Information, Articles, Tools, and Useful LinksCommittee Listings, Member Forums, and Find a CITPInformation on AICPA Tech. Conference, Seminars, Webcasts, and ConferencesIT Section Membership Information, CITP Credential Information, Members Only Tools and Communications, and MorePublications, CPE, Conferences, and Webcasts
 
Search

Printer Friendly View

Spyware Detection and Removal

Dangers of Spyware

Spyware Solutions

Warning Signs

Anti-Spyware Resources

 

When we are using a computer, those “pop up” and other electronic intrusions are simply annoying at first. However, such malicious software (or “malware”) can create significant hazards by allowing unknown third-parties to obtain, copy, modify, and even destroy information we use and rely on everyday.

 

Spyware is primarily inserted on your computer to steal information. By using a computer’s Internet connection without the owner’s knowledge or explicit permission to send and receive information, it can funnel additional hazardous code, such as a virus or other malware into your computer.  By its very nature, spyware is insidious—a hazard-laden snippet of code of any size that burrows into the computer and executes or operates in the background unseen and possibly undetected.

 

Spyware programs are often installed during download of even the simplest programsfree or shareware softwareor through ActiveX controls hidden within the source code of corrupted Web sites.

 

Back to top

 

 

Dangers of Spyware

 

Spyware, and its sister hazard, adware, bundle a wide assortment of executable files that send and receive a continuous data stream from your computer to another company, such as a data marketing company, for example. Such programs access files from a word processor, e-mail or chat room to monitor what the computer user is doing, and includes the time and date to identify when tasks are done.

 

In addition, the malicious code can leave a back door open for hackers to either intercept your personal data or enter your computer.

 

Spyware and adware can:

 

·         Install other programs directly on to your computer without your knowledge.

 

·         Send and receive cookies (messages given to a Web browser by a Web server) to other adware/spyware, even if your cookies are disabled.

 

·         Enable the downloading of images and data that can corrupt your computer.

 

·         Spyware also can add programs, sometimes referred to as Trojan horses, onto a computer to change data and preferences. For example, spyware can change or reset preferences with your browser favorites and auto signature, as well as install or uninstall other application programs. Some spyware programs can read, write and delete files, and even reformat the hard drive.

 

Back to top

 

 

Spyware Solutions

 

The key to solving the never-ending spyware problem is to continually analyze everything that moves between the computer and every external data source so that each threat can be detected before it installs. You can stop spyware code at the point your computer connects to the Internet by using readily available hardware and software options. Spyware detection productsessential in the support of safe computingare included in a resource list at the end of this article.

 

These detection products reside in the computer’s background by loading when the computer starts, and will scan every series of code received by the computer. In this way, potential spyware can be identified and eliminated before installation. Setting the software preferences can force a request when any program is about to be installedallowing users to stop installation of unwanted or unknown programs.

 

Computer users should use these detection products to scan every file on the computer’s hard drive and detect if any malicious spyware code got through the prevention fence. Such data can arrive, for example, from a Web site, CD or DVD that was accessed during some computing event.

 

Back to top

 

 

Warning Signs

 

There are warning signs that spyware is executing. The most direct sign is that the certain computer tasks suddenly slow down; Web searches, for example, may take considerably longer to run. By checking the task list of what is executing, you can reveal any hidden programs stealing Central Processing Unit (CPU) cycles. Other warning signs, that once observed must be diagnosed and addressed, include changes to your toolbars, favorites and preferences.

 

Spyware creators will not stop creating new, more dangerous intrusion products. Therefore, it’s safe to assume that each new threat will be better than its predecessor, and new, improved spyware products will be able to hijack all browsers (not just Microsoft) by watching Web surfing actions, and steal every user’s data.

 

In addition, as each new/updated electronic devicecell phones, PDAs, cable TV and other broadband connectionsexpand computing connectivity, you can bet that spyware coding will also expand to intercept these devices’ range of activities.

 

The bottom line is that PC security cannot be effective without more attention to spyware’s harmful effects. Computer users must remain alert and take every threat seriously. Anti-spyware program must be kept up-to-date in order to effectively handle each new challenge as potential threats appear.

 

Back to top

 

 

Anti-Spyware Resources

 

Software

 

CyberDefender

 

McAfee AntiSpyware 2006

 

PC Tools Spyware Doctor 3.2

 

Sunbelt Software's CounterSpy 1.029

 

Webroot Software's Spy Sweeper 4.0

 

All-in-One Security Suite

 

Panda Platinum Internet Security 2005

 

Symantec Norton Internet Security 2005 AntiSpyware Edition

 

Zone Labs' ZoneAlarm Internet Security Suite 6.0

 

Free Products

 

Lavasoft's Ad-Aware SE Personal Edition 1.06

 

Microsoft's beta of Windows AntiSpyware (Beta 1.0.615)

 

Safer Networking's Spybot Search & Destroy 1.4

 

Back to top

AICPA’s Top Technologies 2006 is a project of the AICPA’s Information Technology (IT) Membership Section, and led by the IT Executive Committee and CITP Credential Committee. For more information on the AICPA’s technology initiatives, including Top Technologies, the CITP Credential and the IT Membership Section, visit http://www.aicpa.org/infotech. Any hardware or software products mentioned do not in any way represent an endorsement by the Institute or Section.

Richard Oppenheim, CPA.CITP, has both used, and written about, technology for more than four decades. He currently provides advice through the Oppenheim Business Group, and can be reached at richopp@oppenheimgroup.com.

Copyright © 2006 by the American Institute of Certified Public Accountants, Inc., New York, New York.