Thanks for taking the test. Now, I have a few serious questions for you.

First of all, is Webroot , the Spy Sweeper or is it the Suite?

Second , I believe that you have Avast on you PC for AntiVirus protection?

Now , answer me this. The test file Eicar is a VIRUS file. Shouldn't Avast

have caught this file. This is what I got when I tested with Avira:

I think that you should have another look at the Settings for Avast.

Maybe Spirit could answer this because I don't understand.

Also , you said that when you ran the Trojan test file, XP stopped the process.

Are you referring to D.E.P. ( Data Execution Prevention ) ? It is good to know

that you have it turned on but, IF Webroot is your Real Time AntiSpyaware

then IT should have stopped this process from starting and NOT D.E.P.

This Trojan test file will inject malicious code in the memory which is why

D.E.P. was developed to counteract but, it is up to your Real Time Shields

to do this work. This is only a test file. Should you encounter a Real nastie,

how would your AntiSpyware react? A real one would overrun the memory

buffers and I don't think D.E.P. would save your bacon ( PC ).I would look into this as well.

I would show you what A-Squared does but, it won't even let me start it

now that it has written a rule to stop this process from ever starting again.

IF you have the Webroot suite , you know that it has a AntiVirus built in.

This would mean that you are running two AntiVirus applications and you

know that a set-up like that does not work. But, I don't think you are, I'm just

speculating and trying to understand what you said about the test results you got.

OK coastie, shed some light on this for me please. It's been bugging me since I

read your post but, as you know I was away last night on family business.

FLASHORN.

Thanks for the links. I came away with some understanding of what is happening but,

as I said to coastie, his settings in Avast could use some tweaking. From what I could

see, you can adjust the settings to be more aggressive if you like but, it would mean

opening up the .ini file and going through a long process. I don't know if coastie

would be up for that.

Also , Avast will not stop the download of this file but, will detect it when scanned. A different

way of doing things I guess. As long as it gets the job done, I don't mind that. One should Always

scan Any files downloaded from the internet even though you know the source to be of good

reputation . It's too bad not enough take this advice seriously which usually brings them either

here or at specific Malware Removal sites.

Thanks for the links , it was interesting reading.

FLASHORN.