How does one know whether to trust any particular security tool (or forum, for that matter)? For example, how do I know that Spybot S&D isn't also spyware?

Personally I find stuff that suits me and the way I work, usually by word of mouth or from this Forum. For instance i prefer AIDA32 to Belarc advisor Norton to Mcafee These are really my personal preferences. Also I prefer 98 to 95 or XP but i also like 3.x especially 3.0 as its so fast and stable. I like the way 98 is laid out and hate the look of uncustomised XP. I have a 98 style start bar and Menu running on my amiga because it was easier for my late father to find and run the games he liked I also have my Amiga set to allow pull down menus anywhere on screen rather that just at the top as standard. I`m also a beliver in if it aint bust don`t fix it, Ive seen to many problems caused by "improved" software. HTH Woof

Maybe I should clarify my question... it's really sort of a meta-question. I was thinking mostly about free/shareware software tools, from small or little-known suppliers, including individuals. I gave Spybot S&D as an example; perhaps that's not a good example because it is well known and obviously trusted on this forum. But, ANY program one downloads from the Internet and executes can contain spyware (or worse). The question to the experts on this forum is: How do YOU satisfy yourself that some tool is truly and ONLY what it says it is, and only does what it purports to do? How do you really know that some wonderful trojan removal tool isn't itself a trojan? Do you first install each new program on a system and run Etherpeep to see if it sends out extra messages? Do you look it up on a list of "verified" shareware programs produced by some well-known authority (loc.gov, for example)? Do all of you know each other's addresses so if a problem with a recommended program shows up you can visit one another to discuss it eyeball to eyeball? Did I mention I am a bit paranoid, and suspicious of everything on the Internet? Does this make my question clearer? Shall I stop now? Thanks, John

There are several on line pc magazines like PC World, PC Magazine, INFO Week, and other websites like Gibson Rsearch(IMHO an essential resource) and Fred Langa(offers the free Langa List newsletter that is full of tips/ideas/news) and other sites like cnet, spywareinfo, wilders.org, ipkonfig, pc flank, and the register that have current articles and reviews to keep you up to date on what new threats, scams and prevention steps to take and the tools to keep your system safe. You can check out the user reviews at downloads.com to see how well a program works(a favorable rating of 70% is a positive sign).

and to complement CAPT if you download a program from a site that is clean like http://www.webattack.com/freeware/freeware.html or http://216.169.102.118/nonags/ you are about 90% sure that it is not spyware but not 100%.

Adding even more to capt, be careful of user reviews, they may be very favorable, but not mention the fact the program has spyware. See, the problem is that the majority of users that go to places like Download.com, are the ones that don't do what they can to protect themselves from such things. They are just your "normal joes" looking for a neato program and not worried about spyware. It's kind of funny how everybody runs for cover at the mention of virus or trojan, but the word spyware brings a look of confusion or an outright laugh. Some of these things can do just as much damage as a virus or trojan can. In some ways they all are the same thing, just delivered in a different manner. To find worthwhile programs with no spyware, I normally use PCWorld and Techtv shows such as Call for Help and The Screensavers. However, both Call for Help and The Screensavers have lately been in a "suggest anything" phase. Some of the programs I've seen on there end up being either just plain crap or nefarious. I have very high doubts this is intentional, but I don't think they really study a program before suggesting it as much as they used to. After being here for awhile, I've made this a first stop to find what I'm looking for, keeping in mind that there are "normal joes" in here also and just picking the first suggestion you see is risky. In here, if a program is suggested by quite a few,then you are probably safe, especially if they come recommended by the more expert users in here, you'll find out who these are by staying in here a few weeks.

Be careful of so-called user reviews. Many of them read like a product manual - I would guess because those responsible for the software also wrote most of the reviews. As tedious as it is, you can usually avoid spyware that is bundled with freeware by reading the EULA.