Spyware records
your visits to websites.
Tells Companies Where You Went, What You Did.
Adware Pushes Popups into your Browser,
Makes Advertisements Appear on Web Pages
That never had them Before.
And Chances
Are, YOU Installed the Software.
Are popups driving you crazy?
Dont blame the web site. You may have loaded software on
your machine that creates these popups every time you connect
to a different Internet address.
However, Spyware and Adware no longer seem
to ask for permission in most cases. We have seen many cases
of Spyware and Adware software appearing on computers that would
never have permitted this type of intrusion. It appears that
the "gloves are off". We believe that all Spyware and
Adware should be treated in the same category as Viruses, but
as "Commercial Software" they have always received
the benefit of the doubt from anti-virus writers. This gentlemanly
distinction should be removed- We are seeing a great many machines
TAKEN OUT of action by Spyware infestations, ignored by their
otherwise excellent anti-virus software.
The most severe type of problem is when the
Spyware/Adware software takes over the interface between a network
connection and the operating system, processing all traffic in
and out of the network through it's code. It can use this to
redirect users to different websites than they called for, to
insert advertisements into web pages, to generate popups, and
to track all forms of Internet communication. Removal of this
software can be very difficult. It cannot be done manually without
sophisticated tools, and both SpyBot and AdAware may or may not
be able to successfully resolve the problem. As commercial software,
Sypware and Adware are "mutating" rapidly, and the
anti-Spyware tools are not always 100%.
In extreme cases, replacement of the network
card or re-installation of the operating system may be required
to restore normal services to the network card. (NOTE that
Windows operating systems can be safely installed over an existing
copy in a Repair mode; this should not damage any program settings.
You should immediately run all Windows Update updates after re-running
Windows Setup to repair problems on your computer.)
We are now recommending the donation-supported
program Spybot
Search & Destroy as the most effective tool for removing
Spyware and Adware. Free downloads are available from www.safer-networking.org.
NOW UPDATED for SpyBotSD ver 1.3:
We even wrote a custom User's Guide; download a copy here.
Every user should consider running Spyware/Adware
scanning software on a regular basis to keep their PCs
Spy Free.
Other free and effective spyware removal tools include Ad-aware (from lavasoftusa.com) and Browser Hijack Blaster (an anti-popup tool,
along with strong spyware blocking.) HijackThis, from http://www.merijn.org, is an excellent tool
for examining your system for possible rogue software. Another
option is a registry inserter that uses Internet Explorer's Restricted
Sites list to block spyware, adware, and pornware. A free tool,
SPYAD.EXE,
is available from http://www.staff.uiuc.edu/~ehowes/resource.htm.
What about my fancy Virus protection?
Spyware and Adware are NOT viruses. They are Commercial Software,
produced by a company to generate a profit. Anti-virus vendors
have always taken a dim view of a program that deletes another
company's program as a prime function, and thus have ignored
most Adware and Spyware infestations. THIS MUST CHANGE. This
type of software is just as out of line as Virus software. It
will break your machine if you don't take measures to stop it.
In the past, Spyware and Adware used systems where a user had
to CHOOSE to install them yourself, and there was a formal user's
agreement that is implied when you accept the installation. Nowadays,
this "formal users agreement" may be a statement on
a website that is linked many pages down, and the website you
connect to will AUTOMATICALLY install the Spyware or Adware without
any notice or warning.
In addition, SoftProse Technology, Inc. is
suspicious of some Spyware and Adware infestations that appeared
to have propogated over a shared network drive, similar to the
SirCam virus. If this is true, and these devious tricks become
commonplace, the battle against Spyware and Adware will become
a war. Corporate America is slowly bottling itself up behind
complex intelligent routers that strip certain software from
the Internet data stream before it can reach their desktops,
but hundreds of thousands of smaller businesses have not yet
been able to employ this type of protection.
When the last software you accepted from the
Internet was downloaded, did you read the user's agreement? Did
you see where it said that you will permit the company to record
your Internet activity and then report it back to the company?
We didn't think so. If it did this without permission, we believe
that it should truly be considered a virus.
Note that the Add Remove Software
function in the Control Panel will NOT fully or correctly remove
many of these programs. Add/Remove Software uses
a system provided by each softwares creator. Although it
may seem to remove the offending program, often important program
elements are left behind and are merely disguised. Software such
as SpyBot S&D and Ad-aware are your best tools for removing
Adware and Spyware correctly and forever.
Run SpyBot Automatically?
This is simpler than it sounds. The Scheduled Tasks Control Panel
can be set to run a given task at any time you choose, and can
also wake a computer up in the middle of the night to accomplish
this. (Wake from Sleep is not the same as "Turn On";
the computer must be running...) The below string should work
in most cases:
SpyBot can be set to run automatically every day with
this command:
"C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
/taskbarhide /autoupdate /autoimmunize /autocheck /autofix /autoclose
Use the "Scheduled Tasks" Control Panel item to automate
this.
Tired of Viruses?
So are we. End the problem.
Please see our proposal:
Whole Office
Anti-Virus Protection
And see our information on:
Virus Defense Suggestions
Need a Free
Anti-Virus Solution?
The Usual Suspects
Include:
Form-filling software from GATOR (GAIN - Gator Advertising
Information Network) is offered at many web sites for downloading
with a single click. GATOR is a classic Spyware software, tracking
Internet activity.
Alexa is free
toolbar software from Amazon.com. (Surprised?) The program
transmits a unique ID code, which Amazon now says they no longer
use to track users. However, this software remains listed as
low-risk Spyware.
CometCursor is a fun browser add-in
that can show custom cursors on websites where the webmaster
has enabled support. However, the CometCursor is also spyware,
reporting back websites you visit. Remove with Spybot Search & Destroy.
Some sort of Pornware
software has been raising havoc with clients who have machines
open to casual use. Once loaded, this software will force your
computer to show pornography gateway sites, along
with taking over the Home Page setting. (It resets the Home Page
automatically so it cannot be changed back.)
Remove with Spybot
Search & Destroy.
Windows Messenger Service can be difficult to supress or remove,
yet is a type of Spyware. Also, adware and undesirable messages
can be sent directly to your desktop when Messenger is installed.
A free removal tool is available from Doug Knox, at:
http://www.dougknox.com/xp/utils/xp_mess_disable.htm
RealPlayer (and associated programs such as RealDownload
and RealJukebox) assembles information about the use of
the program on your computer. Real corporation has said they
will not use this information, but the program still collects
it. Real's software contains many spyware elements, which the
company says are currently inactive. RealPlayer is very popular,
and can be difficult to do without. What is your privacy worth?
Windows Media Player keeps a log file on the disk of CDs
and DVDs that it plays. This log file may or may not be
used by Microsoft in the future, and it is there for viewing
by others who have access to your computer. Over 17 million Windows
XP computers have Media Player installed.
Netscapes SmartDownload is no longer being used
as Spyware by Netscape after an injunction was won by New York
Attorney General Eliot Spitzer. Radiates GoZilla,
formerly listed as Spyware, is no longer associated with this
function. Note that installed versions of this software may still
collect information, but the companies have agreed to stop recording
and using this data.
America Online tracks user's habits and relays this
information to vendors. AOL users must be aware of this
and seem to tolerate it with little complaint. See the AOL
Privacy Policy statement at http://www.aol.com/info/privacy.adp.
Adware and Viruses Certain viruses, such as the SoBig virus,
had the effect of creating "fleets" of thousands of
computers that can be taken over by hackers and used to run software
of the hacker's choice. These "zombie" computers are
known to be used to send SPAM emailings, and may also serve in
other unpleasant roles. Cable modem connections or DSL connections
are especially vulnerable to this type of exploitation. Of course,
anti-virus software is a must but we strongly recommend installing
a small ROUTER (such as the inexpensive Netgear products or any
of the excellent SMC Barricade line) on all Cable Modem and DSL
connections to protect your computer from any unfortunate influences
from the Internet. These Routers all use NAT addressing, which
is a break-proof firewall- a complete "glass wall"
to hackers who may try to connect to your machine from the Internet.
Routers- More than just a good idea.
It's Your Choice.
Remember- Most Adware or Spyware software will only be installed
if a user APPROVES its installation. DO NOT accept the
download of a plug-in unless you know exactly what
it is going to do to your machine! Common safe plug-ins
include updates from Microsoft, and software from Macromedia
(Flash, ShockWave, Cold Fusion, etc.)
As many system administrators of Windows
XP Professional networks have discovered, the user privileges
on desktop machines can be set at the Power User level. This
eliminates the ability of these users to install software, including
Adware and Spyware. (Another reason Window XP Professional is
desirable?)
Some helpful Internet Resources:
Free powerful Removal Tool:
SpyBot
Search and Destroy from http://www.safer-networking.org/
We wrote a SpyBot User's Guide (Acrobat format) download here. Free "classic"
Ad-aware Spyware & Adware Removal Tool:
http://www.lavasoftusa.com
Free Registry Modifyer to update IE's Restricted Sites list:
SPYAD.EXE
from http://www.staff.uiuc.edu/~ehowes/resource.htm
HijackThis is a very popular tool for examining
your system.
http://www.merijn.org
Info about all Spyware & Adware:
http://www.aluminumstudios.com/spyware
Spyware & Adware detailed and discussed:
http://simplythebest.net/info/spyware.html
Doug Knox writes
very useful tools for Windows,
including software for controlling Windows Messenger:
http://www.dougknox.com/xp/utils/xp_mess_disable.htm
Opt-out of popup
ads?
Some sites offer this,
including doubleclick and X10. See a list at:
http://www.awsop.com/opt_out.html
Spyware & Adware lookup site:
http://www.spychecker.com
Another registry of Spyware
http://www.spywareguide.com |
|
|