|
Posted by Anubisø în+ŠÇ.²È¨žÉ¢rº,¡û\¢ on June 21, 2005, 12:09 pm
Please log in for more thread options maybe microsoft antispy beta??? its not bad, I use a combo of that plus
spybot search and destroy , and hijackthis, plus my own experience on
regestry editing. again:
microsoft antispy beta
hijackthis
spybot search and destroy
"!TG" wrote:
> James Butler wrote:
> > I am trying to detect if there is a need to purchase an anti-spyware for our
> > network, we already have anti-virus. Is there any scanner out there that
> > can scan for Spyware/Malware?
> >
> > Regards
> > JB
> >
> There are lots of them, but I have not found one that is 100% effective.
> Spy bot Search and Destroy use to be a good one, but now I use
> ScanSpyware more and occasionally NoAdware.
> You can run all of these and others one right after the other and they
> will all still catch something the previous "missed" in my experience.
> I put missed in quotes because some of them identify things that are
> actually harmless.
> The best way to determine if you have a need is by opening regedit and
> looking in HKLM>Software>Microsoft>Windows>Curent Version>Run, and Run Once
> 98% of the time spyware adds itself to these and are usually in the
> system32 directory.
> More often than not they have giberish for a filename like ysigh.exe for
> instance. I've found searching google for the filename is sometimes
> helpful for the filenames that look suspicious, like ptsnoop.exe which
> is actuallt software for a modem, but looks like malware at first glance.
> You can boot into safe mode and remove these entries from the run and
> run once and they should not return (at least for a while). You should
> also check in the same folder under HKEY Current User.
>
|