FAQs

1. What is spyware?
2. How does spyware work?
3. How dangerous is spyware?
4. How did my computer become infected with spyware?
5. How can I tell if my computer is infected with spyware?
6. Can I remove spyware myself?
7. Are there any effective spyware removal packages?
8. Can spyware copy and distribute itself?
9. How do anti-spyware programs combat spyware?
10. What should I do once infected with spyware?
11. Are there any recommended resources regarding further information on the spyware?

1. What is spyware?

The term spyware refers to a group of programs that were originally designed to 'snoop' an infected computer, but today's spyware can do far more. Spyware can monitor all activity on a machine as well as alter web browsers, open backdoors for remote attackers and steal personal information such as passwords and banking details. These programs are used both by legitimate companies who want more information about their customers for marketing purposes, as well as by criminal syndicates who buy and sell identities, credit card numbers and other private information. Both are motivated by the same goal, to increase their profits by secretly targeting consumers.

2. How does spyware work?

Once installed on a computer, the program will begin logging keystrokes, websites visited, monitor online purchasing or record personal data such as names, addresses and passwords. This information is then silently sent to a third party to be aggregated and used for either legal or illegal purposes. Spyware applications can transmit their data via file transfers whilst remaining completely invisible to users physically at the computer.

3. How dangerous is spyware?

Since these programs are often bundled with other forms of malware and Trojans, spyware represents a serious threat to online user security. Even in its 'legitimate' use by mainstream companies, spyware often violates user privacy by secretly transmitting personal information to third parties without user consent. Though most companies are required to mention the use of spyware with their programs in the end user license agreement (EULA), most users do not fully read or understand the information they are being given and therefore are inadvertently giving permission for these companies to monitor their data when installing software.

4. How did my computer become infected with spyware?

Many music programs, file sharing programs and instant messaging applications have built-in spyware to improve marketing strategies. Though these programs are declared in the EULA, most users have no idea what information is being transmitted or who is receiving it. If a user does discover the spyware on their computer, disabling or removing it will often render the original software useless.Another method of infection is through infected websites in what is termed 'drive-by installation' or through the use of pop-up ads. These websites are designed to install their malware on to a victim's machine without any notification. These types of installations are usually accompanied by some form of adware and users will notice pop-up ads or browser changes that weren't authorised.

5. How can I tell if my computer is infected with spyware?

A single spyware infection is often completely undetectable. Spyware is designed to run silently because the longer it can remain resident on your computer, the more profit the owner of the software stands to make. However, when more than one spyware application is loaded, potential conflicts can arise between the software as well as a noticeable burden placed on the OS and network. If you notice any of the following symptoms, it might be a sign of spyware infection.

• Slower computer performance and increased frequency of system crashes
• Inability to connect to the internet
• Pop-up ads or inappropriate pop-ups on legitimate websites
• Changes to your web browser, new icons on your desktop or changes to your default search engine

6. Can I remove spyware myself?

It is not advisable to manually remove spyware from your computer unless you have expert knowledge of your operating system. Spyware applications often run themselves as system processes and install registry keys. Tampering with either of those without extensive knowledge could permanently damage your computer. If you suspect you may have a spyware infection, using antivirus software combined with specialised malware removal programs would be the most effective solution.

7. Are there any effective spyware removal packages?

There are several effective spyware removal packages available, both free versions as well as paid versions. Some of the most popular free versions would include SpyBot Search & Destroy, AdAware and, for the more advanced user, HijackThis. Microsoft also offers a free anti-malware tool for its Windows OS. Most anti-malware software offers a 'standard or basic' mode that will remove spyware with minimal risk to the computer. However, some infections can be difficult or impossible to remove without expert assistance.

8. Can spyware copy and distribute itself?

Spyware cannot copy or distribute itself but it is often bundled with other malicious software, such as viruses and worms, which can. However, the most common method of distribution is through file downloads rather than through viruses. Most users acquire spyware through downloads such as file sharing programs, music and video programs, chat software, email or infected websites.

9. How do anti-spyware programs combat spyware?

Anti-spyware programs scan, detect and remove known spyware applications. The software companies who create them compile new data about spyware threats on a daily basis and issue updates to protect their software users. Users can perform on-demand file scans before installations or they can run a full system scan to look for any already installed spyware components. Most anti-spyware packages also include a built-in prevention tool that monitors the operating system and browser settings, which are often targeted by spyware. They will then warn the user when any attempts to change these settings occurs.

10. What should I do once infected with spyware?

If you suspect you have been infected with spyware, scan your system using both anti-virus software as well as several anti-malware suites to ensure that all threats are detected and removed. Multiple anti-malware programs will give a higher probability of all threats being resolved. However, no single software suite can guarantee 100% threat removal because spyware creators modify their programs daily to avoid detection.

11. Are there any recommended resources regarding further information on the spyware?

For further information about spyware, 2 Spyware (http://www.2-spyware.com/ ) has an 'encyclopaedia of parasites' as well as reviews on different anti-spyware programs. Websites such as Threat Expert (http://www.threatexpert.com/ ) are good resources for information on all types of internet security threats, including spyware. They also display an up to date malware chart that shows the geographic origin of each threat.