What is spyware

What is spyware?

(aka malware, adware, browser hijacker, keylogger, ect.)

Spyware is software or hardware installed on a computer without the user's knowledge which gathers information about that user for later retrieval by whomever controls the spyware."

In the past few years a new generation of simple, yet mostly un-seen programs have emerged and are considered "malicious software". The sole purpose of these programs are to gain access into your computer and steal anything and everything you have or are doing. In short, this means an attack on you and your personal private (secret) information and activities. Your social security number, credit card numbers, bank account information, address and name's of your children, ect. You have by now heard of virus that can infect your computer, and have probably been using anti-virus programs, but right now, you must check to see if you are safe from spyware as most anti-virus programs do not do a very good job of protecting you from this new invasion.

Generally, much so-called safe 'adware' can be considered a form of spyware

Anti-Virus & Firewall Applications

In the past year, several anti-virus, anti-malware, and personal firewall applications have incorporated robust anti-spyware detection and removal. These programs include:

Agnitum Outpost Firewall Pro

F-Secure Anti-Virus Internet Security

Kasperksy Anti-Virus Security Suite

Norton Anti-Virus Internet Security

NOD32

Panda Titanium Platinum

Trend Micro PC-cillin

ZoneAlarm Pro Security Suite

Although these anti-virus and personal firewall products may offer some protection against spyware and adware, we still recommend that users not rely exclusively on one of these products in lieu of a dedicated anti-spyware _product

Recommended Programs

Although all of the programs listed on this page are worthy of consideration, at present time we officially recommend at least one of the following:

Ad-aware

http://www.lavasoft.de/

Spy Sweeper

http://www.webroot.com/wb/products/spysweeper/index.php

Spyware Doctor

http://www.pctools.com/spyware-doctor/

Pest Patrol

http://www.ca.com/products/pestpatrol/

AVG Anti-Spyware

http://www.ewido.net/en/

SUPERAntiSpyware

http://www.superantispyware.com/

Windows Defender http://www.microsoft.com/athome/security/spyware/software/default.mspx

Spybot Search & Destroy

http://spybot.safer-networking.de/

Moreover, we recommend that you install and use at least two anti-spyware programs because, unfortunately, no single anti-spyware program detects and removes 100 percent of the spyware and adware on the Net. For more information see the anti-spyware testing reports.

An example of a very good spyware protection package would include the following;

Webroot Spy Sweeper (Full Retail version)

Spybot Search & Destroy (Free version)

SpywareBlaster (Free version)

SpywareGuard (Free version)

Ad-aware (Free version) or (Full Retail version)

These used in conjunction with your anti-virus security suite and windows updates round out the needed list.

Anti-Spyware for the Mac

We're starting to get more and more questions from Mac users about anti-spyware. At this time, the only anti-spyware program that we know of for the Mac is:

MacScan

http://macscan.securemac.com/

Advanced users may also be interested in the broadening array of anti-rootkit programs that are available:

Rootkit Info & Detection Apps

http://spywarewarrior.com/viewtopic.php?t=17607

Please keep in mind the HIPS and anti-rootkit applications are both emerging technologies that may not be appropriate for home users who aren't technically savvy.

Other Things You Can Do...

Protecting your system against spyware and adware involves more than just installing one of the anti-spyware programs listed above. What follows below is a set of recommended additional steps for protecting for your PC.

1. Install anti-malware protection

Basic Free Protection

Scanning for spyware and adware isn't enough to protect your PC. You also need to take preventative steps to ensure that unwanted software doesn't come back. One effective way to prevent spyware and adware from returning is to install an anti-spyware prevention program such as:

SpywareBlaster http://www.javacoolsoftware.com/spywareblaster.html

SpywareGuard http://www.javacoolsoftware.com/sgdownload.html

In SpywareGuard, additional programs called 'browser hijackers' will be detected as spyware. These programs may install silently and, while many do gather information or perform tracking, some simply just 'hijack the browser' - or they change various browser settings and make them hard to change back. Some browser hijackers even embed themselves into your system and can cause a loss of internet connectivity if not removed correctly.

SpywareGuard may also detected some "premium-rate dialers". Many times, these dialers are installed without the user's knowledge (and even silently in the background by just viewing a webpage) and are not noticed until the month's phone bill shows a charge to some out-of-country number for hundreds of dollars.

SpywareBlaster and SpywareGuard are excellent, free programs from JavaCool. I recommend installing and using both, as they protect your computer in different ways. SpywareBlaster "inoculates" your Internet Explorer browser against the installation of unwanted spyware and adware from the internet. SpywareGuard actively monitors your PC and prevents spyware infestations. Both are easy to install and update.

Advanced HIPS & Rootkit Protection

In the past few years a new generation of anti-malware protection products has emerged. This new type of anti-malware protection, called HIPS (Host Intrusion Protection System), works at the kernel level to intercept malware before it hits your hard drive and infects the system. Although this technology is still maturing, a HIPS defense may be worth looking into for some users.

2. Lock down your browser

One of the most prevalent means for spyware and adware to be installed is through Internet Explorer. To prevent spyware and adware from installing without your knowledge and permission, you need to "lock down" Internet Explorer. There are several ways to do this.

Securely configure the Internet zone

First, you can securely configure the Internet zone of Internet Explorer and add sites that you trust to the Trusted sites zone. This means that by default web sites will not be able to use "active content" (i.e., ActiveX controls, Java applets, and scripting) until you explicitly choose to trust those web sites. See this page for instructions on how to securely configure Internet Explorer:

Internet Explorer Privacy & Security Settings http://www.spywarewarrior.com/uiuc/btw/ie/ie-opts.htm

By turns, you could also use this free program, which will automatically configure Internet Explorer for you:

Enough is Enough! http://www.spywarewarrior.com/uiuc/resource6.htm

One potential downside to securely configuring the Internet zone is that some web sites will not work properly until you add them to the Trusted sites zone -- a process that some users find cumbersome.

Add bad sites to the Restricted sites zone

Second, you can use another approach to "locking down" Internet Explorer which avoids the hassle of broken web sites by adding known "nasty" sites to the Restricted sites zone. Doing so gives your PC protection against known threats while still allowing most web sites to work by default. To put the clamp down on a long list of undesirable web sites, you can install and use this free program:

IE-SPYAD http://www.spywarewarrior.com/uiuc/resource.htm

If you choose to use the Restricted sites approach of IE-SPYAD, be sure to update your copy of IE-SPYAD regularly, as new web sites are constantly being added to the list.

3. Use an alternative browser

Internet Explorer is not only the most popular browser on the Net, it is also the browser most widely and easily exploited by spyware pushers to install spyware and adware behind users' backs. Thus, you might decide that Internet Explorer is simply not worth the hassle or risk. In that case, you can install and run an alternative, non-IE browser such as:

Mozilla, Firefox, Opera.

All three of these browsers are mature, robust, and fast. Moreover, they have built-in pop-up blocking and several other nice features that Internet Explorer simply lacks. More importantly, all three of these browsers are much less susceptible to unwanted adware and spyware installations. And all three are free.

Note: even if you do switch to an alternative browser, you should still lock down Internet Explorer, as described above. Given that Internet Explorer has effectively been integrated into Windows, it can still be exploited by adware and spyware that gets installed to your system through other means. Thus, locking down Internet Explorer remains important even if you're not regularly using Internet Explorer to browse the internet.

4. Keep your system safe & secure with Windows Update To prevent unwanted spyware and adware from being installed behind your back, you need to install all the latest "Critical Updates" from Microsoft. Doing so is easier than you might think.

Microsoft has an entire Windows Update site devoted to automatically updating users' systems with all the latest fixes and patches for a wide range of Microsoft software, including Windows, Office (Word, Excel, PowerPoint, Access), and Internet Explorer.

We strongly urge you to take your system past the Windows Update site and let that site download and install the appropriate fixes for your computer. Doing so just might save you some grief and headaches down the road:

Windows Update

http://windowsupdate.microsoft.com/

Much of the update process at Windows Update is automated, so it's simple and convenient. The Windows Update site will install a small program to analyze the software on your system and recommend the appropriate fixes. This process takes only a few minutes.

Once Windows Update has finished analyzing your system, you'll be presented with a menu of downloads that Windows Update deems appropriate for your computer. At a minimum you should let Windows Update install the fixes marked as "Critical Updates." The other available updates ("Recommended Updates," "Drivers and Enhancements") are optional.

Check the boxes for the updates that you wish to install ("Critical Updates" are checked by default). Then click the appropriate button to start the download and installation process. You'll be shown a summary of the updates that you've selected, and then you'll presented with a "License Agreement." After you click through the "License Agreement," the download and intallation process will start.

Since the entire download and installation process is automated, there's almost nothing for you to do except reboot the computer after all the updates have been installed. 5. Read Licenses & Privacy Policies

Anti-spyware applications alone can't protect you entirely from unwanted spyware and adware. You have to do your part as well by being vigilant in your online behavior.

One of the more common sources for spyware and adware is "freeware" (e.g., Grokster or KaZaA) that bundles unwanted third-party applications. Another common source involves third-party web sites that automatically start the installation of spyware and adware when you visit those sites. These auto-installed spyware and adware programs may initially appear to be plug-ins necessary for the web site itself, though usually they are not.

Wherever you happen to encounter spyware and adware, you will usually be presented with a EULA (End User License Agreement) and/or Privacy Policy. Do not blindly click through these documents. Read them carefully and look for the tell-tale language that discloses the presence of adware or spyware. For tips on what to look for, see these pages:

Ben Edelman - Grokster and Claria Take Licenses to New Lows

http://www.dslreports.com/forum/remark,8628121~root=security,1~mode=flat

DSLReports.com - EULAs & Privacy Policies

http://www.staff.uiuc.edu/~ehowes/priv-pol.htm#that

The Problem with Privacy Policies

http://www.benedelman.org/news/100904-1.html

Ben Edelman - Gator's EULA Gone Bad

http://www.benedelman.org/news/112904-1.html

EULAlyzer (free EULA parsing/analysis tool)

http://www.javacoolsoftware.com/eulalyzer.html
Most if not all of the "adware-supported" or "advertising-supported" applications on the Net have adware-free equivalents. There's simply no need to use advertising-supported applications. If you're looking for truly free software without any unwanted surprises, see the following sites:

The OSSWin Project

http://osswin.sourceforge.net/

Pricelessware

http://www.pricelessware.org/thelist/index.htm

The OpenCD

http://theopencd.sunsite.dk/

OldVersion.com

http://www.oldversion.com/

Moochers

http://moochers.com/

GNUWin II

http://gnuwin.epfl.ch/en/index.html