Google

Monday, August 13, 2007

HOW CAN SPYWARE ENTER INTO YOUR PC

So what's the big deal about spyware? Consider this: Once installed on your PC, spyware can record your every keystroke-including user names, passwords, credit card information and more- and transmit that information to hackers, who can then use the information to steal your identity. Spyware is dangerous in many ways. A spyware program can monitor your Web browsing and repeatedly redirect you to sites the spyware author wants you to see. Spyware can, unbeknownst to you, transform your PC into a spam zombie, sending junk e-mail to thousands of PCs around the world. And spyware can slow your computer's performance to a crawl-or even render it completely useless. (For a definition of spyware, see the sidebar, "Spyware 101.")"Spyware is one of the fastest growing security threats today," says Gregor Freund, founder of Zone Labs(R) LLC, a leading creator of consumer endpoint security solutions. "Today's spyware has become sophisticated, malicious, and harder to remove, so it's more important than ever before to secure your PC."In fact, 80% of respondents in an America Online/National Cyber Security Alliance survey said they had had some form of spyware on their computers in 2004. One reason behind the high percentage is that spyware is so easy to get. Here are the top 10 ways spyware can infiltrate your PC-and what you can do to prevent that from happening. 1. Everyday, unprotected computer use. Spyware doesn't magically find its way onto your computer by itself. It infiltrates your PC through actions that you perform-for example, downloading and installing free software programs that contain hidden spyware. Every time you use an Internet-connected or networked computer, you're potentially opening the door to spyware.Solutions: Be cautious about what you do online. Install the best anti-spyware, firewall, and other Internet security solutions; update them regularly; and scan your hard drive for spyware frequently. 2. Kids using the computer. Children and teens often engage in online activities that, without their knowledge, make the PC vulnerable to spyware. For example, spyware companies often target children with free game software and other software geared toward kids. This type of software can surreptitiously install spyware. Solutions: Educate your kids about what spyware is, the damage it can do, and how it can sneak onto a computer. Make sure any software your child uses is from a reputable source and is really necessary. Install the best anti-spyware and other security tools on any computers your kids use. And prohibit the use of peer-to-peer networks (see below).3. E-mail. Some unsolicited e-mails may claim to offer patches and updates to popular software programs you use. Even though these e-mails may appear, at first glance, to be legitimate, their purpose may be to get you to download and install spyware (which is masquerading as a patch or update). Also, some computer viruses-which infiltrate your PC as infected e-mail attachments-can help hackers install spyware on your PC. Solutions: Never reply to suspicious-looking e-mails or click any links embedded in suspect e-mail. Install and keep updated antivirus software, along with anti-spyware and firewall solutions. 4. Pop-ups. Some browser pop-up windows attempt to install unwanted software on your computer and change your system configurations. These pop-ups employ highly deceptive tricks, including claiming your PC is already infected with spyware, to get you to click on a link to install malicious programs. Once installed, the spyware may redirect you to a different home page, replace your browser bookmarks, and more. Solution: Never click on a pop-up window unless you're positive it's legitimate. 5. Microsoft Internet Explorer (IE). As the world's most widely used Web browser, Internet Explorer is a favorite target among hackers seeking to exploit potential security holes. The result: IE users are more vulnerable to spyware than those who use other Web browsers. Solutions: Increase your browser's security settings. With Microsoft Internet Explorer, click Tools in the menu bar, then click Internet Options. Next, click the Security tab, then select ‘Custom Level' to customize your security settings. Also, download and install the latest Internet Explorer security patches. Or consider changing Web browsers. Mozilla's Firefox has become a popular alternative, partly because it has had fewer security problems (though it's not immune, either). Firefox is a free download at http://www.mozilla.org/6. Unpatched software. Microsoft and other software makers often update their applications with ‘patches' that fix security holes, as well as bugs or other problems. If you choose not to update your Windows operating system or other software with the latest patches, your computer may be vulnerable to hackers, who know where the security holes are and how to exploit them. Solution: Keep your Windows operating system and other software applications security up-to-date with the latest patches. Visit the software maker's online support center to check for the latest updates and patches. 7. Instant messaging. Instant messaging allows people to chat in real-time with each other, and typically has features that permit users to easily transmit files between computers. But just like e-mail, these files can be malicious. Solutions: Because IM can potentially connect you to so many unknown users, you should use great discretion before downloading files from any unknown sources. Also, install an Internet security solution that offers instant messaging protection. 8. Peer-to-peer (P2P) file-sharing services. P2P sites allow you to swap and download music files, videos, photographs, and other content, usually for free or at little charge. By their nature, many file-sharing services turn your PC into a server, which anyone using the P2P service can access. Along with their potential security, privacy, and legal risks, P2P services are notorious for installing spyware on users' computers. Solutions: Avoid P2P services and prohibit your children from using them, too.9. Downloading and installing freeware, shareware, and browser plug-ins. There are a lot of free software programs available online. Unfortunately, some contain ‘Trojan' spyware, which is installed-without your knowledge-when you install the free software you downloaded. Even worse, some free ‘anti-spyware' programs available online actually install spyware on your PC.Solution: Only install software from known, reputable, trusted software makers. 10. ActiveX controls. A set of rules for how applications can share information, ActiveX controls execute some of the interactive elements you see on Web pages. But ActiveX controls can also embed spyware on your PC, all the way down to the operating system level. Solution: Restrict ActiveX controls in your browser's security settings. For instance, in the Security Settings dialog box in Internet Explorer, select ‘Prompt' as the option for ‘Download signed ActiveX controls' and choose ‘Disable' for ‘Download unsigned ActiveX controls.'Other Ways to Stop Spyware* Educate yourself. Learning more about safe browsing techniques, and teaching those techniques to your kids, can help keep your PC free of spyware. * Install proactive security. Most antispyware software today is reactive. It uses signatures-which are like fingerprints-to identify spyware that is installed on your computer. Ideally, your antispyware solution should also be proactive, in that it prevents spyware from attacking legitimate programs and stops spyware from infiltrating your PC's operating system. In addition, your antispyware software should scan and remove all spyware traces and prevent spyware and other malicious software from transferring your data over the Internet. Beating the OddsTaking the mystery out of spyware will help you protect yourself from the misery that spyware causes. Know the enemy: what spyware is, what it does, and how it gets onto your PC. Avoid the risky online behaviors that can invite spyware onto your computer. Install and regularly update antispyware technology that's proactive, not just reactive. Once you've taken these precautions, your odds of joining the 80% of users who had spyware on their PCs last year will be slim-to-none.

No comments: