Spybot and SAS

[Seth]

There are still a large number of users who rely on Spybot despite its ineffectiveness when compared to some of the competition.

The following is only one example of such, but the results can be reproduced and proven on any moderate to highly infected system:

I ran Spybot from Safe Mode on a highly infected system and allowed it to clean the infections found. As is common, Spybot had to perform another scan in order to remove what it had found. Spybot's detected and removed malware:

CommandService

CoolWWWSearch

NetworkMonitor

Smitfraud.C

SurfSideKick

Torpig

Vcodec.5StarVideo

Virtumonde

Win32.Agent.qt

Spybot also listed TagAsaurus, DoubleClick, Advertising.com, and CasaleMedia. However these are harmless cookies and unlike every other antimalware application that lists cookies as "cookies", Spybot hides that fact to make it look like it's finding infections that other antimalware applications are missing.

After letting Spybot do its cleaning, I ran a full scan with SAS from Safe Mode. SAS's detected malware:

Unclassified.Unknown Origin

Adware.Adservs

Trojan.NetMon/DNSChange

Trojan.cmdService

Trojan.Spam-BrazUA/Resident

Trojan.Downloader-LDCore

Adware.DeluxeCommunications

Adware.VSToolbar

Trojan.Unknown Origin

Trojan.ZQuest

Trojan.Downloader-Gen/LIB

Trojan.Net-C3B3/Installer

Trojan.Downloader-Gen/C3

Trojan.Downloader-Gen/WSUSUPD

Trojan.Downloader-PATDUM

Trojan.Downloader-SpyTool

Trojan.Downloader-CREW

Trojan.Downloader-VSAddIn

Trojan.Downloader-VSToolbar

Trojan.Downloader-CSRSS/Fake

Trojan.Downloader-Gen/AClient

Adware.RAC

Trojan.ZQuest-Installer

Trojan.Net-NUSR

Trojan.Downloader-FakeRX

Trojan.WINIOGON

Trojan.Downloader-Win/GHY

Trojan.Downloader-CommandDesktop

Trace.Known Threat Sources

NOTE:

Both the Spybot and SAS logs are available if anyone wants to see them.