August 12 2004 – Spyware

Recently, someone mentioned to me that they had just inherited a new computer at work. The computer had been used previously, so they decided that they should check how safe it was to use.

This included updating Windows’ software, and the virus checker signatures, and, of course, the usual virus check. The interesting thing that they decided to do, was run a spyware check.

Spyware is defined as, software that tracks your computer usage, and other information, without you knowing about it, and transmits reports back to the originating organisation. This usually means that the organisation is gaining, in some way, from the gathering of this information.

It could be just as simple as displaying targeted advertising, based on the websites that you visit. For example, visits to car enthusiasts’ pages, will result in advertising popping up, about cars, and related technologies. It could be worse than that. The spyware could be monitoring your user names, and passwords, for your bank, eBay, or Paypal sites.

Spyware arrives on your computer in two ways. One way the spy program can be installed is by a virus, either carried by a rogue email, or from visiting a website that contains malicious code. The second way, is by installing software that claims to help make your computing experience easier, for example, the Alexa toolbar (1, 2). Hidden, in that helpful software, could be information-gathering instructions it will perform in the background.

The spyware checker they chose to run, was Spybot Search & Destroy. This software has just been given an excellent review in PC World, being cited as a “Best Buy”. They were surprised with the amount of spyware detected on the PC.

Downloading, and installing, Spybot is very easy. Once installed, it runs a wizard to help you through the initial setup stages, like backing up your Windows’ registry, and downloading any updates. Most importantly it runs an immunisation routine, which blocks all known spyware from being installed on your PC.

The next step was to read the tutorial, which explains about spyware, and how Spybot works. Once you have done that, run the program by clicking the “Search & Destroy” button, and then click “check for problems”. You may as well go and grab a cup of coffee, and a slice of banana cake, as this is going to take a while.

When complete, Spybot produces a list of the offending programs, and allows you to select which ones you want removed. You then click “fix selected”, and it is done.

You can schedule regular runs of Spybot by using the Mode function, on the menu, change from “default”, or novice mode, to “advanced” mode. Then you can click on “settings”, and choose the “schedule” option.

If you think that you are not affected by this phenomenon, think again. A recent BBC article claims, “on average every PC has 28 so-called spyware programs installed on it”. While CNET report that “one in three machines” are affected.