Combating Spyware and Adware
Learn how to keep spyware and adware at bay. Antispyware software is essential, but a little extra effort on your part will make your computer even safer. you’ll learn:
The best defenses against spyware and adware
How to defeat hard-to-remove spyware
Where to find free security software and security sites that help keep your computer safe
Lesson 1: What Is Spyware and Adware?
In this lesson, we’ll provide a quick overview of spyware and adware, and explain how these online hazards differ from viruses and other security dangers.
Computer viruses date back to the 1980s, and by now most security-savvy users–including those who have learned the hard way–know better than to open unsolicited e-mail attachments that may carry data-destroying bugs. For anyone with an e-mail account or Internet access, particularly those running the ubiquitous and security-poor Microsoft Windows operating system, antivirus software has become essential.
But like everything else, digital threats keep evolving. More recent menaces, including spyware, adware, phishing,
root kits, and spam, pose an even greater danger than your garden-variety virus. And unlike the virus writer, the stereotypical loner toiling in his mom’s basement, sophisticated cyber-criminals are often behind the latest threats.
Know your enemyBefore we explain the best ways to fight spyware and adware, let’s define the various online hazards:
Adware/Spyware: Any clandestine software that does various activities without your consent. Definitions vary, but we’ll describe adware as any program that is surreptitiously installed on your computer, and displays ads to your computer (often via annoying pop-ups), or collects marketing information about you. This information is often sold to advertisers. Spyware programs collect more sensitive personal information–perhaps a list of the Web sites you visit, or even credit card and Social Security numbers–and send it via the Internet to an unknown party. Some adware/spyware programs change your browser’s home page. Adware and spyware are often bundled with freeware and shareware programs.
Phishing: This is a scheme designed to trick someone into revealing sensitive information, such as a credit card or Social Security number. This is commonly done via a fraudulent e-mail that claims to be from a legitimate company. The unsuspecting victim clicks a link in the e-mail, is redirected to a rogue site, and is instructed to provide personal information, such as a bank account number or password. Of course, the e-mail and rogue Web site are carefully designed to look legitimate. Phishing attempts are sometimes done via instant message or fax as well.
Root kits: A stealthy set of software tools used by cybercriminals to gain control of the “root” or core of a remote computer. A root kit often goes undetected by security software, and can introduce a Trojan horse that opens an unused port on your computer that crackers can exploit.
Spam: Unsolicited junk e-mail, including those annoying come-ons for free plasma televisions, get-rich-quick schemes, and prescription drug offers.
Prevention is keyThe best spyware sentries take a proactive approach by preventing known spyware programs from being downloaded to your computer. Some tools, however, detect spyware after it’s been downloaded and installed. Naturally, anti-spyware apps can’t catch everything, so you’ll need to play it smart online. (More on this in the following lessons.)
Tip: Windows XP includes a firewall, but it’s a wimpy one that monitors inbound traffic only, not outbound. It can block spyware from entering your computer, but it can’t stop a worm that’s already on your system from accessing the Internet. We recommend you disable the Windows XP firewall and install one that monitors both inbound and outbound traffic. To disable the Windows XP firewall, go to Start, Control Panel, Security Center. Click on Windows Firewall, and then the Off button. Good news:
Windows Vista, XP’s successor slated for release in early 2007, is expected to have a two-way firewall.

you can install a new firewall program, you must turn off the Windows firewall.
Lesson 2: Block Spyware and Adware
In this lesson, we’ll discuss simple steps to prevent spyware/adware from overtaking your computer.
Since spyware can be tricky to remove manually, your first step is to run a virus scanner that also detects and deletes spyware. Most of the latest antivirus applications, including McAfee and Norton, do this. If your AV app ignores these pests, use a standalone antispyware tool.
But don’t rely solely on these watchdogs. Smart online behavior is the best way to keep spyware from reaching your system in the first place. Here are some important things to be aware of:
Internet Explorer can expose you to greater risk
When it comes to security, Internet Explorer has more holes than Swiss cheese. You’ll want to download the latest Internet Explorer security patches, particularly those labeled “critical” by Microsoft, as soon as they become available. Odds are good your computer is already configured to receive these updates automatically. How can you be sure? Click Start/Control Panel/Security Center/Automatic Updates. If you see a green dot besides “Automatic (recommended),” you’re good.

If you use Microsoft’s Internet Explorer browser, make sure your computer is configured to automatically receive the latest security updates.
To get security updates manually (not installed automatically on your computer), go to the
Microsoft Windows Update site.
In order to avoid the risks associated with using Internet Explorer, many people use an alternative browser like Mozilla’s
Firefox, which doesn’t support ActiveX controls and is therefore immune to ActiveX spyware threats that plague IE.
Tip: You already know not to open an e-mail attachment from an unknown sender. But did you know that chat rooms are often where new worms and other bugs spread? Don’t click unsolicited links in these rooms.
‘Drive by’ spyware/adware installationsSome unscrupulous Web sites are designed to infect your PC with adware automatically when you visit them. So when you use a search engine, the results you get may include such dangerous sites. How can you tell if a site has spyware or other threats? Run
McAfee SiteAdvisor, a free utility that provides safety ratings for thousands of sites.

McAfee SiteAdvisor’s safety ratings for adware and spyware appear with the search results on major search engines.
Whether you’re using Google, MSN, or Yahoo, SiteAdvisor’s ratings appear next to the search results (shown above).
Scandoo provides a similar service.
Before downloading freeware and shareware, read the user agreement carefully. It may reveal that adware is part of the package. We recommend that you not install any software download that has an adware component, since it may be difficult to remove the adware component later.
Lesson 3: Advanced Spyware FightingIn this lesson, we’ll provide spyware-battling advice for advanced users.
Do other people use your computer? Are you the reluctant system administrator for your home network? Without proper security, family members or guests might inadvertently install malware, even if you’re running a suite of security programs. After all, no protection software is perfect.
Sadly, the average Windows XP owner doesn’t create user accounts, which are a great way to bolster system security. Instead, the XP administrator’s account is used by everyone on the network–the spouse, kids, grandparents, and so on.
Don’t do this. The XP administrator has omnipotent power to install all software and change system settings. As you might guess, this is a recipe for disaster.
Creating user accountsBy comparison, an individual user or “limited” account has far fewer rights, particularly when it comes to installing software. To create one or more user accounts:
Click Start/Control Panel/User Accounts/Create a new account.
Enter an account name (e.g., Bobby), and then click the button next to Limited.
That’s it. Now Bobby can create a password for his account, if he wants.

The network administrator can create an individual account for each user on the network.
Remember to create a password for the administrator account too. On the User Accounts screen (shown above), click Change an account. Then select your administrator account name and Create a password.
Warning: If you create a password for the administrator account, write it down or otherwise make sure you don’t forget it.
Because without that password, you will not be able to make important changes in Windows, such as installing new software. If you lose the password, there is no way to retrieve it, and the only way to regain your access is to completely reinstall Windows.
Creating a ’strong’ passwordMalicious Internet users use password-cracking software to break into password-protected accounts all the time. That’s why it pays to make your password tricky. Try mixing letters and numbers in your password. Better yet, include uppercase and lowercase alpha characters as well.
Removing adware with Windows System Restore
If you install new software and suddenly your computer is overrun by popup ads, runs considerably slower, or your browser home page has changed, Windows System Restore can make things right again. (Note: System Restore is turned on by default in Windows XP.
So unless you’ve turned it off, the tip below should work.)
Go to Start/All Programs/Accessories/System Tools/System Restore (shown below).
Select Restore my computer to an earlier time, and click Next.
You’ll see a calendar with a list of restore points. Choose the most recent point that occurred before you installed the bad software.

Windows’ System Restore capability lets you erase unwanted software from your system by resetting your computer to an earlier time.
Lesson 4: Hard-to-remove Spyware
Some spyware/adware programs are especially difficult to remove, because they are capable of reinstalling themselves after they’ve been removed by antispyware software. This is accomplished by using nefarious techniques to hide parts of the program from antispyware scanners.
If you encounter a spyware program that keeps returning even after you remove it, it can be helpful to discuss the problem in online forums that are dedicated to advanced spyware removal. Large Web communities exist purely to share knowledge on how to remove these pests once and for all.
Getting help in a spyware forumWhen posting a question in a spyware forum, make sure to describe the spyware as completely as you can. Here are some suggested items to report:
When you run an antispyware program, what are the names of the “bad” files it discovers? Most antispyware programs will provide a log file of these files, which you can copy and paste into your forum message.
Describe what problems the spyware is causing (i.e., pop-ups, slow boot-up time, etc).
If you are getting pop-ups, what is the content of the advertisements? Look closely at the top edge of the pop-ups: what text appears at the left end of the title bar, such as “Special Offer Network,” etc.?
If your browser keeps getting redirected to a Web site you didn’t intend to visit, what is that Web site? Get the exact address.
With this information, other forum members can help guide you through the process of removing a difficult spyware program. Sometimes you’ll be asked to post log files from software utilities such as
Ewido or
HijackThis–this is perfectly normal. It may end up taking several days to get your questions answered, depending on how quickly forum members respond. But it’s well worth it–these communities often have the most current information on how to remove the nastier spyware bugs
Lesson 5: Working with Online CommunitiesNot surprisingly, the Internet has terabytes of how-to advice for battling security threats. Some of the best tips and tricks come from your fellow users.
A good place to start is the
CNET Viruses & Security Alerts Forum (shown below), where you can post queries, browse the latest topics, or search for help on a particularly vexing problem.

For instance, if you suspect that malware is lurking in your Windows Registry, type “Windows Registry spyware” in the Search box, select :within this forum in the adjacent window, and click Go. You’ll find hundreds of posts on this and related topics.
Similarly, there’s plenty of advice at the
WUGNET Forums. WUGNET, the Windows User Group Network, has thousands of searchable posts, and the boards are usually active–a good sign that someone there can offer a fix.
Lesson 6: Free Security SoftwareEverybody loves free stuff, including security software. Here are some good choices:
Windows Defender is Microsoft’s free anti-spyware software. Like every good spyware detector, it provides real-time support–essential for stopping spyware from being installed in the first place.
Lavasoft Ad-Aware and
Spybot Search & Destroy are popular choices, since they’re both free and very effective.
Spyware Blaster is a great free program that helps prevent adware and spyware from installing itself in the first place. It can’t remove adware/spyware from an infected PC, but it’s still a great addition to your anti-malware arsenal.
McAfee SiteAdvisor is a free utility that provides safety ratings for thousands of Web sites. If you try to connect to a site on McAfee’s banned list–such as a site known to contain spyware–a SiteAdvisor warning page appears instead and advises you to stay away.
AVG Free Anti-Virus for Windows, a gratis version of Grisoft’s antivirus package, is available for home users, but not for businesses or non-profits. You’ll get better support and configuration tools, though, if you buy the
Professional version.
Zone Labs has a
free firewall called ZoneAlarm that’s quite good, although it lacks some helpful tools, such as the ability to automatically provide Internet-access rules for popular programs. And Cloudmark has a free trial copy of its
Anti-Fraud Toolbar, which guards against phishing attempts.
Even if you scan your computer for viruses weekly, a second opinion is always a good idea. We recommend that you run a monthly scan with a Web-based service like Trend Micro’s
Housecall. It’s free, and it could catch bugs your primary security program missed.