Antispyware Shootout 343
An anonymous reader writes "ZDNet has published a review of 8 antispyware products from Computer Associates, Lavasoft, McAfee, Microsoft, PC Tools, Symantec, Trend Micro and Webroot. Check out the Editor's Choice. Interesting winner ...." I've used quite a number of these scanners on and on & off basis, and I think the reality is that you if you are truly to clean a machine out, you're going to need to use like three - five of these. Each of them captures a certain area, but none are the One Ring or anything.
Were they reviewing Spybot or not? (Score:4, Interesting)
Free solutions (Score:5, Interesting)
Sony (Score:5, Interesting)
Re:Prevention or cure? (Score:3, Interesting)
How about learning to operate a computer first? Most of these users with spyware problem stem from being computer illiterate. I don't get any spyware on my machine but I don't open anything that says "Click Here for Free Smiles", I use Firefox read the EULAs on anything I install and at least make smart decisions instead of installing anything I see without any problems. You wouldn't go driving a car without some proper maintance or you would have problems, but people don't see it like that, they figure anyting they can do on their machine can be easily fixed by someone for a cheap price or even free if they knew a computer nerd that will fix there computer for them.
Take my brother for example he installs anything he wants on his computer and dosen't care because as soon as I come home to visit my mother guess who is going to format and reinstall the OS again and make everything beter again and this cycle goes on and on.
Re:Why is this necessary? (Score:5, Interesting)
And then few OS'es out there will help if the user choose to install a spyware infested program and click "Yes" to install the whole thing. I mean, once a user run executable code with admin rights, what can the OS do?
One solution is of course to run in a more protected user mode where you're requested of admin rights when it has to do something to the system, and the upcoming version of Windows will do exactly this, and what *nix desktop managers have had for years.
However, when the user see "This application requires administrator rights", will he/she still just blindly fill in the requested info, click "yes", and get the spyware?
Re:Why is this necessary? (Score:1, Interesting)
Microsoft is not evil, (Score:1, Interesting)
But seriously, spyware has little to do with Microsoft and their shoddy products. MS is definitely to blame for inadequate security, poor mimicry GUI designs, and an attrocious "embrace and extend" attitude towards open standards.
That said, Spyware is more the result of the combination of the insane ROI for spywarers coupled with poor user education. One might argue that Windows allows users to have too many privileges yet this perception only minimally impairs the dedicated keystroke logger.
Fault anyone, fault doubleclick. And the wholly inadequate privacy and confidentiality laws of the US governement.
Re:Why is this necessary? (Score:3, Interesting)
Yah.. BUT even with existing Windows (Windows 2000 and XP), running as an underprivileged user does have many issues. There are still many applications on Windows that do not follow the security policy and attempt to write user data outside of their profile. ie -- try installing an app sometime as a regular user on Windows...
However, when the user see "This application requires administrator rights", will he/she still just blindly fill in the requested info, click "yes", and get the spyware?
Pretty much. This is a HUGE change for a Windows user. I'm guessing most will find this annoying and learn how to switch back to Administrator and not much will be resolved.. especially when their favorite game REQUIRES administrator access to run. blech.
They left out major players (Score:2, Interesting)
What about performance? (Score:4, Interesting)
always in memory (Score:4, Interesting)
Even IF they offer the option to NOT load themselves at each startup, many still do load something anyway. Most dont even ask so that you have to disable 3 different services and 2 startup programs with cryptical names.
Otherwise you end up with all of these tools concurently trying to scan each file access / internet request, registry change etc.
You end up with all sort of interesting and unpredictable side effects, probably offering worse protection than each of them alone.
Most telling part of the article... (Score:5, Interesting)
Clean machine accuracy and performance testing
* Accuracy: Only Lavasoft and Spybot Search & Destroy picked up anything when instructed to scan a newly installed and patched version of Microsoft's Windows 2000 Professional. Both reported Alexa (adware) related items. The other seven applications in this test correctly reported no items.
Sorry, but in my opinion, Alexa IS spyware (or can be if you use IE) and spyware detectors should find and at the very least warn you of its presence. From there it's up to the user to decide to keep it or junk it. Just because you have a fresh install from Microsoft doesn't mean it is clean. Microsoft is just as capable as anyone else of bundling crap with their software.
Coral Cache... (Score:3, Interesting)
Karma whore, I know.....
I don't know why the changeover to CSS didn't include a little modification to the story submission script that automatically updates all story links to use Coral Cache. It really wouldn't be that hard, especially considering all of
Re:Why is this necessary? (Score:3, Interesting)
No. The average user will install software only if it involves clicking "Next" "Ok" or "Finish". Any weird questions about administrator rights will spark a call to son/brother/cousin/friend/12 year old who will know the right answers.
Pathetic review! (Score:4, Interesting)
I can understand that they are looking at a corporate environment, but in a corporate environment with 150+ windows 2000 machines you'd think they'd have preventative measures in place and more security. I wouldn't let any user install anything on their machines and require going through IT to do it. Why spend all that money on spyware cleaning tools when it'd be more effective to setup a domain server.
As for the home... in a home or small office environment the computers tend to get so infected that they call when they can't get online, their browser gets hijacked, or windows doesn't boot. Running each and every one of those scans isn't going to fix it or even detect the culprit. It will involve lots of manual work and ingenuity, but in that situation it's faster and and better just to backup and reformat.
It's really not that hard to prevent infections nowadays, just need to be told what not to do. An anti-spyware program that will warn you of changes to startup items or new registry entries will NOT save you though. It might help but if you're doing stuff that constantly pop-ups warnings, it's inevitable you're going to get infected anyway.
It annoys me to no end when they completely neglect prevention and instead go for treating the symptoms. It's irresponsible, it's ineffective, and it's just to sell products. And I'll stop myself from going on a further rant in my first Slashdot response.
Re:Most telling part of the article... (Score:2, Interesting)
Re:Why is this necessary? (Score:2, Interesting)
Re:install an anti virus as well as anti spyware? (Score:3, Interesting)
Symantec Antivirus 10 [symantec.com] which is coming out soon integrates spyware/adware detection and removal with their standard AV client.
Re:Coral Cache... (Score:2, Interesting)
Also, not all submissions need coral cache. The two other times I was slashdotted, I didn't have video files and my server worked great (thanks, csoft!)
Re:Why is this necessary? (Score:1, Interesting)
"Fewer viruses" implies that there exist viruses for Mac OS X, but the number is less than those for Windows. That is incorrect. There is no virus for OS X in the wild. Period.
Maybe "immune" is a wrong word to use because it implies ability to withstand attack from a specific disease when we know that viruses are anything but specific.
As for your argument about lower number of users, yes, it is a factor, but not a sole reason. It's been discussed to death how the security model in OS X is better, thus making it harder to write a virus for it. 5 years of OS X and not a single virus. Quite an accomplishment, I'd say, considering the geeks who want the fame for being the first virus writer to conquer OS X and the number of Mac haters who worship Gates and rage whenever the words "Mac", "Jobs", and "Apple" are uttered.
Re:Free solutions (Score:2, Interesting)
I see from some of the links in this thread that there are in fact newer updates, but why doesn't the app find them? If I need a newer version to use the newer updates, it ought to tell me, like AdAware and ClamWin...
Re:Free solutions (Score:2, Interesting)
I've never been able to do that last bit - I can get rid of every one except the built-in icon on the desktop. You can hide it from the desktop, but if you open My Computer or something & hit backspace, it's displayed in the virtual folder at the top of the Windows directory tree.
Do you know how to turn that off completely? If you could tell me, that'd be great... I have a feeling it can be done but I'm not sure.