Dirty Spyware Tricks

June 15, 2006 by chengrob in Spyware

If you had a complete knowledge of what most spyware was doing to your ystem, you would never agree to install it. So how does it end up installed on so many PCs? Here are some of the dirty tricks that spyware uses to worm its way onto your system and stay there. (Not all spyware uses every technique.)

1) Hide inside another program's installer.

You will often see this technique in peer-to-peer programs like Kazaa. Hundreds of "freeware" programs install some form of spyware along with the main application. In some cases the spyware is relatively innocuous, but in others it can crash your system or invade your privacy. The only hint you may see is a short sentence or two in the end user license agreement (EULA) to the effect of "third party software may be installed along with the application."

2) Use confusing legalese.

The license agreements don't just come out and say "we're going to collect information and screw up your browsing" since that wouldn't get them a lot of customers. Instead, the licenses are full of vague and confusing prose.

3) Keep asking until you say Yes.

This is particularly common with drive-by downloads. Some spyware is delivered by an ActiveX control that tries to load each tim you visit a web page where the spyware is present. As a security measure, the browser will ask if you want to install. If you say No it's only good until the next web page you load, where you'll again be asked the question. After a few pages of this, some people will give up and say Yes. (A better move would be to give up and leave that site.)

4) Create a false pretense for needing the software.

You get this email message from a friend: "I've just sent you a greeting card, go to this web site to read it!" When you get to the web site it asks you to install a "greeting card viewer" that turns out to be spyware, and it sends a similar card to everyone in your address book. In the license agreement you didn't read but agreed to, you gave it permission to do that!

5) Look essential, or be invisible.

Some spyware will use an official-sounding name like "winstartup" so that you'll be less likely to disable it if you see it running. Others maintain a low profile by using dozens of different file names and locations, or even generating a random file name to escape detection. To further mask its existence and reduce your awareness of it, many spyware packages will even install software updates without your knowledge.

6) Don't uninstall, even when asked.

Whether by design or mistake, a lot of spyware does not remove itself when you uninstall the application that originally installed the spyware. In many cases the only way to completely remove spyware is with a utility like PC Pitstop Exterminate.

Leave a Reply

Tags

PC World News
More Answers for IPhone 3G Questions   Jul 4
So outrageously popular were Tuesday's answers to many of those popular questions prospective i...
Ubisoft Brings Catz, Dogz, CSI Games to Macintosh   Jul 4
TransGaming on Wednesday announced a publishing deal with Ubisoft that will net Mac users a number o...
Sync Your Personal Data   Jul 4
Among the many kinds of data you might want to sync between Macs is a category I'll refer to as...
Sync Your E-mail Messages   Jul 4
If you want to make sure you have exactly the same e-mail messages--including all your saved and sen...
IPhone 3G Set for 8 A.m. Debut on July 11   Jul 4
If you're the sort of person who creates countdown widgets for major Apple product releases, yo...

Recent Posts

Scan for new drivers for FREE! WinPatrol 2007 Optimize your PC! Eradicate Spyware!