcik on "Announcements" in the left navigation pane to see.)
> This appears to have been undocumented other than in this thread.
>
> Greg Conquest
>
>
> ------ Greg Conquest ------
> http://gregconquest.com
>
> (temporary sig test)
> (IGNORE the e-mail addresses below)
> spam_me_silly_8204@yahoo.com
> wham_me_silly_8204@yahoo.com
> (no replies to any mail sent here)
> (if you want my *real* address)
> (just check my web page)
>
>

Re: MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

Same here, showed up when ran MSAS beta on Friday night. I think maybe
it was added to their definitions in latest version. I had it in
backups.

I got rid of it by going to my computer, right click properties, system
restore and turning off system restore (otherwise anything in backups
will come back if you don't first disable restore).

Just to be safe I'd run SysInternals' Process Explorer to see what is
running in the background if you don't have some other way of checking
for keyloggers.

More spyware tips and product links at
http://www.thriftmeister.com/spyprotect.htm

Re: MSAS - "NS Keylogger Personsal Monitor (Key Logger)" Detected?!

I assume that some virus/trojan has not infect unins000.

Spywareblaster is a product that competes with their anti spyware
software. They probably want you to remove spywareblaster and use their
product instead to help strengthen their monopoly power. The best
solution is to repace your operating system with one from a different
company.

Jim wrote:
> Anyone else getting this message from Microsoft AntiSpyware Beta1? (yeah,
> it's misspelled "Personsal", not "Personal", just as in my title). Just got
> this for the first time this morning. Far as I can tell, didn't do anything
> different in past 24 hrs that would account for this. I'm wondering if an
> MSAS update perhaps is creating a false positive, since the file it
> complains about is:
>
> c:\program files\spywareblaster\unins000.exe
>
> SpywareBlaster uninstall program?!
>
> TIA
>
> Jim