Help - Technology Services

Malware Frequently Asked Questions (FAQ)

What is Malware?

Malware is a term often used to describe a variety of malicious and/or troublesome programs.   Some examples of malware are Spyware, Adware, Viruses, Trojans, Backdoors, and Worms.  Though distinct entities, there is enough similarity in their behavior and symptoms that security experts often lump them together under the common name Malware.

What is Spyware?

Spyware is software, usually embedded in software downloaded for free from the Internet, that sends information from the user's computer whenever the computer connects to the Internet without the user's knowledge . Usually the information sent is benign in nature, mostly concerned with general marketing information (ie. spending habits) rather than specific information like credit card numbers.  Some programs, however,  are capable of retrieving specific information as well.

One of the problems with Spyware lies in the fact that this information is transmitted without your informed consent.   The biggest problem, however, is that Spyware can (and often does) render your computer unusable.

Note: Some privacy advocates also call legitimate access control, filtering, Internet monitoring, password recovery, security or surveillance software "Spyware" because it could be used without notifying the users.

What is Adware?

Adware is advertising-supported software. Adware can range from "nagware" (which pops up a screen when the program is used asking you to register, donate or purchase a full version of itself) to programs which display paid advertisements when the program is used.   It is software that can be downloaded free from the web, but contains advertisements that create revenue for the company. Adware , like Spyware, will usually install components on your computer that will send marketing information when you are online. Unlike Spyware, Adware usually contains a disclosure notifying you that they will be using your information and stating to whom (if anyone) this information is to be divulged. It is important to read the privacy policy when installing any software, but especially true when installing "free" software.

A piece of software can be both Adware and Spyware at the same time! More importantly, not all Adware is Spyware and most Spyware is NOT easily detected simply by seeing ads being displayed.

How is this different than Viruses, Worms, Trojans, etc?

Viruses, worms, Trojans, etc. are generally more malicious in nature than are Adware and Spyware.  While Adware and Spyware can and often do damage your system and can, theoretically, send private information (such as passwords or bank and credit card information) to someone else, this isn't the goal of Adware and Spyware.   However, the goal of viruses, worms, etc. is to cause damage to you or, though you, to cause damage to others.  The difficulty is that all of these types of malware coexist nicely and help each other perform their appointed task.  A worm may open a "door" that spyware, viruses, Trojans, and viruses may take advantage of.  Spyware, viruses, or backdoors may use a Trojan to install themselves on your computer.  These are just a few examples of symbiotic relationships among the various malwares.

What are some potential problems of having Adware/Spyware installed on my system?

Adware and Spyware often execute on startup, causing your system to be slow booting or shutting down or causing it to "hang" upon startup or shutdown. Having these programs installed in memory can also result in slow and/or reduced system performance. Some programs also have the ability to change your web browser’s home page and also pop up ads on webpages that normally do not have any ads. Spyware can install dialup programs that may replace your dialup Internet connection.  In extreme cases, certain Adware/Spyware can also corrupt your network drivers and affect your ability to connect to the Internet and/or compromise your Windows operating system.   At best, spyware and adware annoy you with pop-ups and slow your system.  At worst, they irreparably damage your system requiring you to re-install your operating system.

How do I avoid these problems in the first place?

Practice "safe browsing" habits.

• Install and keep your anti-virus program updated.  While anti-virus programs are not intended to deal with viruses, today's programs are offering more and more protection against spyware/adware.
• Install, keep updated, and regularly run an anti-spyware program.  Anti-virus programs alone (or even in combination with a firewall) do not provide enough protection.
• Keep your computer up-to-date, including running Windows Update at least once a week.
• Don't install every thing that pops up when you surf the web.
• Think twice before installing those 10,000 free smilies, because you get 10,000 smilies and some spyware.
• Think twice before you click on an ad.
• Think more than twice if a message pops up telling you that you have x items of spyware and offers to clean up the spyware if you download their product.  Legitimate spyware remover programs do not pop up ads this way.
• Read error messages carefully.  Some ads look like error messages, but when you click on them you're installing spyware or other programs that you don't want.

Consider using an alternative to Internet Explorer.

• Internet Explorer is full of security holes in its ActiveX, Java, and Javascript engines.
• Install the Sun Java runtime for using Java applets in Internet Explorer.
• Install another web browser. Mozilla Firefox is a good web browser, includes popup blocking by default, and doesn't have as many security holes as Internet Explorer.  Be advised that no browser is 100% safe--the creators of adware/spyware tend to fairly quickly figure out a way past any blocks the browser programmers put up.  However, Firefox presents a smaller (and more resistant) target than Microsoft's Internet Explorer.
• If you use Internet Explorer (and some applications and web sites require it), keep your Windows updated and, if running XP, install Service Pack 2 and security updates.

Where can I read more information about Adware and Spyware?

Benjamin Edelman has an excellent web page, and he has been called as a witness in several cases brought against Spyware vendors.

His web page is at http://www.benedelman.org/spyware/.

James A. Eshelman is a Microsoft  MVP (Most Valued Professional) who has spent a good bit of time writing, researching and maintaining a site dedicated to computer issues, including security and malware.  He gives some good information and offers some tips for dealing with what he calls "parasites".

His parasite page is at:  http://aumha.org/a/parasite.htm

Microsoft has several pages offering help with security-related issues, including spyware/adware. 

Their security home page is:  http://www.microsoft.com/security/

What are some examples of Adware and Spyware?

Some examples of commonly installed Adware and Spyware software found on many computer systems include, but are not limited to:

Gator, BonziBuddy, HotBar, CyDoor, New.net, SaveNow, B3D Projector, WebHancer, Xupiter, OnFlow, Aureate/Radiate, CoolWebSearch,  MyWeb Search, Internet Optimizer, and HomeSearch.

How can Adware and Spyware get installed on my system?

Adware and Spyware frequently come bundled with and (in many cases) automatically installed by certain "free" applications that can be downloaded from the Internet. A recent development is what is sometimes called "drive by installation"--software installed  via a script contained within a web page or (within the realm of possibility) an email in html format.  There are many applications that install Adware/Spyware, but a few popular ones are listed below:

Go!Zilla, Kazaa, WeatherBug, BearShare, BonziBuddy, Eudora, iMesh, LimeWire, Comet Cursor

Should I remove Adware/Spyware from my system?

In most cases, you will find that your system runs faster, and you get fewer pop-up ads, and have a better experience with your computer after removing adware/spyware. But, note that in many cases the removal of Adware/Spyware from your system will cause some of your “free” applications to stop functioning.

On university-owned computers, the only one of these software products that is explicitly permitted is Eudora.  Kazaa and other file-sharing programs are not permitted to be installed on university computers for the simple reason that file-sharing programs take too much bandwidth.  Personal computers on the campus network have no restrictions about what software can be installed.  However, if you bring your computer to Technology Services for removal of spyware, such applications may necessarily be disabled in the process of this removal.

How can I safely remove Adware/Spyware from my system?

For automatic detection and removal of adware and spyware, we recommend you install one or more of the following programs:

Ad-aware by Lavasoft: http://www.lavasoftusa.com/software/adaware/ (Local copy here)

Spybot S&D by PepiMK Software: http://www.safer-networking.org/ (Local copy here and spyware definitions (July 2009 here)
     Spybot tutorial http://www.safer-networking.org/en/tutorial/index.html

Windows Defender (this is now included in all versions of Vista): http://www.microsoft.com/windows/products/winfamily/defender/default.mspx (local copy here)

What about other spyware removal programs?

Many spyware removal programs are unauthorized modifications of Ad-aware or  Spybot.  Some programs that claim to remove spyware actually install more spyware on your computer.  Other programs will detect spyware, but demand payment before allowing you to remove the spyware that is found.

These programs are either from companies with unknown or questionable reputations.  We highly advise against using them.

 
 Spyware Warrior maintains a good list of "Rogue" programs here.

What are more advanced ways of removing spyware?

For more advanced users, here are a few links to sites on manual removal and additional detailed information on specific pieces of adware and spyware: (NOTE:  These programs are NOT recommended for novice users as improper use may render your system inoperable.)

If you have additional problems or questions not discussed here relating to Adware/Spyware on your system, please call the CTIS Help Desk at 903-468-6000.

State law requires that users of this site be informed that this site collects the following information about users: location information for site utilization reporting and cookies for site management.