The
Spyware Warrior List of
Anti-Spyware Family Resemblances
|
| One surprising and depressing aspect of the anti-spyware
scene is the sheer number of applications that are either knockoffs
or rip-offs of Ad-aware or
Spybot Search & Destroy (two of the most
recognized and trusted anti-spyware apps on the Net) or are simply
re-branded clones of other applications released under different names
and by different companies. In many cases, the "family
resemblances" among these applications are all too easy to detect.
|
This page is part of the Spyware
Warrior List of
Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 1: Too close for comfort... (Click
on the thumbnails to view the full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
BPS Spyware & Adware Remover
(old version) * |

|

|

|
BPS Spyware & Adware Remover /
Adware Cops
(new version) * |

|

|

|
BPS Spyware & Adware Remover /
Adware Striker
(new version) * |

|

|

|
BPS Spyware & Adware Remover /
Spy Striker
(new version) * |

|

|

|
BPS Spyware & Adware Remover /
Spyware Cops
(new version) * |

|

|

|
| MalwareScanner + |
 |
 |
 |
| Real AdWareRemoverGold |

|

|

|
| SpywareNuker ** |

|

|

|
| TZ Spyware Adware Remover |

|

|

|
| Comments: On top of their
strong resemblances to Ad-aware 5.83, all of the Ad-aware
rip-offs in this family group use the same spyware reference
database file (update.ref). Moreover, their scan logs are
identical to those produced by Ad-aware 5.83.
* Note on BPS Spyware & Adware Remover:
Sometime in early 2005 Bulletproofsoft released a new version of
BPS Spyware & Adware Remover (version 9). This new version
sports a fresh interface as well as a firewall. It also carries
the alternate names Adware Cops (downloadable from
adwarecops.com), Adware Striker (downloadable from adwarestriker.com),Spyware Cops (downloadable from
spywarecops.com), or Spy Striker (downloadable from
spystriker.com). Although the Adware Cops, Adware Striker, Spyware Cops, and Spy Striker applications might
initially appear to be separate applications, in fact they are just the latest version of BPS Spyware & Adware
Remover, only re-skinned. The Adware Cops, Adware Striker, Spyware Cops, and Spy Striker installers even download and
install the full BPS
applications from Bulletproofsoft.
+ Note on MalwareScanner: this application
appears to be the first instance of a 3rd generation of
BPS-based anti-spyware applications.
** Note: the version of SpywareNuker
represented here is an older version that is no longer available. It is
included here for archival/documentation purposes only. The
new version (SpywareNuker 2004, see below) has no discernible relationship
to any of the apps in this "family." Read this note
about SpywareNuker.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 2: Kissing cousins...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| #1 Spyware Killer |

|

|

|
| iSpyKiller
* |

|

|

|
| Max Privacy Protector |

|

|

|
| MySpyFreePC
* |

|

|

|
| Privacy Defender
* |
n/a |

|

|
| SamuraiSpy
* |

|

|

|
SpyBlocs 2.0
(old version) ** |

|

|

|
SpyBlocs 3.0
(old version) ** |

|

|

|
SpyBlocs 6.0
(new version) ** |

|

|

|
| Spy Crusher
* |

|

|

|
| SpyDoctor + |

|

|

|
| SpyFirewall |

|

|

|
| Spyinator |

|

|

|
| SpyKiller 2005 |

|

|

|
| SpyLax + |

|

|

|
| SpyPry ++ |

|

|

|
SpySpotter
(old version) +++ |

|

|

|
SpySpotter
(new version) +++ |
 |
 |
 |
| Spyware Protection Pro |

|

|

|
| SpywareThis |

|

|

|
| Ultimate Spyware-Adware Remover |

|

|

|
| Comments: On top of their
strong resemblances to Ad-aware 5.83, all of the Ad-aware
knockoffs in this family group use the same spyware reference
database files (Spylist & RegistrySpylist). Like the apps in
Family # 1 above, their scan logs are identical to those
produced by Ad-aware 5.83.
* Note on Privacy Defender, iSpyKiller, MySpyFreePC,
SamuraiSpy, & Spy Crusher: Close inspection of
Privacy Defender, iSpyKiller, and MySpyFreePC reveals them to be related to Spyblocs 3.0,
though not necessarily the earlier version of Spyblocs or the
other applications in this family.
** Note on Spyblocs/eBlocs: Sometime during late
October or early November 2004, Spyblocs version 3.0 was
released. This version appeared to be a significantly
revamped piece of software with very little connection to the
earlier versions of Spyblocs or the other applications in this
"family." In early February
2005, Spyblocs 6.0 was released. This version appears to be a
further development of version 3.0, which itself had little
connection with the version 2.0 that had clear connections with
the other similar re-branded clones at the heart of this family.
+ Note on SpyDoctor & SpyLax:
SpyLax is the successor to SpyDoctor, an application which
should not be confused with Spyware
Doctor, a completely
different application from a different company.
++ Note on SpyPry: SpyPry appears to be the
very latest variant in this family of application.
+++ Note on SpySpotter: Sometime during August
2005, Oemtec released a new version of SpySpotter, which appears
to be related to several of the other newer versions of
applications within this family..
The older versions are included here primarily
for archival and comparison purposes.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 3: Terrible twins...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| 2004 Adware/Spyware Remover
& Blocker |

|
n/a |
n/a |
| AdDriller |

|

|

|
ADS Adware Remover
(old)
* |

|

|

|
ADS Adware Remover
(old)
* |

|

|

|
ADS Adware Remover
(new)
* |

|

|

|
| AdwareSpy |
 |
 |
 |
AdWare SpyWare Blocker
& Removal
(old) ** |

|

|

|
AdWare SpyWare Blocker
& Removal
(new)
** |

|

|

|
AdwareX Eliminator
(old) * |

|

|

|
AdwareX Eliminator
(new) * |

|

|

|
| Ad-Where 2005 |

|

|

|
| Easy Erase Spyware Remover + |

|

|

|
| ETD Security Scanner |

|

|

|
Privacy Tools 2004
(old) ++ |

|

|

|
Privacy Tools 2004
(new) ++ |
CENSORED
|
CENSORED
|
CENSORED
|
| SpyBeware |

|

|

|
| Spy-Kill |

|

|

|
| The Web Shield |

|
n/a |

|
| Ad-aware 6.0 |

|

|

|
| Comments: The nine applications at the heart of this family are uncomfortably close to Ad-aware,
though they lean more towards Ad-aware 6.0 than Ad-aware 5.83
(both of which are reproduced here for comparison purposes).
Eight of these nine apps use the same spyware
reference database file (Reference.dat), and none of the trial
versions produce scan logs.
Most of these family members also share the dubious distinction of generating the most
false positives on a "spyware free" system -- flagging
hundreds of items as "spyware," including completely legitimate
programs like Nero, Adobe Acrobat, and AdShield, among others.
* Note on ADS Adware Remover & AdwareX Eliminator: A
few days or so after ADS Adware Remover and AdwareX Eliminator
were added to these pages, new versions of both were released.
Still later, in mid-August of 2004, ADS Adware Remover underwent
yet another GUI overhaul. While these new versions do sport some cosmetic changes to the
interface (see above), they appear to
be the same application underneath (they even use the same
Reference.dat database file and produce the same ridiculous
false positives). Apparently the folks at AdwareX Eliminator are
attempting to deny
the obvious, even though the licenses for these applications
all point to Athivision
as the creator of the software.
** Note on Adware Spyware Removal: In the fall
of 2004 a new version of Adware Spyware Removal was released.
Although this new version does sport some changes to the
graphical user interface (GUI), it still exhibits the same
propensity for ridiculous false positives as earlier versions.
+ Note on Easy Erase Spyware Remover: Easy Erase Spyware Remover
would appear to be built on the same codebase as the other apps in
this family, however, it seems to be broken. The scan results
report only 1 item scanned. Moreover, the spyware reference
database file (REFERENCE_DATA.dat) is a plain text file containing
a list of executable file names and such to search for, quite
unlike the Reference.dat file used by the other family members, which is a binary def
file and much larger in size.
++ Note on Privacy Tools 2004: On August 27,
2004 a new version of Privacy Tools 2004 was released. Included
in the license for this new version are three clauses that prevent
me from reporting on the performance of this new version of
Privacy Tools 2004 or displaying images of it:
3. COPYRIGHT.
All title and copyrights in and to the software product (including but not limited to any
images, photographs, animations, video, audio, music, text, and "applets" incorporated into
the software product), the accompanying printed materials, and any copies of the software
product are owned by the Author of this Software. The software product is protected by
copyright laws and international treaty provisions. Therefore, you must treat the software
product like any other copyrighted material except that you may install the software product
on a single computer provided you keep the original solely for backup or archival purposes.
[...]
12. By using this software you agree not to take or use screenshots of the software and
understand doing so will result in legal action being taken against you. You understand
Screenshots are copyrighted protected material of the software owner.
13. By using this software you agree that you are not the owner of, affiliated with, or a
member of spywarewarrior.com |
The last version that I tested (a beta version) still
generated horrendous, inexcusable false positives just like its
predecessor (1).
Whether the final release also does so I cannot say, as I have
been unable to test the software.
Clearly
the vendor for Privacy Tools 2004 wants to shut up critics and
prevent critical information about his software from being
disseminated. Moreover, the vendor for Privacy Tools 2004 has
threatened to distribute malware himself (1),
making him a completely irresponsible source for anti-spyware
protection. Thus, my recommendation to users is to stay away, as
the software and the vendor cannot be considered trustworthy or
reliable in my opinion.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 4: Bosom buddies...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
SpyBurn
(defunct) * |

|
n/a |

|
XoftSpy
(old) * |

|
n/a |

|
XoftSpy
(new) * |

|
n/a |

|
| Ad-aware 6.0 |

|

|

|
| Comments: Although the relationship
between these two apps (SpyBurn and the "old" XoftSpy) and Ad-aware is less straightforward,
it certainly looks that they were, at the very least, "inspired" by one
or
another version of Ad-aware
(both of which are reproduced here for comparison purposes) -- esp.
the old version of XoftSpy, which was uncomfortably close to Ad-aware 6.0 in many respects.
SpyBurn and the old version of XoftSpy were re-branded clones of each other, sharing both
spyware
reference database files (named database.db) and scan logs.
* Note: SpyBurn is no longer available. In
December of 2004 Paretologic released a new version of XoftSpy
(version 4.0) which subtantially addressed all of our major
concerns with the application. Thus, the new version of XoftSpy
is not considered "rogue/suspect" anti-spyware. Screenshots are included here for reference and comparison
purposes only. For more information on the new version of
XoftSpy, see this note.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 5: Swinging sisters...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| NoSpyX |

|

|

|
| Scan & Repair Utilities 2006 |
 |
 |
 |
| SpyVest |

|

|

|
| Spyware Cleaner |

|

|

|
| Spyware Slayer |

|
n/a |

|
| Spyware Stormer |

|
n/a |

|
| Spyware Wizard |

|

|

|
Xspyware
(xspyware.net) |

|

|

|
| Ad-aware 6.0 |

|

|

|
| Comments: As with the
applications in Family # 3 (above), these apps (NoSpyX, Scan &
Repair Utilities 2006, SpyVest,
Spyware Cleaner, Spyware Slayer, Spyware Stormer, Spyware
Wizard, and X-Spyware) at the heart of this family are uncomfortably close to Ad-aware,
though they lean more towards Ad-aware 6.0 than Ad-aware 5.83
(both of which are reproduced here for comparison purposes). These
six apps are
variants rather than re-branded clones of each other according
to the programmer responsible for them, Mladen
Bajic. Most share the same file names for both the spyware
reference database file (named DataBase.ref) and scan log
(named SpyLog.txt), however, the ref database files are not
interchangeable among the applications (apparently there are
enough differences "under the hood" to prevent that).
The programmer for this family of applications, Mladen
Bajic, reports that NetSpyProtector (netspyprotector.com)
is also a variant
on these three applications (no screenshots are available for
NetSpyProtector). |
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 6: Peas in a pod...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| SpyCleaner Gold |

|

|

|
| SpyCleaner Platinum |

|

|

|
| SpyRemover |

|

|
n/a |
| Comments: Again, the relationship
between these apps and Ad-aware is less straightforward,
however, they do look to have been "inspired" at the very least by
Ad-aware 5.83 (which is included here for
comparison purposes). Spyware
reference database files appear to be similar.
Note: The vendor for SpyCleaner maintains that
SpyRemover is no longer in distribution. Moreover, SpyCleaner
itself was de-listed from the main
"rogue/suspect" list only to be re-listed in May 2006 -- see this note
about SpyCleaner.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 7: New lines...
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| Ad-Eliminator |

|

|

|
| Ad-Protect
* |

|

|

|
| Spy-Control |

|

|

|
| Spy-Out * |

|

|

|
| Ad-aware 6.0 |

|

|

|
| Comments: Again, the relationship
between these apps and Ad-aware is less straightforward,
however, they do look to have been "inspired" at the very least by
either Ad-aware 5.83 or 6.0 (both of which are included here for
comparison purposes). Spyware
reference database files (*.db) and scan logs (*.log) among these apps
are very similar.
* Note on Ad-Protect & Spy-Out: although
Ad-Protect and Spy-Out are clones of Ad-Eliminator and
Spy-Control, they are not considered "rogue/suspect"
anti-spyware. They are listed here primarily for archival
purposes. For more information on Ad-Protect and Spy-Out, please
read this note.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 8: Distant relations?
(Click on the thumbnails to view the
full size images) |
| Application |
Main Window |
Scanning
finished |
Detected
components |
| Ad-aware 5.83 |

|

|

|
| Adware Hitman * |

|
n/a |

|
| Consumer Identity |

|
n/a |

|
NoAdware
(old version) ** |

|
n/a |

|
| Protect Your Identity |

|
n/a |

|
| SpyBan |

|
n/a |

|
| SpywareAssassin * |

|
n/a |

|
| Spyware C.O.P. |

|
n/a |

|
| SpywareKilla |

|
n/a |

|
| The Adware Hunter |

|
n/a |

|
| TheSpywareKiller * |

|
n/a |

|
| Comments: While these apps
bear little resemblance to Ad-aware 5.83, all of the programs in this family group
(excepting Ad-aware 5.83, which is listed for comparison
purposes only) use the same spyware
reference database file (file name varies, but they are
interchangeable between apps). Strangely,
none of the trial versions in this family (excepting Ad-aware)
seem to produce a scan log, even when the
option or preference is selected/checked. Programmer for
this family of applications is Bilal
Ahmed, a well-known rent-a-coder.
It should be noted that Ahmed may not have been directly involved in the release of every application in this family.
* Note: The GUIs for
SpywareAssassin, TheSpywareKiller, and Adware Hitman appear to set these
apps apart from the rest of the family, but they are the same
applications underneath, even to the point that spyware reference
database files are interchangeable with the other family
members.
* Note on NoAdware: Earlier versions of NoAdware
were related to apps in the family -- this
page includes a screenshot of an earlier version of NoAdware
that clearly demonstrates the family resemblance. The vendor for
NoAdware has been revamping the application so that more recent
versions share almost no commonalities with the rest of this
family of cloneware. The latest version (NoAdware 3.0) is not
pictured here. The previous version (NoAdware 2.0) is included
primarily for archival and comparison purposes. For more information on NoAdware, which we
no longer classify as "rogue/suspect anti-spyware,"
read this note.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 9: A family of their own... (Click
on the thumbnails to view the full size images) |
| Application |
Main Window |
Scanning... |
Scan Complete |
| Easy Spyware Killer |

|

|

|
JC Spyware Remover
& Adware Killer |

|

|

|
| PAL Spyware Remover |

|

|

|
| Comments: These apps have
no apparent relation whatsoever to Ad-aware, however, it's quite clear that
they are in fact re-branded versions of the same application --
probably from PAL Solutions. No scan logs appear to be produced
by the trial versions of these apps. |
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 10: Blood brothers... (Click
on the thumbnails to view the full size images) |
| Application |
Main Window |
Scanning |
Detected
Spyware |
Adware Filter
*
(old version) |

|

|

|
Adware Filter
*
(PCSafe Security Center)
(new version) |
 |
 |
 |
| AdwareSafe |

|

|

|
| AdwareX |

|

|

|
| SpyAssassin |

|

|

|
| Comments: Like those in
Families # 8 & # 9 above, these apps also have
no relation to Ad-aware, however, it's quite clear that
they are in fact re-branded versions of the same application.
They use the same ref database files, and the scan logs produced
by these apps are almost worthless information-wise. In early
2005, Adware Filter got a GUI overhaul, but it remains
substantially the same app. This new version of Adware Filter is
advertised online as "PCSafe Security Center," but it installs as
Adware Filter.
Note on Adware Filter: this
program has been de-listed from the Rogue/Suspect
Anti-Spyware page and is included here for the sake of
historical interest and completeness only. See this
note for more details.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 11: New kids on the block... (Click
on the thumbnails to view the full size images) |
| Application |
Main Window |
Scanning...Completed |
Select what to
clean... |
| pcOrion * |

|

|

|
| SpywareNuker 2004 * |

|

|

|
| Comments: Like those in
Families # 8, # 9, & # 10 above, these apps also have
no relation to Ad-aware, however, it's quite clear that
they are in fact re-branded versions of the same application.
They use the same ref database files, and the scan logs produced
by the trial versions of these apps are well nigh worthless information-wise.
* Note on SpywareNuker 2004 & pcOrion: SpywareNuker and pcOrion are no
longer considered "rogue/suspect" anti-spyware.
Screenshots are included here for reference and comparison
purposes only. SpywareNuker 2004 is a completely
new application and is not built upon the original version of SpywareNuker, which was a BPS Spyware & Adware Remover clone.
Read this note
about SpywareNuker and pcOrion.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 12: Twisted sisters... (Click
on the thumbnails to view the full size images) |
| Application |
Main Window |
Scanning... |
Select what to
clean... |
| Adware-Nuker |

|

|

|
| AGuardDog Adware/Spyware
Remover |
 |
 |

|
| PC AdWare SpyWare Removal |
 |
n/a |
 |
| SafeWebSurfer |

|
n/a |

|
| SpyToaster |

|

|

|
| SpywareHospital |
 |
 |
 |
| Super Spyware Remover |

|

|

|
| The Spyware Detective |

|

|

|
| WebSafe Spyware Secure |

|

|

|
| Comments: Like those in
Families # 8 through # 11 above, these apps also have
no relation to Ad-aware, however, it's quite clear that
they are in fact re-branded versions of the same application.
They use the same ref database files, and the scan logs produced
by the trial versions of these apps are identical.
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 13: Cain & Abel... (Click
on the thumbnails to view the full size images) |
| Application |
Scan for
problems |
Scanning... |
Select what to
clean... |
| Spybot Search &
Destroy |

|
n/a |

|
| Terminexor |

|
n/a |

|
| Comments: Terminexor is
the most brazen rip-off of a legitimate anti-spyware program
that we know of. Most who have pilfered material from Patrick
Kolla (the author of Spybot Search & Destroy) have chosen to
lift only the definitions database (which is bad enough).
Terminexor, however, swiped the whole program, replacing every
reference to "Spybot Search & Destroy" with
"Terminexor," including copyright notices. More recent
versions of Spybot S&D detect Terminexor and offer to remove
it (see screenshots above).
|
|
|
Return to Rogue/Suspect Anti-Spyware Products & Web Sites
| Family
# 14: Separated at birth... (Click
on the thumbnails to view the full size images) |
| Application |
Scan for
problems |
Scanning... |
Select what to
clean... |
| AdwareDeluxe |

|
n/a |

|
| AdwarePatrol |

|
n/a |

|
| AdwareRemover |

|
n/a |

|
| AdwareSafety |

|
n/a |

|
| AdwareTools |

|
n/a |

|
| AlertSpy |

|
n/a |

|
| AntiSpy Advanced |
 |
 |
 |
| Doctor Adware |

|
n/a |

|
| Doctor Adware Pro |

|

|

|
| PestBot |

|
n/a |

| |