Microsoft Antispyware “Ignores” Claria adware

MicroBell · 07-03-2005, 08:53 PM

Will Microsoft trash their own Antispyware product before it even comes out of beta???

You BET!

Microsoft Antispyware still detects Claria’s/Gator's adware but the recommended action is now set to Ignore. This calls into question this product and the thinking behind it if Microsoft caves to future adware/spyware makers requests to be delisted from their database, partners or buys these companys, or has their adware/spyware reclassifyed as to confuse the user of the adware/spyware's true intent.

http://www.dslreports.com/forum/remark,13793423

My point here is quite simple. Since MS tags this as "Ignore" in it's scan...most users will do just that. This means there is adware/spyware on the system....thats NOT being removed by this antispyware product. There's a "WitchHunt" forming accross the net were security analyst may ask user's to remove Microsofts Antispyware program as it can no longer be trusted.

Remember the "Outrage" from users when Lavasofts AdawareSE removed WhenU from their data base? (it has since been added back) You could see it again in the near future!

In a closely related story..MS is trying to buy Claria/Gator.....

(Makes sense now...why they reclassifyed it)

http://www.nytimes.com/2005/06/30/te...tner=TOPIXNEWS

Anyhow...this is the same deal that "Aluria Software" did when they partnered with "WhenU" awhile back. I..along with many other analysts and security experts accross the net that deal in removing this crap from users PC..now recommened the removal of the "Aluria Antispyware" products.

What good is an Antispyware product..thats in "Coohoots" with adware/spyware makers and does a poor job of listing or removing this adware/spyware IF they list it at all?? Microsoft still has time to reverse it's ethically challenged path but as of yet...there has been no progress.

There is one bright spot to this story though. There seams to be some "Conflict" within the Microsoft internal family on this issue. Maybe they can make the $$$$$$ hounds within MS ...wake up before it's too late and avoid this major mistake!

Their is quite a few antispyware products..that do the job without assocations with adware/spyware makers.

LavaSofts AdawareSE
SpyBot Search and Destroy
SunBelts CounterSpy
PestPatrol
Webroot Spy Sweeper

EDIT::: ScreenShot of MS Antispyware with latest database installed..

tetonbob · 07-03-2005, 10:24 PM

Strike 3...MSAS is out for me....I had only been using it as a testing tool, and was not convinced of it's efficacy, due to many FPs, and due to it's annoying pop up windows on startup, which never seemed to remember my choices for Allow or Block.

Those are minor compared to this OUTRAGE! Hopefully the wiser heads will prevail in the internal arguments which seem to be going on at M$.

Thanks for the info, Dave. I had recently heard MS was looking to buy an adware company....but Gator? Jeez!

07-08-2005, 10:27 PM

amazing what kind of a game going on out there. A brand new dell out of box comes with a spyware. MSAS doesn't detect stuff... It might be the new fashion : certain brand comps come with certain spywares, certain antispyware softwares wouldn't detect certain spywares.. Maybe we should get used to this....

Life is a strange place...

~~Wozer~~ · 07-09-2005, 04:49 PM

from my experience, Pest Patrol sucks, SUCKS, SUCKS!!!

MicroBell · 07-10-2005, 02:54 AM

UPDATE::: 7/9/2005

This hunk of junk Antispyware product is now ignoring more spyware on the scans.

Microsofts Antispyware Product...now sets the following adware/spyware to (action) ignor...which means it will leave it on the PC.

180Solutions
WhenU
New.net,
eZula.TopText
Webhancer

Because of this latest move from Microsoft..I will advise any user that uses this product to get rid of it. If it's bypassing and not removing adware/spyware it's of no use to the consumer.

**godspeeed** · 07-12-2005, 11:05 AM

Here is Microsofts answer.

MicroBell · 07-12-2005, 08:30 PM

Quote:

Originally Posted by godspeeed

Here is Microsofts answer.

Thanks godspeeed. I knew they posted an answer...but the answer is still "hogwash". This product will still be recommend for removal by myself and other security experts out there. It doesn't matter WHY they downgraded it...it matters that they did!

For those of us that battle this adware/spyware every day and know how these products work, what data they collect, were it is sent....ect It won't matter to that poor user that can't track down were the popups are generating from...if Microsofts AntiSpyware Product...won't flag it as bad.

IMO..this was a bad move by MS..and it will show once they try and release the product to the public once the beta is done.

**jgvernonco** · 07-13-2005, 08:43 AM

I thin that MS Antispyware can now be classified as a "rogue" program and put out of it's misery everywhere that it is found.

tetonbob · 07-13-2005, 10:26 AM

That's a great idea, jg! Has anyone submitted it yet to Eric?

Maybe that will get the mighty's attention.

MicroBell · 07-13-2005, 09:05 PM

UPDATE::::

While I Agree the MS product should NOT be used to remove spyware/adware anymore...MS heard the people screaming about buying an adware company.

Microsoft/Claria Deal goes BUST!

http://www.clickz.com/news/article.php/3519521

IMO though...it's too late to save the REP of MS. Since their delisting of this adware and the others I mentioned go unchanged..so does my opinion of the MS product.

07-13-2005, 09:13 PM

isnt windows a spyware itself anyway ? can't or doesn't microsoft collect any personal information ? do they need spyware company technologies ?

**BMR777** · 07-15-2005, 03:28 PM

Does anyone know how the program's Real Time Protection treats Claria and the other "Ignore" entries when they try to install? Does it still have the "red scary block box" or the "equally annoying blue box with no info" pop up? Or does it just let it install?

BMR777

**POADB** · 08-06-2005, 04:15 AM

Who cares BMR777 - if you have it - uninstall it..

Microsoft AntiSpyware - it’s rogueware (or known to be rogueware in the past) and we highly recommend that you uninstall it. Rogue/Suspect means that these products are of unknown, questionable, or dubious value as anti-spyware protection.

**dj913** · 08-08-2005, 02:11 PM

I would still be curious with BMR777's question, if it will ask or block it or do nothing. What are some other programs that have real-time protection?

**POADB** · 08-08-2005, 02:50 PM

Quote:

Originally Posted by djw2009913

I would still be curious with BMR777's question, if it will ask or block it or do nothing. What are some other programs that have real-time protection?

My setup

Nod32 AV
Zone Alarm Firewall
Adaware SE
SpyBot Search & Destroy with TeaTimer enabled
SpywareBlaster
SpywareGuard

I've been doing very well.

**dj913** · 08-08-2005, 03:37 PM

Oh yeah Tea-Timer i will enable that and check out those programs. Thanks

skate_punk_21 · 08-08-2005, 04:14 PM

Quote:

Originally Posted by POADB

Who cares BMR777 - if you have it - uninstall it..

Microsoft AntiSpyware - it’s rogueware (or known to be rogueware in the past) and we highly recommend that you uninstall it. Rogue/Suspect means that these products are of unknown, questionable, or dubious value as anti-spyware protection.

LMFAO!! I've heard that speech before...

**Resolution** · 12-02-2005, 01:10 PM

I thought I would revive this thread to ask a question. Has there been anymore reports of MS Antispyware ignoring other spyware? I purposely downloaded 180solutions, Comet Cursor, Virtual Bouncer (products that were reportedly set to ignore), and the latest version of the program recommended to remove or quarantine the items, however, I noticed Claria products and Whenu/SaveNow are still recommended as Ignore.

**POADB** · 12-03-2005, 04:28 AM

Thats because M$ tried to buy Claria.

MicroBell · 12-03-2005, 12:56 PM

Resolution,

As far as I know..No...but I'm not sure when the last test was done. Anyway..the only programs out of what you posted that I know MS was set to "Ignore" was 180. As MS makes "Deals" with these spyware/adware makers there's no doubt from time to time the database will change to reflect this.

The main point being...MS is willing to change the classification of adware/spyware in an effort to favor adware/spyware vendors which makes this product an untrustworthy scanner to remove and prevent adware/spyware from getting on the system or removing it when it does.

There's many other programs that are a better choice for protecting yourself then this product.

07-03-2005, 10:24 PM	#2 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,155 OS: 2000 Pro; XP Pro; XP Home	Strike 3...MSAS is out for me....I had only been using it as a testing tool, and was not convinced of it's efficacy, due to many FPs, and due to it's annoying pop up windows on startup, which never seemed to remember my choices for Allow or Block. Those are minor compared to this OUTRAGE! Hopefully the wiser heads will prevail in the internal arguments which seem to be going on at M$. Thanks for the info, Dave. I had recently heard MS was looking to buy an adware company....but Gator? Jeez! __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

07-10-2005, 02:54 AM	#5 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,962 OS: Windows 7	UPDATE::: 7/9/2005 This hunk of junk Antispyware product is now ignoring more spyware on the scans. Microsofts Antispyware Product...now sets the following adware/spyware to (action) ignor...which means it will leave it on the PC. 180Solutions WhenU New.net, eZula.TopText Webhancer Because of this latest move from Microsoft..I will advise any user that uses this product to get rid of it. If it's bypassing and not removing adware/spyware it's of no use to the consumer. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder

07-12-2005, 11:05 AM	#6 (permalink)
godspeeed I helped the forums. Join Date: Jun 2005 Location: Canada Posts: 298 OS: Win 7 RC	Here is Microsofts answer. __________________ Nietzsche: God is dead 1887 God: Nietzsche is dead 1900

07-13-2005, 08:43 AM	#8 (permalink)
jgvernonco Old Timer Join Date: Sep 2003 Location: Northern Arizona Posts: 7,958 OS: Vista Home Premium, SP 27	I thin that MS Antispyware can now be classified as a "rogue" program and put out of it's misery everywhere that it is found. __________________ Donations keep TSF moving forward. Please help. http://www.myspace.com/speedbumpthecelt

07-13-2005, 10:26 AM	#9 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,155 OS: 2000 Pro; XP Pro; XP Home	That's a great idea, jg! Has anyone submitted it yet to Eric? Maybe that will get the mighty's attention. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

07-08-2005, 10:27 PM	#3 (permalink)
PurpleSky Guest Posts: n/a OS:	amazing what kind of a game going on out there. A brand new dell out of box comes with a spyware. MSAS doesn't detect stuff... It might be the new fashion : certain brand comps come with certain spywares, certain antispyware softwares wouldn't detect certain spywares.. Maybe we should get used to this.... Life is a strange place...

07-09-2005, 04:49 PM	#4 (permalink)
~~Wozer~~ Troubled Join Date: Oct 2004 Posts: 1,038 OS: 2kpro/XP pro/MCE	from my experience, Pest Patrol sucks, SUCKS, SUCKS!!!

07-13-2005, 09:05 PM	#10 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,962 OS: Windows 7	UPDATE:::: While I Agree the MS product should NOT be used to remove spyware/adware anymore...MS heard the people screaming about buying an adware company. Microsoft/Claria Deal goes BUST! http://www.clickz.com/news/article.php/3519521 IMO though...it's too late to save the REP of MS. Since their delisting of this adware and the others I mentioned go unchanged..so does my opinion of the MS product. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder Last edited by MicroBell; 07-13-2005 at 09:08 PM.

07-13-2005, 09:13 PM	#11 (permalink)
PurpleSky Guest Posts: n/a OS:	isnt windows a spyware itself anyway ? can't or doesn't microsoft collect any personal information ? do they need spyware company technologies ? Last edited by PurpleSky; 07-13-2005 at 09:15 PM.

07-15-2005, 03:28 PM	#12 (permalink)
BMR777 TSF Enthusiast Join Date: Apr 2005 Location: Chicago, IL Posts: 1,398 OS: XP Pro, XP Home, Vista Home Basic, Ubuntu Studio Blog Entries: 2	Does anyone know how the program's Real Time Protection treats Claria and the other "Ignore" entries when they try to install? Does it still have the "red scary block box" or the "equally annoying blue box with no info" pop up? Or does it just let it install? BMR777 __________________ Brandon Rusnak Protection: AVG Free Anti Virus :: Windows Defender :: Hosts File :: SiteAdvisor :: ZoneAlarm Quick Fixes: 5 Steps to remove spyware

08-06-2005, 04:15 AM	#13 (permalink)
POADB Moderator, Microsoft Support Join Date: Jul 2004 Location: United Kingdom Posts: 6,481 OS: XP SP2	Who cares BMR777 - if you have it - uninstall it.. Microsoft AntiSpyware - it’s rogueware (or known to be rogueware in the past) and we highly recommend that you uninstall it. Rogue/Suspect means that these products are of unknown, questionable, or dubious value as anti-spyware protection.

08-08-2005, 02:11 PM	#14 (permalink)
dj913 TSF Enthusiast Join Date: Jan 2005 Location: MA Posts: 613 OS: WinXP Home Primarily	I would still be curious with BMR777's question, if it will ask or block it or do nothing. What are some other programs that have real-time protection?

08-08-2005, 03:37 PM	#16 (permalink)
dj913 TSF Enthusiast Join Date: Jan 2005 Location: MA Posts: 613 OS: WinXP Home Primarily	Oh yeah Tea-Timer i will enable that and check out those programs. Thanks

12-02-2005, 01:10 PM	#18 (permalink)
Resolution TSF Enthusiast Join Date: Sep 2005 Location: Louisiana Posts: 1,091 OS: FreeBSD/Win98/2000/XP	I thought I would revive this thread to ask a question. Has there been anymore reports of MS Antispyware ignoring other spyware? I purposely downloaded 180solutions, Comet Cursor, Virtual Bouncer (products that were reportedly set to ignore), and the latest version of the program recommended to remove or quarantine the items, however, I noticed Claria products and Whenu/SaveNow are still recommended as Ignore.

12-03-2005, 04:28 AM	#19 (permalink)
POADB Moderator, Microsoft Support Join Date: Jul 2004 Location: United Kingdom Posts: 6,481 OS: XP SP2	Thats because M$ tried to buy Claria. __________________

12-03-2005, 12:56 PM	#20 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,962 OS: Windows 7	Resolution, As far as I know..No...but I'm not sure when the last test was done. Anyway..the only programs out of what you posted that I know MS was set to "Ignore" was 180. As MS makes "Deals" with these spyware/adware makers there's no doubt from time to time the database will change to reflect this. The main point being...MS is willing to change the classification of adware/spyware in an effort to favor adware/spyware vendors which makes this product an untrustworthy scanner to remove and prevent adware/spyware from getting on the system or removing it when it does. There's many other programs that are a better choice for protecting yourself then this product. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder