SPYWARE INFORMATION Courtesy of GetNetWise.org
(Printer friendly version)
Below are just a few symptoms that may reveal that you have spyware
operating on your computer.
- Sluggish computer: If
you've noticed that your PC has had a serious drop in its responsiveness
lately, it could mean that spyware is draining its computing power.
- New "favorites":
spyware will often add "favorites" of its own to your browser's
favorites' folder. If you notice an unusual number of new favorites and
are not sure how they got there, spyware may be to blame.
- Fishy pop-up ads:
Pop-up ads from spyware software are designed to look like they've been
served up by the legitimate Web site you're visiting. As a result, you may
not recognize them as a symptom of infection. There's no way to be sure,
but if the contents of the ads seem strange -- or if you're getting pop-up
ads when you're not even surfing the Internet -- it's very likely that
they are being served up by spyware software.
- Change of your default
home page: One of the oldest spyware tricks is to automatically change
your Web browser's default or start-up home page. This is the Web page
that appears when you start your browser or click the "home"
button.
- Unauthorized 1-900 number
charges: If your phone bill charges you for 1-900 phone calls you
didn't make, you may have fallen victim to a particularly devious form of
spyware. These programs will hang-up your normal Internet connection and
instruct your computer to dial a 1-900 number -- silently.
Examples of Devious Spyware
How does spyware get on my computer in the first place?
- Example: A computer
user sees an Internet advertisement for SomeProgram.
She clicks on the ad and is sent to a page that pops up a window asking if
she wants to download SomeProgram. The user
clicks "no," but SomeProgram is
surreptitiously downloaded and installed anyway.
- Example: In this case,
a computer user sees an ad for AnotherProgram,
and clicks on it. She is sent to a page that immediately pops up a window
asking if she wants to download AnotherProgram.
The user clicks "no." An identical window pops up as soon as she
declines, however, and repeats until the user gets frustrated and clicks
"yes."
What are some examples of the worst spyware functions?
- Example: In this
common case, a computer user goes to a Web page, www.acompany.com. The
page then opens another page running a java script. When the user closes
www.acompany.com, the java script remains and covertly resets the user's
home page. The java script is written such that any time the user attempts
to reset his home page, the program automatically resets it again so the
user cannot reset his home page to what it was before the hijacking took
place.
- Example: Here, a
computer user downloads a software package, Footloose 3.1,
that will allow her to share files over the Internet using a
peer-to-peer sharing site. Among the programs in the software package is a
hidden dialer application, GreatCharges.exe, that was not mentioned in any
advertisements, software licenses, or consumer notices associated with the
package. The dialer application is not an integral part of the
file-sharing software package, but is included anyway. (This tactic is
sometimes referred to as bundling.) When the user opens her Web browser
after installation of software package, the dialer opens in a hidden
window, turns off the sound of the user's computer, and calls a phone
number without her permission. The charges for the calls made by the
hidden dialer appear on the user's phone bill at the end of the month.
Why can't I get rid of the spyware once I've found it?
- Example: In this
example, a computer user has downloaded "New Game: Return to
Hades" from the Internet, but now wants to remove the game program
from the computer because he fears it might be spyware. "New
Game" does not have an uninstall program or instructions and does not
show up in the standard feature in the user's operating system that
removes unwanted programs (assuming this
feature exists in the operating system). The user's attempts to
otherwise delete it are met by confusing prompts from "New Game"
with misrepresentative statements that deleting the program will make all
future operations unstable.
- Example: Here, a
computer user has downloaded Program 2.0. He thought it would be a helpful
program, but it has turned out to be spyware. Now he wants to remove
Program 2.0 from the computer. Program 2.0 appears in the standard feature
in the user's operating system that removes unwanted programs, but when he
utilizes the "remove" option, a component of Program 2.0 remains
behind. The next time the user connects to the Internet,
this component re-downloads the remainder of Program 2.0 and reinstalls
it.
Spyware Prevention
Prevention is the key to protecting yourself from spyware. If you have
recently cleaned your computer of unwanted spyware, review the tips below to
keep it that way. While these tips will help you prevent spyware, they are also
examples of good habits that will help protect your privacy and security while
online.
- Read any popup window VERY carefully,
and close it properly if it looks suspicious. If a suspicious window
or advertisement pops up on your screen that you suspect could be an
attempt to fool you into installing a spyware program, click the “X” in
the upper right corner of the window to close it instead of clicking on
the “No” or “Decline” button (often these buttons will only open another
window in an attempt to annoy you into accepting the product, or the
“Decline” button may actually be the “Accept” button in disguise). If you
still can’t close the window, or others pop up to replace it, then shut
down the computer and restart it.
- Be skeptical about
installing strange or free software: Make sure you know what EXACTLY
is being installed onto your computer when you download applications off
the Internet. Use the custom install option -- if offered -- to see the
programs that will be placed on your computer with the downloaded
application. spyware is often bundled with many
free software downloads. Make sure you know what's in a package of
software before you install it. Many of the file sharing or peer-to-peer
music sharing programs include spyware in the installation package.
- Pay
attention to security warnings: "Security Warning" screens
alert users to new software being installed from Web pages they visit.
This software can include ActiveX controls and other executable files. You
should not blindly accept such "Active-X" software
installations; and be sure you trust the company installing the software.
Here is a sample of a "Security Warning" screen that seeks a
user’s permission to install the software:

Just because the company's "identity" is verified, it does not
mean that you should blindly trust content from them. Carefully read the
license agreement or privacy disclosure if one is provided (clicking on
the software name may cause these to be displayed). Often these documents
will tell you what the software will do when it executes, such as sharing
your personal data with a third party or displaying targeted
advertisements. If you are uncomfortable with what the software might do
or you are unsure about the company, you should decline the installation.
Also, make sure the "Security Warning" screen links to an end
user license agreement or other description of what you're getting. Please notice that our sample
"Security Warning" screen does not have
one.
- Read the end user
licensing agreement: Almost all legitimate software installations will
include an end user licensing agreement (EULA) that includes a lot of
information. You should make a habit of reading these EULAs.
Ideally, they should tell you exactly what they intend to install on your
machine and the limitations to your use of the software. If the EULA is
hard to find, or if the documentation is unreasonably difficult to read
and understand, then you should think twice before agreeing to install the
software.
- Practice
basic computer security hygiene: As a general matter, there are some
basic security precautions you should take to protect your computer from
hackers, thieves and cyber-terrorists. Following the three security tips
below will help prevent all manner of programs from infecting your
computer:
- Always use
anti-virus software: And keep the software up to date. Over 500 new
viruses are discovered each month. You are not just protecting yourself
when using virus software, but also others you communicate with.
- Always use a
firewall: A firewall is an "internal lock" for information
on your computer. Many newer computer operating systems (like Windows XP)
already have firewalls installed, you just have
to turn them on. There are many other firewalls available to download or purchase that help you secure your computer.
- Keep your Windows
operating system up to date: You should always make sure that the
Windows operating system on your computer is up to date with the latest
security patches. Use the “Windows Update” shortcut in your programs menu
to install the latest updates (NOTE: If you suspect your system is
already infected with spyware, it is NOT recommended that you install any
security updates - you should have the system cleaned first).
- Read the Web site privacy
policy: Although sometimes very lengthy, the privacy policy describes
what information the business collects about you and how it is used. Learn
more about reading a privacy policy.
- Use Tools to Remove
spyware: Learn about tools that can remove spyware if you think it may
have been installed on your computer.
Home