IT@TT - Online

Debunking Spyware

There's a more insidious threat lurking on the Web. Spy ware is the generic name given to certain components of the many ad-ware (advertising-supported) utilities we download from the Net. These components meticulously track surfing habits and the time spent online. But instead of fulminating against such products, I bring you solutions to identify and remove them.

I sincerely recommend to readers that you download and install these utilities immediately. You also need to consider whether you really need that full bells-and-whistles app that uses ads to proffer full functionality. Or can you manage with fewer, core features, and stop being so promiscuous with information online.

Gibson Research (www.grc.com) fame has developed some excellent utilities: OptOut, ShieldsUp, LeakTest and most recently PatchWork. All these help you discover if your PC is really being so promiscuous to leak data out over the Web. OptOut was one of earliest ad ware detectors is no longer available.

ShieldsUp is an online test (https://grc.com/x/ne.dll?bh0bkyd2) that tests your shields and also probes your PC's ports from a remote server. I found that my Win98 PC's POP3 (Port 110) and NetBIOS (Port 139) were open. Port 110 is usually open if you have an antivirus to scans incoming email. The second is part of Windows 'friendliness'. To block both, consider installing a personal firewall. Tiny Software's Personal Firewall (www.tinysoftware.com) is an excellent choice. If you really value your security don't ever trust your ISP or even the company network unless your system administrator is an ex-hacker.

LeakTest (27 kB, Windows, free, http://grc.com/files/LeakTest.exe) checks if your PC is open to nasty business and is leaking information out over the Web. It's an invaluable tool to verify if there is any level of protection on your dial-up (ISP) or company network. It also helps check if your firewall is working properly.

PatchWork addresses the recent US scare that several Eastern European hacker groups were targeting Internet-connected Windows NT/2000 systems. PatchWork scans disk drives for files known to be used for system intrusion. It also checks for specific file names and types discovered by the FBI. Patchwork (30 kB, Windows, free, http://www.cisecurity.org/tools/patchwrk.exe) has been released through the Centre for Internet Security. If you use Windows 98 Second Edition or Windows Millennium Edition, I recommend that you download and use the utility.

To detect and remove spy ware from your PC, use Lavasoft's Ad-Ware (http://www.lavasoft.de/aaw/adaware.html). This freeware scans your PC for Web advertising products like CometCursor, OnFlow, TimeSink, Alexa, Aureate, Cydoor, Doubleclick, Flyswat, Gator, Web3000 and Webhancer. And even prepares a report listing programs found, Registry entries (if any) and file locations. You can then choose to delete a program or let it remain. The utility is very fast and a scan of my PC took under a minute. It revealed Cydoor, Doubleclick (in a cookie), Gator and Web3000 spy ware. I was aware the first existed; it's the ad app used by my Babylon dictionary. But the host apps for the other three I had deleted a long time ago! There is also a enhanced version, Ad-aware Plus that monitor your system in real time. However, this is only available after paying USD12.

Govind Menon
[email protected]

Top

Other Articles