EWIDO
Reviewed August 2006

What’s it do?

Provides protection from Trojans, worms, dialers, hijackers, spyware, and keyloggers.


Does it do what it promises?

Reviewer 1: Yes, reasonably effectively as well as I could determine. It found 5 instances of malware: 'Downloader.small' in Wintasks.exe downloaded installation file; 'Heuristic.Win32.Dialer' in my System Volume Information; and three spyware cookies already in the Pest Patrol quarantine area. I asked it to delete all these threats, but it warned that wintasks.exe was embedded in an archive and asked if I wanted to remove the WHOLE archive. When I responded "no" the warning disappeared. Only the Heuristic dialer was deleted. The wintasks.exe was not an embedded file but it was not removed, nor were the other identified "threats".

Reviewer 2: In order both to protect the work we do on our computers, and to safeguard our own privacy, we need to take some precautions to save ourselves from difficulties and possible grief. Probably the best approach is to set up several "layers" of protection: a good anti-virus program, a firewall, and an anti-spyware program or two. In the anti-spyware category, I have found Ewido to be very effective. In the several months that I have had it running on my computer, it has consistently discovered and reported spyware that has been missed by other anti-spyware programs that I also use. For the more technically minded, it provides a number of other tools and functions that add to its value.

Reviewer 3: Yes. In fact it does much more than promised. In one of the most honest statements and understated claims I have seen by any developer of anti-spyware programs, the Ewido Web site claims only to "supplement your existing security applications" as there is ". . .no such thing as 100% security. . . ."

Reviewer 4: Yes, and in a smooth, painless way. Ewido seems able to detect all common and known (to me) forms of spyware including Trojans, keyloggers, hijackers and worms. It seems to run effortlessly in the background, auto-updating and scanning real-time.


Was it easy to install?

Reviewer 1: The process was straightforward, but Ewido failed to provide a copyable version of the End Users License Agreement (EULA) that one had to agree to in order to proceed, nor is the EULA included in its Help File documentation.

Reviewer 2: The version that we started with was upgraded to the present version during the period that I was evaluating the program. Although the original install went well, the switch from the older version to this one did not go easily. The main difficulty had to do with the registration codes, plus the fact that my older version had to be uninstalled before beginning the download of the new one. In reading through some of the comments in the Ewido Users Forum, I see that I am not the only person who has run into this difficulty. Eventually, with some help from Ewido support, I was able to resolve these issues, and successfully install the new version. New users should not have this problem. When I installed Ewido on my laptop (a "new" install), I was able to place the program and the start menu item where I wanted to. It placed a shortcut on the desktop, and can put an shortcut in your "Right-click Context Menu". This is very handy, because if you want to scan an individual file or a folder, browsing in Explorer and right-clicking the file will display a drop-down menu with the option "Scan with Ewido anti-spyware." When the scan is finished (usually very quickly), a report of the results of the scan is provided.

Reviewer 3: Yes. It was a relatively small 5.74MB download and installed using a standard installation wizard. It unusually seemed to install no signature files with the download. Instead, you must download these signature files by initiating an update after installation. Currently. there are nearly 400,000 signatures in the data base; however, the updates install extremely fast.

Reviewer 4: It was very easy and I found no confusing items whatsoever. The Ewido download zip file unpacks itself. The next step after installation you will see is the status page. It is here that you will enable or disable processes as you wish to tailor them. It is here too that you enter your license code. As a note: this first page also provides a link to customer support, unlike many programs wherein finding the link or an address can be a daunting chore


Good points

Reviewer 1: Ewido's user interface is a major step forward. It provide noticeably improved functionality in a much easier-to-use package. I found the Tools Tab functions particularly helpful, giving me much more control over special threats, although not recommended for the casual user. Having checked 'Disable Windows Scripting Host' in its Antispy|Miscellaneous section, I found Ewido prevented CounterSpy from loading on my computer. Also, I found numerous issues (listed in Weak Points below) that I think need attention soon, but such are common to most new major releases, and none are serious. I was delighted with its new Analysis Tab showing details on Processes, Connections, AutoStart, Plug-Ins, and Layered Service Providers -- all excellent diagnostic profiles of what's going on in the machine, useful to some, but likely beyond the ability of most users. Ewido's run time to screen all drives and files on my computer was something less than six hours although it did not indicate its run time anywhere. Ewido found two new malware files, while Spysweeper took five hours and found neither of those files; yet, Spysweeper found one malware file not found by Ewido. CounterSpy took 14 hours to run and found three malware files that neither Ewido nor Spysweeper found. The differing results demonstrate the need to run more than a single malware program to be safe. Ewido's price of $30($15 Renewal)/year is competitive with other products and the trial version offering all features for 30 days is commendable. The User's Guide is an excellent document and a very helpful tutorial on how this program works and its numerous options.

Reviewer 2: Besides being able to scan the computer for spyware that may already be on your computer, Ewido offers continuous screening, to make sure that new "malware" threats do not get onto your computer. It monitors what is running, to provide additional protection. You can also enable automatic updates, even to the point of having the program update itself as frequently as every 30 minutes. This happens in the background, with no appreciable impact on what you are doing. Ewido also has a number of other tools, which make it easier for you to see what is running on your computer. Many of these programs, "processes" and "browser plug-ins" might otherwise be invisible to many computer users, unless they are experienced and knowledgeable. The current version (4.0) has also added some "Tools" which give you the option of turning on or off many functions which are automatically enabled by the Windows Operating system, Internet Explorer, etc. and which have proven in the past to be security risks, or which might compromise your privacy. Another is a file shredder, which allows you to completely delete files, so that they cannot be recovered. (Using the Recycle bin simply removes the "Table of Contents" entry for the file, but leaves the file itself on your drive. It remains there until some other information happens to overwrite it.) The main Ewido screen is clear, easy to understand, and allows the user access to all main parts of the program with a single click. It defaults to the "Status" module, where you can see your main settings and change them if you wish. Across the top are tab buttons, each one bringing you to another set of tools or functions. As you go to each one, it opens a window that helps you navigate through that particular module. In each window is a good résumé that explains what is available to you in that module. For further information, you can use the Help button. I also found the User forums to be helpful. You can post questions there about anything you like concerning Ewido. Depending on who is using the forum, you may get a reply very quickly, or it may take a day or so. In the instance that I was not able to resolve my problems in the Forums, the Ewido support staff responded quickly and effectively resolved my difficulties.

Reviewer 3: As way of a preface, Ewido was originally developed by a highly respected German software developer, but has recently been bought by Grisoft. Those of you who know the reputation of the AVG antivirus program are well aware of the exceptional record of this company and the quality of its software, so this should only enhance the further development of this product. In addition to the aforementioned, there are many things to like about this program and recommend it. Most important is how well it finds and deletes malware. It should be noted that Ewido is not simply an antispyware program; it is better identified as an anti-malware program specializing in finding and deleting Trojans, downloaders, keyloggers, highjackers, etc. As such, and as Ewido recommends, it is best used to supplement a traditional antivirus and or antispyware program. In my testing, I purposely downloaded the notoriously problematic Kazaa as well as visited multiple unsavory sites known to be ripe with infections of all sorts, especially Trojans. I then scanned my computer with Ewido, quarantined the findings, restored them to my machine, and repeated the test with five of the most respected and highly rated antispyware programs on the market: CounterSpy, ZeroSpyware, SpySweeper, Spyware Doctor and AdAware. The results were better than I expected. Ewido found, not including cookies, 19 items-- of which 3 were Trojans! In comparison, ZeroSpyware found 12 items; Spyware Doctor found, less false/positives, 9 items; CounterSpy discovered 8 items but was unable to delete two of them; SpySweeper identified only 6 items, and the ever popular AdAware found none! Only Ewido discovered any Trojans, and it was able to delete everything it found. In addition, when I visited the same above sites and accessed the same download all pieces of malware were blocked by the Ewido real time monitoring "Resident Shield." In addition to the above, there are other notable features with Ewido. At 400,000 signatures currently in its data base as I write this review, it has one of the largest signature bases of any similar application on the market. Its scanning time is relatively fast as it scanned 346,000 files on my system in just slightly over 40 minutes.. Ewido is unique in that it scans not only memory and registry in addition to files but also scans inside compressed files as well as inside of archives. This allows it to find Trojans notorious for hiding inside of other programs as well as archived files. Also, because its real-time monitor is designed, according to Ewido, to act as a type of kernel driver, it tends to be immune from those Trojans that function expressly to disable antispyware-type of programs; and if it does become infected with such a trojan, it will simply and automatically download replacement versions of any part of the program that was infected and/or disabled. Furthermore, it automatically checks the launching of all applications. In addition to being able to specify the depth of your scan as well as schedule scans, Ewido offers additional tools-all of which are related to protecting your computer. It allows you to view your running processes, active Internet connections, startup items, browser plug-ins, as well as LSPs-all places you can look and often times find hidden spyware/malware. Ewido also offers something it calls "Antispy" which allows you to disable known Windows services (as well as Windows Media Player configurations) which are known to expose you to additional security risks. There is an excellent, professional-quality shredder which allows permanent deletion of files and assures that deleted spyware has been thoroughly and permanently removed. You can choose your level of security here by having each file overwritten from one time to ten times-the level Ewido calls "Paranoia." The Ewido interface is easy to use, if a bit unattractive (or possibly I just don't enjoy the colors orange and gray), and configurable; you can agree to automatic updating or manually update the program but be aware that the program offers updates literally every day--sometimes two or three times a day!--and as I mentioned above, it install the updates very rapidly; it uses relatively few resources when monitoring with only 4.1MB of memory being used and very little CPU; it is compatible with almost all antivirus and other antispyware programs that you can further have Ewido check on its web site by scanning your system to make certain; and it uses heuristics in its scanning to find unknown pieces of malware. Support is only offered through an online email-type of form you complete (which is accessible through the application); however, in the four instances when I had a question each was responded to within 24 hours. Additionally, there is a very active support forum containing over 670 threads and 4,347 posts that should answer most if not all of your questions other than the very unique or rare problem. While Ewido offers both a free and shareware ($29.95) version, there is a 30-day fully functioning (not crippled ware) version given with every download of the free version--quite liberal for this type of program. And for those who are interested, there is a full documentation of the product available for download on the developer's Web site. All in all I found this to be an exceptional program and one that I can wholeheartedly recommend.

Reviewer 4: This application protects against very nearly 400,00 threats, the most I've ever seen. This compares favorably with Webroot's Spyware Sweeper, one of the most respected and popular spyware programs available today, which protects against 145,000 threats. I tested Ewido and Spyware Sweeper on a download of four spyware items from Eicar http://www.eicar.org/anti_virus_test_file.htm, In this test going down two levels, Ewido detected all four variations, Spyware Sweeper none. I then also ran the free edition AVG antivirus , and it too detected all four, not totally surprising, since AVG and Ewido are both members of the Grisoft group. Ewido runs in the background effortlessly and unobtrusively, although use of the real-time resident shield seems to ever-so-slightly degrade performance. The automatic updates that run once and sometimes more often each day, take only a brief time, again effortlessly. This program is so smooth that, once set up, it requires very little (read none) involvement of the user. The help area is well-detailed, and equally important, decipherable. All displays have obviously been well thought out, presenting a very useful, a logical and simple array of choices, perfect for even the novice user. In addition to the tools often provided by other programs, Ewido also provides a shredder. All in all, the richest array of options and tools I've seen in a spyware program, and they all work!


Weak points

Reviewer 1: Although Ewido claims on its Web page to provide free email support normally within one business day, I never received a response; however, my inquiry by email was answered promptly by a Developer. I believe support is lacking. The setup profile is confusing. I checked "scan as-soon-after-as-possible" for a missed scan and Ewido immediately started a scan without asking further permission, which I had to cancel because of an impending Windows reboot. The Summary tile indicated a scan had been run, which it had been, but not completed, and it gave the user no indication it had been a false start. The user introduction should state that the way one navigates from section to section via clicking the top tabs of its various sections. I think this is a better method of navigation, but most malware programs in my experience use separate windows for subsidiary areas, which are closed to navigate section to section. Also, on Ewido's Tools tab, the buttons labelled 'Apply Settings' (which makes effective the changes you've set) and 'Reset' (which sounds like it'd do the same, but actually restores the original/default Ewido settings) are confusing; a different label should be chosen, such as "Apply Changes". Also, I found the coloring of its main panel (white with a little orange) insipidly bland, nor was its top-title bar (where one clicks to drag it on screen) distinguished. Fewer top tabs within the major areas would have been better, such as the five types of scan (Complete, Fast, Memory, System, Custom), that could have been usefully combined into one of the other tab areas. Ewido's help file says 'Once a suspicious file is detected, you will get notified about the possible threat and will be offered options on how to proceed with the file", but I was never so notified about any of the malware files. There was no way to print the Users Guide for offline reading and review.

Reviewer 2: I really have little to complain about with this program. The only item that was a bit unclear to me was in setting up the automatic scheduler (so that Ewido will scan my computer automatically on a regular basis). Under the scheduler tab, you will have to set up a "custom scan" first, defining what it is that you wish to scan (I selected everything). Once that is done the "grayed out" scheduler items will become accessible.

Reviewer 3: There is very little not to like. My biggest and only serious concern is that while Ewido is light on resources overall, there is a spike in CPU usage to 100% when the program loads on startup and, as a result, slows up the loading of any autostart programs that load after it. This is something that the developers need to direct their attention to as on less powerful machines than my 3.8GH Pentium IV, this could be a more serious issue. Other than this, I found only a few minor issues. Aside from what I find to be an unattractive interface, I found the upgrade process to be more than a bit cumbersome. When upgrading from v3.5 to v4.0, I was not told until after downloading the upgrade that I needed to first uninstall the previous version. Most solid programs today either overwrite the previous version or automatically uninstall the previous version as a part of the upgrade process. At the very least, the user needs to be informed of this requirement before beginning the download to the newer version. Nor did it automatically re-register me as a paid subscriber but forced me to re-entry my original registration key/code. I am sure there are many people who do not keep their original registration key handy (if at all) and would thus be seriously handicapped. This process needs to be re-examined and corrected. Last, the program is only compatible with Windows 2000 and XP-an understandable and yet regrettable decision for all of the tens of thousands of Windows 98 users.

Reviewer 4: Ewido misses some spyware. While the specific ones may not be important (rated minor by SpywareSweeper and Adaware), Ewido did not pick them up. I ran Ewido first, then Spyware Sweeper and Adaware. Spyware Sweeper detected four minor items, then Adaware found six more plus two "registry items " which were not identified. This further enforces the notion many users have that, if practical, one should use a blanket of anti-spyware tools for protection, rather than relying on only one. Unlike antivirus programs, multiple spyware programs don't clash with one another. At the end of one sweep, this program presented 12 spyware items detected. I chose the option "Clean and move to Quarantine" and was presented with an error message while it was deleting, telling me four of the items could not be removed, but not giving me suggestions as to how to proceed.


Other comments

Reviewer 1: Overall my impression of Ewido is that it's an excellent program that more than earns its keep on my machine, on which it's been one of my big three malware prevention programs over the past year; however, the multitude of minor errors tarnishes its technical credibility and should be corrected in an update in the near future. The 60-day money-back guarantee gives me a good feeling of confidence in the product. Multiple language support in seven languages is advantageous.

Reviewer 2: The trial period for Ewido is 30 days, and unlike many other software programs, this trail version is completely functional. After the trial period ends, a few of the functions, notably the Automatic Updates, the Residence Shield and the Scheduler, will become inactive. However, you can continue to use Ewido freely as a powerful anti-spyware program, although you will have to manually download the updates and manually initiate scans. (Actually, in the user forum, there is a discussion on how you can configure your computer to automate regular scans of the free version of Ewido!) Like the program itself, the Web site is functional and business-like. You are not subjugated to flashy announcements, self-aggrandizing promotions, or any other advertising hype. Although it has recently become part of the Grisoft Company of AVG anti-virus fame, it does not waste your bandwidth promoting AVG at all, but focuses only on Ewido. If you wish, you can perform a complete scan and clean directly from the Ewido Web site. This is rare - almost every other product I have seen will do the scan, announce that that you have zillions of infections, and urge you to purchase their product in order to save your computer from disaster. The price is in the same range as its competitors. If you do buy the program, you have a 60-day money-back guarantee.

Reviewer 3: By the very fact that you are reading this review I think I can assume that you try to be an informed consumer and as such that you read more than any single review before making a product purchase. Ewido is a relative newcomer to the antispyware anti-malware software market. As such you are unlikely to find many reviews and the few that you will find by one or two of the major magazines such as PC Magazine have been far less favorable than this one. You will also find that unlike many of the antispyware products I used in my comparison testing, there are few if any advertisements for Ewido in the aforementioned such magazines. Is there a connection? That is for you to decide. I would only like to suggest that if you are interested in a more objective and hands-on opinion of Ewido or, for that matter, any product that you look at in the many reader forums that you will easily find in investigating this (and certainly other) software programs. I think you will find that, just as in the case of Ewido, there is often a very large difference of opinion between many of the paid professional reviewers and those who, not unlike yourself, may not be so-called "experts," but who actually use the programs on a daily basis.

Reviewer 4: I found this program to be an advanced, yet easy program to set up and use, with its excellent displays, very rich features, and only a few minor blemishes. I also feel it provides good value for the money ($30 first year, $20 second year). The full-featured trial will give you a chance to look it over before buying, which you might do well to do.


Will you continue to use it?

Reviewer 1: Yes.

Reviewer 2: Yes, but as recommended by Ewido themselves, as an addition to -- not in place of -- the programs that I currently use.

Reviewer 3: Yes.

Reviewer 4: Yes. I have found it to be of help and current. I will continue to use it until it is at least time for the annual renewal, then I will re-evaluate.

 

OPERATING SYSTEMS USED IN THIS REVIEW
Windows XP Pro, XP Home

Back