The Register® — Biting the hand that feeds IT

There is no anti-spyware silver bullet

Plenty of base metal about though, consultants warn

Free whitepaper – Extended Validation SSL Certificates

The spyware threat to enterprise security will increase over the next few years without an enterprise-class tool to prevent it, consulting firm META Group warns.

Spyware has both good and bad properties that make it difficult for traditional antivirus software to identify and clean up, leaving only a handful of consumer and emerging corporate solutions to combat the problem. And that's pretty risky too.

On a new website online forum, Spywarewarrior claims that many of the anti-spyware tools available are actually malware or spyware themselves.

Some of these products simply do not provide proven, reliable anti-spyware protection. Others may use deceptive sales tactics and false positives to scare up sales from confused users. Few of these products are either associated with known distributors of spyware/adware.

For instance: eAcceleration/Veloz Stop-Sign is accused of carrying "deceptive advertising" for sites related to CoolWebSearch, one of the worst trojans around. NoSpyX promises a free scanner, but then demands purchase. Others are known to have stolen databases from other anti-spyware vendors.

At the moment, META Group says, there is still no "silver bullet" enterprise-class tool to protect against spyware, so the IT world must address the problem through a combination of policies, procedures, and products until more complete enterprise-class solutions become available.

META Group believes antivirus vendors are in the best position to provide extended threat protection once they enable clean-up tools, and provide a more complete signature database of spyware threats. ®

Related stories

CoolWebSearch is winning Trojan war
When spyware crosses the line
US moves towards anti-spyware law
Utah sees first spyware case
The average PC: spyware hotel

Free whitepaper – Securing your Microsoft Internet Information Services (MS IIS) web server

Don’t Miss

HandcuffsFeds: Hospital hacker's 'massive' DDoS averted

Arrest foils 'Devil's Day' scheme

thumbs down teaser 75Buggy 'smart meters' open door to power-grid botnet

Grid-burrowing worm only the beginning

MicrosoftMicrosoft knew of nasty IE bug a year before attacks

Security delayed or security denied?

BlockMaster SafeStickBlockMaster SafeStick hardware-encrypted USB drive

Review Tough enough?