|
A client called, saying they couldn’t log on to their computer. When
they dropped the machine off, I verified their claims. I logged in as the
primary user and was denied access to the system. It froze at the logon
screen. I rebooted and tried to use Safe Mode, pressing F8 during the boot
process. This worked.
I first thought they had a virus. I loaded the latest definitions from
Symantec and performed a full system scan. No viruses found.
I ran Scan Disk to check for corrupt files. I repaired minor problems
and rebooted. Again, the system locked on the Welcome screen.
I checked for necessary Windows Updates—all were installed.
The only account I could consistently logon with was the Administrator
account.
I decided to research the Internet to determine if this problem was
common, thinking it might be the result of a misapplied patch. What I found
amazed me. There's software out called Spyware and it’s evil!
What is Spyware?
Spyware is software that collects personal information about you. This
information can include Web sites you visit, your usernames and passwords,
and any other sensitive information you may store on your computer. It
does this in the background, without your knowledge or asking permission,
and can transmit this information to the source of the Spyware.
These programs can do many things. They might take over your default
Home page or your browser’s Search feature, bringing you to Web sites that
you don’t recognize. They’re also associated with adware, software that
displays advertisements. Such advertisements come in pop-ups, which quickly
clutter your desktop and affect your ability to do work. The advertisements
often contain pornographic or otherwise inappropriate material. All these
pop-ups can tax your computer’s resources, causing your system to become
unexpectedly sluggish.
Where does it come from?
Spyware comes from a variety of places. A common method of distribution
is to install the Spyware during the installation of other software you
want (i.e., file sharing programs like KaZaA or LimeWire). If your browser
security settings are at the lowest values, Spyware can be installed while
you surf the Internet. Some authors of Spyware trick you into loading their
software by repeatedly asking you to accept a download. The “offer” returns,
even after you click “NO,” so you click “YES” to get out of the window.
|
NOTE: |
Don’t click “YES”--try to close the Web page by clicking
the "X" in the corner. Otherwise, close your browser entirely.
|
When installing software, read the license agreement. Some distributors
of adware include a disclosure of what they install inside this agreement.
How can I protect myself against Spyware?
The first thing you can do is to adjust your browser's security settings.
The higher you set security, the lower your risk. By default, Internet
Explorer (IE) attempts to provide a balance by assigning medium security
to all Web sites. This means IE will ask you before downloading a file.
If you change to low, Web sites can download software without you knowing.
|
NOTE: |
If you change security to low, change back to medium or
higher as soon as possible.
|
Second, do NOT download software from unknown sources. Install only
from sites you trust. As mentioned earlier, always read message prompts
and understand what you’re agreeing to. Be careful when using P2P (peer-to-peer)
file sharing programs. Some individuals post bogus software on these services,
naming their program in a way to mislead users and cause you to install
software that you didn’t intend to.
Third, check your system to see if it’s already hosting known Spyware.
Several companies offer FREE software to check your system. Once this software
is installed, keep its definitions up-to-date (just like you would for
anti-virus software). The two most common programs available are Lavasoft’s
AdAware and Spybot Search & Destroy.
|
NOTE: |
Do not be misled by companies using similar names to the
programs above. Some charge a fee to use their software. The programs mentioned
above scan your system and remove Spyware and they are both 100% free.
|
What do I do if I find Spyware on my computer?
With so many different forms of Spyware making its way onto the Internet,
there is no one set of steps to follow to remove Spyware once it has a
grip on your system. Your first step is to employ the anti-Spyware packages
listed above. From there, you may need to find a clean machine somewhere
and conduct some Internet research for any symptoms your system may be
displaying. Some Spyware we’ve encountered recently required manual modifications
to the system registry, stopping and deleting services, and several other
fairly complicated steps. Some Spyware has the ability to repair and replicate
itself after you’ve already attempted to clean it off the computer. One
system we cleaned was so infected that the most efficient and cost effective
solution was to backup the data and reformat the entire system.
So, the best defense is a good offense. Start with a clean system and
take steps to secure it BEFORE you place it on the Internet. The time (and
computer) you save will be your own!
|