SpywareSpyware

What YOU can do about it!

ISN Presentation

Agenda

• The Problem• The Cause• The Solution• Feedback

The Problem

• List of recognizable symptoms:• Slow computer• Frequent lockups• Popup windows appear randomly• Browser’s home page changed [“hijacked”]

• Browser’s search tool has changed

The Hidden Problem

• List of hidden symptoms:• Strange programs/services in task manager• Can’t uninstall the program• Programs communicate with outside servers,

waiting for secret orders or transmitting data from you

• Keylogger can steal and email your text, account numbers, & passwords

• Kinko’s caper – burglary by modem

The Cause

• MS Windows vulnerabilities• User tricked into installing spyware:

• “Free SPYWARE removal program” http://www.spydetect.com

• User voluntarily installs a program,• Because of its benefits (game, free files…)• NOT understanding the details of the

EULA (ex Kazaa, Bonzi, Gator, Ilookup )

Spyware

• scan computer system • monitor activity • relay private information to other

computers

Adware

• Deliver advertising content• May gather information from the user,

like web sites visited

The Solution

• What YOU can do about it• Update Windows automatically!

• Avoid W32.Spybot.worm

• Educate your family!• Restrict account privileges (NO admin

rights)• Don’t connect DIRECTLY to the internet• Use alternative browsers: Firefox, Mozilla,

Opera… instead of Internet Explorer

Too Late?

• Install & update security software • Run anti Spyware tool• Update Antivirus• Install/Configure Firewall

• Enable Popup blocker (IE SP2, Firefox )• Install Spam blocker

• Bootable Knoppix CD• Runs Linux only from CD, can’t get spyware!

Additional Resources• To help you fight spyware & adware:

• Spywarewarrior.com • List of fake removal tools:

• http://www.spywarewarrior.com/rogue_anti-spyware.htm#products

• The spyware removal specialists• http://www.spywareinfo.com/

• Spyware Weekly Newsletter is distributed every week to 18,200 subscribers…

Free Software

• Ad-aware http://www.lavasoftusa.com/http://www.lavasoftusa.com/• Spybot http://spybot.info/en/index.htmlhttp://spybot.info/en/index.html • AntiSpyware (beta)

• http://www.microsoft.com/athome/security/spywhttp://www.microsoft.com/athome/security/spyware/software/default.mspxare/software/default.mspx

• Firewalls• ZoneAlarm http://www.zonelabs.comhttp://www.zonelabs.com • Kerio Personal Firewall

• http://www.kerio.com/kpf_home.html http://www.kerio.com/kpf_home.html

Commercial Software

• Webroot Spy Sweeper $30• http://www.webroot.com/http://www.webroot.com/

• Pest Patrol $30• http://www.http://www.pestpatrolpestpatrol.com.com

• Ad-Aware SE Plus $25• http://www.lavasoftusa.com/http://www.lavasoftusa.com/

• McAffee Anti Spyware $40• http://us.mcafee.comhttp://us.mcafee.com

Additional Tricks(Ad Blocking Resources)

• Restrict ALL access to Sites via Host file:• http://www.mvps.org/winhelp2002/hosts.ht

m• Restrict Internet Explorer Sites

• https://netfiles.uiuc.edu/ehowes/www/resource.https://netfiles.uiuc.edu/ehowes/www/resource.htm#IESPYADhtm#IESPYAD

• http://icra.org/ http://icra.org/ • Internet Content Rating Association

Feedback

• Questions?

• Comments?

• Experiences?