Spyware & Adware: The War against it

Spyware and Adware are not only an ever-increasing nuisance for computer users everywhere, but also a booming industry.

According to Webroot Software, Inc., the distribution of online advertisements through spyware and adware has become a whopping $2 billion industry.

The aggressive advertising and spying tactics demonstrated by some of these programs, require an equally aggressive response from a seasoned eradicator. Sunbelt Software is such a company. A leader in Anti-Spyware, Anti-Spam, Network Security and System Management tools, they gave consistently remained on the cutting-edge of anti-spyware programming since 1994.

So you might be asking:

Why do I feel as if somebody watching me?

According to the National Cyber Security Alliance, spyware infects more than 90% of all PCs today. These unobtrusive, malicious programs are designed to silently bypass firewalls and anti-virus software without the users knowledge.

Once embedded in a computer, it can wreak havoc on the systems performance while gathering your personal information. Fortunately, unlike viruses and worms, spyware programs do not usually self-replicate.

Where Does It Come From?

Typically, spyware originates in three ways. The first and most common way is when the user installs it. In this scenario, spyware is embedded, attached, or bundled with a freeware or shareware program without the users knowledge. The user downloads the program to their computer.

Once downloaded, the spyware program goes to work collecting data for the spyware authors personal use or to sell to a third-party. Beware of many P2P file-sharing programs. They are notorious for downloads that posses spyware programs.

The user of a downloadable program should pay extra attention to the accompanying licensing agreement. Often the software publisher will warn the user that a spyware program will be installed along with the requested program.

Unfortunately, we do not always take the time to read the fine print.

Some agreements may provide special opt-out boxes that the user can click to stop the spyware from being included in the download. Be sure to review the document before signing off on the download.

Another way that spyware can access your computer is by tricking you into manipulating the security features designed to prevent any unwanted installations. The Internet Explorer Web browser was designed not to allow websites to start any unwanted downloads. That is why the user has to initiate a download by clicking on a link. These links can prove deceptive.

For example: a pop-up modeled after a standard Windows dialog box, may appear on your screen. The message may ask you if you would like to optimize your Internet access. It provides yes or no answer buttons, but, no matter which button you push, a download containing the spyware program will commence. Newer versions of Internet Explorer are now making this spyware pathway a little more difficult.

Finally, some spyware applications infect a system by attacking security holes in the Web browser or other software. When the user navigates a webpage controlled by a spyware author, the page contains code designed to attack the browser, and force the installation of the spyware program.

What Can Spyware Programs Do?

Spyware programs can accomplish a multitude of malicious tasks. Some of their deeds are simply annoying for the user; others can become downright aggressive in nature.

Spyware can:

• Monitor your keystrokes for reporting purposes.
• Scan files located on your hard drive.
• Snoop through applications on our desktop.
• Install other spyware programs into your computer.
• Read your cookies.
• Steal credit card numbers, passwords, and other personal information.
• Change the default settings on your home page web browser.
• Mutate into a second generation of spyware thus making it more difficult to eradicate.
• Cause your computer to run slower.
• Deliver annoying pop up advertisements.
• Add advertising links to web pages for which the author does not get paid. Instead, payment is directed to the spyware programmer that changed the original affiliates settings.
• Provide the user with no uninstall option and places itself in unexpected or hidden places within your computer making it difficult to remove.

Examples of Spyware

Here are a few examples of commonly seen spyware programs:

(Please note that while researchers will often give names to spyware programs, they may not match the names the spyware-writers use.)

CoolWebSearch, a group of programs, that install through holes found in Internet Explorer. These programs direct traffic to advertisements on Web sites including coolwebsearch This spyware nuisance displays pop-up ads, rewrites search engine results, and alters the computer host file to direct the Domain Name System (DNS) to lookup preselected sites.

Internet Optimizer (a/k/a DyFuCa), likes to redirect Internet Explorer error pages to advertisements. When the user follows the broken link or enters an erroneous URL, a page of advertisements pop up.

180 Solutions reports extensive information to advertisers about the Web sites which you visit. It also alters HTTP requests for affiliate advertisements linked from a Web site. Therefore the 180 Solutions Company makes an unearned profit off of the click through advertisements theyve altered.

HuntBar (a/k/a WinTools) or Adware.Websearch, is distributed by Traffic Syndicate and is installed by ActiveX drive-by downloading at affiliate websites or by advertisements displayed by other spyware programs. Its a prime example of how spyware can install more spyware. These programs will add toolbars to Internet Explorer, track Web browsing behavior, and display advertisements.

How Can I Prevent or Combat Spyware?

There are a couple things you can do to prevent spyware from infecting your computer system. First, invest in a reliable commercial anti-spyware program. There are several currently on the market including stand alone software packages such as Lavasofts Ad-Aware or Windows Antispyware. Other options provide the anti-spyware software as part of an anti-virus package.

This type of option is offered by companies such as Sophos, Symantec, and McAfee. Anti-spyware programs can combat spyware by providing real-time protection, scanning, and removal of any found spyware software. As with most programs, update your anti virus software frequently.

As discussed, the Internet Explorer (IE) is often a contributor to the spyware problem because spyware programs like to attach themselves to its functionality.

Because of this, many users have switched to non-IE browsers. However, if you prefer to stick with Internet Explorer, be sure to update the security patches regularly, and only download programs from reputable sources. This will help reduce your chances of a spyware infiltration.

And, When All Else Fails?

Noticed I said when and not if? As spyware is growing in destruction and it covers easily more than 90% of the computers (thats you and me, 9 in 10!), the only solution you may have is backing up your data, and performing a complete reinstall of the operating system!


By Neil Parnham
Article Source: Article Street

Read more »

How to Spot Spyware Without your Glasses

If you know anything about spyware and the problems it can cause for the average computer user, you've got a head start. But once you understand the dangers that spyware and adware programs pose to your computer and your personal information, what can you do to prevent it from interfering with your life?

The best thing anyone can do to adequately deal with spyware and adware is to be informed about the issue and proactive in dealing with it. For instance, knowing how to recognize a program as spyware, avoiding certain websites and guarding against malicious software from infesting your hard drive can take you a long way. When armed with the right knowledge you will be able to face the problem without so much worry and fear.

Nobody wants spyware tracking their every computer move, which is why individuals and companies that desire to do so are resorting to more underhanded and covert methods of spyware infection. And as the general computer user becomes more aware of the existence of spyware and adware, they have even more reason to use hidden tactics to achieve their objective and invade your privacy.

In the best case scenario spyware simply archives information related to your browsing habits while you're online and sends it back to a company that uses the information for advertising research. This type of spyware is commonly referred to as adware. It is not the most harmful form of spyware but can be a nuisance to eliminate and slows down even the fastest of computers.

In the worst case scenario, a keylogging program is installed on your personal computer to collect private information you don't want falling into the wrong hands passwords, online banking information, and anything else that you might type into your computer during the normal course of a day. This type of spyware can also track other aspects of computer usage including applications used, instant messenger conversations, hidden windows and mouse clicks.

These programs can infect your computer when you download free programs, so one effective way to avoid spyware is by keeping your system clear of excess junk. If you really don't need that free fishbowl screensaver, restrain yourself and stick with the ones you already have. Or opt for a high-quality screensaver that costs a little money but will save you a whole lot of frustration. In addition, staying away from freeware sites altogether is recommended because even if you don't download anything, many sites attach a cookie to your browser after you visit the website that will be used to track your movements online. Avoid questionable websites and you'll avoid this type of spyware.

Refrain from downloading files from other sources as well. For example, a spyware program can be downloaded through an e-greeting, email, by clicking on a pop-up, or through other sources. To avoid getting infected through a pop-up ad, do not click anywhere on the pop-up window. Instead, click the "X" located in the top right hand corner of the window to close the pop-up entirely. If there is no way to close the window, disconnect from the Internet and close your browser.

Another possible source of spyware infection is a browser toolbar. Many toolbars are set up to track your browsing habits and search queries in order to create targeted advertising. Toolbars can generate pop-ups and even display dynamic ads in the toolbar itself that are based on your interests, as suggested by your online activity. In fact, it may seem as if the websites you visit generate the pop-ups you see, but often these ads are actually produced by the hidden spyware and adware already present on your computer.

Unfortunately, you don't always have to make the first move to get spyware on your computer. Many people are careful to avoid downloading strange email attachments and stay away from questionable downloads altogether, but this is not enough. There are a growing number of spyware and adware programs on the Internet that specifically take advantage of Windows vulnerabilities to infect your system without your knowledge or consent. Known as a drive-by-download, this type of infection latches onto your computer while you're online. In this situation, a downloader Trojan is installed on your computer this program then downloads and executes files from certain locations online whenever your computer is connected to the Internet, all without your help. The downloaded files then display pop-up ads on your computer. The surefire way to avoid most of these programs is by keeping up with Windows security updates. Always install the updates when they are made available and you will be able to circumvent most adware problems that exploit the security holes in Windows.

In particular, rogue anti-spyware and registry cleaner programs are utilizing this type of technology to illicitly promote their products. Once the adware has been secretly installed on your computer, pop-up windows start appearing that are designed to scare you into downloading an anti-spyware or registry cleaner product. Specifically, a window might say you have a spyware threat on your computer and tries to convince you to download the company's anti-spyware software to rid your computer of the infection. As you might have already guessed, these claims are false most likely your computer is not infected with spyware (or only infected with the adware originating from the company attempting to sell you the anti-spyware product). Rogue anti-spyware programs are disguised as legitimate solutions for spyware dilemmas but are actually set up to deceive victims into purchasing a product to fix a problem that doesn't exist. If you don't want to be conned into buying a fake anti-spyware product, do not respond to this type of pop-up ad.

Signs of Infection

If you do have spyware on your PC you can usually recognize the signs without the "help" of a rogue anti-spyware program. For instance, too much spyware will bog down your system and cause your computer to run slowly. You will probably be overrun by an excess of pop-ups and fake alert messages. In addition, your homepage and list of favorites might suddenly change and reappear even after restoring the default. Other things to look out for:

• A new browser toolbar emerges without your consent, which is impossible to remove
• Every time you conduct an online search the results are redirected to an unfamiliar search engine
• Unexplained calls to 900 numbers begin appearing on your phone bill
• Any anti-spyware or security programs you do have installed stop working
• Your modems send and receive lights blink continually even when you are not doing anything online

If you think you do have spyware on your system, the best way to avoid scam artists is to stick with well-known, expert-recommended anti-spyware/adware removal products. Some quick research will give you all the information you need to know about the subject. If you've never heard of the company before or suspect suspicious and overblown advertising techniques, stay away. And follow your instincts if you think a company doesn't appear professional or trustworthy walk away from the offer. There are several excellent anti-spyware programs available on the market that can help you elude the troubles associated with spyware.

By Katerina Mitrou

Read more »

Stopping Spyware

Wikipedia defines Spyware as "...computer software that collects personal information about users without their informed consent." Some of it is worse than others. Most of it is used by marketing companies to track website usage to tailor advertisements to match your surfing habits. Others are a little more intrusive and can harm your computer.

I find that a lot of people are completely oblivious to spyware, and it's affects on their computers. Most average users have only heard of antivirus, and pay no consideration to an antispyware solution. I have on numerous occasions taken calls, or went to some one's house asking me to do something about their computer running so ridiculously slow. 9 times out of 10, their systems are riddled with spyware.



So what are you going to do about it? I'll be honest, I don't mind being paid $50 an hour to come over and clean up your computer, but let's face it, you can do it yourself for free.

Two of the best antispyware solutions on the Internet are free, and if used together with your antivirus program (By the way there are free versions of those too), you can keep your system relatively clean. Some of you already know the secrets I am about to reveal, and probably don't think they are secrets at all. For the rest, you have never heard of either of these, and to those people...You're welcome!

1) Spybot Search & Destroy: This little utility is absolutely free of charge, and if you read the license, is not only restricted to private use. It is donation ware, so if you feel obligated, please donate to their cause. It is really great and is updated regularly. You can also schedule it to autoupdate with certain command switches, and you can also schedule it to run at certain times. What's that smell? It smells like automation!

2) Adaware SE Personal: This utility by Lavasoft is only free for personal use, so that's right...You can't add it to the corporate Ghost image legally. According to Lavasoft, Adaware scans"...your RAM, Registry, hard drives, and external storage devices for known data-mining, advertising, and tracking components." Since it isn't the pro version, you can't easily automate Adaware. For automation, you have to buy their pro version.

As I mentioned above, it is best to install both programs together and run them both. One will catch what the other missed and vice versa. Complete the trinity with your antivirus, and keep your computer running at maximum efficiency.

Read more »