McAfee Site Advisor versus Trend Micro's TrendProtect..

I have just finished reading the latest entry on the McAfee Site Advisor blog that says, as introduction:

"For the past couple of weeks, we've been seeing an increase in spam advertising a fake application called WinFixer."

Yay them. I've been noticing a massive increase in spamming, especially via blog comments, for several months.

McAfee then go on to say:

"Another variant of the same application goes under the name of PrivacyProtector. The PrivacyProtector website is currently rated green by SiteAdvisor, because it hasn't had any downloads for us to test. However, we'll be overriding that to red shortly, based on its association with WinFixer."

Ok, so here's a problem with McAfee's Site Advisor, something that has bothered me for a long time.  Site Advisor's reputation tests suffer from a very basic flaw if a rip-off site like PrivacyProtector is not listed simply because it has no downloads available for testing.  What about the fact that PrivacyProtector shares an IP address with some very shonky sites?  Check this out:

Pinging www.errorsafe.com [66.244.254.64]

Pinging www.winantispyware.com [66.244.254.64]

Pinging www.winantivirus.com [66.244.254.63]

Pinging www.privacyprotector.com [66.244.254.63]

At the time of writing, McAfee Site Advisor is *still* listing PrivacyProtector as green, whereas Trend's competitor product, TrendProtect, is listing the site as red.

So why is Trend ahead of the game on this one?  Because Trend is a "real time" service, and it uses additional checks not included by McAfee when assessing a site's reputation. 

When people ask me what service I advise be used as an additional layer of reputation information to compliment to IE7's phishing filter and extended validation certificate support, I direct them to TrendProtect (available at http://www.trendsecure.com/portal/en-US/free_security_tools/trendprotect.php?page=download)

Published Sun, Apr 29 2007 13:14 by sandi

Comments

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Sunday, April 29, 2007 12:04 AM by Brian Madsen
Hey Sandi, I just bought a Dell XPS M1710 laptop about 2 months ago or so (i think) and it came with a trial of McAfee. Prior to this i'd never used McAfee before so took the trial for a run. Overall, i must say i'm terribly dissapointed with McAfee - the first thing i did was visit the sites which Trend notified me contained spyware/malware - even went so far as to click on some of the links we spoke about some time back on MSN - and McAfee just happily trolled over to the sites without so much as a notification that the site "may" contain malicious content. So, regardless of the Vista support from Trend, i don't think i'll be going back to ever using McAfee again...

# SiteAdvisor vs Trend Protect... and SiteHound

Sunday, April 29, 2007 4:19 AM by Donna's SecurityFlash

MVP Sandi Hardmeier shared her thoughts about McAfee SiteAdvisor's rating system that should be flagging

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, April 30, 2007 11:28 AM by Lucas
What about Link Scanner of Exploit Labs? It's true that TrendProtect only relies on Google's database? Thanks.

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, April 30, 2007 4:56 PM by sandi

Trend does NOT rely on Google's database - it uses a series of checks (technical and reputational) when assessing a site's safety.

I haven't looked at Link Scanner, but will put that on my list of 'to do's'.

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, May 07, 2007 3:02 AM by stevek
Hi Sandi. I run Site Advisor but was intrigued by your remarks about Trend Protect so I thought I'd give it a go. However unfortunately I find that Trend Protect will not highlight its findings in Searches with my Ad Muncher program activated, whereas Site Advisor will. Great shame as I can see that Site Advisor's method is a little less tight than Trend Protect, but Ad Muncher is too good a program to dispense with. Cheers

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, May 07, 2007 5:31 AM by stevek
Just to follow up on my previous comment, I have just started trialling Link Scanner and it did flag up PrivacyProtector.com as a red no-no when I checked that site (and also Link Scanner works fine with Ad Muncher!).

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, May 07, 2007 7:35 AM by sandi

Hi Stevek

That's interesting feedback; I'll pass it on to Trend.

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Sunday, June 10, 2007 7:03 AM by trojan horse
siteadvisor say privacyprotector is a spyware website see on: http://www.siteadvisor.com/sites/privacyprotector.com

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Monday, June 11, 2007 7:18 AM by sandi

@ Trojan Horse.

I should jolly well hope so! It's now June and this article went live in April.

# Trend Micro's TrendProtect toolbar breaks GFI MailArchiver Web interface

Thursday, July 12, 2007 1:02 AM by Spyware Sucks

We use GFI MailArchiver to archive all emails going in and out of the firm in a SQL database. This database

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Tuesday, July 17, 2007 3:50 PM by Philippe

I like Site Advisor. I use the plus version and it works well blocking sites before I get to them. You can give feedback and improve the company's database.

Correct me if I am wrong but for Trendprotect, I need to install the security suite to block sites that my PC shouldn't go to. Since I use another security suite, this doesn't work for me.

# re: McAfee Site Advisor versus Trend Micro's TrendProtect..

Tuesday, July 17, 2007 6:44 PM by sandi

@Philippe,

The TrendProtect toolbar is a stand alone install:

www.trendsecure.com/.../trendprotect.php