How do filters identify badware?

A filter is a test. These filters test the processes running on your system. These filters and filter combinations find dangerous and suspect behaviors to identify the badware and their respective programs and partner processes.

Scrubit uses a sophisticated multi-filtering approach to find badware. First it filters program processes and identifies groups by good, bad, and suspect behaviors. With each additional filter applied, the suspect processes eventually sort into two groups - good behavior or bad behavior. At the end of the discovery portion of Scrubit, a list of processes (programs) exhibiting bad behavior is displayed and you are given the option to remove (quarantine) the processes by clicking "Scrubit."