Spyware

1
Spyware

• Internet Security (CIS392)
• Tim Wells
• March 3, 2005

2
My Project

• I made a Fresh Installation of Windows XP on a
  Virtual PC and did not update it, or install any
  security software.
• I tried to browse the web like an ignorant user
  and tried to get as much spyware as possible
• Then I compared Spyware Removal Tools

3
What is Spyware?

• Spyware is software that is installed on a users
  computer, many times without their knowledge,
  that sends out private information about you and
  your computer usage.
• Adware is a sub category of Spyware that may not
  collect information, but pops ups ads randomly.

4
Whats wrong with Spyware?

• It retrieves information about you
• It slows down your computer
• Any unnecessary program running in memory is a
  waste of System Resources
• Many of these applications are known to cause
  other problems
• Pop-up ads and talking monkeys are ANNOYING!

5
How did I get Spyware?

• Sometimes when you install a program (such as
  KaZaA), it installs Spyware as well without your
  knowledge.

• Some Websites attempt to install Spyware. Many
  users click Yes, not knowing it could be
  Spyware.

6
Symptoms of Spyware
Annoying Ads Pop-Up Randomly, Even when you
arent browsing!
7
Symptoms of Spyware
Random IE Program Errors!
8
Symptoms of Spyware
Random Access Denied Pages
9
Symptoms of Spyware
Toolbars Clutter your Browser
10
Symptoms of Spyware
A Talking Monkey tells you jokes Whether you
are in the mood or not!
11
Symptoms of Spyware

• Computer Runs Slower than Usual
• Longer Boot-Up Time
• More Lock-Ups and Program Errors

12
Removing Spyware

• Get at least one good Anti-Spyware program.
• I will compare Three Different Anti-Spyware
  Programs
• Microsoft Anti-Spyware
• Spybot Search Destroy
• Lavasofts AdAware
• Run these scans in Safe Mode if you have problems
  with the Software detecting it but not removing
  it.

13
Removing SpywareMicrosoft AntiSpyware

• Has excellent realtime protection
• Allows Scheduling
• Gives lots of information
• Automatic Updates
• Cost FREE!

14
Removing SpywareMicrosoft AntiSpyware

• Removed 24 Threats
• 2407 Files
• 7150 Registry Entries
• More Found By
• SpyBot 213
• AdAware 111

15
Removing SpywareSpyBot

• Has Silent Realtime Protection
• Allows Scheduling in Advanced Mode
• Self-Install Updates
• Cost FREE!

16
Removing SpywareSpyBot

• SpyBot was Evidently Overwhelmed by the large
  amount of Spyware and was unable to run a
  complete scan without errors unless another
  program had already removed some of the spyware.

17
Removing SpywareAdAware (Free Version)

• Free Version Does NOT have Realtime Protection
• No Scheduling
• Self-Install Updates
• Cost FREE!

18
Removing SpywareAdAware (Free Version)

• Found 819 Problems
• 13 Negligible Objects
• 193 Registry Keys
• 473 Registry Values
• 131 Files
• 10 Folders
• More Found By
• AntiSpyware 16 (6854)
• SpyBot 257

19
Conclusions

• I would see some of the same names in all three
  programs, where they are all removing different
  parts of the Spyware, but not all of it.
• Its really hard to get all of the Spyware
  removed completely without formatting.
• For best results, more than one Anti-Spyware
  program should be used, along with a good
  Anti-Virus program and a good Firewall.

20
My Idea to Improve Spyware Scanners

• The fact that many spyware programs start before
  you even login to windows and many are embedded
  deeply into your computer makes removal harder
  because these processes cannot always be ended.
• My idea is similar to what SpyBot does, but a
  little better. SpyBot will say that it cant
  remove it for whatever reason and that you need
  to reboot. Instead of waiting until the GUI
  loads and the user logs in, it would probably be
  helpful to do the scan outside of windows (like
  where chkdsk is done) or if effective, have the
  program keep track of what needs removed from the
  GUI scanner, and simply delete those before going
  into windows.

21
Prevention

• Learn to practice Safe-Browsing
• Get a spyware Removal Tool that has realtime
  protection
• Get a Firewall (Many firewalls will watch for
  your personal information and ask for your
  confirmation before allowing it to be sent.)

22
JUST SAY NO TO SPYWARE!