SPYWARE/ADWARE/MALWARE/HIJACKS
WHAT IS SPYWARE AND WHY IS IT SO
DANGEROUS?
In 2004 and 2005, I have spent hours at different homes cleaning out the users
computer, not from viruses, but from spyware. The user contacted me
because their computers and internet connections became slow and sometimes
unusable. All three had types of spyware that were not easy to detect and
very difficult to get rid of.
When you decide to go on the internet, you known that danger
lurks from viruses, so you purchase anti-virus software. There are a
couple of free programs out there, but I've seen viruses get past them.
You also know that in order to keep safe, the anti-virus program needs to be
updated at least on a weekly basis since new viruses come out daily.
Spyware is now in that same category. There are
excellent free programs, but they only help AFTER the program is downloaded and
possibly already causing problems. It is highly suggested that everyone
begin to consider purchasing anti-spyware programs that can monitor against
downloaded these dangerous programs in the first place. Further, they need
to be kept current every week, just like anti-virus software.
So, what is spyware in the first place? The
following information is from Spyware Info: Spyware is software or
hardware installed on a computer without the user's knowledge which gathers
information about that user for later retrieval by whomever controls the
spyware.
Spyware has become a generic
term that also encompasses adware, malware and many trojans. Actual
spyware is generally a program that looks to see what you are doing (like
your web surfing habits), then "phones home." You might think that isn't a
problem until it's almost impossible for you to use your internet browser
anymore because the program is taking up your resources in constantly sending
information back to the source. It's also using up resources on your computer -
CPU and RAM. In some cases, the spyware is looking for your email address,
passwords, any personal information stored in the computer and information about
the computer itself. Not only is your bandwidth being used, you could lose
important information that could be used in identity theft. This is not
just an annoyance, it's serious. Further, it is possible for a hacker or
spammer to simply use your computer through downloaded spyware to do hacking or
to send massive amounts of spam.
Adware is a program that
creates pop-up ads on your computer or supports banner ads on websites.
These are quite often pornographic. Adware is often bundled with popular downloads or is the main
reason for some popular software like Gator. Bonzai Buddy is loaded with
many themes and wallpapers. Comet Cursor contains spyware that tracks web
browsing. Some browser "helpers" are actually spyware. Some adware is very aggressive and actually adds a string to your
browser to constantly send information back to the source. Some of it
adds software to your start up, slowing down your computer considerably. Some of
it can hijack your browser. This happened to a Truth Miners member as
a result of downloading and using Kazaa (known spyware/malware music sharing
program).
Malware: This is defined as "malicious software,
software designed specifically to damage or disrupt a system, such as a virus or
a Trojan horse." It can also drop program into your computer called
backdoors. These Trojans and backdoors can be used to hijack your
computer, even to hijacking your mouse and keyboard. Your computer can be
used to hack other computers. Viruses can be executed in your computer.
Worst of all, these things bury their activation process into different sections
of the registry, making them very difficult to remove, even by many anti-spyware
programs. This makes it all the better that the program should never be
downloaded in the first place. As stated above, you could end up with a trojan
that allows someone else to use your computer to do nasty things.
Browser Hijacks: Your browser home page can be hijacked by a
"malicious" website. The home page would then only open to
a porn page or page of ads. Another type of hijacking concerns your
modem. A porn dialer can be installed on your computer without your
knowledge. It may come bundled in some kind of fun software, theme
or screen saver. If you are online when the dialer actually
installs, it will cut your current modem connection and dial into a porn
site in another country. The billing will appear on your next phone
bill and could be substantial. This is less of a problem than
it used to be since more and more people are converting to a form of
broadband.
How do computers end up with
this spyware?
(1) it is
installed with free downloaded software. The more fun the free
program, the more likely it is that it is infected with some form of
spyware. In most cleaning cases I have encountered, people have
allowed their grandchildren unfettered online access and the children have
either viewed porn sites (more on that in a moment) or downloaded fun free
grames. In another case, someone I know loves cute screensavers and
wallpapers and the spyware is contained in these free downloads. The
person refuses to stop and is constantly battling infection that causes
other computing problems, including porn pop ups.
WHY SHOULD I BE CONCERNED?
WHAT CAN I DO ABOUT IT?
In one word - PROTECTION. We already get software
to protect against viruses. That is not an option any longer.
Many are beginning to see that they need protection against spam.
Protection against spyware is really already as much of a must as an
anti-virus program. NOTE!!!! Don't buy or download just ANY
anti-spyware program. Some of them are spyware themselves and of no
help.
(1) You can purchase anti-spyware programs that will
protect you in real-time. If you absolutely cannot purchase a
program at this time and suspect that you may already have an infection,
at least download a couple of the free programs. Please be careful
with purchasing programs. Many are forms of spyware themselves.
They trick you into free downloads, then produce false results as an
enticement to purchase. Some will install spyware on your computer.
I suggest only the following programs.
Webroot's Spy Sweeper: I
highly recommend this program and I have used it. However, it can be
a memory hog. I think that Spy Sweeper and the next one are the best
now on the market. More on Spy Sweeper from Workingmom
Counter Spy: I have
used this in tests and have been keeping up with its progress. Very
good. This and Spy Sweeper are the best, but do require an annual
fee. If you can afford it, get it. If not, the following
programs are helpful, but only in cleaning up spyware that is already
installed.
Ad-Aware:
Ad-Aware is one of the original anti-spyware
programs. The free version can only scan for problems after they've
been installed, but the paid version has a real-time scanner.
Spybot
Search and Destroy: This program is free, but
they do ask for a donation if you use it. It has an "immunization"
process, but this won't protect against all spyware. Still, it is a good
product.
Spyware Blaster is a free program (again, they ask for a
donation) that is supposed to "immunize" against the downloading of some
spyware. It didn't catch the one piece I got in a program (my
firewall caught it though). It includes immunization for users of
Mozilla as well as Internet Explorer.
(2) Turn off Windows Messenger unless you are on a
network. This is not MSN Instant Messenger. This program can
be hijacked and you will start to get all sorts of pop-ups while using an
instant messenger program. Instructions for turning it off can be
found at: http://www.itc.virginia.edu/desktop/docs/messagepopup/
(3) Make sure that you have all security patches
for Windows products. If you are using Windows, go to Windows
Update. Be careful though of downloading WinXP SP2. Make sure
you have read all the documentation BEFORE doing this and you might need
to turn off the XP firewall after downloading it (if you are running your
own firewall).
(54 Check your start-up for unnecessary components
that run when the computer is started. If your computer is running slow,
this may be one of the culprits. You can find a thorough list of each
component and it's description at Pacman's
Portal. About halfway down the page you can download a full list of
programs that may be in your start up. If you are a Windows user, you can then
run msconfig (see their instructions) and eliminate unnecessary start ups.
(5) Run a firewall.
Firewalls are set up to let you know when something on your computer is
trying to connect to the outside or when someone from the outside is
trying to connect to your computer.
Kerio,
Zone
Alarm and
Sygate are highly rated
firewalls and both have free versions. Both also have paid versions that
can do more. I have been reading some good things about the newest version
of Norton's firewall as well. If you are running Win XP, you can use the
firewall that came with it. It comes disabled by default, so you
will have to manually enable it. Instructions for this can be found
in the Windows Help & Support section.
(6) Subscribe to Spyware
Weekly newsletter to keep abreast of spyware issues and new software.
If you are suspicious
that a website or download may contain spyware, you can check on it at Spychecker.
|