internet
security |
Norton Internet Security 2006
PC Magazine Review: Update: Auto-Protect Spyware BlockingOn January 17, Symantec announced improvements to the antivirus and antispyware technology in its consumer and enterprise products. Norton Internet Security 2006 users have been receiving these enhancements automatically through LiveUpdate over the past few weeks. When we tested NIS without the upgrades, it did a good job of removing spyware threats from infested systems but had little success preventing threats from installing on a clean system. The new Auto-Protect Spyware Blocking feature significantly improves the product's ability to block spyware installation. The malware scanning engine was also enhanced to work at the kernel level, below applications and most of the operating system. This lets it manipulate files locked by the OS and fix problems before Windows boots, among other benefits. We put this updated version through precisely the same tests as the last and found it significantly better at blocking spyware. The old version completely missed almost half of the test spyware installations and only blocked three successfully. NIS with Auto-Protect detected 11 installations and successfully blocked 10—a huge improvement. It also did a better job blocking installation of keyloggers. Previously it detected just one of six and couldn't prevent that one from installing. With Auto-Protect, it successfully blocked installation of three—performance as good as that of any other suite we've tested. It completely missed one keylogger, partially disabled one—and crashed the system while attempting to block the third.
The new NIS excelled at spyware removal as well but seems to be more unstable. One testbed system went into a blue-screen loop during product installation—it would repeatedly crash and reboot, crash and reboot. To complete our tests we had to interrupt the boot process and force the system to use its last known good configuration. Another system slowed to an absolute crawl after NIS installed, and the AV scanner crashed every time we managed to start a scan. After several attempts, we dug into the Microsoft Error Reporting data and determined that a specific non-system DLL was implicated in the crash, so we rebooted into Safe Mode and deleted it. Doing so solved the slowdown and the crash problem, allowing a full scan to proceed. Once we worked around the various crashes, the updated product's ability to remove spyware was positively stellar. It got rid of all 15 spyware samples, including two that it couldn't completely remove before and one that it had missed altogether. It also removed four of our six sample keyloggers and partially disabled another. NIS with Auto-Protect offers better protection against spyware than any of the other security suites we've tested. Its defense capability approaches that offered by our standalone antispyware Editor's Choice products, Spy Sweeper 4.5 and Spyware Doctor 3.2. On that basis, we have raised its rating for spyware protection from 3 stars to 4. But this improvement seems to have come at a price: In our testing, the new NIS suffered repeated crashes, as we've noted, and the program presents new spyware-blocking information to users in an inconsistent manner. As a result, we're not changing its overall rating of 3.5 stars. |
©Copyright 2006 Trig Enterprises, Inc., all rights reserved.