What is spyware/malware?
What is spyware?
Spyware is software that is capable of performing certain operations on your
computer without your consent, such as displaying advertisements, collecting
your personal information, or changing the configuration of your computer.
Other types of unwanted software can alter to your computer with results ranging
from minor annoyances to causing your computer to slow down or crash. These
programs have the ability to change your Web browser's home page or search page,
or add additional components to your browser you may not need or want. These
programs also make it very difficult for you to change your settings back to the
way you originally had them. These types of unwanted programs are often labeled
as spyware.
What is adware?
Adware is software that displays advertisements. This does not mean that any
software that provides advertisements or tracks your on-line activities is
adware. For example, you may install a free ad-supported version of software,
and you "pay" for the service by agreeing to receive targeted advertisements. If
you understand the terms and agree to them, you may have decided that it is a
fair tradeoff. You may also have agreed to let the company track your online
activities to determine which advertisements to show you. To avoid installing
adware if you do not wish to "pay" for the service by receiving targeted
advertisements, we recommend that you carefully read the software’s Terms of Use
and End User License Agreement.
What is malware?
Malware, or malicious software, is designed specifically to damage your machine
or interrupt the normal computing environment. A trojan horse, worm or virus
could be classified as malware. Some advertising software can be malicious by
trying to re-install itself after you have removed it.
What is parasiteware?
Parasiteware is the term for any adware that by default overwrites certain
affiliate tracking links. These tracking links are used by webmasters to sell
products and to help fund websites. The controversy is centered on companies
like WhenU, eBates, and Top Moxie, popular makers of adware applications. These
companies release their software to assist users in getting credit for rebates,
cash back shopping, or contributions to funds. To the end user, parasiteware
represents little in the way of a security threat.
What is a page hijacker?
Hijacker is an application that attempts to take control of the user's homepage
and replace it with one that the hijacker chooses. It is a low security threat,
but is annoying. Most hijackers use stealth techniques or trick dialog boxes to
perform installation.
Browser hijackers commonly do one or more of the following:
Changes your "search" page and passes all searches to a pay-per-search site
Changes your default home page to the company page. Sometimes the software
changes them to a portal featuring porn sites
May transmit URLs viewed toward the company server
What is a dialer?
A dialer is a type of software used by pornographic vendors. Once dialer
software is downloaded, the user is disconnected from his/her modem's usual
Internet service provider, is connected to another phone number and is then
billed. While dialers do not spy on users they are malevolent in nature because
they can cause huge financial harm to the victim.
What is a browser plug-in?
A plug-in is a software program that extends the capabilities of your Internet
browser in a specific way. Not all browser plugging are harmful and some may be
helpful. This category contains mostly dubious browser plugging such as “Search
Assistant”, toolbars, etc. that have been known to transmit user data to their
creators or have been installed using covert means.
What is a commercial keylogger?
Commercial keylogger is a program designed to monitor user activity. It may be
used with or without consent. Since it is sold commercially, most anti-virus
vendors do not detect it.
What is a commercial network management tool?
A commercial network management tool is mostly used in (large) corporations. It
can log the network traffic passively (sniffing) or examine the logs of proxies,
etc. Nothing is installed on the individual computers, the software runs on a
central server. They can only log items that pass through the network, but not
local items such as the entered passwords, keystrokes or screenshots.
What is a data miner?
A data miner’s primary function is to gather data about an end user. Some adware
applications may employ data mining abilities.
What is a loyaltyware?
Loyaltyware is a sub-form of adware. Loyaltyware is a type of software that
works around the concept of user loyalty by providing incentives in the form of
cash, points, airline miles, or other type of goods while shopping.
What is a remote administration tool?
A remote administration tool is a tool designed to be used by network
administrators to remotely control a computer on the network, usually for
support or inventory purposes. It may be used for spying purposes.
What is a worm?
A worm is a virus-like program that spreads automatically to other computers by
distributing itself via email or other means. A worm spreads itself by attacking
other machines and copying itself to the affected machine. Both worms and
viruses are self-replicating codes that travel from machine to machine by
various means. Both worms and viruses have, as their first objective, merely
propagation. Both can be destructive, depending on what payload, if any, they
have been given. There are some differences in that worms may replace files, but
do not insert themselves into files, while viruses insert themselves into files,
but do not replace them.
How can I tell that I have spyware on my
computer?
You may have spyware installed on your computer if:
You see pop-up advertisements even when you're not on a website.
Your homepage or your browser search settings have changed without your
knowledge.
You have a new toolbar in your browser that you didn't want, and find it
difficult to get rid of.
Your computer takes longer than usual to complete certain tasks.
You experience a sudden rise in computer crashes.
How does spyware get on my computer?
There are several ways spyware or other unwanted software can intrude your
computer. A common trick is to covertly install the software during the
installation of other software you want such as a music or video file sharing
program. Whenever you are installing something on your computer, make sure you
carefully read all disclosures, including the license agreement and privacy
statement. Sometimes the inclusion of unwanted software in a given software
installation is documented, but it may appear at the end of a license agreement
or privacy statement.
What is the difference between spyware and
viruses?
The average Internet user has difficulty distinguishing viruses from spyware.
However there are slight differences. Both are malicious software, both have the
capacity to capture and destroy information, ruin performance, and disrupt
business processes.
A virus seeks to infect a computer; to replicate; and to infect as many
computers as possible, as quickly as possible. For example, an email-delivered
virus (a worm) may search your computer's file system for your Outlook address
book and send infected email messages to contacts it finds in the address book.
A virus relies on email for propagation, but tries many attack vectors such as
file sharing, telnet, FTP, IMs, or any services and programs on your computer
that communicate with other computers.
Viruses seek to spread, but spyware tries to stay put as a parasite. Spyware
disguises itself as a legitimate application or secretly resides as one more
data link library (DLL) or registry setting the average user knows nothing
about, so that it can collect information about you, your messaging, browsing
behavior and your online preferences. Spyware will embed itself deeply into
critical components of your operating system and bloat your memory with its
monitoring and collection processing executables. So where virus activities are
overt and sufficiently extensive in their impact to attract attention quickly,
spyware activities are typically covert and their infestations are often long
lasting.
Spyware will exploit your computer of anything it can use for monetary gain, for
as long as it can remain attached to the host. Spyware is content to sit on a
single computer, to monitor what the user does, as is the case with tracking
adware; or influence where the user visits, as is the case with targeting
advertisers who use browser helper objects that pop-up ads, substitute search
engines, and hijack home pages.
Viruses can be intentionally destructive and have been known to erase or corrupt
file systems or abet denial of service attacks. Spyware is more interested in
having the host remain healthy: a non-functional computer has neither
advertising value nor revenue potential to spyware. So spyware typically remains
non-destructive, unless you try to remove it. But many spyware packages are
removal resistant: you may uninstall them only to find they reappear when you
reboot your computer. Others modify many critical components of a computer
operating system and incomplete removal often renders the computer inoperable.
How to keep spyware off of my computer?
Here are few useful tips on how to avoid spyware infection:
Use anti-spyware programs such as Spyware Terminator.
Keep your anti-spyware programs current by downloading updates.
If using Microsoft's Internet Explorer, turn off its ability to run scripts
without your permission.
Prevent spyware from transmitting data off the system by using a firewall.
Do not click on links within pop-ups. By clicking on a pop-up link you may
install spyware on your computer. Close the popup with the "X" on the title bar,
do not use the "close" link, if there are any available within the window.
Do not download programs from websites you are not familiar with.
Be careful of unexpected dialog boxes asking whether you want to perform an
action. If you are not sure about the impact of the action, better click "NO" or
close the dialog box by clicking the "X" icon in the title bar.
Do not follow email links offering anti-spyware software. These links may
actually install the spyware they claim to be keeping off your system.
Is there any legal protection against
spyware?
Although the Can-Spam law that has been in effect for a year, it hasn't had
much success against unsolicited email. Legal experts and business technology
professionals remain hopeful that laws aimed at reducing adware and spyware will
fare somewhat better.
States are moving forward in crafting anti-spyware legislation. Last March, then
Utah Gov. Olene Walker signed into law the Spyware Control Act that bans the
installation of spyware without the user's consent. Earlier of this year, a
similar law went into effect in California enforcing a $1,000 penalty per
violation. As the 109th Congress recently convened Rep. Mary Bono, R-Calif.,
reintroduced her anti-spyware bill that includes civil fines up to $3 million
for violators.
Still, Michael Overly, a technology attorney with the law firm of Foley & Lardner, says that the new laws aren't entirely necessary because the federal Computer Fraud and Abuse Act already makes it illegal for unauthorized system intrusions. Other legal experts point out that Title 5 of the Federal Trade Commission Act enables the FTC to track down anyone conducting deceptive trade practices, and the Electronic Communications Privacy Act also could be used against those who send out spyware.
If you do become infected, many times the infection is so deeply routed in the clients operating system that ordinary means of removing these programs will not work and the client will be required to have a qualified technician manually remove these threats for them. If you suspect your are infected and are not sure how to go about removing such infections, stop using your computer and get it serviced as soon as possible to prevent further damage to your system and possible loss of data.