Either Safer Networking Ltd. or Symantec leaving the Anti Spyware Coalition...

Should we follow ASCs definitions of Spyware/PUPS and add NIS to the detections?

  • Yes, detect NIS completely!

    Votes: 222 67.3%
  • Yes, but detect only some harmless files to wake up people.

    Votes: 26 7.9%
  • No, please waste our donations to go through legal channels, instead of using them to fight malware.

    Votes: 8 2.4%
  • None of the above.

    Votes: 74 22.4%

  • Total voters
    330
Status
Not open for further replies.
Hello, NIS 2005 was given with my laptop when I bought it last christmas (yes its old for a computer sold in 2006).
Don't think it was a gift, just a crap on my system ;) so I downloaded the remover and Bye Bye NIS !
Now I use BitDefender Internet Security 10, it's much better than Norton, I added Spybot. My computer is perfectly clean and if I get infected, I know how to disinfect it :D

I think you should add NIS 2004 to 2007 to the PUPS because it's really hard to remove without the symantec remover, like a spyware, and it decreases the computer security by asking the user to remove almost any another security software for the last version (can't use another firewall, antispy or antispam with 2007 I think).

In conclusion NIS is a sh*t !!
 
"Yes detect NIS completely."


I am not using the Tea Timer, so I hope NIS and Spybot will work peacefully together on my machine.
 
Yes Tit for Tat

Yes Spybot should do that for NIS.Since last 5years Iam using Spybot and its a fanatstic products to say always update with the time.I dont remember how many people I recommended this product and everybody say its nice.Any cybercafe I visit if I found the problem with IE browser I installed this product to browse smoothly though now days I prefer Mozilla Firefox browser than IE still I use Spybot for adware and malware.Every time I tried to use NIS though it came free with my new PC my memory goes to hell and system slows down so I uninstaled it:banghead:.Please do this to NIS.:red:
 
Dell is leaning more towards giving consumers a choice.

For many machines, one can choose to decline the security packages. Ditto for monitors.

Regards.
 
That's good to hear. As an absolute noob when I got a Dell 1 1/2 years ago it came with all this "free" stuff. Later, when it had all expired and then un-installed, the only thing that left more baggage behind than Norton was AOL.

KW
 
Dell is leaning more towards giving consumers a choice.

For many machines, one can choose to decline the security packages. Ditto for monitors.

Regards.

... and ditto for the OS it seems these days. you may note on many of their application restore cds included with the system, from even fairly old Dells, they have both Norton and McAfee options for anti-virus... I don't know how they came from the factory as one of them must have been originally installed.. perhaps the customer actually had the choice all this time, or maybe they needed to know that ahead of time and specify it when purchasing the computer...

As a technician all I hear from people (aside from pop-ups in the last 4-5 years) is speed speed speed. For that reason I always consider Norton, once a good product before Symantec purchased them like so many others, a PUP.

I make sure to stress the "Potentially" before "Unwanted Program" because it's a case of the cure being almost as bad, AS bad, or occasionally even WORSE than the problem.

It's not uncommon for someone to get their computer back clean from viruses and ad/spy/malware and then go buy Norton retail (usually because I inform them their old A/V was expired for years,) then call me back up wanting to know why their computer is slower than it was when they had the viruses! On occasion someone will bring the system back to me insisting it must still have viruses because it's so slow, and when I see they've bought the latest Norton Internet Security or worse, AND SystemWorks, the newer McAfee, etc. then I have the pleasure of attempting to explain why the "prevention" is often worse than the "problem." I actually had someone once who understood this concept right off, and decided he didn't care if his system only used for checking email and playing solitare was constantly sending DDOS attacks to other sites because it was faster with the virus than having anti-virus on his system.

But in all honesty detecting Norton as a PUP is sinking to their level and not a very good idea.

Now a great idea for Spybot and PUPs especially when their threat level is close to non-existent, is to have a section/popup/report devoted to "beyond malware: how to further speed up your computer and minimize the risk of problems" with recommendations on removing bulky and ineffective A/V such as Norton and replacing with something sleek and unobtrusive like F-Prot (or something more comprehensive yet doesn't slow the system down much, perhaps G-Data.)

It could also detect and recommend removing pointless system monitoring and registry utilities or things that never get used, such as with SystemWorks, or those "registry cleaners" that don't do any good and can sometimes damage a system, or MULTIPLE toolbars and pointless BHO's that aren't a threat but can slow down a browser or someday fail and crash one, or those programs that just add registry "tweaks" that may once have been used in Win2k or NT4 but are no longer relevant.

All of these programs aren't really PUPs because they may fully mean well, unlike your Weather apps and toolbars and the like that really are PUPs thanks to their "alternate" functionality, but regardless they are either a pointless waste, a false sense of security or functionality, or worse they could be pointless realtime apps that slow your system down and for no viable reason. Users should be informed of this, and potential side effects of these apps, and allowed the choice to continue using them or not.

Further, it could do the same for firewalls, perhaps with an advisory on why you can't connect to any internet site may be that the NIS firewall can sometimes go foobar after a malware infestation, despite it being removed and you triple checking the NIS config; (of course I've seen this issue with the bulky and slow McAfee and ZoneAlarm firewalls too) then a recommendation on a more comprehensive firewall that is much lighter on the system resources like Sygate, (doh, recently purchased by Symantec... hmm...) assuming that the client doesn't just want to stick with the XPSP2 outbound only firewall... it could even be suggested that an external firewall be purchased just to have all of the options laid out, informing them of the problems with software firewalls at the system level, putting the information in the hands of the consumer, not keeping blinding them from that information.

Maybe take it one step further and suggest that a 3rd party "Security Center" application may not be the best option, especially if you are no longer going to use that company's AV/Firewall products!

Problem is program installers like NIS bully the customer into using their security center and firewall and all that without really informing the customer of what is being done, and what is being replaced. They are all PUPs if you ask me, but Symantec definitely is the leader of the PUPs.

How about that new start page fix that hijacks your start page to a symantec site, then brags on how your start page must have been hijacked by malware (probably because it's not the one listed in the iesetup.inf or wherever) and asks you if you want to lock it on symantec! there's no "P" in the "UPs" there. that's just wrong! F U Symantec! Yeah, they mean well, but they go about everything all wrong.

Moving on...............

The REAL problem for Spybot is recommending 3rd party software, yet it MUST be done if you plan on telling users of the pitfalls of their current software. I try to avoid that as a technician, because:

A. you never know when you will offend someone because they've used that particular product for many years without issue or noticing how much better something decent is, and

2. the product(s) you do recommend may fail them at some point, as we all know happens across the board and more often than not, it has little to do with the product itself and more to do with a new threat, discovered exploit, or it's usually just user negligence or misinformation.

In either case, you may loose a user and supporter of your product because of it. Then you become a second rate app in the minds of many.

Anything more blatant like just detecting Symantec as a true PUP and you've sunken to Symantec's level, then you become a second rate app in the minds of many.

Perhaps worse, by "detecting" Symantec on a system in a nice way, while at the same time not recommending a good replacement application, you appear to be either careless with your users' systems/privacy/security, or you appear to be just another fraud pretending you know what you're doing; then you become that same second rate app in the minds of many.

Well, that's just my 2 U.S. cents. I'm not an optimist, that's for sure, but I believe reputations are difficult to maintain especially when you are the righteous. so take it for what you will...

EDIT: I forgot to mention I voted for "None of the above" ... really as I see it the only option is to inform the Symantec consumer of the situation (AND of the side effects of running Symantec products.) In this case, the truth shall set you free!

I still like the idea of the separate section for well-meaning PUPs and/or "how to improve your computer's speed and/or security" which could feature Symantec products (AMONGST OTHERS...)

...but detection and removal is out of the question, as is detection of harmless files with any option of removal because you may wake people up to your app being dishonest and second rate; it would only work if you detected Symantec and then gave the information to the consumer. Also legal action since it'll never stand against a company like Symantec on your budget (whatever that may be.)

JUST PLZ make sure to add a /nosymatecwarn parameter or .INI setting so it doesn't interfere with my automated scanning/removal scripts for Spybot! ;)
 
Last edited:
norton just a waist of money

i had norton system works and notorn internet security and i didnt keep either long system works was great but took up to many computer resources and internet security right after i installed it i got a virus infection i had a test done to see if my system was safe and it came up that the firewall didnt have much security i dont know how norton gets such a high raiting it really isnt that great
 
Last edited:
Argh. In 90 minutes I went from positive to very negative feelings towards Norton/Sy

In 90 minutes I went from positive to very negative feelings towards Norton and Symantec. I've been dealing with a major infection of several pieces of malware. Spybot has been invaluable in dealing with this, but I've been having persistant problems. New malware kept popping up on my system. I wanted to get a two-way firewall so that the junk on my system wouldn't communicate with the outside. I was afraid that it kept ordering new malware and could send personal information to bad people.

A company was recommended to me, but they were acquired by Symantec. What the hell, I thought, I'll just bite the bullet and get it. It has a double firewall.

I had just purchased Norton 360, but hadn't installed it, when I found this thread. Oh. My. God. No way am I giving up Spybot, and it sounds like there are other reasons NOT to use Symantec, not the least of which is that they are acting like big evil corporate pigs towards you guys.

Anyway, I filled out the form to get a return. They sent me a link to a Letter of Destruction, guaranteeing that I would kill the product I received, on pain of up to $100,000 in civil liability. Fine. I'm happy to delete it.

However, I pressed "Accept" and some extra buttons appeared. Weird stuff like "search" or something. It looked like a kindergartener had written the program.

The accept and decline buttons remained. I hit the accept button a second time. It disappeared.

I reloaded the form. Several times. It now ONLY has a DECLINE button. I guess it's possible that my accept went through. There's no evidence that it did.

I hope they answered my email, otherwise I'm gonna have to stop payment with my credit card. I guess.

I don't think I've ever had my opinion of a service provider have such a sharp reversal.
 
I've hated Norton for the last couple of years since they total my computer with NIS 2005. I don't think much to Microsoft either because of all the dogey updates that have caused all kinds of trouble for me over the years. Although I thoughly dislike Norton, Adding ANY NIS products to the definitions list would be corporate suicide since Synmantec would sue you to death and your good name would be dragged through the dirt. I personally belive the best way to go about this unfortunate mess is to just keep delveloping Spybot and getting it as good as you can and eventually people will decide to ditch NIS and its system destroying "Issues" (e.g. wreaking Outlook Express 6 and causing it to crash Windows when you try to shutdown the computer) for the better product that is Spybot.

I agree.
 
From March 2005 to December 2005, Symantec labeled Spybot-S&D as incompatible to Norton Ghost, and endangering backups, with no reason given to us in 19 months now. Since October 2005, Norton Internet Security has told users that Spybot-S&D would be incompatible and they had to remove Spybot-S&D.
Eleven months later, Symantec has given us just one explanation that was mostly invented and not fitting. Even though Symantec again promised changes, they have now released Norton Internet Security 2007 which again urges the user to uninstall Spybot-S&D.

We would have loved to work with them to remove any incompatibility, but although they were eager to tell their customers about these so-called 'incompatibilities', even threats of legal action could not persuade Symantec to give us any details. Well, actually they promised they would send us details, but those promises haven't been fullfilled for nearly a year. Is Symantecs Quality Assurance department so bad that they can't either find the old reports or re-test?

Both of us are members of the ASC, the Anti Spyware Coalition, a group of anti-spyware companies working together - in theory. The ASC has discussed Best Practices for half a year now. Sadly, this seems to only affect practices against malware creators, while coalition members are allowed to fight each other as much as they want.

If we created spyware instead of anti-spyware, we probably would laugh various body parts at seeing how one anti-spyware application removes the other.

Arbitration by the ASC has only resulted in broken promises by Symantec.

We will therefore bring a motion in front of the ASC to expel Symantec for damaging the ASC through its practices of illegal improper competition and libel, resulting even in malware creators being able to spread their malware better. Should this motion be rejected by a majority of ASC members, we most likely leave this coalition as it would then appear that ASC is favoring libel as a proper way of competition.

If you think that anti-spyware companies should fight spyware creators instead of each other, please send an email to ASC members of your choice, found here, and/or to the ASC itself, at asc@cdt.org.


Following that, thinking on how we could stop Symantec, we have two options: taking expensive legal steps, or behaving the same way as Symantec, accepting the removal of a competitor as a "legit" step.
Should we add detection for Norton Internet Security 2006 and 2007 as Malware or Possibly UnPopular Software (PUPS)?

* Yes, detect NIS completely!
* Yes, but detect only some harmless files to wake up people.
* No, please waste our donations to go through legal channels, instead of using them to fight malware.
* None of the above.

Please note that under ASCs definition, technology that is implemented in ways that impairs user control over material changes that affecs their system security, in other words software that urges changes that reduce system security like NIS does, falls under the term Spyware (and Other Potentially Unwanted Technologies), so adding NIS to the detection would not be revenge, but a strict following of the ASC definitions of that malware description.

Please feel free to vote in this topic, and/or leave your comments, especially if you vote for option 4 (None of the above).

i think you're going overboard on this. Symantec does not act nobly because it is receiving terrible reviews in the forums: all of the gurus advocate against its use, for many reasons (my oem's configuration came with a 12 month subscription to norton 2007 antivirus - and i still ripped it out and replaced it because it is not vista compatible and was wreaking havoc with onecare and vista security center), while spybot is receiving rave reviews - my oem, eg, accolades you.

btw, install a spell check because i'm a terrible typist. and what do you coinsider a reasonable donation - keeping in kind that the powers-that-be keep me in poverty. when are you getting married to the most wonderful girl on earth?
 
I've hated Norton for the last couple of years since they total my computer with NIS 2005. I don't think much to Microsoft either because of all the dogey updates that have caused all kinds of trouble for me over the years. Although I thoughly dislike Norton, Adding ANY NIS products to the definitions list would be corporate suicide since Synmantec would sue you to death and your good name would be dragged through the dirt. I personally belive the best way to go about this unfortunate mess is to just keep delveloping Spybot and getting it as good as you can and eventually people will decide to ditch NIS and its system destroying "Issues" (e.g. wreaking Outlook Express 6 and causing it to crash Windows when you try to shutdown the computer) for the better product that is Spybot.

I also agree with Terminator. Too much legal repercussions for detecting. However we could use the forum to "advise" members to try programs that don't kill their computer(s), such as zonealarm or avg's stuff. After all, by flagging safernetworking in their program Symantec are advising their users to delete spybot s&d. Tit for Tat.
 
I agree with Terminator also

Symantec is soooooo bad that their only hope is to drive everyone else out of the market.
Speaking of folk that just hire lawyers instead of write good code - I joined this form today because I am so upset with what I read about oska not wanting their product detected even if it was installed without the permission of the owner of the computer.
I put together a little letter to send to their support people
==========
RE: Trojans and or spyware installing your product.
Please be aware that unwanted software, especially on systems used by children, is a real problem. There are many ways to keep ones system clean and proper for children ages 6 to 14. Some of these are spyware detection and removal programs.
It would be to your companies advantage to co-operate with the vendors of such software instead of threatening them. There are very strict laws in the US and I believe England and Germany about children and off color material or material parents have not approved of being placed on children's computers. If it can be proven that your company has hampered detection of unauthorized installs of its software, it very well could leave your company open to the legal liability of this material being on the child's system without parental consent. I believe there are prison sentences in England and Germany for these things while in the US people just sue for millions of dollars.
===========
Perhaps others of you could email them something also
supportAToska.com
gayle
 
Last edited by a moderator:
--> http://isc.sans.org/diary.html?storyid=2897 <--

"Published: 2007-05-31,
Last Updated: 2007-05-31 19:09:25 UTC"

"We have received a couple of reports that Symantec Antivirus triggers on the file 'blindman.exe', part of the SpyBot Search & Destroy package. Apparently only the file included with version 1.3 was detected as a trojan, not the one included with the more recent version 1.4

Symantec has confirmed this issue occurred in the 05/30/2007 rev.020 Intelligence Update and LiveUpdate definitions. They've made available Rapid Release definition build 69173 (extended version 05/30/2007 rev. 035) to resolve the issue. LiveUpdate definitions that correct the issue were also published, version 90530ao (Sequence number: 69179; extended version 05/30/2007 rev.041)."

What a feeling... :D
 
Could Spybot fans and lovers be honest with Symantec products?

Hi,

sorry for my English, I'm a French guy but I'll do my best :)

Well, we are on a SB forum discussing about Symantec legitimacy and efficiency of its products. Perhaps Symantec forum do the same :/

I'm using Spybot S&D and Norton AV on my main PC and NIS on other computers and I never got all these problems people report. Perhaps I'm lucky. I also encoutered reliable and really skilled consultants who consider Symantec products are valuable for customers.

I recommend to my friend both of Spybot and Symantec products and I'll never encountered any problem after installation. I admit that Symantec products installation can be tricky and/or touchy but I always succeeded in installations working fine in the long term.

I also recommend users of Spybot products I install to donate ;) and they do as they are happy with their fine working installation.

Well, I hope Symantec will become wise and responsible to solve its incompatibility with Spybot S&D by improving its product rather than libelling Spybot.

I vote for doing anything else than quarelling with each other. But I have some doublt about this when I consider that this argument is open since a so long time (september 2006)

Best regards to all, whatever you think about :heart:Symantec products!
 
Last edited:
I also run spybot and nortons on my system and have no problems with either. If you follow the instruction with both programs for installing, you have a good working machine.
On the above post, Norons did find and correct the problem in a timely manner. I have had occassion where both ad-aware and spybot found files during the scan that were not spyware. It took me at least 30 seconds to fix the problem, but some of you take 30 minutes to complain about it and write messages.
Any two similar programs of any type will sooner or later run into conflicts - there are just too many possibilities. How many of you have NEVER had your system freeze, lock up completely, or crash. If someone can prove to me that this is being done on purpose, I'll be first in line to clobber somone.
I'm not knocking anyone - I'm happy with all of them.

Lynn
 
NIS and Microsoft

I have to admit that I baled on NIS years ago in favor of Spybot, Spybot is such a good product, along with the other goodies like the file analyser and that. I baled on Microsoft not long ago - I switched to UBUNTU - very stable and very good. I hope that Spybot can craft some tools to work with linux, although I don't feel, (although I'm not absolutely sure) that I don't have much spyware on this computer at all (that is why I need a linux spybot to test!!) :-) I should try it with WINE - I'll post back here with results!!

If there are any spybot developers reading this, a linux version would be a good thing - it will take over Microsoft - resistance is futile, Microsoft will be assimilated! :-)

John
 
It works with WINE, but will only check the redundant files on my leftover windows NTFS-3G partition that I have yet to delete. but of course when I do that, SpybotSD will go with it (athough I still have it on numorous backups and that) I wonder if I copy it to /usr/bin/spybot it will work there??!!

:bigthumb:
 
Status
Not open for further replies.
Back
Top