McAfee Antispyware for Enterprise

McAfee Antispyware for Enterprise is a simple-to-use and deploy package. Its 'on-access' protection feature scans processes and files running in memory before they are even installed on to the system. According to McAfee, the software uses behavioral-based analysis and signature updates to detect known and unknown spywares. Just like most other Antispyware, it scans registry files, compressed files for threats. It can also scan network drives for spy wares. The software also allows you to prevent McAfee processes from being terminated and generate alerts, as and when attempts are made to access blocked items. An interesting feature is Script Scan, which scans JavaScript and VB Scripts when they are executed by WSH (Windows Script Host). It also lets you configure user-defined detections based on file name, which can be useful if you want to block a particular file or even a virus which cannot be detected by the antispyware. Talking about its reporting options, it keeps an event log and can send SNMP alerts.

We installed it on a machine that had all spy wares of our database. Just after installation, it updated itself and then began scanning and managed to detect all the spyware. We, then, tried installing latest spy wares directly from the Internet. The product managed to detect spy wares in real time, as they were being installed to the system and removed them. The product even managed to detect key loggers but couldn't identify them as key loggers and tagged them as potentially unwanted programs. Then we tried scanning network drives for spy wares and there again, it managed to detect the installed ones. Lastly we tested it on a few back-door programs, and it managed to pass this test too.

Bottom Line: Taking its performance into consideration, the product is a good buy and price is competitive as well.