University of San Francisco
    Previous  font | ITS FAQ Home
  ITS FAQs - SpyWare FAQ
 

Table of Contents


What is Spyware?

Spyware is an application that collects and uses information without the user’s knowledge or permission. Name, email address, home address, ID and credit card number are some examples of information that Spyware applications normally collect. Visited websites and purchased items are also collected and used to determine patterns of what users normally do so custom ads can be presented to the user. Common spyware applications include DoubleClick, Alexa, Gator (or GAIN), Cydoor, Advertising.com, and SaveNow.

Why do I need to care about this? What can it do to me?

Spyware is an application that is installed on your computer without your permission. Several tens or hundreds could be installed, all running at the same time. When this happens, your computer starts to slowdown as all these extra applications are running in the background collecting information and sending it back to their databases. This is happening without your knowledge. You really don’t know what they are doing with your personal information. As your computer slows down, it will take longer for your applications to run and your Internet browser will be slow.

Your website “viewing habits” can also be collected. The next time pop up ads appear, it could be advertisements based on products you looked at. It could be beneficial to have customized ads appear to help you shop, but do you really want to look at 25 ads for the same product you already purchased a month ago?

Spyware can also change your browser home page, reset your bookmarks, and change your wallpaper. Spyware can also cause multiple windows to the same website appear over and over again. In some extreme cases, spyware can install a dialer application, activate your modem, call a dial-up provider in ANY country, run a browser to the same websites, for hours and hours, then hang up before you notice.

How can spyware get into my computer?

Most spyware actually comes from websites and may use ActiveX controls. ActiveX controls are a set of tools that allow a browser to perform actions on the Microsoft windows system, including downloading and starting applications. As you view certain sites, a window pops up giving you the option to install a plug-in or something similar to enable “special features” like increased downloading speed or to view graphics in higher resolution, etc. In some cases, this is legitimate, in some cases it’s not. Use your best judgment. If you view many different websites and they all recommend installing the same plug-in, chances are, it’s legitimate. In some cases, applications are installed without asking.

So if I have an Apple computer, am I safe?

Even with an Apple computer, you are still susceptible to some forms of spyware (see cookies). Spyware will evolve and eventually Apple computers will be just as vulnerable.

What about browser cookies? Isn’t that spyware?

Cookies are messages that are passed from a web server to a web browser. These messages are saved in text files. They are not plug-ins and they are not applications that can be started. They are used to save information like form answers and the like. A spyware application could read and collect the information in the cookie, though. In this respect, cookies aren’t technically spyware, but they can be dangerous. However, some consider it a form of spyware.

I already have Anti-Virus. Do I need anything more?

Anti-Virus applications don’t detect spyware because they are generally not considered a virus, although a virus could install spyware on your computer. In many cases, spyware is passive, only collecting information and passing it surreptitiously back to their source. Users are unaware of their existence.

How do I detect it?

In most cases, your biggest clue is your computer slowing down during normal usage. You can then use anti-spyware applications like Spybot, Ad-aware, or Pest Patrol. You can also detect its presence if your browser is reconfigured without you changing it or you start to get pop up windows and ads when you didn’t before. Spybot and Ad-aware can be downloaded, installed, and invoked as a local application. Pest Patrol and Webroot have websites where you can invoke a scan without downloading a local application.

Ad-aware:
www.lavasoftusa.com

Spybot:
www.safer-networking.org/en/index.html

Pest Patrol:
www.pestscan.com/

Webroot:
www.webroot.com/services/spyaudit_03.htm?rc=612

How can I get rid of spyware (and keep it off)?

The easiest way is to install anti-spyware applications. The most popular anti-spyware is Spybot Search and Destroy and Lavasoft’s Ad-Aware personal. They are also free. Commercial anti-spyware includes McAfee’s AntiSpyware, Webroot’s Spy Sweeper, Aluria’s Spyware Eliminator, Lavasoft’s Ad-aware Professional, and Pest Patrol’s Antispyware.

Where can I get more information?

Here are some websites to get more information:

 
 
  About USF | Academics | Admission | University Life | Libraries | Athletics | Alumni | Giving to USF Contact | Site Index | USF Home