Number 259 - December 2004

What Spyware Does - And How to React
uploaded by Ray Mills, Tacoma Open Group, Nov 2004
   ACTION
   
  • 1 Masquerades as antispyware software. (Lavasoft's Ad-Aware is an antispyware tool, but A-daware and Ada-ware are reportedly imposters.)

  •    
  • 2 Exploits known vulnerabilities in your Internet Explorer to do a "drive-by download" when you visit a seemingly harmless website.

  •    
  • 3 Installs itself no matter where you click in the pop-up window.

  •    
  • 4 Presents an option that you should "Click No to install."

  •    
  • 5 Tells you that you need to install a program to view the current webpage.

  •    
  • 6 Hides unwanted features in the terms of the end-user license agreement (EULA).





  •    
  • 7 Appears as an e-mail attachment, perhaps from a friend.
  •    REACTION
       
  • 1 Download antispyware programs directly from an antispyware company or from a known source.



  •    
  • 2 Keep your system patched.



  •    
  • 3 Click the upper right-hand corner, or preferrably close the window in the task bar.

  •    
  • 4 Click the upper right-hand corner, or preferrably close the window in the task bar.

  •    
  • 5 Most popular "gotcha" by far. Download only known plug-ins from reputable sites.

  •    
  • 6 Read the EULA. Just kidding. Research the software before installing it to learn what other people have said about it. Resources might include:
    http://hhi.corecom.com/spyware.htm
    www3.ca.com/securityadvisor/pest/
    www.trendmicro.com/vinfo/beta/spywares/default.asp

  •    
  • 7 Come on, you know this one, right?
  •   Number 259 - December 2004