Slashdot Mirror
Spyware Removal is Big Business
prostoalex writes "Just when you thought all the software niches were taken, IDC comes out with the report saying $12 million was spent on spyware removal tools in 2003, and $305 million will be spent in 2008. IDC also estimates two-thirds of PC users out there are infected. Large PC vendors are waking up to the spyware threat, having their call centers overwhelmed with spyware-related calls."
It's the best way of getting free beer I've found: fixing spyware related problems for family and friends. While I watch SpyBot and AdAware do their job, I get free beer. There are worse activities ;-)
Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
...that the vast majority of this spyware was installed by exploiting vulnerabilities (some overt, some more roundabout) in primarily Internet Explorer.
And once an ordinary user is compromised by one piece of spyware, it's usually a downhill battle.
Imagine how different the situation would be if, for the last several years, there had been real competition on the browser scene. Of course, there may never have been a way to solve the problem with the courts anyway: they DID decide that Microsoft illegally used its monopoly position to bundle IE, but Microsoft knew exactly what it was doing. By the time the slow wheels of justice had turned, Microsoft's browser takeover was virtually complete.
And during this entire time, IE fundamentally was stagnant. There were glaring, egregious security issues, and no new features that had already become pervasive and popular with alternative browsers (popup blocking, tabs, etc., not to mention a lack of horrible inattention to security). I imagine Firefox's recent uptick in usage illustrates, even after all that, just how bad IE sucks. But this will only be good for Microsoft, and for everyone: if Microsoft feels it has competition from things like Mac OS X in OSes and Firefox in browsers, we get developments like SP2. We get a new "commitment" to security. We'll ostensibly get new features in and an attention to security in IE. (Well, we can dream, right?)
I wonder how many dollars have been spent, or how many families have actually bought new computers (yes, it happens), once their PC slows down and/or crashes, hangs, or has other problems, to the point that it's virtually unusable. Yes. People really do this. They don't feel they can or know how to just wipe the machine and reinstall Windows, and even if they did, they don't know how to save everything they want to. So they just buy a new computer.
Measure that in negative values. AOL ships Viewpoint Media Player, a known spyware, with their client, which supposedly also includes anti-spyware software.
It would be cool if it didn't suck.
I travel with a frequently-updated set of tools for exorcising various demons from PC's, and am accustomed to mucking about in the registry, winsock stacks and other oh-so-fun places to finish up the job.
Village idiot in some extremely smart villages.
There are already many examples of this, spyware companies do it to destroy their competition (i.e. remove competitors spyware, but not theirs)
This isn't the problem in question so much as anti-spyware vendors marking certain spyware companies as "harmless" and ignoring them for pay.
WOuld we pay for a car if every billboard we passed was capable of taking control of the vehicle and making it drive to other billboards? I don't think so. Why then will we pay for windows.
99 bottles of beer in 175 characte
In my opinion, most spyware is easy enough to get rid of using tools like Spybot-S&D, SpySweeper and AdAware. The one category that I've found harder to remove are the ones that embed themselves into the Winsock chain and redirect network features.
I cleaned out one PC last month - it wasn't infected too bad, only several dozen things for the scanners to complain about, and I've dealt with systems that had several hundred! - but even after everything seemed to be gone, its default search URL and things like that kept getting hijacked. I had to grab a tool to fix the Winsock chain; some malware had slipped itself in there and was screwing things up.
Village idiot in some extremely smart villages.
Just think how un-American Apple computer is. Do Macs contribute to the growing anti-spyware business? Hardly at all! Why almost no money is being made removing spyware from Macs. Why hardly anyone has heard of spyware for Macs in the first place. Can you imagine taking bread from the mouths of the little children of anti-spyware software developers? Won't someone please think of the children?
Microsoft is really helping the computer industry lately. First their initial decision to make outlook express execute any script embedded in email by default kick started the mostly dead antivirus industry into the powerhouse it is today. Now their forward looking decisions regarding the security of ActiveX and Internet explorer has created a whole new industry of spyware detection and removal.
Think of the revenue and jobs created by these decisions.
And Unix (Linux, OS X too), with your anti-economy designs like user accounts that cannot write to system areas, web browsers that do not support a web site's ability to covertly install software behind the scenes, and email clients that do not interpret VPscript, you should be ashamed of yourselves. If popularity of these OSes rises too high, it could seriously damage the antivirus and antispyware industries, causeing a loss of revenue and jobs. Congress should really do something about this.
Finkployd
My argument woud be that these authors are invading my privacy when I legitimately get onto the web.
On the other hand, I will shoot myself in the foot by seeing their potential argument too:
They could argue that by visiting specific sites and probably clicking some links, I agree to enjoying all services they offer on these sites including stuff that would be installed on my PC.
Any legal minds here?
Y'know what sucks? Having to tell your father to be more careful about visiting porn sites.
If microsoft made some changes to windows, this crap would have a harder time getting installed (or at least getting installed unnoticed)
Basicly, anything that wants to change certain things should trigger a "are you sure you want to do this" warning of some kind (with ways to change that warning into a requirement for a password or a total block of the activity). If the activity is blocked, the app requesting it gets an appropriate error (e.g. "you cant open that file" if access to a file is blocked)
The items that should be locked include:
Writing to the "startup" group & other locations where you can have a program start at startup
Writing to
Changing critical windows sockets settings
Changing the HOSTS file
And there may be other things
The idea is that spyware/viruses/trojans/etc that come in totally unannounced would now not be able to do that.
And spyware and such that rides alongside application programs would be easier to spot (so you can choose to use a non-spyware alternative)
Yes the cluless will just click "yes" but at least those who care wont be hit as much.
Anti-virus vendors should start detecting spyware (particularly the kind that installs itself jsut by visiting a webpage or reading an email as opposed to the kind that installs alongside programs like kazza) just like they detect viruses.
After all, spyware shares a fair few characteristics with viruses, worms and trojans.
The big PC OEMs should be doing more to combat spyware.
Myself, I use Mozilla (and keep it up to date with the latest release builds) and I use Norton
Antivirus to keep my system virus free.
I also run Spybot and Ad-Aware regularly.
And I dont install spyware-laden programs like Kazza, Real etc.
Rather tell my father that than my mother...
(or your mother! HEEHEE!)
Windows:
Have to pay for anti-virus, have to pay for firewall, have to pay for spyware removal, have to pay for a copy of windows and then you have to pay someone to set it up.
*BSD/Linuxes:
Have to pay for someone to set it up.
Hmm... and the TOC of Linux is higher because...?
Tom
Someday, I'll have a real sig.
We did at the office and have seen a serious decline in Spyware related calls. We used to get 10 or more a day for Windows 2000.
I don't have that problem, my father and I share a porn collection :)
I'm trying to improve my English. Please correct me on any spelling/grammar errors in this post.