{"id":396,"date":"2004-07-20T11:50:01","date_gmt":"2004-07-20T18:50:01","guid":{"rendered":"http:\/\/www.studioglyphic.com\/blog\/?p=396"},"modified":"2006-07-12T11:31:15","modified_gmt":"2006-07-12T18:31:15","slug":"public-service-announcement-dealing-with-spyware","status":"publish","type":"post","link":"https:\/\/www.studioglyphic.com\/blog\/2004\/07\/20\/public-service-announcement-dealing-with-spyware\/","title":{"rendered":"Public Service Announcement: Dealing with Spyware"},"content":{"rendered":"<p>In the last few months I&#8217;ve had to deal with crazy spyware on my machine and my sister&#8217;s machine. It used to be the case that you&#8217;d get spyware on your machine by installing a program like Limewire or getting suckered into adding the Bonzi Buddy to your computer. Now visiting the wrong web page with Internet Explorer can get spyware installed without your knowing.<\/p>\n<p><strong>Removing spyware<\/strong><\/p>\n<p>If you&#8217;ve been infected, you&#8217;re in for some work. It&#8217;s like dealing with a flea infestation, without all the vacuuming.<\/p>\n<p>1. Download and install these three free programs: <a href=\"http:\/\/www.lavasoft.de\/support\/download\/\">AdAware<\/a>, <a href=\"http:\/\/www.safer-networking.org\/\">Spybot Search &#038; Destroy<\/a>, <a href=\"http:\/\/www.subratam.org\/?page=removal\">HijackThis!<\/a> AdAware and Spybot S&#038;D are similar, but they each seem to cover some things that the other doesn&#8217;t, so it&#8217;s good to get the overlap. HijackThis is a very powerful and <em>dangerous<\/em> tool. Don&#8217;t mess around with HJT unless directed to do so by a guru (more on that in a bit).<\/p>\n<p>2. Use AdAware&#8217;s update function to install all available updates and run a full scan. Then allow it to fix everything it finds. There might be some things which you&#8217;ll want to keep, but if in doubt, fix it. AdAware might require you to restart your machine.<\/p>\n<p>3. Use Spybot&#8217;s update function to install all available updates and run a full scan. Be sure to select a mirror located in your country, or you may get a checksum error when downloading the update. Then allow it to fix everything it finds. There might be some things which you&#8217;ll want to keep, but if in doubt, fix it. Spybot might require you to restart your machine. Spybot also has some Internet Explorer protection features. I&#8217;ve only run into a couple issues with this one, and usually it involves watching some cartoon on the web. Since doing this kind of activity isn&#8217;t critical to my happiness, I just move on.<\/p>\n<p>4. Run a full anti-virus scan. If you have AV software, make sure the definitions are up to date. If you don&#8217;t, you can do an online scan at <a href=\"http:\/\/www.bitdefender.com\/scan\/licence.php\">BitDefender<\/a> or you can install <a href=\"http:\/\/www.grisoft.com\/\">AVG Anti-Virus<\/a>.<\/p>\n<p>5. Run HijackThis and save the log of what it finds. Do not mark\/fix anything until you&#8217;ve gone to <a href=\"http:\/\/www.pcguide.com\/vb\/forumdisplay.php?s=&amp;forumid=34\">The PC Guide Discussion Forums<\/a> and posted a description of your problem, your prior actions, and the full log file. One of the experts (Budfred&#8217;s a good one) will go through your log file and give you further instructions. If you&#8217;re not comfortable with rebooting into safe mode or using a command line to delete files in your windows\\system32 directory, recruit someone who is.<\/p>\n<p>That&#8217;s about it. It&#8217;s a lot of steps, and it&#8217;ll take you a few hours to do it, but for the really vicious stuff, it&#8217;s the only way.<\/p>\n<p><strong>Preventing spyware<\/strong><\/p>\n<p>There are a couple options:<\/p>\n<p>1. Don&#8217;t use Internet Explorer. The combination of insecure software and market domination makes IE <em>the<\/em> target for all kinds of hijinks. Try <a href=\"http:\/\/www.mozilla.org\/\">Mozilla<\/a> instead.<\/p>\n<p>2. If you&#8217;re like me, you like using IE (for no good reason). In this case, use <a href=\"http:\/\/windowsupdate.microsoft.com\/\">Windows Update<\/a> to get the latest security patches for Windows and IE. Download <a href=\"http:\/\/www.safer-networking.org\/\">Spybot S&#038;D<\/a> and\/or <a href=\"http:\/\/www.javacoolsoftware.com\/spywareblaster.html\">SpyWare Blaster<\/a> and run the protection scheme. Update your virus definitions or get <a href=\"http:\/\/www.grisoft.com\/\">AVG<\/a> to protect your system.<\/p>\n<p>Good luck.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the last few months I&#8217;ve had to deal with crazy spyware on my machine and my sister&#8217;s machine. It used to be the case that you&#8217;d get spyware on your machine by installing a program like Limewire or getting suckered into adding the Bonzi Buddy to your computer. Now visiting the wrong web page [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[8],"tags":[],"class_list":["post-396","post","type-post","status-publish","format-standard","hentry","category-useful-stuff"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/psIKy-6o","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/posts\/396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/comments?post=396"}],"version-history":[{"count":0,"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/posts\/396\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/media?parent=396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/categories?post=396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.studioglyphic.com\/blog\/wp-json\/wp\/v2\/tags?post=396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}