Anti-Spyware Poll 2006

I don't use real-time AS, and don't scan a lot anyway.

But I voted for SuperAntispyware, which I consider very good (thorough scan, ability to actually detect spywares without sigs ), and promising.

nicM

 

A Squared for their IDS (realtime), Boclean (also realtime) for their superiour Memory scanner and spysweeper for on demand...

 

you mean heuristics? aren't heuristics based on sigs too? or am I missing something? I thought that heuristics where signatures but with a wider scope, with the possibility to produce f/p's? .. ..

 

To tell you the truth, I don't know how is working generic detection with SuperAntispyware, butwhat I've seen is that it is actually detecting threats without having sigs about it.

One example : Here, I did install several spywares, (for testing purpose of course), and here is an extract from the log of SAS's scan (the names are Ewido's names btw), I've kept it on an USB drive :

>>> This was Downloader.Qoologic.bj, with a component from Trojan.ZenoSearch (also detected with sigs, about it's other files)

>>> This one was a mix of files from Downloader.Small.buy, Downloader.Qoologic.bj (again), Adware.CommAd, and Downloader.TSUpdate. Plus another nasty one, but I didn't get a name for this one, since the other scanners I used didn't detect it.

>>> I did scan these on Jottis, but do not remember their names, sorry (I remember kfzoa.exe was a keylogger, though. And "Fichiers Communs" is the french for Common Files).

10 other different spywares were detected by sigs.


I didn't get a single FP, and as I've said, it's scan is thorough , it did even pick every temp files from malwares, and files located in Common Files, here and there (Ewido didn't).

Seems a good job to me!

nicM

 

Hi nicM, i think it detected with sigs. You can see in Database Definitions Updates in SAS homepage. There are update for Unclassified.Unknown Origin/System, Trojan.Unknown Origin and Unclassified.Unknown Origin.

 

Hi malaria,

umm, yes, seems you're right : I didn't check it before, but that sounds as strange names for sigs defs, I didn't expect it .

nicM

 

1.NOD32
2.OutPost W/spyware system scan
3.Ad-Aware
4.spybot Search & Distroy
5.Ewido
6.Spyware Guard & spyware blaster
In order of effectiveness on my system.

 

Realtime: SuperAntispyware, BOClean.
On Demand: Spy Sweeper.

These are the three i voted for & how i use them.

muf

 

EXACTLY THE SAME HERE

Online Virus Scans if absolutely needed on research finds.

SSM + FIREWALL + LAUNCH MONITOR w/ On-Demand Ewido = 100% SECURED ON THIS END. PERIOD!

 

I use the antispyware that come in my Panda Titanium 2006+ Antispyware. Plus I also have spywareblaster. The antispyware in Panda seems to work well so far seeing as how I don,t get spyware.

 

1. 1) Kaspersky (amazing AV,able to catch everything in my PC,incliding spyware)
2. 2)S B S&D as always one of the best and still free
3. 3)Ad-aware,amazing since the early days of XP and still ruling
4. Spyware Blaster,nice adition to my arsenal,using it and browsing with Firefox is very safe.
5. and my last weapon of choice is SuperAntiSpyware,wow i can,t believe that software its free

 

McAfee 8.0i Corporate has a spyware module. Since my AV scanner is OFF, the answer would be NONE. I only update the definition and run a full-system scan twice a year.

 

I have dropped my Panda titanium and have gone to trend Micro Pc-cillin internet security 2006 and the antispyware included in it seems to work a lot better than pandas.

 

My Three Musketeers keeps me safe.
Realtime: Kis 6 - SuperAntispyware - Ewido.
On-Demand: SpySweeper 5.

 

Assuming this poll pertains to Windows only, I use Ad-Aware, ewido, a-squared, Spy-Bot S&D as on demand.

For real time, I us my software FW, Outpost Pro spyware plug-in.

 

I have used SpySweeper , PestPatrol , CounterSpy and SpywareDoctor and can confirm that all of them have excellent detection rates .

ZeroSpyware is by far the best at detecting and removing the non-executable "fluff" that comes with malware .

I fix windows based systems for a living so one of the things I often have to do is disinfect systems . I do this by slaving the infected drive(s) to my system (it can handle up to 12 externally connected drives at once) and scan them with a multitude of malware scanners . Once all of the malware is removed from the file system I return the drive(s) to their home system(s) to take care of the registry remnants . My assessments of the software mentioned above pertain to slave scanning only .

My home system on the other hand is completely unprotected . I use it for malware research .

 

Spyware Terminator, for real time, HIPS disabled
KIS 6, good spyware rates
SUPERAntispyware for On-demand
Ewido too.

 

I have several anti-spyware on-demand scanners, and I only have one active system spyware monitor...the WinPatrol Plus. In the past I have multi-system monitor but I find it to hog my pc and slowed it like a turtle. So for now, I think one system monitor would just enough for me. As long as I am using limited acct when surfing and has some other "protection programs" on my machine I am safe. Also, I think, my anti-virus is also doing its job in detecting some spywares.

 

Av also detects spyware, my current security is NAV 2007.

 

Grumble - There's no room on your pc for spyware. Did I count 13 anti-spyware apps? 3 or 4 would be overkill.

 

Avira premium and a-squared anti malware. Still looking for a dedicated anti spyware to trust.

 

Webroot Spy Sweeper and AVG Anti-Spyware 7.5 both On Demand Active Shields. If one doesnt get it, the other one will And they work in perfect harmony together on my machine

 

Firewall also detects Spyware (please specify)
*Internet Security Suite also detects Spyware (please specify)

I use Spydoctor
AdAware
PCCillin Internet Suite (Trend Micro)
BoClean

and want to use Spywareblaster again but not sure about conflicts.

 

Did you just say spydoctor? SpyDoctor is not a legitimate product and it infringes on the good name of PCTools Spyware Doctor. I recommend uninstaling Spy Doctor quickly. I do not know why you would have this product though. It was forced by PCTools to change its name to SpyLax. It was once a rogue antispyware product and it still is. It produces an obsene amount of fals positives and if you want it to ruin you rcomputer you can keep it.

 

Yes, that is what I said but what I meant was Spyware Doctor. Sorry.

I can't seem to keep anything straight lately!