Superantispyware Pro real time protection

[Threedog]

I notice in the ever changing thread about current set ups that a lot of people who have Superantispyware Pro running don't have the real time protection running. Just purely out of interest.

If you have it running....why?
If you don't have it running....why not?

[Bio-Hazard]

-{ Quote: "I notice in the ever changing thread about current set ups that a lot of people who have Superantispyware Pro running don't have the real time protection running. Just purely out of interest.

If you have it running....why?
If you don't have it running....why not?" }-


Supernatispyware is excellent program. I have Pro version but i dont run it realtime....Why? Because i have several others that i use for realtime protection. I bought Pro version because i liked it and i wanted to support the company.

[Antarctica]

-{ Quote: "If you don't have it running....why not?" }-

The reason is that it never caught anything. But it's probably due to my safe surfing habits.;) So I use it as on demand once in a while:)

[Threedog]

Bio Hazard....I bought it for the same reason. Good software and good support.

Antarctica....I have only had it pop up once when I was running it. During an install of Cute PDF but it was only a false positive.

Keep em coming folks!!!

[acr1965]

I have SAS Pro and sometimes use the realtime protection, sometimes I don't. SAS is good for scanning/removing malware. I am not so sure about its realtime protection. It would be nice to see SAS tested against some real, bonafide malware in realtime to see how well the realtime protection works. In the past it seems that SAS has only been tested against simulated malware attacks, which SAS claims not to detect because it is simulated. The other SAS tests seem to focus on scanning/removal ability.

[lodore]

btw the realtime protection in superantispyware is good.
at college we got some stand alone computers and had all lesson to see how infected we could get the machines.
to shorten a story superantispyware blocked the installation of the random dodgy trojans i downloaded as a test.
i didnt know what the realtime protection of superantispyware was like before that.
i genrally just run kis7.0 for realtime since i never see any malware.
lodore

[disinter1]

I figure I'll run mine in realtime since it doesn't bog down my system, plus it gives my antivirus more spyware protection which is cool!;D

[fcukdat]

-{ Quote: "It would be nice to see SAS tested against some real, bonafide malware in realtime to see how well the realtime protection works." }-

No problemo or at least i could waste a lot of time replicating screenshots of SAS intercept's in realtime versus many assorted malware but hopefully this posting will help y'all understand more.

This example was grabbed care of one of many known offending URLS on the darkside that serve up driveby infections to vulnerable setups via multiple exploits.Time to go to Pr0n land in search of cyberclap but using protection active for once;)

197230

**Please note that my Execution control software(ProcessGuard) is running and active.

SAS has intercepted the malicious executable code and blocked it without a a peep from PG:thumb:

197231

Here's VT report,widely known malware but then this site has been dishing up malware for quite sometime now;)

~removed VT result per policy (http://www.wilderssecurity.com/showthread.php?t=180057)~


In closing i have a massive personal collection of malwares at my disposal from my time/hobby as a malware hunter and SAS detects/blocks every last one when i execute them:thumb:

[TVH]

I run it in real time just to complement the spyware protection of my AV. It has no noticeable impact on my system and has saved me from having to restore from my FD-ISR backup. I reckon it is one of if not the
best when it comes to cleaning spyware infected pc's.

[Threedog]

Hmmmmmm I think after Fcukdats post I am going to keep the real time running. I had no idea that it was that powerful. Thats partially why I started this thread, to see if it was worthwhile running or not.

Thanks for the comments so far and keep em coming.

[Threedog]

And thanks Fcukdat for the very informative show and tell post!!!!

[gerardwil]

Have SAS 4 running realtime at the moment, it uses only about 400K (yes 400K). :)

Gerard

[Threedog]

I went and downloaded the 4.0.1114 version of SAS Pro and put it on too. What a difference in memory usage and scan speed.

I likey!!!

[lodore]

ive got version 4.1 on vista installed today. 548k memory usage.
scanning speed much improved.
very impressed.
also i like the lifetime subscription active text placed around the interface two times;D
lodore

[gerardwil]

-{ Quote: "
also i like the lifetime license active text placed around the interface about three times;D
lodore" }-

Any screenshot?

Gerard

[lodore]

-{ Quote: "Any screenshot?

Gerard" }-
here ya go

[gerardwil]

Where is nr. 3?

[Threedog]

I like that part of it also, lodore. When I bought my licence they had a special on to get a second licence too but I wasn't sure if both were lifetime or just the one. Now I know at least one of them (mine) is. The other one is installed on my Mother's puter so when the new version goes gold I will have to install it on her computer and then I will know. She lives about 100 miles away from me so it won't be going on for a bit.

[Bubba]

-{ Quote: "i have a massive personal collection of malwares at my disposal from my time/hobby as a malware hunter and SAS detects/blocks every last one when i execute them:thumb:" }-and We get 3 guesses why and the first 2 don't count :o :-X ;)

[lodore]

hi Threedog,
acording to the superantispyware site version 4 will be distributed via the automatic update system when its gone golden.
so its just a case of rright clicking the sys tray icon and clicking on check for updates.

lodore

[lodore]

-{ Quote: "Where is nr. 3?" }-
woops i corrected my post above which now says 2 times.

[EASTER]

-{ Quote: "when its gone golden." }-

Somehow that statement has a really nice ring to it. :)

[Threedog]

-{ Quote: "hi Threedog,
acording to the superantispyware site version 4 will be distributed via the automatic update system when its gone golden.
so its just a case of rright clicking the sys tray icon and clicking on check for updates.

lodore" }-

That will be great! I can just use crossloop to update it for her and save having to take a little trip.

[gerardwil]

-{ Quote: "That will be great! I can just use crossloop to update it for her and save having to take a little trip." }-

And that is just you should not do because you will not know when it is on the server. Otherwise you will be back on 3.9.
Wait for any announcement made and carefully read the instructions.

Gerard

[Threedog]

-{ Quote: "And that is just you should not do because you will not know when it is on the server. Otherwise you will be back on 3.9.
Wait for any announcement made and carefully read the instructions.

Gerard" }-

No worries there. I wouldnt put anything that isn't "Gold" and that I haven't had time to run thru the gauntlet on hers.....I hate the "this little thing is popping up" phone calls. ;D

I am keeping my eye on things over there and reporting on any findings I make.

[Wordward]

I have used SuperAntispyware Free for a long while, but I just installed the latest RC Full Version and its like its not even there. I still have Avast Home and Comodo Pro 3.0 installed, but I wanted to try SAS for RealTime usage because of this thread. I'm glad I did and I gotta say if the System Tray Icon ever changes, this may be the first paid security program that I would truly consider purchasing.

[fcukdat]

-{ Quote: "I'm glad I did and I gotta say if the System Tray Icon ever changes," }-

IRC on Pro under preferences>General and Startup

You can uncheck the box so *no* icon appears in the system tray;)

[Threedog]

I like the little beetle or what ever it is. It's certainly more astetically pleasing than some tray icons.

[Wordward]

Hey fcukdat. (I always try to be careful whenever I type your user name. LOL.) Thanks for the earlier info on SAS, much appreciated. As far as System Tray Icons go though, I just love seeing them down there by my Network Connection Icon. There are some I just don't like however, like a-squared's and unfortunately SAS's. Who knows maybe Nick will decide on something else other than a beetle. Hey I got it. How about the "SuperAntiSpyware Icon being a Volkswagen Beetle, and then it could be a picture of a Super Beetle. LOL. Come on you know you want to laugh at this silliness. Anyway, the beetle, bug or whatever it may be, is all right, but I really do think it needs to be changed to match what is a top shelf security software.

[Sigid]

I used to use SAS Pro with real time protection. Worked well, and had little effect on total system performance, but I had a different problem with it:
The auto-update feature never worked. At all. The only way to keep this up to date was to manually request it - and almost every time I did, there were updates found that SAS had not done by itself. An odd thing, huh?
And I also found twice (out of a few hundred attempts) that requesting a manual system scan found things which I would have expected the real time protection to have already caught. Again, I cannot explain this...

[SUPERAntiSpy]

-{ Quote: "I used to use SAS Pro with real time protection. Worked well, and had little effect on total system performance, but I had a different problem with it:
The auto-update feature never worked. At all. The only way to keep this up to date was to manually request it - and almost every time I did, there were updates found that SAS had not done by itself. An odd thing, huh?
And I also found twice (out of a few hundred attempts) that requesting a manual system scan found things which I would have expected the real time protection to have already caught. Again, I cannot explain this..." }-

Did you submit a support request to us? Were you using the Free Edition? If so, it doesn't have the auto-definition updates. We can certainly assist you. 99.99% of the time that definitions can't be updated is because a firewall is blocking SUPERANTISPYWARE.EXE from accessing the net - in Zone Alarm users sometimes have to remove and re-add it as, for some reason, Zone Alarm doesn't properly allow all TCP/UDP traffic even when fully trusted.

As for items that were not detected in real-time, do you recall what they were? I would be more than happy to investigate!

[MikeNAS]

I just tried 4.0 Pre-Release and I'm so impressed that I bought a lifetime license. 29.90$ isn't so bad price for that :D

-MikeNAS

[Sigid]

@Nick -
Please do not misunderstand; I was not complaining, just being factual.

I used to use the registered version of SAS on two machines (two licenses!) and I currently use it on only one. Neither machine ever updated successfully on an automatic basis, but both will update (only) when specifically told to do so.

One machine has Sunbelt Firewall, but the SAS exe file had been given full permissions. The other machine has the WinXP firewall which doesn't work on outgoing anything anyway.

I am sorry but did not make note of the specific items that were caught on manual scan which the Real-Time appeared to have missed. As I said, this event was very rare. And no, I did not submit a report to tech support at SAS; never occurred to me to do so - I just assumed the feature did not work properly but since the work-around was plain and simple, no problem...

[SUPERAntiSpy]

-{ Quote: "@Nick -
Please do not misunderstand; I was not complaining, just being factual.

I used to use the registered version of SAS on two machines (two licenses!) and I currently use it on only one. Neither machine ever updated successfully on an automatic basis, but both will update (only) when specifically told to do so.

One machine has Sunbelt Firewall, but the SAS exe file had been given full permissions. The other machine has the WinXP firewall which doesn't work on outgoing anything anyway.

I am sorry but did not make note of the specific items that were caught on manual scan which the Real-Time appeared to have missed. As I said, this event was very rare. And no, I did not submit a report to tech support at SAS; never occurred to me to do so - I just assumed the feature did not work properly but since the work-around was plain and simple, no problem..." }-

No problem at all, I just wanted to make sure you know that you can always contact us and we will work hard to help resolve any problem you are having with our software or an infection!

[Wordward]

Just curious if SuperAntiSpyware Pro reverts to the free version after 30 days? I would love to purchase this app and would if I had the money, but for now the 30 day trial will have to do. LOL. I'm actually using the Pre Release version 4.0.1114 of it, and it's running beautifully with Avast Home and ThreatFire. Now if there was just a way to change the look of the System Tray Icon. LOL. Hey Nick, any chance of this happening?

[Threedog]

Hay Wordward....are you a member of the anti-beetle coalition or sumptin. Ya keep wantin to deep six the beetle in the tray!!!! ;D ;D

[disinter1]

I have to be honest, I too have a dislike of the SAS beetle, why I don't know...it's just me. I do hope Nick does update the look of SAS in the future and the tray icon, but I KNOW detection and under the hood technology is more important, but the looks of windows 98 are over, hehe (sorry I had to :P )


P.S.

I love SAS ;D 8)

[SUPERAntiSpy]

-{ Quote: "Just curious if SuperAntiSpyware Pro reverts to the free version after 30 days? I would love to purchase this app and would if I had the money, but for now the 30 day trial will have to do. LOL. I'm actually using the Pre Release version 4.0.1114 of it, and it's running beautifully with Avast Home and ThreatFire. Now if there was just a way to change the look of the System Tray Icon. LOL. Hey Nick, any chance of this happening?" }-

It does not revert if you are using the Professional, but you can uninstall it and install the Free Edition.

As far as the icon and look, after 3 years on the market changing the look and feel would likley have a negative response as our current and growing user base of 5 million users are quite happy with it and used to it. :)

There are those that don't like it, but the bottom line is what a product detects and removes..........I would think.

[disinter1]

-{ Quote: "There are those that don't like it, but the bottom line is what a product detects and removes..........I would think." }-


True very true:)

[Wordward]

On the other hand, perhaps a change in the icon would entice yet another 5 million people to use it. One of them being me. LOL. Seriously though. Ashampoo Antispyware 2.0 which is based on a-squared's IDS technology can be had for 10.00 dollars. However, the icon the previous version had was a turn off. I'm not sure if they changed it in the new version, but if they did I wouldn't hesitate to shell out 10 bucks for what is a very decent antimalware program. Obviously though I rather have SAS because of the great support, and would pay 10.00 bucks more for it. But as far as the beetle for an Icon, I just wish there was a poll taken to decide if it should be changed. I mean come on. Even Spyware Terminator has a shield. LOL.

[SUPERAntiSpy]

-{ Quote: "On the other hand, perhaps a change in the icon would entice yet another 5 million people to use it. One of them being me. LOL. Seriously though. Ashampoo Antispyware 2.0 which is based on a-squared's IDS technology can be had for 10.00 dollars. However, the icon the previous version had was a turn off. I'm not sure if they changed it in the new version, but if they did I wouldn't hesitate to shell out 10 bucks for what is a very decent antimalware program. Obviously though I rather have SAS because of the great support, and would pay 10.00 bucks more for it. But as far as the beetle for an Icon, I just wish there was a poll taken to decide if it should be changed. I mean come on. Even Spyware Terminator has a shield. LOL." }-

So, if you didn't like the look of an ambulance, would you lay dying in the street? :) I specifically stayed away from shields, etc. etc. to try an differentiate us from other security related products so users would easily know which one was SUPERAntiSpyware - and see, even those that don't like the icon know which product it is..... :)

[Wordward]

-{ Quote: "So, if you didn't like the look of an ambulance, would you lay dying in the street? :) I specifically stayed away from shields, etc. etc. to try an differentiate us from other security related products so users would easily know which one was SUPERAntiSpyware - and see, even those that don't like the icon know which product it is..... :)" }-

Wow. That's quite a leap isn't it? Going from the way a System Tray Icon looks to Ambulances and laying dying in the street. LOL. Let me ask you a question. If someone loves SAS, but doesn't like the System Tray Icon. Would you still call an ambulance for them if they needed one? LOL. Or even better still. If someone like me, who is currently without the extra funds needed to purchase such a great Antispyware program as SAS, would promise to quit harping about the looks of its System Tray Icon. Would you PM him a free 1 years license? LOL.

[Perman]

Hi,

A kind word for SAS developer:

You develop a product from its incubator, and luckily it becomes what it is today, you should feel very proud and I certainly believe you DO. But...

SAS is not perfect now and will not stay so in the future. Your SAS perhaps is one of the best AS for now, BUT there are still some rooms for IMPROVEMENTS.

If I were you, any suggestion from anyone either paid users or free users, I would not take them very lightly, let alone to amuse them. This is one the reason I still stay as a free version user. I do like the product and the tech support associated with it, other than those, a big question mark.

Take care.

[SUPERAntiSpy]

-{ Quote: "Hi,

A kind word for SAS developer:

You develop a product from its incubator, and luckily it becomes what it is today, you should feel very proud and I certainly believe you DO. But...

SAS is not perfect now and will not stay so in the future. Your SAS perhaps is one of the best AS for now, BUT there are still some rooms for IMPROVEMENTS.

If I were you, any suggestion from anyone either paid users or free users, I would not take them very lightly, let alone to amuse them. This is one the reason I still stay as a free version user. I do like the product and the tech support associated with it, other than those, a big question mark.

Take care." }-

Thanks for your comments. Being a professional software developer for over 25 years, I fully understand what it takes to create, maintain and advance a software product. No software product is ever "done" - but we also won't create bloatware. We carefully evaluate each and every user suggested item and internally suggested items from our team when we implement each new product release. We have to determine what is best for the product, our brand, and the majority of users - unfortunately we can't implement every wish-list item - believe me, we have a list 1000 items long from our own staff in addition to the list of user-suggested items. :)

We are constantly creating new technology, methods, procedures, tools and implementations to detect and remove the newest threats that are appearing daily - that is, and will always be, our focus as that is what the product is designed to do.

[BG]

Nick ... I like the beetle. Keep it the same. I can quickly differentiate it from other AS when boxes come into my shop.

Happy SAS user!

[Wordward]

-{ Quote: "Nick ... I like the beetle. Keep it the same. I can quickly differentiate it from other AS when boxes come into my shop.

Happy SAS user!" }-
Well sure someone with BG as their user name would love a beetle. LOL. I will say the Pre Release version is running so smooth I can't tell it's there. (except for that darn bettle icon. LOL.) It updates without a hitch and from what a few Wilders members that tested it have said, it is quite effective at preventing infection. Also I took no offense from you Nick. I saw the smiley in your post. Maybe a different color for the beetle would be a good compromise? Or a free 1 year license. LOL.

[Perman]

Hi, Nick

Thank your acknowledgement of my opinion.

Usually, it would necessitate a person in your current capacity a lot of courage and wisdom to be at the receiving end and to provide a kind reply.

I am fully aware that I may have a good chance to get your ears, I would not even entertain an idea to do the same to a BIG BOX developer, normally in that case, ordinary citizen's opinion does nine of ten times fall into deaf ears.

SAS under your direction, I am sure it will evolve into an even better and better application, we as home users are so lucky to have you and your products around.

Take care.

[Ngwana]

-{ Quote: "...I specifically stayed away from shields, etc. etc. to try an differentiate us from other security related products so users would easily know which one was SUPERAntiSpyware ..." }-


That is great Nick!

I think the idea behind ‘shields’ has more to do with ‘modular’ design than anything else. The rationale is that each shield can be enabled/disabled individually depending on configuration need. Whether the they work is a different story, but an obvious downside is that the more shields get activated the greater the likehood of using more resources.

Of course the shields are meant to deal with ‘prevention’, or to intercept infections/infiltration. There is no problem in focusing mainly on detection/removal, but we have to accept others may try prevention too. There is no limit as to what a developer can do or not do, as one may choose to build protec tion without use of ‘shields’. I hope no one will get an idea that developers who chose to use ‘shields’ are weak in any way, but any design or architecture can be bettered. 8)

[Bunkhouse Buck]

I just purchased a license and the program crashed with direct disk access turned on-but the program told me to uncheck it (which I did) and now everything is running well.

I tried the free version which was fine and decided to test pre-release 4.0. Looks like a good supplement/complementary program to Dr. Web or Avira.

Keep up the good work!

[SUPERAntiSpy]

-{ Quote: "I just purchased a license and the program crashed with direct disk access turned on-but the program told me to uncheck it (which I did) and now everything is running well.

I tried the free version which was fine and decided to test pre-release 4.0. Looks like a good supplement/complementary program to Dr. Web or Avira.

Keep up the good work!" }-

May one of our developers contact you regarding the DDA (Direct Disk Access) issue? We have a new pre-release coming out in a day or so and should resolve all DDA issues - PM me here with an e-mail address if our lead developer may contact you to try the new release.

[Bunkhouse Buck]

-{ Quote: "May one of our developers contact you regarding the DDA (Direct Disk Access) issue? We have a new pre-release coming out in a day or so and should resolve all DDA issues - PM me here with an e-mail address if our lead developer may contact you to try the new release." }-

PM email address has been sent to you.

[Wordward]

SAS Pre Release ran well, and I believe it is a good program. However, I honestly just can't get past that beetle icon sitting in my System Tray. I think the next release of Spyware Terminator will be very good so until then... by by beetle, I knew you well.

[SUPERAntiSpy]

-{ Quote: "SAS Pre Release ran well, and I believe it is a good program. However, I honestly just can't get past that beetle icon sitting in my System Tray. I think the next release of Spyware Terminator will be very good so until then... by by beetle, I knew you well." }-

That's your choice of course - when you get nailed by a nasty rootkit that no other products will see, you are welcome to let the "little beetle" save you as it does others :)

[Tarnak]

icons schmicons......long live da beetle!! ;D

[jtcst]

-{ Quote: "SAS Pre Release ran well, and I believe it is a good program. However, I honestly just can't get past that beetle icon sitting in my System Tray. I think the next release of Spyware Terminator will be very good so until then... by by beetle, I knew you well." }-

You can always choose to hide the system tray icon if it bugs (no pun intended, "LOL") you that much. "LOL" :argh:

[Firebytes]

Not sure how a thread about SAS real-time protection has anything to do with the icon but since it has veered into that territory I can't resist putting in my two cents. :P

I can't understand why you wouldn't want to use a top notch security program like SAS just because you don't like the icon. Just doesn't seem like good logic to me. If the program does its job well then who cares about the icon??

"No, no, officer...really, I don't want you to stop any intruders from breaking into my home. Your badge is butt ugly!" :wacko:

;D

[Firebytes]

-{ Quote: "I notice in the ever changing thread about current set ups that a lot of people who have Superantispyware Pro running don't have the real time protection running. Just purely out of interest.

If you have it running....why?
If you don't have it running....why not?" }-

Ok, I see how the thread came to the icon topic due to the last question by the OP (red highlighting by me) but I still couldn't stop using a program I really liked due to its icon. If it matters to you that much though then that's OK too I guess. ;D

[Wordward]

Thanks for your kind response jtcst. Maybe if Nick replied in such a manner I'd consider keeping SAS for awhile longer since it very well may see a nasty rootkit that no other AS would, and maybe I'd even consider buying it. I guess that's what having 5 million users of a security software program can do to someones customer service skills. LOL. For the record I have yet to uninstall it as I am awaiting to see how well it runs with the new version of Online Armor Free. I here OA Free can detect rootkits, but I'm not really sure if it sees the nasty ones. LOL. I'll ask the man himself, Mike Nash if it does. He doesn't seem to mind questions, or even suggestions. Take care all. And that That includes you too Nick.

[SUPERAntiSpy]

-{ Quote: "Maybe if Nick replied in such a manner I'd consider keeping SAS for awhile longer since it very well may see a nasty rootkit that no other AS would, and maybe I'd even consider buying it. I guess that's what having 5 million users of a security software program can do to someones customer service skills. LOL. " }-

If you follow my posts on the various forums, you will see that I always listen to the suggestions of users and we keep a log of every suggestion that is brought forth. What I am trying to get across here is that our focus will ALWAYS be detection and removal of threats as that is what counts in the end. Having over 5 million users has made us hone our skills to best serve our customer base and to me having a large and growing user base is like having a huge family - I am responsible for making sure that they are taken care of and protected against threats - that is why you see me taking the time to try and personally answer posts and stay "in touch" with the real user base. If I didn't care about our users, I would simply turn a "blind eye" to the various threads and go on about my business - but to me, we are developing our product for the user so I want to stay in-tune with the user base. That said, we unfortunately can't implement everything everyone wants in the product - I have to properly budget our various resources. I don't feel that too many people would think much of SUPERAntiSpyware if we suddenly decided to focus on the graphics aspect of the product and let the effectiveness of detecting and removing spyware slip.

Maybe we could create a poll here on Wilders or on our own forums and find out what is most important to you, the user base. :)

[Threedog]

I am starting to think Wordward is just trying to pull your strings, Nick.

Long live the beetle!!!!! ;D

[Wordward]

Now that's a great response, and one I feel I can get behind and move on with. I certainly didn't mean to diminish all the help I have seen you offer here in Wilders Nick, and if you can find some of my older posts you will see I have always said good things about you and SAS. Also when I said by by beetle I knew you well. Although I meant it in a more joking matter than what it apparently came off as, I admit the Spyware Terminator part was a bit antagonistic and I apologize for that. Despite my many posts here at Wilders I really don't believe any of us here actually need most of the securty programs we use. But I really do think SAS is a good program and if I had the extra cash I wouldn't hesitate to purchase it to use for some added protection just in case I ever would come across a nasty rootkit. LOL. I do have one question though. Have you or anyone from SAS responded to the test done on SAS by I believe PC Magazine? Although I don't pay much attention to these magazine tests, it was still nevertheless not the most favorable, and I believe it should be addressed if it already hasn't been. Take care and keep up the good work. You must be doing something right if SAS has 5 million users. Oh, and Threedog is right. I was pulling your strings just a little bit with some of my earlier posts. Take a look here. http://www.wilderssecurity.com/showthread.php?t=198969 But I apologize for that too.

[Threedog]

Threedog is always right.....unless he is wrong. ;D

[EliteKiller]

-{ Quote: "Have you or anyone from SAS responded to the test done on SAS by I believe PC Magazine? Although I don't pay much attention to these magazine tests, it was still nevertheless not the most favorable, and I believe it should be addressed if it already hasn't been." }-
I don't recall ever seeing an official response from Nick on his Google blog before it was taken down or on his forums. It took him about 2 months to respond to Gizmo's article, and I do recall him saying that he was working on a response to PCMag, but it appears that he never quite finished it.

http://www.wilderssecurity.com/showpost.php?p=1033376&postcount=45

[SUPERAntiSpy]

-{ Quote: "I don't recall ever seeing an official response from Nick on his Google blog before it was taken down or on his forums. It took him about 2 months to respond to Gizmo's article, and I do recall him saying that he was working on a response to PCMag, but it appears that he never quite finished it." }-

Google (Blogspot.com/Blogger.com) would not respond regarding my blog and thus they unfortunately closed it down due to the fact that it (an thousands of other blogs) were hacked due to security errors in their system. All of the blogs are on our forums and I will be starting up another official blog shortly.

As far as the PCMag review, I will be awaiting their review of our upcoming 4.0 version and if the results are the same, I will prepare an official response at that time.

[EliteKiller]

Nick, do you ever sleep? ;) Hopefully Rubenking, or one of his ASSociates performing the review, is able to open their eyes in order to see what a truly remarkable product SAS is and give credit where it's due. Then again they're a bunch of shills so I wouldn't hold my breath. :dry:

[ccsito]

-{ Quote: "Despite my many posts here at Wilders I really don't believe any of us here actually need most of the securty programs we use." }-

I guess that means that I should discard all of my security programs and go "naked" on the web, right? LOL ::) :o ;) :P :doubt:

[Wordward]

Hey ccsito how have you been? You know I said "most" of the stuff we use right? LOL.

[Threedog]

What would ever make you think that anyone here runs too many security apps. ;D

[Wordward]

-{ Quote: "What would ever make you think that anyone here runs too many security apps. ;D" }-
LOL. Actually I really only run three. The problem is though, that it's always a different three every month. LOL.

[USAAlone]

-{ Quote: "I like that part of it also, lodore. When I bought my licence they had a special on to get a second licence too but I wasn't sure if both were lifetime or just the one. Now I know at least one of them (mine) is. The other one is installed on my Mother's puter so when the new version goes gold I will have to install it on her computer and then I will know. She lives about 100 miles away from me so it won't be going on for a bit." }-

From Frequently Asked Questions:

I have more than one computer, do I have to purchase SUPERAntiSpyware Professional for each of them?

When you purchase SUPERAntiSpyware Professional you receive a registration code that is allowed to be used on two (2) computers at the same time.*

If you need to install/run the product on more than two (2) computers, you are required to purchase an additional registration code. You can do so at a greatly reduced rate when you make your original purchase.

If you elect to purchase lifetime updates at the time of original purchase, you must purchase a lifetime update for each registration code you purchase.


http://www.superantispyware.com/supportfaqdisplay.html?faq=44

[EliteKiller]

I don't see any mention of lifetime updates for the second copy, nor is there an option to add it. Maybe Nick can chime in with a clarification.

[Threedog]

The second license is only good for a year....... I checked. ;D

I was aware that you could run one license on two computers when I purchased it, thats why I gave the second license to my Mother. I use one copy of mine on my actual computer and one on the VM.

[SUPERAntiSpy]

-{ Quote: "I don't see any mention of lifetime updates for the second copy, nor is there an option to add it. Maybe Nick can chime in with a clarification." }-

You can add lifetime updates to the extra copy by just updating the quantity of the lifetime updates to two (2) and clicking the update button.

[EliteKiller]

-{ Quote: "You can add lifetime updates to the extra copy by just updating the quantity of the lifetime updates to two (2) and clicking the update button." }-
In the screenshot that I posted above there is no option to add lifetime updates.

[SUPERAntiSpy]

-{ Quote: "In the screenshot that I posted above there is no option to add lifetime updates." }-

Once the additional copy is added, the option for the lifetime will show up.

[EliteKiller]

-{ Quote: "Once the additional copy is added, the option for the lifetime will show up." }-
Cart glitch?

[SUPERAntiSpy]

-{ Quote: "Cart glitch?" }-

Interesting. I just tested it here and it works. I will look into it.

[EliteKiller]

-{ Quote: "Interesting. I just tested it here and it works. I will look into it." }-
FWIW the link I was using is the "$19.95 special" you receive after a successful definition update of the free version.

[SUPERAntiSpy]

-{ Quote: "FWIW the link I was using is the "$19.95 special" you receive after a successful definition update of the free version." }-

Ok, it should be there now.

[EliteKiller]

Looks good on my end as well. :thumb:

[Wordward]

I have to admit that there are many people over the internet professing about SAS's Real Time capabilities. I'm starting to think that maybe it's not so bad to have a beetle icon in my System Tray after all. LOL. Also will add that the Pre Release is still running smoothly on my PC.

[Threedog]

It impressed me good enough that I bought it Wordward and I dont impress easy. The only question I was left with was to run realtime or not and after this thread my question is answered and realtime is enabled and running with no problems. Of course it may never see any action as my normal surfing is pretty safe. The only time I have ever got hit was when I went looking for it to test stuff and then I never did get infected.

[Wordward]

Hey Threedog. Yeah SAS is indeed super. If anyone has an extra license for it, I have about 10 months or so left on the ZoneAlarm Anti-spyware license that was available a little while ago, and would be happy to trade it for the extra SAS one. If not I guess I have to try and save up for a license. I wonder if maybe Nick would have given me one now if I hadn't of dissed the beetle icon? LOL. Seriously I have to say once again that I really do like this program and like you Threedog, because of what has been said about it in this thread I am a even more of a believer in its capabilities than I was before. Hey Nick, can there ever be a time when at least the color of the beetle icon can be changed though? LOL.

[Threedog]

See....never diss a beetle. Look at how people dissed Volkswagen when it first came out with the beetle....the origninal beetle not the revised version. Beetle owners laughed all the way past the gas station.

I knew how good the scan was with SAS but didn't know how good the realtime was until Fkudats post so I loaded it alone on my war lappy and went hunting. It was popping up more than a cheerleader on a trampoline and never missed a beat.

[EliteKiller]

Woodward, if you don't like the beetle icon then simply disable it in the SAS startup options, or you can customize the notification area on the taskbar.

[Wordward]

Threedog. My wife use to have a 73 VW Super Beetle which was very good on gas. Maybe if I started to drive one, I could save enough money up to keep using SAS. LOL. Hey EliteKiller. I know I could hide the icon, but I rather see it, than not see it. It's starting to grow on me though. I am serious about hopefully being able to at least change the color some day. Black would be cool. Or maybe a black "S" on it even.

[Tarq57]

-{ Quote: "Look at how people dissed Volkswagen when it first came out with the beetle....the origninal beetle not the revised version" }-
I don't remember my parents talking about anybody dissing the "original" Beetle. The one that was first produced in '36.
Only remember the Americans dissing it in the 60's and 70's. Where's the motor industry of the mighty USA today?
Sorry to be OT.

[Stijnson]

I'm running NOD32 2.7 as my AV. Will the Pro version, with real-time protection enabled, run nicely alongside or will this cause a conflict (2 real-time protections)?

[MikeNAS]

I can try that with Trial but I say YES! I run SUPERAntiSpyware PRO with Malwarebytes’ Anti-Malware and everything is fine.

[Stijnson]

-{ Quote: "I can try that with Trial but I say YES! I run SUPERAntiSpyware PRO with Malwarebytes’ Anti-Malware and everything is fine." }-

Thanks MikeNas. Those are two AS products, right? You have both products running in real-time?
I was wondering how SAS Pro (real-time) performs in combination with a real-time AV (like my NOD32).

[MikeNAS]

Yes both products running realtime with Kaspersky Anti-Virus. No slowdowns. This is my this week setup :D

[Stijnson]

-{ Quote: "Yes both products running realtime with Kaspersky Anti-Virus. No slowdowns. This is my this week setup :D" }-

LOL. You change setups every week? I'm more 'habit prone' I guess...;D

[Stijnson]

Is the statement in this post true?:

http://www.wilderssecurity.com/showthread.php?t=199373

Does SAS disable firewalls (in this case ZAP) without notifying the user? ???
I hope not of course.

[fax]

-{ Quote: "Is the statement in this post true?:

http://www.wilderssecurity.com/showthread.php?t=199373

Does SAS disable firewalls (in this case ZAP) without notifying the user? ???
I hope not of course." }-

Been running SAS and ZA and cannot confirm what reported.
ZA does not block SAS and SAS cannot disable ZA.

Probably some OP settings problem.

Cheers,
Fax

[SUPERAntiSpy]

-{ Quote: "Is the statement in this post true?:

http://www.wilderssecurity.com/showthread.php?t=199373

Does SAS disable firewalls (in this case ZAP) without notifying the user? ???
I hope not of course." }-

We do not disable anything on a user's system.

[acr1965]

-{ Quote: "I'm running NOD32 2.7 as my AV. Will the Pro version, with real-time protection enabled, run nicely alongside or will this cause a conflict (2 real-time protections)?" }-

Running NOD32 and SAS Pro here without a single issue. Actually I am running SAS Pro version 4 in Vista.

[Wordward]

I was wondering if there is mention anywhere of what all SAS' Real Time protects against and how it works. For instance a-squared has heuristics and its IDS to detect things in Real Time, and Windows Defender claims to detect unwanted programs with a heuristic type of detection method. Or is SAS more like AVG AS in that it scans every file opened with signatures?

[Wordward]

Or is it more like Spyware Terminator, but without the HIPS?

[SUPERAntiSpy]

-{ Quote: "I was wondering if there is mention anywhere of what all SAS' Real Time protects against and how it works. For instance a-squared has heuristics and its IDS to detect things in Real Time, and Windows Defender claims to detect unwanted programs with a heuristic type of detection method. Or is SAS more like AVG AS in that it scans every file opened with signatures?" }-

SUPERAntiSpyware is not a HIPS. We use many methods in detecting and preventing harmful processes from starting and terminating those that are active. Our real-time should not interfere with any other real-time protection.

[Wordward]

-{ Quote: "SUPERAntiSpyware is not a HIPS. We use many methods in detecting and preventing harmful processes from starting and terminating those that are active. Our real-time should not interfere with any other real-time protection." }-

Thanks for the reply. I understand SAS isn't a HIPS, but do these methods you speak of work for Internet Explorer only? Or do they offer protection for Firefox as well? I imagine if the protection is some kind an execution prevention method it does, or if it uses heuristics? Are any of these those methods?

[lucas1985]

SAS is mainly a blacklist scanner (signatures + generic signatures + heuristics + advanced filesystem scanner) with few non-signature based protection targeted at IE (protection of home page and the like)

[Wordward]

-{ Quote: "SAS is mainly a blacklist scanner (signatures + generic signatures + heuristics + advanced filesystem scanner) with few non-signature based protection targeted at IE (protection of home page and the like)" }-

Thank you for the info lucas1958 and where did you get this information at? So SuperAntiSpyware definitely has heuristics huh? Also what does the advanced filesystem scanner do exactly? I appreciate your answers as I am currently using a free Spy Sweeper trial, but I do think my PC ran a little faster with SAS. I just wanted to see what SAS's Real Time entails before reinstalling it. Thanks again and I look forward to more of your answers. I wonder why Nick wasn't as informative about this when I asked?

[Stijnson]

But the question remains: does SAS (with real-time protection) also protect FF?

[lucas1985]

-{ Quote: "Thank you for the info lucas1958 and where did you get this information at?" }-
SAS' website and some Nick's older posts.
-{ Quote: "So SuperAntiSpyware definitely has heuristics huh?" }-
-{ Quote: "Multi-Dimensional Scanning detects existing threats as well as threats of the future by analyzing threat characteristics in addition to code patterns." }-
Also, if you see some signatures, they're ended in .Gen, indicating generic signatures.
-{ Quote: "Also what does the advanced filesystem scanner do exactly?" }-
It's the feature that allows SAS to detect and remove active rootkits and other stealth or difficult to remove malware. If your AV misses a 0-day rootkit, it's highly likely that it will not remove the threat even after a signature update because the rootkit is manipulating what the AV sees. With SAS, it's the other way around, it's highly likely that it will detect and remove the rootkit if SAS missed it early.
-{ Quote: "Process Interrogation Technology allows threats to be detected no matter where they are hiding on your system." }-
-{ Quote: "I wonder why Nick wasn't as informative about this when I asked? " }-
I don't know. Perhaps he doesn't know how to explain SAS technology in an user-friendly (at least Wilders friendly) way or he doesn't want to give the bad guys a clue.
-{ Quote: "But the question remains: does SAS (with real-time protection) also protect FF?" }-
SAS' signatures and heuristics will stop malware from being installed, no matter what's the application delivering it.

[SUPERAntiSpy]

-{ Quote: "I wonder why Nick wasn't as informative about this when I asked?" }-

I have been swamped with the new release coming out and it seemed as though people were properly answering your questions. Our product is not just a "blacklist" scanner - we have all sorts of technology in place to handle new variants (unknown to us) of the different threat families which is like heuristics, but not the typical definition. As lucas1985 indicated, I also won't disclose everything we do as obviously it's proprietary. :)

Our DDA (Direct Disk Access) and KD (Kernel Direct) technology often allow us to see infections other products won't even see on a system.

As for being able to explain our technology......I certainly know how to explain our product and technology to others :)

[lucas1985]

-{ Quote: "Our product is not just a "blacklist" scanner - we have all sorts of technology in place to handle new variants (unknown to us) of the different threat families which is like heuristics, but not the typical definition" }-
Well, heuristics still do enumerate badness, so it would be blacklisting (default-allow approach). We may get caught in semantics, though.
-{ Quote: "As for being able to explain our technology......I certainly know how to explain our product and technology to others :)" }-
Great :) So, SAS heuristics are composed of:
- Generic signatures?
- Code analysis?
- Emulation?
- Sandboxing?
- ....?

[SUPERAntiSpy]

-{ Quote: "Well, heuristics still do enumerate badness, so it would be blacklisting (default-allow approach). We may get caught in semantics, though.

Great :) So, SAS heuristics are composed of:
- Generic signatures?
- Code analysis?
- Emulation?
- Sandboxing?
- ....?" }-

I really can't go into too much detail for obvious reasons. We have many methods to analyze and catch threats and new variants of the threats. I don't know of many security companies that will reveal their techniques. We are much more than an blacklist/signature based scanner. Signatures are of course part of any scanner, but certainly no the bulk of SUPERAntiSpyware's technology.

[lucas1985]

-{ Quote: "I don't know of many security companies that will reveal their techniques." }-
Well, everyone knows that Norman uses a sandbox for unpacking and heuristic analysis (behaviour-based heuristics) and that Avast only uses generic signatures as proactive measure.

[SUPERAntiSpy]

-{ Quote: "Well, everyone knows that Norman uses a sandbox for unpacking and heuristic analysis (behaviour-based heuristics) and that Avast only uses generic signatures as proactive measure." }-

That reveals nothing more than we revealed - we use signatures, smart definitions, heuristics, multi-dimensional scanning, code analysis and other proprietary techniques.

[lucas1985]

-{ Quote: "multi-dimensional scanning" }-
(?)
So, you have an unpacking engine and an emulation engine?
As I see it, SAS is closer to AVs than to "traditional" AS (shields, HIPS/IDS, policy guard), excepting for the registry scanning and a very advanced disk/filesystem scanner.

[SUPERAntiSpy]

-{ Quote: "(?)
So, you have an unpacking engine and an emulation engine?
As I see it, SAS is closer to AVs than to "traditional" AS (shields, HIPS/IDS, policy guard), excepting for the registry scanning and a very advanced disk/filesystem scanner." }-

We can unpack lots of samples :) We produce/create whatever technology is necessary to keep up with, or ahead, of the threats.

[lucas1985]

A last question, do you blacklist malware-related runtime packers?

[SUPERAntiSpy]

-{ Quote: "A last question, do you blacklist malware-related runtime packers?" }-

Not just the packers as some are actually used in legit products. With the number of users/files we touch in the world, we see all kinds of crazy things :)

[lucas1985]

The AV vendors do that (HEUR.Crypted, Trojan.Packed.13, Packed.Themida, etc). IIRC, certain runtime packers can be blacklisted without affecting legitimate software.

[SUPERAntiSpy]

-{ Quote: "The AV vendors do that (HEUR.Crypted, Trojan.Packed.13, Packed.Themida, etc). IIRC, certain runtime packers can be blacklisted without affecting legitimate software." }-


I understand what others do, but I also understand that we see legit samples with those as we have the built in false-positive reporting system that other products don't have.....

[lucas1985]

Your FP track record is very good. Congratulations to you and your team :)

[Wordward]

Just wanted to say thanks again for your help lucas1985, and to you for your reply Nick. I understand that you must be busy with the new release imminent, and that you of course don't want to divulge too much information about SAS's RT protection. Take care and thanks for a superb AS program.

[kurchatovium]

I just wanted to say I have a friend who tried out SAS free edition on my suggestion and it removed over 200 pieces of adware and spyware and now all the nasty pop ups and weird problems he was having are gone. I must confess I was very impressed.