CounterSpy Consumer 2.0 Limited Beta is now available

I have found it to be very stable and a great product.

 

Definitions updated to 414

Gerard

 

Here you have it:

Code:

Spyware Scan Details
Start Date: 23-09-2006 12:05:42
End Date: 23-09-2006 12:12:00
Total Time: 6 Min 18 Sec
Detected spyware

RealVNC Commercial Remote Control Tool  more information...
Details: VNC (Virtual Network Computing) software makes it possible to view and fully-interact with one computer from any other computer or mobile device anywhere on the Internet.
Status: Ignored

Infected registry entries detected
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_Deferral
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_GetUpdateRect
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_KeyPress
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_LButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_MButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_RButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\Hpqdirec.exe use_Timer
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_Deferral
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_GetUpdateRect
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_KeyPress
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_LButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_MButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_RButtonUp
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\ORL\VNCHOOKS\Application_Prefs\hpqtra08.exe use_Timer


RedV Protector Suite Rogue Security Program  more information...
Details: EasyInstall is the spyware portion from RedV.
Status: Ignored

Infected registry entries detected
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\P3P\HISTORY\REDV.NET 


Sentinel Professional Surveillance (General)  more information...
Details: Sentinel takes control of Windows based Computers.
Status: Ignored

Infected files detected
c:\documents and settings\all users\start menu\programs\sentinel\sentinel (low resource edition).lnk
c:\documents and settings\all users\start menu\programs\sentinel\sentinel on the web.lnk
c:\documents and settings\all users\start menu\programs\sentinel\sentinel.lnk
c:\documents and settings\all users\start menu\programs\sentinel\uninstall sentinel.lnk
c:\documents and settings\all users\start menu\programs\sentinel


Adware.Sogou Low Risk Adware  more information...
Details: Adware.Sogou is an adware program that modifies the Internet Explorer home page and search page and displays advertisements.
Status: Ignored

Infected registry entries detected
HKEY_LOCAL_MACHINE\Software\Classes\MEDIA TYPE\{E436EB83-524F-11CE-9F53-0020AF0BA770}\{57428EC6-C2B2-44A2-AA9C-28F0B6A5C48E} 
HKEY_LOCAL_MACHINE\Software\Classes\MEDIA TYPE\{E436EB83-524F-11CE-9F53-0020AF0BA770}\{57428EC6-C2B2-44A2-AA9C-28F0B6A5C48E} 0
HKEY_LOCAL_MACHINE\Software\Classes\MEDIA TYPE\{E436EB83-524F-11CE-9F53-0020AF0BA770}\{57428EC6-C2B2-44A2-AA9C-28F0B6A5C48E} Source Filter


I-Spy (the_seed) Password Cracker/Stealer  more information...
Details: I-Spy is a kind of spyware that capture passwords of Dialup, cached, mail, network and mozilla in a text file and upload that file automatically to the pre-defined web address.
Status: Ignored

Infected registry entries detected
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin AskBeforeAnyAction
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin Columns
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin ItemsType
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin ShowGridLines
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin ShowInfoTip
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin Sort1
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin UseColors
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\ServiWin WinPos
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff AdapterName
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff AutoModeCharsToCheck
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff CaptureFilter
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff CaptureMethod
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff Columns
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayCaptureTime
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayFilter
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayHighChars
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayICMP
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayMode
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayTCP
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff DisplayUDP
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff ForeColorLocal
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff ForeColorRemote
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff ForeColorTime
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff HexDumpCharsPerLine
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff HexDumpCharsSpc
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff HexDumpDisplayChars
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff HexDumpDisplayCounter
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff HexDumpMaxSize
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff LiveMode
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff LiveModeDisplayContent
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff MaxDataSizeDisplay
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff NonDisplayChar
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff PCapAdapterName
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff ResolveIPAddr
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff SaveFilterIndex
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff SaveSteamsFilterIndex
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff ShowGridLines
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff Sort
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff SplitLoc
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\SmartSniff WinPos
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\StartupRun 
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\StartupRun Columns
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\StartupRun Sort1
HKEY_USERS\S-1-5-21-1004336348-113007714-854245398-1003\SOFTWARE\NIRSOFT\StartupRun WinPos

Regards

 

Vampiric Crow:

OK, if you're still getting those detections, then the problem lies with the update file that your version of CounterSpy is using. Those false positives have been resolved -- even the folks who originally reported them to us are telling us that the false positives are resolved. Moreover, I can look into the database, pinpoint exactly what traces caused the false positives, and verify that those traces are disabled.

So, I'm going to proceed on the assumption that there is a problem with the update process on your version of CounterSpy.

* What version of CounterSpy are you using?

* What defs version is CounterSpy reporting using (see Help >> About)

* Have you noticed any errors or other anomalies when updating CounterSpy online? Excessive time, slow downloads, even error messages?

If worse comes to worse, I may have you manually download a .ZIP with CouterSpy's latest updates and manually unpack them over the existing defs files.

Eric L. Howes
Sunbelt Software

 

I dont know, from the postings in the beta forum it seems, they may have taken a step, backwards, instead of forward. Testers beware.

 

lol.

trjam remember when you said "except antislacker sucks" ? lol
quote: Kas 6 has no bugs, Kis yes. Anti-slacker sucks. But I have to wonder if this isnt the product to be watching for the first of the year. But they do have a ways to go and dont download their beta, you will really have a headache. Let them figure it out, but, I like Don and something tells me, he wont say something, just to look foolish later on. I think he calls it straight. If it is a rose, he calls it a rose. If it smells like crap, he stays silent. So Kas may be the one that proves us all wrong (end) quote.

what is you experience now you use KIS wtih antihacker?

 

Download the latest release of CS V2. It is bigger then Kis, and is getting as big as some common suites. This is just a antispyware program.

 

"just an anstispyware program"?
CS 2.0 has "Active Protection" and "System Tools" so it is more than a typical antipsyware program and thus bigger in size.
Most of the newer antipsyware programs have been getting bigger for a while now with the inclusion of monitoring components.

 

lodore, my point in all of this is, there is great advice here but, how many are jumping ship just based on the excitment some post about a product. You want to know what I really use? Nod32, Spy Sweeper and router firewall. That is it and has been. This goes to prove how many may rip their PC apart based on what someone posts, or some shanky review. Pick a product, and just stick with it. The chance of getting fried are very slim as all will provide good protection. Ok, last post.

 

2.0.325

414

It take more time to join the new definitions to the database than the other programs that use the same technology...
The rest I think that is fine...

You can tell me the link by PM...

Regards

 

trjam:

You wrote:

A few points, if I may:

1) It's beta quality software -- we advertised it as such, and beta quality software is guaranteed to have problems.

2) We set up the forums and explicitly invited people to use them to report problems -- and that's just what they're doing. We didn't invite them to post about their not having problems, or how much they liked the product, or anything else remotely positively about the product. So, yes, if you visit the beta forums, you will by and large see reports about problems. That's just as it should be.

Truth be told, I'm actually satisfied with the state of the beta right now. The most common problems people have reported include:

1) Registration key problems -- usually involving folks with 1.5 keys upgrading over 1.5 and not using the beta key provided in the forum;

2) Incremental update problems -- CS downloads an incremental update but fails to merge it properly.

3) Scan progress bar anomalies -- th scan progress bar is not behaving as expected for some folks.

We have a few other people reporting such problems as:

1) The Active Protection service turns off after reboot;

2) Conflicts with other programs that use kernel-level filter drivers.

These last two are a distinct minority, but Sunbelt is actively working on all the issues that have been reported so far including the occasional user with bluescreens (not completely unexpected with kernel-level drivers) and the odd user for whom the product simply won't install.

Truth be told, the vast majority of the posts to the beta forums have been feature requests -- many of them good ones. We've also had a user scouring the GUI for minor inconsistencies and glitches. Again, Sunbelt is dutifully taking note of all of these suggestions and requests. Although we won't be able to work many of the feature requests into version 2.0, we'll put them down for a 2.1 or 2.5 release.

Folks, if you'd like the beta test the software, please be my guest. If you run into problems of any kind, though, please report them in the beta forums that Sunbelt has set up for that purpose. We have a small team of QA folks whose entire mission right now involves monitoring the beta forums, taking reports of problems, reproducing those problems, and entering theose problems into our bug tracking system so that the devs can address them.

The current beta build (325) is quite stable, but as with all beta quality software, we advise folks not to run such software in a production environment or any environment where crashes and errors are simply unacceptable or not tolerable.

Best,

Eric L. Howes
Sunbelt Software

 

Eric, I have been testing the software since close to the start. I have found it to work better then anything I have used. Their beta team is dedicated to making this a great product and I have no doubt that once released, will be the best on the market. One thing I really like are all the extra features. Someone said it was a suite. I think you should have said, "Sweet."

 

thought id give this a whirl not the beta one though..one before that version...do you have it on real time active Protection.... or just demand?? how do i stop it from starting up if i want to use it as demand?.... any problems with it.....thanks MD

 

maddawgz:

Active Protections can be turned on and off -- you do not need to have APs running all the time. You will be given the opportunity to turn APs on during install, though you can always reconfigure after install.

Even with APs off, though, the CounterSpy tray icon and service will continue to load. If you'd truly like to make CounterSpy "on demand" then do the following:

1) Use your favorite statrtup mangement utility to turn off the tray application (SBCSTray.exe) in the auto-start list.

2) Use the Administrative Tools Services applet to change the Startup Type to "Manual."

Best,

Eric L. Howes
Sunbelt Software

 

I have just installed CS 2.0.

I notice that if I put the cursor over the icon in the tray it says that CS is idle. Further I cannot identify it in Windows Task Manager. What are the entries that would be shown there? Does that occur because CS is idle?
Active protection is enabled.

I have a license for CS 1.5, and I thought that the beta would accept that license, but it did not. I did get the license from the forum and it is good for 36 days.
Will my CS 1.5 license be good when the version 2.0 is marketed, assuming it would not have expired? In the few hours I have used it, I find it updates faster, and scans faster. So far, so good.

Best,
Jerry

 

Hi there thanks i went to msn config and unticked sunserver?.. i cant find the ones ur talkign about and the admin tools thing is that in control panel whats sunbelt under thanks..MD

 

JerryM:

You asked:

"Idle" means that CounterSpy is not actively engaged in any user-initiated tasks such as an on-demand scan, and update, or other such task. If you enabled APs then APs are active. Currently CS is showing "Idle" in my system tray as well, but I can assure you APs are working just fine.

Relevant processes to look for are:

SBCSSvc.exe: the Sunbelt CounterSpy service
SBCSTray.exe: the Sunbelt tray icon program

If you open the main interface for CounterSpy, you will also see a CounterSpy.exe.

Yes, your old license will still be good. Sunbelt is in the process of bringing online several new servers both for CounterSpy 2.0 updates and licensing. We've encouraged people to use the beta key published in the forum for 2.0 -- even those with valid 1.5 licenses. When CounterSpy 2.0 is released, it will be a free upgrade for holders of existing 1.0 and 1.5 licenses.

Best,

Eric L. Howes
Sunbelt Software

 

maddawgz:

You wrote:

Sunserver is a startup entry for an earlier version of CounterSpy -- not CounterSpy 2.0. The only startup entry you'll see for CSC 2.0 is SBCSTray (the tray icon program). The Sunbelt CounterSpy Service starts up as a service.

The Services applet can usually be found in the Administrative Tools folder found in the Control Panel (if you're using Win2K or WinXP)

You can also find services listed on the S"ervices" tab of MSConfig.

Best,

Eric L. Howes
Sunbelt Software

 

Hi Eric,

Thanks very much for your prompt reply. I suspected that it was supposed to work that way.
Both of the entries do show up on TM. I just did not know what to look for. Boy, the memory usage has been drastically reduced.

I appreciate the help.

Best,
Jerry

 

The beta has been performing nice and stable for me. Hats off to Sunbelt folks!

I did observe a significant effect of slowed opening of archive files (zip, rar) with the Active Protection enabled. When I turned this feature off, opening of files was quick again.

 

bugsy pal:

Thanks for the reaction. I would encourage you to post your experiences with opening archive files with APs enabled over at the Sunbelt Beta forums, where our QA staff can take down the report and get it into our bug-tracking system.

Best,

Eric L. Howes
Sunbelt Software

 

A new build of CounterSpy 2.0.449 is now available for testing (released 20 Oct 06). You need to get access to the Sunbelt Beta forum to download the beta. There have been many changes and some new features added to the program. Details are available in the Beta forum.

 

I downloaded this one and did a scan. I think I could have wait the whole weekend to finish but it stopped after 330 files and that's it.
So I uninstalled again and wait for better times.
Had issues before with CS but never got an answer.
I think it just don't fit my setup.
I still have faith this could be a good AS.

Gerard

 

CS V2 and Prevx1 wont work. CS scan stops about a third way through.

 

A new beta build of CounterSpy 2.0.513 is now available for testing (released 03 Nov 06).