Can You Trust Spyware Detection Program?

[mr_skrilla]

The next time you run a scan with your anti-spyware tool, it might miss some programs. Several anti-spyware firms, including Aluria, Lavasoft, and PestPatrol, have quietly stopped detecting adware from companies like Claria and WhenU--a process called delisting. Those adware companies have been petitioning anti-spyware firms to delist their software; other companies have resorted to sending cease-and-desist letters that threaten legal action.

In most cases it's difficult for customers to determine whether their anti-spyware tool has delisted anything and, if so, which adware it skips.

"When a spyware program gets delisted, users won't be aware of its presence," says Harvard law student and spyware researcher Ben Edelman. The practice, he says, "offers spyware makers a new lease on life, letting them keep users who otherwise would have removed their software."

Degrees of Spyware

Of course, some spyware apps are worse than others. One spyware program may make severe changes to your computer's settings, while another merely displays ads.

Claria and WhenU are making the case that their adware programs don't resort to illegal tactics, such as exploiting security holes, to install themselves. And though this software can be annoying, adware developers argue that merely being listed in an anti-spyware scanner's database tarnishes a company's reputation by linking its relatively benign adware application with far more harmful and intrusive spyware programs.

According to Avi Naider of WhenU, though some other adware companies will track your Web meanderings and sell that data, WhenU's privacy policy doesn't permit it to track the search queries that users type or the Web pages that they browse.

Each anti-spyware firm uses its own set of criteria to decide whether to remove or detect a file or Registry key related to spyware. Usually even a few bad behaviors suffice to red-tag a file as spyware or adware.

Peter Mackow of PCTools, maker of the Spyware Doctor anti-spyware program, says that his company won't publish the entire list of its criteria for fear that spyware companies will use the information to design a spyware application that skirts every rule. That is a position shared by many others who fight spyware.

"The spyware guys want a really rigid set of rules defining spyware so they can then make an end run around [all of them]," says Eric L. Howes, who tracks the spyware business for Spywarewarrior.com and consults for anti-spyware software companies.

Experts recommend that you employ two--or even three--anti-spyware tools. The more you use, the likelier they are to counter the individual biases of each anti-spyware company.

To Delist or Not

It's unfair to permanently blacklist a company based on its past behavior, so some delisting is inevitable. But delisting an adware application is a dangerous proposition for anti-spyware developers. In the past, some spyware and adware makers have changed their software enough to get delisted only to resume the activity that got them flagged in the first place.

As a result, the anti-spyware industry has developed a thick skin. Delisting is rare because, Edelman says, anti-spyware firms "stand up to strongly worded demand letters."

Adware companies also decry the word spyware itself as inherently negative, so some anti-spyware firms have tried to create terms that mean essentially the same thing, using more-neutral language: grayware, potentially unwanted programs, or potentially unwanted software. But Webroot's CEO David Moll argues that matters could get more confusing if the anti-spyware companies try to refer to spyware by other names, just when many people are beginning to understand what spyware can do.

source: http://news.yahoo.com/news?tmpl=story&u=/p..._pcworld/120914

[OPaul]

I don't understand why so many people still use AdAware's when they do this ****. Spybot is just as good and well now, better.

[Koding]

This is why I run 4 programs (MS Anti-spyware, Ad-Aware, Spybot S&D, and Spyware Blaster)...and I'm probably still not 100% protected.

[Erftek]

I use adaware and spybot mainly and occasionally MS's. I've been getting quite a few through Firefox lately :pinch: looks like I may switch back to Opera :yes:.

[mr_skrilla]

Yeah I have always thought of SpyBot - S&D as one of the best. I have never really liked Ad-Aware.... Is Microsoft's any good? I have been hearing quite a bit about it lately....

Anyways thought it is f'cking bullsh't the companies are doing this stuff... Spyware is killing the internet. The problem is that non technical users don't know wtf they are doing and they just get infested with spyware. The sh't really can basically make your computer unusable. Something needs to happen to outlaw spyware overall.

[matt74441]

So let me get this straight. Companies that create software which they illegally install on your computer to spy on you and spam you are threatening legal action against companies that remove it for you?

[NoneAvail]

thats so ****ing... the inrternet is really unsafe place to be

[yisman]

No, I don't trust my ad/spyware detection programs. But there is nothing I can do, short of creating my own anti-spyware program.

I use 4 different programs, and I hope that is good enough.

[Vykranth]

So let me get this straight. Companies that create software which they illegally install on your computer to spy on you and spam you are threatening legal action against companies that remove it for you?

585998058[/snapback]

Exactly. This is why Microsoft wanted protection for companies making anti-spywares programs from such lawsuits in a proposal for a spyware law in the US congress.

I think this story went on the frontpage a few days ago although I cannot find it anymore

[mr_skrilla]

Exactly. This is why Microsoft wanted protection for companies making anti-spywares programs from such lawsuits in a proposal for a spyware law in the US congress.

I think this story went on the frontpage a few days ago although I cannot find it anymore

585999177[/snapback]

IS congress considering the proposal

[Vykranth]

IS congress considering the proposal

585999278[/snapback]

That is a good question: I could not find any more information besides the link to the bill proposal

http://thomas.loc.gov/cgi-bin/bdquery/z?d109:H.R.29:

http://thomas.loc.gov/cgi-bin/query/z?c109:H.R.744:

I do hope that the US congress will take into account Microsoft proposal

For reference, here is the link to the front page news I mentioned https://www.neowin.net/comments.php?id=28557&category=main

[IceDogg]

I use adaware and spybot mainly and occasionally MS's. I've been getting quite a few through Firefox lately :pinch:  looks like I may switch back to Opera :yes:.

585997957[/snapback]

I use 4 different anti-spy ware programs and none ever find anything getting through on Firefox.

OnTopic: I agree you should use more then one. I use 3 regularly and another one every once in a while just to make sure.

[DedPixel]

I was going to install the MS one on someones computer. Is it coming out of beta anytime soon? I still use it on my machine.

[Nelsinho]

:hmmm: I personally use MS antispyware with no problems and also no use IE for nothing except for windows updates, in this manner I think what the principal reason for no achieve or catch malwares etc etc is each user need have a good sense before clicking in any dialog box or strange websites <warez & bad company> this is essential of course :p LOL :laugh:

[yisman]

And though this software can be annoying, adware developers argue that merely being listed in an anti-spyware scanner's database tarnishes a company's reputation by linking its relatively benign adware application with far more harmful and intrusive spyware programs.

That's like saying "It's not fair to call me a criminal. All I did was rob the corner store. I didn't kill or rape anyone."

Bite me, Claria and WhenU.

[yisman]

This is why I run 4 programs (MS Anti-spyware, Ad-Aware, Spybot S&D, and Spyware Blaster)...and I'm probably still not 100% protected.

585997933[/snapback]

Same here. Spyware Blaster is my favorite, but it can't scan, unfortunately.

[Slimy]

that's why i use winpatrol and spywareblaster. stop getting the spyware in the first place. ms antispyware to scan.