At the present time, the average PC user's computer has approximately 23 different types of spyware installed, according to recent statistics. The majority of these PC user's are completely unaware that their systems are infected by this insidious menace. Spyware can take many forms, including the introduction of 'keyloggers', which capture your keystrokes, history, passwords and other confidential and private information.
What is spyware?
By definition spyware is "A program that runs on your computer and records what you do. These programs range from the relatively harmless, such as programs that monitor how often you visit a specific site, to those that track everything you do on your computer and send the results to someone else, who can then use this information for whatever they want"1 As such, spyware is cause for public concern about privacy on the Internet.
Spyware covertly gathers the user's information and activity on the Internet, without their knowledge. It can record keystrokes as they are typed in, passwords, credit card numbers, sensitive information, where you browse, chat logs and even take screenshots of your computer, whilst you are on the Internet. The latest versions of spyware can even permit the routine e-mailing or the posting of information directly to websites, where the spy can then casually view this information at any time.
Spyware for surveillance
Spyware is often sold as a spouse monitor, child monitor, a surveillance tool or simply as a tool to spy on users to gain unauthorised access to their computer systems. Spyware can also be known as snoopware, PC surveillance, key loggers, system recorders, parental control software, PC recorders, detective software and Internet monitoring software.
There is also hardware that can be used for surveillance, such as keystroke loggers which look like small, innocent connectors in the back of the computer between the keyboard and the computer. The presence of these will often not be detected by spyware detection programmes.
Does spyware cause disruption?
In the majority of cases, the average computer users will have no idea that spyware has been downloaded or installed on their computer. Many users discover that they have been infected only when strange events occur on their computers, including: the system slowing down; pop-ups occurring on a regular basis; their Internet browser's web home page is altered or when they run a 'Spyware removal tool'.
Many users have downloaded software on their systems, including screensavers, without knowing that a third party piece of software is also a part of that download to their computer systems.
Unfortunately, another layer of defence is required to protect computer systems, similar to the way anti-virus software detects and removes viruses, worms and other malicious software.
How can you detect spyware?
It is becoming increasingly important to constantly monitor your computer for spyware. Just as it is recommended that you do a periodic scan of your computer for viruses, it is recommended that you also periodically scan or 'sweep' for spyware.
There is now a program called Spyware Blaster which is available free on the Internet. This program also configures your Internet Explorer program for you to keep it safe. There are a number of commercial products available for purchase, including those that are part of an anti-virus/security package, like Norton's or McAfee's. As well, there is a new spyware detection product, Microsoft Windows AntiSpyware (Beta - test version), which is available on the Microsoft website. This software also detects adware and works on computers with Windows 2000 (or later) operating systems.
Use only recommended programs from trusted sources. In one more example of how one needs to always be cautious on the Internet, many freeware 'spyware detection' programs have been known to actually install spyware!
How do I remove spyware?
First of all you need to detect it. Typical software programs you can use include:
- Lavasoft - http://www.lavasoftusa.com/software/adaware/
- Spywareblaster - http://www.javacoolsoftware.com/spywareblaster.html
- Microsoft AntiSpyware - http://www.microsoft.com/athome/security/spyware/software/default.mspx
Many anti-virus vendors now include spyware detection within their antivirus software.
Always ensure you update the chosen software on a daily or weekly basis, in a similar manner to your antivirus software. If you do not update, you will not be able to protect your computer against the latest threats.
Sometimes, the removal tools, although effective, need additional assistance in the form of manual removal. If you are unsure what to do, seek professional assistance from a computer repair specialist.
In addition to installing and regularly running an anti-spyware program, it is recommended that users periodically visit the Trend Micro website at URL:
http://housecall.trendmicro.com/
From this website users can download an independent assessment of the current state of their computer. This assessment ensures that both the antivirus solution and the anti-spyware are checked so that the user can make sure that the system is cleaned up before the user downloads an anti-virus solution or firewall software. This is important as some malware can compromise your computer's ability to install or update anti-virus and anti-spyware software.
Adware
Adware, sometimes known as adbot, can profile your online surfing and spending habits or even keep popping up annoying advertisements as you surf the Internet. In some cases adware has been bundled into peer-to-peer file swapping products with other software without the user's knowledge or slipped in the fine print of a EULA (End User License Agreement). This is why it is important to always read the entire EULA when you download software from the Internet.
Adware can also perform 'drive-by downloads', by using a misleading dialogue box or other methods of stealth installation. Thus the user has no idea they have installed the application itself. In many cases the actual adware writers make the application difficult to uninstall, some software even attempts to re-install itself after the user has removed it.
ParasiteWare is the term used for any adware (software that displays advertisements) that by default overwrites web users tracking links. These links are used by webmasters to sell products and to help fund their websites.
Ransomware
Ransomware is another type of spyware and involves the use of malicious code to hijack user files, encrypt them so that you cannot read them, and then demand payment in exchange for the decryption key. Like other types of spyware, prevention is the key to avoiding Ransomware; and a firewall, updated operating system and anti-virus software are crucial to keeping your information safe.
How can you get rid of adware and pop-ups?
Windows XP with SP2 has a pop-up blocker built in. If there is a particular website where you find the pop-ups helpful, like your favourite online bookstore, you can exempt that website from being blocked. To customise the blocker:
in Internet Explorer select Tools and click on Pop-up Blocker, then Pop-up Blocker Settings. There you can enter the name of the website you would like to exempt.
If you have another web browsing program, you can install an inexpensive pop-up blocking program. You can also clean out your system to get rid of any pop-ups you have accidentally acquired. This is good regular maintenance.
Adaware is a program from Lavasoft. You can download and install their free program from their website, or purchase a more comprehensive program to install and run all the time. Many anti-virus and spyware programs also include this capability so check the description of the products you own. It is recommended that you run both adware and spyware detection programs on a regular basis.
Further information:
If you want to know more about spyware check out the following links:
http://www.spywareguide.com/txt_intro.php
http://www.itsafe.gov.uk
References: (1)http://www.itsafe.gov.uk
