Home page logo
/

basics logo Security Basics mailing list archives

RE: RE: Best spyware program
From: "Mancini, Jack" <Jack.Mancini () ca com>
Date: Tue, 2 Aug 2005 15:26:35 -0400

Take a look at Pest Patrol



-----Original Message-----
From: Joe George [mailto:j.george () conservation org] 
Sent: Monday, August 01, 2005 9:42 AM
To: Mike Fetherston; knieveltech () yahoo com;
security-basics () securityfocus com
Subject: RE: RE: Best spyware program

I agree with these sentiments as well.  The 100% best solution has been
to re-image a troubled computer and never allow it a connection to the
Internet.  Doesn't seem so efficient and is pretty much a waste of a
computer, right? I have a hodgepodge of freeware and
commercially-available anti-spyware apps, such as those mentioned by
Mike.  Some do indeed work better than others, that I have noticed, but
it can be very frustrating sometimes.  I've encountered spyware
processes that specifically target the application which is designed to
counter it.  In cases like that, it is good to have handy the older
version of the anti-malware application.  

All-in-all, it is an inordinate waste of time for any systems and
support administrator.   

Joe

-----Original Message-----
From: Mike Fetherston [mailto:mike_sha () shaw ca] 
Sent: Wednesday, July 27, 2005 8:16 AM
To: knieveltech () yahoo com; security-basics () securityfocus com
Subject: RE: RE: Best spyware program

In my experience none of the spyware scanners ever seem to get a
system
truly clean, especially when dealing with some of the more devious
stuff
out there that keeps a process running with SYSTEM privs. They can be
handy for early warning though, so I suppose it depends on what your
focus
is. If you're looking for something to tip you off to a possible
infection, any of a number of scanners works great. If you're actually
trying to get the system clean, nothing I've tried so far competes
with
booting to safe mode and running hijack this.


That's been my experience as well.  I have the opportunity to see many
infected machines a week all with different symptoms, so I've been able
to
try out the order of scanning and cleaning with each Spybot, Ad-Aware,
MSAS,
and HijackThis.  All find traces that the other left behind no matter
what
order they've been run in.

For a really bad infection I will do as you mentioned above as well as
running the other three that I mentioned all in Safe Mode.  In addition,
I
will enumerate the startup registry entries and go hunting for the
individual files.  You'd be surprised how many times these scanners
leave
the .exes and .dlls behind!!  While you're in %systemroot%\system32 and
other places that spyware favours, it doesn't hurt to manually scan the
file
list.

Mike Fetherston






  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]