registry entries

[sbasilic]

I have a W2K server all updated. Symantec antivirus all updated. I get continual entries in the registy under the run and run once keys from viruses. I boot into safe mode and find nothing. Any ideas on how i can prevent this?

 

[markdmac]

If you actually have norton installed and running and the entries are actually from viruses and not spyware, then I'd say it si time to switch to another AV package. We recommend TrendMicro to all of our customers.

Most liekly however the entries are actually from spyware which none of the AV packages pick up. I'd suggest a donwload of Ad-Aware from Lavasoft.

http://www.lavasoft.de

Make sure you check for updates on the Lavasoft before doing the scan to make sure you get the latest and greatest detection. If you purchase Ad-Aware then yu get to have it run constantly to check for spyware.

One thing you can do to keep your stystem clean is to initiate a policy on the server to restrict web access to only those sites that are absolutley necessary like Windows Update.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[sbasilic]

Thanks. I downloaded spybot since i had good luck with that before and also regclean. I will let you know.

Sam

 

[markdmac]

I like to do a scan with both SpyCop and Ad-Aware. in my recent testing I have come to like Ad-Aware better. I suggest you do your own testing. Run SpyCopy, then try the Ad-Aware and see if it finds anything else. Just remember to get the Ad-Aware updates before scanning to ensure you have the latest and greatest.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark