locked
Onecare is aggraviting me...

    Question

  •  

    Every time one care completes a scan, it pops up a little box and tells me that it successfully removed one threat...  OK, I have NO problem with this.  What I have a problem with is the fact that when I click on view details, it tells me that quarantine failed, and since this pops up with every scan, it obviously didn't remove the file.  I have researched it online, and so far, all I have found with questions similar to this are ones with Outlook files.  Mine is different.  It is just in a regular folder in program files.  WHAT DO I DO!!!  Onecare should be more detailed in it's reporting, and definately not give false positives to completion.  Too much more of this, and I will have to go another route, which is sad because most MS products I love...

    Saturday, September 15, 2007 4:31 AM

Answers

All replies

  • If you are sure it is a false positive you can exclude the folder from scans. You should also report the false positive. To report a false positive see this post - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=662566&SiteID=2

     

    Saturday, September 15, 2007 2:29 PM
  • Wow.  I must have been really tired last night.  I just noticed how badly I massacred the word aggravating...  Anyways, by false positive, I meant that it falsely saying that it removed the file.  It is bad wording on my part and I am just noticing this now.  What it is finding is some kind of Ad-Aware called WhenU.SaveNow.  I have no clue how/when this got on my computer, but now I am only worried at getting it off.  I have tried to manually remove the file, but it keeps coming back.  I am killing any processes on my computer except for the bare essentials to make sure that some program isn't bringing it back, or using the file, but Onecare still only id's it, and says that removal was successful, when in fact nothing happened.  Any ideas?

    Saturday, September 15, 2007 3:34 PM
  • You can try removing WhenU by running One Care in safe mode - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1215336&SiteID=2

    or you can go to this site and use the removal tool or the manual removal instructions - http://www.safer-networking.com/removeWhenU.php A third option would be to contact support for help with removal - http://help.live.com/help.aspx?project=onecarev2&mkt=en-US

    Saturday, September 15, 2007 3:46 PM
  •  

    OK, I will do that right away.  However, I am still disturbed at onecare for falsely saying that something has been removed.  If I hadn't clicked on details, I would never have been wiser.  Do you know why onecare would do this?
    Saturday, September 15, 2007 3:50 PM
  • One Care most likely removed the malware but didn't remove it completely, thereby allowing it to re-spawn. This is not uncommon with some types of malware regardless of the scanner you are using. I would use the tool in this post to report an unremoved malware infection - http://forums.microsoft.com/WindowsOneCare/ShowPost.aspx?PostID=1583244&SiteID=2

     

    Saturday, September 15, 2007 3:59 PM
  •  

    If that is the case however, then why does it say that quarantine failed???  If it did remove it than this is bad wording on Onecare's part.  For that matter, it is bad coding.
    Saturday, September 15, 2007 4:08 PM
  • Most likely quarantine failed because the malware was in a file which was in use.The quarantine failed message is a warning, and as I see it an incomplete message. The quarantine failed message should also include suggestions on actions to take to neutralize the malware.

     

    Saturday, September 15, 2007 4:17 PM