Top 'N' anti-spyware programs

I'm writing up a doo-dad for my boss on what antispyware programs we should implement and I'd like to know what are the preferences of other anyspyware program users.

At home I don't really have spyware problems, because (i think) I use Opera and Firefox a lot. And I generally know what I'm clicking on. But occasionally I run these programs If things get weird.


1. Hijackthis- I like to have this installed to quickly see what types of things are running at startup and to see what type of things have been done to IE. (We use IE at work because a lot of the software we receive from national HQ requires IE.)

2. Spybot Search and Destroy- Been Using this ever since it came out and it's just worked for me. I like the advanced options that it gives and the ability to remove items at startup. (just like Hijack this)

---
As far as things I've seen elsewhere.
----
3. AdAware- I've seen this used at my High School and I always see or hear it recommended when I talk with other people about spyware. It's third because I don't use it as much as Spybot S&D, but I have used the plugin on my BartPE disk and it came in really handy. I guess there's a Spybot plugin out now but I can't find the time to recompile a new BartPE disk. :rolleyes:

4. Counterspy- I've seen this used at school and I like it because it finally stopped some stuff that was being used against the school for a loooong time. Things that were not being picked up by the other programs. It impressed me and I liked the interface and all of the options. (The school was using the enterprise edition)

5. Pest Patrol- My dad uses this. He decided that if you are paying for it, then It is undoubtably better than the free programs, because there is no incentive for a "gimick". IDK? I've used it probably twice. I'm not a fan. But It makes my list, because I havn't used anything else.


This is my list. Please Share yours and Explain.

Ewido and A-Squared and MS Antispyware.

Ewido detects an enormous number of items. A-Squared is good on trojans and diallers.

:)

I personally like Microsoft Antispyware Beta 1, but I also like Adaware, SPybot S & D and SPywareblaster used together they are ideal.

So far, you are allowed to and strongly encouraged to use more than one spyware scanner. I highly recommend that. HiJackThis isn't really just an anti-spyware tool, but a very versatile troubleshooting tool for Windows systems. Comparing HiJackThis to the spyware scanners is a bit like comparing apples to oranges. It might be better to set up one poll for the spyware scanners and another poll for malware troubleshooting tools (HiJackThis, Process Explorer, etc).

Yeah i would definatly have to put out props for ewidow. When i was trying to get rid of some nasty stuff from my box i was normally just running spybot and ad-aware. Well even after i ran both of those freshly updated in safe-mode and fixed all found issues, ewidow found over 7k infected files still on my computer. Yeah i know 7k is a lot but unfortunatly my little brother was allowed to have full access to my box while i was at work for at least 12 hours a day. So yeah, ewidow is friggin awesome.

if you are talking about an enterprise wide solution I would say something like Webroot - Spy Sweeper should rate very high. It is what we currently use, and the deployment/management of this product in a large enterprise is a breeze.

I like Spybot at a personal level, but it isn't ready for large scale network deployment.

On a personal basis I use a combination of different spyware/malware programs. What one doesn't catch, the other might.

I just tried Ewidow for the first time and I was impressed with its depth. It found a program (tool actually) that I had stored in my 'Save Program' folder (and correctly IDed it) that none of the others had reported. It was the password cracker 'Brutus', and not installed , just stored.
My only gripe with it is that it took a long time (16 minutes) to do a complete scan. This added to the time it take Spybot and AdAware, and the others I use regularely will make for a long Sunday afternoon.

I use a regular combo of Adaware,Spybot search and distroy and MS anti spyware... then about once or twice a month i run Hijack this and Avast. I used to run Winpatrol but that started to annoy me with all those damn registry change popups so i quit using it.

i use just

spybot
spysweeper
spydoctor



what one misses other finds it ....



treanglin

4. Counterspy- I've seen this used at school and I like it because it finally stopped some stuff that was being used against the school for a loooong time. Things that were not being picked up by the other programs. It impressed me and I liked the interface and all of the options. (The school was using the enterprise edition)





that counter spy looks alot like microsoft antispyware beta ? how come :confused:

Ad-aware Simply because it's easy on the eyes, easy to use, and it picks up most probs.
SpyBot Only because you know it will detect anything that Ad-Aware doesn't..
And because you can also control items that want to start on Windows Start up..

f2b:.

I mostly use

-Spysweeper
-adaware
-spybot
-ewido
-cwsshredder
-trend antispy (free on their site)
-hijackthis


uh and...
spyware doctor = terrible
spyware stormer = even worse

stay way from those

Ok .. ANTI SPYWARE..

I read that as prevention...
Most of the tools mentioned are for the detection and cleanup phase

for many of us this is the first step in a machine.. For a person protecting their machine this phase is to check that the first step is still effective..

Step 2: The Cleanup (Detection) Tools
1/ HJT - initially as a where am I .
2/ Bart PE with updated (new disk weekly) versions of the following
- Adaware
- Trend Sysclean or McAfee Stinger (seems they do update this sucker from time to time)
3/ nihils comments here:

Quote:

---

Ewido and A-Squared

Ewido detects an enormous number of items. A-Squared is good on trojans and diallers.

---

4/ adaware and Spybot SnD

Step 1: The prevention - protection
The step I use first on my machines
1/ Add blocking Hosts File: **** this really speeds up some sites, and is handy to reduce unwanted staff excursions
2/ MS Antispyware: I would mention the regprot or the registry protection in Spybot.. but this can cause problems with the whinging users..
3/ Install tools like:
- -Spyware Blaster (update on install)
- -CounterSpy
4/ UPDATE WHAT EVER TOOLS YOU ARE USEING
5/ Schedualed Scans with the detection progs (Adaware-Spybot SnD) and an antivirus as well as regular scans useing a remote scan method: ie tools on a Bart PE CD
In a corporate /business enviroment.. A machinegun enforced User Policy would be first and formost.. If the lusers think they can use the network for their eBay business, updating their porn and warez collections, then they need to pay for their own network and internet pipe.

PRograms like The Proxomotron are great..but not so in some business/corporate enviroments.

BTW: if your havent updated your BART PE cd for a while ..Your Adaware defs are way out of date..

I am very lazy, the better my protection, the less work I need to do.

You were joking with this in the list right?

Quote:

---

eAcceleration/Veloz Stop-Sign

---

Popularity is perhaps the second worst method of determining quality... only behind reviewing advertising.

cheers,

catch

Und3ertak3r: You forgot something in step 1; Proxomitron, Filter unwanted ads, scripts, cookies etc. Proxomitron is acctualy the main tool I use against spyware/hijacks, it strips it out before the browser even gets the data, which, lets face it, with IE, is something that is greatly required.

IE in my eyes is like building a battle ship only to find you forgot to weld on the ass-plate, in a vain attempt to save your slow, sluggish and ugly grey browser-****, you stick a nice band-aid at the end. (Without cynesism; IE sucks, is slow, and leaks like a siv.)

I pretty much disregard anything said by anyone after they state anything along the lines of an application being insecure or less secure than alternatives.

It is clear that such a user has a most minimal amount of security knowledge and no comprehension of how a exceptions become vulnerabilities.

cheers,

catch

My foot note about The Proxomotron

Quote:

---

PRograms like The Proxomotron are great..but not so in some business/corporate enviroments.

---

several reasons..
1/ lUsers
2/ needs to be configured very carefully for the enviroment
3/ dosent work or has problems with some sites.. banking comes immediatly to mind
4/ Lusers

ok only 3 reasons

my soon to be former work config.. the users that have access outside the B2B sites pre allocated, have Mozilla installed..
All machines have a blocking hosts file.. There are blacklisted websites regardless of the user
Depending on department will determine what is allowed..

one thing here is I interpereted the request as being a business enviroment.. this can vary from a full server/ gateway/ harware firewall / Routers to 1 - 10 pc connected via a hub/switch to a basic ADSL or cable modem.. the application will be different..
one end will use the tools we are talking about, the other end --nothing like them

Quote:

---

Popularity is perhaps the second worst method of determining quality... only behind reviewing advertising.

---

catch.. this is so true.. 2 things here.. any one can trump up the usage statistics, and just because 2.75 billion downloads dosent count as the number of progs still in use, and some organisations count upgrade versions as a seperate user download.. ..

I shal now dismount from the soapbox..

Thanks you guys. Especially Und3ertak3r.

Your post are really appreciated.

Like so many others have said... the aplication to use depends on if you are removing or preventing. I use a combination of a-squared and common sense to prevent spyware. About once a week or so I scan with adaware/spybot/ms antispyware. I still say the best way to prevent infection is safe surfing habits. Make sure you dump your temporary files and cookies regularly.

definitely this is the order of scanners in my opinion

1.) Spy Sweeper
2.) Xoftspy
3.) Spybot
4.) Hijack This
5.) Ad-Aware SE Pro


Spy Sweeper is the best by far. it catches anything and everything that any of the other 4 won't. Xoftspy is not far behind and it updates easily without taking up resources.
I hate Ad-Aware SE Pro simply because it takes forever to complete a scan and it drains memory resources. I think Ad-Aware is the worst of the 5 i use.

Hmmm... My combination is:

Spyware Blaster (for prevention)
Spybot S & D (for prevention and removal)
Adaware
CWshredder
Hijackthis

And then when your cleaning a PC that was infected so bad that you can't access the internet anymore... Winsockfix works wonders...

At home I use:
IE 6.0.
avast! antivirus (free edition)
AdAwareSE and HijackThis!
All-In-One Secretmaker: this software is good. It has handy functions like auto clearing of cookies/cache, a Bayseain logic based spam filter etc. For more info seethis.
In additon I also have:

ZoneAlarm Firewall (freeware)
Google Toolbar (easy search + pop-up prevention).
Simple File Shredder (Kill important files)

SpyBot, TrendMicro Anti-Spyware works fine for me
then clamav + my defenitions if I finding some new unknown or other that I want to remove....

HijackThis is good to clear IE entries.

I'm probably going to lose any credibility I have on this site for admitting this...


But right now, I am using AOL 9.0 Security Edition.

/me cries


But it's not my computer.

Normally fore protection, I run Trend Micro's Housecall It has worked very well so far. I do however keep the standard array (AdAware, Spybot, and HijackThis) around in case of connectivity problems.

All Windows tips here...

Prevention
* WinPatrol (http://www.winpatrol.com)
* Prevx (http://www.prevx.com)
* Microsoft AntiSpyware
* Anti-virus (of course)
* Browse unknown websites using Mozilla with Active-X and Java turned off AND logged in as non-priviledged user (non-admin)

Detection and Removal
Scan periodically with some or all of the below...
* Spybot Search & Destroy
* Adaware by Lavasoft
* Microsoft AntiSpyware
* Tauscan (http://www.agnitum.com/products/tauscan/index.php)
* Ewido (http://www.ewido.net/en/)
* A-Squared
* Autoruns by SysInternals (http://www.sysinternals.com)
* HiJackThis
* TrendMicro's Housecall (http://housecall.trendmicro.com)

Quote:

---

* Browse unknown websites using Mozilla with Active-X and Java turned off AND logged in as non-priviledged user (non-admin)

---

If you take the time to properly secure IE, there is no need to run to Mozilla for every suspect website.

I haven't used any other Operating systems (much) in a while. Do linux or , Os X users have the same problems with spyware and stuff.

Quote:

---

Originally posted here by d0pp
If you take the time to properly secure IE, there is no need to run to Mozilla for every suspect website.

---

How are you doing that? Running IE using non-priv account? Are you turning off Active-X and JAVA? I'm curious how you do this...share please. I've read some articles about locking down IE but haven't fooled around with it yet. Whatever I figure out I have to train my family and friends (non-technically inclined) how to use it.

If so either will work...until you want to run a program that EXPECTS to have full admin/control of system. And there's many of these in home environments. :(

Quote:

---

Originally posted here by treanglin
I haven't used any other Operating systems (much) in a while. Do linux or , Os X users have the same problems with spyware and stuff.

---

Linux and OS X users have less of a problem with spyware issues than windows. I can't say that they dont have the problem at all, but in my personal experience, they tend to have less problems.

Quote:

---

Originally posted here by lupdawg
Linux and OS X users have less of a problem with spyware issues than windows. I can't say that they dont have the problem at all, but in my personal experience, they tend to have less problems.

---

i think that more people use windows than linux and OS X and most people useing linux have experiance on secureing their computers and theirs not enough people out their useing OS X for hackers and malware progamers to mess with it but if more people went to linux or OS X then so would the problems

i totally agree with you Userbman, if more people used non-windows operating systems the problems would also move. Good Point.

When it comes down to it theres no one program that is the be all end all. I use
-hoster (clean the host file right of the bat and mark it read only just cuz)
-Adaware (update full system scan) - If I'm working on a slower/old machine I use Ewido as it seems to be lighter and less of a load on the machine. but hate the noise if uses when find somehting.
-housecall.trendmicro.com (gets rid of pettie viruses)
-autoruns ( if hijack and msconfig had a baby this would be it) used to clean startup and such.
-hijackthis (usually just run this once everything is clean because I've only been using autoruns for a short time and have been using HJT forever and want to make sure it does the same job)

that will usuallly do it, if theres problems I use
-processxp to suspend the process then kill the regfiles (if dlls are locked into winlogon )
-killbox to delete dlls on reboot. works for everything but winlogon + dlls as they start before
-nod32 trial (viruses/trojans/backdoors/general maleware)
-thecleaner trial (viruses/trojans/backdoors/general maleware)

Also I use firefox untill the spyware guys figure out howto exploit the hell outta that, its bound to happen sooner then later.

I only use Spyware Doctor... mainly coz i work for em lol..

but for other reasons.. its easy to use, does a good job, and we make improvements and updates everyday.

Is there a Doctor in your house? lol

I already posted which 5 software programs i use well if u count rootkit revealer then i forgot to put that one cuz that is pretty helpful at times, but i can say this ; i have tried ewido and also that microsoft beta and i did not like either one. i have never tried ice sword or trend antispy so i cannot really say. i do have a copy of black light but i never installed it.

regmon to me is about useless i mean what does it do besides monitor ur registry moves i dunno i see no purpose for that unless ur a programmer or something.

Im going to have to go with Ad-Aware. My father first started using it when it was featured on MSN and made me a fan. I've tried all the other onesAd- and for some reason I keep going back to it. However, a lot of my friends use hijackthis.

for tools, i got lots.. mostly from SysInternals. Proccess Explorer, TCPView, FileMon, RegMon. And theres also IceSword and Rootkit revealer.. IceSword is good coz not even rootkits can hide from it.