Spy Sweeper 5.5.7.122 Online Manual

Windows System Shields

You can modify the shields that monitor Windows system settings, which some spyware can change if not protected.

To change Windows System Shield settings:

1.	In the Icon panel, click Shields.

The Shields panel opens, showing a summary of the available shields and their status. (If any shields are dimmed, you do not have access to them; see Using multiple accounts.)

2.	Click the Windows System tab.

3.	Select the options you want to use.

 

Windows System Shields
Option	Description
ActiveX	Watches for programs that install ActiveX technology on your computer. Whenever a program tries to install ActiveX technology, Spy Sweeper alerts you and lets you continue the installation or stop it. ActiveX technology is a group of functions developed by Microsoft that lets programs share information. Many legitimate programs use ActiveX, but some potentially unwanted programs also use ActiveX to install themselves. If you have Spy Sweeper with AntiVirus, this option also blocks any viruses that try to install ActiveX technology. ActiveX Shield Options button: Click to edit the ActiveX Shield option. Prompt only for detection of known items: This option watches for only known items from the Spy Sweeper definitions that try to install ActiveX technology. Leaving this option turned on will reduce alert notifications, but could permit a new threat to install that is not yet included in the Spy Sweeper definitions.
Alternate Data Stream Execution	Watches for programs that try to start from an Alternate Data Stream (ADS). Turning on this shield lets Spy Sweeper alert you if a program tries to start from an ADS. ADS is a highly technical way to hide images, data, or code in a file and can be used to hide malicious code. The hidden content is impossible to detect using regularly available tools, such as Windows Explorer. If you have Spy Sweeper with AntiVirus, this option also actively watches for viruses that try to start from an alternate data stream.
Windows Messenger Service	Applies only to Windows 2000 and XP. Not available for Vista. Turns off and actively watches the Microsoft Messenger Service. This service is not an instant messaging program and does not affect your use of instant messaging. This service is often used for sending spam (unwanted e-mail) and creating pop-up ads. Turning off the service stops these types of spam and pop-ups. If your computer is in your home, you can turn off this service without any problem. If you work in a corporate environment, contact your system administrator to find out if your company uses the service to communicate with company employees. If you are not sure, leave the service turned on until you find out.
Keylogger	Alerts you if any keylogger programs are detected. A keylogger is a type of system monitor that has the ability to monitor all keystrokes on your computer, which can capture your credit card numbers, passwords, and other personal information. If this shield detects a keylogger and displays an alert, you should update your definitions (see Updating threat definitions), run a sweep (see Running sweeps immediately), and determine if you want to remove or keep the keylogger.
System Services	Monitors the system registry and protects against unwanted services and drivers from installing. If you have Spy Sweeper with AntiVirus, this option also blocks any viruses that try to install in the system registry. System Services Shield Options button: Click to edit System Services Shield options. Highest Security: Select this option to display an alert related to any item detected by the System Services Shield. High Security: Select this option to allow a signed service, but display an alert when an unsigned service or a potential malware application is detected. Moderate Security: Select this option to prompt only when potential malware is detected.
Execution	Watches for known items from the Spy Sweeper definitions that try to install themselves. Whenever a potentially unwanted program tries to install itself, Spy Sweeper alerts you and allows you to block or allow the installation. This option also actively watches for potentially unwanted programs that try to start when you start a program and when you save to the disk drive. Whenever Spy Sweeper detects a potentially unwanted program in either of these situations, Spy Sweeper alerts you and allows you to block or allow the action. If you block the action, Spy Sweeper places the file that tried to install, start, or save itself in Quarantine. You can then remove or restore the file. For more information, see Managing the Quarantine. If you have Spy Sweeper with AntiVirus, this option also watches for known viruses that try to install themselves. Execution Shield Options button: Click to edit Execution Shield options. Automatically quarantine potentially unwanted programs detected by this shield: Automatically stops the installation, startup, or saving of known items from the Spy Sweeper definitions and places the file that tried to install, start, or save itself in Quarantine, without alerting you. Automatically quarantine viruses detected by these shields: If you have Spy Sweeper with AntiVirus, this option automatically stops the installation, startup, or saving of known viruses that are in the Spy Sweeper definitions and places the file that tried to install, start, or save itself in Quarantine, without alerting you. Scan for viruses when starting applications: If you have Spy Sweeper with AntiVirus, this option watches for viruses that try to start when you start a program on your computer, alerts you, and allows you to block or allow the startup. Select this option if you want stronger protection against viruses. If programs take longer to start than you want, deselect this option. Verify executable programs in protected memory space before starting: Isolates and examines suspect processes when you start a program and looks for potentially unwanted programs. The process isolation gives Spy Sweeper a better chance to see what the process does. If the process matches a Spy Sweeper definition, Spy Sweeper alerts you and allows you to block or allow the startup. Select this option if you want stronger protection against potentially unwanted programs. If programs take longer to start than you want, deselect this option.
File System	Watches for programs during write and read operations. If you have Spy Sweeper with AntiVirus, this option also blocks any viruses that try to install during write and read operations. File System Shield Options button: Click to edit File System Shield options. Scan on Write: Monitors files or programs that attempt to install (write) to your computer. Scan on Read: Monitors programs as your computer attempts to read them. You can specify that only the list of file types (extensions) are included in the scan or that all file types are included. If you want to add a file type to the list, enter it in the field and click Add to Extensions to Scan. You can also delete items from the list by clicking on the file extension and clicking Delete Selected. To return the list to its original contents, select Reset List to Default. Automatically quarantine potentially unwanted programs detected by this shield: Automatically stops the installation, startup, or saving of known items from the Spy Sweeper definitions and places those items in Quarantine, without alerting you. Automatically quarantine viruses detected by this shield: If you have Spy Sweeper with AntiVirus, this option automatically stops the installation, startup, or saving of known viruses that are in the Spy Sweeper definitions and places those viruses in Quarantine, without alerting you.