Spyware, adware, malware, tracking cookies
What is spyware and adware?
To explain what spyware is, we'll first explain what adware is. Adware is 'freeware', whereby ads are embedded in the program. These ads will show up when you open the program. Most adware authors provide the free version with ads and a registered version whereby the ads are disabled. As such, you the user have the choice, you either use the freeware with ads served or you purchase the registered version.
Spyware, however, is published as 'freeware' or as 'adware', but the fact that an analysis and tracking program (which reports your activities to the advertising providers' web site for storage and analysis, the 'spyware' agent) is also installed on your system when you install this so-called 'freeware', is usually not mentioned. Even though the name may indicate so, spyware is not an illegal type of software in any way. But what the adware and spyware providers do with the collected information and what they're going to 'feed' you with, is beyond your control. And in some cases it all happens without your consent!
Hardware spyware
Syware can even be found accompanying hardware you buy and install in your system. Yes, the software you install with hardware purchased from certain manufacturers (some even well-known) may include spyware agents.
Spyware categories
- Adware networks
The backbone for big time spyware are ad serving networks that pay publishers of games, utilities and music/video players per download, to include their ad serving programs.
- Stalking horses
A number of programs that enable the adware networks to function on desktops are bundled in many popular programs and often (not always!) presented in installation disclosure screens as desirable add-ons to their Trojan horse hosts. All collect information.
- Trojan horses
These popular Internet downloads usually come with the ad serving network basic software and at least one stalking horse.
- Backdoor Santas
Stand-alone programs that incorporate similar approaches have no links to ad serving networks and collect information from users.
- Cookies
Netscape Navigator, Internet Explorer, Opera, FireFox, Mozilla all still send out existing cookies even after disabling cookies in the browser settings. You must manually delete any/all cookie files on your system to eliminate being tracked by third-party ad networks or spyware or adware providers.
Spyware threats
Spyware threats come in different flavors. The spyware agent can be malware (modifies system settings, and can perform undesirable tasks on your system), hijacker (redirects your browser to web sites), dialer (dials a service, most likely porn sites, for which you are billed!), trojan horse (is attached to a program, and performs undesirable tasks on your system), collectware (collects information about you and your surfing habits).
In addition to doing a detailed check of your browser history, spyware can install DLLs and other executables files, send continuous data to the parent, leave a backdoor open for hackers to intercept your personal data or enter your computer, can install other programs directly on to your computer without your knowledge, can send/receive cookies to other spyware programs and invite them into your computer (even if you have cookies disabled), and they can add Trojan horses to your system. Most spyware and adware programs are independent executable files which take on the authorization abilities of the victim. They include auto install and auto update capabilities and can report on any attempts to remove or modify them.
Spyware programs can reset your auto signature, disable or bypass your uninstall features, monitor your keystrokes, scan files on your drive, access your applications, change homepages in addition to displaying advertising content online or offline. They can read, write and delete files and even reformat your hard drive and they do this while sending a steady stream of information back to the advertising and marketing companies. The majority of these programs once installed can not easily be deleted from your system by normal methods and often leave components behind to continue to monitor your behavior and reinstall themselves.
In addition to being included with software products some spyware programs can get installed on your computer while you surf the Internet!
Lists of known or suspected spyware are available from the following sources:
- Spy Chaser lists known spyware programs and lets you enter a program name to see if it's on this list before you install them.
- PC PitStop offers a filename database on its web site.
Cleaning
If you are cleaning your system manually, using some of the tips mentioned above, you do this at your own risk. Editing the Registry without some basic knowledge may result in your computer not starting up anymore. And reinstalling Windows may be the only way back. So here is the list with some helpful programs (try them first): Spyware cleaners.
Spyware resources
Security & Privacy related links
- Advisory Committee on Online Privacy and Security
- Castlecops.com
- Kidz Privacy
- The Privacy Foundation
- Privacy International
- Privacy Journal
- Privacy Council
- Privacy Page
Spyware forums & newsgroups
for discussions about the removal of spyware from your system.
- Cexx.org discussion board
- Net-Integration
- Spyware discussion thread
- SpywareInfo forum
- Spyware Warrior forums
- alt.privacy.spyware
- Deja Usenet discussions about spyware
Possible actions
You may want to take action! The Federal Trade Commission (FTC) handles complaints about deceptive or unfair business practices. To file a complaint, go to the FTC web site, call 1-877-FTC-HELP, or write to: Federal Trade Commission, CRC-240, Washington, D.C. 20580. Several senators have been trying to get several new privacy laws passed. These laws will not get passed unless the American public strongly supports these legislations. Complain to your congressman! Find and contact your Congressman: http://www.house.gov/writerep/.
Currently the FTC has stricter regulations for deceptive advertising than they do for privacy issues. Where an advertisement must be fully qualified as to claims of what a product can and cannot do, the FTC only "encourages" a business to have a privacy policy and there are no regulations as to qualifying what information can be gathered or what its purpose or use will be. Only recently have they begun to address the issue of privacy statements. Businesses are not regulated as to what information they can or can not gather nor what they do with the information. Information about consumers are considered assets that can be sold, transferred or acquired at will. If your complaint is against a company outside the US, file your complaint at http://www.econsumer.gov/.
SPYWARE NEWS
- California has passed anti-spyware legislation
- Washington state has passed an anti-spyware bill