Slashdot Mirror


MS AntiSpyware vs Ad-Aware vs. SpyBot

An anonymous reader writes "Flexbeta.net compares Microsoft's new spyware fighting tool, Windows AntiSpyware, to Ad-Aware and SpyBot S&D; the two leading spyware tools on the market today. The review sets up an infected PC using VMWare Workstation and scans the machine using all three tools to see which tool detects the most spyware. Though still in beta, Microsoft AntiSpyware does an amazing job at detecting spyware by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot."

535 comments

  1. Wow, is this for real by Cracell · · Score: 5, Funny

    So wait a sec Microsoft's product is actual good?

    --
    Signatures are so 90s
    1. Re:Wow, is this for real by harrkev · · Score: 3, Funny

      They have only owned it for a few weeks. Even Microsoft has limits on how fast they can screw stuff up.

      --
      "-1 Troll" is the apparently the same as "-1 I disagree with you."
    2. Re:Wow, is this for real by Anonymous Coward · · Score: 1, Informative

      Let's not get too crazy. MS obtained Giant Software and this product was (very recently) Giant Anti-Spyware. It was a good spyware detection product well before MS was involved.

    3. Re:Wow, is this for real by Cracell · · Score: 1

      heh really I thought they were better then that, though the newest msn messenger 7 beta is sure crap compared to the first beta of it, so maybe as time goes on they can worsen their products

      --
      Signatures are so 90s
    4. Re:Wow, is this for real by gameboyhippo · · Score: 1

      Microsoft does from time to time make good software. For example I prefer MS Office to OpenOffice.org. MS Office has nice things such as grammar checking.

      I do, however, use OpenOffice.org instead due to the fact that I prefer Free Software over proprietary software.

      Of course it makes sense that MS would make an anti-spyware program. They obviously wish to compete against all the perks we Free Software users enjoy.

    5. Re:Wow, is this for real by stfvon007 · · Score: 2, Funny

      What there gonna do is make it good so it becomes what 95% of users use, Then start mostly ignoreing it cause they have a monopoly, just like what happened to Internet Exploder. It will also be bundled with Windows XP SP3 and Longhorn.

      --
      All misspellings and grammatical errors in the above post are intentional and part of my artistic expression.
    6. Re:Wow, is this for real by wankledot · · Score: 5, Funny

      Of course it's good, they know where to find spyware and viruses because they're the ones that created them!!@# [/tinfoilhat]

      --
      My sig is blank, I typed this by hand.
    7. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      No, their product just identifies things like SpyBot, AdAware and Firefox as well

    8. Re:Wow, is this for real by pilgrim23 · · Score: 3, Interesting

      I tried it. I found this particular interesting: Box: Compaq P4 2ghz 256mb memory XP SP1 on a Corp. net (yes I know, but some of our in-house apps fail under SP2): Fairly clean already machine with Adaware and Spybot already loaded. I downloaded the Microsoft beta and ran it. Many minutes later it reported a passle of stuff. Like with Adaware and Spybot I said "Ok dump it all" turned off the All time protection feature, said no to all the "Do you want me to be intrusive and make all your decisions for you?" typical Microsoft crap (didn't matter, it loaded itself anyway), then, and this is the curious part: I ran Spybot. It ran in 2 seconds flat. Say What? So I downloaded a NEW spybot and installed it. It then did a normal several minutes run and found a few chunks I said go ahead and dump. Does the M$ product consider Spybot....spyware?

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    9. Re:Wow, is this for real by Anonymous Coward · · Score: 1
      Right. I predict that they'll start defining some things as spyware that really aren't, like winxpcrk.exe or win2kkeygen.exe or freeme.exe. Don't worry. Things will go downhill quickly as MS won't update their definitions nearly often enough.

      freeme.exe detected. This program is involved in breaking DRM on some media files. It infects some media files and your licenses.

      Scanning for infected media...
      Infected media found.
      Infected media deleted.
      Updating licenses.

      Your computer is now free of all known spyware and viruses.
    10. Re:Wow, is this for real by BobPaul · · Score: 1

      by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot.

      How many of those are actual infections and how many of those are just seperate files for the same infection?

      I've noticed adaware often does this. It says there are 300 infections, but only 3 of them are program executables and only 1 is running. Many of them are cookies, so I suppose those could count individually, but seperate dlls for the 3 programs it found should not be counted as seperate infections.

    11. Re:Wow, is this for real by skinfitz · · Score: 1

      Remember it's only in beta right now. The coders probably have not had time to fill it full of bugs and security holes yet. Wait for the full release.

    12. Re:Wow, is this for real by alatesystems · · Score: 1

      I mirrored it.

    13. Re:Wow, is this for real by zapp · · Score: 1

      That is my biggest pet peeve with these spyware removal tools. It's all to scare users into using their product though. Just like version number bloat...

      If company A finds 3 real infections, and company B finds 600 infected files (for the same 3 infections)... which do you think the user will be more impressed with?

      --
      no comment
    14. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      Ummm.. most of the adware/spyware comes from "free software." Albeit not so much from the OSS.

    15. Re:Wow, is this for real by Rasta+Prefect · · Score: 4, Informative

      I've noticed adaware often does this. It says there are 300 infections, but only 3 of them are program executables and only 1 is running. Many of them are cookies, so I suppose those could count individually, but seperate dlls for the 3 programs it found should not be counted as seperate infections.


      Usually they do show what each file belongs to as well, so you can see roughly how many products they're removing. The number of files removed _is_ relavent however - many spyware programs tend to make multiple copies of themselves that'll happily restore each other when one is removed.

      --
      Why?
    16. Re:Wow, is this for real by Zalgon+26+McGee · · Score: 0, Flamebait

      No, it's not good. Default behaviour it exhibits:

      * Resets IE homepage to msn.com without consulting the user

      * Reviews your HOSTS file and comments out any lines referring Microsoft properties. Thus, the line:

      127.0.0.1 ads.msn.com becomes
      #27.0.0.1 ads.msn.com

      This is underhanded at best, as the EULA and Help make no mention of this behaviour.

      --

      ---

      Book(n): Utensil used to pass time while waiting for the TV repairman

    17. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      If company A finds 3 real infections, and company B finds 600 infected files (for the same 3 infections)... which do you think the user will be more impressed with?

      The one that came prebundled with the OS of course. They aren't going to install the other one.

    18. Re:Wow, is this for real by Acts+of+Attrition · · Score: 1

      Hmm....
      I wonder why it is a Microsoft product can find spyware that other products don't even know about...
      A puzzle for sure...

    19. Re:Wow, is this for real by Master+of+Transhuman · · Score: 4, Insightful


      Depends on your definition of "free software", doesn't it?

      If someone writes a utility and gives it away, it rarely has spyware in it.

      If a commercial or sports site "gives away" some lame "utility" to help you keep track of baseball scores, it usually has spyware in it.

      This is not "free software".

      I've NEVER seen spyware in GENUINE "freeware".

      I frequent porn sites and I rarely even get spyware from THEM since they already know what you want and don't need to spy on you - and mainstream commercial advertisers don't advertise on them because it looks bad, so there is no motivation to put spyware on many porn sites. Of course, there are the lame sites that install overseas dialers and crap like that, but in general you get spyware from lame commercial sites selling crap.

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    20. Re:Wow, is this for real by afabbro · · Score: 2, Informative

      Did not do either of these things to me, on three different PCs.

      --
      Advice: on VPS providers
    21. Re:Wow, is this for real by fm6 · · Score: 4, Insightful
      You got modded up as funny. You deserve the upmod, but I think you make a serious point. Microsoft products don't always start out as total crap. Sometimes they buy a decent product from somebody, or invent something with a good basic design (their old Multiplan product was the first spreadsheet I didn't consider a total kludge), or invent some idea that could be really useful if it's implemented right. But then they throw their bureaucracy, their intense intracompany rivalies, their focus groups, their love of feature bloat, and (most of all) their compulsive tweaking at the product. Before you know it, you have some monstrosity that only runs on the latest hardware and that's a total pain to use.

      That's why I'll always be sorry the Democrats didn't stay in power long enough to break Microsoft up. If Microsoft developers were forced to operate in a competitive environment where mistakes actually hurt them, we'd all be better off -- including the former Microsofters.

    22. Re:Wow, is this for real by relaxrelax · · Score: 1


      More like they know where the unlisted security flaws who were never fixed in service packs are.

      Now they have a financial incentive to let holes in service packs - that we pay for to get rid of the spyware vulnerabilities in the first place!

      Congrats to MS for making us pay twice for anti-spyware!!! Marketing well done!!!

      --
      Microsoft is pure dog-ma. FreeBSD is pure cat-ma.
    23. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      does the process GIANTAntiSpyware.exe give you any hint as to why this is the case?

    24. Re:Wow, is this for real by imroy · · Score: 4, Insightful

      Maybe the MS product found the Spybot S&D definition file(s). Did you pay much attention to what the MS beta had found before telling it to delete them all?

    25. Re:Wow, is this for real by danila · · Score: 1

      Their MSN Toolbar Desktop Search is also good, better than Google desktop according to most reviews (but probably not better than Copernic).

      I am sure this is some kind of mistake. It must be some different Microsoft.

      --
      Future Wiki -- If you don't think about the future, you cannot have one.
    26. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      No, it's not good. Default behaviour it exhibits:
      * Resets IE homepage to msn.com without consulting the user
      * Reviews your HOSTS file and comments out any lines referring Microsoft properties.

      No it doesn't.

    27. Re:Wow, is this for real by gameboyhippo · · Score: 1

      Huh? I didn't realize that my "definition" of free Software was confusing. :) I use the Richard Stallman type definition. I was just saying that despite the fact that I like MS Office better, I prefer to use Free (as in Freedom) Software and thus use OpenOffice.org. I apologize for the confusion.

    28. Re:Wow, is this for real by mattyrobinson69 · · Score: 1

      Must have got some new employess they haven't managed to "train" properly yet

    29. Re:Wow, is this for real by yabos · · Score: 1

      "* Resets IE homepage to msn.com without consulting the user"

      Didn't do that for me. It pops up a window saying do you want to reset your IE settings to their factory settings.

    30. Re:Wow, is this for real by shaitand · · Score: 2, Informative

      Don't confuse the issue, 95% of the users didn't use IE because it was good, they used it because it was good enough and bundled with the OS. You act as if the two things are seperate ;)

      Netscape was always technically superior to IE.

    31. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      Bash.org quote #431786:

      The day Microsoft makes a product that doesn't suck is the day they make a vacuum cleaner.

    32. Re:Wow, is this for real by somekool · · Score: 1

      well, thats easy for them to remove what they let in in the first place.

      they know the doors....

    33. Re:Wow, is this for real by eobanb · · Score: 1

      And then a bunch of exploits will be discovered in it that will facilitate the installation of even more malware.

      --

      Take off every sig. For great justice.

    34. Re:Wow, is this for real by Zeinfeld · · Score: 4, Informative
      Actually there is a huge problem with anti-spyware deleting anti-spyware. The problem is that the anti-spyware ends up looking very much like spyware as far as heuristic checks go. So for example it tries to resist being clobbered by the spyware, it scans the disk, it hooks into similar entry points.

      The same problem happens with legislation. The Bono anti-spyware bill as currently drafted would make most of the anti-spyware programs illegal. its not intentional, its just bad drafting. The problem is that what is spyware is at some level a consent issue and so drafting is horribly difficult.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
    35. Re:Wow, is this for real by holzp · · Score: 0

      If you are reading this is IE 7, thats how it reads.

    36. Re:Wow, is this for real by randallpowell · · Score: 0

      I tried it on my WinXP notebook and it actually prevented me from installing Bonzai Buddy (can't live witout it) and removed it. It needs to reboot after it removes spyware but it just turned the notebook off.

    37. Re:Wow, is this for real by Shaklee39 · · Score: 1

      They're

    38. Re:Wow, is this for real by Guppy06 · · Score: 1

      Of course it's good, Microsoft knows exactly where to look when it comes to catching software that manipulates exploitable holes. It's amazing what having access to the OS source code can do for you.

    39. Re:Wow, is this for real by Anonymous Coward · · Score: 1, Insightful
      That's why I'll always be sorry the Democrats didn't stay in power long enough to break Microsoft up.

      The democraps were in power the entire time Microsoft was growing into a monopoly, if they were so concerned about it they should have done something then instead of retailiating when MS didn't pay them off like their competitors did.

    40. Re:Wow, is this for real by juglugs · · Score: 1

      Hey, hey, hey!

      Microsoft DID release another product that didn't suck...

      It was a vacuum cleaner...

      --
      This sig is in Spanish when you're not looking....
    41. Re:Wow, is this for real by DaFallus · · Score: 2, Informative

      said no to all the "Do you want me to be intrusive and make all your decisions for you?" typical Microsoft crap (didn't matter, it loaded itself anyway)

      Actually, in the original version of Giant's Antispyware, this is a default feature. The majority of Microsoft's beta version looks and acts almost exactly like Giant's latest version before they were bought out. I'd say that so far 99% of the code has been left untouched. However, Microsoft did remove the innoculate option from the Advanced Options menu.

      --
      No one cares what your captcha was

      Houston TX, USA
    42. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      On the other hand, spyware IS software, and you don't usually have to pay to get it on your computer.
      software + free = freeware

    43. Re:Wow, is this for real by Nikker · · Score: 2, Interesting

      What I would like to know is, is the Microsoft version finding the same spyware in diffrent locations or finding diffrent types of spyware in the same locations? The reason I bring this up is for Microsoft to beat evreyone else by a factor of two just doesn't sound right. Not that it can't be done just that is was done.

      The second case would be a factor of R&D which if confirmed that the detection does exist does prove a superior product.

      Alternatively if the Microsoft product is finding more because they know exactly where the OS weaknesses are then that is an odd situation. Wouldn't that indicate that they know about these problems and instead of incorporating it into the OS they would charge you for them? That would also mean that those problems detected by the scanner will *not* be incorporated into the OS because it would come as a hotfix rather than in a def file.

      I think this kind of software will do more to show the tigers true stripes then sell a new product. Maybe not today but eventually people will start to ask why.

      2 more cents

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
    44. Re:Wow, is this for real by fm6 · · Score: 4, Informative
      What I would like to know is, is the Microsoft version finding the same spyware in diffrent locations or finding diffrent types of spyware in the same locations? The reason I bring this up is for Microsoft to beat evreyone else by a factor of two just doesn't sound right. Not that it can't be done just that is was done.
      I'd already cleaned off the exisitng spyware using Ad-Aware and Spybot. So this was new stuff.

      It shouldn't suprise anybody that Spybot and AdAware miss a lot of stuff. There's a lot of crap out there -- I've heard reports of people having thousands of infections. The big problem is keeping those databases up to date. Since Spybot is basically some guy's hobby, and Lavasoft has never put a lot of effort into maintaining AdAware (a product that was given to them by its original author, on the condition that they always provide a free version), naturally their databases have lagged. It was inevitable that somebody with deep pockets would invest the time and money to do a better job.

    45. Re:Wow, is this for real by Nikker · · Score: 1

      It was inevitable that somebody with deep pockets would invest the time and money to do a better job

      Thats kinda funny since most of adware gets loaded via bugs in the software to begin with ;)

      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
    46. Re:Wow, is this for real by ScrewMaster · · Score: 1

      No ... they've just come out with another Windows patch, that's all. This one just happens to be a little more complicated than most of the others.

      --
      The higher the technology, the sharper that two-edged sword.
    47. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      I'll wait for the Network analyzers to tell us what type of information it's sending back to MS, first..!

    48. Re:Wow, is this for real by adeydas · · Score: 1

      It considers any non-microsoft software as spyware... typical M$ stuff.

    49. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      I frequent porn sites and I rarely even get spyware from THEM since they already know what you want and don't need to spy on you - and mainstream commercial advertisers don't advertise on them because it looks bad

      Now that is funny. Advertisers, who would otherwise pay for ads for spyware, don't advertise with porn sites because they don't want to look bad?

    50. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      sometimes its hard to tell when something is turning evil.

    51. Re:Wow, is this for real by RzUpAnmsCwrds · · Score: 1

      "Netscape was always technically superior to IE."

      Holy shit, what are you smoking?

      Go download Netscape 4 and try to browse some real sites. Netscape 4:

      - Had virtually useless CSS support
      - Had a completely broken DOM
      - Had to reload the page from cache every time you resized the browser
      - Took *forever* to render tables

      Here's a little factoid: more users *downloaded* IE4 than downloaded Netscape 4.

      That's right. More people downloaded IE4 than Netscape 4. More people *chose* to use IE4.

    52. Re:Wow, is this for real by Trillan · · Score: 1

      Don't forget that certain (valid!) CSS sequences can actually crash the browser out.

    53. Re:Wow, is this for real by hitmark · · Score: 1

      there is allso the question how they count, ad-aware loves to count every cookie, every file, every little item it can find, sometimes the stuff isnt even spyware but just junk files. ad-aware makes me think of a vacume cleaner at times. hell, it even counts folders!

      spy-bot on the other hand will report one spyware program pr line with a number of entrys under each, and most likely only those that have a vital function for that spyware.

      how the ms stuff works i dont know, but knowing ms it will most likely count stuff in a way that makes them stand out from the crowd.

      its all marketing. just like when some company marketing department states that their lcd screen have x amount of pixels, they are stateing every red,green and blue pixel by it self, but to make up a true pixel you need one of each...

      there is allso storys similar to the one about ms detecting and removeing spybots database where ad-aware or spybot will react to the other ones backup of stuff removed.

      basicly the only way to present a true picture is to make a virtual machine, take a snapshot before installing any anti-spyware app, install and run every one of them but then resetting the image before the next one is installed and run and then post a expanded list of every item found on the net so that the reader can count for himself how many entrys there where...

      --
      comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
    54. Re:Wow, is this for real by rvarada · · Score: 1

      Netscape used to be superior a long time back. Then IE was superior till they accomplished their mission of destroying Netscape. Now Mozilla/
      Firefox/Netscape is becoming better.

    55. Re:Wow, is this for real by ytpete · · Score: 1

      Dude, MS Office has a pretty busted grammar checker--I wouldn't rely on it at all. Problem is, they have little incentive to improve it anymore. The old grammar tool in Win3.1 versions of WordPerfect did a far better job than MS's current offering.

    56. Re:Wow, is this for real by gameboyhippo · · Score: 1

      I guess so, but my grammar is more broken than Microsoft (I know... That's sad.)

    57. Re:Wow, is this for real by AntiNazi · · Score: 1

      Exactly what i was thinking. The article is a total waste as it doesn't provide the reader with any useable informantion. Ad-aware will report a much higher number than spybot even if they detect the exact same software. Overall, I was let down big time by this article.

    58. Re:Wow, is this for real by EvilJoker · · Score: 1

      I don't think so, Microsoft was already growing into a monopoly during the Reagan and Bush Sr. years. Granted, it wasn't complete until Clinton was in office, but they DID do something- they recognized a monopoly and filed an antitrust suit. Not as good as preventing it, but it was a corrective step (and a good one, considering how ill-informed most politicians are about technology, even now)

      Arguing party politics won't accomplish anything, be specific- it was the Attorney General Ashcroft that dropped the case. Blaming it on all Democrats or Republicans only causes people to stop listening or cry, "Amen!" without changing a single thought.

    59. Re:Wow, is this for real by mha · · Score: 1

      How does such a useless comment get a rating of 5? I don't mind people saying such things, but I do mind if I get to see this with such a high rating. Okay, I'm off-topic myself, true...

    60. Re:Wow, is this for real by robotpants · · Score: 1

      If it can just find that elusive Bonsai Buddy, I'd be happy.

    61. Re:Wow, is this for real by Anonymous Coward · · Score: 0

      Lavasoft has never put a lot of effort into maintaining AdAware (a product that was given to them by its original author, on the condition that they always provide a free version)


      Interesting fact. Never head it before and Wikipedia doesn't contain that nugget of information. Perhaps you will consider adding it?
      http://en.wikipedia.org/wiki/Ad-aware
  2. But MS Anti Spyware doesn't detect itself. by hawks5999 · · Score: 1, Funny

    The new spynet feature is pretty blatantly spyware itself.

    1. Re:But MS Anti Spyware doesn't detect itself. by beaverbrother · · Score: 1

      The new spynet feature is pretty blatantly spyware itself.
      How so?
      SpyNet only submits unknown application information to determine potential threats, similar to methods used by many antivirus programs.
      This anonymous information is not nearly as dangerous as software that keeps track of where you surf the net, etc.
      Plus: It's optional

    2. Re:But MS Anti Spyware doesn't detect itself. by afd8856 · · Score: 2, Informative

      When downloading, they want me to check if the windows I'm using is legit. Wouldn't you call this spying on my affairs?

      (I already know about the link to the direct download)

      --
      I'll do the stupid thing first and then you shy people follow...
    3. Re:But MS Anti Spyware doesn't detect itself. by TrancePhreak · · Score: 1

      Why are you scared of such an act? Did you not pay for Windows? MS checking to see if you truly bought a product is sorta like an employer checking your eligability to work in your country. If you are really interested in the goods, a small price is payed to use them.

      --

      -]Phreak Out[-
    4. Re:But MS Anti Spyware doesn't detect itself. by Anonymous Coward · · Score: 0

      Irelevant to the subject

  3. For fairness... by Raindance · · Score: 4, Insightful

    To be fair, "infected files" is a rather ambiguous notation (perhaps "malicious packages" would be a better way to count things).

    I would also feel better if the submitter hadn't been anonymous. Though it's probably not astroturfing.

    RD

    1. Re:For fairness... by Anonymous Coward · · Score: 0

      Giant also has some issues with detecting false positives, as other people have mentioned. I do agree that 'packages' is a better term, suppose Ad-Aware & Spybot find one 'package' and mark the directory as an object to be removed/deleted and Microsoft's enumerates every file in the directory, or vice-versa.

    2. Re:For fairness... by clean_stoner · · Score: 1

      In the submitter's defense, my sister's computer was pretty spywared up, and I could no clear it. So I broke down and used MS spyware. Even *after* scanning with both Spybot and Adaware, MS found 4000+ infected files. So at least in my experience it works fairly well.

      --

      Sigs are for the weak.

    3. Re:For fairness... by damiam · · Score: 1, Insightful

      Um, all /. submitters are anonymous. Just because they signed up for an account doesn't mean you have any idea who they are.

      --
      It's hard to be religious when certain people are never incinerated by bolts of lightning.
    4. Re:For fairness... by Anonymous Coward · · Score: 0

      I would also feel better if the submitter hadn't been anonymous.

      That's because you've been brainwashed into discounting points based on the speaker instead of discriminating information based on its own merits.

      If you can't evaluate arguments based on their merit...if you absolutely require the identity of the speaker before you'll bother with a point...then you'll make a perfect philosophy professor in some college. Philosophy professors base their careers on their identity. It behooves them to teach that identity is a necessity, because if it were to ever become the norm for anonymous points to be respected purely on their merits, then there's no mechanism for them to build their careers any longer.

    5. Re:For fairness... by Jesus+2.0 · · Score: 2, Funny

      Except Lindsay Lohan.

    6. Re:For fairness... by Ark42 · · Score: 2, Funny


      Where those 4000+ files in the spybot/adaware quarantine directories?

    7. Re:For fairness... by Master+of+Transhuman · · Score: 1


      I don't buy that one at all.

      There's no way Ad-Aware and Spybot are going to miss FOUR THOUSAND files! (In fact, while I've seen a LOT of spyware on some clients' machines, I'd guess 90% of those 4,000 were just cookies.)

      Unless they've been disabled by some previous spyware...

      Which could just as easily happen to the Giant product if a spyware author bothers...

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    8. Re:For fairness... by brianiac · · Score: 1, Informative

      When I ran it, I got three "infected files": one was a trusted sites entry, one was the Lernout & Hauspie Text-to-Speech Engine I had downloaded from Microsoft's site, and one was instsrv from Microsoft's Resource Kit. So, in addition to being able to double-count (or more) infections "per file", the Microsoft tool also tends to find false positives.

    9. Re:For fairness... by clean_stoner · · Score: 1

      No, I always delete the quarantines. However, as someone else said, they could have been cookies, I didn't look that closely (I was in shock).

      --

      Sigs are for the weak.

    10. Re:For fairness... by Anonymous Coward · · Score: 0

      Keep me (and my ample bosom) out of it!

    11. Re:For fairness... by ArtStone · · Score: 1

      I'm trying to figure out what exactly an "infected cookie" is...

      I could see a cookie that is indicates a possible related infection, but is there anything remotely resembling a virus or worm that spreads using cookies? Next thing someone will say that you can infect a computer with a JPEG file.

      --
      Final 2006 "Proof of Global Warming" US Hurricane Count -> 0
    12. Re:For fairness... by Vengie · · Score: 1

      I believe a new troll has been born. In the realm of "Soviet Russia" and "In Japan!" we can now add "Except Lindsay Lohan!" to our list......especially when in Korea....

      --
      When in doubt, parenthesize. At the very least it will let some poor schmuck bounce on the % key in vi. (Larry Wall)
  4. Wait a minute... by Anonymous Coward · · Score: 5, Funny

    Wait.. aren't we supposed to hate Microsoft? I'm confused.

    1. Re:Wait a minute... by Anonymous Coward · · Score: 0

      I think the "logic" goes that the reason why we need an anti-spyware program is because of the popularity of Microsoft products, which is also the reason why we must hate Microsoft.

    2. Re:Wait a minute... by Anonymous Coward · · Score: 0

      There's more to it... It's not because of the popularity alone, it's due to its popularity combined with the inherent poor security programming that neglects to close the attack vectors that malware exploits to spread.

      There's a good article on it at The Register.

    3. Re:Wait a minute... by rvarada · · Score: 1

      Why do moderators keeps on moderating these "Are we not supposed to hate/love MS, Linux, Apple?" comments on every article funny over and over again?

  5. Funny... by lga · · Score: 5, Funny

    Does anyone else think it funny that the advert at the bottom of this review is for Smiley Central, a well known piece of computer-invading crap?

    1. Re:Funny... by Anonymous Coward · · Score: 0

      Advert? What advert?

      If you're too cheap to buy a Slashdot subscription, you might like to switch to something like Firefox + Adblock. Never be amused by incongruous adverts again... because you won't have to look at them at all.

      Advert blocking. Just one more technology that Microsoft almost certainly won't be including in a future version of Windows. ;)

    2. Re:Funny... by daniil · · Score: 1

      No, i don't find it funny at all.

      --
      Man is a slave because freedom is difficult, whereas slavery is easy.
    3. Re:Funny... by lga · · Score: 1

      Well firstly, I am a Slashdot subscriber, and secondly I do use Firefox and Adblock. I just didn't have fastclick.net in my blocked list. (I do now.)

    4. Re:Funny... by LighthouseJ · · Score: 1

      Not funny, but sad in a conflict-of-interest sort of way. Whatever puts the 5 cents in their pocket I guess, integrity be damned.

    5. Re:Funny... by Anonymous Coward · · Score: 1, Funny

      They're obviously context sensitive. ;)

    6. Re:Funny... by MicroBerto · · Score: 1

      I can't see it. I'm using Mozilla Firefox with Adblock.

      --
      Berto
    7. Re:Funny... by ixx · · Score: 1

      Slashdot is one place I do not block ads on. They are usually relevant and if I am not going to subscribe, but read as often as I do, I feel it would not be cool to get rid of the ads. I do block most other adverts when surfing elsewhere though (with Firefox blocking).

    8. Re:Funny... by neoviky · · Score: 1

      And you won't believe how many people, esp girls actually click the banner, finding it cute and saying 'Wow! This would make my Yahoo Chat so much better!"

  6. fair and blanced by OffTheLip · · Score: 2

    that's all we ask. Microsoft is the most suitable candidate to find spyware infecting their product. Hopefully this is step one, followed by OS changes eliminating/reducing the possibility. Dream over...

  7. M$ Expertise by mordors9 · · Score: 1

    Why wouldn't it surprise me that Microsoft would be able to find and remove everyone else's product on the box even if it is spyware.

    1. Re:M$ Expertise by Badflash · · Score: 1

      pfff it's crapp... it detects c:\windows\system32\iexplore.exe as being a trojan horse... in fact I copied the servicepack files c:\windows\servicepackfiles\iexplore.exe in that location so I can click "programs/run/iexplore" instead of clicking... I guess it's only looking for that file name in that directory and randomly selects a trojan horse name ... :) Also, it detects my serv-u ftp server as a trojan... ohhh! And VNC ... I still think the number of detected infection is not really important as long as I DO NOT get false alarms and that the softwar in question is doing it's job and not forcing me to reinstall Windows.

    2. Re:M$ Expertise by BJH · · Score: 1

      it's crapp... it detects c:\windows\system32\iexplore.exe as being a trojan horse.

      Dunno, seems pretty accurate to me...

    3. Re:M$ Expertise by EnronHaliburton2004 · · Score: 1

      in fact I copied the servicepack files c:\windows\servicepackfiles\iexplore.exe in that location so I can click "programs/run/iexplore" instead of clicking

      You can modify the $PATH variable for that purpose. Simply add the paths you want to be able to use with "Programs/Run..."

    4. Re:M$ Expertise by Lusa · · Score: 1

      Perhaps it is attempting to work out what a given file does. For example, if its a windows executable it looks at the dll's required, maybe even the system calls and see if they are related to network operations. If they are then it checks an internal list of valid files before reporting it as spyware.

      That would make some sense from the programs listed as spyware.

  8. Twice as much by ZeroExistenZ · · Score: 1, Insightful

    Not having read the article yet, I do wonder what the scanner reports as spyware in order to get "twice as much results as Adaware" and "three times as much as Spybot".

    I'm just sceptical about MS + Anti-Spyware mix.

    --
    I think we can keep recursing like this until someone returns 1
    1. Re:Twice as much by Anonymous Coward · · Score: 0

      MS AntiSpyware reported WinPCap as a low risk "potential" spyware tool on my computer, which I use in combination with Ethereal Network Analyzer. It also reported K-Lite as moderate risk, not including any of its additional components.

    2. Re:Twice as much by Rob+Carr · · Score: 4, Informative
      After a vicious round with spyware, I switched to Firefox and regularly running AdAware and Spybot. Still, I ran the MS program to see what would happen.

      Adaware and Spybot report a lot of cookies. MS's program didn't. On the other hand, the AntiSpyware program found stuff the other two didn't. Total "hits" weren't 2-3x, but I've decided to keep AntiSpyware in addition to the other two programs.

      --
      This sig seemed like a good idea at the time....
    3. Re:Twice as much by Zocalo · · Score: 2, Interesting
      I'm guessing that the only thing that would account for this kind of discrepency is how registry keys are counted. Whether you count each individual registry key, registry branch, or just piece of spyware on a case-by-case basis will make a huge difference. Also, spyware typically installs copies of its registry settings in several places, and on a system with multiple logins there is even more room for abuse.

      Based on my experiences there's not much to choose from between Spybot and Ad-Aware, and I haven't really worked out where the MS/Giant program fits yet. Some programs that are missed by Ad-Aware get picked up by Spybot and vica-versa, so I'd expect there to be a few new things to be found by the MS effort. What worries me most is that discrepency between Spybot and Ad-Aware; I've never seen that kind of gap between the two in either direction. I suspect that inadvertantly or intentionally the selection of spyware installed on the testbed virtual PC may have been slightly biased.

      --
      UNIX? They're not even circumcised! Savages!
    4. Re:Twice as much by Gh0st_Preacher · · Score: 1

      Interesting. Maybe I'll try it out, too. I use firefox and I sometimes wonder what the other two programs are missing.

    5. Re:Twice as much by karmaflux · · Score: 2, Funny

      With that much crap cloggin up your resources, spyware doesn't have a chance! It'll never find processor time! Clever ruse.

      --

      REM Old programmers don't die. They just GOSUB without RETURN.

    6. Re:Twice as much by Anonymous Coward · · Score: 0

      I ran it just now on a system that I knew had infections from the contents of C:\Program Files\, neither of which SpyBot nor Adaware could find. I had already decided to seek a new anti-spyware tool, so I tried MSFT AntiSpyware. It found them all. These were not cookies, these were real honest to got hijackers. I wish family wouldn't keep using the PVR for Internet Exploder.

    7. Re:Twice as much by damiam · · Score: 4, Informative

      Some of what it detects are definitely false positives. On my machine, it claimed to find registry traces of eDonkey and Grokster, which it says contain adware. But the keys it found were put there by Shareaza, a non-spyware open-source client.

      --
      It's hard to be religious when certain people are never incinerated by bolts of lightning.
    8. Re:Twice as much by ZeroExistenZ · · Score: 4, Informative

      I second that.

      Serv-U FTP Server is appearantly a "Trojan FTP", default action is to "quarantine" in MS's view.

      --
      I think we can keep recursing like this until someone returns 1
    9. Re:Twice as much by yabos · · Score: 1

      I find it funny you need to have 3 different programs running so that spyware can't infect your computer. Then you have to have an antivirus program running as well for real time protection.

    10. Re:Twice as much by maukdaddy · · Score: 0

      Why don't you RTFA and find out instead of posting first!?!?!?!?

    11. Re:Twice as much by CritterNYC · · Score: 4, Informative

      Some of what it detects are definitely false positives. On my machine, it claimed to find registry traces of eDonkey and Grokster, which it says contain adware. But the keys it found were put there by Shareaza, a non-spyware open-source client.

      Yeah, it wanted to kill off pieces of eMule, Shareaza and Unreal Tournament 2004 on my box.

    12. Re:Twice as much by Rob+Carr · · Score: 1

      Norton Antivirus.

      I get by without running any of them live on my home recording studio computer - the programs are there, but since it's rarely connected to the home network or the Internet, I can get by with only running them when I connect.

      Home recording needs all the possible resources, especially when you have a lot of separate tracks.

      --
      This sig seemed like a good idea at the time....
    13. Re:Twice as much by E-Rock · · Score: 1

      So what? Serv-U is part of trojan packages, so if you review the list (that is actually part of the process) and don't know what it is, you should quarantine it. If you intentionally installed it, you know what it is and add to the ignore list.

    14. Re:Twice as much by Anonymous Coward · · Score: 0

      I got reports of eDonkey (I actually have eMule) when I ran it. Having a look through the reports, it basically saw the ed2k link handlers in the registry, decided this just _HAD_ to be eDonkey and threw up a load of nonsence about eDonkey.

      Oops.

    15. Re:Twice as much by ZeroExistenZ · · Score: 1

      You just cannot *on default* go claiming a product is "an evil trojan that should be crushed".

      I imagine Serv-U would file a lawsuit against MS for 'bad publicity' (that's what they do, they just stigmatise a product like that. The average user will think Serv-U was made by "some evil hackers, like they made netbus!". Don't get me started about some admins believing in such myths.)

      The program *does* offer some really nice advanced features though.
      --
      I think we can keep recursing like this until someone returns 1
    16. Re:Twice as much by js3 · · Score: 1

      lol antivirus companies have been deleting serv-u installations for years. Yes deleting without even asking. All the ms app does it tell you it is a possible trojan.

      --
      did you forget to take your meds?
    17. Re:Twice as much by sw155kn1f3 · · Score: 1

      I once got a call from my friend. Someone was saturating his ADSL completely.
      He's not very technical, so someone just hacked his machine and turned it into software distribution point. Turned out to be Serv-U installed.
      I cleaned the machine up.
      But it would be nice if he can do it himself by running some anti-spyware tool. So it's quite useful feature.
      If you know you should be running Serv-U, just add it to ignore list. Most normal users shouldn't be running it. Period.

      --
      - Arwen, I'm your father, Agent Smith.
      - Well, you're just Smith, but my father is Aerosmith!
    18. Re:Twice as much by kristjansson · · Score: 1

      Programs like Serv-U and VNC (I am quite sure that there are others misused for spyware, I'm just no longer dealing with it daily) are exploited by spyware writers because they add features/functionality cheaply. Nobody writing malware really cares about violating rhinosoft's license, or that VNC was not intended to run surreptitiosly. They care that they can add ftp functionality or remote desktop viewing capabilities to their crap with the only cost being a little time to customize serv-u, or familiarization with VNC's API.

      The reason that the anti-spyware lists them is that there are some ungodly number of machines with these programs being abused to exploit a user. It's just a shame that generally good software is more abused than used...

    19. Re:Twice as much by hawkes · · Score: 1

      >Adaware and Spybot report a lot of cookies.
      >MS's program didn't. On the other hand, the
      >AntiSpyware program found stuff the other two
      >didn't. Total "hits" weren't 2-3x, but I've
      >decided to keep AntiSpyware in addition to the
      >other two programs.

      From what I've seen/heard of the MS offering, it does NOT detect/remove ID cookies, on purpose.

  9. Unfair advantage? by meckardt · · Score: 1, Insightful

    Wouldn't the MS product have an unfair advantage... after all, isn't the Redmond crew responsible for a lot of that stuff anyway?

    1. Re:Unfair advantage? by krewemaynard · · Score: 1

      Wouldn't the MS product have an unfair advantage... after all, isn't the Redmond crew responsible for a lot of that stuff anyway?

      i don't really think this is a troll. MS kinda has an inside track on the under-the-hood parts of windows. i wouldn't call it unfair per se, but it does seem to be an advantage. $0.02

      --
      I saw it on Slashdot, it must be true!
  10. Why would this be a surprise? by eno2001 · · Score: 3, Interesting

    Microsoft knows what holes they have in the OS better than anyone else. They just don't bother to fix them in a timely fashion because it's not profitable The anti spyware isn't really a change in direction for them if you think about it. They are still applying a band-aid to the problems rather than a real fix.

    --
    -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
    1. Re:Why would this be a surprise? by Anonymous Coward · · Score: 0

      Well I agree with what your saying, band-aids are nice sometimes. I'm very happy with the software.

    2. Re:Why would this be a surprise? by afidel · · Score: 0

      First, MS bought this solution from a third party vendor. Second, you are correct that fixing the holes would be better than cleaning the resulting spyware, but a LOT of spyware is not MS's fault. Much of the spyware out there infects through flaws that were patched, in many cases years ago. Still others install not through holes but through user ignorance and subterfuge (like the ones that piggyback with many shareware/freeware packages). From my eyes the biggest blame lays with the antivirus vendors, most of the adware/spyware programs could be classified as trojans, and they tend to cause WAY more problems than the vast majority of virus's. It's a bloody crime that AV vendors haven't protected their clients against one of the biggest computer problems in decades. Sure some of the vendors are starting to add anti-spyware stuff to their AV suites, but so far from what I've seen is much too little way too late.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    3. Re:Why would this be a surprise? by eno2001 · · Score: 0

      I should add that using Windows is like eating a diet of sweets. It might be really nice on the surface compared to eating, say, fresh fruits and raw vegetables, but it's ot good for your health. Same thing with Windows. It might seem easier to use and nicer overll compared to, say, any free *nix like OS, but it's bad for your computer's health.

      Going back to sugar, the fact that it's very bad for your health doesn't make people stop using it. They'd rather deal with the problems (tooth decay, reflux, irritable bowel, ADD, etc...) and use medicines to hide them than actually fix the problems by cutting sugar out of their diet. Well... those same people apply the same logic to Windows. This spyware tool is just Microsoft's equivlent to Nexium for the Windows OS. On the other hand, I don't see any spyware utilities for *nix just yet. ;)

      --
      -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
    4. Re:Why would this be a surprise? by sql*kitten · · Score: 2, Interesting

      They just don't bother to fix them in a timely fashion because it's not profitable

      They don't fix them because they meant them to be there.

      Take the notorious problem with Outlook, that it will execute embedded VBscript in emails and send virii (or trojans or whatever) to the people in your address book. Well Outlook was designed to do that. If you have scriptable email, then you can use Exchange/Outlook as a platform to develop workflow applications. Doing it that way has nowadays been superseded by the web, of course. Now, MS were naive to think that no-one would ever exploit that feature maliciously, no-one's denying that. But they can't simply remove VBscript from Outlook because that would break the platform for people who did use it for application building.

    5. Re:Why would this be a surprise? by Flamesplash · · Score: 2, Insightful

      wow :)

      On the counter point, *nix is like having 10 fingers but only knowing that 6 of them are there, and then only actually knowing how to use 3 of them.

      I'm still waiting for the days of OSX but with windows.... cygwin will have to suffice for now.

      --
      "Not knowing when the dawn will come, I open every door." - Emily Dickinson
    6. Re:Why would this be a surprise? by myowntrueself · · Score: 1

      "They just don't bother to fix them in a timely fashion because it's not profitable"

      Yeah, that and the fact that the NSA would throw a fit if MS took away their backdoors.

      (Any security system thats it is permitted to export from the USA must be bypassable by the appropriate US government agency, or at least thats what I'd assume. I mean, thats what I'd do).

      --
      In the free world the media isn't government run; the government is media run.
    7. Re:Why would this be a surprise? by myowntrueself · · Score: 4, Informative

      "Now, MS were naive to think that no-one would ever exploit that feature maliciously"

      At least in the beginning they took measures to stop it; the original outlook couldn't even receive pop or imap email and hence the only incoming email was supposed to be from the corporate Exchange server.

      It was only later, when the internet became popular, that, uh, by popular demand they produced add-on packs for exchange with which you could use pop, smtp and imap.

      Then the email viruses began to take advantage...

      I reckon that they should now go the other way around; produce a special add-on pack for the VB scripting and just leave it right out of the default install.

      --
      In the free world the media isn't government run; the government is media run.
    8. Re:Why would this be a surprise? by marktaw.com · · Score: 2, Insightful

      That's a load of crap, Microsoft bought this product, not develop it in house. All products Microsoft buys are great products - Visio, NT, DOS, (the list goes on and on) but they end up ruining them in a few years.

    9. Re:Why would this be a surprise? by d34thm0nk3y · · Score: 1

      seriously people, keep in mind that the majority of spyware etc are actually installed by clueless users. No OS can prevent an idiot from running random crap they find on the web.

    10. Re:Why would this be a surprise? by Henk+Poley · · Score: 1

      Well, yes and no..

      They only own this software for a month or so. Probably the only changes are a code review using Microsofts internal tools, a check if no weirdness happens with currently supported Microsoft software, and of course a banner change ("Giant" -> "Microsoft").

      And there's the case that even if Microsoft plugs *all* the holes in all their software, people will still be stupid. There will be who execute funny screensavers their friends send them, no matter what. There will still be adware and spyware bundled with widely used programs.

      So taking this step is a good one. You can't reach total imunity, but you can try to hit the point where it's no longer profitable to go the nasty route of spyware because some big fat company will be breathing in your neck in no time.

      btw, I'm not a Microsoft apologist. I'm posting this from Linux, and have been running that for some time already, thank you.

    11. Re:Why would this be a surprise? by risinganger · · Score: 1

      but if you could you'd make a fortune ;-)

    12. Re:Why would this be a surprise? by mattyrobinson69 · · Score: 1

      Well for a start, screensavers should be sandboxed and run as nobody or eqivalent, definately elephantly.

      (i dont know how other os's do it, but they should)

    13. Re:Why would this be a surprise? by 10scjed · · Score: 1
      ...(Any security system thats it is permitted to export from the USA must be bypassable by the appropriate US government agency, or at least thats what I'd assume. I mean, thats what I'd do)...

      yup, its called magic lantern or something like that, all of the major commercial companies comply, i believe, even if they don't bring attention to it.

      --
      --10scjed IANAL,AFAIK
    14. Re:Why would this be a surprise? by burns210 · · Score: 1

      They bought NT?

    15. Re:Why would this be a surprise? by burns210 · · Score: 1

      "I'm still waiting for the days of OSX but with windows.... cygwin will have to suffice for now."

      That is like buying a body kit for your honda civic that gives it the grill of a BMW sports car... Then expecting your civic to handle like a beemer.

      It doesn't work that way. Now, buying a real BMW...

    16. Re:Why would this be a surprise? by cbiltcliffe · · Score: 1

      Well, technically no.
      They developed it in partnership with IBM. When the relationship went south, like most of MS's business partnerships do, the code was split into Windows NT for Microsoft, and OS/2 for IBM. That's why OS/2 was originally able to run all Windows programs.
      Subsequent development, of course, has forked the code, so this doesn't work as well anymore, but there's an OS/2 subsystem in Windows 2000. I haven't been able to find the folder in XP, but I'm sure it's still there....just probably named something different so it's not as obvious.

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    17. Re:Why would this be a surprise? by Anonymous Coward · · Score: 0

      > Take the notorious problem with Outlook, that it will execute embedded VBscript in emails and send virii (or trojans or whatever) to the people in your address book.

      You mean the one that was locked down a couple of years ago? The one that requires me to grant permission every time I want to sync my cell-phone?

      > But they can't simply remove VBscript from Outlook because that would break the platform for people who did use it for application building.

      And your point is...?

      If you had built an application using those features and M$ removed them, you would be the first in line to complain that they were taken out by the horrible evil monopolist.

    18. Re:Why would this be a surprise? by eno2001 · · Score: 1

      Troll? How is this a troll? I was merely pointing out that this move by MS, while useful, is not good enough. If that's a troll, then I really must not understand how Slashdot works. Either that, or the moderators are clueless as usual.

      --
      -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
  11. Great! by 2MuchC0ffeeMan · · Score: 4, Insightful


    The Real-Time Protection agent is awesome. It automatically informs you of any changes being made to your current settings; such as if your IE homepage is trying to be changed. It also warns the user if any spyware is trying to be installed.
    So it has to be running first. Just what i want my computer to do, run more stuff.

    Also, I kinda know when our homepage is hijacked, and this is why i switched to firefox.

    --
    Runnin' On Empty .... I'm Still Alive
    1. Re:Great! by Anonymous Coward · · Score: 1, Insightful

      I think it's worth the speed decrease compared to the speed impact spyware creates.

    2. Re:Great! by fm6 · · Score: 1
      You can always kill the agent. The don't provide a simple way to do this (of course), but it's easy enough to terminate it and then eliminate it from your startup sequence. Then you only have to remember to kill it after each scan.

      I haven't examined the agent in detail, but the one effect I've noticed is typically lame. If you run a .BAT file, the agent reminds you that scripts are dangerous and asks you if you want to flag this particular script as safe. Which is totally useless: if you know enough to answer the question, you already know that you're running a script. Contrariwise, if you're a typical user who doesn't even know what a script is, you have no idea what to do.

      Still, I'll probably end up using this product. It caught a lot of stuff on my machine that AdAware and Spybot missed. At least, I'll continue to use it until Microsoft screws it up beyond use.

    3. Re:Great! by Anonymous Coward · · Score: 0

      With all the blatant security holes Firefox and Mozilla have, as well as its 50MB memory bloat and incessant need to reimplement every widget even though my operating system already provides its own, I feel much safer using Opera.

  12. Missing Information by sangreal66 · · Score: 4, Insightful

    I only took a curory glance at the article before it was /.ed, but I did not see any attempt at analyzing how many of the additional items found by MSAS were false positives. This seems like pretty vital information.

    1. Re:Missing Information by MoogMan · · Score: 1

      Also, the time taken for the MSAS scan is a bit disconcerting (25mins 4secs

      Compared to 4mins 27secs and unknown for AdAware.

      Other than this, its nice to see that Microsoft is (seemingly) changing their game plan in the OS market!

    2. Re:Missing Information by TheRaven64 · · Score: 2, Insightful
      Since they are running this in VMWare, and are hence able to save the state of the system, the best way to run this test would be to first run each product on the test image and tell it to remove everything it recognised. Then run each other product on the resulting image and discover what had been missed. Simply comparing the number each reports finding is hardly a good comparison.

      Disclaimer: TFA was slashdotted by the time I tried to R' it.

      --
      I am TheRaven on Soylent News
    3. Re:Missing Information by LnxAddct · · Score: 1

      I tested this out in work, it found 2 problems, something like Squirrel Search and something else. Squirrel search turned out to be a spybot utility that was misidentified and the other thing I believe was also related to spybot or adaware (think it may have been the tea timer). Microsoft's product also didn't find a DSO exploit found by adaware and spybot. So as of right not its been 100% false positives for me and missed 100% of the adware on my machine. Granted these numbers may be a little skewed because I keep my machine fairly clean and restricted and use firefox. Regardless, I've never seen a false positive before testing this product, I'll try it again when it's out of beta, but something tells me those extra 2/3 of files that it found in the review were probably wrong.
      Regards,
      Steve

    4. Re:Missing Information by Anonymous Coward · · Score: 0

      I agree, when I tested this out, I had two "threats", both of which were false positives.

    5. Re:Missing Information by jaylee7877 · · Score: 2, Funny

      good point. I ran the MS beta on my desktop. It detected a win32 port of gnu cat (cat.exe) as "Norwegian Porn Dialer". Don't recall seeing that option added...

    6. Re:Missing Information by gardyloo · · Score: 1

      On the other hand, the download site doesn't seem to be missing any information. For example, the instructions tell me to "Please click Download to get the download," and then there's a button there labeled "Download". This is a clear indication that Microsoft is committed to playing nice with the user.

    7. Re:Missing Information by Master+of+Transhuman · · Score: 1


      Maybe it misinterpreted the word "cat" as "sex kitten" and decided it was a porn dialer...:-)

      That about sounds like Microsoft, whose founder has decided OSS advocates are "communists"...

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    8. Re:Missing Information by Spy+Hunter · · Score: 1

      I ran it on my system, and it detected 10 "spyware threats". Of the 10, three were simply programs that have optional adware in their installers (which I of course decline), such as edonkey2000. The other seven were each 1 or 2 harmless left-over registry entries from spyware previously removed by Ad-Aware and Spybot, but they were still presented as the full spyware program and rated "high" and "severe", saying "This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy." So running Microsoft Anti-Spyware on a clean system that has been previously infected (the majority of Slashdotters' computers I expect) will make a lot of noise about spyare, but provide no real benefit.

      --
      main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
    9. Re:Missing Information by Anonymous Coward · · Score: 0

      Microsoft's product also didn't find a DSO exploit found by adaware and spybot.

      The DSO Exploit is an old security hole that was patched a long time ago. Spybot isn't smart enough to tell whether the patch has been applied or not, and applies its own fix. (However, due to a bug it doesn't fix it quite right and always detects it as a threat, even after "fixing" it. Google for more information.)

      It's possible that the MS tool is smart enough to check for the patch while the other two are not. It's also possible that the MS tool doesn't bother to detect it at all, since it's an old issue.

    10. Re:Missing Information by Tenebrious1 · · Score: 1

      I only took a curory glance at the article before it was /.ed, but I did not see any attempt at analyzing how many of the additional items found by MSAS were false positives. This seems like pretty vital information.

      Wouldn't that depend on who's defining a "false" positive? Hell, MS Antispyware could just be counting the total number of files, subtracting out Windows + Office + Outlook related files and calling everything else "spyware".

      Anyway, they should also have run it the opposite way; run MS Antispyware first, then run Spybot and Ad-Aware to see what MS Antispyware *misses*.

      I took a fresh, clean image, browsed lyric sites for TWO minutes, then ran MS Antispyware. It identified three spyware, but could only remove two. Spybot S&D couldn't remove the third, but Ad-Aware did. Not a very thorough test, but still shows it'll take more than just MS antispyware to clean a system.

      --
      -- If god wanted me to have a sig, he'd have given me a sense of humor.
  13. Thats beacuse SpyBot stoped updating by tjlsmith · · Score: 0

    I think it has become abadonware. And after I donated to it, too.... :-)

    --
    Mumia Abu-Jamal is *laughably guilty*. Check the evidence.
    1. Re:Thats beacuse SpyBot stoped updating by Anonymous Coward · · Score: 1, Informative

      dont be such a noob dude, last update was 6 days ago.

    2. Re:Thats beacuse SpyBot stoped updating by Anonymous Coward · · Score: 0

      Updates to 1.2 aren't released anymore. Upgrade to 1.3, those are still released regularly (as of a week ago)

  14. MS = the Mob by HeyBob! · · Score: 3, Insightful

    It's kind of like the Mob offering protection services to merchants. They're the problem in the first place!

    This kind of protection should already be in Windows, or least, make the OS completely separate from the apps and the data.

    You should be able to click on any process running and see complete details as to what it is, why it is running and access it's startup options.

    1. Re:MS = the Mob by HeyBob! · · Score: 1

      umm, yeah... like you can in linsux, right?

      I've no idea - I only use Windoze

    2. Re:MS = the Mob by Foolhardy · · Score: 2, Informative

      Have you looked at Process Explorer? It's a task manager type progam that provides tons of extra information: for each process you can see its parent, the startup options, a list of every kernel handle it has open, every library it has loaded, a cpu and memory usage graph, a list of threads with stack and status for each, what services (if any) are running inside it (for the svchosts mainly), what sockets are open, environment variable information, image strings and more. Lots of other tools at sysinternals.com too.

  15. The REAL Ultimate Windows Anti-Spyware Program by BioCS.Nerd · · Score: 3, Insightful
    FireFox

    An Ad-Aware/FireFox combination has served my parent's computer well for quite sometime. My father's business exclusively uses the above combination with great results.

    1. Re:The REAL Ultimate Windows Anti-Spyware Program by FuturePastNow · · Score: 0

      Hi, this post is all about Firefox, REAL FIREFOX. This post is awesome. My name is FuturePastNow and I can't stop thinking about Firefox. This browser is cool; and by cool, I mean totally sweet.

      Facts:
      1. Firefoxes are browsers.
      2. Firefoxes fight spyware ALL the time.
      3. The purpose of the Firefox is to flip out and kill spyware.

      (sadly, I'm using Safari at the moment)

      --
      Give a man fire, and you warm him for the night. Set a man on fire, and you warm him for the rest of his life.
    2. Re:The REAL Ultimate Windows Anti-Spyware Program by yasth · · Score: 1

      Well you should use your Safari and go see the rare, and wonderful FireFox remember, though shoot with a camera not a gun. It is a shame that getting to go on Safari is so expensive though. Oh well for most people going on Safari is something nice to try but you ride a firefox for life.

      --
      I'd do something interesting, but my server can't handle a slashdotting.
    3. Re:The REAL Ultimate Windows Anti-Spyware Program by krewemaynard · · Score: 1

      Well you should use your Safari and go see the rare, and wonderful FireFox remember, though shoot with a camera not a gun. It is a shame that getting to go on Safari is so expensive though. Oh well for most people going on Safari is something nice to try but you ride a firefox for life.

      ... huh? is there a comment in there somewhere?

      --
      I saw it on Slashdot, it must be true!
  16. Enough already. by XorNand · · Score: 5, Insightful

    Ok, enough of the "MS should do better, they make the holes" comments. If you remember correctly, MS bought this code only a short while ago from Giant Company. About the only thing Redmond has done is repackage and rebranded it.

    --
    Entrepreneur : (noun), French for "unemployed"
    1. Re:Enough already. by Anonymous Coward · · Score: 0

      And your point is? Seems like MS is taking appropriate actions to help with the problem. They're both trying to fix their Windows code (not bugs, but holes--there is a difference) and also helping with detection/removal. The first is their problem, the second is due to malacious code exploiters. So, in essence, MS is paying huge sums of money for mistakes that the malicious code exploiters are committing--seems kind of benevolent to me. I DO NOT see any of the LINSUX crowd writing software that goes through a typical LINSUX distrubtion and identifies holes/spyware.

    2. Re:Enough already. by Anonymous Coward · · Score: 0

      I DO NOT see any of the LINSUX crowd writing software that goes through a typical LINSUX distrubtion and identifies holes/spyware.

      once the number of holes (not bugs, there is a difference) in linux becomes comparable to the number in windows, you will.

    3. Re:Enough already. by BlueEar · · Score: 1

      While the above is true, all it means is that engineers from the bought company had a chance to look at Windows code and see what other exploits may exists. I am guessing that if SpyBot people were given the same chance, we'd see both program performing about even.

      --
      A religious war is an adult version of a fight over who has the best imaginary friend
    4. Re:Enough already. by Solosoft · · Score: 1

      they didn't even change the file names. When it crashed for me it said "Giantsomthing.exe" crashed".

      Give them time

    5. Re:Enough already. by NetNifty · · Score: 1

      Well, that and it no longer runs on Windows 98 or ME (I am under the impression that GIANT Antispyware did), probably because MS no longer officially supports either of them.

    6. Re:Enough already. by Anonymous Coward · · Score: 0

      yeah right, in the few weeks that MS has owned Giant there few engineers managed to review 20 million plus lines of code and that is why they are better than spybot. Get Real. This is how it was before MS bought it, you won't see improvements for months and most of that will be from MS engineers cleaning up there driver code.

    7. Re:Enough already. by Thomas+Shaddack · · Score: 1

      Making money on their own holes. Even Swiss cheese manufacturers didn't achieve this degree of perfection.

  17. Just tried to install this MS AntiSpyware by benzapp · · Score: 5, Interesting

    and apparently their detection of license keys has greatly improved... my key is invalid.

    Anyone else have this problem using their obscure key of choice? SP2 installed fine a few months ago.

    --
    I don't read or respond to AC posts
    1. Re:Just tried to install this MS AntiSpyware by Chemical · · Score: 5, Informative

      You can download without having to validate your license. Just select, the "No, leave me the hell alone" option when downloading.

    2. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0

      The keygen that creates valid XP SP2 VLK keys still works with windowsupdate and even this new validation thing. MS probably just blacklisted your key because it became popular, but the SP2 keygen still works fine.

    3. Re:Just tried to install this MS AntiSpyware by Homology · · Score: 0, Flamebait
      and apparently their detection of license keys has greatly improved... my key is invalid.
      Anyone else have this problem using their obscure key of choice? SP2 installed fine a few months ago.

      Hmh, I neither have a license nor the need for such programs :

      tanstaafel $ dmesg
      OpenBSD 3.6-current (GENERIC) #258: Thu Jan 6 23:38:30 MST 2005
      deraadt@i386.openbsd.org:/usr/src/sys/arch/i386/co mpile/GENERIC
      cpu0: AMD Athlon(tm) XP 2800+ ("AuthenticAMD" 686-class) 2.09 GHz
      cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,P GE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
      [snip]

      tans taafel$

      I'm sure you, as a fine Slashdotter, are able to configure a free and legal copy of an OS.

    4. Re:Just tried to install this MS AntiSpyware by Matt+Perry · · Score: 0, Offtopic
      --
      Slashdot: Failed Car Analogies. Amateur Lawyering. Anecdote Battles.
    5. Re:Just tried to install this MS AntiSpyware by PornMaster · · Score: 1

      How long until the "not validated" number makes it into a whine by MS about what percentage of XP is pirated?

    6. Re:Just tried to install this MS AntiSpyware by estes_grover · · Score: 1

      The software requires IE 6.0 (or higher). Since I've been happily using Moz/FireFox for a long time, I'm not seeing much of an advantage to upgrading IE 5.5 with a huge download and install of IE 6.x.

      Too bad the software has this requirement; Giant does too.

    7. Re:Just tried to install this MS AntiSpyware by Feztaa · · Score: 1
    8. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0

      So let me see IF I got this right. You are using a pirate key and want help here?

      Think about what you just said...

      Also think about this MS knows EXACTLY which keys it has given out and which ones it has not... Eventually they will just say 'your not on the list'... And you will be standing in line outside the club. Or will go to another club. Its not exactly like they would be loosing your busness as they apparently did not have it in the first place and you were sneaking in...

    9. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0

      Ever thought about paying for your software? If you actually bought WinXP then you wouldn't have problems with invalid keys.

    10. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0

      When I installed SP2, I changed my key to a "640" generated key (check google for details about this extra check they did in some SP2 betas). Maybe this check is now also used for this ? In any case, load up your favorite p2p application and look for a SP2 keygen, mine was called "MS Windows XP SP 2 And Office KeyGen.exe" and yes, it has passed all checks thus far, including this one.

    11. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0
      Just select, the "No, leave me the hell alone" option when downloading.
      You sure it wasn't "No. Fuck off and die"?
    12. Re:Just tried to install this MS AntiSpyware by Anonymous Coward · · Score: 0

      Yup. Even tried a few other keys made by recent keygen, and they were branded invalid as well...

    13. Re:Just tried to install this MS AntiSpyware by hacker · · Score: 1
      "How long until the "not validated" number makes it into a whine by MS about what percentage of XP is pirated?"

      That would be incredibly stupid of them. What if I want to download 1 instance of it externally, and package it up for deployment to 2,300 internal machines via WUS or SMS?

      Then again, Microsoft is not a software company, they're a marketing company, so they'll spin this one to suit their own profit margins in some way or another.

    14. Re:Just tried to install this MS AntiSpyware by NetNifty · · Score: 1

      I wouldn't get "MS Windows XP SP 2 And Office KeyGen.exe" from P2P, or Kazaa at least - I know that quite a few worms propagate by renaming themselves to "$NAME_OF_SOFTWARE Keygen.exe" and inserting themselves into Shared Folders of P2P software.

    15. Re:Just tried to install this MS AntiSpyware by NetNifty · · Score: 1

      He didn't say he wants help with his pirate key, he just said that their license detection system works better now.

      Anyway, if MS did use a whitelist of keys, a lot of unused keys exist which wouldn't be difficult to obtain - for example at the college I attend, in the IT building alone there's at least 200 Dell machines running Windows 2000, all with official XP key stickers stuck to them which are for the most part unused.

  18. isn't it odd by Anonymous Coward · · Score: 0

    isn't it odd that MS finds the most... perhaps they know all this issues with their software and know what should, and should not be there. :)

    1. Re:isn't it odd by Anonymous Coward · · Score: 1, Interesting

      I doubt MS has done many changes to the code other than cosmetic and feature removal (since the features were provided elsewhere in Windows). Giant's software was already well-known for identifying things that Adaware and Spybot missed.

  19. Just desserts? by fisheye1969 · · Score: 1

    Considering MS's lax attitude to virus controls (at least until recently), it's about time MS did something to make up for the ridiculous amounts of spyware out there.

    Note that I'm not saying they are entirely responsible - but they did set up a lovely fertile environment for it to flourish. And I wonder if it will be available for free to spyware infested Windows users?

    Seriously though, congrats to MS though for producing what seems to be a good product - the world really needs something to rid us of spammers, and it's something I think we all need to work together on.

    All together: "NO MORE ROLEX OFFERS! NO, I DON'T WANT YOUR CIALIS!"

  20. Inside job? by Anonymous Coward · · Score: 0

    "Though still in beta, Microsoft AntiSpyware does an amazing job at detecting spyware by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot."

    I find it hard to believe that an MS Beta program could do so much better than the competition, unless maybe there is some inside knowledge shared between the Ad/spyware people, MS, and their antispyware developers. MS surely has the money to orchestrate such a feat. Why else would it be so much better than everything else that's out?

    Okay, I know it's an acquisition, so it's not really MS developing it, so there is an outside chance that those ppl are really just that much better than everyone else at what they do. But isn't it highly suspect in a field when someone else advances so much farther in front of everyone else? Maybe they've sold their souls to satan or are unlocking the secrets of alien technology recovered from the ruins of a crash site?

  21. different from giant? by mgkimsal2 · · Score: 0

    Is this much different than what the results were/would have been comparing spybot vs the product giant had before MS bought them?

    Has MS added that much value in a short time to make it head and shoulders above the rest? Or was Giant just that much better anyway (which is probably why MS would have bought them in the first place)?

  22. Finding more isn't necessarily good by harlows_monkeys · · Score: 2, Interesting
    What we've seen where I work, with our antivirus/antispyware product is that if we miss something that AdAware of Spybot finds, then poeple say we are ineffective, and if we find something that they miss, people say we are generating false positives in order to frighten people into buying. (And then, when the thing we found that Spybot or AdAware missed actually causes problems, they say we put it there and start saying we pushing spyware).

    A lot of people, especially on the popular antispyware forums, have simply decided that Spybot and AdAware are the best that there can possibly be, and anything that differs from them in bad.

    1. Re:Finding more isn't necessarily good by siliconjunkie · · Score: 3, Informative

      It really depends on where you work. AdAware and Spybot S&D are two applications that work well and have a proven track record of being legitimate tools to combat spyware/adware/malware. Unfortunately, there are many more applications out there that are either (A) blatant rip-offs of these two legit programs, (B) Spyware disguised as anti-spyware or (C) BOTH.

      This is not to say that there are not other legitimate programs out there, but sadly, if it's not on the short list of proven applications it should be scrutinized before it is endorsed.

  23. Not a Microsoft Designed Product by nurb432 · · Score: 4, Informative

    They just bought a company and rebranded..

    Wait a few generations, then it will be a 'true' Microsoft Product..

    --
    ---- Booth was a patriot ----
    1. Re:Not a Microsoft Designed Product by isecore · · Score: 3, Interesting

      Amen to that.

      Also, they bought Giant Antispyware, and christ on a crutch does that thing do a hell of a lot of false-positives.

      I rennamed a textfile something like claria.exe and that thing started screaming immediately that bad people were trying to take over my life.

      So seriously, I couldn't care less.

      --
      I enjoy large posteriors and I cannot prevaricate.
    2. Re:Not a Microsoft Designed Product by Jesus+2.0 · · Score: 5, Funny

      I rennamed a textfile something like claria.exe and that thing started screaming immediately that bad people were trying to take over my life.

      Wow, how horrible. I can't imagine how annoying and dangerous that would be for me, given how often I rename text files to claria.exe.

    3. Re:Not a Microsoft Designed Product by jdhawke · · Score: 3, Informative

      Also the default installs of TightVNC, RealVNC and winpcap are flagged as spyware. As if only crackers use these items for anything and no respectable user would.

    4. Re:Not a Microsoft Designed Product by alexbartok · · Score: 1

      well, besides that, nothing happens. it just flies by the text file.

    5. Re:Not a Microsoft Designed Product by tricops · · Score: 1

      Would you prefer that it just ignore and didn't mention them? They *could* be used maliciously, and the program's description for them explains quite clearly that they aren't necessarily a problem. Of course, they could default to ignore rather than remove, but for the majority of the users of the antispyware software, remove is probably the right option.

      --
      (\(\
      (^v^)
      (")")
      This is the cute vorpal bunny virus, copy to your sig or runaway, runaway in fear!
    6. Re:Not a Microsoft Designed Product by BobPaul · · Score: 1

      christ on a crutch does that thing do a hell of a lot of false-positives.

      I installed the MS Spyware program today and it identified 35 "items". AdAware found 45, but didn't include all of the 35 that MS had found, just most of them.

      The reason? MS found TightVNC, Emule, and a handful of other false positives (6 false possitives in all). None of them were marked for removal by default, though, so at least they know they're false positives...

      I'll stick with AdAware, thank you.

    7. Re:Not a Microsoft Designed Product by RealityMogul · · Score: 1

      Not sure about VNC, but WinPCap is given a low severity rating and the default action is to "Ignore" it. So unless you manually change the action to "Remove", it doesn't hurt anything.

    8. Re:Not a Microsoft Designed Product by John3 · · Score: 1

      One of the best features in the MS product are the detailed explanations for the various items it found.

      --
      "We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
    9. Re:Not a Microsoft Designed Product by jdhawke · · Score: 1

      I would prefer that an obviously default installation of a utility that I use not be listed as a threat. Now if it were detect in a non-standard location or with settings modified to hide it, then yes, feel free to report.

    10. Re:Not a Microsoft Designed Product by jdhawke · · Score: 1

      both TightVNC and RealVNC are listed as moderate.

    11. Re:Not a Microsoft Designed Product by shaitand · · Score: 1

      You did remember to turn off the hide known file extensions "feature" right? Otherwise what looks like claria.exe is really claria.exe.txt

    12. Re:Not a Microsoft Designed Product by shaitand · · Score: 1

      I've never heard of someone attempting to use VNC maliciously. There are a number of trojans to serve this purpose that hide themselves, vnc isn't even slightly hidden.

    13. Re:Not a Microsoft Designed Product by alexbartok · · Score: 1

      Thanks very much, -duh- but yeah, it _really_ is an exe.

    14. Re:Not a Microsoft Designed Product by Anonymous Coward · · Score: 0

      Some kiddies on IRC occassionally try to talk people into installing VNC.

    15. Re:Not a Microsoft Designed Product by shaitand · · Score: 1

      Duh to us maybe, remember the average joe is a fscking idiot and half the people on Earth are even dumber.

    16. Re:Not a Microsoft Designed Product by andy1307 · · Score: 1

      There's the unmistakable Microsoft Search. It offers you an option to reset your settings for a restore after a browser hijack. The default home page is set to msn.com and searches are set to use MSN search.

    17. Re:Not a Microsoft Designed Product by eofpi · · Score: 1

      That's admittedly an unlikely example, but I've had Spybot give me false positives on folder-name-matching only before. It thought that a folder with just some text files with large numbers in them was something from Brilliant Digital. I had been fooling around with brilliant numbers, and had named the folder 'brilliant', but that's still a dumb way to detect spyware.

      --
      Y'know, you blow up one sun and suddenly everyone expects you to walk on water.
    18. Re:Not a Microsoft Designed Product by DaFallus · · Score: 1

      Actually, those were the default settings when you install Windows on your PC. Those are the same settings that Giant had in their software before they were bought out by Microsoft. So far what I've seen in this thread is everyone tearing the program apart, and blaming everything on Microsoft, when in reality it looks like the only thing Microsoft did to this software was take Giant's code and replace any instance of Giant with Microsoft.

      --
      No one cares what your captcha was

      Houston TX, USA
    19. Re:Not a Microsoft Designed Product by displaced80 · · Score: 3, Insightful

      Indeed. What's worrying isn't that perfectly innocent user behaviour triggers detection. Rather, that string (or even filename pattern-matching) is a dumb way to detect.

      Spyware makers will start (if they haven't already) randomizing the filenames, registry keys, etc. Then your anti-spyware software's gotta start doing what it should've in the first place -- something smart.

      --
      What's the frequency, Kenneth?
    20. Re:Not a Microsoft Designed Product by wtd · · Score: 1

      Hey. Microsoft could have figured out that it was crap. They kept it alive and made it *the* official anti-spyware for Windows...

      They're just as responsible for anything that goes wrong as GIANT.

    21. Re:Not a Microsoft Designed Product by Harker · · Score: 1

      On the first scan I ran, it detected two files in my Favorites. One was a folder called "Cracks" and the other was a URL that had the word cracks in it, so yea, you need to watch what it comes up with, and not let it do whateve it wants.

      Kinda like the others...

      --
      When VCR's are outlawed, only outlaws will have VCR's.
    22. Re:Not a Microsoft Designed Product by ameoba · · Score: 2, Funny

      OTOH, I learned the hard way not to trust file names. A routing cleaning of core dumps on our fileserver at school managed to destroy the work of half of the VLSI class. Who would've thought that students would be designing CPU cores and just call the output file "core"...

      --
      my sig's at the bottom of the page.
    23. Re:Not a Microsoft Designed Product by bob+beta · · Score: 1

      My wife doesn't know what VNC is, though, so I can occasionally check in on her system to see which pogo.com game she is playing at any time.

    24. Re:Not a Microsoft Designed Product by rvarada · · Score: 1

      Does anyone think a normal user has a day to day use for RealVNC or winpcap? If you do have a use for these, you know what you are doing and are smart enough to ignore/turn off these warnings.

    25. Re:Not a Microsoft Designed Product by DaFallus · · Score: 1

      I agree with you, but from the Microsoft standpoint this is only a beta release. In order to really judge this as a Microsoft product we really have to wait until the first final release is available. Thats really all I'm saying.

      --
      No one cares what your captcha was

      Houston TX, USA
    26. Re:Not a Microsoft Designed Product by masklinn · · Score: 1

      and as you mentionned, the installation may be detected

      But the unzipped software sure is not
      Way to go

      --
      "The way we can tell it's C# instead of Haskell is because it's nine lines instead of two." -- wadler
    27. Re:Not a Microsoft Designed Product by tricops · · Score: 1

      Heh, default installation or not... it's not like the "average" home user would have a clue what it is or why it's there. I still think remove is the best option for the majority of users who wouldn't even have a clue what the program is or why it's there in the first place. It may not be the best for you, or me, but we obviously don't fit in with the group of "average" home users.

      --
      (\(\
      (^v^)
      (")")
      This is the cute vorpal bunny virus, copy to your sig or runaway, runaway in fear!
    28. Re:Not a Microsoft Designed Product by ticklemeozmo · · Score: 1

      Also the default installs of TightVNC, RealVNC and winpcap are flagged as spyware. As if only crackers use these items for anything and no respectable user would.

      Its more to alert the user to its presence if they aren't already aware of it...

      --
      When modding "Informative", please make sure it both has a source and IS actually informative.
    29. Re:Not a Microsoft Designed Product by sergeirichard · · Score: 1

      The two hits it got on my system were both false positives too - one an entry in my Restricted zone list, the other eMule, which it mistook for aware-laden eDonkey. I'm not surprised if it get more hits than Spybot like that! Oh, and it missed some tacking cookies.

    30. Re:Not a Microsoft Designed Product by Craster · · Score: 1

      Why is this informative? The above poster entirely misses the point of anti-spyware tools.
      They are designed to flag as a possible threat anything that could be malicious. There are known spyware agents that utilise TightVNC, RealVNC, and WinPCap, so the software is performing exactly as designed.

    31. Re:Not a Microsoft Designed Product by jdhawke · · Score: 1
      They are designed to flag as a possible threat anything that could be malicious. There are known spyware agents that utilise TightVNC, RealVNC, and WinPCap, so the software is performing exactly as designed.

      So by this logic, IE and the Windows Messenger Service components should also be flagged as threats. There are known malicious agents that utilize both of these as well to gain access to a system.
  24. Re:But why won't MS help linux? by Anonymous Coward · · Score: 0

    Note, that was sarcasm.

  25. Of course it finds more PUS by killmenow · · Score: 1

    Ad-Aware doesn't detect all those files from OpenOffice.org, Firefox, Mozilla, etc...

  26. I'm going to bite and try this out by drgath159 · · Score: 2, Interesting

    I liked how it politely asked if I wanted to validate Windows
    "Before obtaining the requested download, please take a moment to validate your genuine Microsoft Windows installation. Validation assures that you are running an authentic and fully-licensed copy of Windows. Validating now will enable faster access to genuine Windows downloads upon future visits to the Download Center. Please see the Why Validate? page to learn more about the Windows Genuine Advantage program and why validation is recommended."
    Obviously clicked no.

  27. Re:But why won't MS help linux? by codergeek42 · · Score: 0

    Anti-spyware programs wouldn't be very useful on a GNU/Linux system, since spyware is pretty much non-existent on a an entirely or almost completely Free/Open-Source operating system. Ah the beauty that is peer-review. (nVidia's drivers and Macromedia's Flash Player are the only proprietary things I've installed.)

  28. False Findings by Anonymous Coward · · Score: 1, Interesting

    I personally installed MS's new tool last night on my laptop and admittedly it did find more than Spybot, Ad-Aware or even a nifty one I sometimes use, SpySweeper. I can say that MS has come up with a winner.

    Although, along with the real spyware, it found some "Adware Bundlers" such as KazaaLite, E-Mule and even TightVNC. This may mean that some of the claims of "twice or three times as many spyware files" should be taken with a grain of salt.

    1. Re:False Findings by JorDan+Clock · · Score: 1

      According to the MS Scanner, RealVNC is spyware and should be removed. With a "moderate" threat risk, no less. However, it defaults to ignore it in future scans. I say it's a great attempt by MS to do something right, but I'm not sure if I'll stop using Ad-Aware for this...

  29. This begs the question... by Zestius · · Score: 0, Flamebait

    ..did MS perhaps create some of these spywares themselves?

  30. Ugh by AdityaG · · Score: 0

    Besides the usual blind skepticism and pathetic attempts at trying to be funny, there has been no real discussion here. Then again, that's not new. The article says that Microsoft's product does a better job. Why can't people accept this? I am sure if the product was my Company X or Apple, people would fall on their knees and worship it.

    1. Re:Ugh by l3v1 · · Score: 1

      Well, you shall by now know, that this "new" tool wasn't developed by Microsoft in any imaginable way. Hell, if you look close enough you can even find Giant written all over the place after installing.

      However, Giant's stuff works ok, that's good. The problem mainly is, that you don't solve a problem by dropping blankets on the stuff sdo you don't see it. If you know the houses you're building keep burning down by themselves every now and then, the solution is not to give away free fire extinguishers. Just build damn good houses.

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  31. The whore on the corner is selling condoms by HiyaPower · · Score: 0, Flamebait

    Personally, I find it offensive that this company has designed software that is so poor that it may be exploited in this manner. I have just had a multi-hour session prying out some of the junk that my daughter naively stuck on her machine. And now the same company is offering me another closed system to fix their earlier closed system? No thanks. I think I will stick with OSX and SUSE where ever I can.

    1. Re:The whore on the corner is selling condoms by HiyaPower · · Score: 2, Insightful

      I think you have a problem that you should deal with. I have dealt with my M$ problem. I just do not use their crud. No crud, no spyware, no problem.

  32. Not only that.... by caino59 · · Score: 1

    but when they compared this to spybot - did they use the included abilities - such as the teatimer or the ability to lock the homepage against hijacks (it doesnt just warn you from it being changed - it doesn't let it!) as well as locking the hosts file?

    maybe they did - but that site is hosed.

    1. Re:Not only that.... by fyrewulff · · Score: 1

      In my experience of using such "homepage lock" features with any anti-virus, it still gets changed when I test reinfections. Even when locking the value in the registry. I haven't been able to figure it out.

      --
      "We need to get over this notion, that, for Apple to win... Microsoft must lose." - Steve Jobs, 1997
  33. They created the problem!!! by Spackler · · Score: 1

    Dudes, they made the problem, they left in the weak code, and now they are saying they can fix it best???

    For some reason, I don't think I'll be trusting them to much.

  34. Amazing video by Anonymous Coward · · Score: 1, Interesting

    Check out the spyware video (https://www.microsoft.com/athome/security/spyware /video1.mspx)
    and they'll explain you why M$ products are a piece of crap, it's quite funny how they manage security bugs to launch a new product.

  35. Re:Uh Oh... by Anonymous Coward · · Score: 0

    MS never cheated: They DIDN'T wrote the software in the first place. Wait a few months before it's written from scratch by Bill's engineers!

  36. Re:No more spying, please! by Lindsay+Lohan · · Score: 2, Informative

    Also, I neglected to mention in my previous post...

    One factor behind MS AntiSpyware's successful may be the use of quadratic probing in a secondary clustering to traverse file patterns, which are stored in an acylic graph.

    Fleischer and Trippen elaborate further on this technique in a Java implementation, which of course Microsoft did not employ. The rationale, however, is the same.

  37. spy vs spy by Doc+Ruby · · Score: 1

    Let's see the real deathmatch: shop for spyware as a sleazy spammer, paying for the best spyware installer malware available, then run that against MSAntiSpyWare, Ad-Aware and SpyBot. I bet the malware mafia comes out on top.

    --

    --
    make install -not war

  38. A new king of the hill, but... by spywarearcata.com · · Score: 1

    Webroot's product used to be the best, but now Microsoft's free product is better. For now.

    But until a bright line separates unlawful adware and spyware from lawful, no product is going to beat Spyware.

    Contrast to viruses and worms, which with very very few exceptions, are entirely unlawful and do not financially profit anyone. It is hard enough for the market leader Symantec to stay only epsilon behind the virus makers; with Spyware, which is both legally ambiguous and highly profitable, even the behemoth Microsoft will succumb to the Army ants.

    Moral, we cannot rely upon a single company to protect us. We need a combination of laws, profit and non-profit organizations and financial disincentives to control the parasites.

  39. Insecure Microsoft by Tajas · · Score: 1

    I tried clicking on the link from Firefox for the MS AntiSpyware crap and Firefox wouldn't allow without me allowing temporary access with a possibly invalid security certificate.

    Anyone else having this happen to them?

    How can we even begin to trust a company that can't trust itself?

    Fix your certs MSFT!!!

    1. Re:Insecure Microsoft by Arondylos · · Score: 1

      Looking at the certificate, it seems it is a valid certificate, but signed by MSFT. Most non-Microsoft browsers do not by default trust MS' root certificate.

      MS would have to have their cert signed by Verisign or something like that; or it could ignore the few percent of non-MSIE users that do not click through the cert warnings anyway.

    2. Re:Insecure Microsoft by Anonymous Coward · · Score: 0

      This was reported to bugzilla, here: https://bugzilla.mozilla.org/show_bug.cgi?id=24560 9 (yeah, I know bugzilla doesn't take /. referrers).

      Bottom line, It's a difference in interpretation of an ambiguous RFC.

      IE believes that if an SSL client doesn't trust a servers certificate, it should try to find the certificate's parent and see if it's trusted.

      Mozilla requires that the certificate contain the full certificate chain to the root CA, and thus it doesn't need to look up the parent.

  40. VERY much of an aquisition by YrWrstNtmr · · Score: 1

    Under TaskManager, it still shows as "GIANTAntiSpywareMain.exe". No mention of Microsoft.

  41. yeah... by mr_tommy · · Score: 1

    It's a pretty poor article offering at best a cursorary look at MS's offering. To sum it up in a few words : Yeah, Microsoft's new anti-spyware solution works; but you knew that without reading th earticle.

  42. Parent is a Troll by Anonymous Coward · · Score: 0

    This was posted just to piss people off and give more publicity for M$. The application is from Giant, not M$, ok???

  43. This isn't really MS antispyware by mutilated_cattle · · Score: 5, Informative

    MS just bought giant AS and rebranded their product as Microsoft. As far as I can tell there's very little change to the program itself beyond the branding.

    Giant has always been among the top antispyware products, as evidenced by Failing Grades for most anti-spyware tools so this "MS should know their own security holes better than anyone" stuff isn't strictly relevant. I think MS should foucus more on fixing the secuity problems in IE that are responsible for 90%+ of spyware infections rather than sticking plaster over the holes by buying up anti-spyware solutions. Is this even going to be free when it's released?

    Personally I prefer webroot spysweeper anyway, Giant has always generated too many false positives for me.

    1. Re:This isn't really MS antispyware by SB5 · · Score: 1

      Those are problems. Those are features! ActiveX is working as intended!

      --
      If what you are reading sounds funny, or sarcastic, lame, or stupid
      it is because it is supposed to be. just laugh
    2. Re:This isn't really MS antispyware by deft · · Score: 1

      Actually it is MS antispyware.

      Or, that really isnt your car. Its a car you bought from the dealership and rebranded it as yours.

      --

      There's nothing Intelligent about Intelligent Design.
    3. Re:This isn't really MS antispyware by Igottapoop · · Score: 0

      Your logic is flawed.

      If I bought a car (a Ford for this example) from a dealership, gave it a paint job and tried to resell it, would it still be a Ford or an "IGottaPoop-Mobile".

      Actually even more to the point, when you go to the car dealership are you buying one of "their" cars (i.e. "Jim's-Auto-Center-mobile"), or are you buying a car with the same name as the company that created it?

    4. Re:This isn't really MS antispyware by deft · · Score: 1

      But logic is flawed too...they didn't buy a car, they bought Ford.

      --

      There's nothing Intelligent about Intelligent Design.
  44. And if we a relucky by geekoid · · Score: 1

    thats all they'll do.
    That said, at least they are doing something, even if it is only buying something.
    Of course using it to have people prove they aren't guilty of copyright infringement is a little scummy. At least people can click no.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  45. yep it really works by js3 · · Score: 1

    I always thought my pc was well protected, mcafee antivirus, router, no porn sites (I'm a developer so it takes a lot to fool me) and yet ms antispyware found a file that contained a trojan on one of my drives. Last night when I was about to shut own my computer it gave a warning about the asus probe utility using "fishy" methods to ensure it run on startup

    --
    did you forget to take your meds?
    1. Re:yep it really works by Anonymous Coward · · Score: 0

      It must be the truth - if anyone knows about using "fishy" methods it has to be Microsoft.

    2. Re:yep it really works by vingt · · Score: 1

      But didn't you or your white box assembler install the Asus probe utility to monitor and test your hardware and BIOS?

    3. Re:yep it really works by js3 · · Score: 1

      I did but all the antispyware told me was it was doing something suspicious. Since I knew I installed it and it was from asus I just ignored the warning. It was just a warning

      --
      did you forget to take your meds?
    4. Re:yep it really works by ArtStone · · Score: 1

      The first time I ran several .bat files, it freezed the execution and asked me to confirm that I really was trying to run a script and understood the risks.

      It also pays attention to the hosts file, one of the insidiious ways some recent stuff facilitiates phishing attacks.

      It looks pretty good - the FAQ mentions that the -beta- software is free - however, the software itself says it expires in 6 months.

      Is it only the beta that is free or will it remain free? Or will that depend on whether people will pay for it?

      --
      Final 2006 "Proof of Global Warming" US Hurricane Count -> 0
  46. Unfair by Turn-X+Alphonse · · Score: 1

    Who here only uses 1 or the other of spybot and adaware? Most people know adaware and spybot pick up different things. Hence putting them together VS Microsoft would be a better judge.

    --
    I like muppets.
  47. but what about aol? by macsox · · Score: 1

    i know this sounds like heresy, and i'm embarrassed to ask -- but does anyone know how effective these tools are in relation to the one that comes with the new version of AOL?
    the reason i ask is that, like many of you, i am the CIO of my family, and my family is at the lower end of the spectrum that defines excellent computer using. a few family members have AOL, so i'm curious as to whether it saves me time and headaches to use the AOL tool as opposed to another. because if i have to spend half my christmas fixing dad's xp home that my sister installed kazaa on, i'd like to get back to the egg nog as soon as possible.

  48. I had different results by jd142 · · Score: 1

    I tested a test lab computer at work. No special attempt to infect it, just running a lot of test freeware and average junk.

    The MS product found 3 problems: tightvnc, iMesh infecting every file in my Oracle client directory !!!, and a third one I can't remember. Spybot on the same computer found about 10 things, all different.

    So in my little test, MS did pretty poorly. I'm sure that every file in the c:\orahome directory was not infected with adware. And it missed quite a bit that spybot found.

    The best that can be said for the Giant/MS product is that it tells you if it finds vnc installed. If it tells you when it finds servU or other ftp products, it will be a useful tool, but I'll stick with Spybot too.

  49. flexbeta spyware reviews suck by Anonymous Coward · · Score: 0

    flexbeta.net has the most un-scientific, half-assed reviews ive ever seen, why is slashdot pandering to anonymous submissions from the website's own operator?

    Thier last spyware review compared the number of files or components reported by each spyware removal application as the benchmark. The problem is each tool reports files and components in different ways. The end result is just comparing the number of spyware components each product "reports", not the actual number of spyware suites removed......complete rubish of a review.

  50. I, for one... by Big+Nothing · · Score: 2, Interesting

    I, for one, welcome our new anti-spyware overlords.

    Seriously.

    Yes, it would be better if all the security holes in M$ SW were fixed but guess what: they're not gonna be fixed tomorrow. A good anti-spyware tool is sorely needed. I've cleaned a large number of home and office computers using a number of anti-spyware tools and frankly none of the cut it. At best, some of them suck a little bit less than the rest. I find that at least 3 separate tools are needed to find, clean and keep clean a normal luser's puter. If M$ can come up with a tool that is efficient, free and automagically upgradeable I'd sure as hell cheer.

    --
    SIG: TAKE OFF EVERY 'CAPTAIN'!!
  51. Specific Firefox / Mozilla protection by bstadil · · Score: 1
    Spyware blaster has a seperate section for Explorer and Mozilla/FF protection. Anyone know if this is the is the same for the MS products.

    I wouldn't be surprised if somehow the MS spyware removal tool fails to fix anything Moz related.

    --
    Help fight continental drift.
  52. Re:But why won't MS help linux? by Anonymous Coward · · Score: 0

    >Ah the beauty that is peer-review

    Yeah, that's why the root shell exploit came out this week.

  53. Too many hits by tehshen · · Score: 2, Funny

    There is a problem with the database that is preventing the site from working.
    An email has been sent to the administrator notifying them of the problem. Please try again later.


    They're letting us slashdot their mail server too?

    --
    Guy asked me for a quarter for a cup of coffee. So I bit him.
  54. Apparently RealVNC is spyware by drgath159 · · Score: 1

    Glad MS Anti-spyware advised me of that. How come the other remote utility on my computer, Remote Desktop, wasn't detected too? Oh wait... that's right.

    1. Re:Apparently RealVNC is spyware by TheRaven64 · · Score: 1

      The difference is that Remote Desktop ties into the windows login system. VNC does not. This means it is possible for VNC to be installed by a malicious program and used to observe or control your computer without your knowledge. If you know what VNC is, then you just tell it to ignore it. If you don't then the odds are you probably don't want it on your system.

      --
      I am TheRaven on Soylent News
    2. Re:Apparently RealVNC is spyware by alc6379 · · Score: 1

      Pest Patrol tells me the exact same thing. I'm thinking that Giant and Pest Patrol started with the same databases, at least.

      While I realize that it could be used for illegitimate puposes, I don't think it should be labelled so strongly as a "baddie". I use VNC all the time to help maintain my home clients' boxen remotely-- what happens when one of them runs MS-anti spyware or Pest Patrol, and they find/delete the program they gave me permission to install on their machine?

      --
      I don't moderate anymore. Karma penalty for 90% fair mods? Can I mod that unfair?
  55. VNC, etc by unix_geek_512 · · Score: 1

    MS "anti-spyware" listed VNC as spyware with a horrible explanation of what it was.

    It looks like MS is already labeling software they do not like / approve of as "spyware" which is unethical at the very least and illegal if you consider the anti-trust implications.

  56. It is good! by Further82 · · Score: 2, Funny

    It even detected and removed Firefox and my Linux partition. Ad-aware missed those.

  57. New Product: C|al|s Soft-Tabs! by JawzX · · Score: 1

    fisheye1969,

    Are you giving your sexual partner what she wants?

  58. Of course MS finds spyware... by Krunaldo · · Score: 1

    Did they finnaly decide that IE and activeX was spy ware or what?

    --
    God,root what's the difference? I read slashdot, there for I errr... am stupid?
  59. Cry me a river by js3 · · Score: 1, Insightful

    MS leaves fixes to 3rd party. WAAAA!! why doesn't ms fix their own shit

    MS releases patches to fix their product. WAAA!!! this patch broke my already broken system.

    MS release tools to detect and fix malicious apps that ruin their product. WAAAA!! a lot of spam companies will go out of business

    damned if you do, damned if you don't

    --
    did you forget to take your meds?
  60. Re:and Linsux is really Unix, so? by Anonymous Coward · · Score: 0

    Your point being? MS never hid the fact they purchased Giant's software. Many applaud this as another proactive step MS has taken in order to help the common user avert infection by malicious developers. Oooh, all the spyware and viruses are probably a Linsux community conspiracy to degrade MS software and thus promote OSS crap.

  61. How long? by ArbitraryConstant · · Score: 1

    Until companies pay off Microsoft to allow their spyware to be installed?

    --
    I rarely criticize things I don't care about.
  62. I second that by mebollocks · · Score: 1

    I intentionally infected my work XP machine with spyware about a month ago. Why? well, the amount of requests I was getting from friends, landladies etc to "just take a quick look" at their dell to see why it had gone so slow and IE takes forever to load pages etc. When I get there to take a "quick" look, it inevitably ends up with an OS reinstall and reinstalling office etc... then there's the, "but I had Office2k+1", "Where's the cd?", "well it was a friend that put it on for me! Why isn't it there anymore, what did you do?", "I told ya you'd lose whatever I didn't back up!", "But can't you just put it back?", "Well, you know, you don't have a licence...", "Yeah but no-one does, can't you just put it back? *wink*". Grr.. do someone a favour... Anyway, I'd prefer to just remove the spyware. S&D and Adaware just don't cut it. I was wondering if stopping startup items with msconfig and silentrunners would be enough... but anyway to cut a long story short. My work PC got worse and worse, seems some spyware was installing others, D/l'ed the beta of MS Antispyware yesterday and after about 30 mins IE was working ahgain everthing looks clean and its now my antispyware of choice, even if it is still in beta. I'll be deflecting my friend's friends with "download this , install and run and see you later"

    1. Re:I second that by Anonymous Coward · · Score: 0

      For profesional use nothing beats HiJackThis. It requires skill and/or google to use though.

      Just in case you run into something like this again

  63. Re:But why won't MS help linux? by codergeek42 · · Score: 0

    >Yeah, that's why the root shell exploit came out this week. No. That's why it was fixed so quickly.

  64. Will it be free by NilsK · · Score: 1

    According to this article on Full Disclosure you better have your credit card within reach in case you are planning to use this product.

    Nils

    1. Re:Will it be free by l3v1 · · Score: 1

      Yes, many news sources tell something like this will be going to happen in the future [i.e. charge for updates, good ol' MS way]. Which is really funny, you know, it's like: We suck at security, so you pay us to give you some third party app to help you stay sane while we sill don't give you a safer app/os.

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
    2. Re:Will it be free by siliconjunkie · · Score: 1

      The last page of the Flexbeta article comments that it will be subscription-based as well.

  65. MS anti spyware by GooDieZ · · Score: 1

    If the MS Windows OS vould be coded right we vouldn't need anti spyware tools in first place...

    --
    Things in a rear mirror might be behind you
    1. Re:MS anti spyware by SteveXE · · Score: 1

      More like if your average user wasnt an idiot who installed everything and ran under admin we wouldnt need spyware tools in the first place.

  66. You're Winner! by Tezkah · · Score: 1

    Exactly, my antivirus (Panda Antivirus) has a simular feature: you can send suspicious files to them.

    I'm pretty sure that Microsoft uses the information to tell whether the recommended action should be ignore (like for MSNger Plus! - not spyware, just contains an optional adware toolbar for a "sponser") or remove (for pretty much any software that is a true security threat).

    Now... when it becomes self aware and causes a nuclear war in 1997, then we'll get worried.

  67. Ridiculous. by bigtallmofo · · Score: 1

    I just went to download this software to try it out. It took me about 10 minutes to be able to read the product ID off the side of my Dell computer (which is under my desk which is extremely dark). At least the MS jerks that came up with that product ID could've kept out zeroes (which look like O's) and eights (which look like B's).

    I guess Microsoft's commitment to keeping the Internet safe from spyware stops when their profits are concerned.

    --
    I'm a big tall mofo.
  68. Re:But why won't MS help linux? by Homology · · Score: 0, Troll
    Now they have this brand new antispyware program. How nice it would be for them to port it over to linux?

    With the number of recent Linux local root exploit, perhaps such a tool is needed ;-)

  69. Didn't find a thing. by WeaverBen · · Score: 1

    I just tried it--it didn't find a thing, which I suppose is good!

  70. Hold up! by NeoSkink · · Score: 4, Insightful

    Wait wait wait! Microsoft is going to charge for their program?

    Maybe I haven't been following the story very closely, but that seems like a stupid move. "Our operating system and browser allow this stuff in the first place, now pay us to remove it."

    Keeping that in mind, I'll stick with the FREE AA and SB.

  71. Re:and Linsux is really Unix, so? by l3v1 · · Score: 3, Funny

    step MS has taken in order to help the common user avert infection by malicious developers
    conspiracy to degrade MS software

    Good heavens :) Medicine has evolved pretty much in the last couple of hundred years you know, so you can easily get pills for your delusions :)

    Well, the ignorance part is harder to cure, 'cause it's more up to you then doctors.

    --
    I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  72. When MS Anti-spyware is installed by Anonymous Coward · · Score: 0

    Will it automatically remove Windows XP for you?

    If so, this might be one of the few good products to be sto^h^h^hReleased by Micro$oft. ;)

  73. It caught itself trying to make changes by srNeu · · Score: 3, Funny
    I just ran it and got a message:

    The Internet Explorer URL for your Search Assistant is attempting to be changed from http://www.google.com/ie to http://ie.search.msn.com/{SUB_RFC1766}/srchasst/sr chcust.htm.


    So this is how they are going to promote their new search engine.
  74. A small silver lining to all this spyware by Free_Trial_Thinking · · Score: 2, Interesting


    Ok, I know spyware/adware/viri are a blight on our wonderful internet but here's what I find fascinating about them:

    Computers are becoming analogous to small ecosystems. In my mind I often compare the idea to leaving a loaf of bread in my back yard to connecting a fresh windows XP install to a cable modem, maybe surfing a few shady websites and letting it sit for a few months.

    In my backyard all kinds of organisms will appear to utilize the bread's resources, birds, insects, bacteria, mold, and who knows what else. And also on this hypothetical computer again all kinds of organisms will be drawn to use up all of the computer's resources (processing/bandwidth) including spyware, adware, virii, worms, etc. I just find it really fascinating how a natural phenomenom like this is finding its way into a manmade system like the internet.

    My prediction along these lines is that we're going to see some amazing instances of AI coming from these 'weeds' of the internet (spyware,virii, spam, etc) since they're most 'organic stuff' in the internet system.

    Discuss, discuss. (I hope I could express this idea well enough, the analogy seems so clear to me.)

  75. infected oracle client? by TermV · · Score: 1

    Was your oracle client actually infected, or was it a false positive? I got the same results when I ran giant on a system with the oracle client installed.

    1. Re:infected oracle client? by jd142 · · Score: 1

      I'd be very surpised if it was infected. It was installed from an oracle supplied cd. Spybot didn't think anything was infected, not did my anti-virus.

  76. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  77. get a mac by Anonymous Coward · · Score: 0

    If you're worried about Viruses and spyware, get a Mac, problem solved.

    Silly Windows...

  78. The whole thing just feels stupid by Anonymous Coward · · Score: 0

    Releasing crap cleaners instead of solving the problem. If they enforce the use of non-administrator accounts like every Free *nix OS out there does it can get much better.

    There's a service called "Secondary Logon" which allows you to run with different priviledges, just like sudo. I've tried to install a screensaver armed with BargainBuddy under a limited account and I couldn't, so it can improve security a while. Combine a non-root account with anti-virus, spyware detection, Firefox, Thunderbird and Gaim and your Windows security gets much better.

    Add a free firewall like Kerio, deny incoming packets, permit only known packets, and it's even better.

    The main problem in Windows is now it's users and developers culture: even image viewers require administrative priviledges to work (Picasa for example). But the are free alternatives for Windows that don't.

    My Windows got safer with those habits, and I didn't need to install SP2 on XP to do it.
    PIII-850 w/ 192 MB RAM, SP2 slowed it a lot.

  79. Spyware by JohnyDog · · Score: 4, Insightful

    Both Ad-aware and Spybot are popular and estabilished, which means that newer spyware/adware knows them, knows how to hide, avoid them or even completely disable them, even if they're frequently updated. So it isn't surprising that MS AntiSpyware performs better now, but that doesn't tell anything about how it will perform in few months from now.

    --
    People who like this sort of sig will find this the sort of sig they like.
    1. Re:Spyware by Anonymous Coward · · Score: 0

      er...i thought this was just repackaged. Is giant also new ? Thought that was old and established enough to be known by newer spyware/adwares.

      or do we see that way only when it suits us ?

  80. See how they shreik! by EdMack · · Score: 1

    It's fun seeing everyone freak out because Microsoft bought and improved a decent program

    Face it, no OS is perfect, and MS is adding more protection to theirs; that's a _good_ thing. They have a massive support crew, and can do a good job, indeed they have here. They catch more cruft, so use it. If anyone seriously thinks MS is generating false positives to look good, they have seriously warped worldviews.

    --
    puts ("Python r0cks\n");
  81. The advanced tools are worth the d/l alone by British · · Score: 4, Insightful

    The MS utility fonud some Dutch porn dialer that was on my system since 2003. AdAware never found it.

    But what wowed me were the useful utilities in the "advanced tools". I was finally able to disable a few annoying system tray icons(totally forgetting how to do it in Win2k). I still can't get the Nvidia driver utilities off, but MS is not to blame in that case.

    The tracks eraser functionality goes way beyond a simple "url cleaner". You can clear the document history, etc for TONS of apps. I'm wondering when the anti-MS zealots will be yelling that it will be a useful tool for child pornographers(heh).

    The GUI is a bit shoddy. I wish I could keep the heiarchial list of stuff when I'm inspecing the startup apps, etc, and there's no + to collapse/expand. Either way, I love the advanced utilities alone, and could probably clean out TONS of spyware, etc if I run this on my dad's PC.

    1. Re:The advanced tools are worth the d/l alone by TummyX · · Score: 1


      I still can't get the Nvidia driver utilities off, but MS is not to blame in that case.


      Display Properties -> Settings -> Advanced -> nView -> GeForce4 (next to device settings) -> Desktop Utilities -> Display the QuickTweak icon in the taskbar.

    2. Re:The advanced tools are worth the d/l alone by gd2shoe · · Score: 1

      "I was finally able to disable a few annoying system tray icons(totally forgetting how to do it in Win2k)."

      The easiest way I know is to steal a copy of msconfig from a Windows XP machine. Just find the file (in system32 I believe) and stick it on a floppy.

      The manual way involves checking several places in the registry with regedit.

      --
      I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
  82. Was it all cookies? by Bender+Unit+22 · · Score: 1

    I have problems loading the page, so I wonder if the things it found were "just" cookies since the object count was so high.

  83. Inconsistent results? by MunchMunch · · Score: 2, Interesting
    Can someone explain how this could be?

    The first Ad-Aware scan revealed 1309 infected objects and a second scan immediately after a reboot resulted in 291 more infected objects reported. After removal of those objects, we ran Microsoft AntiSpyware Beta. AntiSpyware's scan revealed a whopping 1,877 infected files left over by the Ad-Aware not to mention the nearly 3,000 registry locations infected. One of the files which Ad-Aware failed to detect was WinTools which is suspected to be a Trojan with a maximum threat level.

    It was time to pin Microsoft AntiSpyware against SpyBot S&D by first scanning with SpyBot then checking to see how many files SpyBot had left behind. SpyBot's initial scan resulted in 358 "problems" detected. After running SpyBot a second time to make sure it did not report any other "problems", we ran Microsoft AntiSpyware. AntiSpyware was able to detect 659 infected files on the machine with 2.223 registry keys infected.

    So, to begin, Ad-Aware found 1,600 infected elements total. AntiSpyware found 4,877 more. Total: 6,477

    SpyBot finds 358. AntiSpyware finds 2,882 more. Total: 3,240

    Can anyone explain this? Even if the programs are giving false positives on spyware (and, considering that even having malicious spyware installed, 6,000+ detected compromised elements makes false positives almost a promise rather than a hunch), why would AntiSpyware inconsistently return false positives depending on what program scanned the PC first? Doesn't make any sense at all.

    1. Re:Inconsistent results? by Feztaa · · Score: 2, Insightful

      First, it's because you read "1" as "4" (reread your own post, you even quoted it properly). Second, it's because Adaware and spybot count the infections differently (and find different ones), thus the ones found by MSAS afterwards vary.

      Basically, it's apples and oranges.

    2. Re:Inconsistent results? by MunchMunch · · Score: 1
      I reread my post three times, and I can't see what you mean. I guess I'll assume you're referring to 1,877 in the quote 'turning into' 4,877 in my totals. To clarify I was counting the additional 3,000 registry entries (mentioned directly after the 1,877 in the quote) in the summary numbers since it seemed to be the case that the other totals included registry entries.

      That said, I guess it's possible that SpyBot removed some objects that counted as maybe 5 or 6 to AntiSpyware, but it certainly seems to be a big enough discrepancy so as to render that unlikely.

    3. Re:Inconsistent results? by jnkt · · Score: 1

      Probably due to different definitions of "spyware sets", where a product groups a number of different attributes (spyware traits) under a common name. If there are discrepancies between these groups from one program to another, then that could well explain why different number of attributes were returned depending on the execution order of the anti-spyware programs.

    4. Re:Inconsistent results? by llywrch · · Score: 1

      If you have an idea where the spyware gets installed, & how it gets loaded into your system on boot, then it's surprisingly easy to find malware the other software miss.

      My knowledge of the newer releases of Windows frankly sucks, but it took me only a couple of evenings to figure out the tricks & finish the job of cleaning up my wife's computer that Ad-Aware & SpyBot failed to finish. (I would have learned faster had I not wasted time thinking that these scumbags are make their code work by performing esoteric tricks with the Windows Registry.) These programs relied on truly simple tricks: putting their executables in C:\windows\system, C:\windows32 (one was a batch file that on startup would look for its binary, & if it was not there, download it from an IP address); giving them garbage names that stood out like a sore thumb against the usual cryptic names you find under Windows; & hiding any trace of their origin. I found that malware frequently confessed itself when I checked the Properties window of a suspicious file: if there was no information about it, not even a copyright note, it usually proved to be malware.

      I spent a lot of time using Task Manager, killing suspicious processes, then renaming the related .exe files to .dud & rebooting. (I have to say that I later found Search & Destroy's tool for editting the Startup configuration priceless when I had to repeat the same work on my sister's computer!)

      The point I'm trying to make here, in a round-about fashion, is that spyware still is a lot like spam: we know it when we see it, but we can't yet reduce it to a simple algorhythm so we can let a program block it without error. All of the programs mentioned here will inevitably fail, & will continue to fail to catch every instance of malware -- or report false positives. (When I was cleaning my sister's computer, I needed her & her daughters' help to identify all of the suspicious programs I found; they knew what should be on the computer.)

      Geoff

      --
      I think I see a trend here. Maybe for them it really would be easier to muzzle the entire internet than to produce p
  84. SpywareBlaster by Anonymous Coward · · Score: 0

    SpywareBlaster is freeware that prevents spyware from installing in the first place:

    http://www.javacoolsoftware.com/spywareblaster.h tm l

    Since I've started using it in addition to continuing to use Ad-Aware and Spybot, I've noticed that Ad-Aware and Spybot no longer have any spyware/adware to report.

  85. From Microsoft's Website by MrPink2U · · Score: 1

    I was looking for the Linux version of Microsoft's Anti-Spyware (Beta) and this is what I found on their website:

    Before obtaining the requested download, please take a moment to validate your genuine Microsoft Windows installation. Validation assures that you are running an authentic and fully-licensed copy of Windows. Validating now will enable faster access to genuine Windows downloads upon future visits to the Download Center. Please see the Why Validate? page to learn more about the Windows Genuine Advantage program and why validation is recommended.

    Now what am I supposed to do?

    1. Re:From Microsoft's Website by Anonymous Coward · · Score: 0

      Umm, Get a life? Move out of your mom's basement? Make a funnier joke?

  86. not in my case by wintermute1000 · · Score: 1

    I ran the MS spyware program. It took half an hour and it didn't find shit. I decided to run AdAware and see how it measured up...it's been running for all of two minutes and it's found a new file.

  87. Firefox by beoss · · Score: 1

    I recently ran the tool and it detected a "CnsMin (Browser Hijacker)". Not thinking about it too much I ran the repair and it reset Internet Explorer to my default Browser instead of Firefox.

    Makes you wonder what MS features will end up in the final release of this tool.

  88. Who'd have thunk it. by Anonymous Coward · · Score: 0

    I'm mostly amused by the fact that after I installed the MS Antispyware program, the first pop-up warning it gave me was "Windows Messanger is Running."

  89. cat.exe is a Dutch Porn Dialer? by phish · · Score: 1

    Well, it seems like unxtools qualify as spyware. Makes one wonder how they determine the signatures of files they believe are spyware.

    1. Re:cat.exe is a Dutch Porn Dialer? by westlake · · Score: 1
      Makes one wonder how they determine the signatures of files they believe are spyware.

      The program will flag executables that have legitimate names but are suspect for other reasons, such as authorship or location, for example, smss.exe, a Microsoft NT service, should be found in WINDOWS32 and nowhere else.

  90. Not for me. by T-Keith · · Score: 0

    Let's see:

    "Minimum system requirements for Windows AntiSpyware (Beta):
    -Microsoft Windows 2000, Windows XP, or Windows Server(TM) 2003"

    Nope not for me.

  91. Not all work well... by Anonymous Coward · · Score: 0

    There was a recent review published, where a comparison was made with these different products. Perhaps it was CNET. I personally use Pest Patrol (for Windows) and have found it to detect a lot of crap these other tools miss. SpyBot is good, but it could be a lot better.

  92. Hey, wait a second by CrankyFool · · Score: 2, Interesting

    Running this on my parents' PC, I find that it has, in fact, found spyware that neither adaware nor spybot has found.

    Only problem is that it's TightVNC. I can understand that -- I mean, someone could use that to access your computer! The weird thing is, it didn't flag Remote Assistance as spyware. Totally missed it.

    I think I'll submit a bug.

  93. MS Antispyware by Anonymous Coward · · Score: 0

    Well the MS Antispyware is really just Giant Antispyware which is whom they bought out to get the program. The interface and everything looks the same which is probably why it works so well, I have been using Giant Antispyware over Adaware for awhile since doing my own testing Giant worked better. So its Giant's own work that's makes it really good!

  94. the end to spyware by Anonymous Coward · · Score: 0

    a good way to end spyware (at least for now) is use linux...

  95. Another solution to spyware and adware by FIT_Entry1 · · Score: 0

    Use safari.

  96. Priceless by lxs · · Score: 2, Funny
    This is the first alert I got after running it:

    Microsoft AntiSpyware has detected that the Window's Messenger Service is currently running. The messenger service is sometimes used in corporate networks to send information from the administrator to its users. However, this service has been a wide source for pop-up message spam, and for most users not on a corporate network should be turned off and disabled.


    They even detect their own crap!
    1. Re:Priceless by Master+of+Transhuman · · Score: 1

      Microsoft AntiSpyware has detected that Microsoft Windows is currently running. This operating system is sometimes used in corporate networks. However, this operating system has been a wide source for spam and viruses, and for most users should be turned off and disabled.

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    2. Re:Priceless by burns210 · · Score: 1

      Why don't they just turn off Windows Messenger Service and RPC with SP2(and make it easy to have an msi undo it for corporate enviroments)?

      Why turn a feature on by default that only a few corporate users use(relatively) when those 2 services are 2 of the BIGGEST pains in running windows!

      Do it how Apple does it. Everything off by default(network services, atleast), but make it easy to turn on(require an admin password, etc). This is the only way that makes sense.

  97. Weird Page to Link To? by milletre · · Score: 2, Informative

    Is it me, or is the link to the Microsoft Anti-Spyware fishy? I got all sorts of security warnings from Firefox, and it comes up as an https:// page.

    But if I go there from the Microsoft home page proper, it's a non-secure URL.

    wtf?

    1. Re:Weird Page to Link To? by Master+of+Transhuman · · Score: 1

      That's really funny, given the post by a Microsoft shill on his blog some time back that proclaimed FireFox was "insecure" because you had to download it from an "insecure" site.

      Wonder what the hypocrite has to say about this?

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  98. MSAS really works by SupaKoopa · · Score: 1

    i can testify to MS AS's effectiveness....i used to run adaware scans every few days and found nothing, but with one scan of MSAS, got about 14 infected files the first time, and 5 more the next day. and since its in the beta stage, it will hopefully only get better. this program is definitely worth using, or at least trying.

  99. f*** detection by way2trivial · · Score: 1
    I want to know how good they are at automatic, "no net scouring for the obscure method " REMOVAL without intervention, and without leaving behind a system that is a shambles..

    I tried to teach a guy how to hunt down and remove his own stubborn spyware..
    check processes, and end'em, search for them on google, run msinfo and uncheck boxes.. I thought he could handle it- really,

    you don't want to know what was left in the c:\windows folder when I got back to him- you really don't- mebbe 50 files....

    --
    every day http://en.wikipedia.org/wiki/Special:Random
  100. This guy is going to get a lot of emails by LemonFire · · Score: 1

    The site seems to be /.ed already.

    There is a problem with the database that is preventing the site from working.

    An email has been sent to the administrator notifying them of the problem. Please try again later.

    This administrator is going to get a lot of emails...

    -- This SIG will self destroy in 3 seconds... 3.. 2.. 1.. blast!

  101. I concur, MS's AntiSpyware program works well by phaetonic · · Score: 2, Interesting

    I have to give credit to Microsoft purchasing the company who made this AntiSpyware program. Yesterday I went to a client site and their server got infected (surfing on a naughty site I'm sure) and AdAware and Spybot removed a few but the machine was still hosed. I was unable to double click on any icon on the desktop - I would get a GPF. I went in safe mode with networking, downloaded the MS AntiSpyware tool, went in regular mode to install it (LUCKILY that worked, not sure why), went back in safe mode to run the tool, and it wiped out over 20 different spyware signatures and over 100 files, much more than either of the other tools. After a few hours, the machine was running perfectly with the icons allowing to be double-clicked on.

  102. Re:and Linsux is really Unix, so? by Anonymous Coward · · Score: 0

    Many applaud this as another proactive step MS has taken

    LOL! Give me a break! That's like saying the guy who gave you poison, then took you to the hospital is your friend.

  103. False positives.. by wfberg · · Score: 4, Informative

    Among the things MS Anti-Spyware found on my system (which is actually well-maintained, so perhaps not the best test-bed) none was a real hit, they were all false positives.

    It even managed to warn against registry settings put in place by SpyBot to ensure a malicious site runs in internet explorer's restricted zone!

    Also, it reported with glee that TightVNC is a dangerous hacking tool. I happen to use it to help out people, exactly the kind of people who are likely to remove it if AntiSpyware complains about it (e.g. my mom).

    Then a load of DLLs that are actually dummy DLLs shipped with the "lite" version of a (once upon a time) popular ad/spyware ridden app - again, it's detecting its competition!

    And then there are the residual files/empty directories/registry settings that adaware/spybot didn't remove some months ago when I tried an app that came with ad/spyware. No active components at all.

    Another thing I don't like about it is that it's user interface doesn't scale properly when you've adjusted your DPI settings.

    Also, its on-access scanner (for want of a better word) comes with an enormous performance hit, and is mostly concerned with Internet Explorer hacks. Those are a minor concern for me since I use firefox, and besides, Microsoft should fix IE, not ship cycle/ramhungy monitoring applications for it (though that's hardly GIANT's fault).

    In other words, I'm underwhelmed.

    --
    SCO employee? Check out the bounty
    1. Re:False positives.. by generationxyu · · Score: 1

      To be fair here, if you're running VNC on purpose, you'll know that it's not a "dangerous hacking tool." And people who aren't running it on purpose probably don't want someone connecting to their system.

      --
      I mod down pyramid schemes in sigs.
    2. Re:False positives.. by forceflow2 · · Score: 1

      I think it does that with any VNC agent. It flagged RealVNC for me too. And same thing with the dummy dll files. I also noticed too though that while Spybot merges threats from the same thing together, Microsoft's tool splits them up so it seems like there are more things detected for some reason.

    3. Re:False positives.. by cookiepus · · Score: 2, Insightful

      Also, it reported with glee that TightVNC is a dangerous hacking tool. I happen to use it to help out people, exactly the kind of people who are likely to remove it if AntiSpyware complains about it (e.g. my mom).

      It reported RealVNC as "Commercial Remote Control Product" with a danger meter of 50%. Since I know I run RealVNC, I said "always ignore this". It won't show up in the hits again. But I would imagine there are people out there who have VNC installed on their systems by someone who spies on them (untrusting boyfriend perhaps?) so why shouldn't those people be warned? If they have VNC for a good reason (like you and I do) they can easily exclude it from future hits.

      I also got a complaint about some eDonkey registry keys. I am not sure I ever ran eDonkey, perhaps it's because eMule registers itself to handle eDonkey links. I also said to ignore this always, so it won't show up again.

      I see both of these as valuable features. There are people out there who may not know they have VNC installed, and there are people out there who may not know eDonkey has adware (or whatever the problem is) - those people should be warned of this. We can easily ignore the information and make it not appear in the future.

      Also, its on-access scanner (for want of a better word) comes with an enormous performance hit, and is mostly concerned with Internet Explorer hacks. Those are a minor concern for me since I use firefox

      So turn off the real-time checks.

    4. Re:False positives.. by Oktober+Sunset · · Score: 1

      on my computer it mistook shareaza entries for grockster, e-donkey and overnet and mistook k-like for kazaa and coding workshops polyphonic wizard for a commercial keylogger made by the same company, just from the name as the folder. out of 10 'threat' it found 3 were actual spyware and one was an express downloader from gamespot which it seem the big objection by people is that it uses Microsoft's DRM on the game demos it downloads, the other 6 were false positives.

    5. Re:False positives.. by Warskull · · Score: 3, Informative

      I got a similar result here, it turned up all false positives. I heard a lot of people claim Giant Anti-Spyware is the best, but from what I can tell Spybot search and destroy is still by far the best with a bit of back-up from lavasoft's ad-aware. So what this means is people are fine just running spybot and ad-aware. This microsoft rebranding of Giant looks to be the super paranoid version of anti-spyware. Not only does it mark spyware, but it also marks programs that install spyware, and marks programs similar to those that install spyware. I think any peer to peer application they know about is included as spyware. While this could be good for the lay user, it seems anyone with a remote knowledge of computers is better off using other programs. One big thing this has that others don't is the descriptions (pretty good) of the spyware. Maybe some uninformed people running this will read some of those descriptions and hopefully become more aware of why they don't want spyware.

    6. Re:False positives.. by unladen+swallow · · Score: 1

      I also got a hit with Tight VNC. In looking at the description it appears they got it right...

      "Description: A commerical remote control that allows full control of the machine installed on. This software is a legitimate remote control software package, however if you or your adminstrator are not aware of its installation on your machine it can be considere"

      An alert like that I can accept since it tells me the who (tightVNC) what (Remote control) why (legitimate remote control software) and how (if you or your adminstrator are not aware of its installation)

      What I do not like about the software is that it wants to reset IE settings (I use Mozilla), validate XP license key etc.

      I am afraid it is only a matter of time before I consider this spyware.

      The spelling errors (example adminstrator) are not mine but a direct quote.

    7. Re:False positives.. by Anonymous Coward · · Score: 0

      Then a load of DLLs that are actually dummy DLLs shipped with the "lite" version of a (once upon a time) popular ad/spyware ridden app - again, it's detecting its competition!

      How the hell is Kazaa Lite a competitor to an anti-spyware program?

    8. Re:False positives.. by fairyliquidizer · · Score: 1

      yeah but this tool will be used in corporate environments where some (l)users wont have a clue what remote control software is running. We run adaware at work at the moment (company has 2500 desk/lap-top users). Also, it detects some harmless registry entrants as spyware. Go to www.wilderssecurity.com and see what testers there are saying. I think I'll go look now ;-) I hope MS get rid of the false positives, coz then not only will I use the tool, but naive users wont be put off by the tool "crying wolf to often". Another worry is this gives MS the chance to label competitors products as "spyware". I know some tools currently label GameSpy Arcade because it delivers ads and collects summary stats (none are attributable to individual users). This to me sounds rather unreasonable. After all, is MSN Messenger spyware coz it contains banner ads?

    9. Re:False positives.. by drsmithy · · Score: 1
      yeah but this tool will be used in corporate environments where some (l)users wont have a clue what remote control software is running.

      In a corporate environment, users shouldn't be running their own adware scans and even if they are, they certainly shouldn't have the ability to delete anything important.

      Do not blame Microsoft because your environment is broken.

    10. Re:False positives.. by Apathetic1 · · Score: 1

      I installed it on my (well maintained) computer and it came up with two applications, both false positives.

      It's run three system scans so far and every time, it's claimed that my DC++ install is a copy of grokster and that it's hijacked one of my file extension handlers. Ummm... sure. It persists, even though I've told it to ignore the "problem". It also complained about my WinPCap install.

      Microsoft Anti-Spyware has thus far failed to impress me. I'll stick with Ad-Aware and Spybot.

      --

      My username does not make me Apathetic. It's irony, get it?

  104. Single Data Point... by raehl · · Score: 2, Interesting

    I just ran it on my system and got 0 infected files; so it's probably not jus padding itself for the sake of padding itself. (I don't install lots of crap, so I'm not surprised it didn't find anything.)

    1. Re:Single Data Point... by Bios_Hakr · · Score: 0, Troll

      Yes it does pad itself. I ran it. It detected eMule and Kazaa Lite as spyware. It also missed an Alexia tracking cookie that AdAware picked up.

      Also, I have an icon in my taskbar. I've tried to close this program for about 4 days. It won't close. Every time I close it, it launches itself back up a few minutes later.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
  105. False Positives Perchance? by fairyliquidizer · · Score: 1

    Yeah so the MS Product gets the most false positives! This methodology sucks. Don't get me wrong I hope they get it right! Windows needs defences!

  106. Watch What Microsoft Considers Spyware by Anonymous Coward · · Score: 0

    In 1995, Microsoft Windows decided that all third party TCP/IP stacks were "viruses". If they detected that someone had installed an alternative WINSOCK.DLL or WSOCK32.DLL (which was the entire point of a non-MS TCP/IP product) then Windows would automatically delete it and replace it with its own.

    Microsoft stopped doing that a year later, after the DoJ stepped in, but not before they had wiped the major competing TCP/IP stack vendors off the face of the earth.

    Watch for them to do the same thing with their anti-"spyware" product. How can they resist?

  107. Interesting. by Aggrazel · · Score: 2, Interesting

    It detected my "TightVNC" installation as possible spyware, but didn't say anything about the Windows Terminal Services service running ....

  108. M$ Anti-Spyware Pkg. by macaroo · · Score: 1

    I earn my living cleaning out Viruses, Spyware, Scumware and other noxious creatures living in the bowels of Windows OSs. So it was with high hopes I tried the new package from Giant...opoohs......I meant Microsoft. I am happy to report that on my first couple of test machines; that happened to be own by somebody else, MS's software was able to find and to correct malware that had been missed by AdaWare and SpyBot. It picked up fragments of programs long gone from the machine; Limeware, Grokster, Kaaza, etc. In addition it picked up trojans the other two passed over. This is not a surprise as an independent report form Eric Howes highlited the fact that this software picks up what falls thru the cracks with AdaWare and SpyBot. I was going to buy the commercial version, but MS bought the company.....Thumbs Up. I hope they keep it free as MS owes it's customer base on this issue!!!!

  109. Process information on Linux by Alex+Belits · · Score: 1

    It's not done by clicking (though there is nothing that prevents writing a little GUI frontend), but combination of ps, lsof and a package manager (rpm -qvf , dpkg-query -S) gives a pretty good idea, what the executable is, and what it is doing, or who is accessing a particular file.

    And if someone wants to find out, what a program is doing right now, there is always strace (there are countless cases when I had to merely run
    strace -fp <pid> 2>&1 |grep open
    to find out, what is missing or broken).

    --
    Contrary to the popular belief, there indeed is no God.
  110. Re:Think about this, LinSux zealot by Anonymous Coward · · Score: 0

    oh yes, i can't wait until microsoft finally decides to release an OS. surely the linux zealots will be crushed by such an awesome piece of software. oh wait...

  111. Silver Lining by strelitsa · · Score: 1

    If Microsoft ever offers a crapware detector, that will kill then delete two birds with one stone.

    --
    No mod points, no meta-moderating/Firehose/all the other free work Slashdot wants me to do.
  112. yea, right by bluyonder · · Score: 1

    Talk about the fox in the henhouse.

  113. MS Anti-Spyware by foQ · · Score: 1

    The MS program doesn't actually count the number of FILES it detects as spyware, but the number of SIGNATURES it detects. This means that one file can result in several detections. Ad-Aware does the same thing. To me the biggest advantage of the MS products is that, for now, it is free and has a resident program to deny access to malicious code. However, it seems like the stuff it detects is the same stuff that SpyBot's TeaTimer stops. I am not impressed with how far along the software is considering the time, because it is built on a well-established program. Just look in the task manager and you can see that they didn't bother to change the file name.

  114. Maybe because... by zwilliams07 · · Score: 1

    "Though still in beta, Microsoft AntiSpyware does an amazing job at detecting spyware by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot."

    Maybe because M$ puts most of that spyware there in the first place?

    / somewhere in the m$ mothership Bill cackles evilly as he drains his customer's back accounts without their knowledge

  115. MS product corrupted co-workers network stack by Anonymous Coward · · Score: 0

    A co-worker ran it on his system and afterwards his network stack is trashed. Last I heard he still did not have it working. To quote him "I thought if it was from Microsoft it would be safe to run"

    1. Re:MS product corrupted co-workers network stack by dpete4552 · · Score: 1

      He probably needs to run http://www.spychecker.com/program/winsockxpfix.htm l

      --
      http://www.archive.org/details/ThePowerOfNightmares
  116. I'm a psychic, here's my prediction: by kiddailey · · Score: 1


    1) Buy a quality third-party ad removal product
    2) ????^H^H^H^HBundle product and destroy competition
    3) Profit!

    ...

    4) Add useless features and security holes
    5) Profit! some more

    Couldn't resist ;)

  117. I don't like this. Not one bit. by Anonymous Coward · · Score: 0

    Rather than releasing band-aid hacks like a spyware scanner, Microsoft needs to start promoting safe and secure computing habits. Microsoft's code is getting more secure, but it doesn't mean anything if the user can accidentally infect themselves by simply visiting a website and being suckered into installing some random spyware app. Microsoft, more than anything, needs to start discouraging users from running as a superuser account all the time. This would greatly reduce the amount of damage a virus or worm could cause, and almost eliminate the spyware problem, all without needing to run Yet Another Program.

  118. Backdoors by saur2004 · · Score: 1
    Can anyone really say that they actually TRUST M$ *NOT TO BUILD IN BACKDOORS* for them and their partners, eventually into this product?

    I dont.

    1. Re:Backdoors by muck1969 · · Score: 1

      I'm thinking that M$ will likely add ActiveX features to this program due to feature requests from customers and focus groups.

      *cough* security hole *cough*

      --
      m.mmm..myyy ... sssissxxxtthh bbboottle offf mmmmmoouunnnttain ddeeewww.. in thhe pppassst ffffif
    2. Re:Backdoors by drsmithy · · Score: 1
      Can anyone really say that they actually TRUST M$ *NOT TO BUILD IN BACKDOORS* for them and their partners, eventually into this product?

      I trust them as much as I trust anyone else I acquire code from to run on my computer.

      I dont.

      Do you trust the people who wrote your BIOS ? How about the firmware in your NIC ?

    3. Re:Backdoors by saur2004 · · Score: 1
      I trust them as much as I trust anyone else I acquire code from to run on my computer.

      How about open source? I know I trust open source software far beyond any software that is closed just by its very nature.

      Do you trust the people who wrote your BIOS

      I wholeheartedly DO NOT trust BIOS makers, Escpecially Phoenix, after some of the stunts that they have pulled and are still pulling. Makes me glad that there is an open source BIOS project in the works. Same goes for NICs. My mother board and NICs are beginning to be considered old. You know what? Thats fine by me. They still serve me very well and will do everything I need them to do for the forseeable future. Ill bide my time until I see the open source firmware projects come of age.

  119. Your employer by siskbc · · Score: 1
    What we've seen where I work, with our antivirus/antispyware product is that if we miss something that AdAware of Spybot finds, then poeple say we are ineffective, and if we find something that they miss, people say we are generating false positives in order to frighten people into buying. (And then, when the thing we found that Spybot or AdAware missed actually causes problems, they say we put it there and start saying we pushing spyware).

    So I'm looking for a job, does Gator give you good benefits? ;)

    --

    -Looking for a job as a materials chemist or multivariat

  120. Of course it is good. by nlinecomputers · · Score: 1

    Why do you think they bought it? M$ will let it be good for short term and then kill it. Right now fucked up computers choked with spyware is driving people to buy new machines. Fix it too good and sales are hurt. Not addressing the problem is also harmful to M$ bottom line. This way they look like the hero while eventually perpetuating the problem.

    --
    Slashdot, home of supporters of free software, free music, and free speech.Except for Moderators that disagree with you.
  121. Bias by AndreySeven · · Score: 1
    Maybe you guys should give it a chance instead of ranting about how Microsoft is stupid.

    The software was bought by MS anyway, so it could have a chance of being good.

    --
    University of Washington

    Student

  122. Microsoft AntiSpyware forces you to install IE 6 by Brett+Glass · · Score: 4, Interesting

    I just attempted to install Microsoft AntiSpyware on a machine from which Internet Exploder had been mostly removed via the utility Win98 Lite. It refused to install, insisting upon the presence of Internet Exploder 6. The machine in question uses Mozilla, with which we're quite happy. It appears that Microsoft is tying yet another product to the use of Internet Exploder 6, probably in violation of the recent DoJ Consent Decree. Will the Bush Justice Department do anything?

  123. Microsoft is contributing to their demise by Bruha · · Score: 3, Interesting

    Linux will succeed becuase you have many groups contributing to computing some free some not so free but it creates a economy around it of sorts.

    Microsoft however cant stand for some reason to be the OS that great things are built on like Linux can and is being today. They try to take their OS and adapt and squeeze out what they consider competition. Then they take the products that other companies make to run on Windows such a Ad-Aware, Norton Antivirus, Lotus Notes and a myriad of other programs out there and try to build them into Windows. Netscape employeed people who designed, maintained, and supported their browser. Microsoft rolled out IE and tied it into their OS sparking a controversy that eventually landed it in court. Yes the consumer has suffered but what about those Netscape employees? Did Microsoft give them jobs making IE better and supporting it? Hardly those guys were muscled out of the marketplace. Now I'm sure they got jobs elsewhere but what and where are they doing things.

    This can go for any number of companies that are threatened becuase Microsoft refuses to make windows as good and secure as it can be they only want to add the next cool feature into their OS.

    Symantec, Mcaffee, Real, and many other companies employ many good people with ideas and not just the engineers and software hackers, there are secretaries, janitors, and guards that also are employeed and probably buy Windows. Once they lose their jobs becuase Microsoft muscled their company out of business then they probably wont be buying as many computer products anymore.

    Thus Microsoft sits there and kills their own bottom lines.

    Of course were all eventually damned in that robots and smart computers will replace our jobs. Just look at those poor bastards that are being replaced in the Toyota autoplants here soon. This will spread to all auto makers across the world and it will not stop there. Productivity increases due to these robots will put strain initally on supply lines becusae those humans cant keep up and then one company will pick up the slack by having robots do that portion of the work and other companies will have to do so to keep up.

    From there it's basically a self feeding reaction that eventually will nullify every job we have or can move to in the next 50-100 years.

    Oh and governments would step up to help you?

  124. That wasn't Dutch porn by aardvarko · · Score: 1

    That "Dutch porn dialer" was cat.exe, a Win32 port of the Unix utility "cat". Hope you don't use shell scripts!

  125. Linux support? by dogfull · · Score: 1

    'Nautilus has no viewer capable of viewing MicrosoftAntiSpyware.exe'
    *grin* :-)

    Btw, microsoft's certificate is invalid, according to FF.

    Talkin' about support, Win 98, 98SE and ME are all unsupported, and they are still being used on large scale. A bit of an arrogant 'go to hell' mentality if you ask me. There is no real technical reason why it can't work at a 9x system.

    Dissapointing...

  126. System File Checker by runamok1 · · Score: 2, Interesting

    It used to be pretty easy to get rid of spyware.

    0. Get all Windows updates, patches, etc.
    1. Get both programs (Spybot and Adaware)
    2. Update both via downloading the newest signature files.
    3. Reboot in safe mode. (press F8, etc.)
    4. Run both programs.
    5. Optionally open msconfig (not available in Win2K) and/or regedit and check to see what is still running and track down each item at http://www.pacs-portal.co.uk/startup_index.htm or similar.
    6. Reboot.
    7. Optionally take a look to see if any items you removed in step 5 recreate themselves.
    8. Optionally install firefox, etc.

    Heh heh. Re-reading this makes it seem not so easy, but everything is easy when you know how.

    I have noticed newer spyware variations doing two VERY BAD THINGS.
    1. Preventing adaware, spybot, norton, etc. from working. Via the hosts file or otherwise.
    2. Modifying system files so that they can not be removed. I turned one friend's computer (running XP) into a paperweight. Because the program was manipulating winlogon.exe. Adaware removed it and the computer would logout every time you tried to logon. I had to extract the file from an XP boot disk.

    OK. So the point of this post was that since Microsoft knows their files the best, one would assume they could check file checksums and file dates, etc. and prevent these sorts of shenanigans.

    They have had a program called System File Checker sfc.exe since the windows 98 days. I always thought an adaware program combined with this would be nice.

    Although I have never figured out how these spyware programs can circumvent "system file protection" when it is a royal pain for US to do so.

    1. Re:System File Checker by ArtStone · · Score: 1

      An important thing it did on one of my issues - was it detected a copy inside a recovery point - and went into the recovery point and cleaned it up there as well. Most of the instructions from virus companies tell you to turn off and turn back on restore points (which deletes the existing recovery points). If it truly can clean up the "sacred" areas that mere non-Microsoft programs can't touch, that's an interesting feature.

      --
      Final 2006 "Proof of Global Warming" US Hurricane Count -> 0
  127. Who sponsored the comparison? by necromcr · · Score: 0

    ..just guessing..

    Usually results like this are hatches only in one nest.

    --
    No more I say.
  128. Even better by PortWineBoy · · Score: 2, Funny

    I got an ad saying my computer may be infected with spyware...but then it switched to some girl in panties so all was okay.

    --

    this sig deleted by another sig

  129. Possibility of an unfair advantage? by OwlWhacker · · Score: 1

    Though still in beta, Microsoft AntiSpyware does an amazing job at detecting spyware by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot.

    I'm pretty sure that people get tired of anti-Microsoft types bashing the beast, but I still believe that there's good reason to question this - given Microsoft's past actions.

    One has to ask the question:

    Is this performance because of knowledge Microsoft has, that other companies don't have access to?

    Was the software just re-branded, and the software was this good before Microsoft got its claws on it; or did Microsoft tweak it in a way that only Microsoft would know how to?

    We all know about APIs, and how in the past Microsoft products have outperformed those of the competition due to 'hidden information'.

    Could Microsoft's understanding of the inner-workings of Windows give it an unfair advantage?

  130. But MS has a completely different business model.. by bobdotorg · · Score: 1

    I know that the two business plans are hard to distinguish at first glance, but be patient and eventually you'll see the differences.

    Microsoft has a huge advantage here.

    Your typical Slashdot company's business model, call it TinFoilHatCo:

    Step 1.) create / release spyware
    Step 2.) create spyware removal
    Step 3.) ????
    Step 4.) Profit (??)

    Microsoft:
    Step 1) create / release buggy OS
    Step 2) Profit.
    Step 3) Profit.
    Step 4) Profit.
    Step 5) Profit.
    Step 6) Dance like a monkey
    Step 7) Profit.
    Step 8) Profit.
    Step 9) Profit.
    Step 10) Update buggy OS in a way similar to adding a third story to a building with a foundation designed for one story. Leave many holes for spyware.
    Step 11) Profit
    Step 12) Profit
    Step 13) Profit
    Step 14) Profit
    Step 15) Profit
    Step 16) Claim to be a hero by releasing an 'Free' piece of software that only cleans up half the problems you created in the first place.
    Step 17) Profit
    Step 18) Profit
    Step 19) Profit
    Step 20) Goto step 1

    --
    __ Someday, but not this morning, I'll finally learn to use the preview button.
  131. Reporting more items doesn't mean it's better by Brett+Glass · · Score: 1

    One flaw in the review cited in the article above that it compares the products by noting the number of items they reported. By this metric, the best antispyware program would be one that reported each bit of each spyware file or registry entry individually..... "160 million bits of PUS [Microsoft's own acronym, which stands for "potentially undesirable software] found!" Needless to say, it's better to compare apples to apples.

  132. Get rid of admin accounts by Anonymous Coward · · Score: 0

    This a band-aid approach to the real problem. That being home users login by default with Admin access. Users should use a non-Admin account that is unable to modify the OS, drivers and security software. Also, the c:\windows folder should be off-limits for adding or changing files except for Microsoft and security software.

  133. It's trivial to generate false positives... by John3 · · Score: 4, Insightful

    How about attaching your claria.exe text file to all your outgoing emails, sending your emails out with a subject of "I'm not selling Viagra , Cialis, or Rolex Watches!!!!" and see what kind of false positives you get from anti-spam and anti-virus filters. It's not a precise science, so I'd expect false positives when you make a concious attempt to fool the program.

    That's not to say they can't make it more accurate, but they may be trading off accuracy for speed (filename match rather than file signature). If I was designing it I wouldn't be real concerned with trying to correctly deal with bored users trying to fool our program by renaming their important documents to "claria.exe".

    --
    "We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
    1. Re:It's trivial to generate false positives... by angrist · · Score: 1

      Totally valid, but what happens when the next worm decides to rename important files "claria.exe" or whatever else it pleases, and they get deleted?

    2. Re:It's trivial to generate false positives... by John3 · · Score: 1

      Yeah, those sneaky worm writers would never think to delete the important files themselves...that's exactly what we'd expect them to do. :-)

      If the user has a worm infected PC then the adware is the least of his/her worries.

      --
      "We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
    3. Re:It's trivial to generate false positives... by Anonymous Coward · · Score: 0

      I happen to have a family member who works in the medical industry, where they often email coworkers about drugs and such.

      Apparently many emails get caught in the SPAM software...

    4. Re:It's trivial to generate false positives... by polysylabic+psudonym · · Score: 1

      So what happens when I make some idiot VB exe for my girlfriend Claria and name it after her?

      Sure, use filename matching as one way to quickly search, but before shouting that it's infected, how's about checking it first Microsoft?

  134. So,,, by SharpFang · · Score: 1

    AdAware detects well over 50% adware out there. Microsoft beats them by at least twice the amount... how is it possible?

    "The suspect files are known spyware from a known spyware companies:"
    SPY._ff_mz (firefox.exe)
    SPY._mz_mz (mozilla.exe)
    SPY._gn_gmp (gimp.exe)

    "The following software is extreme security risk spyware:"
    SPY._uv_vnc (vncserver.exe)
    SPY._pt_pt (putty.exe)

    "The following image files on your harddrive contain dangerous spyware:"
    SPY._ko_lnx (vmlinuz in knoppix.iso)
    SPY._gn_bsh (bash in knoppix.iso)
    .... and so on...

    --
    45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  135. Crutch? by Anonymous Coward · · Score: 0, Funny

    christ on a crutch

    Funny, I always thought Christ was a crutch.

    1. Re:Crutch? by Anonymous Coward · · Score: 0

      Damn, if I had mod points, you'd have been modded funny. Flamebait and offtopic, but certainly more funny than those.

  136. Microsoftanator by zx2c4 · · Score: 0

    SpyNet?! Sounds more like SkyNet. The "intelligent" Microsoft product will soon learn to detect spyware on it's own using AI, eventually leading towards Microsoft Product Self Awareness.

    --
    ZX2C4
  137. Oh, the irony by brianerst · · Score: 1
    I downloaded the MS/Giant Antispyware application to my machine at work. Cranked up the program, covered my eyes while clicking OK to the EULA and let the thing run.

    I nearly choked when it almost immediately popped up a window, the contents of which were on the order of "Holy Sh*T! You've got Windows Messenger on your machine! Everyone knows that piece of crap will cause you no end of grief. Can I delete it for you now?" Someone on the "change everything from 'Giant' to 'Microsoft'" team is going to get a stern lecture from Bill and Steve soon...

    That said, I was fairly impressed with the software, but considering Giant won a recent antispy test, I'm not surprised. Slick package and has caught a few things Spybot S&D and AdAware missed - although it doesn't appear to find any cookies (considering I use Firefox in a pretty strict constrained way, maybe there just weren't any).

    1. Re:Oh, the irony by ArtStone · · Score: 1

      Or perhaps the anti-spyware program only looks for cookies in the folder that MSIE uses. After all, if you used a non-MSIE browser, Microsoft isn't going to actually protect you from the risks that introduces, are they?

      --
      Final 2006 "Proof of Global Warming" US Hurricane Count -> 0
  138. Unnecessary app, fix the autostart instead! by tomas.bjornerback · · Score: 2, Interesting

    Another useless application...

    If Windows were to ASK the user during startup what services and programs to autostart (except for the well known and checksummed original, MS, services), most of the spyware wouldn't even start!

    Some will say that users will answer "yes, start that too" to all programs, but that's mostly depending on the GUI used for the asking process:

    * Perhaps all processes/services should by default not start automatically

    * Each have a (short) warning text.

    * Only one place for all autostarts! Not HKLM, HKCU, Startup, ...

    * Figure out more stuff here yerselves... I don't work at MS and I don't want to invent stuff for them for free! :)

    Since most users believe that they need to buy a new computer because the old one is slow, but it's due to spyware (are Intel/MS supporting the spyware creators to increase sales?), which clings to the OS like a spider in all of it's autostart places...

    --

    I have 1 Gbps Internet access@home

  139. Microsoft isn't the biggest for nothing by WebCowboy · · Score: 1

    Of course a Microsoft product can be good...

    BillG always buys the best he can get...

    Just be patient and give them some time though. Software is complex. If you want the calibre of software MS is more commonly known for, it'll take a team of hundreds of MS developers two or three new releases to really foul it up during the "product integration" process. I mean, look at Hotmail--it took them a couple years after they bought it to introduce service disruptions on the scale only Microsoft could achieve.

  140. Ass-aware and Ass-bot Search and Destroy by Anonymous Coward · · Score: 0

    are better anyway.

    1. Re:Ass-aware and Ass-bot Search and Destroy by Anonymous Coward · · Score: 0

      Why would I want software that was aware of donkeys?

      The word you're looking for is "arse".

  141. Better add Trojan Hunter to the list by Gary+Destruction · · Score: 1

    I worked on a system that was infested with spyware and adware. I ran both Spybot and Adaware on it. I still wasn't certain that the worst was gone, so I downloaded Trojan Hunter and there were numerous trojans found on the system. They were listed as adware trojans.

  142. EDonkey by TheoMurpse · · Score: 1

    It labeled emule2k spyware. So I guess open source is spyware now?

  143. hmmmmm by Oktober+Sunset · · Score: 1

    I went to the activex controls bit and it came up this: Microsoft Windows Update Control Engine This is an unknown ActiveX File path: C:\WINDOWS\System32\iuengine.dll Description: Windows Update Control Engine Publisher: Microsoft Corporation seem microsoft can't recognise thier own software as safe.

  144. Not very good by TuomasK · · Score: 1

    It can't be very good, it didn't find any spyware on my Windows 2000 computer :)

    --
    The truth or interpretation..
  145. Aimed at the masses by Durzel · · Score: 2, Interesting

    To be fair to Microsoft, their software picked up things on my PC which I knew were "dubious", but I knew were safe (e.g. Kazaa Lite as opposed to Kazaa, etc).

    It's obvious that this software is aimed towards the uninformed masses in the same way SP2. I'd wager that most non-techie people barely know what spyware is, let alone how to find spyware-free "lite" versions of software, assuming they exist.

    Also, the real time agent kicks serious ass. I'm amazed that people have even tried to criticise that (simply because its MS) by saying "oh great, yet another TSR program to run in the background, way to go M$!". When I installed the latest Sun JVM it informed me that a Browser Helper Object was installed and that it was "safe". A nice touch.

    In other news, how come there hasn't been a front page story on these serious flaws in Mozilla and Firefox ? Double standards? I'm all for bashing MS when appropriate but lauding every single IE flaw with a seperate story and ignoring something like this doesn't exactly paint the site as unbiased.

    1. Re:Aimed at the masses by Durzel · · Score: 1

      Ignore the last paragraph, just found the article. Boy do I look stupid!

  146. Deja-vu by gunpowda · · Score: 1

    This is essentially old news. Microsoft's Anti-Spyware software is just Giant's rebranded.

  147. So the grade for all 3 products would be F by shaitand · · Score: 1

    All three failed to detect and remove the spyware on the system. This is particularly depressing when you realize that nothing uncommon was installed on the test system, this is just the crap everyone and their sister is infected with.

  148. Windows Installer by dapyx · · Score: 1
    I hate it!

    Am I the only one that considers this piece of software the worst implemented software of Microsoft ?

    I am yet to understand WHY anybody (excluding Microsoft) ever uses it, when there are free and open-source alternatives.

    --
    I'm sorry, the number you have dialed is an imaginary number. Please rotate your phone 90 degrees and dial again.
  149. spybot/adaware combo still works better for me... by mikenb · · Score: 2, Interesting

    I'm cleaning up a clients laptop, and decided to use the new microsoft spyware beta. I ran it first:

    5 infected files
    1 threat (real vnc)

    Then I ran spybot after running the microsoft program:

    12 files found
    including valueclick
    advertising.com
    avenue a, inc
    double click
    DSO exploit
    fastclick
    mediaplex

    and finally I ran adaware:

    25 critical objects found

    All of these programs had the signatures updated. Spybot and adaware collectively caught 37 more files than the microsoft beta did...

    But it is still in beta I guess.

    --
    "Sometimes the most intelligent statement is the one that is left unsaid"
  150. Warning: Real-Time option reenables itself by PatientZero · · Score: 5, Interesting
    I tested it out too on my home machine, and the only thing it found was the Download Manager for Gamespot (based on Kontiki). Thank you Mozilla. :)

    In any case, I uncheked the "install real time protection agents" option during installation, but after running the scan I ran through the options to see what other features it had. Surprise, RTP was enabled. Oh the irony of MS AntiSpyware behaving in the same shady fashion as Spyware apps. ;)

    So if you do install it but don't want the RTP agents, make sure you hit up the options before quitting.

    --
    Freedom to fear. Freedom from thought. Freedom to kill.
    I guess the War on Terror really is about freedom!
    1. Re:Warning: Real-Time option reenables itself by Anonymous Coward · · Score: 0

      In any case, I uncheked the "install real time protection agents" option during installation, but after running the scan I ran through the options to see what other features it had. Surprise, RTP was enabled

      Strange, my copy said beta 1, I'm guessing yours was the final release sent thru a time portal.

      FILE A FUCKING BUG REPORT.

    2. Re:Warning: Real-Time option reenables itself by danheretic · · Score: 1
      Oh the irony of MS AntiSpyware behaving in the same shady fashion as Spyware apps.
      Before you assume the worst, perhaps you should report it to them as a bug, since this is a beta version of the software?
  151. Behaviour confirmed. by khasim · · Score: 2, Interesting

    I just downloaded it and ran it and it did the same thing to me. Just about everything was re-enabled after I specifically un-checked it during the install.

    It also made my PC run slower than before.

    It found VNC as "spyware", but it set the "remove/ignore" option to "ignore" so that wasn't so bad.

    Other than that, it didn't find anything. But I run FireFox with adblock and both spybot and ad-aware so I wasn't expecting anything to show up.

    I've uninstalled Microsoft's anti-spyware and it left the directory and log files on my PC without giving me any uninstall warnings.

    1. Re:Behaviour confirmed. by Vancorps · · Score: 2, Interesting
      VNC is commonly used as a trojan so that behavior makes sense.

      The rest is typical with microsoft.

      I would be curious of an anti-spyware app could be written to run on a network, since profiles are stored on a central server and that server is never used to browse the Internet it would be the perfect environment to clean spyware from all the profiles out there.

      It would also be nice if you could script the app so for instance, your organization uses Alexa or Viewpoint you could enable it to prevent apps from breaking while disabling or removing all other spyware.

    2. Re:Behaviour confirmed. by drsmithy · · Score: 1
      It would also be nice if you could script the app so for instance, your organization uses Alexa or Viewpoint you could enable it to prevent apps from breaking while disabling or removing all other spyware.

      You can pretty much guarantee the release version will be centrally configurable and manageable via GPOs (although perhaps only in a paid-for "pro" version).

    3. Re:Behaviour confirmed. by Breakfast+Pants · · Score: 1

      Windows Remote Desktop is very commonly used as a trojan as well, the trojan you download enables it and sets a password. Does Microsoft remove Windows Remote Desktop? No. The next release will uninstall Firefox and leave IE.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
  152. Typiclal Macro$loth by Anonymous Coward · · Score: 0

    It's typical Macro$loth to extort money out of it's victims^H^H^H^H^H^H^Hcustomers by making them subscribe to a "service" that covers security holes in their products rathar than fix the problems in the first place.

    You know what else this tells me? It tells me that Macro$loth know they will never be able to security the pile of crap they foist of on the public as an operating system.

  153. Mod parent down...! by mAx7 · · Score: 1

    I did not experience this behavior, nor did several other readers. Please mod parent down.

  154. Oh well by Queen_of_Tetris · · Score: 1

    It came, it scanned, it erased, it crashed.

    --
    No synthesizers
  155. There's no such thing... by KMSelf · · Score: 1

    ...as a free lunch.

    ...but where's the 'e' come from?

    --

    What part of "gestalt" don't you understand?

    1. Re:There's no such thing... by Homology · · Score: 1

      Erh, I spelled that wrong. There shouldn't be any letter e. I wonder how many /.'ers has read the book by Heinlein, or even know what TANSTAAFL stands for.

  156. Re:Think about this, LinSux zealot by randallpowell · · Score: 0

    If Microsoft attacked a problem head on, Gates and Ballmer would be unemployed. Covering up a problem with another program doesn't solve the problem of sloppy code since they have contracts to PC makers to sell Windows on every PC. No competition = monopoly = variant of communism.

  157. Umm... don't think so... by borg1238 · · Score: 2, Informative

    Sorry, didn't do this to me either. Homepage on IE is still google, and the hosts file appears to have been left alone.

    So all I have to to is make an unsubstantiated post about a M$ program doing evil things to my machine and I get modded up? Oh yeah... this is Slashdot.

  158. RE: keep the politics out, please.... by King_TJ · · Score: 1, Insightful

    I'd agree with the first part of your point.... but when you go on the political rant by saying "you'll always be sorry the Democrats didn't stay in power long enough to break Microsoft up" - you lose me.

    Why can't people get it through their heads that Microsoft's problems are part of the natural course of free-market economics? They didn't start out a huge business, placing their OS on everyone's computer. They *earned* that position through superior marketing and business deals. Now that they've become so huge, they're running into the problems that ALWAYS plague the "top dog" in a given market. They start slipping... failing to innovate, and resort to buyouts of other people's products. The mistakes they made years ago (bugs in products, security holes, etc.) come back to haunt them 10x over, because their products are in use by so many people now. The old "too many cooks spoil the soup" addage comes into play, because too many hands are involved in the production/updates of their software products.

    Eventually, Microsoft will become a recipe for failure from the *inside* - and someone with more competitive edge will emerge as a new market leader. There's no need for Democrats to break this business up, and frankly, suggesting it's the "best way" to handle the problems they've caused seems truly un-American to me.

  159. Kazaa Lite is spyware? by Anonymous Coward · · Score: 0

    Apparently it can't tell the difference between Kazaa and Kazaa Lite.

  160. 98 by rinkjustice · · Score: 1

    Though still in beta, Microsoft AntiSpyware does an amazing job at detecting spyware by finding twice as many infected files as Ad-Aware and nearly three times as SpyBot.

    Yeah, but AntiSpyware doesn't work on 98/se, Ad-Aware and SpyBot do. I and a whole lotta other people are going to hold off buying XP as long as we can.

  161. IE vs Netscape by Mark_MF-WN · · Score: 1

    Holy crap, what world do YOU live in? Netscape may have started off as the superior product, but it degenerated into one of the worst pieces of software into deployed. Until the Mozilla project got going, IE was far more usable than Netscape.

    1. Re:IE vs Netscape by shaitand · · Score: 1

      Netscape - Pros
      Had a decent interface.
      Excellent plugin architecture.
      Supported advanced Javascript
      Supported standards compliant web technologies
      Total page render time as fast as competitors.
      Avoided msdhtml, msjavascript/jscript, VBScript, ActiveX.

      Netscape - Cons
      Code was garbage.
      In the end they bloated the crap out of it (we'll call this aoldom and it no longer counts as Netscape from the moment aol bid on it).

      IE - Pros
      Decent enough interface.
      Bundled with the OS and handy.
      right-click view source opens in text editor.

      IE - Cons
      Code is garbage.
      msdhtml, msjavascript, msjscript, activex, vbscript, etc
      Crap plugin architecture.

      I dunno, neither is sounding especially hot to me. But if I have to pick one it's the one with the most pros and that is Netscape pre-aol (post-aol doesn't count, only bloat was added then).

    2. Re:IE vs Netscape by osssmkatz · · Score: 1

      I'm a little confused. The bloat AOL added was Netscape 6.0, which although it required a lot of RAM for those days (my fsther ran it fine with 256MB); it was much more stable than Netscape 4.x. Back before this release, you could download Netscape Navigator 4.08, which was fast to launch and was only the browser. Netscape 6.0 was just a prepackaged and branded release of the Mozilla Suite. So blame Mozilla.org if you want to complain about "post-AOL bloat".

    3. Re:IE vs Netscape by Mark_MF-WN · · Score: 1

      Mozilla certainly did start off on the wrong foot. But they got their act together in a big way -- Gecko is now an awesome rendering engine, with only a single peer in the form of KHTML.

  162. I get to pay, again, for Microsoft mistakes? by rczik · · Score: 1

    So I get to pay Microsoft for software that fixes security problems that they created by not fixing their OS to begin with?

    I think not.

    r

  163. MsgPlus by tyleroar · · Score: 0

    It doesn't seem to like MsgPlus. I know MsgPlus has some sort of spyware it likes to install, but it's completely optional. And I didn't install the spyware, and it didn't detect it, but it still detects MsgPlus as spyware. Is this just because MsgPlus is licensed?

    --
    Portland, North Dakota Puppies
  164. Pest Patrol Corporate by Anonymous Coward · · Score: 0

    Pest Patrol is by and far the best out there, and wasn't even included..what a bunch or turds...
    They think that the number of gotchyas will count, intead of what's really out there...
    Take it from a tech with 200 private clients...
    Pest patrol, sybot+spyware blaster.

    We haven't gotten screwed yet...never will either.
    Nuff said..

  165. Monopoly abuse? by Andy_R · · Score: 1

    I wonder if Microsoft are illegally leveraging their OS monopoly here... after all it's only Microsoft who can send an internal memo to all staff saying "hey, did any of you guys stick something called grstblbflo.dll in Windows, and if so, what (if anything) is it doing?"

    --
    A pizza of radius z and thickness a has a volume of pi z z a
  166. VX2 Kicks Anti-SpyWare Ass :( by Anonymous Coward · · Score: 0

    Unfortunately it seems that NONE of these software can remove VX2 :( :(

    1. Re:VX2 Kicks Anti-SpyWare Ass :( by detlev409 · · Score: 2, Informative

      I've had some success with the new updates for adaware. I've had rather underwhelming results from the VX2 plugin, but a fully updated adaware installed has removed VX2 on a number of machines in the last few days. I can't specify what strain of VX2 was had in all cases, though, so take it for what it's worth.

      --
      Howdy.
  167. Re: keep the politics out, please.... by diamondsw · · Score: 1

    Ahem, has someone forgotten the reason for the antitrust suit? Anti-competitive tying and such? Have you forgotten the conviction? And then, just as the punishment phase was to begin, a new administration came in and told the DOJ "drop it".

    Your other points are valid, but this was very obviously a political decision to drop the punishment of illegal use of monopoly power.

    --
    I don't know what kind of crack I was on, but I suspect it was decaf.
  168. Its a matter of trust. by Anonymous Coward · · Score: 0

    It is all a matter of trust. We don't have access to the source code so we have to trust the provider or not use it. Rockerfeller said you can trust a man to be himself. I trust Microsoft to be itself; a greedy monopolist that will stop at nothing, legal or illegal, to advance itself and its control.

    I use Microsoft products as little as I can. And older products and versions rather than newer.

    One fish to another, "Look its a REAL worm this time! Not like the last fake one with a hook in it." Other fish "Then what's the line back to the fisherman for?"

    There is no doubt Microsoft is providing this as a fishhook for computer users. If you think you're smart enough not to get OWNED, well, so does every fish that was ever caught.

  169. MS anti spyware takes too much memory by xot · · Score: 1

    i ran ms anti spyware on 2.4ghz p4,256mb ram and it had trouble handling it.Besides the download itself is 6mb compared to the near 2-3mb of adware n spybot.
    If you run it on a badly infected slow pc, wonder what will happen to the poor machine.It will die of the anti spyware instead of the spyware. :-p

    --
    Lord of the Binges.
  170. Flexbeta.com by Anonymous Coward · · Score: 0

    Did anyone else notice the lovely bubbly MS icons in the top-right of Flexbeta.net's home page? Seems to me like the review could have been biased...

  171. More like: by Anonymous Coward · · Score: 0

    MS leaves fixes to 3rd party. WAAAA!! why doesn't ms fix their own shit

    MS releases patches to fix their product. WAAA!!! this patch broke my already broken system.

    Instead of fixing Internet Explorer for all it's OS's and untangling it from every part of the OS, 3rd parties are left to create tools to remove malicious apps that exploit IE's poor design.

    MS modifies IE but only for XP, not 2K, 9x or any other variant. Wahhh!!!! I only bought Win2K a year or two ago, yet why won't they fix their crappy browser?

    Instead of fixing the problem at it's root (ie fixing exploits, blocking popups and disabling ActiveX, untangling IE from OS), MS buy a crappy Spyware vendor and sell their shoddy software to suffering MS customers as if it was created by MS. Even when the FREE alternatives are better products.

    Conclusion:
    MS win at every level. They don't have to fix their crap, and they sell a band-aid to customers for profit!!??!!!

  172. Re: keep the politics out, please.... by runderwo · · Score: 1
    I always thought the punishment suggestions were dumb too. Damages? Please. They have so much cash it would only hurt for that quarter. Plus they would just donate an "equivalent value" of Microsoft software to schools, ironically furthering their proprietary lock-in. Breakup? Yay, now we have four separate monopolies.

    I always thought the best solution would be to require them to open their secret file formats, APIs, and network protocols, and invalidate their software patents. The market would take care of the rest from that point.

  173. ms says vnc is spyware....... by Anonymous Coward · · Score: 0

    after running the program on my laptop it came back and told me that vnc was installed, and it was a potential risk. it went on to say that if it was knowingly installed or installed by an administrator it was probably ok.

    i think it went a bit far, as vnc is not installed as a service and is otherwise not running.

  174. arghhh by TCP+Pimp · · Score: 3, Funny

    Yeah works great, I ran it on a client's PC and it uninstalled Windows. :)

  175. opensource app detected as spyware by zwei2stein · · Score: 1

    read
    http://forum.emule-project.net/index.php?sho wtopic =68395

    while its seems like bug or wrong item in db, its strange how eMule could be indenfified as edonkey2000.

    --
    -- Technology for the sake of technology is as pathetic as eschewing technology because it's technology.
  176. Re:spybot/adaware combo still works better for me. by blowdart · · Score: 1

    Yea, but adaware and spybot both complain that cookies are spyware, and they complain about MRU lists as well depending on setup. That's somewhat debatable. How many of the 37 files were cookies?

  177. The hand-stuck-in-the-door theory. by one_n_only_wildcat · · Score: 1

    Isn't this like giving painkillers to a man with his hand stuck in the door. How about creating a simpler, less vulnerable product in the first place? It's like an automaker claiming to have great customer service because they repair new vehicles for free, when they could have just produced quality vehicles that do not need repairs.

    --
    "Something unknown is doing we don't know what." - Sir Arthur Eddington
    1. Re:The hand-stuck-in-the-door theory. by apdt · · Score: 1

      I think The Register summed it up best...

      It's like selling people a toaster that could catch fire at any time, but then offering a free fire extinguisher to put out those fires as required.

      --
      I lay awake last night wondering where the sun had gone, then it dawned on me.
  178. Re: keep the politics out, please.... by fm6 · · Score: 4, Interesting
    ... but when you go on the political rant by saying "you'll always be sorry the Democrats didn't stay in power long enough to break Microsoft up" - you lose me.
    I think you need to have more than a passing reference to a particular political party before it counts as a "political rant". And it's not as if I'm a big fan of the Demos anyway. But that's a secondary issue. Let me refresh your memory: back in 2000, MS was defending itself in antitrust court, and doing a really poor job of it. At one point they actually got caught fabricating evidence. Then the Demos left office, and a new pro-business AG simply dropped the case.

    Whether you think the anti-trust case was a good idea or a bad one, you have to concede that Microsoft might well have been broken up by now if Al Gore had won the election. Pointing out that fact doesn't make me a partisan.

    Why can't people get it through their heads that Microsoft's problems are part of the natural course of free-market economics? They didn't start out a huge business, placing their OS on everyone's computer. They *earned* that position through superior marketing and business deals.
    Again, your memory needs refreshing. MS's dominance of the OS market is pretty much an accident. That actually got into the business against their own will. They wanted to sell development tools for the new IBM PC, but that meant that IBM had to adopt an OS those tools would run on. Which is why they steered IBM to CP/M. When that fell through, they hurriedly licensed a CP/M clone from Seattle Computer Products, which became the basis for MS-DOS.

    MS-DOS is one of the biggest abortions since the rise of modern technologies (find me a single OS expert who will give it high marks). Yet its very flaws created such a high level of lockin with the PC platform itself -- which was also pretty flawed. Since compatibility soon became the name of the game, clone computers had to reproduce all of IBMs mistakes. And since their biggest mistake was choosing MS-DOS, computer makers ended up paying a tithe to Bill for every box they sold.

    But even if you were correct, and Bill achieved his success by technical brilliance and plain good business -- so what? He got his reward when he became the richest dude on the planet. He did not earn the right to destroy the very marketplace that made him rich. Microsoft's role in the current marketplace is bad for all of us -- including Microsoft. Calling me ideological names isn't going to change that.

  179. VNC is evil!!!!111 by Venner · · Score: 4, Interesting
    Some of what it detects are definitely false positives. On my machine, it claimed to find registry traces of eDonkey and Grokster, which it says contain adware. But the keys it found were put there by Shareaza, a non-spyware open-source client.
    Yep. Same here. It decided that VNC was obviously an attempt to remotely hijack my computer.

    It also felt the need to alter my hosts file for me. It didn't like the fact that I had "ads.msn.com" pointing to 127.0.0.1 (as well as over 100 other ad domains; the only one it cared about was MSN!)
    --
    A preposition is a terrible thing to end a sentence with.
    1. Re:VNC is evil!!!!111 by Johnny+Hardcore · · Score: 1
      Yep. Same here. It decided that VNC was obviously an attempt to remotely hijack my computer.

      It detected RealVNC as potential spyware, yes. But notice the default action for it is "Ignore", and also mentions that if it's only a potential threat if you DIDN'T install it.

      Sounds reasonable to me.
    2. Re:VNC is evil!!!!111 by Venner · · Score: 1

      UltraVNC's default action was 'quarantine', thank you very much.

      --
      A preposition is a terrible thing to end a sentence with.
  180. Has anyone verified the findings??? by 3seas · · Score: 1

    I mean how does anyone know MS is not simply playing the numbers game, again?

    What I mean by verification of the findings is that of the anti-spyware results. Are the findings really actually items of spyware nature?

    Or is MS simply counting any competing product to their kingdom?

  181. No surprise, really by MigLar2000 · · Score: 2, Insightful

    It's no surprise that Microsoft is better at detecting spyware, most of it is their fault.

    --

    -----
    Without a God, life is only a matter of opinion.
    --Douglas Adams
  182. Not everything it is cracked up to be PLEASE READ by Anonymous Coward · · Score: 0

    It is able to detect twice or three times as much as AdAware/Spybot because it includes things that are not spyware or malware. For example, it included all of the files in Flashget even though AdAware/Spybot already cleaned off the adware it installed, and also TightVNC, which has no spyware in it.

    In addition, it detected leftover files (.ini and uninstall.exe) from WhenU and another spyware app that had already been cleaned out by AdAware/Spybot.

    Suffice it to say I'm not all that impressed. At least AdAware and Spybot use surgical precision in order to keep from fucking up your system. MS's anti-spyware seems to just delete everything it sees, with prejudice.

    However, if I had wanted to remove leftovers, then this would be the perfect tool to use. I'll probably scan with it occasionally, but I'm going to be very careful to read what it is doing. And, I think most people should take its results with a grain of salt or two.

    Having said that, I think that the SpyNet is a great idea. However, I'm very wary about running Agents in the background, especially the "Hundreds and hundreds" it claims to install.

  183. Re: keep the politics out, please.... by ScrewMaster · · Score: 1

    The Sherman Antitrust Act was passed to give the government the power to halt corporate activities that were, like Microsoft's, unAmerican in nature and impossible to handle by market forces or any other means. True competition is the essence of a capitalist economy, but Microsoft is the antithesis of competition. Sure, no large corporation lasts forever: Microsoft is no exception and will eventually fall of its' own accord. That will take some time though, so the question is really whether this company should be allowed to continue its illegal activities until that happens (doing a fair amount of damage along the way.) The antitrust lawsuit instituted by the Justice Department was well-conceived, and never forget that Microsoft was adjudged an illegal monopoly. Furthermore, that verdict was upheld on appeal. We'll never know whether or not rescinding Judge Jackson's breakup order was the right thing for the appeals court do have done (and remember, they didn't reverse that decision on the facts of the case, only because there was "an appearance of impropriety" in Judge Jackon's interaction with the press.) Microsoft has done more to hold back the promise of the personal computer revolution than any other single organization, and certainly has earned penalties far in excess of those few that were actually applied. Are Microsoft's marketing and business strategies brilliant? Certainly. Are they legitimate? According to the legal system, no.

    --
    The higher the technology, the sharper that two-edged sword.
  184. This is some REALLY beta stuff by g051051 · · Score: 1

    I tried it, and it identified one spyware program...incorrectly.

    It tagged the C:\WINDOWS\lhsp\tv\tvenuax.dll file as a spyware program, even though it is really the "Lernout & Hauspie TruVoice American English TTS Engine Wrapper", published by Microsoft! If I had just accepted it's recommendation, it would have caused a problem on my system.

  185. What did it do? by hthb · · Score: 1

    Format itself?

    --
    Visit www.doc2pdf.net for a free, no need to register, .doc to .pdf file conversion.
  186. Agree by Mark_MF-WN · · Score: 1

    Let's just agree that's a very good thing that we've moved into an age of superior browser codebases like KHTML and Gecko.

  187. Readable version by Anonymous Coward · · Score: 0
  188. Certificate? by Anonymous Coward · · Score: 0

    I clicked on the link to M$ AntiSpyware and Firefox told me that www.microsoft.com is not a trusted site. Hmmmmmm.........

  189. Re:False positives..VNC Before M$ by trancemission · · Score: 1

    Intersting, repoted VNC on mine aswell. I know my machine is clean [well....] but was wondering if anybody is daring running remote assistance and if that is detected as 'spyware/hacing tool'? Also was the VNC signature in the db before microsoft bought their souls?

  190. Alternative Software by Archon-X · · Score: 3, Interesting

    I stopped using SpyBot & Adaware a long time ago.
    They're most admirable projects, however, neither are comprehensive.
    Often times, you have to run both to try to remove something, and there is still spyware installed.
    Neither offers a preemptive system either (filtering web, watching the registry etc)

    The *most* comprehensive program I have found is webroot SpySweeper.

    It is incredibly thorough, has staff dedicated to finding new spyware strains, the ability to report suspicious files, the works.

  191. Re:Microsoft AntiSpyware forces you to install IE by Anonymous Coward · · Score: 0

    Will the Bush Justice Department do anything?

    No.

  192. Ad-Aware SE does too by Anonymous Coward · · Score: 0

    I tried copying an Ad-Aware SE installtion from another machine onto a Windows 95 box that has IE3 (since Ad-Aware SE refuses to install on 95) and it "requires" several dlls from IE4 and up. For this very reason alone, I have abandoned Ad-Aware SE. I will not bother to go beyond Ad-Aware 6.0 since I despise IE4 and up with a passion. (It's a long story that I don't have the time to get into.)

  193. Re: keep the politics out, please.... by bob+beta · · Score: 1

    MS-DOS is one of the biggest abortions since the rise of modern technologies (find me a single OS expert who will give it high marks).

    Require said OS expert to run it on a machine with 32K of RAM for a week before listening to him, though. Then allow him to run whatever other OS he chooses on the same platform.

    That was a target machine with PC-DOS 1.0.

  194. I wonder if you can control it with GPOs? by Anonymous Coward · · Score: 0

    it seems to work reasonably well...

    hopefully the final product will fit into M$'s standard AD management strategies...

    if you can push it out as an msi, control it with GPOs, and run its updates through SUS (or WUS) i'll be a happy little admin!

    a big problem in the anti-spyware arena is that theres nothing with any decent enterpise management built in, even in the expensive licenced products (that's why mcaffee has such a huge share of corp a/v - even if its not the bee's knees in scanners, it has by far the best managabilty)

  195. Re: keep the politics out, please.... by fm6 · · Score: 1
    I'm sorry, wrong. You say "32K" now, and it sounds like nothing. But in 1981, there were a lot of decent OSs that were quite happy in that environment. When I first heard MS-DOS compared to other OSs, it was in that same year, and all the competition had the same small-scale environment. The standard of the microcomputer world at the time was CP/M, which mostly ran on exactly that kind of system. And CP/M was always way ahead of MS-DOS, in performance, features, and reliability. Hell, Bill Gates himself recommended CP/M to IBM over all the competition. Its only when Digital Research balked at IBM's nondisclosure agreements that he held his nose and offered them a cheap CP/M clone that he had just acquired.

    One guy I talked to refused to even concede that MS-DOS was an actual OS, since it didn't have most of the services that an operating system is supposed to provide. He characterized it as a "program loader".

  196. OOBE by Ancient_Hacker · · Score: 2, Insightful
    lesse, just a few notes of my first look at it:
    • Apparently they're not interested in bringing pirates into the MS fold, it only runs on "authorized" installations. Hmmm..
    • It asks me if I want it to run at 2 AM, I click "no", then later it reports it's set to run at 2AM. Hmmm....
    • I click on Manage 2AM runs, and I see no option to turn them off. If you deselect all runs, it complains that you havent selected any runs. Hmmm...
    • Screen is a dog's breakfast:
    • non standard panel borders that trail off, looking like a bad screen update.
    • The app name appears several times, in different fonts and sizes. One instance is clickable, and takes you to an unexpected summary page. The next text isnt.
    • There's a cacophony of active items. There's menus. There's clickable text. There's a separate area on the top right with BOTH icon-like things and clickable text.
    • If you click on the things in the upper right, it immediatel;y and irrevokably cancels the current scan. Nice. Not only does it do something unexpected, it doesnt even ask if you want to do it, and you can't back out or continue. Sweet.
    • Like many of these thingies, it feels it has to put up the name of every file it is scanning, and update the file totals. And run a dumb little static animation that really makes no sense, as it isnt moving files at all. This is not only useless and misleading information, it slows down the scanning process, especially with older video cards.
    • It did find one registry key, but AFAICS it doesnt bother explaining what it is and what the ramifications are. And the button to remove it is inadequately labeled "Continue", which requires some extra text by it explaining what it really does.
    I wouldnt call this a Beta, I've seen better preliminary prototype mock-ups.
  197. Re: keep the politics out, please.... by fm6 · · Score: 1

    OK, I totally disagree with this post, but the moderators who labelled it "flamebait" are total idiots. The author is spouting a certain party line, but then so is everybody else around here. An honest opinion isn't flamebait just because you disagree with it.

  198. Who asked you to pay for anything? by Anonymous Coward · · Score: 0

    >...
    >I think not.

    Clearly.

  199. missleading? by cangeceiro · · Score: 1

    i think that this could be a little missleading. I gave microsofts antispyware program a go and found that it tagged tightvnc as spyware. I can only wonder what other programs it has tagged as spyware

  200. Hiding in the bushes... by AndyChrist · · Score: 1

    It's probably just harder to hide your spyware from the people who made the OS you're trying to hide it in.

  201. Re: keep the politics out, please.... by Anonymous Coward · · Score: 0

    "An honest opinion isn't flamebait just because you disagree with it."

    Was this an honest opinion? The poster pretended that Microsoft's PROVEN violations of the law didn't exist. If it was an honest opinion, it was an extremely uninformed opinion.

  202. NO SH*T, it -should- be that good. . . by Anonymous Coward · · Score: 0

    Since Giant Anti-Spyware was -already- that good to start with.

    Helloooooo, is anyone out there?

  203. Missing feature by gone.fishing · · Score: 1

    First, keep in mind that this is indeed "beta" software (that was born out of a mature non-M$ product). It was pretty good, then Microsoft got their hands on it and now it is "beta" software.

    First I'll give Microsoft some credit. They are trying something. Then I'll dis 'em a bit and observe that it has by and large been their poor concept of security that has led to all the virus, worm, trojan, and spyware problems. Finally I'll suggest that anti-spyware should have the same kind of "spyware summary" as anti-virus software typically gives access to. If all of the anti-spy companies did this, it would be downright easy to see who is better at what. It would seem to me that these librarys could be great selling points!

    For now, I've added Microsoft's anti-spyware to my arsenal. I'll see what it does and doesn't do. It did find something on my computer that Ad-Aware and Yahoo Anti-Spy missed so I'm at least partly pleased. But I've also read the warnings and will be careful at what I let it kill off.

  204. the real-tme option is good tho! by forensicmeteoboy · · Score: 0

    The real time protection is really good... for me, I was using firefox and visited a site, and it installed a spyware which AntiSpyware came up and- get this- actually ASKED ME what I wanted to do- it didn't go and make a decision for me!

  205. Perfect Spyware Solution by Anonymous Coward · · Score: 0

    Here a simple solution to the problem:
    A) Run firefox
    B) have a brain (dont download bs like crack.exe, etc)

    That simple.

  206. Let me refresh your memory by Anonymous Coward · · Score: 0, Insightful

    That's why I'll always be sorry the Democrats didn't stay in power long enough to break Microsoft up.

    And yet, it was under the Democrats that we got the DMCA.

    1. Re:Let me refresh your memory by randallpowell · · Score: 0

      Don't forget NAFTA.

  207. Re: keep the politics out, please.... by fm6 · · Score: 1

    That's evidence of a short memory, not intentional deceit. Standard for political discussions these days.

  208. poor microsoft...when will they learn? by 3.09+a+hour · · Score: 1

    Use my crappy browser so you can see how much my new program is! Forcing you to have IE 6 seems like shooting the cows after they left the barn to make sure they dont leave again. I mean if your going to make this prodict, why dont you get immuinization like most of the antispyware programs out there? I wonder if this detects the spyware aol installs, becuase that could end up with a interesting lawsuit

    --
    Like the saying goes, never underestimate the bandwidth of a station wagon full of tapes. -Pyrotic
  209. I can't wait... by Anonymous Coward · · Score: 0

    Anyone know when the *NIX / OSX port is comming out?

  210. Fuck a cock! by Anonymous Coward · · Score: 0

    Fuck a cock! Fuck a cock!

  211. I tried to install the beta... by foniksonik · · Score: 1

    and it wouldn't even install.... I double clicked an' everything... My Powerbook doesn't have any virii or adware that I know about but I sure would like to find out if it does....

    Maybe it's not for Macs? Do I need to run VirtualPC to use this new miraculous anti-software?

    Well, I've never had any of the problems my friends tell me about every other week or so, so maybe I'm okay.

    --
    A fool throws a stone into a well and a thousand sages can not remove it.
  212. Subscription fee?! by Beetle+B. · · Score: 2, Funny

    "Ad-Aware and SpyBot offer great performance for free, yet when Microsoft debuts its AntiSpyware application, it will require a subscription fee."

    A subscription fee?! First, they produce an OS that's just open to all manner of spyware one can imagine, then they actually charge to have it removed?!

    Wow! I need to get into this business!

    --
    Beetle B.
  213. MS actually worked for me by penginkun · · Score: 1

    AdAware (latest defs, latest version of app) missed a bunch of stuff which was installed on my system. Not even sure where it came from, since I haven't installed any software on my system in weeks. But this morning, all of a sudden, I'm getting popups and of course simply running the uninstall app does nothing.

    AdAware flagged 201 files as adware/spyware/malware, but missed a bunch more, and in any event does not appear to have been able to remove the offending software. MS has caught a lot more, and what's more actually seems to have rooted out the worst of it, crapware from 180searchassistant and from bullseye-network. I'm going to send these assholes a bill for the time it's taken to cleanse my system (and I know I'm going to have to reinstall windows to be 100% certain it's actually gone). I think $150/hr sounds reasonable.

  214. Well, it didn't help clean up my family PC :( by gwait · · Score: 1

    I've been battling a VX2 variant on the family PC for a few days, and saw this slashdot item,
    so, I downloaded and tried out this "New Microsoft" antispyware - nope, it can't even see the VX2 beasty running.
    Adaware can see it but fails to kill it (when adaware pulls the trigger, explorer.exe reloads, and the beast is right back in action).
    Spybot can't see it, neither does avast.
    I have my kids trained to avoid risky computing
    behavior, but my neices came over last week and....
    Sigh...

    --
    Bavarian Purity Law of Rice Krispie Squares: Rice Krispies, Marshmallows, Butter, Vanilla.
  215. Re: keep the politics out, please.... by snilloc · · Score: 1
    Break-up would not have been as useless as you suggest. The "Office" group would then have an incentive to make MS Office for other platforms. And the IE group the same - but for sale, not for free. Windows would maintain its monopoly ONLY by improving and being technically competitive because the availability of Office and IE for other platforms reduces OS lock-in.

    You could probably leave the "everything else" (games, etc.) software with Windows, or give it to IE so that it has a chance to survive.

    My guess is that Office might be the strongest monopoly. However, it would be difficult to illegally leverage the Office monopoly on to other markets, which was really the problem in the first place.

  216. Setup UI Flaw by LPetrazickis · · Score: 1

    The
    [x] Run Microsoft AntiSpyware Now
    checkbox's label wasn't clickable. I clicked on it several times before I realized that the thing was borked and that I had to click on the actual checkbox.

    Professionals these days.

    --
    Is this a sigs-optional kind of place? 'Cause I am totally down with that if you know what I mean.
  217. False Positives... by douglask · · Score: 2, Interesting

    Just FYI, MS Anti Spyware does report false positives. It believes that TightVNC is spyware. Hmm.. I guess it competes with the MS remote assitance tool. :-) It kinda makes you wonder how it finds "finding twice as many infected files", eh?

    --
    DouglasK Do Justly. Love Mercy. Walk humbly with your God.
  218. Re:Microsoft AntiSpyware forces you to install IE by lachlan76 · · Score: 1

    It probably uses IE in its interface, it wouldn't know how to use Gecko for it.

  219. MS AntiSpyware log by Anonymous Coward · · Score: 0
    Removing Linux installation ISOs...
    Removing Firefox...
    Removing Cygwin...
    Removing GPL'd software...
    Done.
  220. What use for the self-proclaimed expert /. crowd? by Anonymous Coward · · Score: 0

    I have never had a virus, trojan nor spyware. I do nothing special - I don't run adware programs, I don't run av, the only thing I use is a basic old version of Kerio which is primarily to prevent phone-home apps, rather than inbound packets. I download anything and everything. I browse the dodgiest of sites. I only recently started using Firefox: the "hole-riddled" IE managed to survive for something like 5 years without bringing down Armageddon upon my computer.

    It is therefore remarkable to me that the apparently "expert" slashdot community can suffer from so many of the aforementioned. With my rudimentary, almost non-existent precautions, I survive and yet they, feverently anti-MS, pro-linux types, need to disinfect regularly.

    Could it be that they're really, despite all the hyperbole, grandstanding and other nonsense that goes on here, not all that competent at all? A little stupid and lacking in common sense? That it is actually trivially easy to prevent that sort of occurrence? Could it be that their feverent anti-ms platitutes were in fact misdirected, and should more properly have been aimed at the eternal weak link, the shortcomings of the end-user, whom they seem to be able to closely identify with?

    No ... of course not. It is really Microsoft's fault and they'll tell themselves that next time they hornily click "Open 'Ann4 K naked##%.vbs'".

  221. Re: keep the politics out, please.... by polysylabic+psudonym · · Score: 1

    I think you hit the nail on the head with "too many cooks". Committees make poor products, driven individuals or small teams of driven team members make the best products.

    I suspect that the only think keeping Microsoft up there is weight of (really quite recent) history.

  222. strange contradiction by stewwy · · Score: 1

    when Installing , I happened to read the first page, you know the one with the copyright crap etc. ( strange, and unusual for me and i expect most /. 's ).
    Correct me if I'm wrong, but is seemed to say patented under U.S. copyright law, I thought the 2 where exclusive i.e you can't have both it's one or the other , or has something changed in the land of the free?

    at least it means nothing here as you still can't patent SW in the EU yet :)

  223. It's an INSIDE JOB! by Raspberry · · Score: 1

    Of course the Microsoft software will come up with more matches... they have a better understanding of the internal workings of the Microsoft Operating System.

    Wait until they run the competition out of business and then it'll be a totally half-assed app that ignores certain solicitations depending on how much money businesses pay to Microsoft.

    Although I will admit that the likelyhood of running free software like Spybot out of business is going to be nearly impossible... which once again shows the value of Free Software.

    blah blah blah... i'm tired of writing the obvious.

    --
    ------------------------------
    Ray Raspberry
    raspberry@b3l33t.org
  224. Re:strange contradiction by ArtStone · · Score: 1

    If you watch the video on their web site, it makes a big deal of blaming you if you installed spyware and didn't read every word of the EULA before you installed the software - and actually gave them permission.

    I'm curious what % of people read the EULA agreement for the antispyware program?

    3 of things it reported on my system are software used by radio stations to push ads at you when you access their streaming audio feeds. The description of course says that if you want the service and the software is required to use it, don't worry about it. Does Microsoft offer a competing streaming software solution? Hmmm...

    While Giant might have gotten away with calling some program "infections", I think Microsoft is inviting big time legal problems if they label competitor's software as an "infection".

    --
    Final 2006 "Proof of Global Warming" US Hurricane Count -> 0
  225. Dangerous false positives by ioliver · · Score: 1

    I tried it and was underwhelmed. The heuristics seem far too simplistic for this thing to actually do any real good for the inexperienced user.

    For instance, MS antispyware claimed that I had a key logger on my system (despite Sophos, adaware and spywareblaster giving it a clean bill of health). The file it question was a text file full of release notes.

    A bit of experimentation showed that creating an empty text file in c:\program files\coding workshop was enough to trigger this alert! It seems there is a keylogger by a group called Coding Workshop but also a ring tone editor by a company of the same name. MS Antispyware will be advising people to remove parts of their applications.

    The tool also pointed the finger of blame at an exe in system32. I don't know what it is but suspect that if it really was a downloader trojan as claimed that Sophos would complain. So given that I *know* that the MS utility is trigger happy do I delete or not? Risk leaving malware on my system or risk deleting something important?

    I'm sure it will find and remove spyware but I think it will do so much collateral damage that many users would be better off either using a different tool or just living with the malware!

    Ian

  226. Re: keep the politics out, please.... by sumdumass · · Score: 1
    and never forget that Microsoft was adjudged an illegal monopoly.
    Um if i remeber right microsoft wasn't found to be an ilegal monopoly rather then they used thier monopoly presence ilegaly to protect thier positiion. This sounds petty but deserves a destinction because it is the basis of why the court of apeals over turned the breakup decision.

    Acording to the law, they have to use thier anti competitive behavior to obtain thier monopoly to merit the breakup. Microsoft had already had the monopoly and just used it to stiffle competition and steal ideas being put forth by others. I know thisa isn't going to be popular with most here and i would like to agree with all the microsoft bashing going on out there but there is a time when we go too far and sound like incompetent zealots. It is not ilegal to have a monopoly in the united states. Several companies do. It is how you use that position that can make legal troubles.
  227. MS Castrator by Anonymous Coward · · Score: 0

    After Installing MS Anti-Anti-spyware. No other anti-spyware works on my system! Both still run and detect but once you try to remove anything nothing happens.... MS is castrating other anti-spyware!!!

    1. Re:MS Castrator by msim · · Score: 1

      As others have said:

      "File a bug report"

      --

      Life is like a box of chocolates, you never know when your gonna get food poisoning.
  228. Microsoft engages in some Robin-Hood style crime. by cfalcon · · Score: 1

    I'm really glad that Microsoft is addressing this problem, even if it is by buying up a little guy and redressing him. Right now, using spyware removal is borderline illegal (!) because you probably agreed to a click-contract that may have damaged your legal ability to remove it. This is why Dell support is not allowed to talk about adaware or others. The real benefits Microsoft brings to the fight are:

    1- Legitimacy. No longer are those programs random dubious things- they now compete with something that will soon be an OS feature.
    2- Fight the monkey, spyware guys! Right now spyware disables anti-spyware existing on your machine, and sometimes interferes with the ability to run it. Very virus-like Let's see how these cute tricks work against 500 pound gorilla Microsoft, hmm?

    I think that Microsoft is ultimately the right call for this product- it's addressing control over programs on your machine, and is properly an OS feature rather than an add-on.

    I use Linux, but I often get dragged to anti-spyware duty for my less tech-savy friends. This will make that much easier, eventually.

  229. it's quite good by john_uy · · Score: 1

    i have tried using ad-aware and spybot in a machine and recently the beta version of microsoft's anti-spyware. i had problems with spybot with regards to the removal of spyware files. it is able to remove them but the next time it scans the system, the same type of spyware is again installed in the computer. microsoft's anti-spyware was able to remove the files and didn't show up after in spybot. i was quite impressed with it.

    --
    Live your life each day as if it was your last.
  230. System requirements don't list Win98 or Win98Lite by Anonymous Coward · · Score: 0

    http://www.microsoft.com/athome/security/spyware/s oftware/requirements.mspx

    "Microsoft Windows AntiSpyware (Beta): System requirements
    Published: January 6, 2005

    Minimum system requirements for Windows AntiSpyware (Beta):

    Microsoft Internet Explorer 6.0 or higher

    A 300 MHz or faster processor with at least 64 MB of RAM

    Microsoft Windows 2000, Windows XP, or Windows Server(TM) 2003

    At least 10 MB of available free space on your hard disk

    Internet access with ao(ast a 28.8 Kbps connection to use SpyNet(TM)

  231. Amazing! by sad_ · · Score: 1

    The MS product finds more stuff in the registry and other hidden crapware then the other 2 could find.
    Perhaps it's because MS knows its own products best?
    I mean, wouldn't it be a gigantic failure if other companies are better at protecting Windows then MS?

    --
    On a long enough timeline, the survival rate for everyone drops to zero.
  232. Re: keep the politics out, please.... by bob+beta · · Score: 1

    CP/M (CP/M-86) was available for the IBM PC. I have a boxed original set on my bookshelf. It failed miserably in the marketplace, though. Most people thought 'IBM' when they bought DOS for their PC, not Microsoft. Granted, it was because no third-party developers wrote apps for it that CP/M-86 faded. That and it was a lot more expensive than PC-DOS.

    And you just finished calling MS-DOS a direct copy of CP/M. Now you're going to maintain QDOS was an inferior copy? It wasn't annointed by Kildal, or something, so it's inherently inferior?

    You blew it, anyway, when you didn't mention that UNIX ran well in the early days, on 32K machines. A 32K box was a BIG box that would support multiple users well. These puny 'single user' systems never matched up to that.

  233. My review by scubacuda · · Score: 1
    For what it's worth, here is what MS' AntiSpyware program removed off my friend's computer. This is *after* I scanned it both with SpyBot and Adaware with updated sig files. I'm kinda surprised that the other two didn't already remove these.

    WinTools Trojan (removed)
    Network Essentials Browser Hijacker (removed)
    MyWebSearch Toolbar Browser Hijacker (removed)
    DownloadWare Adware (removed)
    eZula.TopText Adware (removed)
    WebSearch Toolbar Browser Plug-in (removed)
    IETray Browser Hijacker (removed)
    My Search Bar Adware (removed)
    SearchSquire Adware (removed)
    iMesh Adware Bundler (removed)
    MyWay Search Bar Browser Plug-in (removed)

  234. Re: keep the politics out, please.... by fm6 · · Score: 1
    Sure, CP/M was available. Lots of OSs have been available for the PC over the years. But good luck getting support from IBM if you had anything except MS-DOS or Windows. This was true even after the Microsoft/IBM "divorce", when the leading alternative to Windows was an IBM OS! DOS/Windows had heavy lockin early on and never lost it -- so much so that not even IBM's sales or support people cared to fight the trend.

    Damn right I'm claiming QDOS was an inferior copy. As I understand it, the authors had no understanding of how an OS was supposed to work, and simply implemented as much of the CP/M API as they could. Their only source was the CP/M documentation. The complete functionality was never there, just a bare pretense of compatibility.

  235. Quality not quantity by Anonymous Coward · · Score: 0

    Ok, the MS product finds a larger quantity of items than AdAware or SpyBot.

    The real question is, does it actually find a larger percentage of significant items, or is it padding it's find with a bunch of meaningless cookies that nobody needs to worry about?

    Does it actually dig out real spyware and effectively kill adware, or is it just doing a bunch of busywork that makes it look good?

  236. The real credit goes to giantcompany.com by Gel214th · · Score: 1

    Giant AntiSpyware has been the leading spyware removal tool that apparently no one ever heard about. I was using it a few months before Microsoft BOUGHT the company over. ALl Microsoft seems to have done, basically, is rebrand the software. THe interface, icons, everything looks and functions exactly the same as the Giant Antispyware software that I have currently installed on my home machine. Giant Antispyware was rated the best AntiSpyware tool by an independent review months ago, and that review came to these same conclusions: It detected far more Spyware than the other leading AntiSpyware products.

    --
    -Gel214th
  237. Isn't this what MS bought from Giant? by Anonymous Coward · · Score: 0

    Whose deep pockets invested in Giant?

  238. Re:System requirements don't list Win98 or Win98Li by Brett+Glass · · Score: 1

    The software didn't refuse to install on the system because it was running Windows 98. It refused because the system was not running Internet Exploder 6. Of course, one shouldn't put it past Microsoft to refuse to support machines that are still happily running Windows 98. Gotta force customers to upgrade their OS (and pay more money), even if the hardware isn't up to running the latest bloatware....

  239. So where is the link...? by IBitOBear · · Score: 1

    So where is the link that doesn't want to "validate" my windows? My windows is valid, but they don't tell me what their "validation" is going to collect and transmit and dicker about on in my computer.

    --
    Innocent people shouldn't be forced to pay for inferior software development.
    --"Code Complete" Microsoft Press
  240. Real-time monitor by JadeNB · · Score: 1
    Spybot S&D also offers a real-time monitor, called Teatime. It similarly detects and prevents IE home-page hijackings. (I've found it a great tool to have around when signing up for broadband services -- the software InsightBB makes you install before use tries to change lots of settings, and Spybot catches most-to-all of it.)

    I think Spybot S&D also lets you roll back home page changes if they were made before the monitor started, but maybe I'm confusing it with HijackThis (another great, but not quite so idiot-proof, utility).

  241. Re: keep the politics out, please.... by Asprin · · Score: 1


    Why can't people get it through their heads that Microsoft's problems are part of the natural course of free-market economics? They didn't start out a huge business, placing their OS on everyone's computer. They *earned* that position through superior marketing and business deals.

    Again, your memory needs refreshing....

    Indeed. I would also point out that Microsoft it, in fact, a *convicted* *monopolist*. Period. The election and subsequent settlement occurred during the penalty phase after MS's guilt had been established.

    Here's a link to a timeline for the interminably lazy.

    --
    "Lawyers are for sucks."
    - Doug McKenzie
  242. Re: keep the politics out, please.... by fm6 · · Score: 1
    I suppose you're right. But that basically goes to the "Microsoft is evil/no they're not" debate. Which I'm not finding very productive -- people basically take one side or the other in that debate depending on their loyalties and prejudices. Not the kind of discussion that'l likely to influence actual events.

    On the other hand, if we talk about how Microsoft's domination of their marketplace is affecting how we all live, work, and do business, maybe we can get some practical changes in place.

  243. "Beta" with no Error Reporting Possible! by IBitOBear · · Score: 1

    So I have already found three errors in the "beta" but there is (apparenty) no address or form which a user may use to report such failures.

    This isn't a "beta", its a promotional stunt.

    Error 1: When I click the cygwin icon on my desktop it runs cygwin.bat. The real-time protections pop-up a dialog box which "floats up" to just above your taskbar. If, however, your task bar is not on the bottom of the screen but on the left side of the screen (try it there, autohide, with the "desktop toolbar" btw) then the dialog box will float right up off the screen and cygwin will not run.

    Error 2: so you move the start bar back down to the bottom of the screen to snag the dialog box so you can click "yes". And you click "yes" to let the "script" run. The window you receive when cygwin is started isn't possessed of all your settings for such a window. [e.g. I run cygwin in a 140x40 width/height window, the window that opens doesn't have these properties.] {If you click the "always run this" checkbox, the *next* and subsequent time you use the icon it will end up in the correct size window}.

    Error 3: I can no longer run windows update. (Yes, my system is properly licensed and validated and such. When I run windows update I variously get IE Errors or, on one occasion, IE went on to open Mozilla for no apparent reason.) I suspect that one of the "restore IE Settings" actions, which I didn't perform, does some darker mistery thing.

    Note 1: The MS anti-spyware has yet to detect anything on my computer that wasn't detected by *current* spybot and/or AdAware.

    Note 2: When it complains about things you have installed (RealVNC in my case) don't select "Ignore" select "Always Ignore", as "Ignore" is really "Ignore Once". I would rather "aprove" which would approve of only those items in the current detected set of settings. "Aproval" is different than just ignorance.

    In general, I am unsatisfied after one day of use.

    --
    Innocent people shouldn't be forced to pay for inferior software development.
    --"Code Complete" Microsoft Press
  244. RE: convicted monopolist.... by King_TJ · · Score: 1

    I don't disagree with the fact that the DOJ found MS guilty of being a monopoly. That doesn't mean I agree that it's correct, or even that the Sherman Antitrust Act isn't subject to some question in and of itself....

    From that standpoint, the Republicans coming in and basically tossing the issue aside isn't necessarily a bad thing at all.

    This (obviously) gets into complete subjective opinion here -- but the way I see it, government interference in the interest of "saving us from monopolies" hasn't ever really been proven to accomplish much good. Look at all the government regulation of public utilities and the fiascos that have come of it afterwards. We seem to always end up crying for deregulation at some point, and often that causes more "cans of worms" to open up because we dump what was long little more than another govt. agency back into the pool of truly competitive businesses, and wonder why it doesn't function smoothly.

    Most of the issues MS was tried on were of relatively little consequence anyway. The whole "bundling the browser with the OS" argument was superfluous at best, IMHO. Every major OS picked a specific browser to bundle around that time. OS/2 Warp had "WebExplorer/2" and Netscape with it. If OS/2 had marketed itself better around the time of Warp 3.0 and 4.0 - maybe MS would be crying about Netscape's market dominance instead?