Protect yourself from spyware December 2005

Protect yourself from spyware

Spyware is emerging as the largest threat to privacy and productivity on the Internet. Recent consumer studies show that 80 percent of computers are infected with some type of spyware. Spyware and other unwanted software can steal agency and employee information, bombard you with pop-up windows, slow down, or even crash your computer.

What is spyware?
Spyware is software that performs certain activities such as advertising, collecting and transferring personal information back to a host, or changing the configuration of your computer, usually without your knowledge.

How is spyware downloaded and what are potential signs?
Typically a user downloads spyware from the Internet. The user will install a program that contains ads or visit a site that hosts the spyware. Here are some symptoms that may indicate spyware is installed on your computer:

• you are subject to endless pop-up windows
• you are redirected to Web sites other than the one you typed into your browser
• new, unexpected toolbars appear in your Web browser
• new, unexpected icons appear in the task tray at the bottom of your screen
• your browser's home page suddenly changes
• the search engine your browser opens when you click "search" changes
• certain keys fail to work in your browser (e.g., the tab key doesn't work when you are moving to the next field within a form)
• random Windows error messages begin to appear
• your computer suddenly seems very slow when you open programs or process tasks (saving files, etc.)

What can my agency do to protect itself from spyware?
Your agency can create guidelines and polices that encourage employees to take the following actions:

• Do not open up e-mail messages from people you do not know - just delete the e-mail.
• Avoid clicking on Internet links sent in e-mails - other than wa.gov addresses.
• Do not install programs from the Internet, such as screen savers.
• Do not install streaming media players from off the Internet, including plug-ins to Microsoft Windows Media Player.

Your agency can also purchase and install anti-spyware on individual work computers.

As an employee how can I protect myself and my agency from spyware?
You should take the following steps to reduce downloading spyware:

• Don't click on links within pop-up windows - Pop-up windows are often a product of spyware. Clicking on the window may install spyware software on your computer. To close the pop-up window, click on the "X" icon in the title bar instead of a "close" link within the window.
• Choose "no" when asked unexpected questions - Be wary of unexpected dialog boxes asking whether you want to run a particular program or perform another type of task. Always select "no" or "cancel," or close the dialog box by clicking the "X" icon in the title bar.
• Be wary of free downloadable software - There are many sites that offer customized toolbars or other features. Don't download programs from sites you don't trust. You may expose your computer to spyware by downloading some of these programs.
• Don't follow e-mail links claiming to offer anti-spyware software - Like e-mail viruses, the links may serve the opposite purpose and actually install the spyware it claims to eliminate.

What should I do if detect spyware on my work computer?
Contact your IT staff. If it's present on your computer, they can remove it for you.

What's the role of DIS to protect the state enterprise from spyware?
The primary role of DIS, regarding spyware, is to focus on awareness, trends and new vulnerabilities. DIS helps educate and foster conversations, and shares industry best practices with customers. DIS, through the Washington Computer Incident Response Center (WACIRC), leads discussions with participating agencies about how we can address issues such as spyware.

Some information contained in this article provided by the United States Computer Emergency Readiness Team (US-CERT).