Kaseya Community

Best Spyware Product Recommendations

  • Just seeing if anyone wants to offer up their opinions and save my lazy ass from having to do the research myself.

    Spent a couple of hours with Windows Defender and I wasn't too impressed. I don't think that it is a long term fit for kaseya. I'd like something that installs well via a script and is configurable.

    I am familiar with Adaware and Spybot, but haven't gone through the process of trying to integrate and manage them with a kaseya script.

    Thanks!

    Rick


    Legacy Forum Name: Best Spyware Product Recommendations,
    Legacy Posted By Username: rvines
  • Ditto. Any tips or personal recommendations will be gladly received. Why re-invent the wheel?

    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: systemet
  • Here is my script to scan our machines

    Script Name: Spybot_Scan
    Script Description:

    IF Test File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotsd.exe
    Exists :
    THEN
    Delete File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Updates\online.ini
    OS Type : 0
    Write File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Updates\online.ini
    Parameter 2 : VSASharedFiles.online.ini
    OS Type : 0
    Delete File - (Continue on Fail)
    Parameter 1 : C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.txt
    OS Type : 0
    Write File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Default configuration.ini
    Parameter 2 : VSASharedFiles.Default configuration.ini
    OS Type : 0
    Execute File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotSD.exe
    Parameter 2 : /taskbarhide /autoupdate /autoclose
    Parameter 3 : 3
    OS Type : 0
    Execute File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotSD.exe
    Parameter 2 : /taskbarhide /autocheck /autofix /autoclose
    Parameter 3 : 3
    OS Type : 0
    Get File - (Continue on Fail)
    Parameter 1 : C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.txt
    Parameter 2 : Spybot\Fixes.txt
    Parameter 3 : 1
    OS Type : 0
    Get File - (Continue on Fail)
    Parameter 1 : C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\checks.txt
    Parameter 2 : Spybot\checks.txt
    Parameter 3 : 1
    OS Type : 0
    Get Variable - (Continue on Fail)
    Parameter 1 : 6
    Parameter 2 :
    Parameter 3 : machine
    OS Type : 0
    Write Script Log Entry - (Continue on Fail)
    Parameter 1 : #machine# has finished Spybot Scan - Success
    OS Type : 0
    ELSE
    Execute Script - (Continue on Fail)
    Parameter 1 : Spybot_14_Deploy (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 : 1
    Parameter 3 : 1
    OS Type : 0


    And here is the Spybot deploy script

    Script Name: Spybot_14_Deploy
    Script Description: SD_Deploy

    IF True
    THEN
    Get Variable
    Parameter 1 : 4
    Parameter 2 :
    Parameter 3 : system
    OS Type : 0
    Write File
    Parameter 1 : #system#\MLMS\spybotsd14.exe
    Parameter 2 : VSASharedFiles.spybotsd14.exe
    OS Type : 0
    Execute File
    Parameter 1 : #system#\MLMS\spybotsd14.exe
    Parameter 2 : /verysilent /nocancel /noicons /components="main"
    Parameter 3 : 3
    OS Type : 0
    ELSE

    Spybot is rather easy to deploy and maintain via Kaseya.

    God Bless,

    Marty


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: MissingLink
  • Hey, Thanks!

    Where does online.ini come from?


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: rvines
  • online.ini is the INI file that spybot uses to update itself. I have noticed that mirror #2 in europe can sometimes not respond causing the update process to hang. I edit this ini and remove that mirror from being used so that the update process does not hang.

    God Bless,

    Marty


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: MissingLink
  • Where can you view the fixes.txt and checks.txt on the Kserver? Or is there a way to grab that data? I'm confused with that part.


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: BCarder
  • I didn't see them either. They should be in the kaseya\userprofiles\machine name folder right?

    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: rvines
  • It seems that spybot uses fixes (date).txt and not just fixes.txt.

    Not sure I know how to modify the script to get this file


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: rvines
  • Marty,

    Do you remove the "See-cure #2" or the "Safer Networking #2" entry from the online.ini?

    Thanks!


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: billmccl
  • It is the safer-networking #2 entry

    Also you can get to the files that are uploaded from the the script tab and get file function on the left hand side.

    God Bless,

    Marty


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: MissingLink
  • Marty,

    Other than removing the safer-networking #2 entry, did you make any other changes to the online.ini file?

    Thanks!




    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: billmccl
  • Is anyone having issues with Spybot pausing for long periods during a scan? I'm currently experiencing rather large delays with spybot executing a scan.

    Configured with AVG (Evaluating the enterprise product) - this is the only thing that I can think of that would be causing any sort of delay.


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: Anthony Michaud
  • I have had a "pausing issue" as well with spybot. The computer it was being tested on also had AVG on it. I would not however think that AVG was necessarily the problem.

    In my research, I noticed that the S & D window appeared on the bottom taskbar, but would not show "in focus" that is to say, the window on top. After several minutes of waiting for something to happen, we ended up getting the window to come into focus, and everything started just fine.

    We are currently leaning toward the way that kaseya runs scripted programs. It is our belief thatS & Dis inadvertenly being affected by the way that Kaseya attempts to run things silently in the background. Ultimately, it is probably a flaw in spybot. We are working on a vb script that we will turn into an .exe and place on the clients boxand run the script with Kaseya. I will keep you informed on how that goes for us. If it shows promise, we will post the results and code here.

    Gamer-X


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: Gamer-X
  • by the way... there was mention earlier in the forum about having trouble getting the file to the kserver because of a spybot appended date issue.

    You can turn that off.... This is from the spybot help file.

    Log file settings

    Spybot-S&D can write details about each scan into text files. Here you can select whether to do this, whether the date and time should be included in the filename, and whether to append or to overwrite the log file.g file settings


    Hope that helps

    Gamer-X


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: Gamer-X
  • I tested it and it works, BUT you have to set it in the actual spybot program from what I can tell. I did not see a command line reference to it....

    Gamer-X


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: Gamer-X