The Mudcat Café TM
Thread #111148 Message #2338463
Posted By: JohnInKansas
12-May-08 - 12:56 PM
Thread Name: Tech: AdAware and grayware or malware
Subject: RE: Tech: AdAware and grayware or malware
My recently updated free version of Ad-Aware doesn't indicate anything resembling either of the things described, but the setup options have a place for plug-ins, and I'd assume that there may be some "extras" you can download that would be shown there if you have the paid version. If you have the premium version, you need to ask Ad-Aware if these are their plug-ins. The Ad-Aware 2007 program "front page" also has a "Tools and Addins" button that should tell you instantly if you've turned on any extra functions.
memwatch.h is a well-documented utility that a programmer can compile as part of any program so that a log is made of every "memory swap" made by the program. The log is useful for finding memory leaks during program development. It has no reason for being on a common user computer that I can think of. Any competent programmer would be expected to recompile without this utility before distributing a program.
There is a widely documented Trojan that some anti-malware people are calling Memwatch, probably because it contains the memwatch logging script. I didn't find any very complete description of what it might be for; but since, like many Trojans, it makes a registry entry, just deleting the Trojan file(s) may not have cleared the reg entry. A registry entry that can't find a file it's supposed to open can sometimes "hang" the computer, although usually you'll see an error message at reboot for this kind of error.
It's entirely possible that one of your anti-malware programs did find, and delete, a grayware/malware file but didn't clean the registry. Since Ad-Aware especially usually finds several hundred "threats" you probably didn't look at all the names before telling it to delete them all.
Ad-Aware is generally fairly "graceful" about doing any needed reg cleanup, but could have made a slip. I'm not familiar with "SUPERantispyware" so can't guess whether it's "registry-competent."
"Log off" likely has a specific meaning to you, but can have multiple different meanings to others (and to Windows). A "more wordy" description of your meaning might avoid possible confusion if further discussion is required.