HOME Calendar Join / Renew PC Alamode About Us HELP Sponsors
Reviews Columns Features Theme Issues   Archives Other  


PowerTalk

Beware of Spyware!
September 2004

Shane Hicks is an independent consultant and technical trainer, providing support to individuals and small businesses. He's been in the industry for over 10 years.

Email your questions, it will be answered as space permits.


A client called, saying they couldn’t log on to their computer. When they dropped the machine off, I verified their claims. I logged in as the primary user and was denied access to the system. It froze at the logon screen. I rebooted and tried to use Safe Mode, pressing F8 during the boot process. This worked.

I first thought they had a virus. I loaded the latest definitions from Symantec and performed a full system scan. No viruses found.

I ran Scan Disk to check for corrupt files. I repaired minor problems and rebooted. Again, the system locked on the Welcome screen.

I checked for necessary Windows Updates—all were installed.

The only account I could consistently logon with was the Administrator account.

I decided to research the Internet to determine if this problem was common, thinking it might be the result of a misapplied patch. What I found amazed me. There's software out called Spyware and it’s evil!

What is Spyware?
Spyware is software that collects personal information about you. This information can include Web sites you visit, your usernames and passwords, and any other sensitive information you may store on your computer. It does this in the background, without your knowledge or asking permission, and can transmit this information to the source of the Spyware.

These programs can do many things. They might take over your default Home page or your browser’s Search feature, bringing you to Web sites that you don’t recognize. They’re also associated with adware, software that displays advertisements. Such advertisements come in pop-ups, which quickly clutter your desktop and affect your ability to do work. The advertisements often contain pornographic or otherwise inappropriate material. All these pop-ups can tax your computer’s resources, causing your system to become unexpectedly sluggish.

Where does it come from?
Spyware comes from a variety of places. A common method of distribution is to install the Spyware during the installation of other software you want (i.e., file sharing programs like KaZaA or LimeWire). If your browser security settings are at the lowest values, Spyware can be installed while you surf the Internet. Some authors of Spyware trick you into loading their software by repeatedly asking you to accept a download. The “offer” returns, even after you click “NO,” so you click “YES” to get out of the window.

NOTE:  Don’t click “YES”--try to close the Web page by clicking the "X" in the corner. Otherwise, close your browser entirely.

When installing software, read the license agreement. Some distributors of adware include a disclosure of what they install inside this agreement.

How can I protect myself against Spyware?
The first thing you can do is to adjust your browser's security settings. The higher you set security, the lower your risk. By default, Internet Explorer (IE) attempts to provide a balance by assigning medium security to all Web sites. This means IE will ask you before downloading a file. If you change to low, Web sites can download software without you knowing.

NOTE:  If you change security to low, change back to medium or higher as soon as possible.

Second, do NOT download software from unknown sources. Install only from sites you trust. As mentioned earlier, always read message prompts and understand what you’re agreeing to. Be careful when using P2P (peer-to-peer) file sharing programs. Some individuals post bogus software on these services, naming their program in a way to mislead users and cause you to install software that you didn’t intend to.

Third, check your system to see if it’s already hosting known Spyware. Several companies offer FREE software to check your system. Once this software is installed, keep its definitions up-to-date (just like you would for anti-virus software). The two most common programs available are Lavasoft’s AdAware and Spybot Search & Destroy.

NOTE:  Do not be misled by companies using similar names to the programs above. Some charge a fee to use their software. The programs mentioned above scan your system and remove Spyware and they are both 100% free.

What do I do if I find Spyware on my computer?
With so many different forms of Spyware making its way onto the Internet, there is no one set of steps to follow to remove Spyware once it has a grip on your system. Your first step is to employ the anti-Spyware packages listed above. From there, you may need to find a clean machine somewhere and conduct some Internet research for any symptoms your system may be displaying. Some Spyware we’ve encountered recently required manual modifications to the system registry, stopping and deleting services, and several other fairly complicated steps. Some Spyware has the ability to repair and replicate itself after you’ve already attempted to clean it off the computer. One system we cleaned was so infected that the most efficient and cost effective solution was to backup the data and reformat the entire system.

So, the best defense is a good offense. Start with a clean system and take steps to secure it BEFORE you place it on the Internet. The time (and computer) you save will be your own!


Copyright© 1996-2008
Alamo PC Organization, Inc.
San Antonio, TX USA