News Stay informed about the latest enterprise technology news and product updates.

Microsoft AntiSpyware Beta incorrectly identifies AV software

A recent signature file for the beta version of Microsoft Windows AntiSpyware incorrectly identifies a registry key of Symantec antivirus software. Removing the identified registry key disables antivirus products, and reinstallation of Symantec software may be necessary.

A recent signature file for the beta version of Microsoft Windows AntiSpyware incorrectly identifies a registry...

key of Symantec antivirus software. Users who remove the identified key render the antivirus software inoperable. Reinstallation of the Symantec software may be necessary.

The Windows AntiSpyware Beta 1 signature 5805, which was released on Thursday, incorrectly flags a Symantec registry key as "belonging to a password stealing malware known as PWS.Bancos.A," according to a Microsoft spokesperson. Windows AntiSpyware prompts the user to remove the key. Removing the key causes the affected Symantec products to stop working correctly. The issue surfaced on a Microsoft discussion board. Microsoft describes the number of affected users as "very limited."

The problem affects users of Symantec Antivirus (SAV) Corporate Edition versions 7, 8, 9 and 10, and Symantec Client Security (SCS) versions 1, 2 and 3. This problem does not affect users of Norton Antivirus and Norton Internet Security. In addition, users of any Symantec products are not affected if they are using Microsoft Windows Defender Beta 2, either in Windows XP or preview versions of Windows Vista.

Microsoft quickly released a new signature set (5807) to remove this incorrect identification. Microsoft has also reminded users that Windows AntiSpyware is beta software, which should not be used in production environments.

Edmund X. DeJesus ( is a freelance writer in Norwood, Mass.

Dig Deeper on Malware, virus, Trojan and spyware protection and removal

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.