I have just installed Superantispyware (as recommended by BleepingComputer). I scanned and found no problems, but what I don't understand is why is it memory resident? When you right-click the system-tray icon and select 'enable realtime protection', you are told that this is only available in the Professional version. I know you can turn it off at startup, (except it still leaves an entry in your HiJackThis log 'O20 winlogon'), but what puzzles me is what benefits do you get by leaving it memory resident?

Geoff

Well, Memory Resident is most likely to be Real-Time protection for your Memory (Ram).

SUPERAntiSpyware is resident so that you have instant access to the scanning, detection and removal features. You uncheck the "Start with Windows" option in the General and Start up Preferences if you do not wish SUPERAntiSpyware to start when your computer starts and use it as an on-demand scanner only.

The WinLogon Handler (O20) SASWINLO.DLL is used to scan the system at startup and remove difficult to remove spyware infections.

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com

Thanks Nick for your excellent reply, especially the explanation of the WinLogon Handler (O20) SASWINLO.DLL. I am now more than happy to leave it there. I must say, with what I have seen so far, I have been very impressed with your product. The scan was very thorough and found many more tracking cookies than Skybot S&D or Ad-aware. I'm now off to explore the other options.

Thanks again

Geoff