Anti-Spyware comparison: MS/Giant and others

K

KHaled

I dug up these links to studies that compare various Anti-
Spyware products. I post this in the context of another
thread that implicates MS Anti-Spyware.

http://spywarewarrior.com/asw-test-guide.htm
https://netfiles.uiuc.edu/ehowes/www/main-nf.htm

These were posted to the grc news server, and I am sure in
the various groups.

--
KHaled

e-mail: khaledihREMOVEUPPERCASELETTERS at fusemail dot net
(correcting antispam crap..)
please start your subject line with the string "==NG=="
 
J

JW

Bob Adkins said:
Look at the summary of test #5. Spybot and Ad-Aware gets SPANKED!

Yeah? At least for this test, Spybot came in 2nd overall, Ad-Aware 4th (out of
10 products.)

More than anything else, however, these tests show that one needs to use more
than a single product to be effective in cleaning out spyware.

jw
 
H

Helen

JW said:
Yeah? At least for this test, Spybot came in 2nd overall, Ad-Aware 4th (out of
10 products.)

More than anything else, however, these tests show that one needs to use more
than a single product to be effective in cleaning out spyware.

jw

Did you notice that IAW their charts, Ad-Aware, Spybot et al all had "x's" in
1, 3, and 5. Hummm.... I'm wondering if blocks 2, 4, 6 may need one of the
programs that their chart placed "x" in for these areas?
 
L

lsj7

Bob said:
Look at the summary of test #5. Spybot and Ad-Aware gets SPANKED!

-- Bob

If you search their short list, you will find both of these are on its short
list of recommended programs, along with three others.

--

Cherish, therefore, the spirit of our people, and keep alive their
attention. .If once they become inattentive to the public affairs, you
and I, and congress and Assemblies, Judges and governors, shall all
become wolves.

_________Jefferson to Carrington 1787

lsj7
 
L

lsj7

KHaled said:
I dug up these links to studies that compare various Anti-
Spyware products. I post this in the context of another
thread that implicates MS Anti-Spyware.

http://spywarewarrior.com/asw-test-guide.htm
https://netfiles.uiuc.edu/ehowes/www/main-nf.htm

These were posted to the grc news server, and I am sure in
the various groups.

thanks for the links...

--

Cherish, therefore, the spirit of our people, and keep alive their
attention. .If once they become inattentive to the public affairs, you
and I, and congress and Assemblies, Judges and governors, shall all
become wolves.

_________Jefferson to Carrington 1787

lsj7
 
O

ozzy

Yeah? At least for this test, Spybot came in 2nd overall, Ad-Aware 4th (out of
10 products.)

More than anything else, however, these tests show that one needs to use more
than a single product to be effective in cleaning out spyware.

jw


Just to let others know, in case they don't have automatic updates turned
on....

Microsoft now has included this anti-spyware program as part of their regular
updates :blush:)

ozzy
 
R

Richard Steven Hack

Look at the summary of test #5. Spybot and Ad-Aware gets SPANKED!

Okay, you've convinced me - you're definitely a Microsoft
employee...:)

(Notice the smiley, please...)
 
K

KHaled

Okay, you've convinced me - you're definitely a Microsoft
employee...:)
Right !!! I am working on creating a user friendly
environment that is useful and FREE.. The only thing payed
for is Windows. Does that convince you of my innocence ??
Further, one of my new year resolutions is to migrate to
Linux.. NO, I am not, never have been, and never will be
sooooo lucky to be employed by MS..
(Notice the smiley, please...)
Says Richard as he runs over my foot... with a smile and a
wave !!!! ouch !!!

LOL !!
--
KHaled

e-mail: khaledihREMOVEUPPERCASELETTERS at fusemail dot net
(correcting antispam crap..)
please start your subject line with the string "==NG=="
 
B

Bob Adkins

Okay, you've convinced me - you're definitely a Microsoft
employee...:)

(Notice the smiley, please...)

The smile was noted, but the fact remains that MSAS spanked ad-Aware and
Spybot. This is not a trivial feat. It spanked the top 2 anti-spyware
programs by a huge margin.

I think I'm finished using the word "spank" for a while. I'm beginning to
sound kinky. :)

-- Bob
 
S

Spankie Pankie

Bob Adkins said:
I think I'm finished using the word "spank" for a while. I'm beginning to
sound kinky. :)

But, sweetheart, we all know you are!

Spankie Pankie
 
K

KHaled

On Thu, 13 Jan 2005 05:45:14 GMT, Richard Steven Hack


The smile was noted, but the fact remains that MSAS spanked
ad-Aware and Spybot. This is not a trivial feat. It spanked
the top 2 anti-spyware programs by a huge margin.

I think I'm finished using the word "spank" for a while.
I'm beginning to sound kinky. :)

-- Bob

I think there are two issues here. First is the comparison
of Giant, which did come out ahead of the competition. Given
the nature of spyware and its detection then I can see how
proponents of A-A and S&D may dispute the results..
Personally I think more than one tool should be used, so I
have no problem with using Giant AND others at the same time.

The second issue is the MS factor. It appears that there is
an opinion that MS **MUST** be up to something, and therefore
their software has to be suspect. I think a sensible
approach would be to wait and see.. And to really scrutinize
the performance of the software. I suspect that a few people
with packet sniffers etc. are already doing that, and if they
had discovered any dubious activity they would have let the
world know by now.

My guess is that MS is preparing to launch a full internet
security solution, Spyware+Antivirus. They already have the
firewall (??) so that would make sense. More so since IE7
will no longer be free. So, it would be a complete net
solution. Add to that media player, which is causing some
problems in EU. I think MS is preparing to launch a
significant supplementary CD to Win??

So, for now I will continue to use MSAS, block any unusual
requests, and see what happens..

NOW about this other thing... I trust no violence is
involved..!!


--
KHaled

e-mail: khaledihREMOVEUPPERCASELETTERS at fusemail dot net
(correcting antispam crap..)
please start your subject line with the string "==NG=="
 
R

Richard Steven Hack

The smile was noted, but the fact remains that MSAS spanked ad-Aware and
Spybot. This is not a trivial feat. It spanked the top 2 anti-spyware
programs by a huge margin.

Here's another test of the MS product from IIRC PC Magazine:
======================================================
Microsoft AntiSpyware Beta 1
REVIEW DATE: 01.10.05

BOTTOM LINE:
Microsoft AntiSpyware adds some important tools to a security arsenal.
However, the current beta version's performance lags behind Webroot's
Spy Sweeper, our current Editors' Choice, in the two main tasks of an
antispyware utility: removing spyware and preventing any new spyware
from installing. We look forward to the final release of the program.

PROS:
Wonderfully detailed information about detected threats. Includes
real-time protection against other security threats.

CONS:
Removal tool left several bits of spyware behind. Can't sort threats
by threat level.

COMPANY:
Microsoft Corporation


By Neil J. Rubenking

In mid-December 2004, Microsoft purchased Giant Software Company and
its flagship Giant AntiSpyware utility. Microsoft vowed that within a
month it would release a public beta of its own branded version. True
to its word, Microsoft released its version of the product,
AntiSpyware Beta 1, on January 6, 2005. Though the company has yet to
announce pricing or final availability, the beta release can be
downloaded at www.microsoft.com/spyware.

This initial beta release has been redesigned for a Microsoft look,
but the features are very similar to those of the Giant product. We
had just completed tests on Giant AntiSpyware when it was taken off
the market. We compared its spyware removal and blocking abilities
with those of nine other products for an upcoming article. Its
performance wasn't outstanding. Overall, it removed about two-thirds
of the adware, spyware, and keyloggers on our infested test system,
and it blocked a little more than half of the threats we attempted to
install on a clean system. An informal spyware removal test using the
Microsoft's beta yielded similar results. It detected 51 threats and
claimed to have removed them. But when we subsequently ran Webroot's
Spy Sweeper 3.0 (our Editors' Choice for antispyware), we found almost
900 traces of 48 distinct threats still present, including two
keyloggers and three Trojans. Some were merely leftover Registry
entries or files in the browser's cache, but others were still active.
We anticipate that the Microsoft product's performance will improve
before the final release.

Microsoft AntiSpyware (MSAS) offers wonderfully detailed information
about the threats it does detect. To start, it assigns suspicious
items a threat rating (Moderate, High, Elevated, or Severe) along with
a color-coded warning bar. It also sets a default disposition for the
item: Ignore, Quarantine, or Remove. The user can change the
disposition and can also choose Always Ignore, thereby preventing MSAS
from flagging that item in the future. The numerous file and Registry
traces that reveal the presence of a particular threat are hidden by
default, but can be revealed if needed. And, of course, you can click
on a link for more information about the selected item. We do wish
that the program would allow sorting of the results by threat level or
disposition; when the confirmation dialog reports it will remove 50
spyware threats and ignore one, we'd like an easy way to find out just
which one will be ignored.

While removing spyware is important, MSAS also protects your system's
security in a number of other ways. Its Real-time Protection system
includes over 50 "agents" that watch for and prevent specific security
exploits. Clicking through the Security Agents and reading their
descriptions is an impressive lesson in just how much homework Giant
did. Hacker exploits, such as getting Windows to allow anonymous
enumeration of user accounts or attempting Wi-Fi system entry, are
blocked when they occur. We were pleased to see some of the stuff
that's taught in hacking classes blocked automatically. With the
user's permission, these agents report detected threats to the SpyNet
Anti-Spyware Community for analysis and eventual inclusion in spyware
definitions.

Those who like a hands-on approach will appreciate the System
Explorers, found in MSAS's Advanced Tools area. These tools list a
wide variety of installed system elements along with detailed
information for each and, in most cases, the ability to disable the
particular element. For example, one lists running processes and can
stop any particular process. Another lists programs that launch at
startup and lets the user either block or permanently remove them.
Among the others are tools to explore ActiveX controls, Browser Helper
Objects, and the Hosts file. Also in Advanced Tools, the Browser
Hijack Restore page will reset about 20 Internet Explorer settings to
their original values (though we think MSAS should prevent these from
being hijacked in the first place). Finally, the product includes a
Tracks Eraser module that can delete temporary files and history
lists.

Microsoft AntiSpyware adds some important tools to a security arsenal.
However, it needs to ramp up its performance in the two main tasks of
an antispyware utility: removing spyware and preventing any new
spyware from installing. We look forward to the final release of the
program. Meanwhile, given that the beta is free, you may want to try
running it alongside your existing antispyware tool.
 
R

Richard Steven Hack

Here's another test of the MS product from IIRC PC Magazine:
======================================================
Microsoft AntiSpyware Beta 1
REVIEW DATE: 01.10.05

And here's a review from AP's Technical Writer via Yahoo:
=======================================================
Review: Microsoft Anti-Spyware Ineffective

Fri Jan 21,10:27 AM ET Technology - AP
By MATTHEW FORDAHL, AP Technology Writer

Microsoft Corp. created the world's most popular operating system —
one that's also heartily embraced by hackers and virus writers. And it
begat the world's top Web browser, which makes it all too easy to
mistakenly download and install spyware, adware and other garbage.

You'd think the world's largest software company, which presumably
knows its own Windows and Internet Explorer code, would have long ago
come up with something to repair PCs possessed by malicious programs.

Think again.

Though Microsoft regularly releases bug fixes, security patches and
even the occasional virus-removal tool, it has only recently made
programs available to help people wrangle back control of their
computers after they've clicked the wrong pop-up ad, opened a rogue
attachment or installed adware-packed freebies.

The company now has two free programs to help rid PCs of unwanted
pests. Though Microsoft Windows Malicious Software Removal Tool and
Microsoft AntiSpyware show some promise, they aren't close to being
magic bullets.

I tested the programs on a Windows XP computer I borrowed from my
wife's cousin. The 3-year-old PC, a Gateway running Windows XP Home
Edition, was basically unusable.

Annoying pop-up windows, a sign of adware, were the least of its
problems. The modem dialed phone numbers even though the PC was hooked
up to a broadband connection. It took more than a minute to load a
single Web page and often crashed minutes later.

Error messages appeared when I tried to open the Task Manager, a
Windows utility that shows running programs and processes. It refused
to load Windows Update, Microsoft's site for downloading security
patches and other fixes.

Needless to say, the machine had not received any security updates
from Microsoft in a while. To load Microsoft's Malicious Software
Removal Tool, I had to get it using another machine, load it on a USB
drive and install it manually. (It's usually available through Windows
Update.)

Once installed, the tool scanned the machine and reported no problems,
even though there were big problems.

The tool looks for a limited number of pests, such as "Sasser" and
"MSBlaster," so it didn't find the worm, "Netsky.P," that had infected
this PC. The program, though, will be updated each month and will
presumably become more effective.

By building its tool into Windows Update, Microsoft shows it's
aggressive about snuffing out pests. But it's got to stay up to date
with the threats and send out updates as close to real time as
possible. Who wants to wait until the second Tuesday of each month to
fix a sick PC?

Existing computer security firms have nothing to worry about — at
least for now.

Computer Associates' ezAntivirus took three hours to scan the entire
system and found 19,000 infected files. After the worm was knocked
out, the machine became slightly more stable and I could tackle the
spyware problem.

Installation of the prerelease version of Microsoft's antispyware
program, which can be downloaded free from Microsoft's Web site, was
easy. The final version's price, if any, has yet to be announced.

The interface was clear and simple. I ran a thorough scan, which
discovered 77 spyware and adware programs. I followed the software's
advice and removed them all.

But bizarre behaviors — including multiple pop ups, unwanted toolbars
and generally sluggish behavior continued.

So I rebooted the PC in safe mode, which limits the number of programs
that load at startup. The theory is that if it's not running, spyware
can be more easily deleted. This time, the program found about two
dozen spyware programs. I deleted those, too.

After rebooting again, the PC continued to show signs of infection,
though it did seem less bogged down. Having spent two days
disinfecting the system, I broke down and reformatted the hard drive.
I then reinstalled Windows XP and all its patches.

It took just 90 minutes.

The clean start gave me a chance to try Microsoft AntiSpyware in its
other role as protector of a clean system. Compared with competing
products, it did a good job and was easy to use. (There are modes for
novice and advanced users.)

It continuously monitors 59 checkpoints and alerts users whenever a
program attempts to make a change, though some of the messages could
do a better job of explaining troubles in plain English.

I tried downloading and installing a well-known adware program,
PurityScan. The security features in Windows XP Service Pack 2 tried
to get me to stop, but I ignored it. When the spyware installer was
running, two windows popped up giving me the chance to block some
files from installing.

This time, I agreed, but the program still showed up in a subsequent
scan. With a few clicks, I successfully deleted it.

In theory, Microsoft AntiSpyware should get better over time. It's
programmed to send reports back to Microsoft to improve and update
spyware definitions.

The antispyware program also has useful tools for easily accessing
Windows and Internet Explorer settings that were previously hidden
deep within the operating system and browser. In fact, any hijacked
settings can be restored with one click.

Overall, I was more impressed with the antispyware program's
protective measures and simple interface than with its ability to
cleanse existing infections. Still, Microsoft seems to be on the right
path to fixing the mess caused by the careless users, malicious
programmers, unethical companies and vulnerable software.

If only it hadn't taken so long.

On the Net:

Microsoft AntiSpyware:

http://www.microsoft.com/athome/security/spyware/software/default.mspx

Malicious Software Removal Tool:

http://www.microsoft.com/security/malwareremove/default.mspx
 
K

KHaled

Thanks for the references. I will read and digest. As things
stand right now I am running S&D, AND MSAS. Seems they both
flag similar events, although S&D did not flag a context menu
addition whils MSAS did.

More later I am sure..
 
F

Frank Bohan

KHaled said:
Thanks for the references. I will read and digest. As things
stand right now I am running S&D, AND MSAS. Seems they both
flag similar events, although S&D did not flag a context menu
addition whils MSAS did.

More later I am sure..

FWIW I've just run MS Antispyware and it found four items not previously
reported by Spybot, Adaware, Etrust and various other progs. One of these
was NetSlayer, which seems to be particularly nasty, although I think it was
prevented from working by my firewall settings. The others seemed relatively
harmless, although one, Stumble Upon, which I had regarded as benign was
shown to have made several thousand registry entries. I have therefore
deleted it, and the other three, and saved about 2MB of space in the
registry. Taken all round, MS Antispyware gets a thumbs up from me.

===

Frank Bohan
¶ Wishing without work is like fishing without bait.
 
K

KHaled

FWIW I've just run MS Antispyware and it found four items
not previously reported by Spybot, Adaware, Etrust and
various other progs. One of these was NetSlayer, which
seems to be particularly nasty, although I think it was
prevented from working by my firewall settings. The others
seemed relatively harmless, although one, Stumble Upon,
which I had regarded as benign was shown to have made
several thousand registry entries. I have therefore deleted
it, and the other three, and saved about 2MB of space in
the registry. Taken all round, MS Antispyware gets a thumbs
up from me.

Glad to see that it worked well for you.. I am using it along
with the other programs, and I am having no problems..
Seeing how your registry was compromised, have you tried to
defragment it ?? Try using PageDefrag from SysInternals
(http://www.sysinternals.com/ntw2k/utilities.shtml) This
will defrag the page file, and the registry.

--
KHaled

e-mail: khaledihREMOVEUPPERCASELETTERS at fusemail dot com
(correcting antispam crap..)
please start your subject line with the string "==NG=="
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top