Spyware Warrior

[JVMA]

The antispyware programs use CLSI detections, and by them search the file asociated in the system?

There are spyware that use the same CLSID as the windows or other program? and a virus?
_________________
Regards

JVMA

[Scaramouche]

It depends on what you're talking about. I think CLSID identification is really only useful for BHOs, and even then as you point out, there's nothing stopping someone from using the same one as an existing program (many of them simply use 00000000000000).

Traditional installed/ridealong spyware though is usually detected through file name/folder/size/version/infile textstring/other comparison to a database of collected attributes. This is where most spyware is identified, though each anti-spyware company has their own weighting/method of getting useful information from it. Getting just one 'hit' is rarely cause for a 'strong' match, though each program has differing levels of sensitivity.