Spyware infiltrates a user’s computer via a number of methods. The most obvious sources are the other scum that are designed to wreak binary havoc: Some viruses, worms, and Trojan horses are designed to install spyware on victim computers either by carrying the spyware directly as a part of its payload or by downloading it after the virus has successfully implanted itself. Other sources aren’t so obvious to the untrained or unsuspecting user. The following sections explain what these common methods are and how they work so that you understand how your network and users are vulnerable.
Finding holes in the Web browser
The spyware taking up residence in a computer may be an ActiveX control, a browser snap-in (intended to extend browser functions), a browser helper object, or a standalone executable that is loaded into the user’s computer when he or she visits a Web site that contains the spyware. The spyware may load because of a security setting that is too lax, such as permitting the downloading of unsigned ActiveX controls. Spyware can also install itself via one of many vulnerabilities that have been discovered in recent years. For instance, it could be an ActiveX control that is specially designed to fool the browser into thinking that the control is coming from a Trusted Sites Zone or Intranet Zone instead of the Internet Zone.
Tagging along in e-mail
E-mail programs that display HTML e-mail (such as Outlook, Outlook Express, and Mozilla Thunderbird) are often subject to the same vulnerabilities that have beset Microsoft Internet Explorer in recent years. Often, just displaying a mail message is sufficient for the spyware to get loaded in the user’s computer. This is because Outlook is using the same vulnerable DLLs to display HTML as is used by Internet Explorer.
Hiding in software downloads
Many downloadable software programs — and programs that you can purchase online or over the counter — contain spyware programs that are silently installed when you install the software. Sometimes (but not always), the software’s
End User License Agreement (EULA) states that “other programs may be installed.” How many people read the fine print? I must admit that I don’t always read the EULA before installing software. Maybe you should add “carefully read all license agreements” to your list of New Year’s resolutions, no matter what time of year it is now.
Peer-to-peer file sharing
Although nothing is inherently wrong with peer-to-peer file sharing, almost all its actual uses are illegal, and as the saying goes, “If you play with fire, you will get burned.” The predominant use of peer-to-peer file sharing is to share music files and other protected or copyrighted content, typically illegally, with others on the peer-to-peer network. Legal problems aside, the software for these peer-to-peer networks leaves a computer or network open to spyware in the following ways:
- The software doesn’t limit the files that might be shared to just music, so frequently what comes down the peer-to-peer pipe is spyware.
-Some peer-to-peer programs themselves have spyware bundled with them that gets installed when the peer-to-peer program is installed. The result is a pretty ugly situation. Not only does the peer-to-peer software poke several holes in your system, enabling spyware to seep in, but some software also contains vulnerabilities that allow people to retrieve any file they choose to from the peer computer. Is it any wonder, then, that many companies forbid the use of peer-to-peer sharing programs?
Spyware creators have an arsenal of tricks for extracting information from a user’s computer. Most utilize a Web browser as a coconspirator, but spyware can also sneak in when other programs are installed, as well as if a virus or worm successfully lodges itself in a user’s computer.
Hijacking cookies
A Web site can attempt to access a cookie that is associated with another Web site (in case you’re not familiar with how cookies work, one Web site is not supposed to be able to access any cookies except for those it left there earlier). For example, if you’re visiting www.scumads.com (not a real site), that site may try to retrieve your Yahoo! or Google cookie by impersonating the original Yahoo! or Google site in particular ways.
Executing programs
Running a program on your computer might be what’s needed to install certain spyware, but running a program could also be what the spyware does after it’s installed. A vulnerability in Internet Explorer can permit a Web site to download and execute a malicious ActiveX control that, in turn, can do pretty much anything it wants on a user’s computer, including run other programs or download additional programs and files to the user’s computer.
Reading the Clipboard
Another one of those supposedly friendly features of Internet Explorer is its ability for Web sites to read the contents of your Clipboard. Although I can imagine the potential usefulness of sharing the Clipboard, in my mind this also spells trouble. Who knows what could be on your Clipboard at any given time? Do you ever copy pathnames, URLs, user IDs, passwords, or paragraphs of confidential information? I can smell the potential danger, and I hope you do, too.
Accessing the hard drive
An ActiveX control on a Web page can not only access the user’s hard drive, but also read and write data on that hard drive. Combined with other vulnerabilities, scripting on a Web page can cause any data on a user’s hard drive to be moved, altered, destroyed, or copied over the Internet to any location.
Spoofing well-known Web pages
A cleverly (or, I should say, diabolically) coded Web page can impersonate a well-known Web page, including the URL in the browser’s address bar! The vulnerabilities that permit this gave rise to many successful phishing scams. (A phishing scam is typified by official-looking e-mail messages that lure unsuspecting victims to Web sites where they are asked to surrender sensitive information, such as financial institution user IDs and passwords, or perhaps credit card or bank account numbers.)
Spyware seems to be the topic of the day. Here are some important facts that you need to know about spyware removal and how to protect yourself.
Spyware and Malware can easily be installed on a system without the user's knowledge. In some cases one infection can propagate many more infections by downloading and installing malicious software stealthily in the background. It only takes one piece of software specifically designed to download and install other pieces of software to infect your system, after all, the beauty of a computer is that the only limit is the imagination.
There is no software available that can remove all spyware or malware because of the techniques that are used to release new variants and new strains of infections into the wild.
Spyware and malware infections can make pieces of your identity just a few mouse clicks away for criminals because of the ability of the software to gather and report personal information about you. Every piece of information that leaves your computer via the Internet has to use some of your bandwidth. A heavily infected system can send a significant amount of information out at any given time. This seriously limits the availability of bandwidth for legitimate uses and the user suffers a dramatic loss of maximum data transfer. In some cases, malware and spyware can turn your computer into a zombie that relays things like spam and viruses which uses even more system and bandwidth resources. Take a look at some of the major companies advertising campaigns and you will see how important it is to them that users prevent their systems from becoming infected. A surge in network traffic for an ISP can cost them MILLIONS of dollars.
Spyware and Malware take away precious system resources in your computer, making boot times longer and over all performance sluggish. This topic is self explanatory. You only have so many system resources available in your computer to complete tasks. Every time you add another piece of software (good or bad) that requires attention, you are taking away resources from legitimate computer uses.
A spy Audit survey in 2004 suggests that over 90% of computers are infected with some type of spyware! Remember, this is a piece of software that generates these statistics. If you think 90% is a lot, imagine all of the other stuff it is missing! It has been suggested that EVERY online computer has some type of spyware on it. This is particularly true when a computer is used to surf the internet and view websites. The amount of information that can be gathered from cookies alone allow companies to gain valuable information about your surfing habits.
Spyware and Malware can infect your system without your knowledge when you install certain software on your computer. Screen savers, online games, PC performance enhancers and even some spyware removal programs can "bundle" spyware and malware into their software.
Many computer users resort to "reformatting" their computer to rid their system of spyware, resulting in complete data loss and hours of valuable time lost to working on their computers. Time to reformat a system ranges from 1 to 4 hours depending on the method used. It can take up to several hours to reinstall applications, drivers and updates. There is a high risk of re-infection if not done properly, making the system worse than before. In most cases users lose ALL their data. Of course reformatting your computer will remove spyware, but that does not mean you won't get infected immediately if you reinstall your favorite free software again.
Some variants of spyware and malware can install backdoors to allow hackers complete control over a system. This often results in someone from the outside using your computer to send out spam and viruses.
Businesses and individuals can spend thousands of dollars in a year on tech support, losing hours, days and even sometimes weeks and STILL have the same problems from the start!
What is Spyware?
Two major groups of Spyware is Adware and Malware
The most of spyware is Adware. The main purpose of an adware program is to capture "anonymous" data for targeted advertising. Adware is usually just an annoyance, but sometimes it can cause greater difficulties.
The less common spyware programs is called Malware. Malware is a program that designed to cause problems with computer. Malware include viruses, Trojan horse programs, and certain forms of hijacking spyware. These types of spyware are written to get personal information such as email passwords, internet banking passwords, credit card numbers, and social security numbers for fraud. Many of spyware can change default program settings to allow an attacker access to the computer, or monitor a user's keystrokes to get information. The information is then sent off to the attacker via email without user knowledge or intervention.
It's hard to tell the share of computers that have been infected with spyware, estimates run as high as 95% computers could be infected. Children online can be especially vulnerable because they may have less technical savvy and frequently download using peer to peer software from the Internet.
Problems with spyware:
Several problems present themselves when a user has spyware on their system.
Pornographic advertising:
Spyware creates targeted advertisements can be a problem. The ads will be created from information such as websites and advertisements visited previously. If children are using the same computer, this can be a problem. If the adult user visits a pornographic site, the minor could receive targeted advertisements which contain pornographic material. Sometimes the targeting of ads can be for pornographic advertisements without anyone having visited adult sites.
Annoyance:
Spyware can be a huge annoyance to computer users. Created Pop Up ads often appear when web pages are opened or closed. This can cause hours of wasted effort because many of the Pop Ups create more popup ads as they are closed, in an ever expanding cycle.
Computer Memory and CPU Resource:
Some spyware allows the unauthorized use of computer memory and cpu resources. This includes running programs while a PC is not busy. However, increased use of a computer memory, processor and harddisk increases the wear and tear on the components, and reduces its functional lifetime. In some cases resources are used for malicious purposes, such as mailing spam or viruses to everyone in your addressbook.
Lose control of your PC:
Spyware can change browser's homepage and other settings without the user's knowledge or permission. These changes can include turning off firewall and security protection so the spyware can communicate with external resources, making them potentially dangerous.
Simple Steps for Removing Spyware from Your Computer
Restart computer in Safe Mode (with Networking)
Some computers have a progress bar that refers to the word BIOS. Others may not let you know what is happening. As soon as the BIOS loads, begin tapping the F8 key on your keyboard. Do so until the Windows Advanced Options menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. If this happens, restart the computer and try again. Using the arrow keys on the keyboard, select Safe mode (with Networking)
CWShredder
Spybot - Search & Destroy
Ad-Aware
HijackThis
