[spurkbik201]

I use Mozilla Firefox current version 2.0.0.11 as my primary web browser, using Internet Explorer on occasion only if Firefox will not work with a particular website. My question is what the most effective *real-time protection* anti-spyware software for browsing with Firefox? Though free is great, I am ok paying $20 to $50 if it works well. It seems much of the anti-spyware software with real-time protection out there seems to be targeted to Internet Explorer such as Webroot SpySweeper which is highly rated, and I like the interface in its free trial. I am looking for anti-spyware software that is simply that, and does not have the firewall and anti-virus components as I am satisfied with my software for that.

Some background of my PC security defenses:
* I have been spyware free on this PC until I 'upgraded' my Adaware Pro 6 to Adaware Pro 2007 with Ad-Watch and RegShield, and in the last two months my Zone-Alarm Security Suite (current version 7.0.462.000) anti-spyware scanner found two keyloggers weeks apart named Ardamax and Backdoor Prorat which I have been able to remove, and they have not appeared on subsequent full scans. I am thankful that Zone-Alarm found these for the sake of finding them, though I question how these got onto my PC. Now I do a full scan for spyware with Zone Alarm at least weekly where as before done once monthly. Spybot v1.4 failed to find this recent spyware even when scanning with it just prior to the Zone Alarm scans, so I have uninstalled this as a backup scanner.
* Unlike the Zone Alarm anti-virus I have with real-time protection, Zone Alarm anti-spyware is only a scanner, though in my opinion a very good one, but it is does not provide real-time protection.
* For the moment, I recently installed the free Microsoft Defender software as another backup for real-time anti-spyware protection, though I have read it is not as effective as other anti-spyware solutions.
* For firewalls, I have a Linksys *wired* router and Zone Alarm as firewalls, both with other than the default passwords, which my PC passes monthly testing at website http://security.symantec.com/sscv6/d...GZBZTVOGXFSTZH (good idea I believe to test your firewall defenses with a competitor's scanner). I do not have other Norton or Symantec software installed.
* As part of the Zone Alarm Security Suite I have installed, my definitions for anti-virus and anti-spyware automatically update every day. It has been two or more years since I had a PC virus, and none on the Dell PC I have had for less than a year which I confirm by running a scan monthly with Zone-Alarm.
* I am cautious surfer even using Firefox. I have the McAfee SiteAdvisor plugin http://www.siteadvisor.com/sitemap.html installed telling me if a website is rated safe or not (color coded green, yellow, red). Unless I have a website bookmarked as one I frequently use and is rated as safe, this tool I use scans Google, Yahoo, and MSN search results and color rates them. If I get a weblink otherwise such as through email, I check its safety rating against the McAfee SiteAdvisor website first.
* I have SpywareBlaster installed and keep it updated for Firefox and IE.
* I use Pocomail software (a Canadian company) that markets a product similar to former USA Eudora shying away from Microsoft products for that. I received less than five spam a month with my current email service, and they block nearly all infected emails. Before opening any email attachment, I virus scan it with Zone Alarm and spyware scan it with Adaware Pro. Zone Alarm also quarantines any suspect email attachment on receipt (has found five in the last year).
* I keep the other software i.e. Adobe, etc. I use that connects to the Internet updated either automatically if that option is available or manually. I do not use Instant Messaging, nor have ever installed it on this PC. I do not download music, games, etc. from free websites.
* I have followed your sticky 'How to tighten Security Settings and Warnings' to further defend my PC shortly after getting this PC brand new nearly a year ago.

[lotuseclat79]

Hi spurkbik201,

SpySweeper from Webroot has real-time active processes that have little to do with IE. You are smart to use Firefox instead of IE which I only used in the past to get WinXP security updates on update Tuesday when it was required.

Using Firefox has eliminated ActiveX as an attack vector. NoScript is a very useful Firefox Add-on extension to control JavaScript. I use the netcrafttoolbar Add-on for Firefox to help prevent against phishing attacks.

When I was using WinXP Pro SP2 I used the free research version of Prevx1R HIPS as additional security. The Firefox extension, CustomizeGoogle, helps to protect privacy - it has two privacy controls that are useful. The Firefox Add-on extensions Safe-Cache defends against cache-based privacy attacks, and SafeHistory defends against visited-link-based web privacy attacks.

IMO derived from my experience of using SpySweeper with its real-time process protections (which I quite liked), that should be suffcient.

-- Tom

[lunarlander]

I have been using Webroot for half a year now and all is well.

Lotuseclat, do you think Vista's IE running in protected mode also address the active X vector?

[spurkbik201]

Thanks lotuseclat79/Tom, the no script Firefox Add-On is especially helpful. I am surprised even among my bookmarked websites, news, weather, shopping, that some so many of them run third-party scripts that track website activity.

Sad to say, when I first installed Webroot SpySweeper, it was only the free scanner version. I had uninstalled it, and then installed the trial full version. Then I spent 1/2 hour finding it would not update the definition updates any more. So I had to go with a competing top product PC Tools Spyware Doctor.

[lotuseclat79]

Originally Posted by wk2000

I have been using Webroot for half a year now and all is well.

Lotuseclat, do you think Vista's IE running in protected mode also address the active X vector?

Hi wk2000,

Hard to say. It probably depends upon how you have Active X configured. As I no longer run WinXP Pro SP2 (strickly Linux these days) - I forget where the controls are that you can set to either restrict or allow Active X. I think it may be somewhere in IE preferences as I recall.

-- Tom