Do we REALLY stand a chance against Spyware?

[Ant]

Here's a strange one:

We recently installed some commonly available software to keep an eye on our kid's net surfing habits. This software records all URLs visited, and its key logging facility records everything typed. Cleverly, it is invisible in that it doesn't appear in the Programme Files folder or the Start folder! (how do they do that?).

Anyway, knowing that the programme is in essence SPYWARE, I was shocked that McAfee antispyware along with ZoneAlarm Pro and Spybot Search & Destroy completely failed to flag it up when installing it or when running a check. What??

If this one is undetectable, then what chance do we have against the really malicious stuff we may inadvertantly download onto our systems?

[Globaliser]

Anyway, knowing that the programme is in essence SPYWARE, I was shocked that McAfee antispyware along with ZoneAlarm Pro and Spybot Search & Destroy completely failed to flag it up when installing it or when running a check. What?? But those programs don't simply look for things with the characteristics of spyware. They look for specific known targets, which is why they have to be updated just like virus scanners.

I'll bet that the program you use is something which, although has some of the characteristics of spyware, is known to be benign and is therefore not in the database of "bad" programs that need to be detected and removed.

[IO540]

The major AV programs don't detect stuff like spyware. One can get specialised detectors for those, but a known commercial product may be undetected deliberately.

There is just one comprehensive anti spyware solution: don't use the internet, other than going to a known good site, whose URL is either typed in or selected from Favourites (having been originally typed in). If you use a PC for online banking, don't run any Micro$oft email program on it, and definitely do not allow children or (especially) teenagers on it.

Applying all the latest M$ patches is also v. important.