RE: AV that supports spy/adware

Hi,

I'm testing Symantec Antivirus 10.0 Corp. and client security 3.0
(firewall).

I did the best test... Installed KaZaa and DivX.
during the install of kazaa, it displayed a lot of alerts about Gator, BDE,
TopSearch, InstaSearch, P2PNetworking and others spys...

After a reboot all was removed and now my system is "like" clean... process
and .exe files are away (it's the most important thing) but some registry
keys and DLL files still here...

And KaZaa display an error message when the symantec realtime is running.

I think it's not the perfect solution but it give a good first protection
against users who are clicking "YES" on each popups...

And it's manageable from server too...

cheers

Thr 

-----Message d'origine-----
De : Evan Mann [mailto:[email protected]] 
Envoyé : vendredi, 6. mai 2005 17:02
À : [email protected]
Objet : RE: AV that supports spy/adware

No one can comment on how secure the adware/spyware protection that will be
offered by the big AV vendors will become.  I think it will become on par
with the current products out there, in time.  It could take a year or more,
but I think it will happen.  With that in mind, why would you turn down the
extra ease of management feature?  

Yes, layered protection is best, multiple vendors helps give you that, but
if I can simple on the desktop end, and use someone else at a gateway level,
that's the way I'm going to go.

Perhaps my view is skewed as I have over 1200 computers and server to
maintain, and I add on about 20 desktops/laptops a month on average.  If I
only had a few hundred, having to maintain many different products on the
desktops wouldn't be as much of a concern.



-----Original Message-----
From: Steven Hay [mailto:[email protected]]
Sent: Thursday, May 05, 2005 6:35 PM
To: [email protected]
Subject: RE: AV that supports spy/adware

We take the opposite view, looking at separation of Adware and AV; also
filtering both with layered security.  Our logic is not looking at
simplicity of management, but maximizing security protection.  For the most
part the maintenance is low on our filters once they have been set up, but
licensing is admittedly more work.

We have adware and AV filtering through our gateway, and on the desktop NAV
and have plans to use GreenBorder (although this is still in the proposal
stage).  We're hoping that this approach keeps us reasonably secure against
adware (and it's ilk) as well as viruses.  We like the Greenborder concept
because it runs light and doesn't appear to suffer from zero day or patch
weaknesses.

-----Original Message-----
From: Evan Mann [mailto:[email protected]]
Sent: May 5, 2005 1:30 PM
To: [email protected]
Subject: RE: AV that supports spy/adware


Simplicity of management.  Why managed from 2 separate consoles, maintain
two different license agreements, etc., when you could do it all from 1
single point.  Less software to install on a client, less resources used.
Lots of reasons to go down that route.

Sure Spysweeper Enterprise and Sunbelt's CounterSpy Enterprise are the two
best products out there now, and probably will be for at least anotehr year,
but all the major AV vendors will catch up to them and offer equivalent
features, and it will make the choice easy for most large companies.


-----Original Message-----
From: Douglas Schlachta (Sr. Infrastructure Security Analyst)
[mailto:[email protected]]
Sent: Thursday, May 05, 2005 2:19 PM
To: Dave; [email protected]
Subject: RE: AV that supports spy/adware

Why would you even want to go down that road.

There is an excellent product on the market by WebRoot that is enterprise
manageable.

They appear to also be one of the main leaders in this area.
I would give them a check just to see. IMHO


Regards
Douglas Schlachta
SSCP, MCSE;Security, MCSE, CCNA, CFOT
Senior Infrastructure Security Analyst
Retirement Residences Operations



> -----Original Message-----
> From: Dave [mailto:[email protected]]
> Sent: May 5, 2005 1:00 PM
> To: [email protected]
> Subject: AV that supoprts spy/adware
> 
> Anyone have a list of AV that detects spyware? We are currently using 
> eTrust with spybot and the MS beta antispyware. I'd like to get 
> something that's integrated. Thanks.

Please note that Internet email is not always private, secure or reliable.
The sender accepts no liability for any damages caused by any virus
inadvertently transmitted with this email.  Any opinion expressed in this
email is solely that of the author, unless clearly indicated otherwise.
This email, and any attachments, may contain confidential and/or proprietary
information that is intended only for use by the addressee.  If you are not
the intended recipient, any use, dissemination, forwarding, printing, or
copying of this email is strictly prohibited.  If you received this email in
error, please delete the email and advise the sender of the delivery error.