Microsoft AnitSpyWare Beta

[Keith Heitmann]

If you use a spyware program like Ad Aware or Spybot, get ready for a shock. Microsoft's new AnitSpyWare Beta version program is the top rated Spyware removal program in the national consumer magazine "Consumer Reports" August edition and its a free download!

www.microsoft.com/athome/security/spyware/software/default.mspx

Ad Aware and Spybot both finished in the middle of the pack in the CR test report.

I downloaded the 6.4MB program tonight and installed it and ran it and low and behold it found a unclassified trojan for browser hijacking, a spyware program, a adware program, and program that was classified as probably undesireable. Each of these programs had severa key entries in the registry as well totalling for some 11 previously undiscovered registry keys.

I removed the three and quarantined the one "undesireable" because it may have been put there by some registered software and I can restore it later.

The program and be setup to autoscan any time of the, autodownload updates to the spyware data reference, and make a system restore point before it acutally takes action against any suspected spyware, trojans, etc. The program also offere real-time protect and will popup a warning if anything new is attempting to install itself on your system let you block it up front.

After installing the program and cleaning my computer withit, which it did about 50% faster than Ad Aware, I got a warning popup that something was attemting to change my default MSIE home page setting from about: blank to another URL. I blocked the attempt and that was the end of that.

So far I'm impressed. MSAS is going to be my primary removal program from now on.

[Phil Walker]

Sounds impressive. However I noted this is a "beta" version. Will there be a "full" version coming or is this it?! If so, will there be any cost?! This inquiring mind wants to know ;D!!!

Sincerely,
Phil

[Keith Heitmann]

Yes, there will be a release version eventually. This beta version is supposed to expire on Dec 1, 2005, when you may have to download the next version. There are a few known issues that you can read about on the links on that page I provided the URL to above. I don't know what the release version will cost if anything.

I can say that it ran smoothly for me and it scanned my entire system about 50% faster than Ad Adware.

[Phil Walker]

Good enough! If it will cost I'm sure will be worth every penny. Will download and read-up on it later and thanks!!!


Sincerely,
Phil

[Keith Heitmann]

One thing I really like is that in the ADVANCED TOOLS System Explorers section you can go through each ActiveX object and it will tell you if it is a known or unknown control. You can shut it down individuall and/or send a copy of it to SpyNet for analysis by clicking on a link. You can also examine running "processes" on your system one by one, and any startup programs you have running.

It also lets you examine any Browser helper options added to your browser and you can delete them or block them. I have one BHO that is missing its file, probably spyware program I removed manually. Its telling me I can delete the registry key for the file by clicking on the link provided, which I will now do.

"A browser helper object (BHO) is an application that extends Internet Explorer and acts as a plug-in. Spyware as well as browser redirectors often use BHOs to display advertisements or follow your activities across the Internet. BHOs are also used by a number of legitimate applications."

It also has a section that lets you examine any web browser toolbars added to MSIE and deal with them. Also, there is a section for any WinSock Layered Programs and any Windows Shell Hooks.

I setup my copy to autoscan this morning and here is what the report says:

"Spyware Scan Details
Start Date: 8/7/2005 11:00:08 AM
End Date: 8/7/2005 11:18:27 AM
Total Time: 18 mins 19 secs

Detected Threats

PowerReg Scheduler Potentially Unwanted Software more information...
Details: PowerReg Scheduler is a registration system used by some legitimate software programs.
Status: Ignored
Moderate threat - Moderate-risk items have some potential for harm, but may be part of a wanted service. Users may decide to ignore such programs after review.

Infected files detected
c:\system volume information\_restore{987e0331-0f01-427c-a58a-7a2e4aabf84d}\rp171\a1091277.exe


Detected Spyware Cookies
No spyware cookies were found during this scan. "