Ad-aware vs Spybot S&D

[SDK]

Internet Explorer’s homepage was changed to some weak search engine site; ads are popping up every five seconds; my computer takes three times as long to load, a server is tracking every website I visit, and this was all done intentionally to show which of the two top spyware/adware removal applications is more effective at scanning and detecting malicious objects. I tested both Ad-aware and Spybot S&D (short for Search and Destroy) under Windows 2000 Professional running on a virtual pc courtesy of VMWare Workstation. Twenty eight applications known to contain spyware and adware were installed. The components that were installed are listed below with links to information about their involvement with spyware/adware.

See the rest here : http://www.flexbeta.net/main/articles.php?action=show&id=39&perpage=1&pagenum=1

[pooh sun tzu]

Just read the article, and while it is fine they choose Ad-aware over S&D, why not use both? Since they both can find objects the other one missed, I think the next step would be to simply use both when preforming a scan.

[Soda_Popinsky]

This is hilarious-
http://www.tehrokh.com/flexbeta/images/toolbars.gif

I dont know if I agree with the test process. I would of set up two different pcs to work on, because it looked like they ran Ad Aware before spybot, then switched. Instead of seeing what they cleaned up after eachother, I would see what they both missed individually. Although I don't know the location of every registry entry, and file, I think it would be more accurate. Im probably wrong though.

[CXGJarrod]

That screenshot of his toolbar is great...

http://www.tehrokh.com/flexbeta/images/toolbars.gif

Half his screen is filled with toolbars in IE. ;)

Edit: Soda Popinsky got to it before me...

[r3fus3d]

i use boath all the time now. Before it was just adaware, but spybot has alot of other options/tools I find usefull.

[pooh sun tzu]

Soda:

They did run adaware first and then spybot. However, after that he replaced the Drive Image that took the entire Harddrive back to it's infected state, but to where S&D and Ad-aware were still not installed. This gave him a duplicate enviroment to retest the different order.


1. Infect computer
2. Create image
3. Install S&D and Ad-ware
4. Preform Ad-aware and then S&D test
5. Restore Image from step 2, to get origonal infected enviroment
6. PReform S&D and then Ad-aware test
7. ???
8. Profit

[Soda_Popinsky]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=255330#post725525) by pooh sun tzu
Soda:

They did run adaware first and then spybot. However, after that he replaced the Drive Image that took the entire Harddrive back to it's infected state, but to where S&D and Ad-aware were still not installed. This gave him a duplicate enviroment to retest the different order.


1. Infect computer
2. Create image
3. Install S&D and Ad-ware
4. Preform Ad-aware and then S&D test
5. Restore Image from step 2, to get origonal infected enviroment
6. PReform S&D and then Ad-aware test
7. ???
8. Profit

Im guessing that step 7 is from Southpark :D .

I guess the process is alright... But I would have loved to see a three column chart comparing the results, with a column for malware, ad aware, spybot, and checkmarks for what ad aware and a spybot individually removed. Kinda like one of those charts they have when you compare webhosts or whatever.

[HTRegz]

Hey Hey,

I have a memory key with both programs on it for the computers I service. I recommend SpyBot if people are only going with one, however others in the office recommend AdAware. When I need to clean up a really dirty computer, I go with both of them. However I prefer Spybot, it has so many additional features. I love the system start-up feature. It's a great easy way to remove start-up apps from peoples computers. The hosts file replacement is also quite nifty, and the immunize option, you know we all love the immunize option. I think comparing them is a waste of time. They are both highly effective pieces of software. It's like comparing brands of shampoo. They both clean your hair, however one may detangle as well, while the other one conditions, or this one may be specially for permed hair.. yada yada yada. You need both to be truly effective, however even if SpyBot finds less items... I still go with it if I'm only using one thing. The added bonsu's make up for the fact that it doesn't find some of the smaller, lesser known stuff.

Peace,
HT



I just looked at the post again, and my guess is that the author of it, isn't fully up to date on what malware is and what it does yada yada yada. He is, in my opinion, biased towards AdAware. He mentions the fact that the Spybot forums are down and uses this as a point against Spybot, however net-integration (the site hosting their forums), was one of the sites hit in the DDOS attack earlier this month, and was taken offline because of that. If this person was really doing his research into the topic, he should have known that

[pooh sun tzu]

Soda

The steps:

???
Profit!


Are slashdot related jokes :D

[Soda_Popinsky]

[In the gnome's cave]
Gnome 1: This is where all our work is done.
Kyle: So what are you gonna do with all these underpants you steal?
Gnome 1: Collecting underpants is just phase one. Phase one: collect underpants.
Kyle: So what's phase two?
[Silence]
Gnome 1: Hey, what's phase two?!
Gnome 2: Phase one: we collect underpants.
Gnome 1: Ya, ya, ya. But what about phase two?
[Silence]
Gnome 2: Well, phase three is profit. Get it?
Stan: I don't get it.
Gnome 2: (Goes over to a chart on the wall) You see, Phase one: collect underpants, phase two-
[Silence]
Gnome 2: Phase three: profit.
Cartman: Oh I get it.
Stan: No you don't.
Kyle: Do you guys know anything about corporations?
Gnome 2: You bet we do.
Gnome 1: Us gnomes are geniuses at corporations.


Possibly derived from southpark or derived from slashdot to southpark.

[Tedob1]

CXGJarrod thanks for point out the screen shoot. i hope i never run accross one that bad. ive seen some that approach it but not quite.


almost forgot the topic. in recommending one or the other i prefer adaware but recommend spybot s&d because the free version has a reg protector where it is only available in the full version of adaware

[muert0]

I prefer spybot. I have a low end machine and everytime I would use ad-aware it would find all the problems, but I would have to take like ten things off at a time or my computer would lock up. spybot got rid of everything in one shot no problems at all.

[nihil]

Muert0,

I would suggest running in safe mode, particularly on low end machines.

Also look at SwatIT!................takes a long time to run, but finds stuff the others don't

I think that these "either ,or" type discussions are rather like Windows vs *nix..........pretty inconclusive and rather futile?...........and it is freeware in the main?

I discussed the matter with my virus writing tomcat earlier (some of you may remember him?)

I attach his enthusiastic response :D

Cheers

[disturb]

:D I tested pest patrol over spybot search and destroy and adaware

Pest patrol is better than both of the programsi tried .you'll see what I meen try it its the best

so I recommend you use pest patrol and spybot search and detroy

[bluthund]

:)
Hi,
something for folks that are new to all of this,
just got done checking out the screenshots above, and it brought back some great memories.
I suppose that getting my browser hijacked is what got me to learn as much as possible
about IT, problem is, you figure one thing out, there is a zillion more things to learn.

I'll be busy for a few centuries now. Anyway, I use AdAware and SpyBot together, they really do work well together, but I'd like to reccommend one more app, "SpywareBlaster".
It seems to fill in a gap that the first two apps miss, like blocking the 'Ave. A' cookie.
Between the trio I have not experienced a single problem. Adding my software firewall and Vscan app, I feel that I have a solid defense. (Patches included).
It did take some time learning how to configure the firewall, with all the various apps and programs wanting to call "home". Plus I have two NICs, so once in a while I get alarms from the promiscuous NIC, which doesn't see the Internet and is their only for testing a lab set-up.

So, in essence I just want say that it is not good enough to just install these tools. You have to get to know them, play with them and tweak a little. Also, don't forget the settings you can tweak, or rather choose, in your browser, like ActiveX and scripting.
Am I completely safe? No, probably not. Neither do I want to build such a wall, that I can't get out myself. Gotta play and surf....

g8way2u

PS. update, update, update....

[neel]

I use ad-aware because if I tell my friends I use something that's called "spybot search and destroy" they think I'm playing an old and childish alien robot bashing game.