Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Texas-Hansen on July 31, 2008, 07:23:44 PM
-
I noticed that a lot of folks seem to run both Avast and standalone 3rd party spyware program, and I'm curious as to why folks do that since Avast lists an anti-spyware component as part of it's features.
-
Great Question PERSONAL OPINIONS FOLLOW
did you find anything with a search?
Any reason to think that you might be infected
everything up to date? have you run Secunia for instance?
Now IMHO
no one program can possibly do everything and if it did it would be so big as to be impractical
Avast uses a general-signature method
other methods such as heuristics are equally valid
although they may produce more false positives ALL of these programs may produce false positives
so quarantine/ place in chest/ vault do not remove/delete any hits
that said
On line scanners are a good back up to Avasts fine method
BitDefender has a reputation with its heiristics and Kaspersky has a reputation with first day detections
as for antispyware
Few if ANY of the free versions have any real time load at startup protection- so they cannot conflict with AVAST in any case
Malwarebytes AntiMalware MBAM
Super Anti SPY SAS
Spybot Search and Destroy
all have their places and can be run on an as needed basis
Spybot does have a T-timer option which does have real time capabilities- check it out at the spybot forum at safernetworking new version out which is lighter on resources SPybod also has a SD helper option to block changes to internet explorer- it will not conflict and especially useful if you only use IE on rare occasions for those programs that require active X support
now
SPyware Blaster or equivalent is a given if you have IE installed as it blocks malicious Active X
A host file will block lots of ads and help prevent baddies from phoning home
SPybot Immunize function is useful- update and eimmunize every wed or after updating your host file
Scotty the Win Patrol watchdog takes little nourishment from your cpu and will alert you to many system changes good dog to have on patrol
any more than this gets into process guard, system safety monitor type programs which is a completely
different subject
Firefox has a script blocker and anti spam
If you use IE there are threads showing you how to lock it down to protect yourself
which firewall do you use?
-
Thanks. I'm currently using Comodo. Just installed it yesterday
-
good choice
-
I noticed that a lot of folks seem to run both Avast and standalone 3rd party spyware program, and I'm curious as to why folks do that since Avast lists an anti-spyware component as part of it's features.
Well there is a differences, in that there are specialist anti-spyware applications and they incorporate registry scanning as part of their on-demand scan. Whereas avast doesn't scan the registry as part of its routine on-access scanning or on-demand scan. When avast detects a spyware infected file it will look in the registry to see if there are any associated registry entries and it will delete those entries.
Having a multi application approach to your security is likely to provide an overall higher detection rate, but those applications should be chosen so as not to conflict. You can a resident anti-virus and a resident anti-spyware as they are slightly different in how they work and generally won't conflict. But, you shouldn't have more than one resident application by type, e.g. 1 resident AV not 2 and 1 resident AS not 2, to this you could add on-demand scanners are they aren't resident and shouldn't conflict with the resident application.
-
Thanks. Very helpful information. Of those suggested, Malwarebytes AntiMalware MBAM, Super Anti SPY SAS, Spybot Search and Destroy, which is the best spyware to use then with Avast? I'm using IE 7 for internet browsing. Is on demand or real time scanning better? I don't want to use up tons of system resources but do want to avoid headaches caused by spyware, etc. Need a nice balance of protection, ease of use (automation), and low impact on system resources.
-
IMHO time again
If you are using IE it is more important to be running
Spyware Blaster
Spybot's SD Helper and Immunize
and a Hosts file such as MVPS hosts or HP hosts
also do some searching and find some posts on locking down IE
strategy
Update Spybot every Wednesday manually, re immunize and run a scan once a week if you want to
Re-immunize after an update of your Hosts file
THERE IS A NEW T-TIMER IN BETA HOLD OFF TILL RELEASED
try spybot t-timer for real time protection of changes to your registry and IE
there is a switch between low resources and speed of initialization name your poison
if you think it slows your system down- we'll they are working on it - put up with it for the protection
if unacceptable post in their forum
an alternative is WinPatrol but it is reactive not proactive
as far as I know there is NO FREE LUNCH
Counterspy and Spysweeper also take lots of cycles when run in real time
Here is an IE Tweek I use
go to spybot mode>advanced>tools> and select IE Tweeks and turn on all of the misc locks
now
if you are in IE and go to Internet Options IT WILL NOT WORK for you or from hacks by the bad guys
not to worry
go to control panel >rt click on internet options and put a shortcut to internet options on your desktop
let the damn hackers try and figure that one out
The other thing more important than which scanner is to keep all your software up to date
getting started I'd also run a MBAM scan just to provide a baseline
of course if it or spybot does find anything quarantine do not delete/remove and hurry right back here :)
-
Firefox has a script blocker and anti spam
These aren't built in. You mean Firefox Extensions like NoScript, right?
-
right
thanks
-
In my case, I am mostly using FF and running as a limited user (for daily use) and avast! has shown my PC to be clean, is there any real necessity (since avast! does check for spyware and rootkits) to bother with anti-spyware?
-
See DavidR's message in post above
as for me answer is yes
-
sandeep108,
DavidR has already given an answer to that question earlier in this thread. Using FF instead of IE7 does not guarantee protection against the type of threats present today. :)
-
:) Hi Texas :
I would not touch Spybot with a 10-foot pole; it has NOT been a top
antiSPYWARE/antiTROJAN program for the last couple of years . Best to use
the programs recommended by CERTIFIED "Malware-Fighter" "Mr Charlie" at
http://forums.maddoktor2.com/index.php?showtopic=9590 .
You will notice Spybot is NOT One of his recommendations .
-
Considering this topic you refer to dates from 15 May 2007, there is no edit (like in our forums when a post is edited) in the post to indicate it has been updated, though its reference to malware bytes anti-malware that is relatively recent.
So it could be well out of date as much of the recommended software will have changed. Any malware fighter would tell you no doubt out of date information is almost worse than no data.
Whilst I no longer use S&D it has had a recent update and by all accounts that improved its effectiveness so as a secondary anti-spyware there is absolutely nothing wrong with it.
-
Depends on the infection
Spybot fond some hits yesterday on a computer already scanned by MBAM and SAS
Spybot does not scan the hard drive file by file but checks each malware item in its database against known infection points- a completely different method than the other scanners.
If we were talking about Ad-Aware I'd agree with you
did you see Polonus post today
One of the things I'd known but not recalled recently
Spyware Doctor Free Basic Edition:
http://pack.google.com/intl/en/pack_inst...
Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.
one of the few ways to get FREE real time protection from an Anti-spyware
Except Spybot's t-timer-
do you know of any others?
-
one of the few ways to get FREE real time protection from an Anti-spyware
Except Spybot's t-timer-
do you know of any others?
Spyware Terminator and BOClean!
-
Spyware Doctor Free Basic Edition:
http://pack.google.com/intl/en/pack_inst...
Its free with Google pack, untick all boxes except Spyware Doctor. Download install, update and run.
A resource hog only with 50% of database, no thanks.
ST or CBOCLEAN are free and more lighter.
-
In my humble opinion, Avast! + firefox + SandboxIE in real-time should be enough to take care of all spyware!
On-demand you can have everything your heart desires!
SAS
MBAM
Ewido micro scanner
SpywareBlaster
a²
;)
-
Hi guys great discussion and opinions
BO Clean great program but it is not real time last time I looked- More like WinPatrol
MBAM and EWIDO great programs no W98/ME support
Ewido -AVG Anti spyware evidently still able to get support but hard to find for new downloads :)
EWIDO micro scanner still available- have to check
A-Squared good scanner no real time in the free version
Spyware Doctor is no more of a resource hog than Counterspy or Spysweeper
all of these three go after a different market than FREE- like big on corporate support
"who's on first" changes with each round of tests
not in the same resource hog category with McAfee and Norton
I have not used Spyware terminator- still bundled with crap?
It may have real time, scanner seems to work well
as does pest patrol free there is a version that updates but does not remove anything
real time protection works fine also supports all Windows
but am I recommending it?
Sandboxie et all
different discussion- but way to go
-
Thanks everyone. Informative discussion. I note that Windows Defender has not been mentioned and I may get piled on for asking this naive question, but is Windows Defender effective as a anti-spyware program (especially since Avast has some limited component of anti-spyware running already running)?
-
Windows Defender was previously called Windows Anti Spyware and was purchased from Giant by Microsoft
Giant Anti Spyware was great in its day
Sunbelt- Counterspy had a license for Giant and shared R&D with MS for a year
Counterspy is now on its own and doing quite well
the amount of R&D MS is putting into Windows Defender is unknown
(I would not rely on it as my only on demand scanner)
anybody see any tests on scan effectiveness?
If Windows Defender's real time capabilities have been retained they worked well when was Giant
so worth a try vs Spybot T-Timer and whatever Spyware Terminator has to offer- or Spyware Doctor
I need to check these out or find where some one has
The discussion of Threat Fire, System Safety Monitor, Sandboxie also has to be done
-
What can we discuss about SandboxIE? Plain and simple: It rules! Lol
I have been using it for about 6 months and have tested over 150 malware with it, nth ever got out. The only negative about SandboxIE, is that I have become a happy clicker.
I clcik on anything just for the fun of it, cause I knows there will be no bad consequences :)
-
Let's talk a little more about BO Clean
Main thrust of the program is anti-trojan
it has a blacklist that it compares to programs that try to run
very effective against programs in its database
it may duplicate what is in the later AV's with spyware protection
so my statement as it scanning like Win Patrol may be inaccurate or BO clean may also have a registry scanner (for unauthorized changes)
more investigation needed
BOClean is one of the few programs whose updates are shown at spywarewarrior- updates
not a recommendation but definitely not on a not recommended list
also note that Defense Wall HIPs final is released
http://www.spywarewarrior.com/viewtopic.php?t=25717
-
BOClean does a very simple and effective thing. For a malware to run and do any damage it has to be loaded in memory first!
As soon as it loads in memory BOClean interacts and snaps its neck!
So the malware hasn't got a chance to run.
This detection is signature based, so for a malware to be caught it has to be in BOClean's database, but it's a very good database in my opinion.
The only thing that bothers me about BOClean, is the fact that it could be lighter on system resources, not that it's a resource hog, but could be lighter!