Real Time Spyware Detection

Discussion in 'Malware Help (A Specialist Will Reply)' started by FishLips, Feb 1, 2005.

  1. FishLips

    FishLips Private E-2

    Hello all, I have a new Thinkpad that I'm trying to secure, but I don't want to overdo it. Here is what I've installed so far:

    - McAfee 8.0i VirusScan (this is comes to me free and legal from my firm with free updates which I get weekly - so while there might be "better" anti-virus applications out there I've gotta stick with this one because the price is very right!)

    - Adaware (whatever the lastest version is, just downloaded it in January).

    - Kerio Personal Firewall 4.1.2

    From all I've been reading it appears that the only thing I don't have yet is real-time spyware detection. Question is: do I REALLY need real-time detection or is this just overkill? I use Firefox for most of my Internet browsing, except for those "trusted" sites that I absolutely have to use IE for because they won't work otherwise (like my bank's site). I don't want to bog my machine down anymore than it has to be. Would it simply be best to hold off on installing real-time detection and only install it if I start getting nasties?

    If the answer is that I DEFINATELY need real-time detection, can I simply use SpywareGuard without SpywareBlaster? I don't want to load anything unneccesary or overkill. Has anyone ever had any compatibility problems between McAfee and Javacool products? With Adaware? With Kerio?

    I trust this forum to give me unbiased advice, so please keep up that tradition.

    Thanks!
     
  2. PhilliePhan

    PhilliePhan Guest

    I use Spyware Blaster, Spyware Guard, SpyBotSD and Ad-aware.

    Have a peek at Chaslang’s Recommendations .

    The best defense is smart surfing and keeping Everything in your arsenal UPDATED, especially AV and Windows.

    PP :)
     
  3. FishLips

    FishLips Private E-2

    PP, thanks for sharing your configuration. Perhaps you could enlighten me on the difference between SpywareBlaster and SpywareGuard? It appears they both block spyware from being installed? Why would you need two of them? Just to ensure everything is caught? Doesn't that take up a lot of resources? If you were to pick one preventer, which one would it be?

    Lastly, I've done everything I can to lock down my laptop - besides add a spyware blocker. My wife cannot stand the fact that some of the websites she visits don't work because they use cookies that Firefox blocks, or I have IE block. Right now, if she complains loudly enough, I simply use Firefox's cookie features to "allow" cookies from some of the sites she frequents (like clothing retailers, news sites, etc.). If I install SpywareBlaster or SpywareGuard, will that add additional frustration to my wife's surfing? Can it block access to benign safe sites as well due to cookies or active-x use? I'm talking legitimate banking and news sites here, not the porn or Kazaa stuff. I just don't want any more frustration on my wife's part - that's just more grief I'll get for trying to make the pc safer.

    I know these are a lot of questions, and they are open to anyone. Thanks in advance for your advice.

    Jim
     
  4. Wizry11

    Wizry11 Private First Class

    hey . . . i don't know about spywareguard but i LOVE spywareblaster. I have never had an issue with it and my computer is spyware free even after some scandalous surfing.

    I have the following
    firefox browser

    kerio firewall

    adaware se + vx2 plugin

    spybot + DSO fix update

    spywareblaster

    cwshredder

    startup inspector for windows

    and a multitude of antivirus like mccaffee stinger, A squared, and norton AV 2005 (overkill)

    but hey the regular run with this comb when comnined with Diskkeeper and RegSupreme Pro leaves my comp squeaky fricken clean and hasn't geioven me any trouble or reason for any other user to yell at me :)

    most importantly im spyware free! so spywareblaster is the way to go from my perspective - i give it a big thumps up
     
  5. PhilliePhan

    PhilliePhan Guest

    Hi Jim,

    Here's a link for you: spyware blaster and spyware guard

    I find these less of a pain than blocking bad sites via the Hosts file, if that helps any. Both use little resources - No reason not to use both! I'm sure your wife would rather be safe than sorry!

    PP :)
     
  6. bem

    bem Private E-2

    I'm a real fan of CookieWall. Simple, small prog that handles all the cookies that come in. It will ask to keep, temporarily accept, or always delete any cookies that have come in when you reboot. You'll need to add it to startup manually, or with StartupControl Panel. (drag & drop, YES!)

    I disable all other cookie handling functions in other programs and use this exclusively for that purpose. I only retain cookies for login on regular sites, and for online scanners and such. I delete ALL else. Let 'em guess what you looked at last time...

    It will ask fairly repetively at each boot, but it learns, and you are in control. Better than just dumping everything, IMHO.


    http://analogx.com
     
  7. FishLips

    FishLips Private E-2

    Thanks to all for their input. Sound like both products are very well received,

    PP, one more question, please: I read the other thread you posted and you stated there that you thought that registry entries are made in an IE path/folder. I suppose my question is: if the CLSIDSs of the nasty stuff is placed in an IE path, will Firefox be able to use them? I suppose my question is, will Firefox users benefit from SpywareBlaster?

    Thanks for directing me to that thread. It really sounds that I want SpywareGuard, because I already have Ad-Aware to clean if something slips by a preventer. I know some folks on this site recommend using SpywareBlaster in ADDITION to other cleaners, but too much software doing the same thing gives me heartburn and makes troubleshooting that much more complex. In addition, I'm running McAfee VirusScan and there is some talk about them not playing well together, so I may just go with the Guard.

    Your thoughts?

    Jim
     
  8. PhilliePhan

    PhilliePhan Guest

    Hi Jim,

    I don't use FireFox *pause while all gasp in horror* so am not exactly an expert. My IE is quite fine with the tools I listed before. Everything (Windows Updates, IE, AV) is up-to-date and I make an effort to surf smartly!

    Spyware Blaster is designed to block malicious ActiveX installs. FireFox does not have those issues, so you don't really need it if you use FireFox 90% of time (you'll still need IE for some things).

    In addition to the tools you are using, I strongly suggest SpyBotSD. It works well in tandem with Ad-aware. They both catch items the other misses. Plus, Spybot's "Immunize" feature is good to have as well.

    I agree that you CAN have too much protection, but running the 4 tools I listed earlier is well within the realm of reason amd not overkill. They all serve a purpose!

    Some interesting reading for you:
    Blocking Pests With Hosts File

    PP :)
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    And in addition to what PP stated. SpywareBlaster does not run realtime. You install it and it puts protection in place. There is nothing running unless you run the application to change the configuration or to update it. Also, I have it running on many system using McAfee with no problems.
     
  10. FishLips

    FishLips Private E-2

    Most excellent answers from all of you. I know its quite evident I am a novice, but a novice who wants to learn. Thanks to all who have given me at least a direction in which to get more education on.

    PP, I'll have read up on what the "immunize" feature of Spybot is. And as for as the HOSTS files....hmmm, I think I better get a better all around PC education before attempting that. You see, I'm no stranger to computers, being in IT for more than 10 years and dealing with everything from mainframes to mid-ranges - but Windows is a new beast to me from a technical side, although I've been using it as a normal user since 3.2 came out.

    What a great forum. I think I'll lurk around these boards and ask more knucklehead questions from time to time if you don't mind.

    Cheers!

    Jim
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You don't need to read to much Jim. Just click the Immunize button and Spybot adds a thousand or more bad addresses (of malware related sies) into your Restricted Zones of Internet Explorer to prevent you from going there.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    And by the way, you don't need to do anything with your hosts file. Just make sure there is never anything in there but the starting comment lines (lines beginning with a #) and the only other line is 127.0.0.1 localhost

    Putting anything else in there is a waste of time and makes it easier for malware to hide itself in there.
     
  13. PhilliePhan

    PhilliePhan Guest

    Welcome aboard, Jim! Feel free to ask as many knucklehead questions as you want ;)

    BTW - I agree with Chas regarding Hosts file. Just wanted to provide some reading material on another way to block baddies. I can't say I recommend it, though you will find a number of "custom" Hosts files floating around the internet and a number of anti-spyware sites touting their virtues. I've found that they cause more headaches than they prevent. Just thought I'd include the link since it was kinda related to the topic of discussion.

    PP :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds