Protecting yourself from Spyware
A recent report surveying 2,000 on-line computer users, stated
that 3 out of 10 households had fallen victim to a virus, spyware or a
phishing attack during the preceding 2 year period, costing those users
not only major inconvenience but also expensive repair costs. This report
isn't dissimilar from others that have crossed my desk or otherwise claimed
attention. Sadly, many computer users feel the risks posed are 'hyped'
until it happens to them.
This article is about securing PCs from external attacks. Protection from
'phishing' is covered in another article. In the meantime, although the
majority of people reading this will already have taken precautions to
prevent infection and spyware, we also know about 40% of computer users
either don't have anti-virus software or hadn't considered anti-spyware
software. Protection is easy, inexpensive - and this article is for them.
Many think of spyware as irritating pop-ups or tracking cookies that monitor your surfing habits, but increasingly the major threat is that posed by key-logging software designed to record keystrokes and placed on someone's PC without their knowledge or consent. There is even software available that can be buried into files which, once on the user's computer, can take screen captures and secretly email them. Then there's the type which can anonymously take control of the deliberately infected computer.
In many countries, installing this type of software on someone else's machine is strictly illegal. Yet it's still disturbingly common and the availability of such software continues to proliferate. Frequently, spyware can be found anonymously seeded into downloadable programs distributed through file sharing sites and peer-2-peer facilities such as Kazaa, where practical checks on material posted cannot be carried out. Cracked software, that is software which has had its registration protection broken, may save a user a few dollars but downloaders run a real risk of installing infected software. Some estimates put the infection rate of downloadable software from such sources at circa 8%.
There are simple and obvious rules to protect yourself. Download files from reputable download sites, or directly from the publisher, and avoid 'cracked' versions because you won't know what code has been injected alongside the hack until it's too late. If you use file sharing software, don't download any executable program files at all.
Many of these 'nasties' exploit cracks and hacks within the operating system. Microsoft do their best to plug security gap fixes into their updates as fast as practicable, often within a few hours of a new vulnerability becoming manifest. But their expert teams are of scant use to those who aren't sure how to set their computers to receive those updates.
For XP users, click <Start> then <Control panel> <Automatic updates> and set to <Automatic (recommended)> & <Every day>.
For Vista, click <Start> then <Control panel> <Security> then under 'Security centre' <Turn automatic updating on or off> then select <Install updates automatically>.
Users should also keep their anti-virus software up-to-date, and regularly scan drives for malicious code with a good anti-spy-ware tool. Those who lack any protection at all should consider the Zone Alarm Internet Security Suite by Zone Labs. It's a quality product offering good combined protection and is very inexpensive (http://www.zonelabs.com). There are lots of software products offering to remove viruses and spy-ware, but it's much better to protect yourself and prevent infection in the first place, and the ZoneLabs offering is first rate.
A good alternative to Zone Alarm is Webroot's Spy Sweeper product (http://www.webroot.com). Anti-virus protection is also available in the same suite if needed.
Of course there are many more quality anti-virus offerings out there; BitDefender, Avast! and Norton are good examples. Nor should we overlook F-Secure's Anti-Spyware product either. All these products and more have excellent reputations. The important thing is to get protected.