 |
 
 |
|||||||||||||||||||||||||
 |
||||||||||||||||||||||||||
|
|
OFFICE OF TECHNOLOGY SERVICESInformation Security & VirusesSpywareSpyware can threaten the security of your personal information. The Information Security Office requests that everyone review and practice the following in order to help make campus and their home a safe and secure place.
What is Spyware?According to Wikipedia, “Spyware is a type of malware that can be installed on computers and collects little bits of information at a time about users without their knowledge.” Spyware usually hides itself from the computer user and is difficult to find. They can also function as a key logger which secretly records your key strokes and sends this information back to the spyware owner. The term suggests that it secretly monitors the user’s activities and more. These programs can collect your personal information such as web sites visited. They can also interfere with your normal control of the computer by installing additional software and redirecting your Web browser. Spyware can change computer settings that can result in slower connection speeds, different homepages and loss of Internet functionality in other programs. In some cases spyware has caused a computer to crash and information lost. What are the risks associated with Spyware?
Spyware has been closely identified with identity theft. Some manufactures of spyware have been accused of using their software to steal user names, passwords and financial information. The Federal Trade Commission estimates that over 27 million Americans have been identify theft victims. Sony Music Entertainment even used techniques from spyware to protect its digital media from privacy. It acted so much like spyware and affected user’s computers that lawsuits were filed and Sony had to remove its technique. Microsoft’s Windows Genuine Advantage Notifcation software is used to check that a lawful copy of Microsoft Windows is running. According to Microsoft this application cannot be removed. However, it is mentioned that the RemoveWGA tool can remove this program.
Examples of Spyware
These spyware programs are listed by group based on their behaviors. CoolWebSearch is a group of programs that takes advanatage of Internet Explorer vulnerabilities. Internet Optimizer redirects Internet Explorer error pages to advertising HuntBar, aka WinTools or Adware is installed by ActiveX driveby downloads at affiliate Web sites or by advertisements. Movieland is a movie download services that holds a user’s computer hostage by a number of pop-up windows demanding payment of at least $30 and claims they have signed up for a three day trial offer that can’t be canceled before the time period is over. MyWebSearch uses a search tool bar at the top of the browser window and spies on user search habits. It can also affect e-mail systems such as Outlook. WeatherStudio is another plug-in that displays a window panel at the bottom of the browser window. Zango end information to advertisers about a users Web surfing habits. It also alters requests to pick up these advertisers Web sites. Zlob Trojan downloads itself using ActiveX and reports information back to a control server in command of the Trojan. It can record Web sites visited, key stokes or search history. Best security practices to avoid spyware
There are many ways in which to deal with spyware. The best and easiest is to install and run a good anti-malware software program or application. Some excellent choices include Internet Security Suites from Kaspersky, Norton or TrendMicro. These products include a variety of software security tools to include anti-spyware. Other benefits of using an Internet Security Suite are that it provides a firewall and Intrusion Prevention System to detect and block spyware. Once setup, they should be set to update automatically and run checks on your computer constantly to ensure against infections. Another practice is to use a Web browser other than Internet Explorer which is at greater risk of infection than others. Some examples are Mozilla Firefox, Google Chrome, Safari or Opera. One should download programs from Web sites you trust. Avoid downloading shareware or freeware no matter what. Software claiming to be free may not be entirely free and can contain spyware and other types of malware. Companies such as CNet has revamped its downloads to only publicize programs that passes inspection by Ad-Aware and Spyware Doctor. Also never click “Agree” or “OK” to close a window. One should click the red “X” in the right corner of the window. Be wary of popular “free” music and movie file-sharing programs. You should be sure to understand all of the software packaged with those programs. One should also normally use a standard user account instead of an administrator account. This will limit any access spyware can take over your computer. Beware of fake antispyware software. Cyber criminals know you are trying to protect your computer and will trick us with fake security software. This “rogue security software” or “scareware” appears to be helpful but provides limited or no security, generates false alerts or attempts to lure you in fraudulent transactions. Some known offenders include:
Need more?The Information Security Office can provide helpful tips on protecting your personal information and running a safe computer. The OTS Faculty Help and Student Computing Centers at 410-704-5151 are also available to help. Also go to the following Web sites for more information:
Administration and Finance Questions |
 |
|
 |
Last Updated: Wednesday, June 22, 2011 | |
|
|