PDA

View Full Version : New member with a stupid question


meekert
December 28th, 2008, 12:19 PM
Just installed ESET smart security on a new computer, Do I need any additional spyware removal programs? spybot,cc cleaner ,spyware buster. Any help will be appreciated.;D

TPG
December 28th, 2008, 07:55 PM
No. You are good to go. :thumb:

Jaki
December 28th, 2008, 08:21 PM
-{ Quote: "Just installed ESET smart security on a new computer, Do I need any additional spyware removal programs? spybot,cc cleaner ,spyware buster. Any help will be appreciated.;D" }-

To me, YES you do. And believe me when I say this: "if you use Eset, you are going to need it". The best that I could suggest will be MBAM or SAS Pro.


Peace.

TechOutsider
December 28th, 2008, 08:57 PM
-{ Quote: "Just installed ESET smart security...;D" }-

The Firewall isn't that hot.

jmonge
December 28th, 2008, 08:58 PM
-{ Quote: "The Firewall isn't that hot." }-
it is kind of warm but it is better than nothing;D

Saraceno
December 28th, 2008, 09:15 PM
Depends on your browsing behaviour. If you go to only a few reputable sites, news, wilders, don't download attachments from your email, all good. If you're always downloading unknown files from various unknown sites...

You could use:
http://www.superantispyware.com/download.html - free version for on-demand scans or lifetime pro version

http://www.malwarebytes.org/mbam.php - free version for on-demand scans or lifetime version

http://www.emsisoft.com/en/software/free/ - free version now includes the Ikarus AV engine which has very solid detection. The program does leave a service running, which uses minimal resources even when not in use, but the advantage is the program should always launch and not be shutdown/terminated by 'malware'.

Try them all. All install/uninstall easily. I've gone for the third option as it is an anti-spyware and a backup AV.

acr1965
December 28th, 2008, 09:19 PM
I would have another realtime anti-spyware program going. I use SAS Pro along with NOD32 for a couple years now and have never had a single issue between them. They run very light together. Maybe give SAS a try then go for the $19.99 lifetime license. It says "today only" but it has been "today only" for years now.

Makav3l1
December 28th, 2008, 09:58 PM
-{ Quote: "Just installed ESET smart security on a new computer, Do I need any additional spyware removal programs? spybot,cc cleaner ,spyware buster. Any help will be appreciated.;D" }-

You don't require an additional anti-spyware(AS) as ESET smart security has it's own AS engine. You could use spybot S&D for the immunizations if you wanted to but I wouldn't recommend using it's real-time teatimer service along with ESET. CCleaner is a file cleaner and is more of a tool to get rid of temporary files and cookies to clear junk and free up space, so you would be fine downloading that and using it once in awhile. Spyware Blaster has the same function as the immunizations in Spybot S&D and could be beneficial as it doesn't run in real-time but just immunizes your system by preventing you from downloading know spyware applications.

Max Zorin
December 29th, 2008, 05:47 AM
You are fine as you are. Standard realtime AM scanners such as MBAM and SAS etc need to be consigned to history. A-Squared is a full AV as well and has a HIPS in the full version - so this may be worth a look as it will offer a good layer of protection.

MZ

gery
December 29th, 2008, 06:50 AM
i wouldn't use S&D at all just SAS and that for second opinion

vijayind
December 29th, 2008, 07:08 AM
I would recommend using additional HIPS/BB like Threatfire, Mamutu or Prevx.
Of late, NOD32 has bettered its Spyware detection. So you could add a AS like SAS Free, MBAM Free or A2 Free for on-demand scan (just in case).

Miyasashi
December 29th, 2008, 07:19 AM
MBAM = Resource Hog T_T

While scanning you have to do nothing besides it or it will hang... -_-

@ Vista Ultimate 32bit

Franklin
December 29th, 2008, 07:40 AM
-{ Quote: "MBAM = Resource Hog T_T

While scanning you have to do nothing besides it or it will hang... -_-

@ Vista Ultimate 32bit" }-
Seems you may need a reinstall if you're getting that prob?;)

MS Antispyware 2009 installer I found on Boxing Day.
-{ Quote: "File setup_1_1_.exe received on 12.26.2008 02:14:25 (CET)
Current status: finished
Result: 0/39 (0.00%)" }-
Not a single AV flagging it at the time and what's the first thing one of these undetected rogues do - disables your resident realtime scanners and locks up your browser.

No realtime blacklist scanners here and I installed/ran the rogue via Sandboxie without a worry.

Terminated processess, deleted contents, uploaded the installer to MBAM and filed it away to my lovely malware collection.

Same result for 200 or so rogue installers I've played with.

Someone
December 29th, 2008, 07:58 AM
-{ Quote: "I would recommend using additional HIPS/BB like Threatfire, Mamutu or Prevx.
Of late, NOD32 has bettered its Spyware detection. So you could add a AS like SAS Free, MBAM Free or A2 Free for on-demand scan (just in case)." }-
+1. And a sandbox like Sandboxie:thumb:

Miyasashi
December 29th, 2008, 08:19 AM
-{ Quote: "Seems you may need a reinstall if you're getting that prob?;)

MS Antispyware 2009 installer I found on Boxing Day.

Not a single AV flagging it at the time and what's the first thing one of these undetected rogues do - disables your resident realtime scanners and locks up your browser.

No realtime blacklist scanners here and I installed/ran the rogue via Sandboxie without a worry.

Terminated processess, deleted contents, uploaded the installer to MBAM and filed it away to my lovely malware collection.

Same result for 200 or so rogue installers I've played with." }-

The thing is, that doesn't work =/ it uses 50% + of cpu and when a window covers it up... it starts hanging -_-

meekert
December 29th, 2008, 07:57 PM
Thanks everyone, I have downloaded MBAM & A-squared will try them both out. again thanks.:)

pugmug
December 29th, 2008, 08:56 PM
-{ Quote: "MBAM = Resource Hog T_T

While scanning you have to do nothing besides it or it will hang... -_-

@ Vista Ultimate 32bit" }-
Must be something screwed up with your puter as I have never had your problem happen.

Swordfish_
December 30th, 2008, 06:37 AM
-{ Quote: "You are fine as you are. Standard realtime AM scanners such as MBAM and SAS etc need to be consigned to history. " }-

Could you elaborate more on that, please?

-{ Quote: "A-Squared is a full AV as well

MZ" }-

Good point. Looks like the Ikarus engine is up to the task.

Best regards.

Miyasashi
December 30th, 2008, 10:43 AM
-{ Quote: "Must be something screwed up with your puter as I have never had your problem happen." }-

I had problems with my previous Vista Ultimate setup, some things didn't work properly, so I clean installed Vista and all other problems have been solved except for the MBAM one. High CPU remains and so is the hanging.

So either it's incompatible with other "running processes" or the problem resides with MBAM itself.

Max Zorin
December 30th, 2008, 05:09 PM
-{ Quote: "Could you elaborate more on that, please?



Good point. Looks like the Ikarus engine is up to the task.

Best regards." }-
@Swordfish - Years back (late 90s, early 2Ks) many AVs only detected Viri and missed Trojans, Spyware, Adware etc. As a result there was an opening in the market for smaller, talented developers to create apps which specalised in detecting / removing non viral nasties. Examples of these were Moosofts The Cleaner, Agnitums Tauscan, Trojan Remover, Diamond CSs TDS, Trojanhunter, Eweido etc. If memory serves, TDS was king, followed by Trojanhunter and Eweido. A-squared was there, but originally went under a different name. Anyway, after some time, the major AV vendors realised the failings of their products and began to widen the detection of their AVs so as to include all the other nasties such as trojans etc. KAV and F-Secure were about the best.

Today, all of the decent AVs (now called AMs) detect all the various tyoes of nasties out there. KAV, Norton, F-Secure, Avira etc detect almost all sorts of things and these are large, multinational businesses with huge resources, so are able to develop cutting edge technologies and throw manpower at updating signatures 24/7/365. The small vendors who make todays dedicated AM scanners are commonly small outfits of 1-5 people (MBAM I believe is one person and someone part time)

Apps like MBAM detect so few nasties that the increase in protection they offer could not be measured above the level of noise. If they are of any use, it may be in the highly unlikley event that your AV misses something - and even then, if your AV misses it, chances are, they will too. They are best seen as free malware removal tools - I hear MBAM is good at removing a couple of rogue AVs - for instance.

A-Squared, using the Ikarus engine in the way it does, will offer wide spectrum protection against all nasties - Viruses, trojans, adware, spyware etc. The Ikarus engine has ben shown to outperform all others (including Avira) in detecting new and modified nasties - but the downside is, you can get some FPs. A-squared also has a HIPS and community based detection making it very powerful.

Prevx Edge is similar, in that it offers wide spectrum protection, has a HIPS type function and community based detection - so in my opinion, its a good backup to a good AV.

Tests have shown that the narrow spectrum AMs such as MBAM detect a tiny fraction of malware compared to AVs and A2, Prevx etc. In the light of this, the vendors of these narrow spectrum AM apps have argued that their apps are better at removing malware - but again, there has ben no valid evidence put forward to support this. The same vendors often argue they dont want to "bloat" their signature databases -- but what does this mean? Avira and Kaspersky have massive databases - huge - so by this definition "bloated" - yet, they are fast and light - particuarly Avira! I would argue, the truth of the matter is that the small vendors of the remaining few dedicated AM scanners have small databases as they dont have the capability or resources to have larger, more effective ones.

Running something like SAS or MBAM realtime will impose the same sort of overhead on your system as running Prevx Edge or A2 - and yet only offer about 1/20th of the protection.

Anyway, no doubt my post will get some angry responses from people saying how SAS or MBAM has saved them in the past etc - but my feeling is that an individuals personal experience should be taken with a pinch of salt. Look at independant tests - tests using thousands of samples etc - there are several about.

I remember Eweido (however you spell it) was purchased by AVG and had its AM technology integrated in to their AV scanner. Since all the major AVs now detect the whole spectrum of malware now, I cant se the remaining few dedicated AMs being purchased by them, instead, I expect that in the next 1-2 years, the narrow spectrum AM scanners such as SAS and MBAM etc will all have died a death.

Franklin
December 30th, 2008, 06:17 PM
Get outta here Max, SAS and MBAM have helped me heaps of times in getting a computer back to a usable state where some rogue had disabled the resident realtime AV! >:(

Nett0pp
December 30th, 2008, 06:38 PM
-{ Quote: "Just installed ESET smart security on a new computer, Do I need any additional spyware removal programs? spybot,cc cleaner ,spyware buster. Any help will be appreciated.;D" }-


Try Boclean, Bothunter(No removal), Dr web cure it (Standalone AV FREE) , ScripTrap, Returnil(virtual).. Its always room 4 additional software.................
Do ESETs firewall leak alot??? Then maybe some outbound/inbound protection software(Threatfire)
-Its all FREE-

acr1965
December 30th, 2008, 07:24 PM
@Max- how many of your posts are touting A-squared? More than half? Seriously, do you work for them?

A2 is alright. But as far as resource usage it seems to use significantly more than SAS ever has. And the false positives have always been there. Ikarus has a ton of false positives. So the combo of the two should really be something to keep a user busy.

I have used MBAM to remove rogue av's in the past- some which were completely missed by dedicated av/as programs. It is a useful tool. And I put more weight into using a program and removing malware than any test results I see.

Max Zorin
December 30th, 2008, 07:43 PM
-{ Quote: "@Max- how many of your posts are touting A-squared? More than half? Seriously, do you work for them?

A2 is alright. But as far as resource usage it seems to use significantly more than SAS ever has. And the false positives have always been there. Ikarus has a ton of false positives. So the combo of the two should really be something to keep a user busy.

I have used MBAM to remove rogue av's in the past- some which were completely missed by dedicated av/as programs. It is a useful tool. And I put more weight into using a program and removing malware than any test results I see." }-
No, I dont work for them.

The facts speak for themselves concerning the detection rates of A2, MBAM, SAS etc. Things are not a matter of opinion, or personal taste. there is some hard and fast reality out there. There is no test evidence anywhere in the world that shows MBAM or SAS are of any real use. Forget personal opinion based on emotional investment, or an individuals personal one off experience - all the tests show that these narrow spectrum AMs 1) dont remove malware as well as standard apps. 2) Detect next to nothing. 3) Are unable to update signatures fast enough to respond to new threats.

If you can counter 1, 2 or 3 above with any real facts or evidence, please do so. Im not interested in hearing about personal experience or one off examples - focus on large samples etc - be logical and scientific.

PS - if anyone here can conduct a test using a large sample of malware which puts SAS or MBAM anywhere other than last, I will eat my hat.

MZ

Miyagi
December 30th, 2008, 07:54 PM
-{ Quote: "No, I dont work for them.

The facts speak for themselves concerning the detection rates of A2, MBAM, SAS etc. Things are not a matter of opinion, or personal taste. there is some hard and fast reality out there. There is no test evidence anywhere in the world that shows MBAM or SAS are of any real use. Forget personal opinion based on emotional investment, or an individuals personal one off experience - all the tests show that these narrow spectrum AMs 1) dont remove malware as well as standard apps. 2) Detect next to nothing. 3) Are unable to update signatures fast enough to respond to new threats.

If you can counter 1, 2 or 3 above with any real facts or evidence, please do so. Im not interested in hearing about personal experience or one off examples - focus on large samples etc - be logical and scientific.

MZ" }-

You might wanna think twice. ::)

Check out Remove-Malware.com and see for yourself, especially what others leave behind. SAS and MalwareBytes have achieved a milestone of many users in their base. I have used them and they have picked up things.

Whether "1) They don't remove malware as others. 2) Detect next to nothing. 3) Are unable to update signatures quickly to new threats." or a science fiction, please don't underestimate them. ;D

Franklin
December 30th, 2008, 09:05 PM
-{ Quote: "
PS - if anyone here can conduct a test using a large sample of malware which puts SAS or MBAM anywhere other than last, I will eat my hat.
MZ" }-
Well Max, I would say zero day malware is more important eh?

205151
205152

Kees1958
December 30th, 2008, 09:22 PM
Franklin,

You are mild, I had offered him a side salad to go with Zorin's hat :)

Let's say I am happy with company's like A2, MBAM, SAS offering free scan on demand software. Before running an image backup, I always run those 3, just for good practise.

acr1965
December 31st, 2008, 04:43 AM
-{ Quote: "No, I dont work for them.

The facts speak for themselves concerning the detection rates of A2, MBAM, SAS etc. Things are not a matter of opinion, or personal taste. there is some hard and fast reality out there. There is no test evidence anywhere in the world that shows MBAM or SAS are of any real use. Forget personal opinion based on emotional investment, or an individuals personal one off experience - all the tests show that these narrow spectrum AMs 1) dont remove malware as well as standard apps. 2) Detect next to nothing. 3) Are unable to update signatures fast enough to respond to new threats.

If you can counter 1, 2 or 3 above with any real facts or evidence, please do so. Im not interested in hearing about personal experience or one off examples - focus on large samples etc - be logical and scientific.

PS - if anyone here can conduct a test using a large sample of malware which puts SAS or MBAM anywhere other than last, I will eat my hat.

MZ" }-

If you think MBAM and SAS are of no use and do not remove malware as well as "standard apps" that's your business. But I am not buying it. How many virus infections occur these days as compared to spyware, trojans and rogue anti-spyware/av's? Removal is important. And of the tests I have read and seen MBAM and SAS are usually better at removing these type of infections.

Likewise, not having constant false positives is important. If you do not think A2 has false positives then you have not used it very long. And unless there have been some major changes since their last version the FP issue still remains.

I am not saying A2 is a bad app. I have had several full version licenses of it but always uninstall after a few days and go back to SAS. But A2 just works better for me as an on demand scanner. It has a good detection ability, albeit a high number of false positive (and that was before incorporating Ikarus). A2 has a nice support forum as well. I wish they and Ad Muncher would figure out why the two programs will not work together. It has something to do with the Malware-IDS. That issue has been known for 2+ years now. I'll take my Nod32/SAS combo and my Kaspersky/SAS combo over your Ikarus/A2 combo any day.

Max Zorin
December 31st, 2008, 04:50 AM
-{ Quote: "Franklin,

You are mild, I had offered him a side salad to go with Zorin's hat :)

Let's say I am happy with company's like A2, MBAM, SAS offering free scan on demand software. Before running an image backup, I always run those 3, just for good practise." }-

Yes, hardly a large or scientific test - unlike these below - and PLEASE - would the usual suspects avoid embarsing themselves by pretending the tests are flawed in order to explain why their app is last!

http://ssupdater.com/modules/Forums/index.php?showtopic=3746
http://ssupdater.com/modules/Forums/index.php?showtopic=3938

The same site has also done a specific test om MBAM V Avira on a sample of 324 pieces of malware, less than 30 days old. MBAM detected only 13, whereas Avira (free edition) detected all but one.

If users are happy using MBAM, SAS etc, then fine, but it is irisponsible to always advise novice users to use these. Im forever seeing people say use MBAM etc - use it as a free on demand scanner by all means - but dont make the mistake of thinking it offers any measurable widescale protection - as it has been proven not to.

Speaking of hats - I believe you get a tin foil one with every registered copy of MBAM or SAS!

MZ

Kees1958
December 31st, 2008, 05:19 AM
-{ Quote: "Yes, hardly a large or scientific test (a)

Im forever seeing people say use MBAM etc (b)

Speaking of hats - I believe you get a tin foil one with every registered copy of MBAM or SAS!

MZ" }-

Ad a: be a sport (not a Max Zorin, great nick name by the way), you said ANY, do not change the bet

Ad b: You will always find a lot of blind 'follow the masses' advices. I appreciate members who spice up the discussion (like you), only be fair (see a).

Cheers

Saraceno
December 31st, 2008, 05:22 AM
Max, thanks for the links.

I think all tests are different, all can be useful.

For example, the user here Maymoons, kindly tested most programs against his 80 000 sample (about this many I think). What he found, most AVs couldn't even load to begin detecting/removing problem files. From memory, A-Squared, Avast performed ok, tools such as AVZ didn't. The majority struggled to be installed, and once installed, struggled to remove many of those problem start-up entries bombarding a user with prompts and alerts.

SAS was able to load and remove most of these problem programs, especially the ones at startup. So although it may have missed files which lay dormant, the active ones screwing a person's system up, were taken care of. With the malware tested in that one test, combined with an AV, SAS could have removed those 'new problem threats', although only being maybe several problem files, these may have prevented the AV from functioning.

What I learned from that one test, programs like MBAM and SAS work with your AV and focus on new threats while your AV will most likely take care of the older viruses.

But all tests are different as the amount of 'malware' in circulation is in the many millions (or more).

Max Zorin
December 31st, 2008, 05:58 AM
Im sure SAS and MBAM do remove some things that some AVs miss, but on the whole, I do not subscribe to the belief that these niche scanners have some property that the main AVs dont. Yep, you may cite an example of a specific instance where SAS / MBAM removes something KAV or Avira misses - but this is misleading, as it is a fact that one could cite hundreds more instances where the AVs remove nasties where the AMs fail.

My fundamental point is that I dont believe (as there is no evidence) that these niche AMs are better able to detect or remove nasties than wider spectrum scanners. There is a myth put out that in being narow spectum, this in itself gives them some super ability - this is not so.

See below to see a test showing A2 REMOVES more than many AVs:

http://ssupdater.com/modules/Forums/index.php?showtopic=3589

the reason I always recoment A2 is because it is a wide spectrum scanner and uses several methods to provide protection - including the Mamutu HIPS. If someone was going to pick just one app to run alongside their AV, it would NOT be logical or sensible to select MBAM or SAS over A2 - given A2 detects more, has more functionality and uses several protection methods - the HIPS is crucial here.

As for FPs, yes, A2 does have some - but many fewer than it did. I have not had any on my system in about a month - and Im always toying with it. I would prefer to have occasional FPs - which you can verify / test with any number of online scanners, than have something that misses new threats or modified nasties.

I do own a license for SAS - and Trojanhunter!! - but dont have it installed. None of the dedicated AMs I have used have ever found anything - ever - only A2 - which detected a piece of malware even Avira missed.

As a point of interest, I installed MBAM to see if it detected the same malware (a rogue installer) and it did not. I submitted the file to MBAM and Avira at the same time. Avira analysed it, gave me feedback and updated their database within a few hours (2-3) - so it detected it. After 24 hours MBAM had not. In total, I sent the same sample three times over a week - but it was never added!

MZ

Swordfish_
December 31st, 2008, 06:35 AM
-{ Quote: "@Swordfish - Years back (late 90s, early 2Ks) many AVs only detected Viri and missed Trojans, Spyware, Adware etc. As a result there was an opening in the market for smaller, talented developers to create apps which specalised in detecting / removing non viral nasties. Examples of these were Moosofts The Cleaner, Agnitums Tauscan, Trojan Remover, Diamond CSs TDS, Trojanhunter, Eweido etc. If memory serves, TDS was king, followed by Trojanhunter and Eweido. " }-

Well, indeed - I remember many years ago some 'strange' and 'new' - for most people - dedicated software like Tauscan and, yes, TDS-3. DiamondCS was light years ahead in my humble opinion.


-{ Quote: "A-squared was there, but originally went under a different name. Anyway, after some time, the major AV vendors realised the failings of their products and began to widen the detection of their AVs so as to include all the other nasties such as trojans etc. KAV and F-Secure were about the best.

Today, all of the decent AVs (now called AMs) detect all the various tyoes of nasties out there. KAV, Norton, F-Secure, Avira etc detect almost all sorts of things and these are large, multinational businesses with huge resources, so are able to develop cutting edge technologies and throw manpower at updating signatures 24/7/365. The small vendors who make todays dedicated AM scanners are commonly small outfits of 1-5 people (MBAM I believe is one person and someone part time)

Apps like MBAM detect so few nasties that the increase in protection they offer could not be measured above the level of noise. If they are of any use, it may be in the highly unlikely event that your AV misses something - and even then, if your AV misses it, chances are, they will too. They are best seen as free malware removal tools - I hear MBAM is good at removing a couple of rogue AVs - for instance." }-

This is something that I've been thinking about fairly recently. Having all the arsenal of on-demand scanners like MBAM, SAS, A2 and more - does it really make sense to use it, while my realtime protection (i.e. resident AV's like Avira, Drive Sentry, not to mention D+. TF and all the rest) is not that weak at all?
On the other hand, I remember that once or twice BOClean and others did detect something that my AV missed. The question is - where is the line after crossing which, using more and more AM (by which I mean a general Anti/Malware/Virusware/Whatever-Is-Bad-Ware) simply doesn't make sense?


-{ Quote: "

A-Squared, using the Ikarus engine in the way it does, will offer wide spectrum protection against all nasties - Viruses, trojans, adware, spyware etc. The Ikarus engine has ben shown to outperform all others (including Avira) in detecting new and modified nasties - but the downside is, you can get some FPs. A-squared also has a HIPS and community based detection making it very powerful.

Prevx Edge is similar, in that it offers wide spectrum protection, has a HIPS type function and community based detection - so in my opinion, its a good backup to a good AV. " }-

What about a Drive Sentry then? It also offers a community protection, moreover - as Kees1958 stated somewhere - quite qood registry support out of the box. So, let's assume that software like DS, Prevx Edge offer a wider spectrum of protection in comparison to the likes of SAS, MBAM. Would it make sense to change them for their more wide-reaching competition?
I'm asking because I've been using both SAS realtime and DS and if it wasn't for the BSOD & ntfs.sys bug with combination of DS * SBIE I would have stayed with the combination of Avira and Drive Sentry.

-{ Quote: "


Running something like SAS or MBAM realtime will impose the same sort of overhead on your system as running Prevx Edge or A2 - and yet only offer about 1/20th of the protection.

" }-

But what if adding, like I said above - software like - let it be an example - Prevx Edge or Drive Sentry gives you additional gain that is more than this '1/20th' of protection to the system, where, you have - let it be an example again - only Avira and, say, Threatfire?

Someone could say - "What about CPU overhead, memory usage?" - well, I don't care as long as all the active software isn't conflicting with each other and doesn't make me click ten buttons to launch Photoshop.

-{ Quote: "

Anyway, no doubt my post will get some angry responses from people saying how SAS or MBAM has saved them in the past etc - but my feeling is that an individuals personal experience should be taken with a pinch of salt. Look at independant tests - tests using thousands of samples etc - there are several about.

I remember Eweido (however you spell it) was purchased by AVG and had its AM technology integrated in to their AV scanner. Since all the major AVs now detect the whole spectrum of malware now, I cant se the remaining few dedicated AMs being purchased by them, instead, I expect that in the next 1-2 years, the narrow spectrum AM scanners such as SAS and MBAM etc will all have died a death." }-

One point could be interesting - would it be possible that dedicated AM's have their databases enriched with the more 'classical' threat signatures/their engines boosted to detect more 'classical' stuff so that they could compete with their bigger competition like Avira or, say, KAV or is this unlikely?

Best regards :)

Max Zorin
December 31st, 2008, 08:13 AM
@swordfish - The original question posted was asking if the user needed to add anything to ESET to secure his system - and I think the answer is "not really"

Adding any AM app which has very narrow detection capabilities / detects small No of nasties will add almost nothing to the security of the system, but adding a wider spectrum scanner will marginally improve security.

Its not a good idea to run two AVs as they can conflict with eachother and result in worse protection than just one. A-squared and Prevx Edge are wide spectrum scanners, but do not conflict with any AVs (I know A2 uses the Ikarus engine, but it is implemented in such a way that it does not conflict).

I know there are several other wide spectrum scanners out there - but Im not familiar with them. Im confident these others would be a valuable second line of defence in support of an AV.

AM apps which dont just rely on signatures must be a good idea as well - a HIPS is very useful as will be community based detection.

As to the possibility of the narrow spectrum AM apps out there increasing the size of their detaction databases - 1) whats the point? - all the AVs out there do that already. 2) the vendors in question say they dont want to "bloat" their databases - excuse me while I laugh... 3) the vendors in question have small databases as they dont have the resources to have larger ones.

You will have noticed that over the last 10 years, various security apps have merged in to packages - firewalls, AV, HIPS, popup blockers and AMs commonly are found in a single package - this is the way it is going. in the next 1-2 yrs, the AM vendors in question wont be here.

acr1965
December 31st, 2008, 12:13 PM
-{ Quote: "Yes, hardly a large or scientific test - unlike these below - and PLEASE - would the usual suspects avoid embarsing themselves by pretending the tests are flawed in order to explain why their app is last!

http://ssupdater.com/modules/Forums/index.php?showtopic=3746
http://ssupdater.com/modules/Forums/index.php?showtopic=3938

The same site has also done a specific test om MBAM V Avira on a sample of 324 pieces of malware, less than 30 days old. MBAM detected only 13, whereas Avira (free edition) detected all but one.

If users are happy using MBAM, SAS etc, then fine, but it is irisponsible to always advise novice users to use these. Im forever seeing people say use MBAM etc - use it as a free on demand scanner by all means - but dont make the mistake of thinking it offers any measurable widescale protection - as it has been proven not to.

Speaking of hats - I believe you get a tin foil one with every registered copy of MBAM or SAS!

MZ" }-

The first thing that I think of when seeing those test results is whether the test bed is an accurate representative sample with what is found in the real world. For instance, the test bed consists of "Windows Viruses, Trojans, Backdoors, Worms, Spyware, Adware, Rootkits, Exploits, Keyloggers, Hacking Tools, Malicious Scripts and other malware". But I do not see how many samples are in each category. If the samples are- say- 90% windows viruses and the remaining 10% spread out among the other categories, then that would easily explain why MBAM and SAS do not test very well as they are not anti-virus products. And for added argument, if the test bed is 90% windows viruses but in the real world only 50% of infections are caused by windows viruses, then the test results are misleading. Again, that is just pure speculation as I do not know. But it is something worth considering.

pugmug
December 31st, 2008, 01:28 PM
Seems to be nothing more than an A vs B thread with some people going with one site results and others with a different site.What is the point?Can anyone prove which site is correct?I think not!

Max Zorin
December 31st, 2008, 02:11 PM
-{ Quote: "Seems to be nothing more than an A vs B thread with some people going with one site results and others with a different site.What is the point?Can anyone prove which site is correct?I think not!" }-
It is clearly not an A vs B thread - why say such a thing - read the thread, its called debete - you learn from it. Try it some time!

pugmug
December 31st, 2008, 02:28 PM
-{ Quote: "It is clearly not an A vs B thread - why say such a thing - read the thread, its called debete - you learn from it. Try it some time!" }-
OK, teach me something you can prove 100% correct with your pointless debate as you call it.Can you?

Max Zorin
December 31st, 2008, 03:22 PM
-{ Quote: "OK, teach me something you can prove 100% correct with your pointless debate as you call it.Can you?" }-
Please dont try to sabotage this thread. You are not forced to read it if you dont like it!

Fly
December 31st, 2008, 03:59 PM
-{ Quote: "Just installed ESET smart security on a new computer, Do I need any additional spyware removal programs? spybot,cc cleaner ,spyware buster. Any help will be appreciated.;D" }-

Many valid opinions/options.

You might be able to get a compatible and effective antispyware application with real-time protection, although I can't give even one example !
On-demand antispyware applications, free and otherwise are more abundant.

I don't know much about ESET smart security.

Patching holes in your programs, removing vulnerable applications, and configuring your browser safely are important.

Virtualization is becoming more popular, programs like Sandboxie and Returnil could be valuable assests, although I've never used them.

Other, more technical 'fixes' are available, but it's too complex for me to handle that issue.

A particular removal tool: imaging software and hardware (external harddisk), like Acronis, although it's said that the later versions are more bloated. This way, every time something goes wrong on your computer you can restore a clean image.

pugmug
December 31st, 2008, 06:29 PM
-{ Quote: "Please dont try to sabotage this thread. You are not forced to read it if you dont like it!" }-
I would never sabotage a thread.My point if you need help understanding is you can't prove anything with you site,link test and nither can any others with their's.I gave my take on this as don't follow,Do,as in and for yourself.People speak of what they think they know,not what they truly know.

Saraceno
December 31st, 2008, 11:19 PM
As Max pointed out, I think ESET will be more than enough for most users. But it depends on your browsing behaviour. For example, do you spend most of your time reading on forums, or do you prefer to download unknown torrents and programs all day?

Using a-squared free, is definitely a good backup program. And although a full scan takes awhile, you can't go past Dr.Web's CureIt (http://www.freedrweb.com/)for another backup scanner that doesn't need to install and has proven itself as 'curing' or cleaning files effectively.

I'd stick with ESET, and do a full scan with a-squared free or CureIt once every couple of weeks. If you find that these additional programs are finding 'stuff' they shouldn't be, then it might be time to invest in using something like 'DefenseWall' or 'sandboxie'.