INFO: Since this is Beta, consider this a preview of Microsoft's AntiSpyware
(Beta 1)
REVIEW DATE: 01/10/04
COST: ??? USD
AUTHOR: David Kroll
Options and settings:
Navigating to the 'Options' menu, and clicking 'Settings', is
picture 18. I won't go into all the settings, in fact, I'll show you only two of them, but you
get the general idea what the other sub-sections are I imagine. Note that in the
'General' settings area, there is a 'Novice User' or 'Knowledgeable User'
option. I couldn't see any difference in selecting either one. So, once
implemented, I would hope the novice user setting, which should be enabled by
default in further program builds, would easily keep grandma from dropping her
new machine to the point of system restore, or a reload of Windows by messing
with the settings, or removing something that could do what I just described.
It'll happen, you know it will...
|
 |
 |
|
(18) AutoUpdater settings |
(19) General settings |
Scanning:
If you hadn't guessed, I'll focus now on scanning for spyware,
and how M$'s AntiSpyware handles removal. Now I will not go into a comparison on
other spyware removal tools, I'll just say I did a full scan a week before with
Webroot's Spyware Sweeper. In all honesty, I still haven't seen the end all of
Spyware programs, because there are so many different threats out there. My
advice though, is if you can afford to purchase an AntiSpyware program, by all
means do so, if you can't, there are plenty of free ones out there.
So let's start a scan...In picture 20, there are more
scanning options by clicking the down arrow next to scan options. I left mine
alone, and did a quick scan, which is default. It took about 8ish minutes for a
quick scan, and personally, I haven't done a full scan yet. Unless you disable
it, a full system scan (Deep scan) is scheduled to run everyday at 2:00 AM. Very
useful if you leave your PC on 24/7. You can change the properties of that by
clicking on the "Scan Scheduler" located on the main screen, upper right hand
corner.
Anyway, after the scan is done, you are presented with a
screen seen in picture 21. Some traces of stuff were found, and if you know what
you are doing, you can easily have the program ignore, always ignore, remove, or
quarantine the results. (Picture 22)
|
 |
 |
 |
|
(20) Start a scan |
(21) Scan done, summary |
(22) What to do with results |
After the scan is complete, and you've selected how you want
to deal with any threats, if you feel the need to tweak the results. You are given the
option to report your findings to SpyNet. Here is a quote about SpyNet that I
found on the web from
M$. "SpyNet™ is a voluntary worldwide community of
Windows AntiSpyware users that plays a key role in determining which suspicious
programs are classified as spyware. Any user can choose to join SpyNet™ and
report potential spyware to Microsoft. Users participating in the global SpyNet™
network help to discover new threats quickly so everyone is better protected.
Signatures are created for programs that are identified as spyware and made
available to all users." So in theory, with all of us running this, we
are all helping ourselves discover new baddies on a global scale. This was
probably the best selling point for this software before, and probably is now.
Who better to determine what file is a Windows file or not, but Microsoft.
|
 |
 |
 |
|
(23) Do actions, and send to
SpyNet |
(24) Close IE? |
(25) Set IE defaults to
protect against further BHO's |
After your first
scan, one more option is needed to be set, picture 25, your default IE options such
as your search preferences, and other browser settings. It is easily skipped by,
and you really shouldn't need to change anything anyway, because the program
scans for malicious things like that to begin with. But, once again, it you
don't know what you are doing, it probably is a good reason to skip looking at
those settings.
By chance if you do have a Browser Hijack (BHO), or something that needs to be
removed when IE is closed, the program prompts you about it, and does its thing.
AutoUpdate, about and one more:
If you are connected to the net, AntiSpyware automatically
checks for updated signatures, or program versions by default, daily at a
certain time, but can be configured to check on system startup, weekly, or every
other week as well. After the initial install, the program automatically updated
itself after a few minutes.
Another good feature is the monitoring of start up programs
as well. I installed a Software DVD player, and it wanted to put in a Wise
Updater in my start up. I removed it, but at least AntiSpyware told me about it,
although didn't have any info about it at that time. (Picture 29)
 |
 |
 |
| (27) AutoUpdate window |
(28) About |
(29) Wise Updater... |
Conclusion:
Microsoft may really have a winner here. Most definitely due
to their own previous lackadaisical approach to security issues with Windows,
and even more obvious, Internet Explorer. This is one program that should be
considered in your arsenal to combat the current epidemic of Spyware that is
going around for Windows based Computers. Although this is a public beta, I had
no problems with stability on XP Pro SP1 myself. Since the AntiSpyware program
was pretty well established and mature before M$ purchasing it, not that
much work was done under the hood. Unless you count making it NOT
compatible with 9x core Windows as it was previously with Giant. And actually,
upon further research, a few things are missing. Such as Inoculation that
would block bad sites from being viewed, and there is no file shredding tool. While
that may not be a big deal to some, some people want files destroyed so you
can't get them back. Lastly, you were able to scan cookies and remove tracking
cookies and such. No longer is the case, but with the tracks eraser you can get
rid of your cookies. Unfortunately, it's all or nothing.
While details are unknown on the cost of this
program/subscription fee, there are rumors that there will be a free version of
this as well. If you've got the supported OS, I'd give this a try today. For
starters, SpyNet is a very brilliant idea, and with real-time protection against
threats, you can't ask for much else. For now, it's free, and it's good until
the end of July, so get
grabbing from M$. Or over
here at MajorGeeks.
You'll avoid that Genuine Windows verification tango, and may even get a faster
download of this 6+ meg file.
I hope you enjoyed my write-up of this. While I didn't cover
everything, keep in mind that this is a "Closer Look." Have fun trying it on
your own.
Closed:
I found an interview concerning Spyware and other software
right
here. Below is a excerpt. You may find it interesting on what approach M$ is
finally taking to lock down systems. Or, maybe not...Good read nonetheless.
"REDMOND, Wash., Jan. 6, 2005 -- Microsoft has responded to customer concerns
around deceptive and malicious software by announcing two new efforts in the
company’s ongoing focus on Trustworthy Computing generally, and security and
privacy in particular. The beta version of Microsoft Windows AntiSpyware, a new
solution designed to help protect Windows users from spyware and other
potentially unwanted software, is now available as a free download, and the
Microsoft Windows Malicious Software Removal Tool, which will help rid PCs of
prevalent worms and viruses, will be made available as part of Microsoft’s
monthly update cycle beginning on January 11th."
Thanks for coming by! Until next time...
Update:
Microsoft's AntiSpyware will be free to "Genuine Windows
Users." See the homepage
here.
Home ^^^
|
|