|
* Desktop Anti-Spyware-Many host-resident anti-spyware programs are available as consumer packages or enterprise solutions. Features vary, but most provide start-up scans, on-demand scans, and real-time memory/file/application monitors. On-demand scans can provide periodic audits, but real-time monitoring is essential to avoid complicated cleanup. Fortunately, anli-spyware has evolved from spotting consequences to quarantining spyware before damage is done. Anti spyware programs have long detected potentially-unwanted changes to cookies, registry keys, hosts llles, browser /ones and running services-signs that spyware is being installed. Some anti-spyware programs can block activities that presage spyware installation, like suspicious ActiveX execution and browser helper object installation. Most anti-spyware programs use signatures to compare Web and other application objects to thousands of known culprits, preventing installation of NonBizWare, hacker tools, keyloggers, trojans and worms. To keep up with new spyware that morphs, behavior-based detection is being added to some anti-spyware programs. And to detect evasive threats like rootkits, anti-spyware programs have also started to monitor activity with lower-level drivers. Anti-spyware options like scan location/depth and exclusions can be helpful-for example, ignoring an IM client used for business or your own website's adware cookies. Most anli-spyware programs keep a local log of detection results, with hot links to spyware definitions, ratings and advice. However, anti-spyware programs may or may not provide automated spyware removal (see the section on "Remediation"). Some consumer anti-spyware programs provide free scanning, but require a paid license to activate advanced features. Because spyware detection varies, running more than one program can be useful, and combining a paid program with free tools is common. Freely-available consumer anti-spyware programs are available from many sources, including Microsoft Windows Defender, SpyBot-S&D and WinPatrol. Why spring l'or a commercial desktop anti-spyware program'.' Vendors that offer both free and commercial anti-spyware tend to reserve the most valuable features-notably real-time monitoring and automated removal-for paid customers. Moreover, SMBs and enterprises require features that are absent in consumer anti-spyware programs:Continued |
