Spyware "what gives"

[yokomo]

are there any good programs out there you can download for free that actually work at removing and keeping off spyware not just scan and tell you you have it?

 

[mechBgon]

Microsoft AntiSpyware functions analogously to antivirus software, it monitors what's going on in real time and will block stuff and put up an alert asking what you want to do. I heard good things about JavaCool SpywareBlaster too. Spybot Search & Destroy has an Immunize feature to block some stuff.

But the granddaddy of protection is... to use a Limited account for daily-driver stuff (called a "Restricted-User" account in Win2000). They inherently lack the power to install software, mess up the Registry or tamper with the contents of the Windows directory. Malware that's attempting to exploit a Limited account doesn't have much leverage to work with. While this doesn't work for everyone, I feel from my work experience that it's the #1 countermeasure when you're serious about stopping spyware. I use a RU account both at home and at work myself.

You also want some good antivirus software regardless. Set it to use maximum heuristics, and to scan within compressed files, and to deal with threats autonomously. If your antivirus software is older-model stuff (Norton 2003 or other old vintage stuff) then it's time to move up.

 

[corkyg]

Echo on Microsoft Antispyware. It is currently in Beta - and works very well, and has now been updated to allows scanning on drives other than C:\.

I am using it plus a powerful commercial product by Webroot - "Spysweeper." I do the free Microsoft product on a regular basis, and about once a week run a scan with Spysweeper. This combination process has been really effective.

 

[JK949]

SpywareBlaster works very well. I've been useing it on my 2 computers
and make it a habit to install it on every computer I work on. It can reduce
spyware by as much as 70%.
I uninstalled it to see what gets thru without it and was amazed at how much it
really does stop.

 

[mechBgon]

Originally posted by: JK949
SpywareBlaster works very well. I've been useing it on my 2 computers
and make it a habit to install it on every computer I work on. It can reduce
spyware by as much as 70%.
I uninstalled it to see what gets thru without it and was amazed at how much it
really does stop.

Out of curiosity, what stuff, or what type of stuff, does get past SpywareBlaster? I was thinking of suggesting it to the other offices in the regional non-profit agency that I work for, since they are reluctant to make their employees Restricted Users for various reasons. I think we qualify as a registered charity and thus the license agreement would let us use SB for free.

So they could use some active prevention, but I'm also curious what sorts of stuff makes it past SpywareBlaster.

 

[JK949]

Hi mechBgon. Long time since I've talked to you.
Anyway, basic web tracking junk. I never wrote down what Spybot, Adawre or
Norton found but it's the run of the mill stuff. Mostly Adware based.
Hate to be so vague but like I said I never noted the specifics.
Zone Alarm can id the stuff with amazing detail if it's the pro version.
All the way back to the server it came from. Alot of people don't realize it
or don't think to check out the log where you can do access the info.
Spyblaster is a completly free program. You can make a donation thru pay pal
if you want but the people that built and maintain it are .org types that are
not in it for the money bless them all. The real nice thing about it is it works
with firefox which I have come to love. It's 10 times more secure than IE.
Nothing gets in past Firefox.

 

[imported_fatal]

I don't think any 1 program will protect you. I use Spybot, Adaware, SpywareBlaster & Microsoft antispy beta

 

[RelaxTheMind]

I use Giant Antispyware... its the best IMHO. This is the reason microsoft bought them out and called it microsoft antispyware.

 

[mechBgon]

Originally posted by: fatal
I don't think any 1 program will protect you. I use Spybot, Adaware, SpywareBlaster & Microsoft antispy beta

A Restricted-User or Limited account will do a darn fine job, unless you feel threatened by tracking cookies At work, at my office, I've got about 85 Win2000 systems and zero spyware problems, and our defenses are just Restricted User accounts and McAfee VirusScan Enterprise 8.0i.

The malware writers have begun to adapt to Firefox too. Check this out: StartPage-GT trojan.

svchost32.dll installs a system wide message hook. The dll is loaded with every running processes. It monitors processes running on the system, if a web browser is launched, such as Internet Explorer, Netscap, Firefox, Mozilla or Opera, the dll can perform various tasks:

[*]Download updates
[*]Show popup message

The dll monitors the Web Browser contents. If certain search engine is used, such as google, the dll generates a search result entry and put the entry on top of the list.

Fun I expect most of the StartPage family will be Mozilla-ready from here on.

 

[imported_fatal]

Is A Restricted-User or Limited account really practical for a single home user?? May be fine @ work but with limited read/write access to the file system and registry it wouldn't be much good

 

[Bassyhead]

I use mainly LavaSoft Adaware

 

[Stonesoldier]

counterspy is the new kid on the block


they had a deal with giant before MS bought them
so they get spyware definitions from MS till 2007


you can get a 15 day freebie from
http://www.sunbelt-software.com/dell/scan.cfm

and a free scan to boot


been using it for about a week now with zero issues

and its only $20.00