PDA

View Full Version : Spybot S&D do I still need it


little eagle
January 10th, 2004, 09:12 PM
;DI installed spybot which at the time seamed very nessary and did a lot of good but after installing spywearblaster spybot s&d doesn't ever show find anything bad :-\ ;D which is good I guess ???

Dan Perez
January 10th, 2004, 09:19 PM
Hi Little Eagle ;)

I am a great fan of SpywareBlaster too but I really like to have a fallback to be able to ensure that nothing slips through. I would recommend that you continue to spotcheck with Spybot S&D

Hopefully more opinions will follow :)

the Tester
January 10th, 2004, 09:25 PM
I use both Spybot and Spyware Blaster.
Having both programs is a layered defense IMO. ;)

snowbound
January 10th, 2004, 09:31 PM
I have them both plus a few more. ;)

Like Tester said, a layered defence is what it is all about. :)






snowbound

spydespiser
January 10th, 2004, 10:45 PM
Hi little Eagle :)

I find it preferable like the others to layer as opposed to relying on 1 or 2 products,that way even though we think we got everything covered we can never be to sure,at least that way if u start experiencing strange/odd behaviour u have some on demand scanners to help eliminate some possibilities

SpyBot also my first choice for scan(it pretty fast compred to some)after i run shredder/compare a HJT against a clean log
And it also has an immunize feature ;)

I personally wouldnt be without mine ;)

Layers!

SpyD 8)

little eagle
January 10th, 2004, 10:49 PM
:o but ad-aware would not be nessary if I have spybot right. In POSTING POLICY under hijack cleaning . Step 1 was to run one of these. Are they the same or do the same thing :-[ ???what is a llama

spydespiser
January 10th, 2004, 11:26 PM
-{ Quote: " :o but ad-aware would not be nessary if I have spybot right. In POSTING POLICY under hijack cleaning . Step 1 was to run one of these. Are they the same or do the same thing :-[ " }-

Basically they both do similar job but the databases are slightly different,i.e Spybot may miss 1 or 2 that Adaware picks up n vice versa.
hence
>"Having run one of the two programs above, or both if you like, your system should now be clean of many of the most well known hijackers and spyware items which should make reviewing your log easier."

No single piece of security software is going to keep you completely free of malware/scumware as new types and variants are being written daily to try bypass the existing software avilable for our protection,which is why it is better to have at least 1 type of software for each type of the bad guys i.e AV,AT,Anti spyware/adware,

thats why we call it "layering", its all down to personal preference/habits at the end of the day, many would say you dont need half of these apps, many would say you need em all, just use what you need for your surfing/internet requirements,

i used to scan on demand with all scanners once a week when i first got on net and found allsorts,but by learning more about security in general, learning more about my software and practicing safe hex i only need to scan when i find strange happenings(which is getting rarer n rarer)

Its all thx to the Proggies i use n the Advice/help i get ere at wilders ;)

SpyD 8)

little eagle
January 11th, 2004, 12:03 AM
>:(about a month after I got this pc I'm 99% sure i got hit by a hacker :obeforeI could hit Ctrl-Alt-Delete :( it was to late :'(

little eagle
January 11th, 2004, 12:07 AM
finishing last post :-[whatnow

Dan Perez
January 11th, 2004, 12:18 AM
Not sure what you mean by "what now"

Were you wanting advice on a current possible hack incident? (If so we will split the thread and name it appropriately so it will get the appropriate attention) It seemed like you were just making an observation about a previous hack.

Or am I just confused? ???

little eagle
January 11th, 2004, 12:25 AM
:)yes I dont know how to cut and paste my log I got from hijack i save it to a file but I dont know how to send it.

spydespiser
January 11th, 2004, 12:37 AM
Hi little eagle

open ur saved file,Ctrl- A to select all,right click,select copy, goto Adware,spyware,hijack forum,start a thread,right click then paste contents in box

SpyD 8)

little eagle
January 11th, 2004, 01:52 AM
tks spyD got it there ;D

spy1
January 12th, 2004, 10:53 AM
little eagle - Something you've got to remember here is that both SBS&D and the freeware version of AA are both re-active programs - they don't tell you anything until after something has happened - that's why it's important to activate the "Immunize" feature in SBS&D (at the very least - SpywareBlaster ( http://www.javacoolsoftware.com/spywareblaster.html ) is currently at 1073 items and much more comprehensive in its' protection from a pro-active point-of-view, which is why you need SWB, also).

In addition to this (if you're using IE), I consider it an absolute must to set your "Restricted" Zone absolutely tight and then to use (and keep updated religiously) IE-Spyad ( http://www.staff.uiuc.edu/~ehowes/resource.htm ), because this, too, is another pro-active measure you can take to keep from getting infected with anything in the first place.

IOW, SBS&D and the freeware version of AA are not going to keep you out of trouble (generally-speaking) - they just help to identify and (hopefully) fix things after you're up to your butt in alligators.

That is the situation you're trying to avoid by use of the other programs mentioned (along with applying all patches and service packs to both your browser and OS, to eliminate problems on that end).

Something that wasn't really touched on in the remarks about "layered defense" above was this: Comparitive scans using SBS&D and AA (or whatever programs involved) are not only more thorough - they give you a chance to stop and think before you fix/allow something to be changed or deleted by either program when anything is found.

It's the same concept that's behind having more than one AV or AT - you cross-check with the back-up program/scan before blindly accepting the results of either to avoid screwing things up by "fixing" something (or allowing it to be 'fixed"/deleted/quarantined by a program).

This is especially important if you've got a false positive from one program and everything's hunky-dory when you run the second program - do not fix/change/delete anything until you verify that you actually have a problem (generally, both SBS&D are pretty solid on their detection and cleaning routines - however, there have been glaring exceptions to this involving both programs.

This is especially true if the "alert/alarm" results immediately after an update to whatever program you're using for detection.

I'd rather see someone submit a full-blown HJT log without letting a program "fix" anything (if the above condition applies) rather than see them lose (possibly) Internet-connectivity, critical system files, or have programs that are now crippled for no reason.

(But that's just me). Hope some of this helped. Pete

spy1
January 26th, 2004, 09:50 PM
-{ Quote: " quoting: spy1 link=board=20;threadid=19331;start=0#msg119008 date=1073922818]
Something that wasn't really touched on in the remarks about "layered defense" above was this: Comparitive scans using SBS&D and AA (or whatever programs involved) are not only more thorough - they give you a chance to stop and think before you fix/allow something to be changed or deleted by either program when anything is found.

It's the same concept that's behind having more than one AV or AT - you cross-check with the back-up program/scan before blindly accepting the results of either to avoid screwing things up by "fixing" something (or allowing it to be 'fixed"/deleted/quarantined by a program).

This is especially important if you've got a false positive from one program and everything's hunky-dory when you run the second program - do not fix/change/delete anything until you verify that you actually have a problem (generally, both SBS&D are pretty solid on their detection and cleaning routines - however, there have been glaring exceptions to this involving both programs.

This is especially true if the "alert/alarm" results immediately after an update to whatever program you're using for detection.

I'd rather see someone submit a full-blown HJT log without letting a program "fix" anything (if the above condition applies) rather than see them lose (possibly) Internet-connectivity, critical system files, or have programs that are now crippled for no reason.

(But that's just me). Hope some of this helped. Pete
" }-

Case in point: SBS&D's latest beta update goes nutso, results-wise. Pete takes a deep breath, lets SBS&D "fix" absolutley nothing, closes it and opens, updates and scans with AA freeware version - nothing new or unusual, results-wise, there.

Pete goes to the applicable forum and reads this thread

http://forums.net-integration.net/index.php?showtopic=9877. Pete