Sunday, July 8, 2007

About Spyware, Adware, and Browser Hijacking Software

HP and Compaq PCs - About Spyware, Adware, and Browser Hijacking Software
Security level: Public
___________________________________________________


In this document:
Spyware, adware, and browser hijacking definitions

Preventing and removing unwanted ads and marketing material

Related support



This document applies to HP and Compaq computers with an Internet connection.

This document explains the differences between spyware, adware, and hijacking software. It helps resolve problems caused by these types of software. Some indications that your computer may contain spyware are:


Poor system performance, especially while browsing the Internet.

The computer stops responding more frequently.

The computer takes longer to open the Windows desktop.

Browser closes unexpectedly or stops responding.

Performing a search from a search page provides results on a different site.

Clicking a link does nothing or goes to a non-related Web site.

Browser home page changes and may not be able to be reset. Usually, about:Blank is set as your new Home page.

Pop-up advertising windows appear when the browser is not open or over Web pages that do not normally have pop-ups.

Additional toolbars are added to the browser.

Web pages are automatically added to list of favorites.

Desktop icons are automatically added to the desktop.




NOTE: This document is not about viruses or security vulnerabilities. A virus may actually provide an opening that allows someone to insert Spyware onto your computer, but this is not discussed further in this document. For information about viruses and security vulnerabilities, see Resolving and Preventing Viruses on Your Computer .



CAUTION: Be wary when installing software distributed as no-cost. The cost of installing the software may be slower Internet connection times, annoying pop-up ads, or even an increase in unwanted e-mails (spam).

Spyware, adware, and browser hijacking definitions
There are many types of software related to advertising and aggressive marketing. The types of advertising software vary, but are generally the following:


Adware - Software that supports itself or another program by displaying ads while you are connected to the Internet. Most adware programs track how you browse the Internet and report the information to an interested party.

Spyware - Software that gathers and transmits information without one's knowledge. Spyware programs usually track information about the Web sites visited, browser and system information, and your computer IP address (the number that represents a network device on the Internet).

Browser hijacking software - Aggressive advertising software programs that change the settings of your browser without your knowledge. These can be very annoying and may appear as a virus at first (slow Internet connection and lots of network activity). Typical changes from hijacking software are: the browser's home page address, search bars, tool bars, the creation of desktop shortcuts, and intermittent advertising pop-ups. Once a browser is hijacked it may also redirect links to other sites that advertise or collect your usage information.



Preventing and removing unwanted ads and marketing material
The following steps help you find unwanted adware and spyware, and remove or disable them:



Preventing adware


To prevent adware from being installed on your system, purchase and use full versions of software that are not supported by advertising. If you want to download and use software that claims to be free, carefully read the license agreement and cancel the installation if there is something that you do not understand or agree to. Know the software before you install it.


Preventing spyware and hijacking software


Normally, spyware and hijacking software are installed when you "consent" to a security warning window that appears over a Web page. The Security Warning window contains the following similar text:


Do you want to install and run . Signed on by .


By clicking yes on a malicious Security Warning screen, a script or control is integrated into the browsing system. The script or control changes the behavior of your Web browser to suit the needs of the aggressive advertiser.


To prevent this from happening, never click Yes on Security Warning windows that appear with Web pages that you don't trust. Close these windows by clicking No or pressing the Alt and F4 keys together at the same time.


Detecting and removing adware, spyware, and hijacking software


Aggressive spyware and browser hijacking software can be extremely difficult to remove. Do not attempt to remove these kinds of software without the aid of spyware removal software. You can manually remove most non-aggressive adware by uninstalling the software that it came with or removing the adware itself using Windows Add/Remove programs.


To remove the more aggressive forms of spyware, use professionally developed products, such as some of the following products by Symantec:


Free security and threat scans from Symantec (in English).


Trial offers from Symantec (in English).


Purchase Norton Internet Security 2007 (XP) (in English).






NOTE: One or more of the links above will take you outside the Hewlett-Packard Web site. HP does not control and is not responsible for information outside of the HP Web site.


Disabling suspicious add-ons using Internet Explorer


If professionally developed anti-spyware software is unable to detect spyware software or add-ons, the spyware software may be new. Perform the following steps to temporarily disable suspicious add-ons in Internet Explorer until you can update the anti-spyware software and it can detect and remove the spyware software.



NOTE: These steps apply to Internet Explorer 7 (or greater).


Open Internet Explorer.

Click Tools, Manage Add-ons, and Enable or Disable Add-ons.

WScroll through the list of add-on programs. Suspicious add-ons may be listed as Browser Helper Objects or Toolbars in the Type column.

To disable an unwanted add-on: Select the name of the add-on in the list, select Disable.

Click the OK button to close the Manage Add-ons window, and then close Internet Explorer window.



Related support
Resolving and Preventing Viruses on Your Computer

Microsoft Spyware and Deceptive Software Web site (in English)

No comments: