Spyware / Adware
 

 

 

 
What is Spyware/Adware

Spyware and adware are the newest threats to connected PCs. Is your PC running sluggish? Has your browser recently acquired a mysterious new toolbar? Do you have a new default home page or search engine for your Internet Explorer? Are new programs showing up unexpectedly in your system tray? Do advertising windows pop up even when you're not browsing the Web? Have you discovered surprise 900-number charges on your phone bill?

All of these are tell tale signs that your computer is beset with adware, spyware, or other malicious software you don't want and don't need. Like viruses, these programs often sneak onto your PC by piggybacking on a downloaded free software program , e-mail message, or via nefarious Web sites. Adware, spyware, and other unsolicited software can slow your PC, bog down your Internet connection, reduce your productivity, and jeopardize your personal privacy. These tiny applications either feed advertising to software already running on your computer or, worse, collect data about your Internet surfing habits, then broadcast that data to marketers worldwide. Often, you don't even realize that you've installed these apps. The end result is that your browser may default to unusual search-engine sites or produce odd search results, and you may see exponential growth in the number of pop-up ads that litter your desktop.

Here are definitions for these pests:

  • Adware: "Software that brings targeted ads to your computer, after you provide initial consent for this task. Some Adware may hijack the ads of other companies, replacing them with its own. Adware typically will track your browsing habits and report this info to a central ad server."
  • Browser Helper Object (BHO): "A component that Internet Explorer will load whenever it starts, shares IE's memory context, can perform any action on the available windows and modules. A BHO can detect events, create windows to display additional information on a viewed page, monitor messages and actions. Microsoft calls it "a spy we send to infiltrate the browser's land." There are many exploits of this technology which search all pages you view in IE and replace banner advertisements with other ads, monitor and report on your actions, change your home page, etc."
  • Hijacker: "A trojan that may reset your browser's home page and/or search settings to point to other sites. Such sites are sometimes porn sites, often loaded with advertising. Homepage Hijackers may prevent you from changing your browser's homepage or from visiting a particular site."
  • Spyware: "Any product that employs a user's Internet connection in the background without their knowledge, and gathers/transmits info on the user or their behavior. Many spyware products will collect referrer info (information from your web browser which reveals what URL you linked from), your IP address (a number that is used by computers on the network to identify your computer), system information (such as time of visit, type of browser used, the operating system and platform, and CPU speed.) Spyware products sometimes wrap other commercial products, and are introduced to machines when those commercial products are installed."
  • Trojan: "Unwanted software which runs in a user's machine, as an agent of the attacker, without user awareness. Unlike viruses and worms, trojans do not replicate (make copies of themselves.)"
How do I remove Spyware/Adware from my computer
 

Several companies offer free software that will check your computer for unwanted software. Removing adware and spyware can be tricky, but these free utilities detect and remove hundreds of known nasties. To clear your computer of adware, spyware, and many other pesky programs, use Spybot Search & Destroy* or Lavasoft's Ad-aware 6.0*. In fact, you may have the best results if you use both, since neither is likely to catch every malicious application installed on your PC. If you have been infected with CoolWebSearch Hijacker you should download CWShredder* to remove it.

For help downloading and installing Spybot Search & Destroy* or Lavasoft's Ad-aware please visit their websites or look in the "Help" section of either program once you have installed them.
You will find an Online Tutorial for
Spybot Search & Destroy* at http://spybot.safer-networking.de/en/tutorial/index.html
For help with Lavasoft's Ad-aware please visit their website at http://www.lavasoft.de/customer_support/homeusers/

Please Note
: These programs do not detect or remove viruses, so you'll still need to use a good anti virus program.

Tip
: Be advised that some free Adware/Spyware removal software will install additional unwanted programs on your PC. Be very careful when choosing to download any free software.

For more information visit SpywareInfo*, Spyware Guide* or PestPatrol*. These sites provide updated resources on spy ware applications, what they do, and how they’re used.

How do I keep Spyware/Adware off of my computer
 

To protect your PC you need to take preventative steps to ensure that Spyware/Adware doesn't come back. Install an anti-spyware prevention program. Be choosy about the free programs you download. Keep your operating system up to date. Understand your browser's security settings. Block"add servers" with your HOST file.

Install an anti-spyware prevention program. SpywareBlaster* and SpywareGuard* are excellent, free programs. You may want to install and use both, as they protect your computer in different ways. SpywareBlaster* "inoculates" your Internet Explorer browser against the installation of unwanted spyware and adware from the internet. SpywareGuard* actively monitors your PC and prevents spyware infestations.

Be careful downloading free programs. The best defense against spyware and other unwanted software is not to download it in the first place. Only download programs from Web sites you trust. Read all security warnings, license agreements, and privacy statements associated with any software you download. Never click "agree" or "OK" to close a pop-up window. Always use the "x" in the corner. Tip: Before downloading and installing a free application, look it up on one of several online spyware databases. Spychecker* and Cexx.org* are two such services.

Keep your operating system up to date. Download and install the latest updates, "patches", for your operating system and Internet software, including your web browser and your e-mail client. Even with updated anti-virus software your computer is vulnerable if it has not been patched. For information on patching your operating system visit the following links.*
Windows Update
3 steps to secure your PC
Frequently Asked Questions About Updating Your Computer
Questions about or problems with Windows Update
Windows Update Support Center
Apple security site
SecureMac.com

Understand your browser's security settings. Go to Working with Internet Explorer 6 Security Settings* to learn what you can do to tailor Internet Explorer's Security Settings.

Block Ads with the HOST File. You can use a HOSTS file to block ads, banners, cookies, web bugs, and even most hijackers. This is accomplished by blocking the Add Server that supplies the adds.

The HOST file contains a listing of Internet addresses. When you access the Internet with your browser, it normally first checks a local "HOSTS" file to see if the url you have entered (such as "www.sc.rr.com") is mapped to some IP address. If so, this IP address is accessed directly. If not, then your ISP's computer is accessed, and the IP address of the URL is located, and then the browser goes to that IP address.

Your own machine has its own IP address, 127.0.0.1. If you create a local HOSTS file, and map a given server URL to this IP address, then when you provide the URL to your browser, your browser will just go to your own machine. Result: no info is transferred to your machine from that "adserver", nothing is transferred from your machine to that "adserver", your surfing activity is not tracked by that "adserver," and your visits to the page you are trying to visit are much faster!

PestPatrol is now offering its immense HOST file of known spyware threats to the public, free of charge. You can download it here.

Here's how to use the HOST file to block ads:
Note: These directions should only be used by experienced computer users. Improper use of this information may prevent you from getting to the Internet. Road Runner and Time Warner Cable do not support the use of this information, it is listed for your reference only. This information should not to be construed as an attempt to provide legal, security, or other such professional advice.

1. Determine the location of your HOST file:

Windows XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC

Windows 2K = C:\WINNT\SYSTEM32\DRIVERS\ETC

Windows 98, Me = C :windows\hosts

Macintosh: Mac System Folder or Preferences folder. (eg., Macintosh HD:System Folder:Preferences:Hosts)

2. Backup your HOST file - It's a good idea to save your original HOST file in a safe location on your computer in case you encounter problems.

3. Download the HOST file - Download the HOST file* from PestPatrol* and save it on your computer. Copy the HOST file to:

Windows XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC

Windows 2K = C:\WINNT\SYSTEM32\DRIVERS\ETC

Windows 98, Me = C :windows\hosts

Macintosh: Mac System Folder or Preferences folder. (eg., Macintosh HD:System Folder:Preferences:Hosts

4. Locking the HOSTS File - After updating your host file, you might want to make it "read only". Some malware programs will attempt to add their own entries or overwrite your HOSTS file. Remember to remove the read only status before updating the file or the update will not be accepted. To make your HOST file "read only":

1. Right click the HOST file
2. Select Properties
3. Under the General tab check Read Only

Please note: In some cases a large HOST file tends to slow down the computer. This usually only happens in W2, but may occur in XP. Here is what to do if this is an issue for you: Open My Computer, Control Panel, Administrative Tools, Services - Scroll down to "DNS Client", Right-click and select: Properties - Click the drop-down arrow for "Startup type" - Select: Manual, click Apply\Ok and restart.

  *For your convenience Road Runner has added links to some popular products or websites. Time Warner Cable and Road Runner do not endorse or support any of the products. They are listed for your reference and represent only a portion of those commercially available.
  Download and install FREE EZ Armor Security Software* provided by Computer Associates to Road Runner customers. You get FREE Anti-Virus protection, Firewall protection, Pop up Blockers, Anti-Spam, Anti-Spyware, product upgrades and updates, and web support*
Please note: You must have the latest version of Flash Player** to download EZ Armor Security Software* from Road Runner.
*Subject to terms and conditions. Road Runner reserves the right to discontinue any feature or offer at any time. EZ Armor Security Suite software must be downloaded from the Road Runner National site.
*Spam and Virus protection software not available on Macintosh computers.
1
 
 
 
     
 
©2006 Time Warner Cable, Inc. All rights reserved. ROAD RUNNER character and name are trademarks of Warner Bros.