Search & Destroy
Our team of malware analysts monitors the Internet 24 hours a day seven days a week...

Why does Spybot-S&D not detect running processes?

June 21st, 2012

This is not correct and is often misunderstood as we do not display an extra list of running processes after the scan. But we do not consider that as necessary – every running process is identical to a file on the hard disk, because a process is more or less that file loaded into memory.

But when you use Spybot-S&D to fix problems, it will automatically terminate the bad processes detected before doing anything else. And if you are using our TeaTimer, TeaTimer will detect malware processes as soon as they are started and terminate them.

Our logs of course do include a full list of processes, and since version 1.4 Spybot-S&D even lists open network connections per process (except for on Vista), allowing you to easily see which processes are connecting to the outside and where to.

FAQ Category: Detections, Spybot 1.6