Protect Against Spyware and Adware

Prevent Unwanted Installation

Companies pushing adware and spyware are relying on two things: your desire for free software and your gullibility. I've had two friends bring me their computers after they were seriously infected with adware. In one case, the culprit was my friend's craving for free file-sharing software. His desktop was a mess with countless icons for programs that he downloaded from the Internet. I was aghast. What he didn't realize is that he gave implicit permission to install adware. He knows better now.

My other friend isn't a freeware glutton. Instead, she has a habit of clicking the Yes or OK buttons on every dialog box she sees. Even suspicious-looking dialog boxes that don't pass close scrutiny. Of course, when a dialog box pops up asking if it's OK to install a new program, she clicks the Yes button.

The lesson that you can learn from my friends will help you prevent the installation of most adware and spyware:

• Make sure the programs you install don't contain adware. Many freeware programs do include adware. It's how the publishers make their money. If you're not sure, read the license agreement carefully (these are usually shown directly or through links as part of the installation process). Also, check the publisher's Web site very carefully. If you're still not sure, search Google Groups for the name of the program and the keywords adware or spyware. If you don't find any postings about it, then you're probably OK.

• Install a pop-up blocker to prevent adware and spyware pop-up windows. Much spyware installs after you click a deceptive link in a pop-up browser window. Install a pop-up blocker, and you won't even be tempted to click those links. My two favorite pop-up blockers are completely free. The first is the new MSN Toolbar. The second is the Google Toolbar. Pop-up windows are annoying time wasters anyway, so you'll thank yourself later. If you're a Windows XP user, look for a service pack this summer (Service Pack 2) that will include a number of great security features, as well as a pop-up blocker for Internet Explorer.

• Don't unwittingly install adware or software. If you do click what seems like a innocuous link, and then you see a dialog box similar to the one shown in Figure 1, don't click the Yes button to install the software. In this example, I was expecting to install a program from Microsoft so I feel safe. If in doubt, however, do not proceed. This dialog box is your last line of defense, and you should only install programs from the Internet that you chose to install. This is akin to giving someone your credit card number who calls you at home. It's a different story if you called them. Installing Windows XP SP 2 (when it's available later this summer) will also provide some help by suppressing unsolicited downloads of ActiveX controls (a popular vehicle for spyware).

How To Prevent Adware and Software Attack

Programs have been developed in order to detect, quarantine, and remove spyware. As there are many examples of adware software that are also spyware or malware, many of these detection programs have been developed to detect, quarantine, and remove adware as well.

Best practices for general security on the Internet, especially when browsing the World Wide Web (where a large portion of adware is installed from via security holes and social engineering), include the following:

* Do not install excessive additional toolbars to your browser, as they may slow down the browser or become a source of adware or spyware.
* Keeping up-to-date with security patches and operating system updates (in the case of Microsoft Windows, from Windows Update)
* Set Internet Explorer versions 6 or lower to prompt for ActiveX installation (this is turned on by default in version 7).
* Install a hosts file.
* Using an alternative Web browser to Internet Explorer (e.g. Opera, Mozilla Firefox, Safari, etc.)
* Install ad-blocking software.
o For users of Firefox, there is the Adblock extension, which can prevent harmful or annoying ads displayed on websites, while users of Opera have this functionality built into the browser. The NoScript extension to Firefox can also help in blocking JavaScript, which is involved in drive-by downloads. Internet Explorer users can download the free IE7 Pro extension that has ad blocking capabilities.
o Other options include ad-blocking proxy software such as Privoxy, which is free and runs on Windows, Linux and other systems.
* Use free alternatives of software from software that includes adware.
* Use other alternatives of operating systems to Microsoft Windows (eg. Linux, Mac OS X).