CounterSpy

[lynchknot]

I'm trying this app and finding it's great! It didn't really find anything but the tools are great http://www.sunbelt-software.com/CounterSpy.cfm

**edit- I see it's already posted: http://www.techzonez.com/forums/show...ght=counterspy

[Curio]

Originally Posted by lynchknot

I'm trying this app and finding it's great! It didn't really find anything but the tools are great http://www.sunbelt-software.com/CounterSpy.cfm

**edit- I see it's already posted: http://www.techzonez.com/forums/show...ght=counterspy

Did you not notice that it was Giant AntiSpyware.

[lynchknot]

Originally Posted by Curio

Did you not notice that it was Giant AntiSpyware.

It is but it's not. This is much better -

It looks like a newly re-branded AS but the results differ. I ran scans back to back...

Looking deeper, you find that the similarity of the two programs is superficial:

1) The CounterSpy installation is larger: 64 MB compared to 14 MB for MS.
2) The files examined by CS are about 54,000 compared to 18,000 by MS.
3) The Registry locations examined are about 12,000 for CS and 8,000 for MS.

Some of the numerical differences can be explained by the fact that CounterSpy detects cookies and MS AntiSpyware does not. CounterSpy also appears to beat the MS AntiSpyware beta because CounterSpy enjoys access to Microsoft's spyware database as well as Sunbelt Software's own reporting network. Sunbelt was a partner in Giant, and when this was purchased by MS they still have an agreement in place to be provided updates by MS until July 2007

[Curio]

So it detects passware kit as spyware - and that's better is it?

[lynchknot]

I said it has a tool(s) that MS does not have. Perhaps you overlooked this as well -

Looking deeper, you find that the similarity of the two programs is superficial:

1) The CounterSpy installation is larger: 64 MB compared to 14 MB for MS.
2) The files examined by CS are about 54,000 compared to 18,000 by MS.
3) The Registry locations examined are about 12,000 for CS and 8,000 for MS.

Some of the numerical differences can be explained by the fact that CounterSpy detects cookies and MS AntiSpyware does not. CounterSpy also appears to beat the MS AntiSpyware beta because CounterSpy enjoys access to Microsoft's spyware database as well as Sunbelt Software's own reporting network. Sunbelt was a partner in Giant, and when this was purchased by MS they still have an agreement in place to be provided updates by MS until July 2007

I did have a few so called holes and patched them up with this:

[Curio]

If you change the settings MS will scan all files. I just can't see many people paying for it. A tool should scan what is in memory and all the Auto Start Entry Points (ASEPs for the uninitiated). With the size of modern drives doing monster scans isn't a good thing. According to your graphic MSAS found 60 more running processes? Tacking on a few cheapo promises to 'check up your PC (this should take less than a minute to run)' hmmm... must be thorough though huh?
I dunno it can't be all that bad it's just that FREE thing, especially after MS mooted that MSAntispyware will remain free as long as you have a genuine Winduz copy. The free tools used correctly really take some beating.
The filenames are the same and if you have it on a machine with MSAntispyware - like I see you do - you should be aware that when u uninstall it after the trial period runs out (cos u won't pay for it either) you will find that it breaks your MSAS installation.

[lynchknot]

The filenames are the same

- no they are not, unless you mean the "gc" files -
[/URL]

you will find that it breaks your MSAS installation.

- I know for a FACT, you are smarter than that.

hehe, I'm not trying to sell it to you or anyone for crying out loud. I'm saying it looks pretty (actually said, "looks nicer than Microsoft's"- elsewhere a day before starting this thread) and has nice tools compared to MS-AS. Who said anything about paying for it? I'm just trying it. When the trial is over, it's gone - but... I will see if the databases are compatible and try to add to MS for experiment. After running XP- antispy and various "harden-it" type tools, there were a couple areas that I overlooked or did not apply. A rather limited list but a check list nevertheless....

[Curio]

They will have to go some before anyone is likely to buy it but good luck to them perhaps they can file an anti-competitive suit against MS when they bundle MSAntispyware with Longhorn, could be worth a go. At least they don't charge silly money for it - 19.95 a license, but I hope they have something else to fall back on.

Why detect Passware Kit?

[lynchknot]

Here's their take on it Curio:

About Password Hijacker: A password hijacker is a Trojan program used to steal the passwords from a user's computer such as its login passwords or passwords for many of the user's installed programs and sent the passwords remotely to the attacker.

However:

Low risk threats pose a very low risk or no immediate danger to your computer or your privacy, however these types of applications may profile user online habits, but only according to specific privacy policies stated in the applications End-User License. These types of threats generally borderline on being a threat to being a standard application that has a complex license agreement that you knowingly installed. Advice: This is a low risk application and will not cause direct harm to your computer, removing it is not required

I think they are just giving you an education.

[Curio]

It doesn't exactly hide or install itself by stealth and it has an entry in add/remove programs.......

Oh well never mind I like this though - I have been submitting loads of files to it http://virusscan.jotti.org/ - avast! isn't very good with porn diallers by the looks of it.

[Curio]

I have been and continue to give CS a right good testing, lots of FPs & some of the security settings are insecure. Also if you visit one of those lovely sites which deliver a spyware bundle (now sadly common - but I like them!) the multiple alerts block you from responding by over trumping each other and freezing the program - meanwhile the crudbundle carries on installing.

On the plus side - it works on 98/me.

[lynchknot]

I'm not having any problems. All my runs turn up zero. Only that one FP that was rated safe or "low" anyway. I use firefox - perhaps why this and other AS never find spyware anyway.

Here's a soon to be update: http://www.wilderssecurity.com/showt...ght=counterspy

some of the security settings are insecure

- please share with the community so we may make adjustments

[lynchknot]

In case anyone interested: Sunbelt Scoops Up Google-like Spyware Sniffer - http://www.eweek.com/article2/0,1759,1788878,00.asp

Anti-spyware vendor Sunbelt Software said it acquired Web-crawling technology that will enable its researchers to identify new spyware outbreaks more quickly.