On the Prevalence and Removal of Spyware?
oo7tushar asks: "There's a lot of spyware out there these days. As a Windows/Linux user I'm concerned about what spyware is installed on my machines and I'm very concerned about this issue when it comes to Windows. A few questions for the masses: What are the most common spying applications that are installed? How do I get rid of them without getting rid of the parent application? Have you encountered spyware on Linux?"
and most of everything that tries to connect over non standard port will be stoped
:) Plus, now you need a community-contributed and -distributed blackout list (of known spyware URLs), and at that point, you might just as well be using AdAware.
Yeah, but if you were writing a spy-ware program, would you use a non-standard port to send it out?
I'd just send it over HTTP on port 80. Or better yet, HTTPS on 443, so no content-sniffing could be done on it. Would you be willing to stop all web browsing traffic leaving your home/site/corporation?
The only way, then, to stop this would be to block traffic to particular sites, but if the traffic goes to microsoft.com, you're hosed 'cause you *need* to go there at least monthly to fix whatever's currently broken.
If these programs aren't already doing this, then they're even dumber than I thought. Unless *I* am dumber than I thought (and I admit I can be pretty stupid at times) and I've missed something obvious here.