Spyware and Spyware and AdwareAdware

ContentsContents

What is Spyware?What is Spyware? What is Adware?What is Adware? How does Spyware and Adware work?How does Spyware and Adware work? How to detect if your computer has How to detect if your computer has

Spyware/Adware?Spyware/Adware? What programs are there to help get rid of What programs are there to help get rid of

them?them? RecommendationsRecommendations

What is Spyware and What is Spyware and Adware?Adware?

Both are Both are independent programsindependent programs that can be automatically installed that can be automatically installed when you surf the internet or when you surf the internet or when you install free software. when you install free software.

Most Most adwareadware is is spywarespyware in a in a different sense than "advertising-different sense than "advertising-supported software," for a supported software," for a different reason: it displays different reason: it displays advertisements related to what it advertisements related to what it finds from spying on you.finds from spying on you.

What is Spyware?What is Spyware?SpywareSpyware - is computer software which is installed - is computer software which is installed surreptitiouslysurreptitiously on a personal computer; it takes partial on a personal computer; it takes partial control over the user's computer, control over the user's computer, without the user's without the user's informed consentinformed consent..

Collect various types of personal informationCollect various types of personal information - such as - such as Internet surfing habits, visited sites, can also interfere Internet surfing habits, visited sites, can also interfere installing additional softwareinstalling additional software and redirecting Web browser and redirecting Web browser activity.activity.

Spyware is known to changeSpyware is known to change computer settingscomputer settings, resulting in , resulting in slow connection speeds, loss of Internet or functionality of slow connection speeds, loss of Internet or functionality of other programs.other programs.

And is a completely And is a completely LEGAL programLEGAL program.!.!

AdwareAdware or or advertising-supported softwareadvertising-supported software is any is any software package which automatically plays, displays, or software package which automatically plays, displays, or downloads advertisements to a computer after the software is downloads advertisements to a computer after the software is installed on it or while the application is being used. installed on it or while the application is being used.

Comes in the form of Comes in the form of popupspopups and unexplained and unexplained advertising programsadvertising programs on your computer. on your computer.

Also a Also a LEGAL programLEGAL program!!

Adware are created by Adware are created by advertising companiesadvertising companies..

What is Adware?What is Adware?

Advertising companies Advertising companies hope to generate money hope to generate money from customers who from customers who receive the receive the popups popups or or unexplained programsunexplained programs on on their computers.their computers.

Well-known adware programs-Well-known adware programs-

123 Messenger 123 Messenger AOL Instant Messenger AOL Instant Messenger DivX DivX Micro Antivirus Micro Antivirus RealPlayerRealPlayerZango Zango

Routes of infectionRoutes of infectionSpyware and Adware programs have a tendency to hide as Spyware and Adware programs have a tendency to hide as cookiecookie or or temporary internet filestemporary internet files..

Ways-Ways-Malicious websitesMalicious websites install spyware on readers' computers. install spyware on readers' computers.

Another way of distributing spyware involves tricking users by Another way of distributing spyware involves tricking users by manipulating security featuresmanipulating security features designed to prevent unwanted designed to prevent unwanted installations. installations.

In a few cases, aIn a few cases, a worm worm or or virusvirus has delivered a has delivered a spyware payloadspyware payload. . Some attackers used the Spybot worm to install spyware that put Some attackers used the Spybot worm to install spyware that put pornographic pop-ups on the infected system's screen. By pornographic pop-ups on the infected system's screen. By directing traffic to ads, the spyware-makers funds author of directing traffic to ads, the spyware-makers funds author of website, which profits them personally.website, which profits them personally.

Spyware can also come Spyware can also come bundledbundled with other with other downloadable downloadable softwaresoftware..

For example, “Bonzi Buddy”,For example, “Bonzi Buddy”, a program a program bundledbundled with with spyware and targeted atspyware and targeted at children, claims that:children, claims that: “ “ He will explore the Internet with you He will explore the Internet with you as your very own friend and sidekick! as your very own friend and sidekick! He can talk, walk, joke, browse, search, He can talk, walk, joke, browse, search, e-mail, and download like no other e-mail, and download like no other friend you've ever had! He even has thefriend you've ever had! He even has the ability to compare prices on the productsability to compare prices on the products you love and help you save money!you love and help you save money! Best of all, he's FREE! ”Best of all, he's FREE! ”

How to detect that your computer How to detect that your computer has spyware or adware…has spyware or adware…

Continuous Continuous popupspopups..

Persistent Persistent changechange in your in your homepagehomepage..

Slower computer processingSlower computer processing, , takes the computer longer to takes the computer longer to process or startup.process or startup.

Extreme symptoms of spyware Extreme symptoms of spyware or adware…or adware…

A spyware program is rarely A spyware program is rarely alone on a computer: an affected alone on a computer: an affected machine usually has machine usually has multiple multiple infectionsinfections..

Internet browserInternet browser does not start up. does not start up.

Parts of your computer you Parts of your computer you cannot access without cannot access without freezingfreezing..

Major core data isMajor core data is lost lost or or changedchanged..

What programs are there to What programs are there to help get rid of help get rid of spyware/adwarespyware/adware??

Out of many programs out in the internet that were Out of many programs out in the internet that were created to detect spyware/adware, four programs created to detect spyware/adware, four programs were chosen for this presentation.. They are:were chosen for this presentation.. They are:

Spybot Search and DestroySpybot Search and DestroySpysweeperSpysweeperSymantec AntiVirus Symantec AntiVirus Ad-aware 6.0Ad-aware 6.0

Spybot Search and DestroySpybot Search and Destroy

Type: Spyware Killer Type: Spyware Killer Advantages: Advantages:

Has a Has a Recovery featureRecovery feature that allows you that allows you to restore any files you may be deleted to restore any files you may be deleted infected with spywareinfected with spyware

Has an Has an Immunity featureImmunity feature that protects that protects you from already known spywaresyou from already known spywares

Disadvantages:Disadvantages: Infrequent updates cause spywares to Infrequent updates cause spywares to

slip past scans and immunityslip past scans and immunityComments:Comments:

Good program, but because of slow Good program, but because of slow updates of spyware definitions, it updates of spyware definitions, it renders the program not as usefulrenders the program not as useful

Spy SweeperSpy SweeperType: Spyware/ Adware (Free Type: Spyware/ Adware (Free Version)Version)Advantages: Advantages: Has a Has a immunity shieldimmunity shield that blocks that blocks

known spywares.known spywares.Disadvantages:Disadvantages: Takes a while to scan.Takes a while to scan. Unless you pay for the Spy-Unless you pay for the Spy-

Sweeper, it does not come with Sweeper, it does not come with definition updates.definition updates.

Comments:Comments: Effective program, only backdraw Effective program, only backdraw

is the payment you need to make is the payment you need to make yearly to keep the program yearly to keep the program updated.updated.

Norton Symantec AntiVirusNorton Symantec AntiVirusType: Virus/ Spyware/ AdwareType: Virus/ Spyware/ AdwareAdvantages: Advantages:

Can detect Can detect virusesviruses, , hacking hacking programsprograms, , spyware programsspyware programs, , adware programsadware programs, etc. , etc. Comes with a firewall.Comes with a firewall.

Disadvantages:Disadvantages:Detects very few adware/spyware Detects very few adware/spyware programsprogramsVery confusing to use.Very confusing to use.

Comments:Comments:Norton Symantec still has ways to Norton Symantec still has ways to go in detecting adware/spyware go in detecting adware/spyware programsprograms

Ad-aware 6.0Ad-aware 6.0Type: AdwareType: AdwareAdvantages: Advantages:

• EasyEasy to use scanning. to use scanning. • Detailed logs of where the Detailed logs of where the

adware and spyware programs adware and spyware programs are are hiddenhidden..

Disadvantages:Disadvantages:• Ad-aware was built was Ad-aware was built was

adware, so its ability to catch adware, so its ability to catch spyware is restrictedspyware is restricted

Comments:Comments:• Effective Program. A bit on Effective Program. A bit on

the the costlycostly side but its well side but its well worth it. worth it.

RecommendationsRecommendations

Preventing spyware and adware from getting onto your computer Preventing spyware and adware from getting onto your computer is your first step!is your first step!

Do notDo not download download unnecessary software from the unnecessary software from the internet, especially free ones because they most likely internet, especially free ones because they most likely have adware or spyware inside them. have adware or spyware inside them.

If a download screen appears, asking you to confirm If a download screen appears, asking you to confirm your download, your download, click noclick no if you are not trying to install if you are not trying to install anything.anything.

Avoid clicking Avoid clicking advertised popupsadvertised popups especially ones that especially ones that mention “free” stuff if possible.mention “free” stuff if possible.

RecommendationsRecommendations Technical RecommendationsTechnical Recommendations

Some adware/spyware files like to hide in the Some adware/spyware files like to hide in the temporary internet folderstemporary internet folders..

Disable saving of temporary filesDisable saving of temporary files by going to Program Files, Control Panel, by going to Program Files, Control Panel, Network and Internet Connections, Internet Options, Temporary Internet Network and Internet Connections, Internet Options, Temporary Internet Files Settings, Check Never under “Check for Newer Version of Stored Files Settings, Check Never under “Check for Newer Version of Stored Pages”.Pages”.Constantly Constantly delete old temporary filesdelete old temporary files and and cookiescookies by going to Program Files, by going to Program Files, Control Panel, Network and Internet Connections, Internet Options, Delete Control Panel, Network and Internet Connections, Internet Options, Delete Cookies and Delete Temporary Files.Cookies and Delete Temporary Files.

Remember though, adware and spyware can be tricky, no matter how Remember though, adware and spyware can be tricky, no matter how cautious you are, there are bound to be adware or spyware programs that cautious you are, there are bound to be adware or spyware programs that install into your computer.install into your computer.Always constantlyAlways constantly scan scan your your computercomputer for adware and spyware and keep for adware and spyware and keep your Adware/Spyware killer programs fully updated at all times. your Adware/Spyware killer programs fully updated at all times.

RecommendationsRecommendationsRecommended Spyware/ Adware Killers Recommended Spyware/ Adware Killers without any restraintswithout any restraints

Ad-aware 6.0 Professional Edition: Primary scannerAd-aware 6.0 Professional Edition: Primary scannerSpy-sweeper paid version: Primary scanner and use their immune guards.Spy-sweeper paid version: Primary scanner and use their immune guards.Spybot Free Edition: Scan for any spyware Spy-Sweeper may have missed.Spybot Free Edition: Scan for any spyware Spy-Sweeper may have missed.

Recommended Spyware/ Adware Killers Recommended Spyware/ Adware Killers with a price restraintswith a price restraintsAd-aware 6.0 Free Edition: Primary ScannerAd-aware 6.0 Free Edition: Primary ScannerSpy-Sweeper paid version: Primary ScannerSpy-Sweeper paid version: Primary ScannerSpybot Free Edition: Scan for any spyware Spy-Sweeper may have missedSpybot Free Edition: Scan for any spyware Spy-Sweeper may have missed

Recommended Spyware/ Adware Killers Recommended Spyware/ Adware Killers with a time restraintswith a time restraints (not recommended) (not recommended)Ad-aware 6.0 Free Edition: Primary Scanner: Fast Scan ModeAd-aware 6.0 Free Edition: Primary Scanner: Fast Scan ModeSpybot Free Edition Spybot Free Edition Suggestion: Spyware/ Adware killers are suppose to take time to scan, if you have Suggestion: Spyware/ Adware killers are suppose to take time to scan, if you have time restraints, turn on the scanners, leave them running and go do something. time restraints, turn on the scanners, leave them running and go do something.

ReferencesReferences

http://www.symantecstore.com/dr/sat1/http://www.symantecstore.com/dr/sat1/ec_Main.Entry?ec_Main.Entry?SP=10007&SID=27674&CID=0&DSP=0&CUR=SP=10007&SID=27674&CID=0&DSP=0&CUR=840&PGRP=0&CACHE_ID=39910840&PGRP=0&CACHE_ID=39910http://www.lavasoftusa.com/software/adaware/http://www.lavasoftusa.com/software/adaware/http://www.webroot.com/wb/products/http://www.webroot.com/wb/products/spysweeper/index.phpspysweeper/index.phphttp://www.safer-networking.org/en/index.htmlhttp://www.safer-networking.org/en/index.htmlhttp://www.wikipedia.comhttp://www.wikipedia.com

For those interesting more in this topic, here are some links:

Thank you for Thank you for watching!watching!