Is "Spyware" Watching You?
Jim Edwards
Imagine my surprise when I received a phone call from a friend who told me he'd been the victim of a "spyware" attack that left him shaking at his loss of privacy.
I listened to his horror story with a sympathetic ear, but I felt secure since I carry anti-virus software and a firewall (both by Norton).
At his suggestion - and to my surprise - I ran a program called "Spy Sweeper" and found a veritable minefield of dangerous and harmful programs lurking on my computer.
"Spyware" is software that gets onto your computer and literally "spies" on your activities.
The spying can range from relatively harmless use of cookies tracking you across multiple websites... to extremely dangerous "keystroke loggers" which record passwords, credit cards, and other personal data. That data then gets relayed to the person who put the software on your computer.
Three primary types of spyware exist to complicate your online life, including:
1. "cookies" 2. "adware" 3. malicious programs like "keystroke loggers"
Cookies represent mostly a danger of lost privacy.
In theory, someone could use a "cookie" to track you across multiple sites, combine that data with several databases, and figure out a lot more information about you than would make you comfortable.
"Adware" tracks more than just your movement across sites, it spies on your installed software and computer habits to then serve up advertising, modify websites before you see them, and generally do things without your knowledge with the intention of trying to get you to buy things.
"Keystroke loggers" and other malicious programs exist for one purpose: to cause personal mayhem and financial damage.
Spyware gets on your computer in one of several different ways.
First, it rides along with software you download from the 'Net and install on your system.
Second, they come as email attachments (much like viruses) and automatically install themselves on your computer when you open the email message.
Third, hackers find an open port on your computer and use the "back door" to install basically anything they want.
And fourth, the more malicious types, like keystroke loggers, can even get installed by someone with direct physical access to your computer such as an employer, suspicious spouse, business competitor, or someone who wants to know exactly what you're doing.
Now, suppose you carry an up-to-date anti-virus program and a firewall - shouldn't that represent potent protection?
In a word: NO!
I can personally attest that even the most up-to-date anti- virus programs and firewalls will not (repeat, WILL NOT) catch all the spyware that can infest your computer.
You need a program that specifically scans your system for the tens-of-thousands of existing spyware programs along with the new ones appearing daily.
Check out "Spy Sweeper" from webroot.com - this is the program I used to discover the spyware on my computer.
One thing I noticed, however, is that this program is a memory hog, so once I scanned, I turned it off and then use it 2-3 times a week... not the best strategy, but I want to give you the "whole" picture.
I also got the following recommendations from numerous subscribers about 2 programs to specifically help identify and remove spyware from your system (PC):
1. "Ad Aware" from lavasoft.de 2. "Spybot Search & Destroy" from safer-networking.org
The overwhelmingly recommended firewall suggested by readers was Zone Alarm Pro from Zone Labs => http://www.ebookfire.com/zonealarm.html
The bottom line seems pretty simple (but lengthy) if you want to protect yourself against this growing threat.
~ Keep your anti-virus program current ~ Install a firewall ~ Carefully screen software before installing it ~ Scan for specifically for spyware weekly ~ Stay current on this growing threat.
About the author: Jim Edwards is a syndicated newspaper columnist (http://www.TheNetReporter.com) and is the author of several best-selling ebooks, information products and software programs.
The latest information and news on Spywaredude:
In what appears to be just a bad headline, the business publication says that Microsoft plans to introduce spyware. (It's actually planning free antivirus software)
Court Slams Door On Sale of Spyware (Slashdot)
coondoggie writes "The Federal Trade Commission yesterday had a US District Court issue a temporary restraining order halting the sale of RemoteSpy keylogger spyware. According to the FTC's complaint, RemoteSpy spyware was sold to clients who would then secretly monitor unsuspecting consumers' computers. The defendants provided RemoteSpy clients with detailed instructions explaining how to ...
WOT Releases Extended Protection for Web-Based Email Users (PRWeb)
WOT, Web of Trust, extends the security protection of its popular browser add-on to the top three Internet-based email services -- Google Gmail, Windows Live Hotmail and Yahoo! Mail. WOT checks links embedded in email and warns users of dangerous websites to help them avoid spyware, spam, phishing, identity theft and other Internet fraud, before they risk clicking. (PRWeb Nov 21, 2008) Read ...
WOT Releases Extended Protection for Web-Based Email Users (PRWeb via Yahoo! ...
WOT, Web of Trust, extends the security protection of its popular browser add-on to the top three Internet-based email services -- Google Gmail, Windows Live Hotmail and Yahoo! Mail. WOT checks links embedded in email and warns users of dangerous websites to help them avoid spyware, spam, phishing, identity theft and other Internet fraud, before they risk clicking.
Phisher-besieged PayPal sends users faux log-in page (The Register)
Error.com's missed opportunity PayPal, the online payment service that is a major target of phishers, has been caught sending customer emails that confuse its own login page with a third-party landing site that offers spyware protection and a bevy of other products.?
FTC get CyberSpy?s RemoteSpy banned in the U.S. (Geek.com)
The Federal Trade Commission (FTC) has been successful in its bid to get the RemoteSpy spyware application released by CyberSpy Software banned in the U.S. For now the ban is temporary, but the FTC are pushing to make it permanent. The ban stems from a complaint (PDF) lodged by the Electronic Privacy Information Center (EPIC) back [...]
Microsoft to offer free anti-virus software (The Manila Times)
Microsoft has announced plans to offer free anti-virus software to PC users starting next year. The Redmond, Washington-based software giant said the software, code-named "Morro," will "provide comprehensive protection from malware including viruses, spyware, rootkits and trojans."
Commercial vendor of spyware under legal fire (ZDNet)
Just like every decent marketer out there, vendors of commercial malware tools are very good at positioning their tools. However, their pitches often contradict with themselves in a way that what's promoted as a Remote Administration Tool, has in fact built-in antivirus software evading capabilities, rootkit functionality and tutorials on...
Microsoft Will Replace OneCare with Security Software (NewsFactor via Yahoo! ...
Microsoft plans to stop accepting paid subscriptions to Windows Live OneCare in mid-2009. The security software is slated to be replaced by a free offering code-named Morro, which will focus on providing consumer PCs with core protection from viruses, spyware, rootkits, trojans and other forms of malware.
Week in review: Yahoo to replace Yang (CNET)
Search giant searches for new CEO, while Microsoft takes its security strategy in a new direction. Also: Sing along with DRM.