NOD 32/ Spysweeper

As a newbie with a new pc, I have done a great deal of research on the various security options for the average home user. The only AV product with a generally excellent consensus is NOD 32. My biggest concern is the products other features such as spyware and adware detection and elimination. There seems to be very mixed reviews on this. Is it possible to run another more specialized product such as Spysweeper along with NOD or not? ESET did not recomend trying this in a phone conversation today. I really do not want to settle for inadequate protection in one area vs. another. This after all is the problem with many of the "suites" available. Any advice would be appreciated!

 

They won't have a conflict with each other. Spysweeper used to be one of my standard programs I'd install on all clients rigs as I deployed or worked on them. But since switching to all NOD32 over a year ago, I've stopped using it simply because I don't think it's needed.

Regardless, it's a great program, doesn't really slow anything down, so no harm in keeping it. I still do Spybot updated 'n immunized, as well as Microsoft AS.

 

Disagree... Some of the shields on SS have value... startup, homepage, it catches tracking cookies etc... layered defense is a good thing.

 

I agree with YeOldeStonecat. As I mentioned in another recent post, there is NO need to install any spyware or ad-ware program. Just scan for rootkits and you'll be fine!

 

After seeing this thread, I'm going to stop renewing the licenses for SpySweeper for the systems I manage. I'd been using the SS/NOD32 combo for a while now and nothing really gets past NOD enough for SS to kick in.

I'll have to see what my clients want (Hey, if an extra icon makes them feel more secure, it's their choice) but I'll definitely keep this in mind.

 

the SS enterprise tools are nice though...

 

Really? An anti-spyware program is not needed? I know that MS antispyware, or Counterspy have aspects that NOD doesn't have, such as registry protection (to some degree). Also, rootkits were mentioned. Could you give me a good anti-rootkit?

 

SpySweeper has rootkit detection built in now, too

 

People never cease amaze me . People that clean computers for a living trust NOD's spy detection wholly ? Whatever . good luck . Most are easilty gotten rid of anyway , IF you get some . Outpost Pro has AS too . But , like NOD , it is weak compared to standard AS programs . Just trying to help new persons looking for advice . Do NOT use NOD alone . It is NOT good enough yet . My goodness . I love NOD but , some people trust the programs they love a little too much

 

http://www.sysinternals.com/Utilities/RootkitRevealer.html

and it's free

There's a plethora of other stuff on the site too.

 

That's where I've put more trust into Microsofts AS. For one...the free version of SS does not auto update. I can't trust my clients to do that. Microsoft automatically updates, and automatically runs, and has fantastic removal tools, especially in the advanced section.

Yes Layered defense is a good thing, I just try to avoid an 88 thousand layer cake, and keep things to a minimum for efficiency. Based on many many many business network clients of mine, since most of them has been switched over to NOD32 EE over the past year from Symantec CE, or McGufee, or whatever they were on, NODs done a darned good job of keeping them clean. I've found over time that I can peel back a few layers that I had to put on them before with their prior AV products. This being for the average business network client of mine. 99% of those users don't get into too much trouble. I'd agree on the rare client of mine that I know will be getting into trouble (IE likes to surf porn, or uses that P2P warez sharing crap, etc)...I'd probably stick SS on their rig, along with FF or Opera.

Like I always state....adapt to the users habits, I don't believe in a universal heavy handed approach for everyone.

 

So, you trust beta-software on your machine?
You trust a company who's "anti-spyware" program classifies and detects this : http://www.microsoft.com/athome/security/spyware/software/claria_letter.mspx
under "ignore" just because it shows some notification/eula against these criteria : http://www.microsoft.com/athome/security/spyware/software/isv/analysis.mspx ?

Like you said "Like I always state....adapt to the users habits, I don't believe in a universal heavy handed approach for everyone." , I just don't believe in MSAS.
I wouldn't put that on my machine. And I don't believe in any AV either when it comes to keeping my machines clean for about everything nasty out there, be it AVx or whatever AV. NOD32 is a damn good AV and that's why I use it.But anti spyware and anti rootkits, just to name a few, that's in another leage. Let's see how NOD32 handles those in about a year, we'll see.

 

Deployed on probably over 500 - 600 computers...I wouldn't be surprised if that number is closer to a thousand.....yes, since the first version was released, it's been a fantastic package. All my regular business clients have it installed.

Usually most anti-Microsoft people call ALL Microsoft software "Beta"...lol.

People knock Microsoft for not providing free tools to help protect their OS's...yet he's one that rated highly in every review I've seen, it's free, it autoupdates, scans daily by default, and has excellent advanced features for fixing up heavily infected machines (most people never dig into it on this layer... but it has some VERY useful features here under system explorer). It doesn't slow machines down much like the only other top rated anti-spyware software..SpySweeper, which except for the brief trial program is a pay for one.

I setup systems for the most problem free performance, because I lose money when I get calls about junk like ad/spyware, my time is better invested in keeping things trouble free for my clients, and implementing new networks/upgrades, and taking over other "imitation" consultants clients who are sick of problems.

 

No offence but I don`t trust MS A and stopped using it shortly after it came out. There`s just something about it I don`t like. I guess I could be paranoid about Ol` Billy, I don`t know.

Back on topic Nod and SS work great together...at least on my machine.

 

MS Anti-Spyware is weak. don't buy spy sweeper as it's not necessary-- save the money and buy another year or two of NOD32. Oh, I like to mention that the spy sweeper definitions haven't been updated for like a week. I was told by an Enterprise tech support rep that they update their definitions twice a week.

for the person who inquired, F-Secure's Blacklight is a good tool to check for rootkits, but it's BETA.

 

The pple who buy Anti_Spyware packages are unexperienced, untechnical NEWBIES (home users; the 40+ year olds) or those who have to comply with HIPAA or the like in the enterprise environment. The place I work for wouldn't even have installed any AS programs if they didn't have to comply with HIPAA regulations. This is like a security blanket-- if they get hacked, they don't want to be fingered as careless etc. do you know what I mean?

 

i love NOD32 but i saw many times that NOD missed some spywares.Using NOD32 with Spysweeper is better i think.I trust abilities of NOD32 (small footprint,best heuristic...) but i use it with Spysweeper.

 

My friend referred me to an article a while back. He works as the Chief Security Architect at a MAJOR research university, but if you google it and with some luck, you'll probably find it yourself.

As I mentioned in a previous post, get rid of Spy Sweeper or any other AS program and just maintain the "hosts" file lookie, lookie, the file was updated 3 days ago http://www.mvps.org/winhelp2002/hosts.htm and spysweeper hasn't update their program's definitions in the last week. the aforementioned hosts file is updated once every week or so, but is plenty.

for those who are buying licenses for spy sweeper, etc. they are essentially outsourcing the work to a third party to maintain their hosts file. for example, the many IE, etc "shields" in spy sweeper, and spy bot. the maintenance of the hosts file and regularly checking for rootkits is more than enough. and and NOD32 goes a long way.

I checked this hypothese using a virtual machine in VMware and haven't gotten any infections etc. Oh of course I went to the majority of the SHADY sites.

 

This is from the Leoville Tech Radio Talkshow

"Sky in Malibu - Can’t see images on Yahoo

She installed Webroot’s SpySweeper 30-day trial, cleaned out spyware, turned on the protection features, then uninstalled it. Now Yahoo is behaving strangly. It’s slow and images are missing. That’s probably a side effect of the SpySweeper protection. It modifies the Windows Hosts file to disable Internet ads. I’d reinstall, turn off all the automatic protections, then uninstall."

 

When I used SS it was OD so no slowdowns...no problem.

 

I'm a newbie to NOD32 as well and I am not a computer guru at all. But the research I have done seems to indicate that:

1. NOD 32 plus
2. A good Firewall plus
3. A good locked hosts file (like mvps)


Is pretty sufficient. I also have Spybot. I am a firm believer that simpler is better. No need to overcomplicate things. Heck, I had Counterspy and PC Cillin running for the last year on 2 home computers with no problems. And PC Cillin certainly isn't top shelf antivirus or Firewall.

You can get Trojan Hunter and SpySweeper and a ton of other security programs. If that makes it so you can sleep at night, then do it.

NOD 32 customer support told me that anti-spyware would be unnecessary if you are running NOD32 and a Firewall. I have also heard the same from several "forum gurus" in multiple forums (Wilders, Computer Cops, etc).

Obviosuly opinions will vary on this topic. I would go with whatever combo makes you comfortable.

 

i'm also thinking about using NOD32 with Spysweeper...i just think having more layers of protection is better than just one....but hey if you think Nod32 is pretty darn good enough (not saying that it isn't) then go with it.

For me it's just like using two different AV's....one AV for the server (nod32 for example) and another AV for the client (Kaspersky for example) so just in case the server doesnt catch a virus...the client also has an AV...not just AV but a different brand AV.

I bought a Spysweeper at Compusa this weekend and after rebates is just $9.99 so just had to go and buy it. I believe Circuit City also had it for $9.99 after rebates but that was for the Thanksgiving sale. You guys have to double check those stores if they still have those deals.

 

On what factual basis? Besides just "personal opinion". And besides "Well...it has to be, it's Microsoft".

It's done very well in ..well...every AS comparison test I've read. On top of that, I've used it hundreds of times on heavily infected machines as part of my arsenal of tools.

I find the advanced tools very powerful, although most people don't go there so don't know they exist. Especially the System Explorer section..can work with Host file, list of downloaded Active Xs, manage LSPs and BHOs, Startup (basically a more GUI msconfig).

To top it off...I can't think of another free AS which provides that kind of power, plus automatic updating, and pre-scheduled scans. Out of the box, on a default setup, it makes things easier for me...and that's what counts.

 

Firewall, good AV and antispyware are far from being an 88 layer cake and is more than sufficient for your average bear.

Part of the problem is that your expectations are unrealistic. Software is like everything else... you get what you pay for. Expecting a free version to offer full functionality is a flawed assumption.

Only reason why MS has Antispyware these days is that it was easier to acquire the tech than write all the code necessary to keep things secure. Their product does perform more than adequately though and is far from weak.

I think with SS 4.5, Webroot is a half step ahead of MS Antispyware in detection.

I do agree on your user paradigm.