Slashdot Mirror


Spyware Removal is Big Business

prostoalex writes "Just when you thought all the software niches were taken, IDC comes out with the report saying $12 million was spent on spyware removal tools in 2003, and $305 million will be spent in 2008. IDC also estimates two-thirds of PC users out there are infected. Large PC vendors are waking up to the spyware threat, having their call centers overwhelmed with spyware-related calls."

454 comments

  1. Of course it is! Spyware only did good for me! by jawtheshark · · Score: 5, Funny

    It's the best way of getting free beer I've found: fixing spyware related problems for family and friends. While I watch SpyBot and AdAware do their job, I get free beer. There are worse activities ;-)

    --
    Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
  2. Wonder how long... by Gordonjcp · · Score: 3, Insightful

    ... before the anti-spyware vendors start bundling spyware?

    1. Re:Wonder how long... by Zorilla · · Score: 4, Interesting

      Measure that in negative values. AOL ships Viewpoint Media Player, a known spyware, with their client, which supposedly also includes anti-spyware software.

      --

      It would be cool if it didn't suck.
    2. Re:Wonder how long... by oexeo · · Score: 4, Interesting

      There are already many examples of this, spyware companies do it to destroy their competition (i.e. remove competitors spyware, but not theirs)

    3. Re:Wonder how long... by HanClinto · · Score: 4, Insightful

      This isn't the problem in question so much as anti-spyware vendors marking certain spyware companies as "harmless" and ignoring them for pay.

    4. Re:Wonder how long... by KiloByte · · Score: 1, Insightful

      First, a LOT of spyware masquerade as spyware-removal tools, and indeed, they do count as anti-spyware tools as they remove some _other_ spyware.

      Second, we already heard several times of well-known bona fide tools having whitelists for some of malware. Sometimes, it's because of a lawsuit (Gator/Claria), sometimes because of a business relationship, sometimes...

      In other words, they don't even need the undercover kind of work many virus makers were suspected of doing.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    5. Re:Wonder how long... by sidepocket · · Score: 0

      I'm sure it's already happenning. There's some pretty shady-looking spyware removal tools advertised out there.

    6. Re:Wonder how long... by jfoust2 · · Score: 1

      OK, I'll bite: Why is Viewpoint Media Player, which ships from Microsoft with Windows, considered spyware?
      Googling found this: http://www.spywareguide.com/product_show.php?id=88 0
      When it delivers a 3D ad, it phones home with the details of whether you responded. But how many sites use their content?

      --
      Curator of the Jefferson Computer Museum http://www.threedee.com/jcm
    7. Re:Wonder how long... by jfoust2 · · Score: 2, Insightful

      Whoops, hit Submit accidentally.
      There's so many spectrums of spyware these days. How many Windows apps, free or not, phone home after installation or at every run? Uhm, yeah, they're only "checking for updates". Even some Windows device drivers (like some printer drivers) phone home. You don't know what any of these programs are sending, or how often they send it.

      --
      Curator of the Jefferson Computer Museum http://www.threedee.com/jcm
    8. Re:Wonder how long... by jfoust2 · · Score: 1

      AOL is a significant investor in Viewpoint. Viewpoint gets a big chunk of revenue from this deal with AOL.

      --
      Curator of the Jefferson Computer Museum http://www.threedee.com/jcm
    9. Re:Wonder how long... by iwan-nl · · Score: 1

      No kidding, my HP photoSmart printer driver phoned home "checking for updates", and then a survey popped up right on my screen. "Please fill out this survey so we can offer better service in the future". Quite unpleassant. So i set up my firewall to block the damn thing off the net. This also disabled the auto update, but I wouldn't know why i should update my printer drivers anyway.

      --
      I'm trying to improve my English. Please correct me on any spelling/grammar errors in this post.
    10. Re:Wonder how long... by Jeff+DeMaagd · · Score: 1

      There are several spyware programs that do that. I think some of the commercial makers are paid to ignore certain sponsored spyware.

    11. Re:Wonder how long... by Tuxedo+Jack · · Score: 1
      --

      Striking fear in the authors of godawful fanfiction, I am here, appearing in darkness, Tuxedo Jack!
    12. Re:Wonder how long... by Zorilla · · Score: 1

      Windows XP before AOL or AIM installed: No Viewpoint Media Player
      Windows XP after AOL and/or AIM installed: Viewpoint Media Player is there (but easy to remove)

      At least in my experience. Either I'm wrong or you might be basing your experience off of an OEM restore copy of Windows - one which might come with AOL software preloaded.

      This is actually quite minor compared to the rest of their hypocritical business model. They provide tools to "optimize" your internet and system which don't do much to actually improve performance (oooh, file caching, no web browsers on Earth do that!). They then back a proverbial dump truck up to your PC and fill it up with useless daemons which serve no purpose at all, yet take about 4MB of memory each. Even if you have enough memory to hold all these in, you're still killing Windows startup time.

      My philosophy is that if you're providing a software product that runs services 100% of the time that only get utilized for 0.01% of said time, you're just doing harm to your custmers' systems. (Norton, I'm looking in your direction. SystemWorks is supposed to improve performance, so don't break your own apps because I stop your useless daemons)

      I almost left out that AOL provides a popup blocker, yet AOL Instant Messenger causes popups in the form of the AIM Today window and other windows related to it, which still doesn't go away even if you configure AIM not to show it.

      --

      It would be cool if it didn't suck.
    13. Re:Wonder how long... by nine-times · · Score: 1
      And how long has it been going on the [supposedly] reputable computer news sites have been simultaneously writing articles about the danger of spyware and distributing spyware? Why doesn't anyone talk about the fact that Cnet/ZDnet put known spyware on Download.com? They write stories about what a big problem spyware is, and write stories about spyware removers. They've even recently included a whole "spyware removal" section on Download.com, so it's not as if people in their organization are unaware of the problem.

      Personally, I think these sorts of download sites should have policies that, "if your software includes spyware, we won't post it on our site." But, whatever, they should at least be putting big, noticable warnings somewhere before you download it that, "This program contains adware" or "this program contains spyware", and make you click "OK, I understand" before it downloads.

      I mean, you can't expect the spyware makers to discourage you from using spyware infested programs, but most people think of Cnet as being a reputable company, so they trust that downloads from Download.com are reputable programs, and not virus/trojan/spyware infested crap.

    14. Re:Wonder how long... by James.Stanton · · Score: 1
      You don't know what any of these programs are sending, or how often they send it.

      Of course you do. Check out TCPView to when/if connections are being made, then use any of a dozen freely available packet sniffers to see what they're sending.
    15. Re:Wonder how long... by whereiswaldo · · Score: 1

      There are already many examples of this...

      But I guess you can't think of any.

    16. Re:Wonder how long... by figgypower · · Score: 1
      You don't know what any of these programs are sending, or how often they send it.

      It's called a software firewall.

  3. Money to be made by Anonymous Coward · · Score: 1, Interesting

    If you are out of a job, as many IT people are, there is money to be made here.

    Start up a company, focus on home visit spyware delivery. Charge a fortune, but have it come with "Free" software.

    1. Re:Money to be made by Shag · · Score: 1

      Don't forget to also offer spyware removal services! Get 'em coming and going..

      --
      Village idiot in some extremely smart villages.
    2. Re:Money to be made by schtum · · Score: 1

      Start up a company, focus on home visit spyware delivery.

      Some people might think that's a typo, but you're right. If spyware removal is such a big business, spyware delivery must be huge. And getting people to invite you into their homes to do it? Brilliant!

  4. Woo by Claire-plus-plus · · Score: 2, Funny

    wooo wooo the bandwagon is going past *jump*. Phew it almost went without me

    --
    99 bottles of beer in 175 characte
  5. And it's too bad... by daveschroeder · · Score: 5, Interesting

    ...that the vast majority of this spyware was installed by exploiting vulnerabilities (some overt, some more roundabout) in primarily Internet Explorer.

    And once an ordinary user is compromised by one piece of spyware, it's usually a downhill battle.

    Imagine how different the situation would be if, for the last several years, there had been real competition on the browser scene. Of course, there may never have been a way to solve the problem with the courts anyway: they DID decide that Microsoft illegally used its monopoly position to bundle IE, but Microsoft knew exactly what it was doing. By the time the slow wheels of justice had turned, Microsoft's browser takeover was virtually complete.

    And during this entire time, IE fundamentally was stagnant. There were glaring, egregious security issues, and no new features that had already become pervasive and popular with alternative browsers (popup blocking, tabs, etc., not to mention a lack of horrible inattention to security). I imagine Firefox's recent uptick in usage illustrates, even after all that, just how bad IE sucks. But this will only be good for Microsoft, and for everyone: if Microsoft feels it has competition from things like Mac OS X in OSes and Firefox in browsers, we get developments like SP2. We get a new "commitment" to security. We'll ostensibly get new features in and an attention to security in IE. (Well, we can dream, right?)

    I wonder how many dollars have been spent, or how many families have actually bought new computers (yes, it happens), once their PC slows down and/or crashes, hangs, or has other problems, to the point that it's virtually unusable. Yes. People really do this. They don't feel they can or know how to just wipe the machine and reinstall Windows, and even if they did, they don't know how to save everything they want to. So they just buy a new computer.

    1. Re:And it's too bad... by stecoop · · Score: 4, Informative

      ...in primarily Internet Explorer.

      Yeah you can look at the rate of change in browser usage. The fastest growing market in terms of percentage growth is the Mozilla family - I dont know of any spyware getting through Mozilla yet.

    2. Re:And it's too bad... by doppleganger871 · · Score: 1

      All the browser competition in the world won't help the one, big reason people use IE...

      The "average" computer user is a lazy, uninformed moron.

      As long as people "think" they can "use" computers, real computer "users" (who actually understand a spit of how things work) are left to be the janitors.

      Damn, I guess my view on this is pretty gloomy.

    3. Re:And it's too bad... by frankthechicken · · Score: 2

      ...that the vast majority of this spyware was installed by exploiting vulnerabilities (some overt, some more roundabout) in primarily Internet Explorer.

      Actually, believe or don't, the vast majority of spyware I've had to remove over the years, has been knowingly installed by the user. It has only been the users lack of knowledge of what the actually software does that has allowed it to be installed (incredibly, even after knowing, some people wanted the software placed back on their machines.

      Admittedly, there are more than a few cases when a user has unwittingly had software installed on their machine through the exploitation of vulnerablities in the browser. But hell, most of these were from the less salubrious sites, and if you go into sex sites, you better have decent protection.

    4. Re:And it's too bad... by kjs3 · · Score: 2, Insightful
      vast majority of this spyware was installed by exploiting vulnerabilities

      Not true. Our non-trivial (several thousand PCs) analysis of spyware at my company shows that the majority of the spyware initially infected machines by piggybacking on other programs that the users installed, such as iMesh, Gozilla, eWallet, etc. They didn't need a vulnerability, just a not-very-observant user.

    5. Re:And it's too bad... by The-Bus · · Score: 1

      I would say business do it all the time, speaking from experience.

      --

      Small potatoes make the steak look bigger.

    6. Re:And it's too bad... by cassidyc · · Score: 2, Insightful

      The average user is simply that.

      That does not make them morons in the same way your comment makes you a cockbite.

      You want to start showing me stat as to where the "average" is.

      Me I reckon that the average person knows what the hell is going on, and can fix a fair few problems, but maybe isn`t the hard core programmer/linux guru.

      Rather than taking the "intellectual" low ground maybe you want to to help inform, or maybe realise that computers (despite marketting) are not ready for everyone.

      Your view is gloomy because of all the shite you talk.

      CJC

    7. Re:And it's too bad... by spacefight · · Score: 1

      They're trying. While surfing through the web, I've seen multiple times that an .xpi asked me to "OK" its installation...

    8. Re:And it's too bad... by rm007 · · Score: 4, Insightful

      The "average" computer user is a lazy, uninformed moron

      With repect - and a great deal of sympathy (if not outright agreement, at least when I am trying fix something on a friend/relative's computer) I think that we should get away from this kind of mindset with respect to the "average" computer user. The average computer user is not interested in how things work, only that things should work and that they can use what ever piece of technology for the purpose they need it for. This extends beyond IT, to everything from plumbing, electricity, cars, furnaces, etc. Anything beyond basic operating and maintenance procedures gets in the way of use and should ordinarily be outside the domain of the "average" user. The problem lies with technologies and products (e.g. IE) that are poorly designed and therefore require more expertise from the average user than is appropriate.

      Sure it's easy to get frustrated with "average" users, but they should not have to be interested in how things work. Don't be so gloomy, there are worse things than being in a position to help a fellow human being with a problem.

      --


      I've finally got around to changing my sig
    9. Re:And it's too bad... by nolife · · Score: 2, Interesting

      We had a higher level employee that could not get into our Citrix farm from his home computer. We do not normally support home computers but we made an exception for him as he was willing to bring the PC into the office for us to look at. He was full of spyware. I ran the typical tools and ran all updates AND installed Firefox. I gave him a short story with Firefox and IE and how spyware was getting to his PC. He called back three weeks later and reported that he loves Firefox and asked why we are not deploying it office wide to all of our computers. I don't think this person qualifies as lazy or a moron but probably more like non technical. Not everyone can be an expert on everything. People still buy stuff from Best-Buy and Circuit City when there are many places online that are much cheaper, people still show up on a car dealer lot without a clue of what the invoice price really is and do not compare prices. Morons? I don't think so, uninformed, yes.

      --
      Bad boys rape our young girls but Violet gives willingly.
    10. Re:And it's too bad... by oexeo · · Score: 1

      > The "average" computer user is a lazy, uninformed moron.

      If you stuck Albert Einstein (presuming he was still alive) in front of a modern computer, the chances are he wouldn't have a clue, is Einstein a moron also?

    11. Re:And it's too bad... by magefile · · Score: 1

      So? If it tries, as long as you don't click "yes", that's OK. Perhaps (in order to protect non-techies) FF/Moz should alter that alert to say something about spyware, or make it less obvious (just a little icon in the corner?).

    12. Re:And it's too bad... by ssj_195 · · Score: 3, Informative

      In the latest versions of Firefox, all .xpi installs are blocked, except from sites included in a very small whitelist. The user is informed that a site has tried to install software, and that you must explicitly add the site to your whitelist if you want it to install. It's not a perfect solution, but it does at least add to the number of steps required for someone to install a .xpi on their system.

      In the end, though, the only way to combat user stupidity is through education (an uphill struggle) or by denying them the ability to install any software on their own system (which I balk at). It's a sad state of affairs :(

    13. Re:And it's too bad... by Anonymous Coward · · Score: 0

      If you stuck Albert Einstein (presuming he was still alive) in front of a modern computer, the chances are he wouldn't have a clue, is Einstein a moron also?

      Yes.

    14. Re:And it's too bad... by ssj_195 · · Score: 1

      I gather that some people, in after hearing about the havoc they can wreak, will fight tooth and nail to keep their copies of Gator, Weatherbug and Bonzi Buddy installed, and protest very loudly if they are taken away.

      It's depressing :(

    15. Re:And it's too bad... by cuzality · · Score: 1

      With the latest couple of versions of Firefox you don't even get that "3...2...1...Install" dialog until you add the website to your list of Allowed Sites -- you just get a bar at the top of window telling you that the download has been blocked.

    16. Re:And it's too bad... by Scurra+UK · · Score: 2, Funny

      You're forgetting that half of all people are below average....

    17. Re:And it's too bad... by eric_brissette · · Score: 0

      I've run into a lot of people installing spyware by going to free wallpaper / free screen savers websites.

      More and more of these sites don't offer a .ZIP to download, but an EXE to install the wallpaper along with New.NET or something similar. ThemeXP.org is doing it now.

    18. Re:And it's too bad... by Anonymous Coward · · Score: 0

      Oh yeah? And what exactly do you do?

      Are you an expert in all fields??

      Idiot.

    19. Re:And it's too bad... by reidc · · Score: 1

      I think with this guy you found, as would be the case with anyone, that just a LITTLE education can go a long way with people. I have found this to be the case with the people I have helped.

      It's like the saying goes: give a man a fish, he eats for a day. Teach a man to fish, he eats for a lifetime. Same with users and their computers. Fix it for them and don't inform them of how it got into the sad state to begin with, they'll have a fine-running computer for a few minutes on the net. While teaching them what happened will not eliminate ALL problems, it will eliminate a large majority of them.

      If no one ever told you to change the oil in your car, you'd have issues with it. Why do you change the oil in your car? You weren't born with the knowledge. Ultimately, someone educated you.

      Education is not a panacea, but it goes a long way toward helping.

    20. Re:And it's too bad... by sonicattack · · Score: 1

      How about a popup window that notifies the user that something tried to install software, or run a signed applet (with more privileges) on the computer - and that this functionality is disabled by default in the browser until the user explicitly sets an option to enable it.

      Yesterday, for the first time, I was warned by Firefox that the site (don't ask :^) I was visiting
      1) tried to install software and
      2) Wanted to run a signed applet (with a seemingly fake cert from "Thawte consulting").

      To protect the "clueless user", installing software should by default require some more actions by a user than a single click.

    21. Re:And it's too bad... by Anonymous Coward · · Score: 0
      So? If it tries, as long as you don't click "yes", that's OK.

      How is this any different than IE? Most people don't know what it means or just click "Yes" automatically out of habit. At least Firefox blocks it automatically (and subtley) and makes you add the site to a whitelist.

    22. Re:And it's too bad... by magefile · · Score: 1

      I agree with you, but it's better than IE because ActiveX crap can install itself without user interference.

    23. Re:And it's too bad... by cavemanf16 · · Score: 1

      I was going to moderate you 'flamebait' or 'troll,' but I just had to post a reply instead:

      First, try learning how to spell correctly in your posts. I also suggest not putting your thoughts down in one sentence paragraphs. Doing so makes you appear to have an intelligence that is "below average."

      Second, it appears that the parent poster really hit a nerve of yours in poking fun at those people who would rather spend an additional $1,000 - $1,500 on a brand new computer rather than just having someone come over and clean out the spyware for $50. Sounds to me like someone is feeling a bit sheepish over a rather costly error in logical thinking as of late.

      Lastly, why is it that American "homies" can't even come up with a decently spelled version of the word "shit" when trying to represent the phonetic "homie" version of the word: 'shee-it.' (or 'shee-ite,' or 'shee-it' if you prefer) The stupidity in writing 'shite' all the time in CounterStrike chat or on websites such as Slashdot drives me crazy!

    24. Re:And it's too bad... by NardofDoom · · Score: 3, Interesting
      Nonononono... The average user is a nice person who will give you lots of money to make problems go away.

      Your view is gloomy because you're not charging enough.

      --
      You have two hands and one brain, so always code twice as much as you think!
    25. Re:And it's too bad... by AviLazar · · Score: 1

      Oh its out there. I am not sure of what specific program - but one of my co-workers computer was rocked with spyware (i decided that after hours of adaware, spybot, & giant that it was time to nuke the computer). Before I did that (when I had hope for the machine) I decided to install firefox (i downloaded the program on my clean computer to cd).....when I *first* ran mozilla - it was already p0wn3d and was sent to about 5 different sites (one of which was porn).... I do not know what program it is, but its out there.

      --

      I mod down so you can mod up. Your welcome.
    26. Re:And it's too bad... by Darren+Winsper · · Score: 1

      Give him a couple of weeks and I imagine he would be managing OK, which is better than most people manage in two years.

    27. Re:And it's too bad... by bloodredsun · · Score: 1

      Not true! A small number of exceptional minds (such as Hawkins, Dawkins, Gell-Mann, Gosling, Gates... no scratch that last one) skew the average so poor shmucks like us are below the curve.

      Looks like it's back to the crayons and finger-painting!

    28. Re:And it's too bad... by ssj_195 · · Score: 1
      Lastly, why is it that American "homies" can't even come up with a decently spelled version of the word "shit" when trying to represent the phonetic "homie" version of the word: 'shee-it.' (or 'shee-ite,' or 'shee-it' if you prefer) The stupidity in writing 'shite' all the time in CounterStrike chat or on websites such as Slashdot drives me crazy!
      "Shite" is actually a synonym for shite; it's used reasonably often in Britain. It sounds a little bit classier than "shit" :) http://dictionary.reference.com/search?q=shite
    29. Re:And it's too bad... by nelsonal · · Score: 2, Informative

      I think the problem arose from Moore's law. Computers got too cheap too quickly. Think about another complex tool that transitioned from capital good to consumer product. I will use cars, but you could substitute power tools (think table saw or 1/2" drill), airplanes, or telephones. With autos, they existed for several decades before mass consumer adoption, mostly because until Ford developed the assembly line (and even in the early part of that) you needed to either be quite wealthy or have a real need use the device. By the time mass adoption was reached, the device had been simplified, and consumers had been educated that this could potentially be dangerous, so they learned at least something about the operation (and potentially basic maintenance) of the device. Computers moved to a price that allowed mass adoption much faster, and buyers assumed they were buying devices that had undergone the bug checking of other consumer products so they didn't take any more time to learn about the product they were buying or installing.
      After 20 years of debuging there are PCs out there that have reached that level of simplicity, they are called X-Boxes.

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    30. Re:And it's too bad... by cassidyc · · Score: 2, Interesting

      my spelling has less to do with my intelligence and more to do with how careful I am. Considering that my desk is a mess right now full of details design documentation, I'll let you work it out.

      One paragraph should make one point. Now if I am of such a below average intelligence that I can make my points with such a clarity that requires only one sentence, then so be it.

      The poster hit a "raw nerve" with his holier-than-thou attitude and aparent superiority complex. Now if someone wants to spend $1000 (or indeed 1000UKP) then they are welcome to do so. I was suggesting that the poster should get off his high horse and help the "averages" rather than insulting them

      Also shite does not necessarily come from "american homies", it's worth considering other dialect that may pronounce it shite as appose to shit (see I can spell both).

      "I smell shite" is a particularly Scottish phrase
      Maybe you would like to consider the amazing fact that the internet is accessible throughout many varied and interesting parts of the planet, and is not as US centric as americans would like to believe.

      CJC

    31. Re:And it's too bad... by t9k · · Score: 1
      "I wonder how many dollars have been spent, or how many families have actually bought new computers (yes, it happens), once their PC slows down and/or crashes, hangs, or has other problems, to the point that it's virtually unusable. Yes. People really do this."
      You're right, people do this. And if I'm involved I offer to help them revive their existing computers. But more often than not they insist on just upgrading hardware. On one occasion the owner of the spyware infected system agreed to give me the "old" Dell Dimension 500 (because it was "just too slow for XP") if I built them a new one. So they got a new P4 with M$ XP, I wiped the hdd on the Dell, installed Gentoo and slapped on a LCD flatscreen, Atlec Lansing speakers and it's a very impressive multimedia desktop. So everyone's happy :)
      --
      v/r - t9k
    32. Re:And it's too bad... by Anonymous Coward · · Score: 0

      Exactly.

      I run a small computer shop here in the UK. Most of my business at the moment is virus and malware removal. Most people treat PCs like their cars, they have no interest in figuring out how to solve the problem themselves, it's faster to take it to someone who knows what they are doing, even if that means paying for it.

      At my shop we charge £35 for a 'service', basically full virus and malware removal, plus optimisation stuff such as defragmenting the hard disk. Like the article says, spyware removal is big business.

    33. Re:And it's too bad... by cassidyc · · Score: 1

      median mean

      CJC

    34. Re:And it's too bad... by Zerikai · · Score: 1

      Freaked out when my girlfriend's mother bought a new PC just because it had 'slowed down'. I wonder, do the hertzs get tired and don't go so fast anymore?
      Of course, they will get no honest advise from any computer shop. Why would they give it? A customer that gets spyware and can be convinced into buying a new pc because of this, will soon buy you another one. And when they have doubts about this buying, they always come up with someone who can 'inherit' this massively spyware-owned zombie box.
      When I was at her parent's last time, pop-up windows were appearing from nowhere as usual. Brand new machine that performs many times slower than 2-year old spare PC.
      Tell you something, the business is in spyware installation, not removal.

    35. Re:And it's too bad... by Anonymous Coward · · Score: 0

      "A synonym for shit", rather. Doh!

    36. Re:And it's too bad... by Anonymous Coward · · Score: 0

      meh, I think the comparison between Xboxes and PC's is only at a hardware level. A person who cannot fix a simple thing with a car, for example, shouldn't be using a car in the first place. All they do is provide revenue for someone who can.

      People should have an idea of what something does before they use it. The next time that I have to explain to someone what RAM, CPU, HD or Motherboard is there may be violence involved....

      But seriously though it's more encouragment from others that stops a person learning how something works, or the simple fact that you don't REALLY need to know how it works, which I think comes down to laziness. That is how we get programs that are 6 Meg rather then 200Kb simply becceause it needs to provide a UI.

    37. Re:And it's too bad... by worksucks371 · · Score: 1


      True, there are a few spyware things for mozilla/firefox. However, your example was one that was already infected from IE. If the user was running Mozilla/firefox from the start. Chances are he would never of been infected, and exploited.

    38. Re:And it's too bad... by danheretic · · Score: 1
      The "average" computer user is a lazy, uninformed moron.

      Yes, and the average car user is a lazy, uninformed moron by the same logic. How many car users, do you suppose, know how to (or DO) change their own oil? Check their tire pressure? Check fluids? Get regular service & checkups? Upgrade their tires for the seasons? Rotate their tires? Know their gas mileage? Determine what kind of gasoline or oil is best for their engine? Pay attention to brake pad life? Fix a seatbelt when it breaks? (The list goes on...)

      How many average car users even read the freakin' manual?

    39. Re:And it's too bad... by leuk_he · · Score: 1


      I wonder how many dollars have been spent, or how many families have actually bought new computers (yes, it happens), once their PC slows down and/or crashes, hangs, or has other problems, to the point that it's virtually unusable.


      Previous years, not enough ram and a full task bar and a broken registry was blaimed.

      After that the finger aimed ad viri.

      Next year (now actually) spyware is blaimed for this.

      Don't underestime this fashion of things to blaim. sellers of anti-xxx software have done well last few years

      (qemm/ nortonav / next big antispyware seller)

    40. Re:And it's too bad... by Umbral+Blot · · Score: 1

      As sad as it may be that people throw away their computers when they become too spyware laden (and I do know people who have done this). It is good for the computer industry in the sense that it keep people buying new computers, when for many typical users they really didn't have to. Without a constant demand for new computers, computers would be improved less often and they would cost much more. Plus it makes for a very nice secondary market.

    41. Re:And it's too bad... by VendettaMF · · Score: 1

      Such people are the reason that Playstations and WebTV exist. They don't need (and shouldn't be allowed near) an actual unregulated free-styling "computer".

      --
      kartune85 : Incapable of reason, observation or learning. A kind of dim, drab, flightless parrot.
    42. Re:And it's too bad... by BVis · · Score: 1

      I'll agree that a little basic education is a vital part of the solution to the spyware problem. (The others being dumping IE and software-based solutions like AdAware, Spybot, etc.)

      However, the problem is that in a lot of cases the problem isn't ignorance, it's stupidity. (Please see my comment further up re: the difference between ignorance and stupidity. Earlier comment here )

      Many (if not most) "average" computer users don't want to be concerned with how it works, just that it works, as other commenters on this article have stated. When they are confronted with a problem that prevents the computer from working in some way (eg loaded up with malware) that requires them to decide whether they're going to be stupid or ignorant, many (if not most) will choose stupid each time, mostly out of laziness.

      In other situations, there are institutional blocks to user education, in a misguided attempt to coddle the users into thinking that they don't require any further training. In other words, if we make the users go to training classes on these problems, they will interpret it as IT telling them that they're stupid. (Leaving alone the fact that in a lot of situations, the user won't go to the training anyway; the example that I'm thinking of is in higher education, where the professors won't tolerate any implication that there's something that they don't know.)

      It's my opinion that lots of wasted man-hours (in IT) and lost productivity (by the users) could be prevented if the users could be told that they're stupid once in a while. That would make IT unpopular, but since when is the main function of IT to be liked? IMHO the main function of IT is to keep the systems running. If doing so ruffles some feathers, so be it. A little BOFH goes a long way.

      --
      Never underestimate the power of stupid people in large groups.
    43. Re:And it's too bad... by ZiakII · · Score: 1
      This goes both ways though I'll use my mother and my brother as an example, when I moved out both of them had their very own computer, while my mother was addicted to those anoying flash/shockwave games (with those anoying spy/malware everywhere) and my brother was addicted to kazaa.

      Well after 3 months when I came back for christmas both of theier computers where performing horribly due to all the spy/malware being loaded on their machine, so I formated both gave them both firefox, adaware, and the Symantec Antivirus and even gave my brother trillian, and kazzalite and (to try to prevent him from downloading some p2p program loaded with spyware) and educated them both on what to do, and what not to do.

      I came back later for 3 months and what do you know my mother was following my instructions and hasn't had a single problem with her computer, but on the other hand my brother ignored me completally continued to use IE, and even installed AIM on his computer (even after having trillian), which in end got him tons and tons of spy/malware.

      The conclusion of this story is, there are some people that can be educated and then there are others that just don't give a damn and will do as they please.

    44. Re:And it's too bad... by psyki · · Score: 2, Insightful

      I agree and disagree.

      I agree that the average computer user is not interested in how their computer works, only that it should work. I also agree that the problem lies with technologies that require more expertise from the average user that is appropriate. BUT. Given that, it is logical to conclude that the "average" user is going to have difficulties using their system. To use an analogy, just because my garage is full of tools doesn't necessarily mean I have the skills to properly tune an engine, or even change the oil.

      Computers are still very much at the point where they are tools that require skilled operation depending on what you want to do. Some tasks are obviously easier than others, although ease does not preclude education. For example even though I can buy a computer and have high-speed internet installed in days for just a few hundred dollars, doesn't mean I shouldn't be aware of viruses, spyware etc.

      It's a fundamental problem of what people expect from their computers, and it's a much larger problem than just IE as slashdotters would like to believe. For example it is not a trivial matter to produce even medium quality DVDs of home movies captured from a camcorder, but people assume that because "computers" can be used to do this task, THEIR computer must be able to as well. And it can, but only if you know what you're doing.

    45. Re:And it's too bad... by Horse+Rotorvator+JAD · · Score: 1

      The "average" computer user is a lazy, uninformed moron. As long as people "think" they can "use" computers, real computer "users" (who actually understand a spit of how things work) are left to be the janitors.

      The "average" car owner is a lazy, uninformed moron. Really. Lots of people cannot even perform a simple of a task as changing their oil. That is why we have mechanics. If every citizen were to educate themselves about how cars work then a lot of mechanics would lose their jobs.

      Same with computers. Many small busineses have a dedicated IT guy because the users are so unskilled that they need on site support every day. If users were to get a clue and learn how computers work then a lot of low level IT people; help desk, end user support jobs, etc. would lose their jobs.

      As long as they keep me in work, I could care less how clueless the average user is. Their cluelessness doesn't scare me. What scares me is that high schools often offer CCNA and A+ certification classes as electives. As computer savvy gets more common, IT pro's will be less in demand. If your job is selling fish then you probably do not want to teach your customers how to fish or you will put yourself out of business.

    46. Re:And it's too bad... by Robert+The+Coward · · Score: 1

      I have change my own oil, Check fluid & tire pressure but for the most part pay someone to do this things why. I drop a car off pick it up hours later with the new oil and pay less then $20.00 or pay $10.00 for parts and take a hour to do it myself. It not worth it to me. So someone for the most part does all this for me. I known something about car simple so I wouldn't get ripped off.

      List be true when was the last time you READ the freakin' manual for a pice of software?

    47. Re:And it's too bad... by rm007 · · Score: 1

      Computers are still very much at the point where they are tools that require skilled operation depending on what you want to do.

      I too agree and disagree. You have, for example, hit the nail on the head here. Computers and their related technologies do still require skilled operation, but that is not how or where they are being sold. The skilled/interested user is most likely to be found among early adopters and to a lesser extent parts of "early majority" sections of the classic sigmoid diffusion function that desribes the uptake of an innovation in market/population. The diffusion of computers is way beyond that now. In most developed economies we are looking "late majority" adopters and "laggards" getting online as prices come down, services like AOL and MSN promote themselves as easy to use and things like email become embedded in everyone's life. So, the technology is being marketed as safe and easy when it is not, and people who reasonably enough are not interested in how things work are getting their hands on it.

      Part of the problem, to extend your automotive analogy, is that even if all users should not reasonably be expected to be able to "change their own oil", they do have to know how to drive, including how to avoid getting into a traffic accident, and ideally, be able to put gas/petrol into the car and at least recognize that when an "idiot light" comes on, to take appropriate action. So what do you do? Insist on "driving tests" for computer purchasers? (Right, explain to my dad how buying a PC should be different than buying a TV...) Have everything pre-installed, including the "idiot lights" (And in a cut-throat commodity business, who is going to pay, and should I have to pay for such a loaded box too?)

      You are right in pointing out that users often come to technologies with naive assumptions about what they can do or how easily they can do it, but if they do, it is because they are being told this in the advertising. And just like a product such as IE or any other browser should be provided as a well designed secure product, either advertising has to set reasonable expectations, or manufacturers should actually supply easy to use technologies. Personally, I'm not holding my breadth waiting for either to become the norm.

      --


      I've finally got around to changing my sig
    48. Re:And it's too bad... by Anonymous Coward · · Score: 0

      Then there's people of incredibly diminished mental capacity (Dan Quayle, Dubya), and quite honestly I'm not sure that I'd lay down money on a bet that Einstein or Chomsky are smarter than Quayle or Bush are dumb (yeah, I know his ppl defend him by saying he's actually only ignorant, but I think he's both).

      It's a good point you make, but I think there's a case to made that we're mostly above average!

    49. Re:And it's too bad... by danheretic · · Score: 1

      Ahh, but the point is, you take the time to take it in and get serviced. You are at least aware of and care enough about your car to do the things that are supposed to be done. Whether you do it yourself or pay someone to do that is immaterial. People need to do that for computers too. Or at least, not expect it to "just work" if they don't.

    50. Re:And it's too bad... by ad0gg · · Score: 1
      ...that the vast majority of this spyware was installed by exploiting vulnerabilities (some overt, some more roundabout) in primarily Internet Explorer.

      Really? Prove it. Find a website that installs spyware using an IE exploit. I haven't seen one.

      You know what I consider is spyware also. Third party cookies set by banners. That way advertisers can track you across multiple sites. See where you shop, see what you view. So why is that IE blocks 3rd party cookies by default and firefox doesn't? You did remember do turn off 3rd party cookies? Those banners are spying on you and it didn't even require any software to be installed.

      --

      Have you ever been to a turkish prison?

    51. Re:And it's too bad... by jc42 · · Score: 1

      My favorite comment on the concept of the "average person" is that the average adult has one breast and one testicle.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    52. Re:And it's too bad... by Vombatus · · Score: 1

      ... that the average adult has one breast and one testicle.

      I would have thought that the average human would have a breast count of very, very close to two

      Or have you been too busy perv^h^h^h^hlooking at girls to notice that men, in fact, usually have 2 breasts as well?

      --
      This sig is intentionally blank
    53. Re:And it's too bad... by jc42 · · Score: 1

      Heh. Yes, to a medical person, it's pretty obvious that all adult humans have two breasts. But in common speech, they only qualify as "breasts" if they protrude visibly.

      Of course, in this sense, some women lack breasts. And some men have them. In any case, in the common-speech sense, the average (mean) is pretty close to one per adult person.

      And in the medical sense, the average is slightly below two, since some adults have had mastectomies.

      We might also note that, strictly speaking, the mean number of testicles per adult is somewhat below one. There are slightly more adult females than males, and a few males have had one or both testicles removed.

      But none of this really affects the joke, since it's based on mocking the concept of "average" with an utterly silly example.

      (Some time back, The Onion had an article that was a detailed comparison of apples and oranges. Actually, it was a variant of an earlier article in the Annals of Irreproducible Results.)

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    54. Re:And it's too bad... by Anonymous Coward · · Score: 0

      Also shite does not necessarily come from "american homies", it's worth considering other dialect that may pronounce it shite as appose to shit (see I can spell both).

      "I smell shite" is a particularly Scottish phrase Maybe you would like to consider the amazing fact that the internet is accessible throughout many varied and interesting parts of the planet, and is not as US centric as americans would like to believe.


      Actually, from the way that cavemanf16 talks about "american homies" I would say that he is not from the US. Why is it that whenever someone talks about how narrow sighted someone online is the "must" be from the US? Both of you are talking as if americans are the only idiots online and both of you assume that the other is an american. Interesting, is it not?

    55. Re:And it's too bad... by doppleganger871 · · Score: 1

      I pay $4 per quart for oil, * 6 is $24. Another $6 for the Wix 51515 Filter, is $30. Now, if I were going to take it to a place to get a full synthetic oil change done with a Wix Filter, and Mobil 1 Synthetic 10w30 or 5w30, I'd be paying about $60. No thanks, I'll just spend the half hour and do it myself, Keep the $30, and use it for fuel. Or ammo. Or reloading supplies. Or geeky stuff. Hell, maybe even spend it on the wife. :)

    56. Re:And it's too bad... by doppleganger871 · · Score: 1

      I see your point. Well, if you think about it, everyone is basically using software that is NOT in tune with the hardware. The hardware is tested, and tested, and pretty much performs flawlessly, until you need software to control it. Ahha, there lies the problem. If the software WAS better, and didn't need constant babysitting, everyone would be better off... except for us janitors.

    57. Re:And it's too bad... by Robert+The+Coward · · Score: 1

      Yes, But when I bought my car it said in the manual that it needed an oil change every 5,000 Miles or 6 Months. It says there are certain things that need to be done to keep it in order. There is no such text in my manual for my PC. I known because I am the type of person who read slashdot that I need to do things like windows updates to keep my PC safe and running but as someone who has done tech supports for over 7 Years now many people never even known they were supose to do even that. The manual for most PC read like a TV and make it sound like all you have to do is turn on the Computer and it should just work. I blam MS and people like dell for marketing a PC like a TV and not like a car.

  6. $15/hour? Well, maybe in the call center. by Shag · · Score: 5, Interesting
    I'm a mercen... er, I mean, an independent technology consultant out in the field, and when someone has so much malware on a Windows XP box that they can't even log in to the poor beast, they're generally more than happy to pay psychic-hotline rates to get someone out there who can and will fix it for them.


    I travel with a frequently-updated set of tools for exorcising various demons from PC's, and am accustomed to mucking about in the registry, winsock stacks and other oh-so-fun places to finish up the job.

    --
    Village idiot in some extremely smart villages.
  7. Open source spyware removal utilities? by tcopeland · · Score: 3, Interesting

    Googling didn't bring up anything helpful... I can see a couple of possible barriers:

    - most developers aren't clicking on email attachments
    - it's tedious work; rooting around in Windows Registry and system folders isn't fun
    - it'd need to be constantly updated to be effective

    It's a tough row to hoe...

    1. Re:Open source spyware removal utilities? by Jokkey · · Score: 1

      A fourth reason - free-as-in-beer, closed-source spyware removal utilities are already ripped off by unethical software companies (see here for an example), and this would discourage people from making open-source utilities that would be even easier to rip off.

    2. Re:Open source spyware removal utilities? by eric_brissette · · Score: 0

      Although it would be interesting to see it go the other way..

      An open source spyware removal utility that has the ability to utilize the definition files from multiple closed source programs...

      (if that were legal, I mean)

    3. Re:Open source spyware removal utilities? by stevey · · Score: 2, Interesting

      I contemplated starting something, a while back and am still fairl interested.

      There are four parts to a decent anti-spyware suite:

      • GUI + Update mechanism.
      • Registry Scanner
      • File System Scanner
      • Process Iterator

      All three parts are trivial and something pretty looking could be hacked together in a week or (much) less to do all those things.

      The really hard part is building up and verifying the patterns which can be used to identify spyware - and then removing it.

      (Many spyware applications nowadays use "random" keys on install so it's not even a static list).

      You'd need to be prepared to have a scratch system to test spyware on - and you'd nee dto accept submissions of malware from users.

      If the clamav people can do it then it's certainly possible - but it's not a simple thing to do.

      People sponsoring bandwidth / hardware / cash would be a real incentive.

    4. Re:Open source spyware removal utilities? by JagerBomb · · Score: 1

      At my shop we charge $45/hr in store for repairs. For Spyware we enforce a minimum 1.5hr charge and have a repair policy thatthe customer must review, agree to and sign. I put togather a simple script I use on a CD that auto matically installs Spybot S&D and Ad-aware SE, then launches both, updates, scans, cleans. Copies CWShredder, Kill2Me, HSRemove and HighJackThis! to a Utilities folder in Program Files and then runs each (user intervention required here:-( ). It also creates a folder called 'Utilities' in there Start Menu that contains shortcuts to Ad-aware, Spybot S&D, CWShredder, Kill2Me, HSRemove and HighJackThis!

  8. meh by Gerfervonbob · · Score: 2, Insightful

    If only they knew how easy it is to remove.

    1. Re:meh by Anonymous Coward · · Score: 0

      If only they knew how easy it is to remove.

      Says somebody who has certainly never encountered any of the myriad variations of Coolweb.

      I'm a Network Security Consultant and trying to remove that piece of shit from a friend's laptop nearly caused me to have a nervous breakdown. I seriously considered packing it all in and becoming a chicken farmer.

      Oh, you say "just use Spybot and AdAware and you'll be alright!". Just fucking try it before you make any more smug comments. I'd rather eat powdered glass than do battle with that again.

  9. it's all a conspiracy. by Anonymous Coward · · Score: 0

    conspired from those damn porn site admins.

  10. How much to charge by Darthmalt · · Score: 1, Offtopic

    I'm going to start doing spyware removal next semester at my college campus. But I cant decide how much I should charge. What do yall think?

    1. Re:How much to charge by doppleganger871 · · Score: 1

      $50 for the typical scan and clean. $100 for the manual registry hack with the scan.

    2. Re:How much to charge by larsoncc · · Score: 2, Informative

      I have a "regular job", but I can't help but being drawn into this.

      I charge $50 per clean. About 30% of the time, I get a tip too, ranging from $5 to $20. I always call em back a week later to be sure they're happy.

      Reinstallation may sometimes be necessary (not often). Sometimes, it's far less time consuming.

      I never do a "freebie" anymore. There's just too many of them. I'd drive myself mad.

    3. Re:How much to charge by Darthmalt · · Score: 1

      wow I was thinking more along the lines of $20 or less per hour. most these students are perpetually broke and would balk at two high a price.

    4. Re:How much to charge by Darthmalt · · Score: 1

      what age user are you dealing with?

    5. Re:How much to charge by PalmerEldritch42 · · Score: 2, Informative
      I've been doing this for a few months now and my standard rate is $50 to get started. An easy removal (Spybot/AdAware) will be just that. If it gets more complex and requires any real work (registry hacking, TCP/IP stack repair, etc) then the price increases- so far, I have not gone over $75, but I can envision some infections that will be more expensive... I have a policy where if the stuff comes back within 2 weeks (generally meaning I did an incomplete job), I will fix it again for free. If they get reinfected again after that (which I assume means they have been doing something they shouldn't), I charge another $25.

      In addition to the removal, as a value added service, I do a good bit of training- including how not to use IE/Outlook (I install Firefox/Thunderbird for them) and how to not open attachments, etc. If they continue reinfecting themselves, I just keep coming out and charging them again and again. It is quite a cash cow for some of these folks who must go to their little java game sites and who open every possible thing that they are sent...

      It is even easier in many cases where I can do the entire thing through NetMeeting from my house, so I get paid full price and don't even have to leave home.

      --
      Ceci n'est pas une sig.

      :wq!

    6. Re:How much to charge by larsoncc · · Score: 1

      Youngest client was 23. Typical client in their late-twenties. A few in their 40s. Clients in their twenties are "late college" - still students, but totally screwed if their computers don't work.

      The people in their 40s are the ones that tip.

      I understand, of course, that college kids are broke.

      However, keep in mind, the market is much, much larger. Suggest a price of $50, and if they balk, offer a barter deal or other arrangement. Just be sure that the "MSRP" is $50 so you don't get people saying "dude, this guy does this for CHEAP!!oneoneeleven"

      Post fliers in the English / Art grad student areas. Or Journalism. Or marketing.

    7. Re:How much to charge by Anonymous Coward · · Score: 0


      1 Six pack of bud for installing & running spyware removal tools...

      1 twelve pack for manual cleanings...

      if the customer is female and broke tell her she can take it out in sexual favors if she is pretty...

    8. Re:How much to charge by Anonymous Coward · · Score: 0

      It is quite a cash cow for some of these folks who must go to their little java game sites

      Please give one example of where a java game infected a user. while there was one jre vulnrablility discovered a week ago there hasn't been anything 'live' that exploits it.

      Give an example of a spyware ridden java games site.

    9. Re:How much to charge by jeffkinney · · Score: 1

      Spyware is definitely a bigger problem than viruses and spam, and we've seen a huge increase in business because of it.

      Using scan tools and/or manually removing spyware is very time consuming and doesn't always yield the best results. For the average customer off the street, formating the drive works best.

      Our shop charges a flat rate of $127.50 to backup the entire hard drive, reload the system from scratch, install all updates, and restore the user files from backup.

      The customer leaves happy, and we know that we're not going to get a call because a spyware program reinstalled itself after it left our shop.

    10. Re:How much to charge by liber8ed · · Score: 0

      I charge $50 to show up onsite for one hour and $30 for each additional hour. Spyware removal and scans usually take about 2-3 hours. If they will drop the box off, I charge $75 flat fee and they get a more exhaustive cleaning. (i can drink while the scans run)

      All cleaning includes having adaware and spybot installed and spybot set to immunize. Also an install of firefox w/ flash, java etc and setting it to be the default browser, plus a brief instruction

      I have been doing 2-3 boxes a week which makes for a nice side income. I would estimate that %90+ percent of average home windows users are infected, even people who are somewhat knowledgable windows users.

    11. Re:How much to charge by Anonymous Coward · · Score: 0

      *rolls eyes*

      It's not the Java game ITSELF that hands out the malware, its their presence on a page that also contains malware.

      When a person says they have to get their Java game fix on, they're not talking about Java doing the damage - they're pointing out that these games have to RESIDE ON A PAGE SOMEWHERE. Since our open source buddys like to give stuff away, unscrupulous individuals take advantage of that, and find a way to make a profit - off the backs of a generous donation to the world community, I might add.

      A "popular" example is yahoogamez (used by "Follow the Bouncing Malware" series of articles at SANS)

      Here's a link to begin reading about the site, and the consequences.

    12. Re:How much to charge by Anonymous Coward · · Score: 0

      *rolls eyes*

      More like *sucks cocks*

      It's not the Java game ITSELF that hands out the malware, its their presence on a page that also contains malware.

      Then why single out Java, when plenty of websites that have flash based games do the same thing? It's the same old ignorant "java is insecure assumption that might have been vaild in 1995 but isn't now.

    13. Re:How much to charge by Anonymous Coward · · Score: 0

      wow I was thinking more along the lines of $20 or less per hour. most these students are perpetually broke and would balk at two high a price.

      Would they balk at three high a price?

    14. Re:How much to charge by A+Naughty+Moose · · Score: 1

      Don't do it for less then $25/hour. Unless you don't have a job (at all) then it really isn't worth your time, as you got to account for the "hidden" costs of doing business. Like: Creating CD's with the latest and greatest spyware/virus removal tools, the latest Service packs, etc). Your time to learn to use the tools (ie: what they'll remove and what they miss), your time to get to their residence, your time getting back from the residence, the time that your taking off from doing personal activities, the time it takes to find the client in the first place, etc.

      I live in a college town, people gladly pay $50/hour to have their computer usable. It might take them a while, but when finals are near, and they can't print or do research, or email, or whatever they need to do, they start looking. It doesn't hurt that my competition is charging $70-$120/hour, just for pc repair. $50 is very reasonable.

    15. Re:How much to charge by Anonym1ty · · Score: 1
      $50.00! What are you crazy!

      I charge $40.00 per hour --- If I'm feeling nice, if not it's $90.00 and then I usually take 2-3 hours fixing a computer. I don't just remove the spyware and adware I also fix the computer and take active steps to keep this from happening again. I also clean up and organize the computer. --- You might think that re-arranging a start menu or deleting useless desktop items might not be such a good idea, but I have found that it is the most appreciated service and it also gives the client something they can see that has changed. Now I am careful to ask a client how they use their computer before starting and MOST IMPORTANT, I explain what I have done and why and show the user how to use the computer.

      The only down side is I usually never need to do it again, but the plus side is word-of-mouth. I usually get 5 new clients for each one I take and have had to turn away many potential clients. I can choose who I want to work for and I can work whenever I want. Everything is on my terms and the people are willing to bend over backwards for me. I usually get tips, free lunch/dinner, cases of beer, wine or cheese -and have been offered more than once to be flown across the country to do work for people.

    16. Re:How much to charge by Anonymous Coward · · Score: 0

      Yeah, students can't cough up that much. Make it $15-20 an hour, with the addendum that they let you skim over their mp3 collection while you're in there.

    17. Re:How much to charge by ej0c · · Score: 1

      Am i getting the same machines you guys are?

      The one I finished this morn was a nice Dell XP with SP2 already installed, and only about a dozen spyware and 6 virus instances. It still took 5-6 hours of cleaning.

      I've only had two that I charged less than $100 for. And felt abused on the rest.

      $10 / hour don't buy much health insurance - epecially when FICA takes its toll.

    18. Re:How much to charge by larsoncc · · Score: 1

      Yeah, no way I'd charge that little if it were my primary job. Not a chance!

      But... These are people that I know typically - contacts that I enjoy maintaining.

      Organizing start menus and the like - I can't tell you how many people think that deleting an icon means the program is gone. It's hilarious.

      I guess I would charge more if it were complete strangers, or I didn't have other income...

    19. Re:How much to charge by Anonym1ty · · Score: 1
      I can't tell you how many people think that deleting an icon means the program is gone. It's hilarious.

      You're right, it is funnny... I try to make sure I explain exactly what happened to their stuff and why. Once they understand they always think it's great.

      You know what else is funny? --- Just go into their control panel and jack up the mouse speed and slow down the double-click speed... everyone thinks their computer is really fast then

    20. Re:How much to charge by derrick92130 · · Score: 1
      I think different people have opinions about what "cleaning" is. Many people are offering a "cleaning" where they simply run an updated anti-virus program, Sypbot S&D and AdAware. Many shops (like the big chain stores) are offering this type of thing at their shops for something at or below $100 and probably takes them 2-3 hours. From my experience, this is incomplete since most systems I see have never had regular Windows Updates, have old or expired anti-virus definitions and require significantly more work. When I do a "cleaning", I usually do the following (not necessarily in this order):
      • Purge typical TEMP file locations (for users and Windows).
      • Complete virus scan with at least 2 anti-virus programs.
      • Windows Update. Quite often this is more time consuming than any other step since it is not unusual to need to complete 20+ updates and SP2 for XP.
      • Run AdAware and Spybot S&D (multiple times)
      • Examine all existing running processes, BHOs, etc using tools like HiJackThis (not for casual users).
      • Install Mozilla Firefox and SpywareBlaster to provide some level of protection going forward.
      • As long as the system is there, do a little XP tuning and defrag the hard drive if necessary (optional step).
      Time spent is usually 5-6 per system. At $200 per system, you still have to do more than one at a time to begin to make a real business out of it.

      In reading through these threads, it sounds like most people are just doing this as side work, or as an augmentation to their existing PC business.
    21. Re:How much to charge by ej0c · · Score: 1

      Thanks. That is a lot more reassuring. I just did all that (except it already had SP2), plus updating Office (also a security threat), and thought I was ahead in only spending 5-6 hours on and off. Then I reduced my price to $90 because of all I'd read here.

      This is rural Appalacia, so I doubt I'll be seeing many $200 price tags, but I feel a lot better about the $120 or so I was charging. (Well, except for that health insurance thing!)

  11. Macs mysteriously unaffected? by Shag · · Score: 1

    Oh, I neglected to mention that in my dealings with spyware infected systems, although I've seen (and exorcised) spyware on everything from Windows 95 to Windows XP (SP1 for sure, not sure if I've cleaned it off an SP2 box just yet), for some strange reason none of the Mac users I support seem to have gotten any yet.

    --
    Village idiot in some extremely smart villages.
    1. Re:Macs mysteriously unaffected? by Anonymous Coward · · Score: 0
      "Why write spyware for a totally irrelevant part of the computer market?"

      It's not nice to speak about Windows users that way.

    2. Re:Macs mysteriously unaffected? by TheRaven64 · · Score: 1
      Writing spyware for the Mac is not particularly hard - most of it is installed by the user, rather than by OS exploits. I would guess that there is less (none?) for the Mac for two reasons:
      1. There are fewer Mac users, making them a less attractive target, and
      2. There are fewer Mac developers, making it more expensive to develop Mac spyware.
      --
      I am TheRaven on Soylent News
  12. comparison by Claire-plus-plus · · Score: 4, Insightful

    WOuld we pay for a car if every billboard we passed was capable of taking control of the vehicle and making it drive to other billboards? I don't think so. Why then will we pay for windows.

    --
    99 bottles of beer in 175 characte
    1. Re:comparison by RTMFD · · Score: 0

      Huh? How does this analogy work? How this hell is this "Insightful"?

      If I post something saying "BillG sux" will I get modded up, too?

    2. Re:comparison by oexeo · · Score: 4, Insightful
      WOuld we pay for a car if every billboard we passed was capable of taking control of the vehicle and making it drive to other billboards? I don't think so. Why then will we pay for windows.

      Why does every /. analogy involve a car?

      One of the fallacies in this analogy is that car hijacking billboards will probably kill you, where as spyware probably won't.

    3. Re:comparison by wwest4 · · Score: 1

      Maybe it's because slashdot is US-centric, in the US, US transportation is dominated by automobiles, and therefore the metaphor is more widely understood.

      Lugnut. ;)

    4. Re:comparison by Claire-plus-plus · · Score: 1

      Yeah, and I'm an Aussie, we were quick to adopt your favorite mode of transport. The city I came from (Perth Western Australia) apparently had more cars per capita than any city in the world in the 80s

      --
      99 bottles of beer in 175 characte
    5. Re:comparison by Anonymous Coward · · Score: 0

      > One of the fallacies in this analogy is that car
      > hijacking billboards will probably kill you,
      > where as spyware probably won't.

      Yes, but this is Slashdot, where everything is taken to extremes and im(proba/possi)ble situations.

      I expect that shortly, somebody will post something like "But what if I had a home-made pacemaker with WiFi, running Embedded Windows and connected to the internet, that suddenly got hijacked?"

    6. Re:comparison by oexeo · · Score: 1
      Maybe it's because slashdot is US-centric, in the US, US transportation is dominated by automobiles, and therefore the metaphor is more widely understood.

      I can understand that, but I'm sure plenty of other widely understood things could also be substituted. Besides, it was simply an observation, I didn't expect to start a debate on it.

    7. Re:comparison by Anonymous Coward · · Score: 0

      But what if I had a home-made pacemaker with WiFi

      Sounds like a great question for Ask Slashdot.

      An anonymous reader asks "I'm building a pacemaker out of components from an old 286 and a toaster..."

    8. Re:comparison by Anonymous Coward · · Score: 0

      Yeah, down with imagination. Thinking creatively about possibilities is absurd and dangerous!

      Apparently, slashdot means "everyone posting at /." except you.

    9. Re:comparison by Anonymous Coward · · Score: 0

      > Yeah, down with imagination.

      Right, because I really said something even remotely close to that.

      I'm just saying that somebody will post an inane comment, and likely be modded "+5: Ever So Insightful", when their comment actually has nothing to do with the topic at hand.

      Evidently, Slashdot to you means "all comments must be valid, because I cannot take the time to judge them on my own".

    10. Re:comparison by 91degrees · · Score: 1

      Why does every /. analogy involve a car?

      I have no problem with this. What I do see as a problems are:

      People try to use analogies as proof (as opposed to illustrations)
      When the analogy is flawed, you get half a dozen people attempting to correct it and making it more unweidly in the process rather than saying "No, the analogy sucks, because...".

    11. Re:comparison by Anonymous Coward · · Score: 0

      You are wrong.

      Take my analogy:

      A car (with AI) posts on slashdot an analogy proving without a doubt you are incorrect.

      Do you see my point?

    12. Re:comparison by wwest4 · · Score: 1

      > Besides, it was simply an observation, I didn't expect to start a debate on it.

      Oh now it's ON!

    13. Re:comparison by swv3752 · · Score: 1

      Because cars are common complex machines that idiots can use? What else is used by regular people that is as complex?

      --
      Just a Tuna in the Sea of Life
    14. Re:comparison by Anonymous Coward · · Score: 0

      In Australia you have cars? I thought you rode kangaroos everywhere.

    15. Re:comparison by Anonymous Coward · · Score: 0

      > Because cars are common complex machines that idiots can use? What else is used by regular people that is as complex?

      A computer. Damn.

    16. Re:comparison by Anonymous Coward · · Score: 0

      Tried driving around in my car without windows. Flies/teeth interface maxed out.

    17. Re:comparison by wwest4 · · Score: 1

      Because cars are common complex machines that idiots can use? What else is used by regular people that is as complex?

      Easy: the clitoris.

    18. Re:comparison by SenorChuck · · Score: 1

      It comes from the same place as all of the trolls wanting spammers locked away to rot for the rest of their natural lives. Same tired argument - lost time is lost money. If that were the case, I should have my boss locked away for the rest of his life for all of my time that he's wasted in pointless meetings.

      --
      A wise person makes his own decisions, a weak one obeys public opinion. -- Chinese proverb
    19. Re:comparison by Anonymous Coward · · Score: 1, Funny

      > In Australia you have cars? I thought you rode kangaroos everywhere.

      Car. Kar. Karg. Karga. Kargao. Kargaroo. Kangaroo!

    20. Re:comparison by swv3752 · · Score: 0, Offtopic

      Fine, then you need to write up some computer to sex metaphors. :-P

      --
      Just a Tuna in the Sea of Life
    21. Re:comparison by PetoskeyGuy · · Score: 2, Insightful

      Because the Manufacturer already paid for every copy and buying computers WITHOUT windows is often even more expensive. It's a hidden cost.

      Why do you pay for a cayalytic converter in your car? It works fine without it, or you can install one yourself cheaper.

      Most people are never given the choice of making a purchase and deciding what bits they want or don't want. Given the choice most people wouldn't have the skills to take advantage of the savings.

      Think convenience, think McDonalds.

    22. Re:comparison by Gumph · · Score: 1

      As an aside to this, yes, /. is US centric but it is getting less so I think, esp. as most (55%ish acording to a recent poll) readers either do or would like to live outside the USA!!
      Quelle Surprise

      --
      'By the pricking of my thumbs, something wicked this way comes'
    23. Re:comparison by clickster · · Score: 2, Funny

      You know, if cars made stupid, unfounded comments like this...oh.

      --
      If you mod me down, I shall become less powerful than you could possibly imagine.
    24. Re:comparison by 0racle · · Score: 1

      I don't know where your going to, but I don't have, and never have had, a problem with spyware, and yes I paid for Windows.

      --
      "I use a Mac because I'm just better than you are."
    25. Re:comparison by Ronin+Developer · · Score: 2, Insightful

      Spyware won't kill you directly.

      But, after your bank accounts have been drained and your credit cards taken to their limits, you might wish you were dead.

      I had my identity stolen a couple of years ago. Buggers were allowed to open up accounts are large department stores without even a cursory check on their ID or validation of the info they put on the applications.

      Fortunately, one of the stores called to "verify" that I had opened an account and, as such, I was altered to the problem.

      My information quickly travelled ( less than a week) across several states very with one store being a a relatively local store (two towns over). They had a picture of the individual (who is not even the same ethnicity or race as I). At one store, they purchaed $5,500 worth of computer and AV equipment and, of course, a protection plan. They do that to lower the red flag of a high value purchase = seems more legitimate. Wish it had been me who bought the stuff...it was good stuff (HDTV monitor and decent PC's).

      Because, in the end, I suffered no actual loss (just a lot of aggravation), the police did a quick investigation and closed it. To my knowledge, they didn't catch the guy(s). But, I put a block on my credit and it didn't take too long to get my credit report straightend out. I now keep the various credit company's fraud help line numbers handy and shred personal and financial correspondance before it goes in the trash.

      It could have, easily, been far worse and damaging.

      Did they get the info from my PC? Possibly, but not likely. More likely, they got my info from the trash or through a compromised vendor.

      Since then, I have been overly compusive about scanning my systems for viruses and spyware. And, I run Firefox. Amazing what a difference THAT makes in reducing spyware.

      RD

    26. Re:comparison by owlstead · · Score: 1

      It's probably taken from the OO examples where a car IS_A vehicle and HAS_A steering wheel, a set of tires and CAN ride from A to B.

      It is also used as an analogy for building software. But that analogy is as badly flawed as a cow. As are most other analogies with cars or cows in them.

    27. Re:comparison by Anonymous Coward · · Score: 0

      "One of the fallacies in this analogy is that car hijacking billboards will probably kill you, where as spyware probably won't."

      Financially it can kill you.

    28. Re:comparison by whats_a_zip · · Score: 1

      It's not that much of a stretch, actually. It's commonplace in the medical imaging field for physicians to interpret images on Windows workstations. Those are the facts, the scenario is do-it-yourself.

    29. Re:comparison by Anonymous Coward · · Score: 0

      That happened to a friend's cousin!

    30. Re:comparison by AcornWeb · · Score: 1

      I was altered to the problem

      Surely you mean alerted? :-)

      --
      Your Windows PC is my other computer.
    31. Re:comparison by Ronin+Developer · · Score: 1

      Perhaps, it was just a Freudian slip? Then again...

      It's amazing how easy it is to write something, proof it and still overlook basic spelling and grammatical errors. The brain has a way of filling in overt ommissions and making us blind to such things.

      Ideally, one should write something, put it away for a few days, and then proof the document. But, hey, it's /. !!!

      Cheers!

      RD

  13. Not that I trust anti-virus companies... by tod_miller · · Score: 1

    But build your own market has never been easier with MS windows.

    THe ULTIMATE irony is if M$ sold thier own spyware-removal tool...

    Also, there are so many fraud looking sites selling a million an one spyware removal tools...

    Sorry, but educating users on easy removal of software, and mandating all software should be easily removable (an OS binary tracker which tracks file creation etc would be nice!).

    Also, any software that breaks these 'principles' can be defined as malware, and is criminal. obviously this would need a lot of careful thought, but generally, programs need to play as advertised, or play nice [because you might want to buy a program that hides itself away].

    --
    #hostfile 0.0.0.0 primidi.com 0.0.0.0 www.primidi.com 0.0.0.0 radio.weblogs.com
  14. Re:frist post by pope-on-a-rope · · Score: 0

    I'm afraid you fell a little short on this one.

    --
    What's life? Life's easy. A quirk of matter. Nature's way of keeping meat fresh.
  15. Yeah we already knew this? by jmcmunn · · Score: 1


    For years now we've all know it was big business. Ad-Aware and SpyBot S&D just to name a couple. I've been running these ever since I had highspeed internet.

    Ans this is front page news?

  16. Similar to AV's, right? by Anonymous Coward · · Score: 0

    You guys always think that AV's are still in business because they wrote the virus. Same thing with anti-spyware business? They are the ones writing the spyware? :)

  17. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 0

    yeah no shit. on time i got my ass beat by i bunch of no-good keisters, just for removing spyware from some bitches laptop!

  18. Re: There are repercussions though... by Anonymous Coward · · Score: 0

    I just did this (clean up spyware for a relative) last weekend while I was visiting. Then yesterday, mom calls and says the computer has no sound anymore. ... How I caused this, I don't know! But what am I to do, I live 7 hours away!

  19. Dynacomm I:scan has Forensic capabilities by farsideofthemoon · · Score: 1

    Check out FutureSoft's i:scan Personal Edition and Enterprise edition. Both are well equipped to tackle the respective duties. I personally believe creating your own File Signatures is far more secure than relying on updates from vendors. The scary thing is all of the other functionality the Enterprise version gives you... Beware, big brother commeth..

    --
    I know what's on your hard dr
  20. The REALLY nasty malware... by Shag · · Score: 5, Interesting

    In my opinion, most spyware is easy enough to get rid of using tools like Spybot-S&D, SpySweeper and AdAware. The one category that I've found harder to remove are the ones that embed themselves into the Winsock chain and redirect network features.

    I cleaned out one PC last month - it wasn't infected too bad, only several dozen things for the scanners to complain about, and I've dealt with systems that had several hundred! - but even after everything seemed to be gone, its default search URL and things like that kept getting hijacked. I had to grab a tool to fix the Winsock chain; some malware had slipped itself in there and was screwing things up.

    --
    Village idiot in some extremely smart villages.
    1. Re:The REALLY nasty malware... by sphealey · · Score: 2, Interesting
      In my opinion, most spyware is easy enough to get rid of using tools like Spybot-S&D, SpySweeper and AdAware. The one category that I've found harder to remove are the ones that embed themselves into the Winsock chain and redirect network features.
      Just finished a 3-day trip to disinfect a remote office. My findings were a combination of Ad-Aware, Spybot, and Hijack This would find most spyware, but to actually remove it required multiple reboots into safe mode and manual deletion of registry keys, EXEs, and DLLs. The malware seems to be watching for the scanners to run and spawning new copies of itself whenever you try to remove it.

      sPh

    2. Re:The REALLY nasty malware... by Shag · · Score: 1
      That, and there are some malware that exist specifically to download and install new malware (or "replacement" malware if some has been removed. :)



      Of course, some of the removal tools insist on having a network connection, which is stupid since more stuff infests the machine while you're trying to remove the existing junk. Sigh. :(

      --
      Village idiot in some extremely smart villages.
    3. Re:The REALLY nasty malware... by Archangel_Azazel · · Score: 1

      --but to actually remove it required multiple reboots into safe mode and manual deletion of registry keys, EXEs, and DLLs.--

      Could you please direct me to some information about this? I'm a budding computer geek, I can get around the 'simple tools' (Ad-Aware, Spybot, etc.) but I'm mortified to go rooting around in the registry and mucking about with dll's, which is why my machine is *still* running slow despite having a clean bill of health from both the aforementioned programs.

      Any info would be appreciated, thanks!
      A.A

      --
      Your mind is like a parachute. It works best when it's been opened.
    4. Re:The REALLY nasty malware... by sphealey · · Score: 1

      Unfortunately, it is a matter of Google + experience (not to say intuition). I have been mucking around with the Windows registry since the REG.DAT file appeared in Windows 3.1 and screwed up all our carefully planned network software deployments.

      But the biggest factor is that I am not afraid so screw around with anything, as our employees have been told "if it isn't stored on the server, it isn't being backed up and it is YOUR responsibility". If worse comes to worst I know I can always scrub off the machine and reinstall from scratch in about 3 hours.

      Go buy yourself a $200 PIII machine at your local used dealer and practice screwing it up, reinstalling (XP and Windows 2000), and screwing it up again until you are confident. Microsoft systems are not deterministic, in my experience, but they can be understood with practice.

      sPh

    5. Re:The REALLY nasty malware... by Jakhel · · Score: 2, Informative
      For the DLL's

      For mucking around in the registry

      And one last good all around resource

      have fun and good luck.

    6. Re:The REALLY nasty malware... by sphealey · · Score: 1

      Ah, one thing I forgot to mention: working with the Registry (at least through W2K) usually requires using both REGEDIT and REGEDT32 - the former for searching and reading the contents of keys, the latter for doing the actual manipulating and changing of security. And REGEDT32 usually works when malware has deliberately malformed the key so REGEDIT can't find it.

      Why Microsoft hasn't merged these two apps I don't know. Probably to keep the guru factor high.

      sPh

    7. Re:The REALLY nasty malware... by True+Dork · · Score: 1

      For the embedded Winsock ones, use lspfix.exe. Just be careful. Some of those are supposed to be there.

    8. Re:The REALLY nasty malware... by Anonymous Coward · · Score: 0

      I have pretty much stopped cleaning this crap up. If someone wants to use Windows and accumulate this stuff, I just tell them to wipe it clean and reinstall. I will do it for them for about $100 (unless they are a friend). I know this probably makes me look lazy, but is it really worth anybodies time to spend hours on this? After time windows starts running like a dead snail anyway, a good reinstall is a good thing.

      Funny thing is... people feel the need to buy new computers because they think their PIII 800 is too slow, when all they do is surf the net. Wipe it clean and reinstall windows... suddenly they see that it is just fine. They don't realize that their computer really DID get slower... its not just them comparing it to new machines.

      I have never really had a problem myself with any malware, but I guess I don't download every "free screensaver" program advertised in pop-up windows either.

    9. Re:The REALLY nasty malware... by pilkul · · Score: 1
      Stupid question, but could someone please tell me where exactly this spyware comes from? I hear all about new users getting hundreds of pieces of spyware but I have no idea how this happens. I mean, personally I've never gotten a single piece of spyware. Yes, I'm relatively savvy and use firefox and browse behind a firewall, but even when I used IE last year I never got any spyware despite often browsing the web all day.

      So, how do these newbies get so much spyware? Many of them only visit hotmail and Google News as far as I can see. I'm honestly baffled about this.

    10. Re:The REALLY nasty malware... by sphealey · · Score: 1

      It is not as hard as you might think. One click on an advertisting link, one visit to an infected web site (and if you were using IE a year ago I would be VERY surprised if you didn't have at least the DSO Exploit registry keys installed on your system; every system I have looked at does), one browser plug-in is all it takes.

      Here are 3 parts of a 4-part article from SANS with detailed explanations of how it happens:

      Part I - http://isc.sans.org/diary.php?date=2004-07-23
      Par t II - http://isc.sans.org/diary.php?date=2004-08-23
      Par t III - http://isc.sans.org/diary.php?date=2004-11-04

      And that doesn't include any e-mail or graphics exploits.

      sPh

    11. Re:The REALLY nasty malware... by Shag · · Score: 1

      Yep, LSPFIX rules. I'm pretty sure that's the one I used to get rid of the last shreds of evilness on the computer last month. :)

      --
      Village idiot in some extremely smart villages.
    12. Re:The REALLY nasty malware... by Shag · · Score: 1

      "Wipe clean and reinstall" is all well and good for a current home computer, sure.

      When I'm dealing with a Win9x box in the 300-500MHz category that someone's been using at a business since Cthulhu-knows-when, though... it's less of an option.

      For starters, their OS media is probably conveniently buried somewhere in a storage unit, along with fascinating things like boxes of old SCO diskettes, badge-engineered copies of Windows 3.0 that could be bought from companies other than Microsoft, and... general cruft. Maybe the license key is with it. Maybe. :)

      More importantly, though, they've usually got 3.2 metric sh*tloads of specialized business apps on there that only 100 people on the planet have even heard of, the media for those is even MORE lost, the companies that made them are long gone, and each app has its own misguided 1990s-vintage approach to licensing or "copy-protection" anyway. Bleah.

      Nope, reformatting and recreating that steaming heap actually wouldn't take me LESS time...

      --
      Village idiot in some extremely smart villages.
    13. Re:The REALLY nasty malware... by pilkul · · Score: 1
      I would be VERY surprised if you didn't have at least the DSO Exploit registry keys installed on your system

      Er, indeed I do but from googling "DSO exploit" these appear to be a vulnerability in IE that could potentially let in spyware, not an actual piece of malicious spyware that someone "installed" on my system.

      Thanks for the links. Yeah, I suppose if you go around visiting sites like "yahoogamez.com" (so sleazy-sounding!) that would explain it.

  21. Those are quite some numbers there. by Anonymous Coward · · Score: 0

    "IDC also estimates two-thirds of PC users out there are infected."

    What would the numbers be without inexperienced computers users opening suspicious electronic mail messages (and attachments) and downloading applications like Bonzai Buddy?

    1. Re:Those are quite some numbers there. by acidrain69 · · Score: 1

      What would the cost of computer components be like w/o everyone and their dog owning a PC? What would the job market be like?

      --
      -- Having a Creationist Museum is like having an Atheist place of worship
  22. This is why Apple is un-American by FunWithHeadlines · · Score: 4, Funny

    Just think how un-American Apple computer is. Do Macs contribute to the growing anti-spyware business? Hardly at all! Why almost no money is being made removing spyware from Macs. Why hardly anyone has heard of spyware for Macs in the first place. Can you imagine taking bread from the mouths of the little children of anti-spyware software developers? Won't someone please think of the children?

    1. Re:This is why Apple is un-American by Anonymous Coward · · Score: 0

      while I realize your post it tounge and cheek I hope most Mac zealots realize the only reason there is no spyware for mac is because the number for mac boxes out there aren't worth the spyware makers time.

      (Yes, I do work on a mac (g5!) all day and also own a PC)

    2. Re:This is why Apple is un-American by FunWithHeadlines · · Score: 1

      I also use both a PC and a Mac, and I know what you are saying, but it's not the whole story. OS X is just inherently more secure than Windows by default, and you cannot get things to happen automatically on OS X in the same way that you can with Windows along with IE and Outlook. It's not just that there are fewer Macs (only tens of millions instead of hundreds of millions), it's also the more secure default installations.

    3. Re:This is why Apple is un-American by ch-chuck · · Score: 1

      The parent insightful comment, while in jest, actually is my theory of how Msft got to where they are, by allowing oxygen for lots of cottage industries to come along to do clean up, like Symantec. In other words, it's kinda like the local garage mechanic recommending buying so-and-so automobile, knowing that it's junk and he's going to get a lot of work fixing it.

      Even Dave Barry has written about how challenging and exciting it is for technoids to get a Windows machine running, as opposed to boring old Apple Mac's that users just plug in and use.

      --
      try { do() || do_not(); } catch (JediException err) { yoda(err); }
    4. Re:This is why Apple is un-American by Deviate_X · · Score: 1
    5. Re:This is why Apple is un-American by upsidedown_duck · · Score: 1


      Therefore, the artificial limitation of the supply of drugs and the subequent high prices in the USA is good, right? I'd be heartbroken to see a drug pusher have to give up their $100K BMW. Heartbroken, I tell you.

      --
      -- "Makes Little Debbie look like a pile of puke!" - Moe Szyslak
    6. Re:This is why Apple is un-American by FunWithHeadlines · · Score: 1
      Nope, that's not it. It's the more secure default installations of the OS and standard apps. Don't forget, Apple sells an increasing number of machines. The fact that the worldwide shipment of dirt-cheap clone PCs increased at a faster rate doesn't negate the fact that people traditionally hang on to their Macs longer than people hang on to their PCs. You can easily use a three- or four-year-old Mac with OS X. In fact, it tends to get faster over time as OS X becomes more efficient. Try doing that with a generic Windows box.

      So although the new shipment of Apples may rank low in market share, the actual percentage of computers in use is higher than that. And with tens of millions of Mac in daily use, it's a plenty big enough market for spyware. Oops, turns out it's a LOT harder to write successful spyware for a computer where the spyware has to pop up a box asking permission first. Too bad for spyware developers, but happy days for Mac users who don't have to worry about spyware...or viruses.

      But hey, the Security By Obscurity argument seems to be fairly common around here. Go ahead, Windows users, keep thinking that the only reason you suffer so much annoyance is because you run a popular OS. The rest of us will just chuckle and keep on not being bothered.

    7. Re:This is why Apple is un-American by grassy_knoll · · Score: 1

      I have mod points, but decided to post since I can't decide if you're being funny or insightful.

      Either way, great point.

    8. Re:This is why Apple is un-American by FunWithHeadlines · · Score: 1

      Thanks. I was just trying to be funny, and as it happens all the mod points I got were for that. "Insightful"? Boy, I sure hope not. If my "reasoning" were ever taken seriously, I would get seriously depressed.

    9. Re:This is why Apple is un-American by martinX · · Score: 1

      Problem with that is that a lot of spyware is installed on a PC with the user's approval - nay, the user's help. The nifty screensaver, the "downloader helper", the pretty thing that dances across the screen.

      There was recently news of a malware package for OS X but it seemed to require full user installation!

      Malware like that doesn't often target the Mac, I believe, because of low numbers of machines to hit. If we increase in numbers, that may change. While we are probably safe from automatically spreading worms and viruses, never underestimate the stupidity of the user.

      --
      When they came for the communists, I said "He's next door. Take him away. Goddam commies."
  23. Thank you Microsoft by finkployd · · Score: 5, Insightful

    Microsoft is really helping the computer industry lately. First their initial decision to make outlook express execute any script embedded in email by default kick started the mostly dead antivirus industry into the powerhouse it is today. Now their forward looking decisions regarding the security of ActiveX and Internet explorer has created a whole new industry of spyware detection and removal.

    Think of the revenue and jobs created by these decisions.

    And Unix (Linux, OS X too), with your anti-economy designs like user accounts that cannot write to system areas, web browsers that do not support a web site's ability to covertly install software behind the scenes, and email clients that do not interpret VPscript, you should be ashamed of yourselves. If popularity of these OSes rises too high, it could seriously damage the antivirus and antispyware industries, causeing a loss of revenue and jobs. Congress should really do something about this.

    Finkployd

    1. Re:Thank you Microsoft by grasshoppa · · Score: 1

      Ok, any one else more than a little unnerved by the points made in this point?

      I know it was supposed to be funny, and I'm really trying to laugh. But it's coming at as more a nervous chuckle.

      --
      Mod me down with all of your hatred and your journey towards the dark side will be complete!
    2. Re:Thank you Microsoft by finkployd · · Score: 4, Insightful

      It is no different than the typical thinking of lawmakers today. The DMCA, Verizon's recent bill in PA, these types of laws are written for the expressed purpose of making sure those pesky citizens do not do anything that could threaten the revenue stream of big companies. We need those big companies to provide us jobs and keep the economy going, and any new disruptive technology threatens that.

      This should be no surprise, the decisions voters make are based mostly unimportant (in the grand scheme of things) knee jerk issues or worse, the just vote party lines. The elected officials are not beholden to them, they know they will get voted in as long as they have enough money to put out the critical mass of ads (and dig up dirt for attack ads), which is where corporations with campaign finance come in. The REAL constituants. Senator Fritz Hollings was completely owned by Disney to the point where they should have been listing him as a company asset in their tax filings. He fought for laws to help them, laws that in no remote way helped the voters in his district. Ed Rendell voted against the interest of Pennsylvanians because it was in the best interest of Verizon, who is one of Ed's best contributers.

      This is how governemnt works today, all it takes for my earlier post to go from +5 (funny) to -1 (already happening) is for the IT industry to get some friends in congress start talking about how things like "open source" and "gpl" hurt existing industry and should be outlawed.

      They are already trying in the courts (what do you think SCO is really about?), if that fails, I'm sure congress will be next on their radar.

    3. Re:Thank you Microsoft by Archangel_Azazel · · Score: 1

      I agree...but mostly because I keep hearing it out of the mouth of our Lord and Saviour George W. *shudders*

      A.A

      --
      Your mind is like a parachute. It works best when it's been opened.
    4. Re:Thank you Microsoft by FuzzyBad-Mofo · · Score: 1

      The fact several people modded this humorous comment insightful scares me..

    5. Re:Thank you Microsoft by NardofDoom · · Score: 1

      Which is precisely why I support a strong push for colonization of Mars or the Moon. They'll have a really hard time policing me there.

      --
      You have two hands and one brain, so always code twice as much as you think!
    6. Re:Thank you Microsoft by acidrain69 · · Score: 1

      This is a two way street. Yes, people do make money off fixing this stuff, but think of the productivity and downtime lost due to this stuff. That is money that could be going to expanded operations and better wages (read: CEO bonus).

      --
      -- Having a Creationist Museum is like having an Atheist place of worship
    7. Re:Thank you Microsoft by NaugaHunter · · Score: 1

      What's sad is how well Lincoln predicted it.

      I see in the near future a crisis approaching that unnerves me and causes me to tremble for the safety of my country. As a result of the war, corporations have been enthroned and an era of corruption in high places will follow, and the money power of the country will endeavor to prolong its reign by working upon the prejudices of the people until all wealth is aggregated in a few hands and the Republic is destroyed.

      'The prejudices of the people'? I'll leave it as an exercise for the reader to see if they can come up with any recent examples of this.

      These capitalists generally act harmoniously and in concert to fleece the people, and now that they have got into a quarrel with themselves, we are called upon to appropriate the people's money to settle the quarrel.

      To answer those who won't read the link as to why he uses the term 'capitalists', in regards to Lincoln's time: "this is invariably in the context of a nation where NO MORE THAN ONE MAN IN EIGHT is a Capitalist or a Laborer, ie, where 7/8 of the population are "self-employed" on their own farms and homesteads."

      --
      R: That voice. Where have I heard that voice before? B: In about 365 other episodes. But I don't know who it is either.
    8. Re:Thank you Microsoft by aardwolf204 · · Score: 1

      Trust me this is insightful, but if you have anything remotely to do with "fixing computers" (windows) you will likely profit from this. I'm all for everyone switching to secure, open platforms but worry about what it would do to the economy, and tech jobs in general. Then again the optimist in me says that those jobs are not gone, just displaced. Maybe instead of cleaning out the latest browser toolbar we'll be doing something more interesting.

      Basically, spam, worms, viruses, and spyware are good for the economy specifically good for computer geeks. We, in general, have been so tied to Microsoft in the last 10 years that these billion-dollar annoyances are written off as if they were acts of God or natural disasters.

      Thankfully I whole heartedly believe that there can only be so many times that you can have your home hit by hurricanes and start the disaster relief efforts before you decide to move elsewhere.

      --
      Im dreaming ofa big bndwdth, That can resist the /.crowd.May ur days b merry & bright & may al
    9. Re:Thank you Microsoft by finkployd · · Score: 1

      I was being sarcastic. It frightens me that my comment was moderated "insightful".

      Finkployd

  24. aint what it used to be by BrianGa · · Score: 1

    Am I the only one unimpressed by the $12 million figure?

    1. Re:aint what it used to be by lucabrasi999 · · Score: 2, Funny
      Am I the only one unimpressed by the $12 million figure?

      Good point! It reminds me of Doctor Evil -- "One MILLLLLIIIIOOOOOONNNNNN Dollars!"

    2. Re:aint what it used to be by BrianGa · · Score: 1

      Heh, no kidding

      Though I doubt the $12 million figure includes all the "I'll buy you dinner" offers we all get (and accept).

    3. Re:aint what it used to be by Anonymous Coward · · Score: 0

      Am I the only one unimpressed by the $12 million figure?

      Well duh, obviously 12 million dollars is a small amount to the admin of gamemaster-online.net!

  25. Free beer - AGAIN! by gmknobl · · Score: 2, Funny

    More free beer! Wow! I think I've detected the secret underlying thread in /. !!

    Seriously though, my uncle's family from Greenville, SC (read Bob Jones University - no, don't mean to offend anyone's religious beliefs here but I have a beer point to make ;-) have asked me for computer help on occassions but for obvious reasons, that never got ME any free beer.

    I'm going off to cry in my beer now...

    Mmmm, salty!

  26. Daily Spyware by gmerideth · · Score: 2, Interesting

    Its 9:32 am my time and since 6:55 am I've been at 4 computers removing a combination of spyware on what we thought were fully patched (at least windows update and hfnetchk pro claims are fully patched) systems.

    It's almost a daily event at our office, wake up, get to work, drink coffee, remove daily spyware....

    This is one group of our population I would gladly invent a story about a giant goat about to eat earth just to get them the hell off.

    --
    Why do overlook and oversee mean opposite things?
    1. Re:Daily Spyware by Anonymous Coward · · Score: 0

      If you switch to FireFox, and get Outlook to use FireFox for viewing emails, then you can stop most spyware from getting onto those machines. Also, most sites work in FireFox now, which makes your life a lot easier if you can switch the people. Unless you are really into job security. ;)

      Just hide their Explorer icon, and put up a FireFox icon in its place, or change the icon of FireFox to look like the icon for Internet Explorer, and when they ask why it looks different, just tell them it is a new update to IE. Users are so dumb they fall for this part pretty easily.

    2. Re:Daily Spyware by Politburo · · Score: 1

      Fully patched systems are easy to infect with spyware. The user need only click "Yes".

    3. Re:Daily Spyware by radish · · Score: 1

      Maybe you can help me with something. Where is all this spyware coming from? I've been running multiple windows boxes at home for many years, and I can't remember any of them ever getting any malware (correction - I did have some fun with the original Kazaa a while ago). So if people are seeing so much infection - where's it coming from? Exploits? Users installing dumb screensavers?

      I would have thought that prevention would be better than cure (it usually is). I sit behind a firewall, with a decent A/V scanner running, and I never run IE. I do still use Outlook for mail, but the A/V scanner picks up the occasional trojan which comes in that way. Windows update keeps things patched. As for trojans in downloads, well obviously being a geek I am reasonably careful about what I install. The other user on the network (my GF) has a user account, not admin, so she can't install stuff anyway. So far so good.

      I don't think that any of these things are beyond most users, and should be trivially easy to setup in an enterprise...am I missing something?

      --

      ---- Den ene knappen er powerknapp, den andre er Bender voice knapp "Bite My Shiny Metal Ass"

    4. Re:Daily Spyware by BVis · · Score: 1

      But then you can't charge them each time they mess up their machine.

      --
      Never underestimate the power of stupid people in large groups.
  27. Prosecution by bogaboga · · Score: 4, Interesting
    Is there any remote chance of getting these spyware authors prosecuted. Where does the law stand on this? After all, it's in the US where all sorts of law suites can be entertained by courts.

    My argument woud be that these authors are invading my privacy when I legitimately get onto the web.

    On the other hand, I will shoot myself in the foot by seeing their potential argument too:

    They could argue that by visiting specific sites and probably clicking some links, I agree to enjoying all services they offer on these sites including stuff that would be installed on my PC.

    Any legal minds here?

    1. Re:Prosecution by ej0c · · Score: 1

      You must not have read yesterday's Slashdot! (Shame!) :-)

      http://it.slashdot.org/article.pl?sid=04/12/01/1 53 5228

    2. Re:Prosecution by Anonymous Coward · · Score: 0

      Why should he have read it? I mean, are stories on Slashdot posted to be read before commenting? How do you know that he is for example NOT a new Slasdot member?

    3. Re:Prosecution by Theseus192 · · Score: 1

      What is illegal about invading your privacy? The government does it all the time. Seriously, I thought most prosecutions of crackers have been for things like wire fraud. Crimes against big companies. Spyware goes after the little guy, so I see slim to no chance of the government stepping in. To intefere in the "data-driven marketing industry" would be stifling innovation! Or something.

      --
      If stupidity got us into this mess, then why can't it get us out? - Will Rogers
    4. Re:Prosecution by Anonymous Coward · · Score: 0

      What is illegal about invading your privacy?

      See Roe v Wade. Oh wait, that is the SPECIAL law that only has to do with privacy. Anything else is ok...

      The government does it all the time.

      See above

      Seriously, I thought most prosecutions of crackers have been for things like wire fraud.

      It used to be, but I believe there have been a few laws passed nowadays that make it 'illegal to access computer data that you were not given access to' or some vague statement like that.

      Crimes against big companies. Spyware goes after the little guy, so I see slim to no chance of the government stepping in.

      Agreed, look how long it took for them to do anything about telemarketers.

    5. Re:Prosecution by shaneFalco · · Score: 1

      Well, invasion of privacy can often be grounds for prosecution, but you have to be able to prove it occured. And if the government has demonstrated anything in technologicaly related cases its that they really don't understand how computers work. I doubt a criminal charge would be effective. Probally wouldn't get more than a M6. What I think would send a clear message to malware writers is a civil suit. But then again, a lot of malware writers hide so incredibly well, or may not even be in this country. So in short..... fat chance in hell of busted them anytime soon

    6. Re:Prosecution by Anonymous Coward · · Score: 0

      In that case you target whoever is the beneficiary. Just like prosecuting cases involving posting of illegal bills. You can't just have bills from whose message you gain posted [carelessly] anywhere in Canada at least. How about that?

    7. Re:Prosecution by BVis · · Score: 1

      There's an argument you can make here that may encourage the spyware developers to stop using the drive-by installation features of IE and go back to requiring user intervention. You might think that that would be counter-productive to their aims, but I would disagree. If a user is required to click to install spyware, they are giving permission to the authors to install the spyware on their machine. Therefore any consequences of said software being installed (information theft, privacy invasion, etc) are soely the responsibility of the user. If that user is an administrator on the machine (and I'm thinking of Windows here), then they are giving the spyware access to every file on the machine.

      In a lot of cases the EULA that nobody reads (and I'm just as guilty as the next guy of this) has language in it that gives the developers of the spyware pretty much carte blanche to do whatever they want. And since the user has agreed to it, there's no crime. Even if one were to file a civil suit, there would be no grounds; all the defendant company would have to do is point to the EULA (which the courts have determined are binding) and say "We made a good faith effort to inform the user of the conditions of the use of our software. If they chose not to read the contract they were agreeing to, we cannot be held responsible."

      Blaming the victim? You bet I am. Then again, taking advantage of people's ignorance has never been criminal. If it were, AOL, WalMart, and most of Madison Avenue (and IMHO the Republican Party) would not exist.

      --
      Never underestimate the power of stupid people in large groups.
  28. Spyware removal is big business? by lucabrasi999 · · Score: 2, Funny

    And, this is news? It's sort of like announcing "Hey, the Moon causes the Ocean Tides to Rise and Fall"

    1. Re:Spyware removal is big business? by mistersooreams · · Score: 1

      Waa waa waa, I submitted that article and it got rejected.

    2. Re:Spyware removal is big business? by LaCosaNostradamus · · Score: 1

      That's because nobody likes you. Life's tough; get a helmet.

      --
      [You have a stable society when some nut guns down a schoolyard and the law doesn't change.]
  29. It's not all gravy!! by spidergoat2 · · Score: 0

    Those of us that do in-house support have to spend hours every week cleaning up spyware and it just goes with the turf. There no money in it. A friend called Geeks on Call and they charged her $400 to clean her PC. I think all in-house support people should start sending bills to these advertisers for the cost of my time spent removing their programs. Who's with me?

    1. Re:It's not all gravy!! by ej0c · · Score: 1

      Can I give you the bill I'm making out right now?

  30. Spyware removal is huge business for me! by 31415926535897 · · Score: 3, Informative

    I can tell you that spyware removal is about 90% of my consulting (side) business these days. I can usually rake in an extra $300-500 / month thanks to all the spyware problems. I feel bad when I have repeat customers, but I do spend a good amount of time educating the users and immunizing their PCs, but they always find new ways of getting spyware on their computers (it always seems to be the kids and their p2p "needs"...).

    Now, as an industry, I don't understand why so much money was spent. There are outstanding tools and tutorials on removing every type of spyware, and every it seems like all the best ones are free.

    If you want any pointers or tips on spyware removal, and you don't live in my area :-), I'll be glad to help you anything I can.

    1. Re:Spyware removal is huge business for me! by Shag · · Score: 1
      Bah, they say it is the kids and their P2P. ;)

      When I'm going through cleaning stuff out of a machine, it's usually pretty obvious what happened. There'll be a lot of evidence that the user's been going to "free"-whatever sites, or online casinos, or pr0n sites, or whatever.

      Was cleaning out a machine (and this was at an office - I deal with the SMB market - and the nice lady insisted that she didn't go to any of those sites. I just smiled and nodded at all the casino web site cookies, given that Vegas is about the #1 destination for folks here. :)

      Most folks blame their bosses, I've found. "He has keys, and he uses everyone else's computers after hours." Probably true, too!

      --
      Village idiot in some extremely smart villages.
    2. Re:Spyware removal is huge business for me! by Anonymous Coward · · Score: 0

      AFAIK there is no way to remove CoolWWW.

      So I switched my parents to Linux.

    3. Re:Spyware removal is huge business for me! by TykeClone · · Score: 1

      When I do that, I hand out a "weekly computer maintenance" document that shows the users how to run Spybot and AdAware. At that point, it is up to them to keep their computer clean and free of the pests.

      --
      A fine is a tax you pay for doing wrong and a tax is a fine you pay for doing all right.
    4. Re:Spyware removal is huge business for me! by inquisitor · · Score: 2, Informative

      Not really true. Some CWS variants are really really hard to remove (in extreme cases, using the oxymoronically-named HackerDefender rootkit to disguise itself, plus hide and shut down CWShredder, AdAware, Spybot S&D et al when you try to install them), but everything is possible.

      Basically, if CWShredder, Spybot and AdAware don't work for you, and you can't see anything on your HijackThis! log, first step is to search on the now slightly outdated CWS Chronicles and then on many of the excellent anti-spyware forums out there, all of which have encountered more variants of CWS than you could ever imagine. If you can't find someone else with the same problem, then post your HJT logs and other stuff and someone should be able to help you.

      These parasites (it's not all spyware anymore) are now really, really, really out of hand - the CWS people, especially, but there's even worse people out there - and something needs to be done to stop them. Unfortunately, that's not going to happen anytime soon - since the companies that make most of these are "legitimate businesses", as opposed to idiot teenagers with Visual Basic. Shame.

    5. Re:Spyware removal is huge business for me! by loudmouth · · Score: 1

      When you say that spyware removal tools are "free" I guess you aren't counting the generous donations you've made to Spybot and whoever else is doing the actual work while you rake in all that money. Right?

    6. Re:Spyware removal is huge business for me! by Anonym1ty · · Score: 1
      ....then post your HJT logs and other stuff and someone should be able to help you.

      I wish Google would stop indexing posted HJT logs. It used to be so easy to look up a file found in the start up or in one of the system directories... you just type it in to Google.... Now doing that just gives you 1000s of peoples HJT logs whith a bunch of useless speculative answers after them.

      Not that I think people shouldn't post their HJT logs looking for help, I just wish Google would stop indexing them.

    7. Re:Spyware removal is huge business for me! by Xibby · · Score: 1

      The best way to prevent new spyware installation: remove administrator access! My girlfriend has 4 younger brothers. There is one family PC...I was out there quite often until I created an account for the parents and one for the kids.

      The kid's account doesn't have a password or administrator access. The parent's account has a password and administrator access.

      Then I removed everything P2P related, and immunized the system, and all that good stuff.
      After that, things have been running smoothly as the parents have at least a small clue about technology.

      --
      I'm going to go back in my box and will think within the limits of my box: MS Sucks Linux Good I read too much Slashdot.
    8. Re:Spyware removal is huge business for me! by ej0c · · Score: 1

      Yeah verily!!

    9. Re:Spyware removal is huge business for me! by Spoing · · Score: 1
      While I agree it is annoying, and would like Google to take the additional step of killing off the link farms, it's not impossible to find what you're looking for.

      Limit the scope of your search to a site ( site:sitetosearch.com ), add extra search terms, or take some away ( -skippageswiththisword ). If you already do these things, look at the O'Reilly Google Hacks book for more advanced techniques.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    10. Re:Spyware removal is huge business for me! by Anonym1ty · · Score: 1

      Usually I just bookmark a useful site... the only problem is that when I'm not at the same computer or out in the field I can't remember what it is... and then sometimes I don't remember enough of where i found useful information to limit the search in google either.

  31. The law? by capica · · Score: 1

    That's the reason they can't outlaw spyware! Too much money involved. pity. Same goes for spam. Anti-spam tools are turning even more money. Yea, yea, I use spamassassin too, but many of the people pay for it (at least with their ISP bills, who install them onto their servers).

  32. Overzealous perhaps? by paranode · · Score: 1

    A jump from 12 to over 300 million dollars is a big estimate. I wonder if the people who put these things together understand much about the computer industry and how spyware works. There is a large demand for it now, obviously, but I'm skeptic that it will grow as they predict. Even Internet Explorer is much more careful about spyware now, and they've got several years before that projected date comes to pass. Sure people will still click "Yes" and get it, but I find it hard to believe the rate of infection will go up so dramatically given the default protections most browsers (and now Windows) have put into place.

  33. Unwilling mercenary... by ej0c · · Score: 1

    ..He reads as he's writing the bill for yet another syware removal job.

    Yeah they're out there, but how do I keep out of the poorhouse with this? I'm spending 10-15 hours on the worst of these: it's hard to charge a family more than a new Dell costs to remove this stuff.

    How do people do it? The free beer idea gets old when you have no god-father day employer.

    1. Re:Unwilling mercenary... by Shag · · Score: 3, Interesting
      I don't touch people's home computers, for starters.

      I deal with computers at businesses, 10-200 employees in general. Computers that should not be misused, on the desks of people who should know better.

      Simply put, if somebody's home PC gets screwed up, it's not worth my time to fix it, since 1) they can't afford it as you've pointed out, and 2) it'll be hosed again next week.

      I've gotten to the point where I'm starting to point out to my clients that hey, if they run something other than Windows, this will not happen to them.

      --
      Village idiot in some extremely smart villages.
    2. Re:Unwilling mercenary... by ej0c · · Score: 1

      Sounds like a good plan.

      I don't believe there are any companies with 200 employees in this county. In fact, the county itself is my largest customer. ( And some of them feel a $14 billing rate is too high for web development).

      So I'll be doing home computers for awhile!

    3. Re:Unwilling mercenary... by Syrrh · · Score: 1

      Simple, you're trying too hard. If someone's system is so badly hosed that a basic scanner sweep can't remove everything that looks suspicious, reformat the sucker. If your clients are leery of letting you see their secret porn stashes on the hard drive then they can do their own backup. As it comes back up and they find that their themes and screensavers are gone, you can explain that's what caused the problem in the first place.

  34. The War on spyware by l4m3z0r · · Score: 1
    It really is a losing battle, we don't need better tools or more IT people to combat spyware. What we need is more education of users and less use of IE. Time and time again I show my boss how the Firefox users never have any trouble, this is for 2 reasons, people willing to use firefox are generally more tech savy and browse smartly and of course because it is more resistant to that crap than IE(understatement).

    My attitude is to make the users suffer and then blame there browsing habits when they piss and moan about the computer being slow(as though its my fault). Eventually I'm hoping my boss will either switch to firefox or hold safe browsing education sessions that are mandatory. Preferably both..

  35. Invest in Non-spyware by Anonymous Coward · · Score: 0

    I heard www.apple.com is a good place to get spyware-resistant computers.

    Or try the underground communist system called Linux/GUN!!!11!one!!

    Anonymous Cow

  36. Re: There are repercussions though... by Pxtl · · Score: 1

    vnc

  37. Re: There are repercussions though... by Anonymous Coward · · Score: 0

    Maybe the speakers are turned off?

  38. Re:Of course it is! Spyware only did good for me! by ZoneGray · · Score: 5, Funny

    Y'know what sucks? Having to tell your father to be more careful about visiting porn sites.

  39. Not just that by pwnguin · · Score: 1

    The largest cost of spyware is me. 7 bucks an hour for 20 hours a week at my U as tech support. It sure beats working at the mall.

    1. Re:Not just that by Anonymous Coward · · Score: 0

      I get 8.15/hr at my school... Same job, and we're generally not busy for 3/4ths of the semester.

    2. Re:Not just that by NardofDoom · · Score: 1

      Not to mention young coeds with pert breasts feeling grateful for having saved their computer...

      --
      You have two hands and one brain, so always code twice as much as you think!
    3. Re:Not just that by LaCosaNostradamus · · Score: 1

      It's not a matter of the existence of being grateful, but the quantity of being grateful. You can then move onward to issues of quality ... say, over dinner.

      --
      [You have a stable society when some nut guns down a schoolyard and the law doesn't change.]
  40. Curbside research by Sai+Babu · · Score: 1

    suggests that an economically significant portion of the population rationalizes their new computer purchases, in part, as a purchase of 'a new windows' as a way 'get rid of the bugs'.

    Sure, they want the new hardware anyway, but the old computer would be just fine if it weren't so fscked up by nefarious code. The new windows, in the box, is a couple of hundred bux and the whole new PeeCee is less than $1000. Plus, the disk is getting full and those cost $ and when I add in the cost of someone installing all this stuff I ,may as well buy a new 'clean' PeeCee!!!

    Not just curbside PeeCees, but dinner party conversations with the Doctors and PhD festooned non-computer professionals, suggests that the rogue software is a market force overall, not just for maidservice software.

  41. No Wonder by sameerdesai · · Score: 1

    Normally when we want to get something done from our systems division we create a help desk ticket and we have options to choose like if it is software or not. Now we have a special one called "spyware". Spyware is indeed very big now. With ~90% intenet users still using IE and their ignorance in visting random sites can easily compromise their computers with spyware.

  42. Up next on Slashdot main page by Anonymous Coward · · Score: 0

    Sky is said to be blue in color.

  43. One third... by cstubbs · · Score: 1

    One third of PC users eh ... so that would make the final third users of Linux/BSD/etc on PC's ?

  44. Hype = $$$ by TrollBridge · · Score: 1

    We all know how big of a pain that spyware can be, but it really as bad as these companies would have ignorant computer users believe? After all, there's a lot to be gained from making people think that they need these companies' product.

    --
    There's a Mercedes gap too. I want one and can't afford one, but it's not government's job to do anything about it.
    1. Re:Hype = $$$ by smooth+wombat · · Score: 3, Interesting

      Yes, it is as bad as these folks make it out to be.

      Where I work (state government) I see all kinds of cruft on users machines when I am out and about. Even though it's not a direct part of my job I am in IT and to help things along I go through users machines and remove the nasties. Sadly, I walk by a week or so later and the users machine has the junk on it again.

      I recently got permission to do a test with Firefox. I've been using it without issues and my bosses boss just put it on his work system and has the same results. I asked him if I could put Firefox on a users machine, someone who I knew had all kinds of problems with popups/redirects/whatever.

      I cleaned her system (I don't even remember how many pieces of spyware she had) and then put Firefox on the machine. I did some basic configuration (block popups, small cache size, etc), copied her bookmarks over and gave her a quick run through on using tabs and how to configure the toolbar. So far I have not heard one bad thing from her about using Firefox or that she had issues with popups/spyware.

      Hopefully, by using this person as a real guinea pig (as opposed to myself), someone who is not overly computer literate, we can convince the higher ups to use Firefox for everything except for our SAP requirements (yes, SAP is evil. I'm not the one who chose to spend millions of dollars on a tricked-out spreadsheet).

      --
      We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
  45. McAfee Just Announced in Mid-November... by neilb78 · · Score: 0

    a Spyware module for VirusScan....

    All,

    Below are a few more bullet points concerning the up and coming release of McAfee's Enterprise Anti-Spyware:

    True corporate/business-grade Anti-Spyware technology for Windows-based PCs that detect and remove potentially unwanted program software (PUPS) in real-time and tightly integrated with the next-generation anti-virus product for complete and transparent management of both products as a single agent.
    Real-time scanning
    Detects "Spyware" as it is being installed.
    Memory Process Scanning
    Traditional On-Demand scanning and removal
    Extensive database of Potentially Unwanted Programs (PUPS)
    Registry scanning
    Lowers TCO by:
    Automated update capability
    Single Agent integrated with AV
    Complete cleaning
    Seamless integration into VirusScan Enterprise
    Completely manageable by ePO & ProtectionPilot
    Intelligent Registry scanning and cleaning
    Real-time Scanning & Cleaning of All PUP entries
    Potentially Unwanted Programs (PUPS) is McAfee's terminology for the various categories of programs (legitimate or otherwise) that include:
    Adware
    Key-loggers
    Spyware
    Remote Administration Tools
    Dialers

    Please contact me with any additional questions.

    Thanks,

    James Seltzer

    Corporate Account Manager

    --
    © 2004 The SCO Group, Inc. All Rights Reserved.
  46. Bad analogy by Anonymous Coward · · Score: 0

    The car in your analogy would be the computer itself, not Windows. Windows would be more like the software which controls the car's internal functions and, presumably, this could be changed by a qualified mechanic.

  47. Re:Of course it is! Spyware only did good for me! by Tuffsnake · · Score: 0

    Screw spybot and adaware. I have used those damn things on 4/5 ocmputers and they clear out bout 200 of the 5000 pieces of spy/adware.

    Best thing, get ur friends to buy something like mcafee suite for blocking viruses/spam. Copy files off. Format, reinstall. Will take longer than trying those other two but will save u headaches in general in the end.

    And God save us all if they find a way to embed that stuff into systemfiles/exes/etc

  48. windows is partially at fault by jonwil · · Score: 4, Insightful

    If microsoft made some changes to windows, this crap would have a harder time getting installed (or at least getting installed unnoticed)

    Basicly, anything that wants to change certain things should trigger a "are you sure you want to do this" warning of some kind (with ways to change that warning into a requirement for a password or a total block of the activity). If the activity is blocked, the app requesting it gets an appropriate error (e.g. "you cant open that file" if access to a file is blocked)

    The items that should be locked include:
    Writing to the "startup" group & other locations where you can have a program start at startup
    Writing to
    Changing critical windows sockets settings
    Changing the HOSTS file
    And there may be other things

    The idea is that spyware/viruses/trojans/etc that come in totally unannounced would now not be able to do that.
    And spyware and such that rides alongside application programs would be easier to spot (so you can choose to use a non-spyware alternative)

    Yes the cluless will just click "yes" but at least those who care wont be hit as much.

    Anti-virus vendors should start detecting spyware (particularly the kind that installs itself jsut by visiting a webpage or reading an email as opposed to the kind that installs alongside programs like kazza) just like they detect viruses.
    After all, spyware shares a fair few characteristics with viruses, worms and trojans.

    The big PC OEMs should be doing more to combat spyware.

    Myself, I use Mozilla (and keep it up to date with the latest release builds) and I use Norton
    Antivirus to keep my system virus free.
    I also run Spybot and Ad-Aware regularly.
    And I dont install spyware-laden programs like Kazza, Real etc.

    1. Re:windows is partially at fault by Darthmalt · · Score: 1

      I use Kerio for this. Even Windows programs have to ask for permission to start.

    2. Re:windows is partially at fault by Shawn+Parr · · Score: 1
      Yes the cluless will just click "yes" but at least those who care wont be hit as much.

      This is where your idea meets its temporary down fall.

      Why doesn't MS make it so that the dialog boxes default to NO??

      That my friend would kill a LOT of spyware issues where mindless user intervention is an issue.

    3. Re:windows is partially at fault by jonwil · · Score: 1

      Kerio is just a firewall (at least from reading their site)
      All the solitions (spybot, ad-aware, firewalls etc) will stop spyware after its already been installed).

      My idea would be more like how anti-virus programs can automatically identify viruses when you try to run them.
      Except that it wouldnt try to detect specific programs, just to detect "potentially bad" things (like adding to the startup group or messing with the HOSTS file). Viruses, Spyware, Trojan Horses, Worms and other malware need to do at least one of these "potentially bad" things in order to gain a foothold on your system. So if the user is aware that a program wants to do something that may be a sign of a virus, they at least have the option to deny the action.

    4. Re:windows is partially at fault by Darthmalt · · Score: 1

      Kerio is primarilly a firewall. But it also asks for permission before it lets anything execute. Any new .exe has to ask any program trying to install, any program launching another program, anything trying to startup on windows boot etc.

      It helps keep anything from installing itself without you knowing, and if a progrtam does manage to piggyback in with another program you'll see it when it tries to startup.

      Because it requires permission for so much I turn it off whenevr I install a program/game that I know doesnt contain spyware so I dont have to continually click yes.

    5. Re:windows is partially at fault by Anonymous Coward · · Score: 1, Informative

      You are juste asking Microsoft to write a version of SUDO for windows and to set intelligent permissions on their system files, Apple already does this... but a user that has no understanding of what is going on will just enter the password as soon he is prompted for it...

      Now about the other browsers, Firefox 1.0 has a feature in it that offer users to install browser plugins automatically, I wonder what are the limits of what those plugins can do to your computer? (I really don't know, they may or may not be a threat)

    6. Re:windows is partially at fault by ssj_195 · · Score: 1

      I may be wrong, but I believe the extensions (is that what you meant?) can execute arbitray code, with the permissions of the user. The same goes for proper plug-ins, I guess. Not good, but at least you have to jump through a few hoops to install stuff.

    7. Re:windows is partially at fault by bleeware · · Score: 1

      WinPatrol does a reasonable job at notifying the user when critical system settings are changed...and it is free.

      --
      HaHa: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    8. Re:windows is partially at fault by Spoing · · Score: 1

      Do you mean, something like this?

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
  49. Why not illegal? by dubdays · · Score: 2, Insightful

    I find it terribly sad when companies/people/drones/the family pet/etc. need to fork out a ton of cash just to prevent assholes from taking over their computers. Viruses (Viri?) have caused this for years, and it's completely illegal to create such a program. But, so far, it's still legal in most places (albeit unethical) to distribute this garbage.

    Yes, it's really an IE/Windows problem, which is a whole other argument. I know users need to be better educated (or educate themselves), but that still doesn't help my Grandma who can barely seem to find the escape key. I understand this. But still, why should this still be allowed?

    On a side note, does anyone know of GOOD network/client-server spyware removal software, either free (as in beer or freedom) or commercial? Just curious...

    1. Re:Why not illegal? by sjoel · · Score: 0

      You fork out a ton of money when you need car repairs, really, what is the difference? Everyone needs a job, and people are talented in areas that others are not. That is not going to change. The problem is that since you see it as being so "easy" to do, you dont realize that to others it is infinitely hard, and they have no desire to learn how to do it. They want to pay someone to do the dirty work. Just like some want to pay for an oil change so they dont have to get their hands dirty. Hell, im appreciative of the spyware myself. It gives me extra income. Thanks Microsoft!

    2. Re:Why not illegal? by dilg · · Score: 1
      Can anyone with a law background explain how spyware on Internet Explorer is different than than the class action lawsuit against Firestone for their Ford Explorer fiasco? These are the similarities I see:
      • While it was ultimately the consumer's action (click 'yes' on spyware) or negligence (overload Explorer on under-inflated tires), the products' companies both new of the issues beforehand.
      • Damages were incurred i.e., death and dismemberment in Firestone's case and lost productivity and compromised security in Microsoft's case.
  50. Two thirds??? by mediaslave · · Score: 2, Informative

    I am a consultant for a small IT firm in Manhattan. We do a lot of small businesses, home businesses, and even home clients. Spyware turns out to be the culprit in probably 90% of our "my computer is slow/not working" calls we get these days. We make it mandatory for all of our techs to install and run Spybot and Ad-Aware on any machine we work on, and I have NEVER seen (or even heard of) a machine with no spyware on it. The third of machines that are uninfected must not have internet connections. Even with Spybot's protective measures activated, an Ad-Aware scan a day later will find something.

    --
    -- "the revolution will not be televised" -Gil Scott-Heron
    1. Re:Two thirds??? by swv3752 · · Score: 1

      Maybe there are more Linux and Mac desktops than people realize?

      --
      Just a Tuna in the Sea of Life
    2. Re:Two thirds??? by Sardak · · Score: 1

      I have NEVER seen (or even heard of) a machine with no spyware on it.

      I'd just like to note that my windows box has been spyware free for just over 6 months now. I still run Ad-Aware and Spybot periodically to be sure, but for the last 6 months they've turned up 0 results. For me, a combination of using nothing but Mozilla for web browsing and web-based email on my own mail server in combination with intelligent selection of sites has helped tremendously.

      My ex-girlfriend always had tons of problems with her computer until I forced her to switch to Mozilla. I told her that if the page wouldn't load or work properly in Mozilla, it wasn't worth visiting. I also switched her from KaZaA, iMesh, Bearshare, etc. to Shareaza and BitTorrent. Several months later, she had nothing but a few cookies on her computer.

      So, it is possible, even for someone not entirely tech-savvy, given a push in the right direction.

    3. Re:Two thirds??? by Bigbutt · · Score: 1

      None of my home computers have ever contracted a virus, loaded a trojen, or installed any spyware and I don't have A/V software installed. I recently ran ad-aware because I'd worked on a couple of extended family members machines on a recent trip and found many instances of bots installed. Nothing on my home systems though. Probably the main difference? Both of the extended families had children. Our kids are grown and gone.

      [John]

      --
      Shit better not happen!
    4. Re:Two thirds??? by Anonymous Coward · · Score: 0

      Ad-Aware is paranoid. My record for a user's detections is 1000 objects. If someone had that many discrete spyware packages on their system, the electrons would unravel and explode in protest. The Slashdot cookie counts as a detection, don't confuse that with a genuine spyware problem.

  51. What is spyware again? by The+MESMERIC · · Score: 0

    Is that like dialers?
    No wait that is a trojan right?

    It's been such a long time I forgot what these things are :)

  52. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 0

    Viruses and spyware are created by alcoholics to fuel their addictions. It's a big conspiracy.

  53. Pretty Big Business by EntrancedX · · Score: 2, Informative

    I used to work for a "big retailer" and I saw how much business the on-site "computer technicians" were making from Spyware cleanup. Well... $50 a pop. The funny thing is they were using Ad-Aware only to provide this "great service" for their customers. So as long as there are customers willing to pay all this money for such a service, then the business is going to be booming. *Ohh yeah... using Firefox may help a little.

  54. Re:Of course it is! Spyware only did good for me! by stupidfoo · · Score: 5, Funny

    Rather tell my father that than my mother...

    (or your mother! HEEHEE!)

  55. Anti-virus adding anti-spyware? by JSBiff · · Score: 2, Insightful

    I deal with this at work all the time. To me, spyware/malware isn't that different from a virus, and the logical thing is that symantec/mcafee/panda/etc add spyware/malware detection to their current anti-virus offerings.

    In theory, they already have. We have Symantec A/V 9 installed on our the computers at work. There is actually an option to tell it to scan for spyware/malware. The problem is, it seems to be be able to find a lot of it, but then is unable to actually remove it most of the time.

    So, we end up having to run ad-aware to actually remove the spyware/malware. It's silly that we need Spybot for immunization (to make it difficult for the spyware to install in the first place), plus ad-aware for spyware removal (it seems to do a better job of removing than Spybot does, but doesn't provide the immunization feature), plus Symantec A/V 9.

    Symantec, are you listening? Would be nice to have a comprehensive solution that works *all the time*. We're already paying big bucks for your anti-virus software, you could at least get it to work well for all threats. . .

    1. Re:Anti-virus adding anti-spyware? by Bouncings · · Score: 1

      I suspect that anti-virus vendors are moving into the anti-spyware business. But maybe that's not good. A while ago, I asked myself, who don't anti-virus companies research more preventative measures against worms and viruses, such as selling secure email clients. The conclusion I reached is that like the medical industry, the anti-virus industry profits from the symptoms, so preventative measures would reduce overall profits. The same could be said for spyware removal tools. If spyware removal is now big business, there is a vested interest in the continued threat of spyware, so preventatives measures such as legislation and improved browser security, could face political interference from anti-spyware/anti-spam vendors. Something to consider.

      --
      -- Ken Kinder ken@_nospam_kenkinder.com http://kenkinder.com/
    2. Re:Anti-virus adding anti-spyware? by CapnGib · · Score: 1

      Agreed. The lines between virus/spyware/malware/hi-jack-ware is very thin theses days.

      The problem is some of these things are technically installed with user consent. Sometimes the click-through EULA actually says what the software does. Of course nobody reads that crap, and even if they did, the language is more confusing than informative.

      A combined anti-virus/anti-spyware product from Symantec or McAfee would potentially be removing legitimately installed software thereby causing financial damages to legitimate software vendors (aka scumbags). I'm sure there are lawyers somewhere salivating over such prospects right now.

      --
      Beauty is truly in the eye of the tiger
  56. Re:$15/hour? Well, maybe in the call center. by pseudolus · · Score: 1
    As a fellow consultant, I'm happy to report that several of my company's clients are finally waking up to spyware. The site I'm currently at is working to make programs like S&D part of the standard installation on company machines. It's definitely a step in the right direction.

    The only downside is that the guy in IT who's convincing the users that they need spyware protection sits two cubes behind me and likes to use his outside voice. For the last several weeks I've heard him repeatedly tell users over the phone how "amazed" he was to find 4,000+ spyware programs on his PC. (Oh, that pesky Interweb.)

    --
    Anything is possible given sufficient time and money.
  57. I feel left out by Anonymous Coward · · Score: 0

    I have been using Fedora linux for the last two years, with Mozilla and the iptables firewall and I haven't gotten any spyware or virus ever. Should I switch to Windows xp so I can experience this thing -- I'm kind feeling left out. ;-)

  58. Since I'm not a computer tech/programmer by WormholeFiend · · Score: 3, Funny

    I'm thinking about exploring the Spyware Writer Removal Service niche instead...

  59. Re:Of course it is! Spyware only did good for me! by EntrancedX · · Score: 2, Insightful

    To help your pops out give him Knoppix (or other LiveCD distro) for pr0n surfing pleasures. No worries about Spyware being installed and (if mom is computer literate) she shouldn't be able to check out the history :)

  60. old story by Ender+Ryan · · Score: 1
    Yeah, that's an old story at this point. Been going on for two years or so. One problem is, it often cost less to just buy a new PC and have a friendly geek save all their old stuff. This is, of course, because most PCs don't come with full copies of Windows. Most PCs come with a disk image on CD that will overwrite _everything_.

    So that leaves people with the option to purchase Windows at retail for roughly the price of a cheap PC, or they can spend 50% more and get a newer, shinier one. I know plenty of people who have "been there done that."

    And the problem continues to get even worse. Now we've got spyware "companies" selling spyware removal tools that only remove competitors' spyware. People need to go to jail for that.

    --
    Sticking feathers up your butt does not make you a chicken - Tyler Durden
  61. Big Business or Big Waste? by freality · · Score: 1

    "A young hoodlum, say, heaves a brick through the window of a baker's shop. The shopkeeper runs out furious, but the boy is gone. A crowd gathers, and begins to stare with quiet satisfaction at the gaping hole in the window and the shattered glass over the bread and pies. After a while the crowd feels the need for philosophic reflection. And several of its members are almost certain to remind each other or the baker that, after all, the misfortune has its bright side. It will make business for some glazier. As they begin to think of this they elaborate upon it. How much does a new plate glass window cost? Two hundred and fifty dollars? That will be quite a sun. After all, if windows were never broken, what would happen to the glass business? Then, of course, the thing is endless. The glazier will have $250 more to spend with other merchants, and these in turn will have $250 more to spend with still other merchants, and so ad infinitum. The smashed window will go on providing money and employment in ever-widening circles. The logical conclusion from all this would be, if the crowd drew it, that the little hoodlum who threw the brick, far from being a public menace, was a public benefactor.

    Now let us take another look...."

    - Henry Hazlitt, Economics in One Lesson

    http://freedomkeys.com/window.htm

    1. Re:Big Business or Big Waste? by Jumbo+Jimbo · · Score: 1

      Yes, let's have another look

      The baker has taken $250 that he had to spend on other good and paid it to the glazier. Using your assumption that money held by merchants will just be recycled to other merchants, he would already have spent this anyway at other shops, so nothing is gained by having him spend it at the glazier rather than the milkman, grocers, etc.

      However, the baker has lost the money that he would have got by selling the pies that now have glass on them. So if the pies are worth $50 then there is $50 less for him to spend with other merchants. Plus there could be side consequences; if the other baker in the street sees what happens, that the bread of the first baker is ruined, the second baker can hike his proces by 10 cents a loaf as the supply of bread is now lower.

      Finally you said The glazier will have $250 more to spend with other merchants, and these in turn will have $250 more to spend with still other merchants, and so ad infinitum

      But this does not take account of people losing money, saving money, taking money out of the country, delaying spending it. If money was recycled ad infinitum, there would be an infinite supply. However, if each person in the chain only spends 90% of the money passed to them, quickly the amount of money being recycled falls to just over $87 by the 10th person in the chain.

    2. Re:Big Business or Big Waste? by SenorChuck · · Score: 1

      I would encourage everyone who reads this post and would mod it "interesting" or "insightful" to follow the link and read the 2/3 that completes the context of the parent's paragraph. If you don't, then you see only what the parent wanted you to see - and not what was intended by the author.

      --
      A wise person makes his own decisions, a weak one obeys public opinion. -- Chinese proverb
    3. Re:Big Business or Big Waste? by freality · · Score: 1

      That was the point, that's why I included the link.

      "People may say gee, this broken window is great.

      But let's take another look..."

      That's the intention :)

    4. Re:Big Business or Big Waste? by SenorChuck · · Score: 1

      Well answered. Unfortunately, most people around here are too lazy to actually RTFA so I figured I'd get out the cattle prod and corrale them back into their designated seats where their readers are readily available.

      Or something like that. :)

      That article was definitely a good read. Thanks for passing it along.

      --
      A wise person makes his own decisions, a weak one obeys public opinion. -- Chinese proverb
  62. Re:Of course it is! Spyware only did good for me! by MtViewGuy · · Score: 1

    However, you're not going to get much business if they are running the full version of the Yahoo! Companion toolbar, because the latest versions of this IE add-on has spyware detection and removal built in.

  63. pest patrol owners will have noticed that by museumpeace · · Score: 1

    anti spyware is good business: CA just bought up pest patrol, even though they had a joint marketing thing going with Zone Alarm. All I am getting as a result is some additional junk mail from PP/CA and as reported in /., PP aint that great anyway.

    --
    SLASHDOT: news for people who can't concentrate on work or have no life at all and got tired of yelling back at the TV.
    1. Re:pest patrol owners will have noticed that by SenorChuck · · Score: 1

      In that case, PP is a perfect match for CA! I know I always loved CA's backup software "solutions." I'm sure to love their anti-spyware software equally well!

      --
      A wise person makes his own decisions, a weak one obeys public opinion. -- Chinese proverb
  64. Good source of extra income by BrentRJones · · Score: 2, Funny

    My daughter and I will be doing spyware removal as a summer job in an affluent suburb of Chicago. (I teach HS chemistry.)

    IPO will be next fall. ;)

    --
    Help end the use of Sigs. Tomorrow
  65. MODS, PARENT ISN'T OFF TOPIC by Anonymous Coward · · Score: 0

    How, in an article where "Spyware Removal is Big Business", is a post about starting a business removing spyware off topic?!?

    This guy has a legit question / point.

    If it's off topic, it's only marginally so, and shouldn't have been modded down. Boy I hope I get to meta mod that. That's crap.

  66. TRS-80's mysteriously unaffected? by Anonymous Coward · · Score: 0

    I noticed that my TRS-80 Color Computer 2 is mysteriously unaffected as well.

    I'm completely stumped as to why!

  67. Re:Of course it is! Spyware only did good for me! by fox8118 · · Score: 3, Funny

    You know what they say about consulting work.

  68. M$FT Windoze by Anonymous Coward · · Score: 0

    i once read someone describe Windoze as...

    "windoze is just a marketing tool disguised as a operating system"...

    how true!!!

  69. Another one for the "Duh!" file. by Anonymous Coward · · Score: 0

    My employer has been raking an especially large pile of dough in from malware removal since the start of last summer. For the length of time it takes to remove every last vestige of spyware, adware and other shit from a single client PC, at our hourly rates it's just about worth it for the client to just throw out the afflicted PC and just buy a cheap one to replace it.

    And what fool would charge only $15 per hour? I charge $50 per hour when I do the occasional freelance gig, and I've still got a $150 check in my wallet right now from a house call I made last week. I wouldn't charge family or friends much less, because the fact that they're still getting hit with this shit tells me they've ignored the advice I've given them about downloading and running everything they happen upon.

    I'm still waiting for one family member to get fed up enough to buy a Mac, then the flood of switching will start.

  70. Re:$15/hour? Well, maybe in the call center. by Shag · · Score: 1
    Mmhmm.

    I can only imagine how amazed! he'll be to find his desktop wallpaper set to "Tubgirl" and all his system sounds changed to loud, breathless spoken-word retellings of ghastly acts that are illegal in most states.

    I'll be waiting for the follow-up... ;)

    --
    Village idiot in some extremely smart villages.
  71. mmm .... by tomstdenis · · Score: 4, Insightful

    Windows:
    Have to pay for anti-virus, have to pay for firewall, have to pay for spyware removal, have to pay for a copy of windows and then you have to pay someone to set it up.

    *BSD/Linuxes:
    Have to pay for someone to set it up.

    Hmm... and the TOC of Linux is higher because...?

    Tom

    --
    Someday, I'll have a real sig.
    1. Re:mmm .... by mikeg22 · · Score: 1

      Hmm... and the TOC of Linux is higher because...?

      ...everyone in the office has been using windows for the last 15 years and needs to be completely retrained.

    2. Re:mmm .... by Beatbyte · · Score: 1

      training to use posix stuff is another factor

      but i do agree.

      i have one business tip for you :

      never underestimate the stupidity of the general populous. a fool and their money are soon parted.

      if you can put those together, you can make a lot of money ;)

    3. Re:mmm .... by tomstdenis · · Score: 1

      I honestly [and without hestiation] doubt they're "all that trained" in the first place.

      This is why we have virus/trojans/scams in the first place remember.

      Tom

      --
      Someday, I'll have a real sig.
    4. Re:mmm .... by snuf23 · · Score: 1

      Well not EXACTLY:

      Free anti-virus programs are available - especially in the case of home users. See AVG, Avast, AntiVir Personal Edition, BitDefender.

      Windows XP includes a firewall. Service pack 2 even enables it by default and makes it easier to configure. Not the best firewall out there, but its better than nothing.

      The best spyware removal tools are free. Spybot is free and AdAware is free for non-commercial usage.

      Most people don't bother to upgrade Windows - they just use whatever version their PC shipped with. SO yes they pay for it in the OEM bundle, but it comes pre-installed. They also get the magic restore disk, so even morons can pop it in and reinstall the system.

      As for TOC - well this all depends. Mostly on where your knowledge is. If you or the company IT staff is Linux/UNIX savvy then sure the TOC is lower.
      Now lets say you are a home user and you switch to Linux or BSD. You aren't computer savvy, you just want something to run a word processor, spreadsheet, surf the web, play some games etc. Typical home computer stuff. Now KDE and Gnome have come along way BUT if you aren't willing to dig into the guts of the system if something isn't working - you are going to be out of luck.
      Consider trying to get an application working that needs you to modify the firewall settings. This isn't trivial for a non savvy user. Or installing new hardware that isn't automagically detected? Recompiling the kernal? Installing security patches? Sure its not bad if you have the time and patience to do the reading and mess with the system.
      Most of the users I deal with can't even be bothered to read a freaking error message.
      "My computers messed up! Something popped on the screen and now it's broken."
      "What did the error say?"
      "I don't know I just clicked on OK."

      --
      Sometimes my arms bend back.
    5. Re:mmm .... by Anonymous Coward · · Score: 0
      Most of the users I deal with can't even be bothered to read a freaking error message.

      "My computers messed up! Something popped on the screen and now it's broken."
      "What did the error say?"
      "I don't know I just clicked on OK."

      Proper advice would probably be "reinstall". If they can't be bothered with real troubleshooting, they are better off with returning their machine to a known state. Yes, they will lose their data. But there is a fair chance they are used to losing data.

      Let it shine through that they could easily avoid reinstalling if they were a little more savvy. Let it also be clear that you can not fix it for them over the phone.

    6. Re:mmm .... by snuf23 · · Score: 1

      Sure if its a question about a home computer. I don't fix other peoples computers - if they are really messed up I refer them to a friend who has a small PC fix it shop. After all people have no problem paying to fix their cars so why should they not pay a tech to fix their computer?

      Unfortunately those calls my staff gets are business users contacting the IT help desk.
      Thanks to Windows though the appropriate response is "Did you restart?"

      --
      Sometimes my arms bend back.
  72. Making a killing by karn096 · · Score: 2, Interesting

    Places like Bestbuy are making a killing on this whole Spyware Removal Industry. They currently charge $40 for Spyware Removal, which will usually include an Additional $40 for Virus removal. I work at Bestbuy doing this, and I've seen some pretty nasty infections, i've seen computers infected with literally 1000 instances and the only way to fix it is to boot in safe mode, or just take the hard drive out and scan it in another PC. Fun. And from what I've seen Spybot and Adaware unfortunately dont even get everything. Usually I'll use both, and then use another program and still find spyware and malware!

    1. Re:Making a killing by Anonymous Coward · · Score: 0

      Don't know what best buy you're talking about, but my local BB charges $160 for spyware and virus removal... Talk about a racket. When I get up and running I'll be charging fifty bucks for them to bring their box to me, or sixty bucks for a house call for up to three hours of work, each hour after three will cost ten bucks or so... Still working that all out.

    2. Re:Making a killing by fluke72 · · Score: 1

      up north here (canada) it's 40$ to remove the spywares, 40$ to remove the viruses, 70$ if they want norton antivirus and finally another 40$ for spysweeper. so 190$ before taxes which is considered as a "complete package"

  73. So much for security... by FridayBob · · Score: 1

    After reading another Slashdot-linked article a few days ago, I am reminded of what it said about best practices related to security and how anybody making an OS should never deviate from this path under any circumstances. Failure to do so will only create problems that will become increasingly difficult to correct as time goes by.
    Nevertheless, it's no surprise at all to read once again that the industry has no confidence whatsoever in Microsoft's will to change course and produce something decent for a change. As always, to them it simply does not make any business sense to rectify their past mistakes. By 2008, Longhorn will be on the shelves and of course M$ will make security one of their major selling points (just as they did with WinXP). Nevertheless, the rest of industry knows better and sees through this. Hence, this article and its prediction.

  74. i'll second that! by ecalkin · · Score: 2, Informative

    I'm sitting around with such letters as CNE/CNI/MCSE/MCT/CCNA etc, and probably 75 to 90 percent of the dollars i've earned in the last 4 months are from disinfection.

    It's nice to pay bills but it gets kinda depressing making money off of other peoples misery.

    eric

  75. Let me see if I have this straight by HangingChad · · Score: 1
    You pay for an OS which puts the burden of proving you paid for it on you...

    Pay for anti-virus software to keep it from being porked by every 15 year old script kiddie on the planet.

    Pay for spyware removal tools on top of that to keep it running at some functional level.

    And after a couple years of paying for all that you get the privilege of paying for yet another buggy piece of crapware OS and start the cycle all over again.

    Is that pretty much the gist of it? Wow, getting such a great deal it's hard to figure why so many people despise MSFT.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  76. Spyware been beddy beddy good to me... by glapalom · · Score: 1

    I have to say, it's not just spyware removal vendors that are making the money. I am an IT consultant who makes housecalls, and my business is booming!

    I wonder how long before the government gets involved. I mean, once Senator Clinton gets tired of all those porn pop-ups and spyware on her machine , it's just a matter of time before she tries to pass a law to ban it. Of course, if she would stop visiting those not so proper sites, she wouldnt have that problem.

    Speaking of which, I NEVER have pop-ups/spyware/adware. Why you ask? Because I don't click on things arbitrarily, I don't visit the not so appropriate sites, and I use Firefox, and it blocks pop-ups very well.

    G

    --
    Joshua 24:15
    1. Re:Spyware been beddy beddy good to me... by SpacePunk · · Score: 1

      I do the same thing, and yes it is good. The best part are the clients that keep re-infecting their machines. There's nothing more profitable than stupidity.

    2. Re:Spyware been beddy beddy good to me... by glapalom · · Score: 1

      In their defense, for the most part it's the user-unfriendliness of Window$ that is the real problem.

      --
      Joshua 24:15
    3. Re:Spyware been beddy beddy good to me... by SpacePunk · · Score: 1

      Not when they ask "How does this stuff get in my computer?", and I tell them that p2p programs such as Kazaa, Morpheus, WinMX, etc... which was installed on the machine installed the spyware. I also run down 'safe' browsing habits such as not clicking on the 'yes' button with a caution that clicking on the 'no' button sometime doesn't work as expected. That the problem is in IE and Windows, and that it's safer to use Firefox (which I will install if they want it). I've got one guy that's on DSL, not behind a NAT box, but he refuses to get even so much as a cheap ass netgear router. So he keeps getting owned, and owned hard.

      As much as windows sucks, there are users that really shouldn't be allowed to touch a computer.

    4. Re:Spyware been beddy beddy good to me... by SpacePunk · · Score: 1

      and I forgot to mention the really, really stupid ones. Like the lady that works for a local business that keeps hitting the F10 key on her Compaq (hp) computer when it boots up which screws up her shortcuts to some DOS applications they have running off of a central server. the owners asked what could be done to solve that problem... I offered to clip the F10 key right off the keyboard, but it comes in handy for some of their DOS application commands.

    5. Re:Spyware been beddy beddy good to me... by glapalom · · Score: 1

      Good points. I actually have contracts with companies where all I do is come in once a week and clean up their systems (unless they have specific issues). We're talking a solid consistant income. 2 hours a week every week for each company. Most of those people don't want to know how to clean it up. It's kinda like being the janitor or the Jiffy Lube guy. If the users really cared to know, they might be able to handle it. Most just want the stuff done, and want their PC to work right when they come to work each day and don't want to know how it all happens. They look at me as their savior (i've lost count of how many people have called me that), and don't mind paying me to be so.

      --
      Joshua 24:15
    6. Re:Spyware been beddy beddy good to me... by big-giant-head · · Score: 1

      So how are things working out at powerhouse Cult Center???

      --

      So Long and Thanks for all the Fish.
    7. Re:Spyware been beddy beddy good to me... by glapalom · · Score: 1

      Wouldnt know, but PowerHouse Christian Center is fantastic! I've always said, I have had a heck of a lot more fun working for God than I ever did working for Satan! Life's good man! You ought to come by some time. Ya never know. You might actually enjoy it. I meet with the Pastor and about 8 men on Wed. mornings at 6am for some great Word. You're invited! G

      --
      Joshua 24:15
    8. Re:Spyware been beddy beddy good to me... by big-giant-head · · Score: 1

      No thanks..... Been there, have the knife wounds on my back to prove it.... As long as your happy thats all that matters, Best of Luck!

      --

      So Long and Thanks for all the Fish.
    9. Re:Spyware been beddy beddy good to me... by glapalom · · Score: 1

      Sorry to hear that. It's sad to think there are cancers in everything, but it's true. And good people suffer for it. I apologize for that as a representative of PHCC. I can be sure of one thing. It wasn't me. I don't pull that garbage on people. If you ever feel like giving PHCC a second chance, come see me personally. I will make sure that doesn't happen.

      G

      --
      Joshua 24:15
    10. Re:Spyware been beddy beddy good to me... by glapalom · · Score: 1

      One other thing. I don't pull punches with people and I don't bother with people that do. If the staff was that way, I would know it. I am the IT guy under a desk fixing a computer or around a corner that you may not know is around when you are talking and in 7 years I have yet to hear anything that doesn't line up with The Word.

      G

      --
      Joshua 24:15
    11. Re:Spyware been beddy beddy good to me... by big-giant-head · · Score: 1

      Do you know where Mark Juevara the former youth pastor went? I know they were there through 2002 and we kinda lost track of them. Thanks.

      --

      So Long and Thanks for all the Fish.
  77. Securing an OS. by Anonymous Coward · · Score: 1, Insightful

    If microsoft made some changes to windows, this crap would have a harder time getting installed (or at least getting installed unnoticed)

    Why is any program even allowed to write files out of it's own install directory? A popup whenever something is trying to install itself would be nice, and even nicer would be programs that could only write to their directory or children directories.

  78. Somebody Please by einer · · Score: 3, Insightful

    Someone please make a live cd that destroys spyware. Even if it just starts a wine session and runs adaware or spybot or whatever.

  79. Re:Of course it is! Spyware only did good for me! by AvitarX · · Score: 2, Funny

    Not as bad as the Boss.

    "Someone was using this computer for no good, I highly recomend not using any browser but Firefox for no good."

    --
    Wow, sent an e-mail as suggested when clicking on "use classic" banner, and got a fast response that addressed my msg
  80. Upgrade to XP SP2. by Tassleman · · Score: 4, Funny

    We did at the office and have seen a serious decline in Spyware related calls. We used to get 10 or more a day for Windows 2000.

  81. Re:Of course it is! Spyware only did good for me! by iwan-nl · · Score: 5, Funny

    I don't have that problem, my father and I share a porn collection :)

    --
    I'm trying to improve my English. Please correct me on any spelling/grammar errors in this post.
  82. Easy solution by Turn-X+Alphonse · · Score: 1

    I got sick of this and people complaining about it, so I wrote a short "guide" to keeping a Windows machine saf eonly using free (or open source) software.

    http://www.boomspeed.com/akito/Windowmaintence.txt

    Pass it around, send comments. Whatever, it's very basic so idiots should get it.

    --
    I like muppets.
    1. Re:Easy solution by NardofDoom · · Score: 1

      Do you want me to edit that? You've got a lot of errors in there. Or maybe that's just normal speak translated to Idiot. Why else would you spell "maintenance" like this: Maintence

      --
      You have two hands and one brain, so always code twice as much as you think!
    2. Re:Easy solution by Turn-X+Alphonse · · Score: 1

      I wrote it one morning at 4am when I'd ran out of coke and had 4 people bitching at me about their "PC is slow" and such.

      If you wish to edit it and improve it please do so, rename or whatever and just send it to my e-mail and I'll add a credits list and such.

      --
      I like muppets.
    3. Re:Easy solution by NardofDoom · · Score: 1

      Sweet! I'll be sure to do that when I have a spare minute. I'll add a version history and make a couple more changes. I just did this last night to my parent's PC, so I'll add a couple more things I encountered.

      --
      You have two hands and one brain, so always code twice as much as you think!
    4. Re:Easy solution by Turn-X+Alphonse · · Score: 1

      cool cool. I added you to my friends list and my e-mail is Mikari@Gmail.com (Spammers already found it so who cares :) )

      --
      I like muppets.
  83. Spyware / spam prevention by Anonymous Coward · · Score: 2, Informative

    How to help prevent spam/viruses. Most of this information is common knowlege for the IT savy but can be a good cluestick for the relatives.
    FireFox http://www.mozilla.org/products/firefox/ is a web browser that is much more secure then Internet Explorer. I have been using it for many
    months now, it is very stable and has a small fraction of the security problems found in IE.
    Ad-Aware http://www.lavasoftusa.com/software/adaware/ is a spyware finding and removal tool. This is one of the best anti-spy ware programs available and should be run at least twice a week.
    Spy-Bot http://www.safer-networking.org/en/index.html is an excellent compliment to AdAware and should be run also twice a week. The combination of both Adaware and SpyBot make for great security.
    Trend Micro http://housecall.antivirus.com/housecall/start_cor p.asp has a free online virus scanner that I run once a week. It has found viruses that Norton did not detect.
    Microsoft's windows update http://windowsupdate.microsoft.com/ should be
    checked often to patch your operating system. I would suggest you install the updates.
    Zone Alarm http://www.zonealarm.com/store/content/company/zap _za_grid.jsp If you do not have a Firewall router at home or are using dialup. Make sure you have some sort of firewall running on your machine. This one is pretty good and free.

    Here is a mini guide I wrote up on how to prevent from getting spam.
    1. Do not give out your work email address to anyone not work related. Do not give it out to relatives.
    2. Do not use your primary email address to sign up for things online, use a email from hotmail or gmail.
    3. DO not use your work/primary email to post on message boards or USENET unless they are closed and protected forums.
    4. Do not sign up for free giveaways, even if they are work related.
    5. Do *NOT* forward jokes or other such emails. Discourage people from forwarding them to you. These emails hold a massive list of email addresses and will eventually end up in the hands of spammers.
    6. Do *NOT* reply to any spam asking to be removed or to "unsubscribe." It just guarantees that you will get more spam as you have confirmed it is a
    valid account.
    7. Do not buy anything form a spam email. This only encourages the practice.
    8. If you get spam in Outlook, go to "File", then "Work Offline" and then delete the email messages. Selecting the email message for deleting opens
    it, this can cause a virus to be downloaded or download pictures that have unique tag. With the unique image tag, a spammer can tell when you
    opened the email and that your account is valid. By using the "Work Offline" mode, no images will be opened.

    You can find these links at my site http://www.friendsglobal.com/

    1. Re:Spyware / spam prevention by Anarke_Incarnate · · Score: 1

      I have not liked zone alarm lately. Try Sygate Firewall. Their personal edition is free and works rather well.

    2. Re:Spyware / spam prevention by Anonymous Coward · · Score: 0
      Microsoft's windows update http://windowsupdate.microsoft.com/ should be checked often to patch your operating system. I would suggest you install the updates.

      How do I access that (and the other packages) through "apt-get"? I don't seem to have their repository in my /etc/apt/sources.

    3. Re:Spyware / spam prevention by MarkGriz · · Score: 1

      Trend Micro http://housecall.antivirus.com/housecall/start_cor p.asp has a free online virus scanner that I run once a week. It has found viruses that Norton did not detect.

      The problem with Trend's online scan is that it requires ActiveX (thus IE).

      Better to go with a fulltime and free (as in money) virus scanner, like AVG Antivirus

      --
      Beauty is in the eye of the beerholder.
    4. Re:Spyware / spam prevention by drsmithy · · Score: 1
      Amazing how you managed to forget one of the most basic:

      0. Don't run as an admin user.

    5. Re:Spyware / spam prevention by merchant_x · · Score: 1

      In addition to the above mentioned utilities check out HijackThis http://www.spychecker.com/program/hijackthis.html. It is an extremely handy tool for getting rid of those annoying search bars and other browser helper objects that embed themselves in IE. The ones that AdAware and Spybot for some reason refuse to recognize as spy/spamware. Requires a bit of savy to use though, not for the novice.

    6. Re:Spyware / spam prevention by Curtman · · Score: 1
      The short guide:

      • Install Linux - You'll get Firefox by default, no spyware, no viruses, etc.


      It really is an ideal solution for mom & pop. With the added bonus that you can just ssh in and fix problems if needed.
    7. Re:Spyware / spam prevention by Curtman · · Score: 1

      where's Word and what happened to Outlook?

      They're right there where it says "OpenOffice.org Writer", and "Evolution".

      The only thing worse than a free software zealot is a proprietary one.

    8. Re:Spyware / spam prevention by Curtman · · Score: 1

      "I can't print, it says I have to be root!???"

      Complete bullshit.

      "I moved a window partly off the screen and now I can't resize it!"

      Also complete bullshit, that happens in Windows, but in Linux you hold Alt and resize with middle mouse button. I'm sorry if your parents aren't smart enough to deal with that, but in Windows, if your screen is at 640x480, you can't even get to the OK button in the display properties dialog.

      "How do I type a letter?"

      In a word processor?

    9. Re:Spyware / spam prevention by Curtman · · Score: 1

      with the original one button mouse. Could I trouble you for a solution to that problem?

      Fork out the $10 and buy her a real mouse you cheap prick, Christmas is coming.

  84. Too much spyware and NO Login Connection on AOL by lcsjk · · Score: 2, Informative
    Three days ago I helped a friend who could not get connect her modem to connect to AOL. I tried everything including uninstalling AOL and deleting registry entries until my eyes got blurrry. Re-installed to find that AOL still pulled up her ID and Password from somewhere. I even called AOL support to get a new password - still no connection. I used Hyperterminal to call the AOL number and connected so I knew the system should connect.

    Finally, I ran a copy of AD-AWARE and SPYBOT-S&D from a CD I had with me. After removing nearly 200 data miners and some files, the system connected on the first try. I have not yet notified AOL of the problem, but I expect others have had the same problem.

    1. Re:Too much spyware and NO Login Connection on AOL by SysGoddess · · Score: 1
      "After removing nearly 200 data miners"

      The first part of the problem was that they were on AOL in the frst place. It causes a slew of its own annoying popups pimping all of its additional services & partners. And the average AOL user is not exactly technically saavy.

      200 data miners is a relatively small load count compared to what I've become accustomed to seeing lately. Most of mine range in the 400-600 range with a couple harbouring over 1,000 distinct pieces of adware, malware or spyware.

      --

      Thus spake the SysGoddess
    2. Re:Too much spyware and NO Login Connection on AOL by lcsjk · · Score: 1
      If you were on AOL you would not build up so many! Perhaps 650 MHz and 64 megs limits to a smaller number, or maybe there was just one dataminer using dynamite instead of a shovel.


      Seriously, does anyone know how to move a person's email and favorites (or whatever AOL call them) to Mozilla?


      I installed AOL once so I would have some experience for the class I was teaching. It took so much control of my computer, I could do nothing without having to kill some AOL popup or wizard. Such a pain! However, no matter how much we may despise it, a lot of people use and depend on it, and if we don't know anything about it, as I don't, it is really hard to work with it. Must reformat! sounds so good sometimes.

  85. VMware is one solution by Werrismys · · Score: 3, Interesting

    Well not solution, but it helps on small sites with fast enough workstations with 768+M RAM. Run debian or some other lean, stable linux distro under the hood, run VMware in fullscreen mode on top of it. Use different virtual disk for "Documents and Settings" folder. Install all the proprietary win32 crap you need, backup the virtual system disk and set it up so that it overwrites the system disk on every real boot. If you don't need SMB browsing and printers, you can further protect Windoze by using NAT networking so the virtual machine is not visible on network. You can still use SMB/CIFS disk shares and CUPS printers (2K and XP support CUPS somewhat). Running winblows under VMware is 100 times preferable to wasting perfectly good hardware to a dedicated, "real" installation. And it's cheap, v3->v4 upgrade is currently 99 US$ + VAT. Another plus: as admin, when installing new software, just make a snapshot of the VM state, then install the proprietary crap, and if it breaks anything, just restore snapshot and you timewarp to pre-fuckup state. Excellent!

    --
    'Once scientists, even the dim-witted social scientists, get muzzled, the Western Civilization is finished.' - oldhack
  86. Speaking of...(MS04-040) by Anonymous Coward · · Score: 0

    Speaking of, does anyone know if the MS04-040 patch from yesterday is the fix for that IFRAME vulnerability? It looks like it is...

  87. The Mac marginalized again by DieByWire · · Score: 3, Funny
    This is just another example of a market that Mac users are being excluded from. All the opportunities you miss when you own a Mac.....

    Maybe I'll give up and join the Borg.

    --
    Never shake hands with a man you meet in a fertility clinic.
  88. Re:/. Propaganda by Anonymous Coward · · Score: 0

    Mod parent down, -1 moronic

  89. Re:comparison You're kidding or don't read much! by lcsjk · · Score: 1
    The last comparison that got discussion today was "Free as in ipod!".

    So There!

  90. a great source of infection by andrewweb · · Score: 1

    Would anyone like to hazard a guess how much spy/malware gets installed by OKing a dialog box or web-page-warning kindly informing the user that their machine was infected and 'download-this-free-to-remove-it' ? I'm guessing it's quite a bit...

    For my part in clearing out the web, my plan is simple:

    Starting today, all the free help I give to friends/family stops. If the reason for it is found to be virus/spyware related and if I have to undertake any sort of 'cleansing' operation, then they get charged.

    Perhaps the message will eventually sink in. Though I suspect not, at least I'll have made a few quid in the process.

    Perhaps all of us suckers in the above position should adopt a similar attitude. Nothing educates a fool quicker than loss of money.

    andrewweb - clearing up the web, one oaf at a time.

  91. Two best spyware removers are: by Anonymous Coward · · Score: 0

    1) GNU/Linux or *BSD installer CD
    2) Mac OS X installer CD

    done. solved. next problem?

    1. Re:Two best spyware removers are: by clickster · · Score: 1

      2) Mac OS X installer CD Next problem with this one is it also requires the purchase of at least several hundred dollars worth of equipment. I'm with you on the Linux/BSD though. Xandros Open Circulation Edition is easy to wean Windows users onto. Then, once they're more used to Linux, move them to a more robust distro.

      --
      If you mod me down, I shall become less powerful than you could possibly imagine.
  92. Spyware...NOT by nra1871 · · Score: 1

    My friends and family are continuously amazed at how my Mac has zero spyware and viruses. So far I have one who is switching and two more who are committed to switch with their next computer. I'm absolutely dumbfounded when I hear coworkers complaining that their credit card number was stolen online, but absolutely refuse to fault windows for allowing all this shit to be automatically installed on their machines.

    1. Re:Spyware...NOT by Anonymous Coward · · Score: 0

      So... how exactly is a Mac immune to phishing? Windows doesn't "steal credit card numbers".

  93. Re:/. Propaganda by phooka.de · · Score: 0, Offtopic

    I followed the link to the site about /. tampering. Have a look at the first two shcreenshots: the thresholds are different. The second screenshot has threshold is 0. The first screenshot has a threshold of 1. The post on the secont screenshot has a rating of -1 and shows up only because it's from the registered user vfiewing the page (you allways gat to see your own posts, no matter how much they suck).

    Quit complaining, take down the site.

  94. broken window fallacy by yorkpaddy · · Score: 2, Insightful

    wikipedia: Broken window fallacy This says that if someone says, look at that broken window, it stimulated the economy because it created work for the glassmaker and glazier. This seems reasonable at first, but it isn't. The country had to use economic resources to reach the same utility it was at before the window was broken. If broken windows really stimulated the economy, countries would bomb themselves to stimulate the economy.

    --
    "brxref .k.p ,.by xprt. gbe.p.oycmaycbi yd. cby.nci.bj. ru yd. am.pcjab lgxlcj" don'
    1. Re:broken window fallacy by SpacePunk · · Score: 1

      Naw, it's as if someone knocks on the persons door, they answer it, they are handed a 20ft 2x4, then proceed to walk around the house accidentally knocking out their own windows. They then call me to fix the broken windows. sometimes they pick that 2x4 back up and start walking around with it again.

      It's a net plus for me.

    2. Re:broken window fallacy by yorkpaddy · · Score: 1

      Yes for you its a net plus, but for the economy as whole, its a loss. I made a lot of money off of hurricane Isabell cutting up trees. But I realize that if those people weren't paying me to get back to where they were before, they would be buying new clothes, houses, and cars.

      --
      "brxref .k.p ,.by xprt. gbe.p.oycmaycbi yd. cby.nci.bj. ru yd. am.pcjab lgxlcj" don'
    3. Re:broken window fallacy by Anonymous Coward · · Score: 1, Insightful
      > If broken windows really stimulated the economy, countries would bomb themselves to stimulate the economy.

      Instead, we're bombing other countries to stimulate our economy. So whether it works or not, that isn't going to keep us from trying it out.

    4. Re:broken window fallacy by toddestan · · Score: 2, Insightful

      If broken windows really stimulated the economy, countries would bomb themselves to stimulate the economy.

      Close, but not quite. The current philosophy is to bomb other countries. This serves two purposes. First, it props up big defense contractors. Secondly, it props up large, corrupt companies who are paid obscene sums of money to rebuild other countries after we get done sending them back to the stone age (only so we can blow them up again, of course - starting the cycle over again).

    5. Re:broken window fallacy by swordgeek · · Score: 1

      There are two important points to remember.

      It DOES stimulate the glassmaker and glazier microeconomy. Similarly, promoting spyware and spyware prevention (instead of eradicating the problem) DOES stimulate the desktop computer economy. There is a cost, but the cost is incurred by a different segment (R&D, for instance).

      Furthermore, as a society we effectively do bomb ourselves to stimulate the economy. However, we call it planned obsolescence.

      --

      "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    6. Re:broken window fallacy by yorkpaddy · · Score: 1

      Do you really think that we are planning to bomb Iraq again in 50 years. I doubt any administration has that much foresight. We haven't bombed Japan or Germany recently because they haven't acted stupidly

      --
      "brxref .k.p ,.by xprt. gbe.p.oycmaycbi yd. cby.nci.bj. ru yd. am.pcjab lgxlcj" don'
    7. Re:broken window fallacy by Bigbutt · · Score: 1

      You mean you weren't buying new clothes, houses and cars after making a killing? The money's going to get spent unless you're hoarding it. They could certainly have cut up the trees themselves unless physically unable. Now, having the money isn't benefiting them but it is benefiting someone.

      [John]

      --
      Shit better not happen!
  95. Contributory negligence by dcavanaugh · · Score: 1

    " Is there any remote chance of getting these spyware authors prosecuted."

    At this point, I'm not so sure the spyware authors are the real problem. Fool me once, shame on you. Fool me twice, shame on me. Fool me 65,536 times, just paste the "Kick me" sign on my back.

    The security issues of MS products are well documented, with plenty of real-life evidence. Open an e-mail, launch a virus. Visit a website, get spyware. Eat at McDonald's every day, get fat. You can't expect security out of Microsoft any more than you can expect to lose weight by eating Big Macs. There are alternatives to MS products, just as there are alternatives to the fast-food hamburger.

    The problem is that if anyone can install just about anything on your computer without your consent, then any data on your computer can be redirected and exploited. Spyware is just the beginning. It's going to get ugly.

    1. Re:Contributory negligence by lifeblender · · Score: 1
      The problem is that if anyone can install just about anything on your computer without your consent, then any data on your computer can be redirected and exploited. Spyware is just the beginning. It's going to get ugly.

      I would like right now to predict the next wave of spyware. Of course, this is tantamount to giving mean people ideas, which is never good. Shame on Heinlein for doing this in Job: a Comedy of Justice. But I digress...

      Just as I predicted two-product commercials five years before their existence, I now predict that the next round (or round after next) of spyware will be geared towards infecting more than one system at once. A simple PC user's system will be infected, as will a public site, and information will be transferred from one to the other. This could go several ways, but it will happen. I have predicted.

      --
      Playing pornographics games during the day is evil! Play at night!
    2. Re:Contributory negligence by dcavanaugh · · Score: 1

      "A simple PC user's system will be infected, as will a public site, and information will be transferred from one to the other. "

      I'm not so sure the public site even has to be "infected". Maybe the infected PC just encrypts the data to be stolen into a nudie jpg image and posts it to a binary group on Usenet. Maybe it just runs a Perl script to auto-post the data to a blog. It would be fairly easy to abuse a number of public facilities with no need for a direct attack. The "harvesting" of this information would be indistinguishable from ordinary teenagers downloading yet another picture of Anna Kournakova. I thought of this years ago, but never mentioned it anywhere -- giving ideas to bad people and all that. I read somewhere that terrorists are quite fond of steganography, so the cat is really out of the bag already.

    3. Re:Contributory negligence by lifeblender · · Score: 1

      Yeah... It'll happen soon then. But I didn't say which way the transfer would go. With the Google desktop search agent in place, you could spam someone by placing public files on their private machine. It could be all kinds of nasty. There is so much potential for abuse still untouched... why must my talents lend themselves to its discovery? Just like [deleted to save the future from itself].

      --
      Playing pornographics games during the day is evil! Play at night!
  96. McAfee and Norton by SammysIsland · · Score: 3, Insightful

    What I can't seem to figure out is why Norton and McAfee didn't include spyware detection and removal in their virus detection software from the beginning. I remember specifically reading something on Symantec's site that said something to the effect of "we are not targeting any 'spyware'".

    Wouldn't this have saved a lot of problems? How is spyware not considered malicious?

    Over and over again, I have to sit at friends' computers and rescue them from the evil clutches of the browser hijackers and such. I think Symantec and McAfee dropped the ball on this one.

    1. Re:McAfee and Norton by Anonymous Coward · · Score: 1, Insightful

      I remember specifically reading something on Symantec's site that said something to the effect of "we are not targeting any 'spyware'".

      Wouldn't [including spyware detection in AV software] have saved a lot of problems? How is spyware not considered malicious?


      It's as simple as this: Symantec and McAfee don't want to get sued for labelling some other company's software "spyware" and removing it. Look at how sensitive Claria *cough*GATOR*cough* was about being labelled a purveyor of spyware. Even if a particular piece of software is generally considered to be spyware or adware, the company that produced it disagrees-- they see it as a moneymaking, legitimate product that was willingly installed by the enduser (though that was most likely via clicking through the EULA for some freebie gewgaw they downloaded somewhere without bothering to read it). And they see another company tampering with their product as a legally actionable matter.

      We all know that this is a bunch of horse shit, and that nobody with any sense would have deliberately installed that junk on their PC if it wasn't stealthily tacked on to the installation of something else. We also know that nobody would have agreed to having that junk stealthily installed on their PC if it wasn't buried in some ponderous legalese that will almost certainly go unread by the vast majority of people who happen upon it.

    2. Re:McAfee and Norton by Anonymous Coward · · Score: 0

      Norton Antivirus 2004 and 2005 do make an attempt to remove some "adware" as they term it.

      To date I've found it does a pretty poor job of it. On top of the fact that 2004 would randomly hose machines, I'm not too sure why anybody uses it anymore.

  97. No Mystery: It's that IE "Integration" Thing. by Spencerian · · Score: 1

    Macintosh systems are less affected just as other PC browsers present less of a target on PCs. There's a reason why geeks still call IE by its sly nickname, "Internet Exploder."

    The key here, as I'm sure has been stated, is in how Internet Explorer on Windows works. It's interaction with the internet (through its integration as a part of of the OS) is a liability because Microsoft has allowed a program that connects to the internet to permit external sources to download and launch external applications or link itself to external applications, all of which are dutifully managed by the operating system. No other browser I know is that guillible. IE provides no clear definition between operating system and browser to those who exploit it.

    Spyware links itself to the unique components of IE and the Windows registry because some nutjob at Microsoft thought that anything found on the internet should be accessible to use in Windows (note that I didn't say "the browser", but Windows.).

    Other browsers isolate all activity to the browser alone. Java and JavaScript on a Mac are not allowed to execute items from anywhere except the browser. If an exploit has been noted in these browsers that tries to touch operating system areas, it's truly an exploit, and not a "feature" that needs a fix as it would be found in IE/Windows.
    Take a look at the cookies in Safari on a Mac to that on a PC. The cookies saved aren't much different. But Safari and many other browsers don't recognize or allow commands or configuration requests from these cookies. IE for Windows does.

    --
    Vos teneo officium eram periculosus ut vos recipero is.
  98. Re:Of course it is! Spyware only did good for me! by zicherd · · Score: 1

    That is exactly right. I am a an accountant for a medium sized company that makes beer kits and during the evenings I help people out with their computers. 90% of my extra business comes from spyware and virus removal. I collect $50 per hour and a lot of Sierra Nevada Pale Ale. The trick is to stay up on which programs take of the crap the best, I do not have a lot of luck with just one, SpyBot, SpySweeper, and AdAware work best for me together. As long as the person did not put on the free Adaware I have pretty good luck. The never listen to me and still go to a bunch of porn sites and I see them again in 3 months.....I have not had to buy beer for months!

  99. Re:/. Propaganda by Anonymous Coward · · Score: 0

    You absolutely refuse to learn.
    And NO - they are actually from the same threshol - IDIOT omg...
    sigh***

  100. Is it just me by gone.fishing · · Score: 1

    Is it just me or do their numbers seem terribly low? I'd put the spyware infected Windows machines at nearly 95% (only those recently cleaned are clean) and the $305 million number seems about 1000%

    1. Re:Is it just me by wk633 · · Score: 1

      Perhaps because the two main tools (ad-aware and spybot) are by donation.

      I have a policy that if I use those tools to clean someone's computer, and they pay me, I give some of that to the two companies.

      Now, if only we could uninstall IE and get a rebate...

  101. Re:Of course it is! Spyware only did good for me! by zaffir · · Score: 2, Funny

    I'm not sure what's creepier, the fact that you share a porn collection, or that someone found your post +1 informative.

    --
    "Upon attaching the waterblock to my penis, I began to notice that I know nothing about computers." -- JRockway
  102. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 0

    How about explaining to a woman that her computer's messed up because her 10 year old is visiting dodgy fetish sites? yeah, that's a fun one.

  103. I know a guy with an MD and PhD by walterbyrd · · Score: 1

    But he doesn't much about the inner workings of his computer. Is he a lazy, uniformed moron?

    1. Re:I know a guy with an MD and PhD by BVis · · Score: 1

      But he doesn't much about the inner workings of his computer. Is he a lazy, uniformed moron?

      Uninformed, clearly. Lazy, that's tougher. It would depend on if he's a) sought out the information or b) asked someone in the know for the information. Moron? That's a matter of opinion.

      My personal definition of stupidity makes a distinction between ignorance and stupidity. An ignorant person doesn't know a given fact or possess a given skill. A stupid person is aware that they don't know something, doesn't care, and makes no effort to learn. Ignorant people can be educated. You can't cure stupid.

      Fortunately, you can charge them obscene amounts of money to fix things that, if they put in the slightest effort, they could learn to fix for themselves. I have no problem gouging the living hell out of someone who can't be bothered to fire a synapse. Spyware prevention and removal requires no special training, certification or equipment.

      --
      Never underestimate the power of stupid people in large groups.
    2. Re:I know a guy with an MD and PhD by Anonymous Coward · · Score: 0

      A stupid person is aware that they don't know something, doesn't care, and makes no effort to learn.

      I disagree. There are a lot of things I don't know. I don't know anything about opera or dance. I know very little about the tax codes. I don't know Assembly language, or Swahili. I don't know the distance from the Earth to the moon. I don't know a fraction as much about anatomy or medicine as my doctor. I don't really care, and I make no effort to learn about these things. You are, therefore, calling me stupid? I do have a genius level IQ, and I graduated at the top of my engineering class by a large margin. I simply do not spend a lot of time studying things which have little or no bearing on my life. I study things which interest me, or which have a good ROI. I'm also lazy, so rather than spending my free time studying, I play games or go for a walk, or whatever.

      I would more likely consider stupid to be the person who is incapable of learning new subjects at a 'reasonable' rate. I don't expect everyone to learn TeX in 4 days, or to understand the structure of the atom. I do expect that if someone wants to keep their computer clean, they should listen and understand an explanation of how to avoid spyware, provided it is well explained. Most of them never receive this explanation. Most expect their product to be 'finished', and not require maintenance that isn't clearly listed in the instructions. Computer science is still very much a startup industry, so we won't have polished products for a while. That is our failing, not theirs.

      The other thing I might put in the 'stupid' category would be people who don't know the limitations of their knowledge. I hesitate here, because some people accomplish great things, because they were too stupid to know that it could not be done. However, when I have to listen to people give totally inaccurate explanations of phenomena, and they do it without hesitation because they are used to bulling their way past ignorance, I get rather annoyed. This bullish mindset also means that you can't just correct them, they have to maintain control.

      Then again, I am stupid and ignorant, so I should just stay quiet and let you smart people talk.

    3. Re:I know a guy with an MD and PhD by BVis · · Score: 1

      Clearly my definition is simplified, and these definitions are not black and white. In my view, "stupid" has no correlation with IQ, level of education or material success. I'm thinking more of the case where someone runs into a challenge in the course of living their lives (however they choose to live them, eg what interests they pursue, what vocation/avocation they choose, etc) and instead of meeting that challenge with effort and a willingness to grow, takes the position that they shouldn't have to learn anything further and refuses to consider any other course of action; indeed, they are insulted by the insinuation that there's another option.

      I don't know anything about line dancing because it doesn't interest me; if it were in my interest to become familiar with this topic, I would make an effort to learn the necessary information. It might take me a long time to become familiar with it because of my low level of interest and/or motivation to learn anything about it. I disagree that the rate at which one acquires knowlege is an indication of how "stupid" someone is. I would never call someone who puts forth effort into learning new skills and acquiring new information stupid, no matter if they learn quickly or not.

      --
      Never underestimate the power of stupid people in large groups.
  104. Already happening by lysium · · Score: 1

    Norton (Symantec) Anti-Virus Corporate version 9 includes spyware blocking and removal tools. Their effectiveness remains to be seen on my network, but it is a sign of progress.

    --
    Together, we will drive the rats from the tundra.
    1. Re:Already happening by Tokerat · · Score: 2, Insightful


      No, go back and read that again. I think he means the removal tool authors will start including spyware they "approve" of along with their removal tools, so that they can guarentee said piece of spyware WON'T be removed. Spyware companies would pay huge amounts for something like that, let's hope those making spyware tools won't sell out. (I'm fairly confident they won't,, that's like Symantec bundeling virii with their anti-virus tools...

      --
      CAn'T CompreHend SARcaSm?
  105. Help Desk Worker by infiniter · · Score: 1

    I work the computer help desk at Rose-Hulman Inst. of Tech.

    Of 10 problems related to software I see, probably 9 are spyware-related. I can install and run Spybot and Ad-Aware with my eyes closed and one hand tied behind my back.

    Spyware makers need to be prosecuted, plain and simple. They're creating a problem that is much worse than spam, especially in cases when their programs are debilitating to a system. Their creations are no less than viruses.

  106. Consumers don't call their PC vendor first... by Laebshade · · Score: 1

    when they have spyware problems. They call their catch-all problem solver: their ISP.

  107. Fix your hosts by stimutax · · Score: 1

    Found this site that has a link for a hosts file that will automatically block most adware/spyware/malware: http://www.mvps.org/winhelp2002/hosts.htm

  108. Re:Of course it is! Spyware only did good for me! by KungF00 · · Score: 1

    hmmm, It's also great for M$, I bet they stop patching their security holes and start patenting them. So they can sue to get a piece of that pie!

    --
    m@t
  109. Wish i had spyware.com by Anonymous Coward · · Score: 0

    Now wouldn't it be cool to own spyware.com?

  110. AV take by kryptik_79 · · Score: 1
    SecurityFocus has a recent column about where AV companies stand on spyware.

    Most interesting is the clear market distinction that is being drawn between spyware and virus. We've seen the technical argument about how they cannot be categorized the same, but I figured that these markets would have fully merged by now.

  111. Microsoft is good for the economy...or is it? by upsidedown_duck · · Score: 1


    With the billions spent on patching, cleaning up viruses, reconfiguring user-botched systems, removing spyware, and secretaries playing with animated text in Word, Microsoft generates jobs for us all.

    or is it that Microsoft creates a drain on what would be otherwise profitable small businesses destroying jobs for us all?

    You know, Microsoft is the rain and ditch cycle of the software industry. Dig a ditch, rain fills it up, dig it again, fill, dig, fill, dig...wow we just got a lot of work done, right?

    --
    -- "Makes Little Debbie look like a pile of puke!" - Moe Szyslak
  112. IF------ by Anonymous Coward · · Score: 0

    M$ made a better product, we would not need any type of spyware removal tools.........

    just look at outlook express, it is still screwed up....7 years and counting.......

  113. Re:Of course it is! Spyware only did good for me! by NotoriousQ · · Score: 2, Interesting

    There was no option for -1, too informative. This was the closest.

    --
    badness 10000
  114. That does not work more than once. by twitter · · Score: 1
    ... it often cost less to just buy a new PC and have a friendly geek save all their old stuff.

    Yeah, but with a half life of just 4 minutes, people don't see a real improvement no matter which way they go with Windows. "Yeah", you say, "but a Pee Cee with SP2 does not get owned so quickly." Of course, it does, when the user has email (conversation with study author), or browses. People know this and are not very happy.

    Next time, give them Simply Mepis or Debian Sarge. It works, it's easy for both of you and they will thank you for it.

    --

    Friends don't help friends install M$ junk.

  115. Replying to myself... poor show I know... by VendettaMF · · Score: 1

    Submitted incompletely due to over haste...

    My former post was intended to include a comparisson with the way I don't need/have a heavy haulage 18 wheeled truck, and should not be allowed in control of one until such time as I learn (in a controled environment) to use it responsibly and get certified through a test or series of tests to show that the learning "took".

    --
    kartune85 : Incapable of reason, observation or learning. A kind of dim, drab, flightless parrot.
  116. What if you find something while cleaning up? by seanfuller · · Score: 1

    I have found things while cleaning up PCs. Things like pictures from pr0n sites and the like. Say you are doing this for a friend or a family member even. What do you do with this kind of information. A certain amount of pr0n may seem healthy, but there is a level that I see as a problem. Does anybody have any advice or experience in this area?

    --
    Sean Lane Fuller - The truth is out there!
    1. Re:What if you find something while cleaning up? by Anonymous Coward · · Score: 0

      Tell their wife and kids then go around and tell all their neighbors thy gots pictures of nekkid ladies. Then go tell yer preacher u done a good thang.... you stupid right wing hick!

    2. Re:What if you find something while cleaning up? by wk633 · · Score: 1

      In some jurisdictions (I'm familliar with Canada) if you see child pornography, you are obligated by law to report it to the authorities.

      I was once involved in group therapy sessions in which confidential information was shared. The disclaimer was always that anything that comes out that is either a) a direct threat against another person, or b) involves child abuse, by law it must be reported.

  117. Try these. by twitter · · Score: 0, Troll
    Spybot, search and destroy and Adaware by Lavasoft are free beer if not free speech. They might work for a month or two. Then you need go go to the pro:

    That should take care of things and you can spend the rest of your client's time showing them new and better software instead of fixing old crap.

    --

    Friends don't help friends install M$ junk.

  118. Re:Of course it is! Spyware only did good for me! by gcaseye6677 · · Score: 1

    What's wrong with the free AdAware?

  119. Firefox install takes IE's settings. by khasim · · Score: 1

    If they have spyware linked to IE, most likely those settings (default web page, etc) will be transfered to Firefox.

    This is probably what you experienced.

  120. Scam Artists by FyberOptic · · Score: 1

    The saddest part to the whole "spyware removal" industry is that a majority of the companies that are out there are in fact either directly or indirectly responsible for some kind of spyware or adware software in the first place.

    I had a bad case of adware on my brother's machine once, which replaced his home page and such with a "search engine" thing. He would also get popups, some of which would tell him that his machine was infected with adware, and to click there to "remove them". Clicking that popup, out of curiosity, showed me results in the "search engine" page, linking to several sites which sell adware removal programs.

    Now tell me this. Why would adware pop up ads which links you to pages that would help you remove the stuff? The answer, of course, is that those companies are responsible for the adware in the first place, or are paying whoever created it to put their company in their adware "search engine", so that people are sure to find'em. If this were a legit search page, it would take you to a program which actually works, and is free, like Spybot or Ad-Aware. These two things never showed up in the adware "search engine" page. Coincidence? Of course not.

    Spyware and adware can be just as damaging and result in the loss of as much productivity as a common virus can. And software like this works almost just like a virus; it fights you at every turn to remove it. It can actually be much harder to remove this kind of junk, depending on which one gets installed. The difference is though, if you write a virus, you go to jail. If you write adware (aka, a virus with ads in it), you make a ton of money.

  121. Spyware is annoying. by Maul · · Score: 1

    Since I'm the "Computer Person" in the family, I get calls from family members all the time asking for help with spyware (or problems that are obviously caused by spyware). A scan with Ad-Aware usually reveals dozens of pieces of spyware and similar programs.

    I'm sure OEMs get swamped with these types of calls too.

    --

    "You spoony bard!" -Tellah

  122. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 0

    Dude, I hope you don't mind... I am going to have to use that quote.

  123. Just uninstall Internet Explorer by Animats · · Score: 1

    It can be done. There's a $39.95 commercial product to remove Internet Explorer and much other stuff you don't want running.

  124. Why pay for anti-spyware? by Anonymous Coward · · Score: 0

    With programs like Spybot and Ad-Aware free, why would anyone pay for a spyware-removal program?
    It's not like using linux instead of windows; the free programs are not harder for the average user to use or anything like that.

  125. spyware created by spyware removal companies by Anonymous Coward · · Score: 0

    the business is too easy, create spyware, then create the solution and sell it. you create your own supply and demand. boooooooo

  126. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 0

    No wonder people "like" Windows. But then again, you should suppport the economy so you should use and recommend Windows. Mac OS X and linux are for commies. True capitalist patriots contribute to the economy by spending cash for IT support. See, Mac users are too cheap to pay for such services. But Macs are so expensive. Windows users OTOH will gladly pay and Windows are so cheap.

  127. It's small business, too by conebrid · · Score: 2, Interesting

    Over the summer I worked for a small ISP (six employees including myself) with a decent customer base of about 1800 people. As an extra source of revenue, we also sold hardware, built custom PCs, and provided repair services at $38.50 an hour.

    In my two months working there, we had quite a few people come in for repairs, and I would say about 90-95% of those cases were spyware related. They would come in complaining about their computer slowing down, crashing often, or my personal favorite: pop-ups constantly appearing, even when "not on the internet". They would generally describe the problem by telling us "I think it has a virus or something". In cases where spyware was the primary problem, we used several free tools including Spybot and Ad-aware to remove as many traces of the malicious programs as possible, and made sure there were no suspicious processes left running and that the computer was working normally (although the average machine we saw was at least two years old, if not older, and relatively ran very slowly despite all the other common optimizations we applied). We left a note in their service ticket about the software we left installed on their computer (typically Spybot and maybe AVG Antivirus), and offered to instruct any interested customer in their origin and use (not many customers were interested).

    It really wasn't a bad summer job, but not the sort of occupation I would enjoy for an extended period of time.

  128. Re:Of course it is! Spyware only did good for me! by Surlyboi · · Score: 1

    Before I took up residence at my current gig, the place was a madhouse. A small startup with no clue about internet security and all their machines set up by a well-meaning, but not too savvy employee with a slight IT bent. (And sometimes machines shared with other family members of employees in the cases of laptops.)

    I had to have every machine re-imaged, the entire network torn down and reworked. And yeah, all the wacky-ass pr0n and random bizarre spyware cleaned off the big boss's machine was a hoot. Memo to all of you out there, never let your 17-year-old son use your slick new two-pound laptop. I don't care if he does have a paper he needs to finish. That's what cheap home Dells are for.

    --
    Mod me down and I will become more powerful than you can possibly imagine...
  129. Its spyware because by tkrotchko · · Score: 1

    The viewpoint manager never says "You need this tool to view this content. Click here".

    Nope, it just installs itself silently.

    Now, if you have Webroot Spysweeper, it alerts you that something has changed.

    However, something that installs without your permission and then reports aggregated data back to a central server is by definition spyware.

    If its not spyware, then why not ask permission ot install? Are they afraid people will say "no"?

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
    1. Re:Its spyware because by Anonymous Coward · · Score: 0

      Ah, but if you run as a limited user you just get the warning that the Viewpoint media player could not be installed because you do not have sufficient privileges. The user probably already agreed to install it in the AIM EULA, so why give them a second chance? Business is not about giving people extra chances to back out. User beware.

  130. Freedom in Action by serutan · · Score: 1

    It seems ironic and counterproductive to have a multimillion dollar industry grow up around something that should be illegal in the first place. We wouldn't think it was normal to have service companies routinely come around and patch bullet holes in our walls, paint over graffiti and haul away restroom waste dropped from airliners. If somebody defaces a big website it's a big deal. Why do we individually accept the time and expense of periodically de-vandalizing our computers?

    Hiding behind obfuscated EULAs shouldn't work. Partly because it's an obvious abuse, and partly because nothing is done to verify that the person giving permission has any legal status. A great deal of spyware rides in on "free" games and other amusing things aimed at kids. How does a contract "signed" by a 10-year-old have legal weight? One argument is that the adult who lets the kid use the computer is responsible. But then why wouldn't that same reasoning apply if the kid merely borrowed the adult's pen?

    Spyware distributors know they're doing something people don't want them to do, or they wouldn't go to such great lengths to disguise it. I personally think they're in the same category as people who hack into banking systems and should be treated accordingly.

  131. Nah, you're just dumb by Anonymous Coward · · Score: 0

    " my spelling has less to do with my intelligence and more to do with how careful I am"

    No, its a good indicator that you're just not a smart guy. You're just not.

    Its not your fault. You didn't do anything wrong, but you may have a good upbringing the other half is genetics, and you're behind the curve there.

    Way behind.

    I'll be you think the ultimate ride is a Cadillac Escalade, too.

    1. Re:Nah, you're just dumb by Anonymous Coward · · Score: 0

      it's not your fault you're a cock-sucking AC, and your best ride is your hand

  132. What I find funny... by wolf31o2 · · Score: 1

    ...is all these people with spyware in corporate America. I don't mean mom and pop shops, but large firms with a dedicated IT staff of highly trained and educated IT professionals. I simply cannot fathom how these people can possibly have systems that are so easily destroyed by outside forces when they have complete control over both the hardware purchased and the software installed on the machines.

    I can give you examples from both sides.

    At the company that I work for, one of the biggest problems the help desk has to deal with is resolving issues with Windows 2000 caused by spyware and other malware. They have Active Directory and SMS, they use a standard corporate image, and users are not given administrator rights on their own machines. Why are these machines still having so many problems?

    Well, for starters, the default filesystem permissions on Windows are atrocious. They essentially give even normal users permissions to write all over the operating system and in locations where they have no business writing anything. Couple this with the default settings of Internet Explorer trusting damn near everyone on the planet that can pretend to be someone or something else, and the tendency of Windows and IE to auto-run anything that is possibly executable, and you end up with a total nightmare. The amount of research and work required to solve these limitations is simply beyond most management's ability to comprehend. Why should it take days or even weeks to certify a new image for usage?

    The real problem is political and monetary. There are no financial gains to be made by having a team of people spend several days doing research to get something right. It is very hard to quantify monetary loses due to spyware and other things that can be avoided, until after the fact. It is very easy to quantify the cost of X number of people for Y number of days, though, so the decision is consistently made by management to cut as many corners as possible, spend as little time on research as possible, and get the systems out the door as quickly as possible. This leads to the inevitable problems with spyware and malware that so many of us are facing.

    Now, I will give you another side of the story. My parents have a computer. It isn't much to look at and it definitely is not fast by today's standards. Knowing that my parents have limited computer skills and limited computing needs, I took the time to design and implement a proper environment for them. I started by picking Windows 2000 Professional. At the time, XP was still a beta, and anything based off Windows 95 was definitely not a choice due to its complete lack of access controls.

    The system was installed with a primary partition, being for the operating system and nothing more. It has very little space left for things to be installed, yet still enough space to download, uncompress, and install a service pack (or 3) and still leave the backup files on the disk. This partition is not writeable in any way to any user that is not an administrator, except in cases where poor design required write capabilities. A second partition was created to store all programs and user data.

    I took the time to research and modify a proper local security policy, along with group policies for the machine to allow them to perform tasks that are otherwise not allowed for a normal user. At the same time, I removed the ability to perform tasks which might be considered dangerous when left in the hands of a computer novice. Through these policies, I also moved things like "Program Files" and "Documents and Settings" to the secondary partition. The programs are all read-only, except for a few parts of Office, which require write privileges to function properly. I also setup several automated tasks to run periodically, at times when I knew my parents would not be using the computer. One of these tasks makes a backup image of the primary partition to a location on the secondary partition. This is done in case something bad happens an

    1. Re:What I find funny... by Slur · · Score: 1

      So obviously, all Microsoft needs to do is include a dedicated IT guy in every package and Windows will be totally secure!

      --
      -- thinkyhead software and media
  133. Mmmm paradoxical... by eieken · · Score: 1

    Computers seem to be the only place where businesses can shoot their own customers, and still sell them a bullet proof vest.

    --
    Meet new people, and kill them.
  134. Re:Of course it is! Spyware only did good for me! by Anonymous Coward · · Score: 1, Informative

    So, like we need "-1: TMI (Too Much Information)"

  135. Re:Of course it is! Spyware only did good for me! by zicherd · · Score: 1

    I have found that when the free version is loaded, it will not detect and correct all of the problems. Then when I try and load a complete version, it does not install correctly and need to clean the free version out first, then reload the complete version. If the spyware is bad enough sometimes the uninstall feature will not work correctly. It really comes down to taking extra time that if I can avoid is really nice.

  136. Re:/. Propaganda by Anonymous Coward · · Score: 0

    Everyone remember the tag from American Beauty?
    Oh yeah... "Look Closer."
    That's some advice I'd advise you to take.

    The thresholds are different:

    The first set of pictures clearly shows threshold of 1 for the anonymous user and 0 for the logged in user.

    The second set of pictures does not have the threshold clearly pictures on the page, but the "2 replies beneath your current threshold" right above the parent topic on the anonymous login are suspiciously absent, indicating that the thresholds are set different for the logged on picture.

    And while we are at it, lets see if a moderation that brought Essreenim's first post down to -1 was fair: I don't see the reason for moderation, but this is one of those fscking stupid "in Korea old people blah blah blah" jokes that seem to have been picked up by trolls, rather than the equally stupid, but overly played out "In Soviet Russia" abominations.

    So let's take a look at Essreenim's account, shall we? Well, let's see: a number of negative scores, even with no moderation. One can only assume that Essreenim has received his troll badge of honour by recieving enough negative moderation to get that automatic -1 on all posts. So this post in particular was not modded down, the poster had been. Wow. I bet your mother is proud.

    And no, I have not necessarilly been trolled here. Possibly flamebated, as part of my response was on the topic at hand, part was an Ad Hominem attack. However I am just using the past history of the person in question to show a pattern which would allow one to come to the conclusion that Essreenim is a known troll.

    I mean, come on. The only person in Essreenim's friend's list is named fucksl4shd0t. Try to tell me that that name is not the moniker of a troll. Come on. I dare you.

  137. Re:Of course it is! Spyware only did good for me! by iamhassi · · Score: 1
    Rather tell my father and mother than my wife...

    yeah right, like anyone on /. has a wife ;)

    --
    my karma will be here long after I'm gone
  138. Ford also made the car easier to drive by yorkpaddy · · Score: 1

    In addition to making the car considerably cheaper, Henry Ford also standardized the user interface. I read this somewhere recently. Before the model A, you had to set the ignition advance of a car manually, and you may have even had to adjust the carb fuel air mixture, there was also a lot of different arrangements for controlling the throttle, brakes, clutch, and shifter. Ford made it all simple. Windows 3.1 was a huge improvement for the average user over the CLI. Windows derivatives also became pretty cheap. (They do have enormous flaws) The Mac seems to have done an even better job with the UI. They did it back in 84 (might be off a year). But they weren't cheap, so they have had little market penetration.

    --
    "brxref .k.p ,.by xprt. gbe.p.oycmaycbi yd. cby.nci.bj. ru yd. am.pcjab lgxlcj" don'
  139. Last sentence... (hit 'Submit' too soon) by Anonymous Coward · · Score: 0

    But that's the way it is.

  140. Re:Of course it is! Spyware only did good for me! by slonkak · · Score: 1

    No, the problem isn't with, specifically, the free version. The problem is that most spyware is more advanced than before... modifying numberous registry keys, changing file names so as to not be detected, etc.

    Spyware removal programs are a FIRST step to removing spyware, not the only step. After running a removal program you should
    1. Goto Add/Remove Programs and uninstall anything that doesn't look legit (this includes and IE toolbars)
    2. Run msconfig and uncheck any services that don't look legit
    3. Rebooting into safe mode and deleting the folders in "Program Files" of stuff that won't go away
    5. Finally, run your removal tool again

  141. It comes in pints... by gmknobl · · Score: 1

    Yep.

    The real /. surfaces again.

    Who's your daddy! Uh, mommy. Uh, ugh!

    Freud?

  142. XP+Firefox+Thunderbird+Firewall+Adware+S&D! by master_p · · Score: 1

    After I stopped using IE and Outlook Express, and installed a software firewall and Adware + Spybot S&D, I have no problems. The problem in the Windows environment is IE and OE. After getting rid of those, Windows is a good operating system (with critical patches installed, of course).

    You know sometimes spyware programs are revealing? I was yesterday at my boss's office...as we talked about something, porn ads kept flashing at his PC! he was embarrassed, to say the least.

    (and no, I did not ask for a raise, at that particular moment).

  143. hey there! by Changa_MC · · Score: 1

    I'm a computer guru, sure, but an "average" car user.
    I hear a funny noise, I have my wife take it to our mechanic who leaves me a voice-mail telling me not to go 11000 miles before the next oil change, or I'll hear that noise again!
    He gets paid because he knows more about cars than I do. Better, he gets paid so I don't have to care about cars at all!
    If you don't like cleaning up after people, why're you carrying that broom around?

    --
    Changa hates change.
  144. Most Spyware is benign by bgspence · · Score: 1

    Whenever I run Spybot, it finds lots of cookies which are deemed to be spyware. The article states two-thirds of PC users are infected, but:

    Total Number of SpyAudit Scans: 10,305
    Total Number of Distinct Audits: 4,104

    Average Instances of Spyware per Scanned Desktop: 20
    Average Adware Installations per Scanned Desktop: 2.5
    Average System Monitor Installations per 100 scans: 5
    Average Trojan horse Installations per 100 scans: 5.5

    So, probably most of the infections they are counting are really just cookies. The numbers are alarmingly high, but not nearly as bad as they make it out to be.

  145. Worthless growth prediction of 12 to 305 million $ by Anonymous Coward · · Score: 0

    Have we learned nothing from the .com boom-bust? Any prediction of market size increasing 2500% in 4 years is completely unbelievable and worthless.

    Any prediction of economic growth stops being reliable at or before the time when the value it predicts has doubled.

  146. from the front line... by fluke72 · · Score: 1

    as a pc repair technician I can tell that 2 out of 3 machines we are taking in is for a spyware/virus related problem.

    What I find really annoying is that the customers are bringing their computer in because "it is slow" so we have to break the news to them that this is a software related problem -so, not covered in store by the warranty (actually not covered at all)- and tell them that it costs 39.99can$ to get them removed. Most of them can even seem to figure that windows or a virus or anything else than the hardware could be to blame in all the slow downs they've been experiencing, and they can't figure that everything began when they installed kazaa or when they went on that pr0n site...it just happened. Most of them are clueless.

    We had a woman last week who got her pc restored and brought it back yesterday because she was getting errors when trying to install kazaa...I told her to stay away from that program and she didn't even seem to register the information, like: "yeah, right, whatever, just get it working so I can download music again". Mam, you deserve to pay

    as long as the customers will be treating their computer as simple stereos (you turn it on, you turn it off, if it won't work it's because it is physically broken) we'll have those problems and THEY'll have those problems. Most of them don't even figure that they are the cause. "The damn thing is broken again, I feel like I am paying for nothing"...no you're not, you're paying for your lack of knowledge/interest and your stupidity. As the saying goes "fool me once, shame on you; fool me twice, shame on me"

  147. Spyware keeps me employed by ReNeGaDe75 · · Score: 1

    I currently work part-time for my university performing technical support for students' computers and 99% of the machines are infected with Spyware. It's a nice way to make a few bucks on the side.

    --
    Hypocrisy is the 8th deadly sin.
  148. Why pay somebody to remove spyware? by walterbyrd · · Score: 1

    Except in extreme cases, where software can not be installed, or the system won't even boot. Other than those cases, can't anybody install and run adaware, or whatever?

    1. Re:Why pay somebody to remove spyware? by SysGoddess · · Score: 1
      Yes, anyone can. But remember, these are usually the same lusers who allow adware,malware, spyware, virri & worms to proliferate on their systems to the point that they come to a screeching halt and THEN they call the exterminator.

      How many times have you seen a user simply click away ANY sort of alert or popup that shows up even when it's their firewall or antivirus telling them that there's a problem or that the incredible new POS 1000 spyware they installed for its cute icons is now trying to phone home with their personal information?

      Frankly, many of my clients are dumber than rocks when it comes to computers and even years of trying to help them be proactive and educate them has been an utter waste of my time and theirs.

      Most just want their computer to work, like their refrigerator. Sure, you're supposed to vaccuum under and behind the refrigerator to prevent build-up of dust mutants and other nasties that will shorten the life of the motor but only rarely do they actually perform any preventative maintenance. Computers are no different to the masses. They simply want them to work without having to know how to actually operate them or perform any preventative maintenance.

      --

      Thus spake the SysGoddess
    2. Re:Why pay somebody to remove spyware? by derrick92130 · · Score: 1

      If only it were that simple. Unfortunately, much of the "malware" that is proliferating right now will embed itself into the system registry, or modify/replace existing valid executables on the system. Many times removal applications will remove the registry entries, and then the application (still running in memory) will reinstall the registry entries prior to being shutdown. Then when you boot your computer again, presto the problems are back again. Others will lie dormant until activated by your browser or other applications, then re-download themselves across the Internet.

      Bottom line is that tools like Spybot S&D and Ad-Aware are great tools and should be run regularly to assist with keeping your system clean. However, there are so many new and evolving methods for Spyware, it is not uncommon to need some "professional" help.

      Many of my customers just don't want to spend the 4-6 hours to clean their systems and would rather just have someone else do it for them!

      One of my customers said it quite well. "There is enough information on the Internet to allow me to rebuild my transmission on my car by myself... It doesn't mean I should try!"

  149. Re:$15/hour? Well, maybe in the call center. by shadowbearer · · Score: 1


    Any suggestions tool-wise? I have a badly trojaned winME machine here and can't find the little bastard anywhere. I've gone thru and beyond the usual. Plenty of details if you're interested :) I got it cleaned up save for one nagging inconsistent popup that tries to load trojans on the box.

    Sigh. I'd really rather not reinstall.

    SB

    --
    It's old. The more humans I meet, the more I like my cats. At least they are honest.
  150. Re:$15/hour? Well, maybe in the call center. by garwain · · Score: 1

    That $15/hour really amaizes me... I charge $50 for a system cleanup, when the machine is brought to me, $75 on site, and it generally takes me about 2 hours (on a regular clogged up machine) most of which is watching Ad Aware, and AVG do their magin... After that it's simply a matter of cleanup up any leftovers, purging the temp directorys and any other junk that's sitting around, then unplugging the whole mess, dragging the machine and keyboard outside for a blast of compressed air to degunk the keyboard and liberate the dust bunnies...

    Best part is a good afternoon when I have 5 or 6 machines on the go at once... I sometimes make more cleaning up machines at home than I do at my regualar 8-5 job. Pretty soon I'll be looking to work full time for myself.

  151. Re:Microsoft thanks themselves! by rush22 · · Score: 1

    Spyware and virus removal companies depend on Microsoft's security holes for their business. That's a given. Think about this:

    1. Create monopoly.
    2. Create vulnerable software that everyone uses.
    3. Invest in spyware/virus removal software.
    4. Profit.

    Pretty simple if you ask me. I bet Microsoft is invested in at least a couple companies which make anti-virus and/or spyware removal software, which means they are profitting off their own mistakes.