Spyware

As spyware (composition of spy , the English word for a spy , and -ware as ending of software , ie programs for the computer, to German about Spähprogramm , spyware or sniffer software ) is usually software refers to the data of a computer without the user's knowledge or consent to the manufacturer of the software ( Call Home ), to third parties or is used to offer the user products via advertisements.

Basics

Most spyware programs are used to the user behavior, especially the surfing behavior in the Internet to analyze. The data obtained will be used commercially. Often this is done by displaying targeted advertising banners or pop-ups that are adapted to the possible interests of the Internet user, which the advertising companies hope to increase the effectiveness of their methods.

To avoid possible legal problems to avoid many anti-spyware programs identify the software components identified as "potentially unwanted software" ( potentially unwanted software , PUS).

Spyware is mostly programmed on behalf of companies, less often on behalf of address sellers. However, this business practice is generally considered illegal or at least unclean. Products advertised by spyware are often of a dubious nature, such as counterfeit products and medicines , as well as paid services such as adult services or gambling .

Even intelligence services use spyware to collect information about people.

functionality

Spyware works in a number of ways. In the simplest case, malicious programs are stored on the computer that are automatically activated after it is started. If a connection to the Internet is established, the collected data is transmitted. You change settings on the computer, e.g. B. the home page or search engine of the web browser . They differ from viruses in that they do not try to spread. In addition to the personal information entered voluntarily during registration, other programs invisibly send further data to the software manufacturer.

In other cases, the damage is caused by a combination of several factors. When the software is downloaded, a cookie is stored to recognize the computer when the website is visited again . The cookie contains an identifier under which all data found are stored by the website provider. By registering the software, data about the user is sent to the provider. All data entered on renewed visits can be assigned to the existing data.

The camouflage of the spyware as a toolbar for the web browser, which supposedly contains practical functions - such as the current weather or an input field for direct search on a certain website - is also popular. As soon as you try to remove this toolbar, the persistence typical of spyware becomes apparent.

Spyware is often of a high technical level. For example, it protects itself against deletion by running several processes at the same time which, when terminated, immediately start a new process and copy themselves. Under Microsoft Windows, it is even possible that they a user account with administrator privileges , the write and delete permission escape.

Another problem arises from the fact that spyware can create additional security holes in a system, which then prevent security-relevant software updates and encourage the loading of further malicious content.

These procedures make it difficult for even tech-savvy users to get rid of the spyware. Antivirus software manufacturers have developed solutions against spyware. Microsoft's Windows NT operating system, Windows XP or higher, now includes its own security center, which can be combined with Windows Defender , the free Windows anti-spyware program . Under macOS from Apple, malware detection for downloaded files from version 10.6 (Snow Leopard) is integrated.

Keyloggers that control keystrokes or monitor all activities of the PC user are also dangerous . Keyloggers are spreading more and more often via worms or viruses, like Mydoom in early 2004.

Symptoms

A computer could be infected if you experience one or more of the following symptoms:

The computer works exceptionally slowly, especially when browsing the web.
The web browser opens advertising windows that have no recognizable connection to the websites visited.
The start page or search engine of the web browser has been changed, changes automatically to this setting again when changes are made.
There are new entries in the bookmarks or favorites menu that have not been saved by the user.
The computer automatically connects to the Internet.
The firewall constantly reports attempts by programs to connect to the Internet.
There is a spyware warning on the desktop as a background image which advertises, for example, the purchase of an alleged anti-spyware program ( scareware ).

Protection options

Use anti-spyware programs and the latest virus scanners with the latest virus signatures .
When surfing the web, prevent the execution of active content (mostly Adobe Flash , Java , ActiveX ) by making the appropriate settings in the browser, as they are often the gateway.
Do not download new browser plug-ins that are supposedly needed to play content.
Only accept cookies in exceptional cases, but at least select the setting "only from visited pages".
Open only links in trusted emails .
Route the Internet connection through a firewall, e.g. B. that of an existing broadband router .
Regularly update the computer's operating system and web browser using automatic update functions.
Do not use a user account with administrator rights for Internet use; Cancel unexpected requests for the administrator password.
Before installing software, it should be checked whether automatic communication functions or similar are mentioned in the license or usage agreements . In this case, alternative programs should be used.
Install only software that is really needed and remove all software components that are not required.
Virus warnings from virus scanners that are not installed on the web are misleading scareware .