How to not get spyware with MS Windows (usually).

i386

Captain
Joined
Aug 24, 2004
Messages
3,548
Motivation

Spyware/Adware/Malware is really about one thing. Money. We as consumers are constantly having our habits studied by marketing types so they can sell us more stuff.

So what are these things doing on my computer? Essentially this:

1. Monitoring the web sites you go to.

2. Sending this information back to marketing companies to either use or sell. Information collected from various sources can be collected and merged into larger databases. If you understand the technology, it's pretty scary.

3. Strategically popping up ads for things they think you might buy based on the information they've collected.

How does this crap get on my computer?

1. Bait. You download a game, screensaver, wallpaper, porn etc... And you get something with it you didn't bargain for.

2. Exploiting MS Internet Explorer. This is a big one. There are features of Internet Explorer that can be exploited to get bad stuff onto your computer without you knowing. In some cases, all you have to do is go to a web site.

3. Fear tactics. Sites will claim that there is some immediate threat to your computer and by downloading their program or letting them scan your computer you can fix the problem.

4. Click Trickery. Things pop up that are made to look as if it's a message from Windows and not the web site you're at. Animated images that appear to be a game embedded in the page. The unsuspecting visitor think's she's about to play a friendly game of whack the chicken with a hammer and ends up not playing a game but on some other web site.

How do I avoid it?

ALWAYS, ALWAYS, ALWAYS try to figure out the motives of the site before you do anything.

1. Bait. This normally comes in the form of some sort of free stuff. Often these sites will be obnoxious and filled with popping up, blinking, scrolling and doing everything imaginable to get your attention. This is because they're DESPERATE to get whatever crap they have onto your computer. Sites that generally have just have something free do not display this behavior. It costs a lot of money to make those eye catching sites. Often the sites with good free stuff are not so fancy. We love our wallpapers. Be aware that wallpapers are just image files like .jpg or .bmp images. It's that simple. You don't need to install any software to get wallpapers. If they try to pull that on you, it's more than likely a trick. All you need to do is right-click a picture to set it as your wallpaper. If there's anything else involved they have ulterior motives. Screensavers. We love 'em, but they're often bundled with spyware. Again, try to discern the motives of the site. Try to tell if they're desperate for you to get what they're offering.

2. Exploiting Internet Explorer. I'm not going to stop preaching this. It's your choice, but I recommend you don't use it. Use Firefox or some other alternative. They are not perfect (nothing is) but they don't have nearly as many problems as IE and they have better features too.

*** Some sites are made with proprietary Microsoft technologies and will only work with IE. You are more likely to run into this problem at work than at home. You can still use IE to access these sites.

3. Fear Tactics. This one's easy. If some site is telling you you're infected with something you need to be asking yourself this: How the heck do they know what's on my computer? There's only 2 answers I can come up with. They really don't know and are trying to scare you. They have illegally obtained information from your computer (highly unlikely). In either case you don't want anything to do with them.

4. Click Trickery. These vermin will do anything to get you to their site. Don't fall prey to their tricks. Consider the motives. Watch your mouse pointer as you hover over things. The pointer changes when it hovers over a link. For example you see a yes button and a no button in a "window" but your mouse changes when it's over the window itself. There is no button! Clicking anywhere will take you to another page. If they've got to trick you to get you there, don't expect them to suddenly get honest once you're there. When you mouse over ANY link, before you click it look at the name of the site. It will show up at the bottom of your browser window. Often you can make an intelligent assessment of the site's intent just by looking at the name. Do the same when clicking results from search engines. If you're on a site that has such trickery, you really shouldn't patronize that site either.

-= BONUS =-

SPAM. If you're the type that must read every email you get at least do this. If the subject doesn't have anything to do with the message itself you are being deceived. Do not go to their site. And NEVER NEVER NEVER buy anything from them. Spam is effective because someone DOES buy their crap. Don't support companies that use deception to lure you to their site.

ALWAYS, ALWAYS, ALWAYS try to figure out the motives of the site before you do anything.

I don't use any anti-spyware utilities on my computer. I don't have spyware.

Good judgement is the best defense you have. Learn to figure out the motives and you'll be well on your way to having a better experience online.
 

18rabbit

Captain
Joined
Nov 14, 2003
Messages
3,202
Re: How to not get spyware with MS Windows (usually).

i386 said:
Motivation

I don't use any anti-spyware utilities on my computer. I don't have spyware.


If you aren’t using spyware utilities, how would you know you don’t have spyware?

I thinkn it is foolish not to run checks for spyware. Consumer Reports thinks so, too. Fwiw, CR is very active in creating a secure and safe internet including rating websites and certifyig them free of spyware.
 

i386

Captain
Joined
Aug 24, 2004
Messages
3,548
Re: How to not get spyware with MS Windows (usually).

18rabbit said:
If you aren’t using spyware utilities, how would you know you don’t have spyware?

Good question. For one, I'm a professional in the field. I have spent hundreds of hours getting this stuff off computers. I am also very in tune with what's going on with my computer. I know the signs to look for. Sudden loss in performance would prompt me to check things like strange background processes or entries in the registry causing programs to launch automatically upon startup. If you know what to look for, you don't need these utilities to know if you have the stuff. They sure are handy to help you get rid of it though.

I think the average consumer SHOULD run some type of Anti-Spyware application.

That's my opinion and I've had good results. I think Xcuseme also works in a similar field so if he weighs in it'll be interesting to see his views as well.
 

Xcusme

Commander
Joined
Apr 21, 2003
Messages
2,888
Re: How to not get spyware with MS Windows (usually).

Oh Gawd....where to start.......there's really a lot folks can do to help prevent becoming a victim of online scams. I personally think there's No Free Lunch. If you're getting a 'free' program from the Web, look very closely at what's offered. Folks should really read the EULA (End Users License Agreements). Often in that document, you'll see that you are agreeing to permit the program to track information and transmit it out of your machine. The sad part is, they don't always tell you , even in the EULA, what's going to happen. Using a soft firewall program can help watch what enters AND leaves your machine. ...........

You know, as I type this, it occurs to me the enormity of the task at hand to even outline steps to help stay out of trouble while online. The object is , as most folks will find out, is to prevent problems before they happen. Cleaning up a Windows box is often more difficult than preventing the problems in the first place. It takes some basic common sense (not too common , BTW) and a change in the way folks 'see' the Web. The Web can be a very hostile environment and steps must be taken to stay below the RADAR of malware and block out the bad stuff. I've pretty much figured out that there are basically 2 types of folks using computers, those who take the steps before hand to learn safe surfing and those who don't . Those who don't have repeated problems because they don't modify their thinking and take the steps to help prevent the problems in the first place.

Awhile back I received a computer with classic symptoms of severe spyware and trojan infestation. I cleaned out the problems and explained the 'why' it got so bad. Turns out, her young son, clicked on everything that popped up, used bad P2P programs, copied files with his friends thru IM's etc. I replaced his applications with safer versions and explained the steps to help prevent this from happening again. All was good for a week, yup, one week. Mom called back to say the machine was again, taking a long time to boot up. She asked if I could check it out again. I noticed that nothing had really changed with Jr's behavior online. He reinstalled the bad programs and didn't change his attitude. Long story short (I know..too late) I again cleaned things up, installed the safe programs and gave Jr a limited login and password to his own machine. Jr wasn't too happy, not being able to install programs and basically administer his own computer, but that's the price to be paid to keep the kids from trashing their machines.

Along with the good advice offered by i386, I'll add a few more suggestions:

Use a router , turn off Upnp in the router, change the default password, limit DHCP IP assignments, turn off ICMP pings.
If wireless, turn on Encryption, use WPA with at least 8 characters, mixed Alpha-Numeric passphrase, no dictionary words.
Dump Internet Explorer
Install a good soft firewall
Stay up to date on Windows updates
Close unused Windows processes
Use a login and strong password to launch Windows
Rename the Windows Administrator account, add a strong password to this account
Login using a NON-Administrator account, switch back to the renamed admin account to install-administer the computer, then switch back to the normal restricted account for everyday use.
Scan every file that comes into your machine.
Use email filters in your email client program
Turn off HTML emails
Configure your email program to use SSL connections to and from the mail server.
Laptop users, use a VPN solution at public websites
Sandbox your Windows programs, Google Sandboxie

This could go on for a long time.....but for now, start looking at ways to change the way you look at the Web and how to prevent problems before they happen.
 

18rabbit

Captain
Joined
Nov 14, 2003
Messages
3,202
Re: How to not get spyware with MS Windows (usually).

Between the two of you I don’t have a life anymore…will be spending the remainder of my days on earth just trying to secure my un-securable computer.
:(

Sandbox is interesting stuff. I like the idea. I’m guessing it works thru a separate patrician on the HDD? Will definately be looking into this after the s/w reload.

I printed this thread. I need to reload s/w on my laptop so after I do I am going to go step by step thru every recommendation here (setting up the non-admin acct is going be a learning experience) and I am going to implement each and every one of them. Surfing the web via VPN while sucking down java at Starbucks might be challenging, too. We'll see.

BTW, both of you guy (and another or two) have contributed a ton of extremely helpful info since becoming members of this forum. Just want you guys to know it does not go unappreciated. I read your replies to other members comp-u-problems and learn from them, too, more as preventive info, but it’s all good and it’s all helpful. Thanks!!!
 

BoatBuoy

Rear Admiral
Joined
May 29, 2004
Messages
4,856
Re: How to not get spyware with MS Windows (usually).

Wonder where roscoe is with his typical Apple comments.
 

ZmOz

Captain
Joined
Aug 13, 2003
Messages
3,949
Re: How to not get spyware with MS Windows (usually).

Every time I start my computer XP tries to scare me into thinking my computer will explode any minute. I don't have any anti spyware/virus/firewall software and my drives are all shared without passwords with a completely open wireless network. ;) I've only had a virus once and that was when windows 95 was still cool. It's just a matter of not falling for the hacker's tricks.
 

Plainsman

Rear Admiral
Joined
Apr 2, 2006
Messages
4,062
Re: How to not get spyware with MS Windows (usually).

One thing to remember is most people want cool desktops and screensavers, So they go to the free sites and download and install them. What I tell folks to do is after installing their programs, run spybot or ad-aware immediatly. Some do and some don't, those that don't bring it back to me to clean up again.

If running a wireless network, hide the sid (network name) on your wireless device. Nothing is fool proof, but the harder you make it for someone, the more likley they will look elsewhere.

Just my 2 cents.
 
Top