Spyware Doctor Protection Statistics

[jimnelson]

I have been a SD user for several years, but for the first time, an information box popped up with the title 'Spyware Doctor Protection Statistics'. In it's listing, it states:

Infections Blocked_____0
Infections Detected____1,848
Infections Quarantined__0
Infections Removed____1,821

So, what happened to the 27 infections that were not Blocked, Quarantined, or Removed?

Running XP Pro SP3, SD 7.0.0.508

jim

[AChen]

From what I know, if you cancel a scan, then there will be a difference in the results from Detected to Removed. Another scenario where this could happen is if SD cannot remove a detection, where it detects the infection, but the infection could be a new variant and SD can only remove it partially. When this occurs however, SD will notify the user that it has not removed the infection.

I will double check this and see whether there are any scenario's that could cause this discrepancy.

[jimnelson]

From what I know, if you cancel a scan, then there will be a difference in the results from Detected to Removed.

I have taken a close look at my Activity History, and found a troubling issue.

I leave my computer on over night, and have a Full Scan scheduled for 1:00 am every day. On 11/10/2009, the following results were found:

11/10/2009 2:51:07 AM:746 Scan Finished
Scan Type - Full Scan
Items Processed - 108176
Threats Detected - 3
Infections Detected - 26
Infections Ignored - 0

The next entry in the history is:

11/10/2009 2:51:09 AM:340 Service Stopped
Spyware Doctor Service Application Stopped

And then:

11/10/2009 3:16:12 AM:0 Service Started
Spyware Doctor Service Application started

There is no indication that SD ever did anything about the infections, although I was not able to find any trace of the 2 high level threats, which were related to a link to a website in my favorites list, which is no longer there:

11/10/2009 2:34:27 AM:359 Infection was detected on this computer
Threat Name - Trojan-Downloader.Agent.TI
Type - Favourite
Risk Level - High
Infection - http://www.poetry.com/greatest-poem/14104307/ : C:\Documents and Settings\James Nelson\Favorites\How did you die....url


11/10/2009 2:34:50 AM:656 Infection was detected on this computer
Threat Name - Trojan-Downloader.Agent.TI
Type - Cookie
Risk Level - High
Infection - poetry.com/ poetry.com

The rest of the infections were low level application tracking types.

So, since I was sawing logs while all of this happened, is there any way of determining what stopped, then restarted SD 25 minutes later?

Strange things going bump in the night...

jim

[AChen]

This looks like there is no problems with the Protection report. The issue here is that the SD service looks like its shutting down before SD can clean those infections, therefore showing a different result. Now we will need to see what is shutting the SD service down. This will be the difficult part.

When the problem occurs again, could you send us the Event logs from Windows Event viewer. This link (http://support.microsoft.com/kb/308427) will provide you with instructions.