Scaremongering over Spyware? 196
Dynamoo writes "The BBC is reporting that PCs in the UK are infected with over 20 pieces of spyware on average. A frightening statistic, if it is to be believed. In fact, the figures come from Webroot - an anti-spyware firm with a commercial interest in playing up the spyware threat." From the article: "In Poland, 867 of every 1,000 domestic PCs have been infected by trojans, unsolicited programs that can allow remote users to control the machine. It is this international reach that concerns those in authority trying to combat the spread of spyware. "
True number or not, way too common.. (Score:5, Insightful)
Slowly people that I know start to have things in order as I have managed to make them change habits, install tools and such, but not everyone has such aquintances, and even then, the number of times I have cleaned spyware from someones computer is way high...
Re:True number or not, way too common.. (Score:4, Interesting)
Obligatory (Score:2, Funny)
I kid, I kid
Re:Obligatory (Score:2)
Re:True number or not, way too common.. (Score:2)
The last Windows PC I was asked to help with had a program that would not uninstall, kept re-inserting itself into the registry and seemed to have hidden the key program that was responsible for this activity (since I booted into the recovery console from CDs, and re-named the relevent directories under "Program Files".
Sounds like spyware, right? It was Symantec/Norton Internet Security 2005.
The reason I was trying to fix this w
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:3, Informative)
The reason it exhibits this behavior is because otherwise, it would be WAY too easy for viruses to disable antivirus if it didn't fight back.
Re:True number or not, way too common.. (Score:2)
Anyway, I suspect you were intending to include people who are bringing them in because "the network card is broke" or "my 'W', 'T', and 'F' keys are worn out." But even in the case of things like a "broken network card" don't you find that many of those problems are actually malware related -- clean up the crap a
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:2, Funny)
My favourite (and fashionable) spyware cleaner at present is Ubuntu Linux. In my experience it's been 100% effective!
Re:True number or not, way too common.. (Score:4, Insightful)
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:2)
However, when I was doing end user DSL support, I found myself explaining to them over and over again that all these security programs mean nothing if they click every popup they get and then do not run the scans.
Re:True number or not, way too common.. (Score:2)
Depends on who's in charge of them. We have some 13,000 Windows computers, none of which has any spyware on them.
Re:True number or not, way too common.. (Score:2)
Avoid IE/OE like the plague, stay current with the latest updates, stay behind a firewall and NAT, and use a little common sense. It's really not that hard.
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:2)
Can't patch on 56k? (Score:2)
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:2)
fsck off... try Ubuntu... absolutely NO need to edit any config file by hand... the installer only asks a couple of simple questions and that's it... and the next version (6.04) is even easier to install... X was done completely automatically...
even Debian Sarge is easy to install
Re:True number or not, way too common.. (Score:2)
Re:True number or not, way too common.. (Score:2)
Yes, it probably will get borken because sooner or later she'll install something that doesn't work and/or causes a dependancy conflict. However, that can happen no matter how good you are with Linux because things like that aren't completely under your control and never will be. Right now, she's not going to get her box pwned because crackers and spript-kiddies aren't targetting Linux that way. Eventually,
Re:True number or not, way too common.. (Score:4, Insightful)
It's not like the good old days when a virus just trashed your machine, so you had to act immediately. Now it just lies in waiting and uses your machine to launch attacks on others and collects personal information silently. People just don't care enough to fix spyware until it directly prevents them from using their precious web browser, email, and instant messenger.
Re:True number or not, way too common.. (Score:2)
Why not? (Score:3, Funny)
Re:Why not? (Score:2)
That's just not true. A plague of linux viruses is just on the horizon and will probably strike any day now!
And when it does, both people who get infected will be mighty pissed they didn't buy anti-virus software!
Re:Why not? (Score:2)
Yes I know spybot has the taskbar thing, but it really doesn't work that well f
Seems like a statisticians nightmare (Score:5, Insightful)
So yeah, it's a number, but not a very convincing one...
Re:Seems like a statisticians nightmare (Score:2)
Of course, the results would be slightly skewed. Not from a pool of all computer users, but from all users that encounter severe problems && lack the skill to fix it themselves
Re:Seems like a statisticians nightmare (Score:2)
SLIGHTLY SKEWED!?! Try worthless. Unless you use a random sample the results will be pretty worthless.
Unless of course you want to sell something.
Re:Seems like a statisticians nightmare (Score:4, Funny)
Re:Seems like a statisticians nightmare (Score:2, Insightful)
It's funny you mention this. Last year (Sept, 2005), Consumer Reports had an issue dealing with personal computers. This is an actual quote from the article:
Re:Seems like a statisticians nightmare (Score:2)
For starters, you could use the median, and not the average, for a number with any sort of meaning. One computer with 20 million copies of a spyware program, and a million computers with no spyware programs, have an average of 20 spyware programs per computer. They also have a median of around 0.
Not that spyware is not a problem, but this statistic does not show it.
Oh James... (Score:4, Funny)
Quick, get Q on the line, I think we are going to need the services of 007 for this one!
Comment removed (Score:5, Insightful)
Re:And, typical of scaremongering tactics... (Score:4, Insightful)
Anything they would teach about spyware today could very well be moot in 5 years if most people use secure systems.
More proper thing would likely be going the route of licencing.. that is in order to allow use of a computer that is connected, you need a computer lisence, the same way you need a drivers license to drive a car on roads. That lisence could then be limited in duration and you would need to get updated on newest things, from behavior to threaths.
Ofcourse that would bring many other problems in itself...
Re:And, typical of scaremongering tactics... (Score:2)
Are you kidding? First, you don't think that this class/training would teach everybody how to repair their computers, do you? It would teach them the basics, and how to tell when they need more experienced help. Not only that, most people would have a professional go over their machine before it gets tested for recertification, just like they take it into the shop before having it smog tested. Depending on how often they need to do this, I c
Re:And, typical of scaremongering tactics... (Score:2)
I run spybot on my mom's computer, and I get 50 items that need cleaning. Of course 40 are simply icky cookies that need to be swept, 8 are bad links that show up in her cache, and only a couple are what I would actually call something suspicious.
Yes, malware is a problem, but the numbers are just meaningless statistics meant to startle people who don't really understand it anyway.
Re:And, typical of scaremongering tactics... (Score:4, Funny)
In Republican states that would amount to "Don't use computers, kids, and you won't get infected. Take the computer abstinence pledge."
Re:And, typical of scaremongering tactics... (Score:3)
and what exactly would be the topics there ? what about exceptions ?
now, let's say jhonny uses linux at home and tommy's father has bough mac for everybody in the family. are they free to go from these classes (in which case everyb
Re:And, typical of scaremongering tactics... (Score:2)
On the other hand, does it really matter? Both can do bad things-you don't want any of them.
Unless of course they will organize your bookmarks, provide you with emoticons or
Not necessarily that much scaremongering (Score:5, Insightful)
Re:Not necessarily that much scaremongering (Score:2)
More Information (Score:4, Informative)
From TFA: More information regarding those settlements can be found here [ftc.gov].
Re:More Information (Score:2)
selling fake anti-spyware products.
This needs to be punished even more than the actual spyware, for obvious reasons.
Spyware?? (Score:4, Interesting)
And why oh why can't the BBC specify "Windows" users. Why do they report every piece of Malware as being a threat to PC users. It's not. Most malware is operating system specific. if it affects Windows, say Windows.
Sloppy journalism...slipping standards, blah blah...
Thank you! Pet peeve. (Score:2)
Articles, surveys, antispyware ads, antispyware product scan reports, need to distinguish sharply between tracking cookies and installed code. They don't, and that clouds any attempt to be realistic about the threat level. Tracking cookies don't measurably slow your system down. Tracking cookies don't destabilize the OS. Tracking cookies don't steal passwords, intercept SSL sessions, or change your home p
Education is key (Score:4, Insightful)
Education is the real key to computer protection, not the purchase of spyware removal tools.
I've only ever had one piece of malware, which was ten years ago (the Tai Pei virus). In the meantime, I've learned good computer habits. These include being cautious about downloading and installing software, using the free firewall which comes with Windows XP, and employing the Mozilla range of browsers / email clients.
If users don't learn to be cautious when using a computer, they're going to run afoul of phishers, which will be much more of an incovenience that a bit of adware.
However... (Score:2, Funny)
However, if they are, then I'm sure most of the computers I own (Linux, OS X, Win) will have at least a dozen such "spyware" infections...
I could easily believe that. (Score:3, Interesting)
You have: 10,489 viruses on your computer
No, I did not make that up. There are actually people out there (many, in fact) that think that the computer is running really slow because it's getting old, and not because there's three billion pieces of crap bogging it down. It just never occurs to them.
Re:I could easily believe that. (Score:3, Informative)
I've seen similar, although generally it's ONE virus infecting 10,489 files...
Re:I could easily believe that. (Score:2)
It used to be almost fun fixing all the computers back then, because I was good at it and I could get just about anything cleaned up. Now these things
Re:I could easily believe that. (Score:2)
So yeah. 10,000? A piece of cake. And then there's what ad-aware finds...
Re:I could easily believe that. (Score:2)
That's just going to make them try a little hard to find away around the block, and make you work a big hard to keep patching things.
Never underestimate the combination of a fool with too much free time on his hands.
its a concern (Score:3, Interesting)
On the other hand, doesnt it lead to waste of:
(*) valuable time, because every now and then you have to scan/remove/update/etc
(*) valuable comp resources/processing because you HAVE to have your anti-****(whatever)-ware ALWAYS on, which are generally bloated and eat up memory/processing (*) and imagine the rebooting and re-installing
Its sad that the 'wonderful pc experience' has now come to a stage that the price one pays is getting heavier. And with some very basic steps/prevention measures (as explained by many at /. during such stories), it could be enhanced many times.
Depends on your definition of "spyware" (Score:5, Interesting)
The kind that comes in the form of a cookie like doubleclick. It's tracking you, so it is technically spyware, even though it does not modify anything on your PC, does not have any negative impact on your stability or anything else. All it does is to monitor your browsing behaviour.
If you count this kind of spyware then yes, the infection rate is crippling. 99% I'd wager. And 20 on average is reaching kinda low.
If you only count those pesky popups that come as BHOs and other installed services, then my count would be a LOT lower. Still way too high but WAY lower.
And yes, the average infected computer carries a tremenduous load of spyware. If you have one, you have them all. If I didn't know better, I'd say they download each other.
Re:Depends on your definition of "spyware" (Score:2)
It's hard to recommend Norton when they require manual removal of malware files that aren't in memory. C'mon Symantec, that helps nobody!
Affiliate programs (Score:2)
I believe you'll find that they do. They may disable programs from a competing keiretsu, but if they install a moneymaking piece of spyware from a friendly company then they get a piece of the action, kind of like recruiting a downstream Amway sales rep.
20 Spyware Packages? (Score:5, Informative)
DOUBLE HAH!
Them: "Dude, my computer is slow and it's got some sort of popup that comes on when I turn it on"
Me: "You're infected"
Them: "But how? I don't go to any porn sites...." yadda yadda yadda.
And when I get to the sick peecee, I see that not only does it have _one_ piece of malware, but it barely boots from the hundreds (sometimes thousands) of evil packages all fighting for control of the poor machine.
It's a losing battle. No, it's not scare mongering. It's reality.
--
BMO
The aweful truth (Score:3, Insightful)
What matters is the combination of it all!
You have to do EVERYTHING to stay clean. No shady porn sites, no clickyclicky on shady mail, daily updates, up to date virus killer, well configured firewall,
"Gaaaaah... too much work!" is the answer you'll get from Joe Schmoe Average. "All I wanna do is surf, I don't wanna worry about system stability, Browser plugins and antivirus."
Well,
Re:The aweful truth (Score:2)
Really?
When I used windows, I had an up to date virus killer. In about five years of use, it caught two (2) viruses. Both were e-mail attachments which I hadn't and wasn't going to open. (Seriously, how dense do you have to be to open an attachment with an odd extension in an e-mail with no subject and a two word body?)
Did I need a virus killer?
Re:The aweful truth (Score:2)
The notional average person uses IE and Outhouse Excess, is simply unaware of the concept of malicious em
Re:The aweful truth (Score:2)
We must be careful not to feed people half-truths about malware, people with loads of viruses & spyware either (a) think they are safe as they have a virus checker or (b) don't think they're safe but don't know what to do about it. Keeping a clueless users pc free of unwanted stuff is difficult at best and impossible at worst it d
Re:20 Spyware Packages? (Score:3, Interesting)
When I first start to clean a PC, I don't even try to boot it. I just yank the HD, put it in an external USB case, then plug it into a malware cleaning workstation to run a whole slew of programs against it: AVG, Spybot, AdAware, Spysweeper, etc. By the time I replace it in the original box, what few evil programs that remain have been so crippled that finishing the job is a breeze.
I also get a printout of the list of evil programs
Here's a solution (Score:3, Insightful)
Now if you'll excuse me, Guido the wheel man is at the door wanting his $20 American for not trashing my wheels when I'm not using them -- he calls it "assurance" while I call it "insurance" but it's really just plain old extortion. You see, Guido sold me the wheels and tells me he can only keep them working if I pay him forever, otherwise something nasty is sure to happen and it will cost me even more money to get it fixed.
If the woman in this article is such a heroic professional, why is she only cleaning off the malware and not getting the users off Microsoft OSes? Surely she has figured out by now that the cleaned machines get trashed again. Maybe she just really likes being needed. Maybe this is PR trash planted by some Microsoft goon.
Maybe Mac and Linux folks are laughing like crazed loons after reading this "heroic" article.
Cherrios.
Re:Here's a solution (Score:2, Insightful)
Maybe Mac and Linux folks are laughing like crazed loons after reading this "heroic" article.
Yes, we are. Seriously though, phishing is growing into a problem for *nix-users these days, and so far as I know, the only state in the US in which phishing is illegal is California (I might be wrong there, though). You'd think "well, they should be smarter" but the phishers can be very clever, such as sending you an email that looks for all the world like it's from your ISP. (Yes, I was smart enough to check w
Spyware could happen on alternative OS's (Score:2)
It would go a long way toward fighting the current generation of spyware, which is fond of exploiting Windows bugs and misfeatures to implement a "drive-by download".
Unfortunately criminals adapt. Block drive-by downloads and they'll all migrate to EULA-ware. OS X would not be immune. Any OS that assumes that software should have complete
Re:Here's a solution (Score:2)
This won't work for Microsoft Windows because Windows has a horrible design flaw which _is_ the registry. All it takes is one mistake, one slip-up by the user and the whole game is over. Why? Because the registry is a single point of control over the _entire_ system: Once the registry is compromised, the whole system is compromised and can never be trusted again until it's wiped and re-
Re:Here's a solution (Score:2)
In addition, there is an ACL for each key-value pair for fine-grained security.
Running as Admin will be a problem because sp
Re:Here's a solution (Score:2)
Having one central point that controls _everything_ is bad design. Comparing the Windows registry to
Re:Here's a solution (Score:2)
Its more like, you buy your wheels but you live in a bad neighbourhood. Guido offers his services at $50 a year to stand guard over your new wheels while you're elsewhere.
You don't have to pay him, he's not going to trash your wheels if you don't. You could pay someone else who may or may not do as good or a better job at looking out for your wheels, or you could look after them yourself, put them in a garage. Up to you. The only questionable thing about Guido's pract
EASILY believable (Score:3, Informative)
Three or four machines had over 1000[sic] pieces of spyware, and one machine had over three thousand pieces, plus several variants of either Sasser or Sobig. (I forget which...that machine came in the door on our first day.)
We don't just service the machines of the elderly...we get a lot of uninformed college students and their parents, as well.
If you have any questions, drop me an email. I'd be happy to answer them. I'll respond to
Fight it, don't clean it off (Score:3, Insightful)
Who will define what is acceptable? We will, of course. We are the technological elite. It's time that we start making the parameters about what is acceptable behavior on the net.
So the spyware makers pay off the politicians to allow some country to engage in aberant conduct and give them a save haven? Shut off the country from the web.
It's time that we stop assuming that in the evolving information age that the politicians have more control over society than the technical elite. We control the web, and we need to take responsibility for the assholes and criminals who use it to prey on society. That means shutting down the 419 chuckleheads also.
We created the environment that allows viruses and spyware to exist. It's time that we and not the politicians put an end to it. And if what we do goes against some jerks 'right' to sell access to your PC for his own profit, then so be it.
Re:Fight it, don't clean it off (Score:2)
Irony? (Score:2)
On the Average, we're all 90% dead. (Score:2)
The concept works just swell for data that doesnt vary much, like the two numbers above, and forms a bell-shaped curve.
The concept doesnt work at all,k and in fact is highly misleading, when the data tends to be at one extreme or the other. Such as, oh, number of spyware apps on a compuiter.
IMH experience, computers either have 300+
cookies (Score:2)
No wonder... (Score:2)
Absolutely not surprised!! (Score:2)
Spyware hype or scare? No, it's reality!
Jerks (Score:2)
Cookies (Score:2)
Easy for me to see! (Score:2, Insightful)
Spyware is even scarier than that... (Score:2, Interesting)
Depends on what you classify as spyware (Score:2)
Then look at other studies (Score:4, Informative)
Late in 2004 some studies were done that were pretty thorough. I know it's kind of old now but I can't imagine things have gotten any better.
A study was done by AOL and the National Cyber Security Alliance. Some of their findings:
6% of users thought they had a virus currently on their computer. A scan revealed that actually 19% of all the users had viruses.
71% of those with antivirus software thought that it updated weekly or daily. However, a scan revealed that only 33% of all the users had actually updated their antivirus within the last week.
53% thought they had spyware on their computer. A scan revealed that in truth, 80% of all the users had spyware.
References:
http://www.infoworld.com/article/04/10/25/HNaolsu
http://www.staysafeonline.info/pdf/NCSA-AOLIn-Hom
http://www.staysafeonline.info/pdf/safety_study_v
Another study by Dell estimated that nearly 90% of all desktop computers are infected somehow, with 1 out of 5 calls to Dell tech-support being virus/spyware related. Most people aren't even aware that their computers have been compromised:
http://www.financialexpress.com/fe_full_story.php
http://www.webpronews.com/news/ebusinessnews/wpn-
Re:Then look at other studies (Score:2)
This isn't always the user's fault, however. Just last week I tried running the update on my anti-virus manually and found out that it was borken and needed to be reinstalled. It'd been failing for several months and never notified me. Naturally, I took care of it right away, ran it again and re-scanned. No probl
Spyware scaremongering == business model (Score:2, Informative)
Lucky bastards... (Score:2)
Let's all move to the UK!
In other news (Score:2)
If We're Not Talking About The Average User (Score:2)
I fully believe that almost every user not using antispyware products = and using IE on a regular basis - has at LEAST that many pieces of spyware.
The latest total bitch to get rid of is SpyStrike. You have to use a custom removal tool AND at least two anti-trojan (not anti-spyware, although you need those, too) to get rid of it.
I'm getting to the point where it might be better just to tell clients to wipe the machine, reinstall the OS
Seems a little conservative (Score:2)
His Anti-Virus software was still sitting sealed in the box from when he bought the machine! He assumed it was insta
Depends what you mean (Score:2)
But I've been wrestling with a hijacker infeced machine that seems resolutel. I have maybe one or more things to try before I give up on removing it. Most of the popups start a blank browser window atleast because I scrupulously add all those urls to my = 127.0.0.1 section of HOSTS. But it's still a pain.
Anyway if you stop running your resident scanners for any am
Damn Lies or Statistics? (Score:2)
Re:Cookies (Score:2)
Tracking Cookies might be malware and spyware (Score:2)
Re:"Pieces?" (Score:2)
Re:Gotta get away from MS (Score:2)
Well, seeing as how most Linux distros do not make root access and Windows does......
Also, I have yet to see one piece of malware (tracking cookies excepted) that will actually affect Linux.
So, vulnerable to hacking yes, but see my comment on default access.
Re:Gotta get away from MS (Score:2)
Re:lies, damn lies, and statistics (Score:2)
Not its only problem (Score:2)
We've had to uninstall it at about half the sites and Webroot's SE who came to town while helpful, obviously wasn't able to fix what is fundamentally broken software.
I've found one of the better combinations for eliminating stuff is booting to safe mode and scanning with both MS AntiSpyware and Kaspersky. Ideally I remove the disk and jack it into a USB enclosure and scan it as if it was a passive data dr