Spyware Gets More Dangerous as Distribution Sites Proliferate
Posted by Andrew Brandt | Wednesday, October 12, 2005 10:36 AM PT
The state of spyware, according to security firm Webroot, is not good. That's one way to summarize the sharp rise in both the number of spyware applications and the volume of Web sites that distribute the malicious programs, according to the company's quarterly
State of Spyware report.
(Webroot's product, Spy Sweeper, was judged the best spyware remover in
our most recent review of these products.)
Most spyware--nearly half--originates from servers based in the US, according to the report, with the next highest percentage of spyware-distribution sites being based in Poland. Most sites host more than one spyware application, and some host hundreds of different pages, each of which can lead to a spyware installation if an unsuspecting user were to visit the site using a PC that lacks all of its security patches.
Among the most egregious spyware found "in the wild," the report describes CoolWebSearch, EliteBar, PowerScan, Look2Me, PurityScan, 180search Assistant, Clkoptimizer, Web search toolbar, ABetterInternet, and ISTBar as the top spyware threats.
Among the other interesting (and scary) statistics from the report:
- 80 percent of business PCs, and more than 80 percent of home PCs, have some form of spyware on them. (If that number seems artificially high, it's because Webroot considers everything from tracking cookies to password stealing Trojans as spyware.)
- About a third of business PCs and more than half of home PCs "showed a presence of adware" when scanned by Webroot.
- 6 percent of home PCs and 7 percent of business PCs had the most dangerous form of spyware--keystroke loggers--installed. 16 percent of home PCs scanned by Webroot's free SpyAudit tool had a remote-access Trojan--a program that lets crooks remotely control your PC--installed.
We're curious: What's your favorite spyware remover tool(s)? Do you stick to the free scanners, buy a commercial remover, or do you get rid of the stuff manually?
1. Ad-Aware has been v. effective on various machines I have 'fixed' for tech-unsavy friends and I trust the company.
2. Search and Destroy caused some issues and I got rid of it. Ad-aware doesn't find much on my main computer because of custom IE settings and I never download 'toolbars' (plus I use a real mode routine that empties cache and cookies and history and temp) -- aaw used to uncover Alexa in the registry after Microsoft updates.
3. Speaking of spyware, I have a question for PC World. Has PC World made a commitment to provide adware/spyware-free downloads like C|NET has done?
The spyware software I use has been the free stuff and I run 3 different ones, SpyBlaster, Adaware & Search&Destroy along with McAfee Firewall, antivirus.
I bought Counterspy about a week ago online-and then 3 days later I found that Spy Sweeper was Best Buy. I should have bought Spy Sweeper, as I originally aimed to get that because so many other sources reccomend that. But I am going to use both. The programs that I use are Spybot S&D, Ad-Aware, Microsoft Antispyware (Beta), and Counterspy. I will buy Spy Sweeper to add to my collection. I also like to take the CD I got when I subscribed to PC World and install every antispyware program on it to find anything missed by other programs. It is a great way to keep the system spyware free. But when you install them, be sure you have a registry checker handy so you won't feel the effects of errors and system slowdowns when you take them off.
I use Linux for web surfing and use Microsoft Win XP for games and other apps. I do not have a problem with spyware and adware because of it. I am not going to pay 200 to 300 dollars for a OS only to pay hundreds of dollars for more software just to keep it secure. I keep my programs backed up and am not afraid to reinstall windows if I start to have problems from viruses and adware. I use Sbybot, Adaware SE and I use AVG Antivirus and Zone Alarm. I feel sorry for all those people out there who get duped into thinking they have to spend hundreds of dollars and countless hours to keep their pc's secure.
I run SpywareBlaster, Spybot-Search & Destroy, AdAware along with, AVG anti-virus. It seems what one doesn't catch the others do.
I also run the free online scan that Trend Micro offers at housecall.trendmirco.com, at least once a week.
In the past I used a combination of Spybot-Search & Destroy and AdAware. But after switching over to Firefox (cookies allowed only for certain email sites and those too sessional, same for javascript), I hardly find anything showing up in scans. So I'm using only Spybot-Search & Destroy currently, but recommend both programs to friends whose PCs are filled to brim with spywares.
I work with PC World's downloads team & can say that yes, we absolutely scan our files for spyware. before a file goes up on the site we install it on a test machine while a couple anti-spyware / firewall utilities are running. we always run ad-aware, zonealarm, and microsoft antispyware; we're going to start running spy sweeper, as well. incidentally, you might have noticed that recently a fair number of "unreviewed" files have been added on our site. although these files haven't been evaluated by pcworld editors, they too have been scanned for spyware.
Microsofts giant antispyware is picking up a good plenty of stuff Spy sweeper isn't getting and vice versa. Seems like the two are a perfect pair. Ad aware doesn't seem to pick up as much. If any of these.
I've run Command AV and ZoneAlarm on a business network with 10-ish machines for several five years - with excellent results. Have tried most of the popular spyware software, but would prefer an ingergrated approach. I'm currently evaluating ZoneAlarm Security Suite on my main machine. I figure they will get the integrated suite to work well first, as they already know how the OS works. Other than not recognizing some obvious software, it has been flawless on XP Pro.
I've run Command AV and ZoneAlarm on a business network with 10-ish machines for several five years - with excellent results. Have tried most of the popular spyware software, but would prefer an ingergrated approach. I'm currently evaluating ZoneAlarm Security Suite on my main machine. I figure they will get the integrated suite to work well first, as they already know how the OS works. Other than not recognizing some obvious software, it has been flawless on XP Pro.
I am running Windows OneCare Beta Version. So far it is a fantastic program for an all in one program. The firewall seems to get the traffic and the anti virus portion works well so far. It does the backups for your PC you schedule the time and date. It does complete system tune ups; note a little slow but very complete. When this comes out on the open market I would recommend it to anyone wanting an easy to use anti-virus suite.
I am running Windows OneCare Beta Version. So far it is a fantastic program for an all in one program. The firewall seems to get the traffic and the anti virus portion works well so far. It does the backups for your PC you schedule the time and date. It does complete system tune ups; note a little slow but very complete. When this comes out on the open market I would recommend it to anyone wanting an easy to use anti-virus suite.
I have a side business going into peoples homes to fix their computers. I normally use Microsoft Antispyware, Spybot and AdAware. For nasty problems, I will run Ewido Security Suite.
Ever since Ad Aware caved in to the threat of legal action and removed several alleged 'spyware' companies from its definitions I have had some doubts about it.
I had several issues with Spybot, and eventually uninstalled it because fixing all the problems wasn't worth the poor results it gave me anyway.
When I tried Micro$oft AntiSpy it decided to disable some of my programs (which were harmless) without telling me, so I use Webroot's Spysweeper and I'm very impressed.
I'm using Sygate Firewall at the moment, but now that 'Bloatware' Symantec apparently own Sygate I'll be replacing it very soon.
Avast antivirus, is, in my opinion one of the best of its type around and reacts very quickly when under attack.
I have been running different spyware and malware removal tools and I even used Avast anti-virus and PCCillin as well on all of my machines as someone mention "what one don't get the other will".
I have tried the pay for copies and the results were nil in removing any spyware and virus's and freebies does the job much better.
What I want to know who gave them the right to put thier spyware in my machines without my permission in the first place?
I would like to see a tool that will remove spyware and malware and virus's completey and keep them out or the companies that install them w/o permision to pay for the recovery of lost files from having to reload an o/s again.
I find that Linux live cd's are the best defense against these intrusions because you are running from the cd not the hard drive so where are they going to put their "JUNK" at?
As far as Norton goes it is junk and does more harm to a machine than good from my experience I had with it.
If they would see what they are costing us just to do online shopping or research and the cost of all of time lost in removing their spyware and ECT. then they would put a stop to it but they are blind.
I use most of the afore mentioned..Spybot, Ad=aware,
AVG Antivirus, Avast, Zone Alarm..
Also I DO NOT use I.E. or Outlook express or IM.. but do use Firefox & Yahoo & Google & Netscape..
Originally had MacFee & a trial issue of Symantec that was most irritatinng & difficult to get rid of..
Most important I feel is not opening any unknown mail or strange sites.. ..Had one virus many years ago..It was "Happy New Year" that my Son gave me.. TJH
P.S. To add to the above..All of my protection is free..The interruptions they cause in PC loading are part of the price we pay for something we do not invite or cause and while productive in a negative way they are irriitating in the need for constanent updating..Avast is the only one I use that furnishes automatic upodating even though Avast puts out ample notices of same..Possibly others could do the same....TJH
maybe i am getting a little paranoid. i have the 2005 Norton Internet Security, SpySweeper,SpyBot, WinPatrol and Window Washer installed in my pc. i run sweeps at the end of each session before shutting down the pc.
A request for input please: Does running multiple spyware applications cause conflicts resulting in general system operation problems. Note any specifics you've experienced please. Also, Is there a way to avoid removing cookies which allow access to trusted sites I visit frequently. Any suggestions on specific apps appreciated. Thanks.
warren, yes.
use firefox (for trusted sites/cookie problems/issues)
multiple spyware apps. no.
just dont run them at the same time.
when doing a scan, make sure the other stuff is off
ie - running spybot, turn off MS's (microsofts) anti-spyware program (since most of the time it runs in real time protection mode)
same goes for anti-virus programs.
I got SpyAxe recentky, with a nasty ballon popping up from the task-bar, saying "Your PC has been infected ..."
Yeah right, and the "infector" was no other than SpyAxe.
Used the logo from Windows Update, with continous re-directs to SpyAxe homepage.
Presumably for money this altruistic company would let me download software which could remove the "virus".
Used more than 5 hours, using 5 different tools, to remove it.
SpyAxe has acknowledged that "one of their distributors" had used the "wrong" sales strategy.
Somebody should sue the bejezuz out of them.
I had planned to buy ebloc.com's anti-spyware, as it had been recommended by the Computer Show on KABC radio. When I discovered that it is only available as a download with an unencrypted server, I decided against this. I had Spy Sweeper on my previous computer but did not like it. I am going to go with Aluria's Spyware Eliminator as I was told it identified and quickly removed all spyware, and provides features not seen in other applications. Aluria offers an interactive 'Spyware Retrieval Service' that is a pro-active opt-in voluntary service during installation that allows Spyware Eliminator to identify suspicion software on your computer that is not currently in their spyware database. It has a Rollback feature so if you decide to remove a program that was identified as spyware and it prevents something from functioning correctly you can quickly, and easily, rollback to working condition. This removes the risk of removing questionable spyware programs.
Very simple installation process. Scans extremely quickly and provides an estimate of how long scan will take to complete. You can perform other tasks while scan runs.
Support includes a toll free Spyware Hotline that you can call free of charge. This is an extremely hard option to find with software, especially of this type.
is there a way to get spyaxe (takes over home page, installs popups, makes popping sound, offers soution for money out of my putor? it seems immune to avg, spysweeper, spybot and adaware. thanks, phil
No real solution yet for spyaxe. I think spyaxe has recently changed their software so that it can't be removed the way it used to. Norton Antivirus doesn't detect it either.
I thought that I had sucessfully removed Spyaxe using ADAWARE PRO (I managed to get my home page back too) - But it came back - any more suggestions ?
I use Aluria with Spyware doctor. But i haven't found a 'perfect program yet' I tried webroot for long time but slowly lost faith with it. But. for anitvirus programs NOD32 IS BRILLIANT!! so small, fast and updated quicker and easier than most I've tried
I use spybot, counterspy, pest patrol, adaware and ewido security suite BUT spyaxe still got in.
I have been trying for 16 hours to remove it, but it just wont go. Perhaps we should all get together and SUE THEM.
The following worked for me:
Credit for the below fix belongs to Noahdfear
The lastest version of Noahdfear's Smitfraud Removal Tool now works to also fix SpyAxe problems.
Please download smitRem.exe and save it to your desktop but do not run it until indicated.
It is necessary that you Close all other programs and windows including this one. So you should print or save these instruction locally in a text file for easy reference while offline.
Double click on smitRem.exe and then click on Start. When it is done, click on the OK button. You should now have a folder called smitRem on your desktop.
Next, please reboot your computer in Safe mode
Once you have booted in Safe Mode and your Desktop appears, make sure you close any other windows and only run what is specified.
Open the smitRem folder on your desktop and double click the RunThis.bat file to start the tool.
Follow the prompts on screen and wait for the tool to complete and disk cleanup to finish.
When the tool is finished, it will will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or the partition where your operating system is installed. Examining that log should show that the infection was cleaned.
Now reboot your computer into Normal Mode.
Please post the contents of the smitfiles.txt file here in your next message along with your current status.
If you are still having problems, you should work thru standard cleaning procedures given in this Sticky thread READ & RUN ME FIRST Before Asking for Support
I used Spy Sweeper, now M'soft Beta and Ad-aware as what is missed is usually picked up by the other.INPUT REQUIRED- regarding Alexa: After looking at various websites it seems to be harmless spyware is this fact or fiction?
SUE SPYAXE SUE SPYAXE SUE SPYAXE SUE SPYAXE!!!
SpyAxe has caused alot of trouble for alot of people. I'm trying to put together a class action lawsuit against them. If you are interested in being a part of this, visit http://suespyaxe.blogspot.com/
It's a communal blog where useful information is provided with your help. It's brand new today, so help me get this going.
smitRem did not work for me, tried it multiple times, and followed the instructions to the 'T'. Spyaxe returned each time. Had to restore from an image backup taken 3 days ago.
Download a program called moveonboot and install it. It is free, and was 100% effective in totally getting rid of all spyaxe related files. For more info, go to http://suespyaxe.blogspot.com/
Weeks after my infection, SpyAxe continues to engage in illegal advertising. Legal action must be taken against them. Help us to build a clas action lawsuit against spyaxe and/or the responsible parties at hand.
Report SpyAxe to the FBI.
It takes about 20 minutes or so, but if you have been hit by SpyAxe and their illegal advertising tactics, you want to see them in prison too!
suespyaxe.blogspot.com
I was infected by Spyaxe on December 3rd, 2005.
I immediately purchased Webroot Spysweeper. It removed it completely. I would also recommend purchasing Webroot Window Washer.It bleaches files that you delete so that they are unrecoverable. I no longer have a problem with Spyware. I run Spysweeper with Microsoft's Window's Defender, and AdAware by Lavasoft. Works great!!
Meh.
You can say what you will, but as a tech working in a large retailer, I see a couple hundred PC's a week coming in with issues, and I'd say 80% of the time it's a software issue, it's a direct result of some sort of spyware/virus infection.
SpySweeper (Webroot's product) is the best, BY FAR, at removing every threat the FIRST time around, with no need for repeated scans, reboots, and alternative programs to back it up.
I don't use an anti-virus or -spyware program on my own system, but if I did it'd be SpySweeper.
Three phrases should be among the most common in our daily usage. They are: Thank you, I am grateful and I appreciate.