Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

e-Surveiller found by Spy Sweeper

Mar 7, 2004 4:47AM PST

Hi All,

Need some help, my Spy Sweeper 2.6.1 build 45 with definitions 331 found e-Surveiller on my system, never installed by me. The good news is that Spy Sweeper quarantines it just fine, the bad news is it's gone until I reboot, then the puppy has returned. I found some removal information at this site, but none of those things are on my system... http://www.pestpatrol.com/pestinfo/e/e-surveiller.asp
My system is windows '98 SE if that matters. I run NAV2004, Ad-Aware, & spybot S&D and spysweeper daily.
Does anyone know of anything else to try?
Thanks,

Steve

Discussion is locked

- Collapse -
Re:e-Surveiller found by Spy Sweeper
Mar 7, 2004 4:59AM PST
- Collapse -
Thanks Marianna
Mar 7, 2004 5:14AM PST

Thanks Marianna,

I never thought to question whether it's a false positive DUH, you always expect software to tell you the truth LOL. I'll shoot off a quick question to Webroot's suppport staff and see what they have say about it. I'll report back here to let you know what they say about it, so everyone knows.

Thanks Again,
Steve

- Collapse -
Steve - You're Welcome and YES, pls. let us know what
Mar 7, 2004 5:45AM PST

Webroot has to say !

- Collapse -
I "think" I found what the "problem" is......
Mar 7, 2004 8:45AM PST

What Spy Sweeper is seeing is a function of Zone Alarm's Mail Safe utility. Zone Alarm, with Mail Safe activated, will convert any file that has an extension ".lnk" to ".zlg" for protection against potential exploits. The problem is that a file with the extension ".zlg" corresponds to a 3 year old, nasty little tool that can be used to spy on us, e-Surveiller.

The references to ".zlg" that Spy Sweeper sees are simply the registry entries that Zone Alarm uses to secure files with the extension ".lnk". If you delete these files, Zone Alarm will create these when it restarts.

Here is thread going on about it:

http://www.dslreports.com/forum/remark,9595519~mode=flat

- Collapse -
Re:e-Surveiller found by Spy Sweeper/ For Future reference
Mar 7, 2004 4:16PM PST

Steve: I believe Marianna is right in having found the problem but... as a further note...often I had your symptoms from spyware or viraii. The problem lay in 98SE's Registry Checker. A bit like XPs sys restore in that it keeps a back up copy to use if you have a crash or hang. It may have as many as 7 copies in it's storage. If intruder gets in there it will re-install on re-boot. I found success by: after running clean process, without rebooting, go Start>Programs>Accessories>system Tools>System Info>Registry Checker. It will say: Back up done already today. Do you wish to back up again? Say Yes and it'll kick back to Reg Chk. Repeat the Yes back up again at least 6 more times to be sure all copies are the new "clean " ones.
Other oddity I saw here was the little devil hiding in Recycle Bin!! Good for future reference. Grin

- Collapse -
Re:e-Surveiller found by Spy Sweeper
Mar 8, 2004 4:51AM PST

Marianna,

Thanks for your posts, Spy Sweeper (Webroot) didn't respond to my E-MAIL yet, but they did put out a new set of definitions today (333 version) which corrected the false positive on my maching for e-Surveiller.

Steve

- Collapse -
(NT) Steve, You're Welcome and thanks for your feedback :)
Mar 8, 2004 4:56AM PST

.