Anti-spyware recommendation

[shplink]

On Mon, 04 Apr 2005 11:01:25 -0400, pixi said nicely:

> Can someone recommend an anti-spyware program. I have been using adaware
> but there is one spy that saves itself and puts it back in and I can't get
> rid of it.

Hi pixi,
Your post is rather general, normally we'd need some more specific
information so we can figure out what the "spy program" you've been
infected with *is.*
You might take a moment and check out
http://home.rochester.rr.com/bshagnasty/tips.html
and
http://shplink.com/clean/clean.htm
for some tips and other programs. Make sure and look through our FAQ as
well, (see my signature) especially the Appendix.

Good luck!

--
shplink

the alt.privacy.spyware FAQ:
http://shplink.com/misc/FAQ.htm

[pixi]

Can someone recommend an anti-spyware program. I have been using adaware
but there is one spy that saves itself and puts it back in and I can't get
rid of it.

[Ian JP Kenefick]

On Mon, 4 Apr 2005 11:01:25 -0400, "pixi" <pixi@hardynet.com> wrote:

>Can someone recommend an anti-spyware program. I have been using adaware
>but there is one spy that saves itself and puts it back in and I can't get
>rid of it.
>

http://www.ik-cs.com/a-safe-pc.htm
--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[Ray McCormick]

"shplink" <shplink@removeme.shplink.com> wrote in message
newsan.2005.04.04.13.16.27.552738@removeme.shplink.com ...
> On Mon, 04 Apr 2005 11:01:25 -0400, pixi said nicely:
>
> > Can someone recommend an anti-spyware program. I have been
using adaware
> > but there is one spy that saves itself and puts it back in
and I can't get
> > rid of it.
>
> Hi pixi,
> Your post is rather general, normally we'd need some more
specific
> information so we can figure out what the "spy program" you've
been
> infected with *is.*
> You might take a moment and check out
> http://home.rochester.rr.com/bshagnasty/tips.html
> and
> http://shplink.com/clean/clean.htm
> for some tips and other programs. Make sure and look through
our FAQ as
> well, (see my signature) especially the Appendix.
>
> Good luck!
>
> --
> shplink
>
> the alt.privacy.spyware FAQ:
> http://shplink.com/misc/FAQ.htm
>

Don't rely on one single anti-spyware program. I have found that
AdAware and Spybot Search and destroy each find different
problems.

I currently use AdAware, Spybot Search and Destroy, and Spyware
Blaster (all free). Even then, my Internet Security program
(Trend Micro 2005) finds one more item!

As previously indicated if you have a specific problem please
give details.

Ray
--
[All mail scanned by Trend Micro I. S. (2005), updated daily].

[AvianFlux]

pixi wrote:
> Can someone recommend an anti-spyware program. I have been using
adaware
> but there is one spy that saves itself and puts it back in and I
can't get
> rid of it.

I've discovered the best approach in dealing with all manner of malware
is with passive measures.

The passive measures which prevent >99% of malware from ever installing
on my machine are as follows:

1) Spybot Search & Destroy's Immunization and Browser Helper

2) SpywareBlaster

3) IE-SPYAD

4) hpHOSTS file

hpHOSTS file requires eDexter+JavaDog (active component) to function
efficiently, however.

I have no other malware countermeasures, e.g., anti-virus/anti-trojan
programs, installed. For a firewall I just use Windows XP SP2 ICF,
Internet Connection Firewall. It works great, and will not permit hacks
from getting through when configured correctly, i.e., disallowing
(unchecking) all ICMP and network services from accessing the network.

The above will prevent your machine from ever becoming infected, and
minimize the frequency of running Ad-Aware and Spybot Search & Destroy
active scan and removal operations, greatly. What isn't there to be
found, because of the installed passive measures, doesn't require
removal.

[Ian JP Kenefick]

On 4 Apr 2005 09:07:05 -0700, "AvianFlux" <neomoniker@hotmail.com>
wrote:

>I've discovered the best approach in dealing with all manner of malware
>is with passive measures.

or by being proactive.

>The passive measures which prevent >99% of malware from ever installing
>on my machine are as follows:
>
>1) Spybot Search & Destroy's Immunization and Browser Helper
>
>2) SpywareBlaster
>
>3) IE-SPYAD
>
>4) hpHOSTS file
>
>hpHOSTS file requires eDexter+JavaDog (active component) to function
>efficiently, however.

>The above will prevent your machine from ever becoming infected, and
>minimize the frequency of running Ad-Aware and Spybot Search & Destroy
>active scan and removal operations, greatly. What isn't there to be
>found, because of the installed passive measures, doesn't require
>removal.

That's not true. The above will not prevent your machine from 'ever
becoming infected'. The 'average user' will get infected with some
sort of malware without resident antivirus. The above may provide you
with some (not all) the required protection for web browsing but you
forget the biggest vector of all, email! The proof is in the MyDooms,
the Bagles, the Netsky's etc.

Sorry, but insinuating that you do not need antivirus software is bad
advice.
--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[AvianFlux]

Ian JP Kenefick wrote:
> On 4 Apr 2005 09:07:05 -0700, "AvianFlux" <neomoniker@hotmail.com>
> wrote:
>
> >I've discovered the best approach in dealing with all manner of
malware
> >is with passive measures.
>
> or by being proactive.
>
> >The passive measures which prevent >99% of malware from ever
installing
> >on my machine are as follows:
> >
> >1) Spybot Search & Destroy's Immunization and Browser Helper
> >
> >2) SpywareBlaster
> >
> >3) IE-SPYAD
> >
> >4) hpHOSTS file
> >
> >hpHOSTS file requires eDexter+JavaDog (active component) to function
> >efficiently, however.
>
> >The above will prevent your machine from ever becoming infected, and
> >minimize the frequency of running Ad-Aware and Spybot Search &
Destroy
> >active scan and removal operations, greatly. What isn't there to be
> >found, because of the installed passive measures, doesn't require
> >removal.
>
> That's not true. The above will not prevent your machine from 'ever
> becoming infected'. The 'average user' will get infected with some
> sort of malware without resident antivirus. The above may provide you
> with some (not all) the required protection for web browsing but you
> forget the biggest vector of all, email! The proof is in the MyDooms,
> the Bagles, the Netsky's etc.
>
> Sorry, but insinuating that you do not need antivirus software is bad
> advice.
> --
>
> Regards,
> Ian Kenefick
> http://antivirus.ik-cs.com

I'm not insinuating anything. It's a fact. As for email attachments, it
goes without saying, there's always a risk associated with opening them
from whatever source they originate, known and unknown.

Just delete ALL emails w/attachments from unknown sources. For known
sources, upload/send the emails w/attachments to Jotti's Online Malware
Scan or VirusTotal before opening them. If they're infected, you'll be
forewarned of it by those free online/email multi-scanner service
reports.

If, for some reason, you know or highly suspect some virus/trojan
componant has infected your computer use Trend Micro's Housecall online
scanner, and, if necessary, TM's Sysclean package to get rid of it.

No resident, real time, active AV/AT scanner needs to be
installed/running on a the machine with a correctly configured firewall
and safe hex operation.

[ted s.]

AvianFlux wrote:
>
> No resident, real time, active AV/AT scanner needs to be
> installed/running on a the machine with a correctly configured
> firewall and safe hex operation.
>
A lot of bad advice floats through this group but this one may win the
trophy.

[Ian JP Kenefick]

On 4 Apr 2005 09:48:48 -0700, "AvianFlux" <neomoniker@hotmail.com>
wrote:

>I'm not insinuating anything. It's a fact. As for email attachments, it
>goes without saying, there's always a risk associated with opening them
>from whatever source they originate, known and unknown.

>Just delete ALL emails w/attachments from unknown sources. For known
>sources, upload/send the emails w/attachments to Jotti's Online Malware
>Scan or VirusTotal before opening them.

That's a rediculous and time consuming policy.
>
>If, for some reason, you know or highly suspect some virus/trojan
>componant has infected your computer use Trend Micro's Housecall online
>scanner, and, if necessary,

What if it's a file infector? Wouldn't internet explorer be infected.

> TM's Sysclean package to get rid of it.

This is not what you would call proactive.

>No resident, real time, active AV/AT scanner needs to be
>installed/running on a the machine with a correctly configured firewall

Yes it does.

>and safe hex operation.

This does not apply to the average user.
--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[Ian JP Kenefick]

On Mon, 4 Apr 2005 09:59:48 -0700, "ted s." <ted@nowhere.invalid>
wrote:

>AvianFlux wrote:
>>
>> No resident, real time, active AV/AT scanner needs to be
>> installed/running on a the machine with a correctly configured
>> firewall and safe hex operation.
>>
>A lot of bad advice floats through this group but this one may win the
>trophy.

Agreed.
--

Regards,
Ian Kenefick
http://antivirus.ik-cs.com