How to deal with spyware
What is Spyware
Spyware, or malware, is a type of software that is becoming more prevalent as Internet usage increases. It is generally categorised as software that monitors for user information that can be sent back to a central resource or to third parties without your knowledge. This can include web browsing habits, key presses or stored information; potentially anything that you enter into, or view, on your computer.
Spyware is generally installed without your explicit consent, or may be included with an apparently normal application, automatically downloaded from a website or passed as an email attachment. Adware is spread in a similar manner but differs in its behaviour; it can pop-up windows displaying adverts, while visiting websites, or can intercept user input to redirect, or display, other content on the computer.
In the same way that virus, worm and trojan are generalised as viruses; the terms have become almost interchangeable and, while they retain separate definitions, in this document they will be collectively referred to as 'spyware'.
Examples of spyware
A common example of spyware is "Gator". It can be downloaded easily from many popular web sites. It tracks the sites that users visit, and forwards that data back to the companies servers. The Gator company then sells this information to advertisers who can purchase the opportunity to make ads pop up at certain moments, such as when specific words appear on a screen. It also lets companies launch a pop-up ad when users visit a competitor's web site. The information collected cannot be limited by you. Some popular programs from Gator include "WebShots Desktop", "Gator eWallet", "OfferCompanion", "PrecisionTime" and "DateManager".
"TopText" is another common spyware program. It 'hijacks' certain key words and phrases that have been purchased by advertisers; for example "car" or "MP3". Users who have TopText on their computers see these words highlighted in yellow, no matter what web site they're visiting. Clicking on these highlighted words sends them to the page of the company who paid for the click-through on that specific keyword.
Detecting spyware
Spyware, adware and other associated programs can be detected in much the same way as viruses. Even if you have not seen any evidence of your computer being infected that is not a guarantee that something is not collecting data invisibly.
Just as we recommend installing, and keeping up to date, an anti-virus program such as Sophos, it is also advisable to have an anti-spyware program on your computer. This can be used to clean a previously infected PC and also to introduce preventative measures against re-infection.
Some of the most popular anti-spyware applications are used in the same way as anti-virus programs; periodically updating identification definitions, running scheduled scans and identifying possible attempts to run malicious software.
Examples of anti-spyware applications include:
Microsoft Windows Defender - is a free program that helps protect your computer against pop-ups, slow performance, and security threats caused by SpyWare and other unwanted software. It features Real-Time Protection.
Ad-aware - Free for personal use at home, i.e. cannot be used on work PCs.
Spybot - Free for personal use at home, i.e. cannot be used on work PCs. Can preventatively immunize against future infection.
The main Spybot window has quick access buttons for the most common functions - Check for Problems, Fix problems, Update and Immunize.
Update will connect to the Internet to download the latest definitions. Immunize will protect Windows from future infections by preventing spyware from making changes to your system.
Any changes that Spybot makes to your computer can be reversed by clicking selecting Recovery
When Spybot is up to date you can simply click on 'Check for problems' and it will start to scan the computer for any spyware infections. Once the scan has completed a list of potential infections will be displayed in the 'Problem' box. More information is available on each problem by selecting the arrowed scroll bar on the right hand side. To fix any problems you can make sure that there is a tick next to the item on the left hand side and then select 'Fix selected problems' from the toolbar.
Best practice for avoiding spyware
As with virus prevention it is advisable to avoid installing anything from web sites or email attachments unless you are absolutely sure that they are legitimate and from a trustworthy source. Spyware is often disguised as 'helpful' programs, for example Internet Explorer Search toolbars, to encourage you to use them.
Avoid opening files obtained from file sharing programs, warez and porn sites unless you are sure that they are actually what they purport to be; some programs are very well disguised and may even be functionally the same, but may still contain unwanted content - try to obtain software directly from the producer or trusted resources.
When in doubt say 'No' to pop-up prompts from web pages and, if you need more guidance, contact the Computer Services Help Desk for advice.
Unfortunately some malicious software does not prompt you for permission to install, or is installed invisibly with an application that you may actually want. So it is imperative to keep your applications, and Windows, up to date to maximize your protection.
Consider using alternative web browser and email clients rather than Internet Explorer and Outlook. Mozilla Firefox and Thunderbird are free, open source, applications that may be less susceptible to spyware infection or transmission and will help to protect you from visual (phishing) deceptions, such as websites pretending to be renowned sites, e.g. eBay, to obtain personal or financial information.