[blue-boy]

I'm using Windows XP SP2.

For the last 18 months, I have had Nortons IS, ADaware, AVG A-S and Spybot S&D installed and regularly updated. Nortons is the main system providing the firewall etc running constantly and automatically updates. I load and scan the others periodiaclly.

Eleven months ago, I had a starware infection which prevented any connection to the web. I purchased Spyware Doctor which needed updating online anyhow but the problem was resolved.

The story is that up until now all five suites have been working happily together with both SWdoctor and nortons running compatibly. Two days ago, I updated ADaware 2007 online which I do each month and on running its scanner, it found a high level threat: malware win32.backdoor.Rbot infecting swdoctor.exe and one other associated file. The required action was to reboot. During reboot, swdoctor.exe was deleted. This left the remainder of the SWdoctor folder full of orphened files which I removed. I then reinstalled SWdoctor from the CD I had purchased 11 months ago and ran ADware again. It found no malware infection. I the ran a smart update on SWdoctor to bring it to the current version and ran ADaware again. Of course ADaware found the malware infections and the action deleted swdoctor.exe on reboot. I went through the process once more and used the other sutes like Spybot S&D which didnt find the malware but which had incude errors and in the include errors log showed

'trojansc.sbi and Zlob.DNSchanger.rtk'

I have contacted PCTools for advice on their Spyware Doctor Software and await their response. I have tried test scans from the web after google-ing 'Win32.backdoor.Rbot' IE:
ADwarealert and AntispywareBot.

Both revealed up to 72 infections associated with SWdoctor and Ashampoo Magical Optimiser which I installed two months ago and which has been working ok.

As a result of these scans, I suspect that ADaware and these two extra suites simply wish to delete any competing security software on my PC and not just clean the infections from the .exe files or other locations.

However, there may be a real and present danger of a 'backdoor' variant infecting my PC and until I resolve the problem, I am loath to use my internet banking and creditcard details etc.

So

1. Is there Jealousy between security software suites causing bogus reports of infection.

or

2. Do I have to do the drill with Hijackthis, ewido and housecall as per 'kevinskogg's thread of Jan18 2008 which looked at 'backdoor.win32,rbot.gen' variant?

Please advise.

Ges

[blue-boy]

18-Jan-2006

[blue-boy]

Can anyone advise. Soon all I will have is ADaware.

[blue-boy]

What? no comment? I have had to delete AD-Aware 2007 and with help from PCtools and nortons techs the PC seems to be ok now. The Bank security systems are comprehensive. I'm surprised there is no comment on the problem. Can someone try modeling the multi anti spyware model to duplicate the suspected conflict? Remember, five of these suites have worked together for 18 months.