WP: FTC to Look Closer at "Spyware"

[DeepModem Mom]

FTC to Look Closer at 'Spyware'
Privacy Experts Warn of Dangers to Unwitting Consumers

By Yuki Noguchi
Washington Post Staff Writer
Monday, April 19, 2004; Page A04


A relatively new kind of software that resides in many computers and tracks its users' Web-surfing habits or triggers pop-up advertisements has come under scrutiny by federal regulators who have already cracked down on deceptive or misleading spam.

The Federal Trade Commission today is hosting a daylong workshop in Washington to discuss the effects of hidden software that may be used to control or spy on a computer without its user's knowledge.

So far most "spyware" and "adware" programs, often placed on Windows PCs by such downloaded programs as file-sharing programs, appear to have been used for the relatively benign purpose of tracking consumer preferences, said Howard Beales, director of the FTC's consumer protection division. The FTC is watching to see if criminals start making widespread use of this technology to steal credit-card and Social Security numbers of unwitting computer users, he said.

"So far (we) haven't thought that it warranted regulation," he said.

Privacy experts and makers of anti-spyware software say the FTC's light-touch approach leaves too many consumers vulnerable to more unwanted advertising or even the addition of controls that consumers might not realize are on their computer....


http://www.washingtonpost.com/wp-dyn/articles/A22514-2004Apr18.html

[tkmorris]

1. The FTC is completely full of shit

First of all the comment that spyware is "often placed on Windows PCs by such downloaded programs as file-sharing programs", is just stupid. Programs like Kazaa do install spyware, but so do thousands of other programs developed at the grass-roots level and distributed freely. The coders look for ways to get paid, pure and simple.

But most spyware doesn't come from these sources. The worst certainly does not. If Kazaa were to install some of the nasties that I've gotten elsewhere on my computer no one at all would use it. The worst spyware comes from innocuous seeming websites, the kind you will click on from a Google search and *BOOM* pop-up land and script download into the old web cache begins. I have enough anti-hacking tools on my computer to do battle with the mothership from ID4.

The FTC's real problem is that they are completely powerless to stop spyware. They have no power overseas, and even within the US the amateur website divas out there are reinventing the wheel every other week. To secure the Internet would mean killing it. Even then black-market style connections would spring up, connecting directly to nodes overseas that would remain the anarchist wonderland that the Web is today.

Besides, the FTC does not want to interfere with the spying being done by mainstream businesses in order to gather marketing data. The FTC is a tool of the corporations, not a friend of the consumer, and as such they have a vested interest in allowing spyware to continue. Their basic problem is that they want spyware to exist, but only spyware THEY approve of. I'd rather they go off some place just get high, I'll handle the spyware myself thank you very much.

[plurality]

4. Kazaa does install some pretty nasty malware

The last, and believe me it was the last time I used Kazaa it installed vx2.betterinternet on my machine. If you're not familiar with that little bastard let me fill you in. It's adware that downloads other adware everytime you boot your computer, plus it embedded itself so deep into the OS that I couldn't find a single adware killer that would get rid of it. I had to wipe my OS clean. So no more Kazaa for me, I'll only use Kazaa Lite, none of the bullshit.

[Occulus]

9. Don't use Kazaa

that thing is watched. Closely. Get Overnet, Limewire, Bearshare, or something else.

I won't use any flavor of Kazaa. Period.

[tkmorris]

2. And ANOTHER thing

If the FTC really wants to eliminate spyware they could start with these stupid supermarket cards. You know the ones I mean, the cards that enable you to acquire groceries at something resemblimg fair market value instead of the ridiculous "list price" you'd pay if you didn't sign up for the stupid card.

You know what that card does? It tracks every single purchase you make, enabling companies to send you better tailored junk mail. There's a reason they ask you for your email addy on the form too, can you say SPAM boys and girls? Sure.

The FTC doesn't give a flying FIG about spyware or data-miners of any other sort. The only thing they care about is protecting large corporate interests. American corporate interests. They pay taxes after all right? Oh wait, no they don't. Well, they are American after all, even if they ARE headquartered in the Cayman Islands. Aw hell, they donate to political campaigns in American dollars. There. Good enough.

[ZR2]

5. The nice thing about those cards

is that nobody in thier right mind ever puts thier true name,address, or email address on the application.

[Streetdoc270]

8. Latest trend,

Since the 'Do not call list' is when a casheer asks for your phone number when making a purchase. This makes you an established customer and now the company can use your info for telemarketing!

[bucknaked]

3. These programs piss me off to no end!

They saturate your machine with this crap and totally chokes the cpu. How the hell do these companies believe that anyone would buy or use their services via these tactics?

Nowadays, I give my machine a monthly enema and write all pertinent files to cdr.

[Gman]

6. Another solution

Start--> Run --> taskmgr.exe Click "Processes" and start killing anything that shouldn't be running.

[Cronus Protagonist]

12. That won't work

I make a living clearing that shit off computers. Most of the time you either can't kill the process or it comes back when you reboot. It takes a lot more than that to clean spyware off your computer, and the worst is very difficult and takes more than an hour per computer for several reboots and registry changes.

http://brainbuttons.com/home.asp?stashid=13

[donsu]

7. what about the spyware pop-up that says you have a spy in your pc?

and if you will download their product, for free, they will hunt out the spy and get rid of it, all for free?

I know I have a spy in my pc, but don't think they are tracking what I buy. think they are tracking what I say.

I don't trust this free spy thing.

I'd rather leave the spy in my pc. and wave hello to them everyday

[nolabels]

11. This one does not do that, work well and done by an independent

Asks for a donation, but has free download (I donate) Also has a few ad on programs to help.

http://www.safer-networking.org/

It's called Spybot S&D

[mulethree]

24. Bull I think

If we're thinking about the same thing, you get popups warning you that your computer isn't optimized, or your internet isn't or your computer is unprotected or that you have spyware.

I looked at numerous of these in order to block them out. So far none of them has been anything but a normal pop-up ad. They haven't tried to load an activex or any other kind of program that could actually look at your computer and tell if you had any of the problems they mention.

I've never downloaded their stuff so I can't say whether it is any good or not.

Try Ad-aware (shareware, from http://www.lavasoft.de/ )
recommended by EFF http://www.eff.org/Privacy/eff_privacy_top_12.html

[BattyDem]

10. Don't wait for the government to do something ...

You can take care of spyware and adware yourself. :)

Spyware Information and Tips
SpywareInfo.com
SpywareGuide.com
SpyChecker.com

Spychecker.com's "Anti-Spyware Tools" section provides descriptions and download links for all the programs I mention below.

I'm familiar with all of these programs. I've used them and/or I have friends who've used them. They all work pretty well.

All programs are freeware unless otherwise stated.

Spyware Blaster

SpywareGuard

Spy Sweeper $29.95 (Free trial)

XP-AntiSpy

HijackThis

Browser Hijack Blaster


These are the programs I currently use, which have done a great job at keeping my system spyware, adware and virus free:

Ad-Aware Standard Edition

SpyBot S&D

PestPatrol (Free trial) $39.95

ZoneAlarm - Free version or Pro Version, which costs $49.95 and includes Pest Patrol as a free bonus!
Free Version is just a firewall
Pro Version has many more features including:
-- Inbound and Outbound email protection
-- Cookie Controls
-- Ad Blocking
NOTE: I use the Pro Version

Don't forget ... always use anti-virus protection and make sure you download the latest updates!

I hope you find this info useful. :)



edited for spelling

[nolabels]

13. Kick

You seem to be up on this stuff, which program do you like the best?

I really have no illusion about people prying info off of things I encounter, but do like to minimize it just for the fact it takes up a lot of time and space unnecessarily. Just like DU is like a crash course in politics where can learn things quickly. A lot of this computer software operates in the same way. That is why I ask?

[BattyDem]

14. About my setup ......

The four programs I currently use are the ones I like best ... and I've tried a lot of different programs and combination of programs, including many that aren't on the list in my previous post.

Both Ad-Aware and SpyBot S&D will find/eliminate spyware and adware. Both include "undo" features, so if you remove something and a program doesn't work, you can put the files back if you want. Sometimes one program won't catch something, but the other will, so that's why I use both - it's sort of a safety net. :) Also, SpyBot finds files that aren't connected to any programs (files leftover after something is deleted), it'll clear document history files (lists of recent documents you've opened), and other bits of tracking information that's stuck in your computer.

PestPatrol also finds spyware and adware, as well as keylogging programs, system memory and cookies. What's good about PestPatrol is that it constantly runs in the background, so it actually prevents a lot of spyware/adware from being installed in the first place - it's great for those times when you visit a website that tries to install something without your knowledge.

ZoneAlarm Pro - is a great firewall! It's very easy to configure and use, but it also has a lot of customizable features for advanced users. It prevents programs from "phoning home" and/or connecting to the internet for any reason without your consent. It automatically quarantines email attachments so they can't do any harm. You can scan them for viruses before you open them. It prevents popups and cookies; it alerts you to all inbound and outbound internet traffic, and you can trace the source of that traffic. Every program on your computer can be individually configured, so for example, if you want Netscape to be able to send email, but you don't want Outlook to be able to send email, you can do that. If you have a home network, you can have different security settings for the home network than you do for the internet. It can also clean internet cache files, the recycle bin, temp files, etc. Lots of great features!

I use McAfee VirusScan as my virus protection. It is updated at least once a week.

This setup has kept me "clean" for two years. It's great! :D

[nolabels]

15. That is interesting, using Ad-Aware and SpyBot S&D together

I had used Ad-aware before, but found it missed a few things.

I have been using Norton Anti-virus for quite a few years though, I guess they all have their good points with the anti-virus programs, and if you have experiece with the worms you would know the anti-virus programs do nothing for them, but you got to have them. I did lose one hard drive about ten years ago from one kind of virus from eastern Europe

ZoneAlarm I use also. I wish I was still in my twenties and had lots of time time to experiment with software, but middle age seems to make you go with the things that are quicker to do. The best software I have come across in while is "Norton Go Back". It has got me out of many a bind

I dislike being a slave to micro-crap, but Linux sounds like a long learning curve. So I go with what I know

And lastly I don't know what you use for a search engine (my guess Google would be one) There are lots of them but one good one Elsewheresdughter let us in on is at

http://www.copernic.com/

They have free version, I liked it a lot and upgraded to the personal version

Thanks for the tips

[mouse7]

16. Ad-aware gets almost everything, but Spybot is nice to have, too.

I run Ad-aware about 3 times a week, and Spybot once a month. I never have any of those annoyances.

I use Sygate Personal Firewall for my firewall and AVG for anti-virus.

Don't pay a dime for any of it.

[Avalon Sparks]

17. My setup~

I purchased "Ad Aware" for 20 bucks to kill popups and it's wonderful.

Spybot seems to have removed every piece of spyware I've encountered - I use it once a week.

Another thing I do is reset my computer back several days with the "System Restore" feature if I get any nasty spyware. It seems to work too at getting rid of it.

[nolabels]

19. When I first found Ad-Aware a few years ago it was Freeware

Have not looked at the latest version, guess I will go check it out :hippie:

Norton System Works Professional Edition also has a version that takes your hard drive back multiple levels of earlier times, it's called "GoBack". It's been around for awhile, so the Bill gates gang probably stole that too. Mostly you find original versions work better though

Microsoft has stole so many things and ideas from other people, that I would be surprised if they invented anything new. Norton has their version of many things that Gates Gang stole, copied or even sometimes bought the rights into (after they were going to get sued for copyright infringement). Which just goes to prove it don't matter what you got, but how many lawyers you can put on the case to legally take from somebody against their will.

If the US had real court system, Gates would be broke just about this time.

On edit: syntax, syntax, syntax arrrrrrrrrrrrrr :argh:

[BattyDem]

20. Ad-Aware Standard is still Freeware

There's a "Plus" version and a "Pro" version that offer things like real-time monitoring.

[bonemachine]

18. I've heard WinMX

is the most secure, anonymouse file sharing program.

[MisterP]

21. anonymouse?

;)

[tableturner]

22. The definitive, brief anti-spyware guide

For maximum protection (everything listed below is free):
The following three prevent the installation of most forms of spyware.
Spyware Guard:
http://www.wilderssecurity.net/spywareguard.html
SpywareBlaster:
http://www.javacoolsoftware.com/spywareblaster.html
IESpyad:
http://www.staff.uiuc.edu/~ehowes/resource.htm

Also use Spybot S&D and Adaware to get rid of the instances of spyware that get past the three programs above. Each catches some items the other misses.
Adaware free edition:
http://www.lavasoftusa.com/software/adaware/
Spybot S&D:
http://www.safer-networking.org/index.php?page=spybotsd

Also, note that all of the above programs, except for IESpyad, have an updating function within the programs. For those programs with an updater, make sure you check often to see if there is an update. The bastards who create spyware continuously create new versions to bypass the anti-spyware programs. The creators of the anti-spyware programs in turn update their spyware fighting files to catch the new stuff. So if you don't update often, newer versions of spyware get through the preventative software, allowing the installation of the malware on you machine. Alternatively, without updating, the newer versions of spyware that get past the preventative software, and thus get installed on your computer, don't then get zapped by the software that gets rid of the installed spyware. Frequent updating is a must!

To prevent having to check the web page to see if there are updates for the aforementiond IESpyad, which has no internal updater, go to: http://www.changedetection.com/monitor.html
and enter the web address of the IESpyad page. Anytime a new file comes out, you will get an email telling you that the web page has changed (a new file coming out is the only thing that will change on that web page). You then will know to go to that IESpyad page for the update.

Obviously, use an anti-virus program, and make sure the updating feature is turned on. A good free one, which has an automatic updater and which checks your email, is AVG:
http://www.grisoft.com/us/us_dwnl_free.php

Zone Alarm free version is a firewall, and is a must:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

If you use all of the above, you will be protected to the maximum extent possible, and all for free!!

[KTM]

23. A MUST-HAVE spyware tool:

Like the poster above, I am an anti-spyware nut... I work in IT, and would like to claim to have cleaned more spyware than most have ever heard of.

AdAware, Spybot, etc are must-have tools, but another much less well known tool needs to be run on every PC - Merjin's excellent labor of love, CWShredder. CoolWebSearch, AKA CWS, is EVIL, and is updated and mutated so often that it is almost NEVER caught by the normal tools. Merjin's CWShredder is updated constantly, and is the only tool I've seen that can get rid of the most nefarious CWS attacks.

http://www.spywareinfo.com/~merijn/downloads.html

Direct download - because CWS blocks access to his site:

http://209.133.47.200/~merijn/files/CWShredder.exe