Spy & Adaware

Home

What is Spyware and Adware?

In this lesson, we’ll provide a quick overview of spyware and adware, and explain how these online hazards differ from viruses and other security dangers.

Computer viruses date back to the 1980s, and by now most security-savvy users–including those who have learned the hard way–know better than to open unsolicited e-mail attachments that may carry data-destroying bugs. For anyone with an e-mail account or Internet access, particularly those running the ubiquitous and security-poor Microsoft Windows operating system, antivirus software has become essential.

But like everything else, digital threats keep evolving. More recent menaces, including spyware, adware, phishing, root kits, and spam, pose an even greater danger than your garden-variety virus. And unlike the virus writer, the stereotypical loner toiling in his mom’s basement, sophisticated cyber-criminals are often behind the latest threats.

Know your enemy

Before we explain the best ways to fight spyware and adware, let’s define the various online hazards:

Adware/Spyware: Any clandestine software that does various activities without your consent. Definitions vary, but we’ll describe adware as any program that is surreptitiously installed on your computer, and displays ads to your computer (often via annoying pop-ups), or collects marketing information about you. This information is often sold to advertisers. Spyware programs collect more sensitive personal information–perhaps a list of the Web sites you visit, or even credit card and Social Security numbers–and send it via the Internet to an unknown party. Some adware/spyware programs change your browser’s home page. Adware and spyware are often bundled with freeware and shareware programs.

Phishing: This is a scheme designed to trick someone into revealing sensitive information, such as a credit card or Social Security number. This is commonly done via a fraudulent e-mail that claims to be from a legitimate company. The unsuspecting victim clicks a link in the e-mail, is redirected to a rogue site, and is instructed to provide personal information, such as a bank account number or password. Of course, the e-mail and rogue Web site are carefully designed to look legitimate. Phishing attempts are sometimes done via instant message or fax as well.

Root kits: A stealthy set of software tools used by cybercriminals to gain control of the "root" or core of a remote computer. A root kit often goes undetected by security software, and can introduce a Trojan horse that opens an unused port on your computer that crackers can exploit.

Spam: Unsolicited junk e-mail, including those annoying come-ons for free plasma televisions, get-rich-quick schemes, and prescription drug offers.

Prevention is key

The best spyware sentries take a proactive approach by preventing known spyware programs from being downloaded to your computer. Some tools, however, detect spyware after it’s been downloaded and installed. Naturally, anti-spyware apps can’t catch everything, so you’ll need to play it smart online.

 

 

Advanced Spyware Fighting.

Since spyware can be tricky to remove manually, your first step is to run a virus scanner that also detects and deletes spyware. Most of the latest antivirus applications, including McAfee and Norton, do this.

But don’t rely solely on these watchdogs. Smart online behaviour is the best way to keep spyware from reaching your system in the first place. Here are some important things to be aware of:

Internet Explorer can expose you to greater risk

When it comes to security, Internet Explorer has more holes than Swiss cheese. You’ll want to download the latest Internet Explorer security patches, particularly those labelled “critical” by Microsoft, as soon as they become available. Odds are good your computer is already configured to receive these updates automatically. How can you be sure? Click Start/Control Panel/Security Centre/Automatic Updates. If you see a green dot besides “Automatic (recommended),” you’re good.

 

If you use Microsoft’s Internet Explorer browser, make sure your computer is configured to automatically receive the latest security updates.

 

To get security updates manually (not installed automatically on your computer), go to the Microsoft Windows Update site.

In order to avoid the risks associated with using Internet Explorer, many people use an alternative browser like Mozilla’s Firefox, which doesn’t support ActiveX controls and is therefore immune to ActiveX spyware threats that plague IE.

 

Tip:
You already know not to open an e-mail attachment from an unknown sender. But did you know that chat rooms are often where new worms and other bugs spread? Don’t click unsolicited links in these rooms.

 

‘Drive by’ spyware/adware installations

Some unscrupulous Web sites are designed to infect your PC with adware automatically when you visit them. So when you use a search engine, the results you get may include such dangerous sites. How can you tell if a site has spyware or other threats? Run McAfee SiteAdvisor, a free utility that provides safety ratings for thousands of sites.

McAfee Site Advisor’s safety ratings for adware and spyware appear with the search results on major search engines.

Whether you’re using Google, MSN, or Yahoo, Site Advisor’s ratings appear next to the search results (shown above). Scandoo provides a similar service.

Before downloading freeware and shareware, read the user agreement carefully. It may reveal that adware is part of the package. We recommend that you not install any software download that has an adware component, since it may be difficult to remove the adware component later.

 

 

This might be your medicine cabinet, free via Cnet .com

On this page you will find suggested several security programs that are free to use.

Everybody loves free stuff, including security software. Here are some good choices:

Windows Defender is Microsoft’s free anti-spyware software. Like every good spyware detector, it provides real-time support–essential for stopping spyware from being installed in the first place.

Lavasoft Ad-Aware and Spybot Search & Destroy are popular choices, since they’re both free and very effective.

Spyware Blaster is a great free program that helps prevent adware and spyware from installing itself in the first place. It can’t remove adware/spyware from an infected PC, but it’s still a great addition to your anti-malware arsenal.

 

McAfee SiteAdvisor is a free utility that provides safety ratings for thousands of Web sites. If you try to connect to a site on McAfee’s banned list–such as a site known to contain spyware–a SiteAdvisor warning page appears instead and advises you to stay away.

 

AVG Free Anti-Virus for Windows, a gratis version of Grisoft’s antivirus package, is available for home users, but not for businesses or non-profits. You’ll get better support and configuration tools, though, if you buy the Professional version.

 

Zone Labs has a free firewall called ZoneAlarm that’s quite good, although it lacks some helpful tools, such as the ability to automatically provide Internet-access rules for popular programs. And Cloudmark has a free trial copy of its Anti-Fraud Toolbar, which guards against phishing attempts.

 

 

Even if you scan your computer for viruses weekly, a second opinion is always a good idea. We recommend that you run a monthly scan with a Web-based service like Trend Micro’s Housecall. It’s free, and it could catch bugs your primary security program missed.

 

This just might help you before you have to call in the professionals.

This article has been gleaned from Cnet.com

Next