Spyware ... Part 3

Solutions

To avoid spyware issues altogether, computer users should refrain from installing any piece of software that is not absolutely necessary or seems too good to be true, such as bogus "free" music downloads, toolbars, utilities e.g. world clocks and the like. To remedy spyware problems completely (albeit temporarily), the following advice for users of Microsoft Windows may apply:

If the computer's performance has degraded to such a state that it no longer functions usefully and reliably, the user may have to consider the option of a clean install. You should note that you must have all the setup disks that came with your  PC in order to perform a clean install.. A clean install means erasing all the data from ones hard drives, formatting, and re-installing the operating system, device drivers and applications. Only then can you restore your user data, provided you had it backed-up in the first place..

Use of automatic updates (on Windows systems), antivirus, and other software upgrades will help to protect systems. Software bugs and exploits remaining in older software leave computers vulnerable, because malefactors rapidly learn how to exploit unpatched systems.

Users of Windows-related operating systems who wish to stay protected should install Windows XP SP2 along with all the latest security updates and hotfixes available via Windows Update. Microsoft-users who do not want to invest in Windows XP can secure older Windows versions (98, ME and 2K) by keeping patches up-to-date and by regularly scanning for spyware. If possible, users of Windows 95 should replace their operating system — even in a home environment — as it has stability and other concerns aside from spyware.

A number of software applications exist to help computer users search for and remove spyware programs. (See sections Spyware Removal Programs and External links below.) Some programs purge a system of spyware, only to install their own.

As some spyware takes advantage of Internet Explorer vulnerabilities, using a less vulnerable browser such as Mozilla Firefox or Opera may also help.

Disabling ActiveX in Internet Explorer will prevent some infections. However, websites that make use of ActiveX will not work in this scenario.

Currently-known spyware does not specifically target non-Windows systems, such as those running Mac OS or Linux. However, such systems can store browser cookies. Changing security settings may make installing spyware on a Linux system impossible. As such, it seems plausible that no economic incentive to create spyware for non-Windows systems may exist in the forseeable future.

An important factor in dampening the spread of spyware involves knowing, as an end-user, the actual need for new software. A rational, cold, observation will lead in many cases to the genuine conclusion that one does not need a certain piece of new software, thus preventing at once even the potentiality of a problem spreading. This difficult solution requires some thinking and some knowledge. When one wishes to install a new program (in particular one available free of charge) it makes sense to use a search engine to see if this program has a reputation for bundling spyware. Some programs,such as AOL Instant Messenger, have debatable components that one can be uncheck at the time of installing the program; it pays not to rush through the installer.

Definitive solutions to spyware issues seem unlikely, because the problems do not lend themselves to a fully rational approach. Also, governments internationally have yet to grasp the importance of spyware and to pass laws to counter its spread. The problem seems likely to grow until they do so.

Installing anti-spyware software on your PC affords you a good degree of protection against casually picking up spyware, particularly the longer established variants. However, it must be said that none of the currently available antispyware software provides complete protection against all existing spyware. Such software should be used as part of an overall strategy to minimize infection. Of the currently available free software, PC Medic is quite impressed with the current beta version of Microsoft’s AntiSpyware, though Ad-Aware and SpyBot Search and Destroy should also be considered. In terms of commercial software we recommend both Webroot’s Spy Sweeper and Aluria’s Spyware Eliminator as good choices, both of which PC Medic can supply, install and configure for you..

Be aware that there are a large number of rogue anti-spyware programs for sale, mainly on the Internet, that are at best a waste of money and at worst can make your PC worse. See the links below for details of programs to avoid.

Known spyware

The following (incomplete) list of spyware programs classifies them by their effects:

Generating pop-ups:

180 Solutions
DirectRevenue
lop.com (advertising, pop ups, security risk, tries to dial out at random)

Generating pop-ups, damaging and/or slowing computers:

Bonzi Buddy
Cydoor
Gator, made by the Claria Corporation (Advertising, pop ups, privacy violation, significant security risk, partially disables firewalls, some stability issues. Gator has a reputation as difficult to remove once installed.)
New.net (security risk, stability issues, common cause of inability to connect)
ShopAtHomeSearch

Hijacking browsers:

CoolWebSearch - a well-known browser hijacker; some variants have a reputation for damaging the TCP stack when forcibly uninstalled
Euniverse
Xupiter

Committing fraud:

XXXDial

Stealing information:

Back Orifice (arguably better categorized as a Trojan Horse, since its open source code militates against secrecy and -- unlike most spyware -- it has no commercial motive. Also has legitimate uses such as remote administration.)

Masquerading as a spyware-remover:

SpyKiller, SpyHunter, NoAdware, et al
Note, there is a large number of advertised Spy Removal programmes that are rogue. They either do not effectively remove or protect against spyware or they behave as spyware themselves. More complete lists can be found here and here.

Miscellaneous:

Internet Optimizer (Advertising, fake alert messages, possible privacy violation, security risk)
MarketScore (Claims to speed up Internet connections: serious privacy violation, loss of Internet connection on some systems)
CnsMin (Made in China; privacy violation. Preset in many Japanese PCs as JWord!)
Known programs bundling adware
Kazaa
Bearshare
DivX (except for the paid version, and the 'standard' version without the encoder)
WeatherBug
Atomic clock sync
Bonzi Buddy
Limewire (Non-pro)
Wildtangent
AOL Instant Messenger
Gator
MSN Messenger
ErrorGuard
FlashGet
Download Accelerator Pro
Grokster
Dope Wars (The game)
Flash Get (Free Version)