Microsoft AntiSpyware Beta incorrectly identifies AV software

Edmund X. DeJesus

A recent signature file for the beta version of Microsoft Windows AntiSpyware incorrectly identifies a registry key of Symantec antivirus software. Users who remove the identified key render the antivirus software inoperable. Reinstallation of the Symantec software may be necessary.

The Windows AntiSpyware Beta 1 signature 5805, which was released on Thursday, incorrectly flags a Symantec registry key as "belonging to a password stealing malware known as PWS.Bancos.A," according to a Microsoft spokesperson. Windows AntiSpyware prompts the user to remove the key. Removing the key causes the affected Symantec products to stop working correctly. The issue surfaced on a

    Requires Free Membership to View

Microsoft discussion board. Microsoft describes the number of affected users as "very limited."

The problem affects users of Symantec Antivirus (SAV) Corporate Edition versions 7, 8, 9 and 10, and Symantec Client Security (SCS) versions 1, 2 and 3. This problem does not affect users of Norton Antivirus and Norton Internet Security. In addition, users of any Symantec products are not affected if they are using Microsoft Windows Defender Beta 2, either in Windows XP or preview versions of Windows Vista.

Microsoft quickly released a new signature set (5807) to remove this incorrect identification. Microsoft has also reminded users that Windows AntiSpyware is beta software, which should not be used in production environments.

Edmund X. DeJesus ( is a freelance writer in Norwood, Mass.

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: