SpywareSpyware
What YOU can do about it!
ISN Presentation
Agenda
• The Problem• The Cause• The Solution• Feedback
The Problem
• List of recognizable symptoms:• Slow computer• Frequent lockups• Popup windows appear randomly• Browser’s home page changed [“hijacked”]
• Browser’s search tool has changed
The Hidden Problem
• List of hidden symptoms:• Strange programs/services in task manager• Can’t uninstall the program• Programs communicate with outside servers,
waiting for secret orders or transmitting data from you
• Keylogger can steal and email your text, account numbers, & passwords
• Kinko’s caper – burglary by modem
The Cause
• MS Windows vulnerabilities• User tricked into installing spyware:
• “Free SPYWARE removal program” http://www.spydetect.com
• User voluntarily installs a program,• Because of its benefits (game, free files…)• NOT understanding the details of the
EULA (ex Kazaa, Bonzi, Gator, Ilookup )
Spyware
• scan computer system • monitor activity • relay private information to other
computers
Adware
• Deliver advertising content• May gather information from the user,
like web sites visited
The Solution
• What YOU can do about it• Update Windows automatically!
• Avoid W32.Spybot.worm
• Educate your family!• Restrict account privileges (NO admin
rights)• Don’t connect DIRECTLY to the internet• Use alternative browsers: Firefox, Mozilla,
Opera… instead of Internet Explorer
Too Late?
• Install & update security software • Run anti Spyware tool• Update Antivirus• Install/Configure Firewall
• Enable Popup blocker (IE SP2, Firefox )• Install Spam blocker
• Bootable Knoppix CD• Runs Linux only from CD, can’t get spyware!
Additional Resources• To help you fight spyware & adware:
• Spywarewarrior.com • List of fake removal tools:
• http://www.spywarewarrior.com/rogue_anti-spyware.htm#products
• The spyware removal specialists• http://www.spywareinfo.com/
• Spyware Weekly Newsletter is distributed every week to 18,200 subscribers…
Free Software
• Ad-aware http://www.lavasoftusa.com/http://www.lavasoftusa.com/• Spybot http://spybot.info/en/index.htmlhttp://spybot.info/en/index.html • AntiSpyware (beta)
• http://www.microsoft.com/athome/security/spywhttp://www.microsoft.com/athome/security/spyware/software/default.mspxare/software/default.mspx
• Firewalls• ZoneAlarm http://www.zonelabs.comhttp://www.zonelabs.com • Kerio Personal Firewall
• http://www.kerio.com/kpf_home.html http://www.kerio.com/kpf_home.html
Commercial Software
• Webroot Spy Sweeper $30• http://www.webroot.com/http://www.webroot.com/
• Pest Patrol $30• http://www.http://www.pestpatrolpestpatrol.com.com
• Ad-Aware SE Plus $25• http://www.lavasoftusa.com/http://www.lavasoftusa.com/
• McAffee Anti Spyware $40• http://us.mcafee.comhttp://us.mcafee.com
Additional Tricks(Ad Blocking Resources)
• Restrict ALL access to Sites via Host file:• http://www.mvps.org/winhelp2002/hosts.ht
m• Restrict Internet Explorer Sites
• https://netfiles.uiuc.edu/ehowes/www/resource.https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYADhtm#IESPYAD
• http://icra.org/ http://icra.org/ • Internet Content Rating Association
Feedback
• Questions?
• Comments?
• Experiences?