What is spyware?
Spyware refers to any computer program that installs itself without the user's knowledge or consent and then gathers information on the user. These can range from innocuous items like cookies, which contain information on your previous visit to a website and are stored on your PC, to more insidious programs such as keystroke loggers that could potentially lend a helping hand to an identity thief.
Strictly speaking, many users don't consider cookies to be spyware. If you log into a subscription news website or into your webmail account, for example, the information can be stored in a cookie on your PC so you don't have to log in each time you visit. More troubling, however, are the programs that work in the background, quietly gathering information and reporting it back to marketing companies.
There are many types of spyware out there. A recent "State of Spyware" report from Webroot Software found that the number of portals distributing spyware has quadrupled since the beginning of the year, with up to 300,000 portals distributing spying software.
Although PC users are becoming more aware of the risks and have altered their surfing behaviour in an effort to stave off nasty intruders, spyware program makers are becoming more sophisticated in their efforts to avoid detection and removal. Spyware is big business - worth about USD2 billion annually according to Webroot Software - and if users get too good at finding the hidden programs, it could impact on spyware companies' bottom line.
Why should I be concerned?
Although some spyware is harmless enough - simply gathering data on a user's surfing habits rather than compromising confidential information - it can cost your business money. If the unwanted programs are using your PC resources silently in the background, it can slow down your machines and affect the productivity of your workers.
Some spyware creates pop-up windows which can contain viruses, potentially meaning a headache for the IT department and downtime for your business machines. It can hijack your browser, redirect you to an undesirable site and install bookmarks that would need some explaining should the company MD decide to have a look at your machine. At the very worst, spyware can steal confidential data from your desktop, or leave your PC open to exploitation by hackers.
However, don't get disheartened. A few simple tips can ensure that you and your business PCs stay safe and spyware-free.
How does it get onto my PC?
There are a number of ways spyware can infect your PC. The most common are:
- Through downloading freeware/shareware programs with spyware lurking inside.
- By visiting websites that distribute spyware software unknown to PC users.
- Through having vulnerabilities in your PC's software that allow spyware programs to run on your computer.
How can I guard against spyware?
- Download a couple of anti-spyware programs. Whatever one misses, the other may pick up. Try programs such as Spybot Search & Destroy, Lavasoft's Adaware or Spyware Blaster.
- Up your protection. Use antivirus software and a firewall (hardware, software or both) to control traffic into and out of your PCs.
- Scan your PC regularly for new threats. Spyware programs get de-listed from anti-spyware program databases and re-listed all the time, depending on how they behave.
- Once you've scanned your hard drive and removed any threats, re-boot your PC and scan again. Some of the more sophisticated spyware programs can re-install themselves when your PC is re-started.
- Keep your spyware killers and antivirus software updated regularly. New threats emerge regularly, so keep your protection up-to-the-minute.
- Most anti-spyware programs allow you to "immunise" your PC against known threats. It won't stop everything, but it can reduce the risk from some of the more well-known and most common threats.
- If you are using a web browser like Internet Explorer, make sure your browser security settings are at least on medium. Also, don't allow ActiveX applications to run automatically on your PC.
- Consider switching internet browsers. Spyware programs will often be designed to exploit holes in the most popular browsers. Some alternative browsers, such as Firefox, may not be as vulnerable.
- Read the End User Licence Agreements that come with new software before you install it. If you don't, you could unknowingly agree to install spyware.
- Limit the administrative rights you give your employees. Spyware is often hidden in seemingly innocuous programs, so ensure that all downloads go through the IT department.
- Ban peer-to-peer file-sharing services from your company PCs. Aside from the legal implications for your company if your employees share copyrighted material, many of these applications can come bundled with spyware.
Remember that prevention is always better than cure. Taking the time to implement the appropriate anti-spyware safeguards now can save you time, money and unnecessary worry in the long run.