When spyware first arrived on the scene, there was a clear difference between spyware threats and virus threats.

But now the lines have become blurred. Malware threats are carrying Trojan payloads, keyloggers and even rootkits. It's hardly a surprise that many anti-spyware developers are making the shift to detecting all threats using combined anti-virus and anti-spyware products.

In the interest of fairness, we didn't use of these combined products in this group test, but more on that decision shortly.

We were a little taken back by how easy it was to infest our test PC with threats of all sorts. We started with a clean Windows XP installation armed with SP2, but lacking anti-spyware and anti-virus software.

We visited some dangerous Web sites (thereby acquiring infections by drive-by download), managed to pick up a browser hijack and DNS-altering Trojan, installed a few "free" programs (ones laden with adware and spyware), and installed two keyloggers.

Unlike in the past, when we'd find Internet Explorer loaded with toolbars and add-ons, only a few desktop shortcuts, some strange browser behaviour and overall system performance problems gave any indication that something might be amiss.

Unwanted optional extras

What irked us most while infecting our test system was the brazen manner in which supposedly legitimate programs would add adware and other addons as selected "options" during the installation or deep within the licensing agreement.

While a savvy user might give these some thought, we can see how less-experienced users might not pay them any heed at all. As part of our pre-test process we also took what we would consider normal steps that the average user might attempt in trying to fix a slow or infected system.

Specifically, we attempted to reset the IE home page and uninstalled every program that we had downloaded from the Web. Lo and behold, the programs did appear to uninstall, but left both complete threats and remnants thereof conveniently behind.

This being a group test, we were also tasked with choosing eight competitors for the anti-spyware solution crown. As spyware and the industry matures, this part of the job becomes harder and harder. Do we limit our tests to full versions only, or should we include free tools as well?