Spyware & Adware

…Or why your system may be slowing down

Note: All clicks in this presentation are left-clicks right-clicks will be defined

Contents

• Definition of Spyware & Adware

• Operation of Spyware

• How Spyware works

• Spyware observations in SCS

• Results at SCS after Spybot scan

• A Spyware and Adware Solution

• Spybot Search & Destroy Operations

• How adware works

• Ad-aware operation

• Recommendations

Definition of Spyware & Adware

• Spyware is software that transmits personal information from your computer to some place in the Internet without your knowledge.

• Adware does display banners and pop-ups, but does not transmit information to the Internet.

Operation of Spyware

• Spyware puts cookies (browser indicators), processes (running programs), and additions in your registry.

• Spyware gets into your system by sneaking in with another download (read EULA).

• Some spyware may get into your system by “Drive-by-Download” (program automatically downloaded to your computer without your knowledge or consent)

• Unfortunately, spyware is NOT illegal.

How Spyware works

• Spyware:

– Spawns pop up and pop under ads

– Latches onto the Internet Explorer browser to force the start and search pages to their "partner" sites.

– Makes advertisements on web sites where they have no arrangement with the author of the content.

– Posts advertisements that may be pornographic in nature and make no allowance for underage users who may be using the computer.

– Collects data in your computer and sends it to a site on the Internet.

Spyware observations on SCS home computer

• In taking computer calls on a number of systems here in SCS, I found:

– Systems with many pop-ups

– Browser homepages set to ad sites

– System resource less than 30% (Win 98, ME)

– System running very slow or shutting down

– Over 200 pieces of spyware with Spybot

Results on home computer after Spybot scan

• Most pop-ups were gone

• Browser (Internet Explorer) home page was set to normal home

• System Resource (Win98, ME) was near 80% at boot up, and system ran faster

• Spyware will also still steal resources from Windows XP, and Spybot should be installed and used

Spyware & Adware Solutions

• “Spybot Search & Destroy” is recommended by Kim Komando, and the website for download is:

http://www.safer-networking.org/

• “Ad-Aware” is also recommended by Kim Komando, and the website for download is: http://www.lavasoftusa.com/support/download/

• Ad-Aware will remove adware, and is free to non-commercial users

Spybot S & D Operation

• Launch by clicking on icon on desktop

• Launch AOL or other ISP for Internet connection

In Spybot:

• Click on Search for Updates

• If updates, click on Download Updates

• When updates are downloaded, click on Search & Destroy icon on left

• Click on “Check for Problems.”

• When scan is done, click on “Fix selected problems.”

• If you have Win XP or ME, Spybot will set a System Restore Point (takes time)

• Message: You are about… click OK

• Confirmation: X problems fixed

• May get message X problems could not be removed… Spybot will scan on boot

How adware Works

• Collects data and drops cookies (browser indicators) that show your interests in your system so that it can show advertising banners and popups when you surf the Internet

• Unlike spyware, adware does not send data in your computer to a site on the Internet.

Ad-Aware operation

• Click on Ad-Aware icon on desktop

• Launch AOL or other ISP for Internet connection

In Ad-aware:

• Click on Check for updates now.

• In dialog box, click on Connect button

• Click on Yes or OK, and then Finish

• Click on Start and then Next

• When scan is finished click on Next.

• You will see a list of items with check boxes to the left

• Right click on a critical item listed, and click “Select All Objects” from the tool list (this puts check marks in all check boxes)

• Click on Next.

• Click OK to remove (x) objects message

Recommendations

• Download and install Spybot Search & Destroy and Ad-Aware

• Once a week:

– Connect to the Internet and download updates

– Scan for spyware and adware, and fix

– If Windows XP, as alternative to Spybot consider Microsoft Antispyware