Love the product, have a suggestion

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

I LOVE this product. Slick, efficient (CPU, Mem
Utilization). I actually uninstalled a "paid-for" copy of
SpyDoctor after using this! Outstanding.

Suggestion; I noticed on realtime scans that MSFT Spyware
uses 4-5% of my Centrino CPU. At the same time - because
SpyWare is accessing files (reads), my McAfee Enterprise
Suite also runs because it's in On-Access Scan mode - and
files are being scanned obviously. If I shut-down On-
Access Scan in McAfee, Spyware jumps to 14% cpu
utilization, but also finishes much more efficiently
(quicker).

So this begs the q., what if Spyware were able to detect
an On-Access Scan engine/service were running,
temporarily shut-it off, complete the work and then re-
instate the service? The SpyWare scans - and system
utilization - would be much more efficient. I was
thinking that this would work especially well during
overnight or after-hours scans, when the system is not
being used (by a human).

Obviously, when we reach dual-core mobile platforms, you
could isolate services like these to a second core
processor, which would not burden the overall system as
much.

Thanks for the product. Great job on BETA 1 folks.!
 
Alan said:
So this begs the q., what if Spyware were able to detect
an On-Access Scan engine/service were running,
temporarily shut-it off
Click to expand...

If anti-virus programs provided the facility to shut themselves off, every
hacker in the world would do that as soon as their malware were installed.
 
Ah! The simplicity of logic. (-:

--
Regards,

Richard Urban
Microsoft MVP Windows Shell/User

Quote from: George Ankner
"If you knew as much as you thought you know,
You would realize that you don't know what you thought you knew!"
 
since it's a beta it will all change, cpu, mem and system
requirement. it will go beyond the recent system
requirement.
 
Very nice, but I respectfully disagree. You have no idea
who I work for, so (I believe) your assumption is that
I'm just a casual user - thus your comment(s).

AV programs and this Spyware program use System, Network
or Admin equiv credentials. My suggestion was simply that
if MSFT would WORK with these other vendors to enable
this feature at a SYSTEM level (API service hook) - it
would be more efficient during it's Full System Scan.

You are not shutting off the AV service. You are simply
disabling the ON-Access scan, while the malware scan
runs. You could even do that at a folder/sub-folder level
(handshake).

"Don't applaud a pompous ass -you only encourage her or
him not to grow." Kazper
 
Back
Top