Slashdot Mirror


Scaremongering over Spyware?

Dynamoo writes "The BBC is reporting that PCs in the UK are infected with over 20 pieces of spyware on average. A frightening statistic, if it is to be believed. In fact, the figures come from Webroot - an anti-spyware firm with a commercial interest in playing up the spyware threat." From the article: "In Poland, 867 of every 1,000 domestic PCs have been infected by trojans, unsolicited programs that can allow remote users to control the machine. It is this international reach that concerns those in authority trying to combat the spread of spyware. "

196 comments

  1. True number or not, way too common.. by luvirini · · Score: 4, Insightful
    Regardless of how mch the actual numbers given there are over the top, the actual numbers of PCs having spyware infections is way too many.

    Slowly people that I know start to have things in order as I have managed to make them change habits, install tools and such, but not everyone has such aquintances, and even then, the number of times I have cleaned spyware from someones computer is way high...

    1. Re:True number or not, way too common.. by HermanAB · · Score: 3, Interesting

      Every Windows PC I get to repair has at least 10 pieces of spyware running.

      --
      Oh well, what the hell...
    2. Re:True number or not, way too common.. by PowerBert · · Score: 1, Funny

      I think most of the people on slashdot could tell similar stories.
      My favourite (and fashionable) spyware cleaner at present is Ubuntu Linux. In my experience it's been 100% effective!

    3. Re:True number or not, way too common.. by Xerp · · Score: 3, Insightful

      This isn't just down to people's habits - poor quality software is also to blame. Microsoft Windows PCs are top of the spyware tree. Even with changing "habits" and installing a list of "security" bolt-ons as long as your arm, the poor quality of the Microsoft software is still going to let you down. Both at work and in the home, even the most well looked after Microsoft Windows machine is going to get infected. Take for example by PHB's machine. Microsoft Windows XP SP2, Microsoft anti-spyware, McAfee Anti-virus, fully patched.. last scan with Spybot S&D - 81 red entries. Sure, 56 were just cookies but also in the list was some really nasty malware. Then there is good old mum. Just browing using a 56k modem. Bless. Windows 2000 - can't patch as she only has a modem. Thing stopped working. It was so hosed the only way to recover was to use Knoppix to copy her files off. Of course, as it was my mum, I had full control over the situation. I upgraded her to Linux (Slackware 10, to be exact) - its now been 8 months and her PC is still spyware free. Not a single virus. Not one single problem. Mum isn't a techie and she loves not having to worry about "spybot" "mcafee" "norton" and a load of other things that mean nothing to her. She tells her friends how she is using Linux at home and how good it is. What amazed me, is that her friends had even heard of Linux. I mean, they're all over 60. Needless to say, they all want it too now. Sure, Linux on the desktop at work = a lot of corporate hassle. Linux on the desktop at home for non technical users who just want to browse, email and message = 100% perfect - and spyware free.

    4. Re:True number or not, way too common.. by Se7enLC · · Score: 3, Insightful

      The numbers don't surprise me too much. The typical response from people I interact with seems to be "My computer is running slow, acting strangely, crashing. Maybe I'll look into fixing it at some point". People just don't have the urgency anymore as virii/spyware aren't targetting their own machine anymore.

      It's not like the good old days when a virus just trashed your machine, so you had to act immediately. Now it just lies in waiting and uses your machine to launch attacks on others and collects personal information silently. People just don't care enough to fix spyware until it directly prevents them from using their precious web browser, email, and instant messenger.

    5. Re:True number or not, way too common.. by NewKimAll · · Score: 1

      You didn't hear this from me, but at the place that I work a certain department used Windows Terminal server and also deployed user desktops. Even with anti-virus software in place, Spyware started crippling the system and eventually exploited security holes that brought the system down.

      It was determined that NOBODY was checking to make sure the anti-virus updates were running AND some Windows desktops were not configured to automatically install OS updates when they were released. After two weeks of pure hell, they are ALL now running Linux terminals and the applications that must use Windows (because of no Linux alternative) are severely locked down.

      No data was lost or corrupted once they were able to clean-up the Terminal Server to the point where a back-up could be performed, but the Operating System was totally trashed and couldn't be trusted.

      My advice if you are running Windows is to make sure your Anti-Virus Definitions are regularly updated, your download OS patches when they come out and you run some kind of firewall. Either ZoneAlarm or a hardware firewall. ZoneAlarm is much easier to use.
      --
      In this case, Windows Security flaws meant moving to Linux.

    6. Re:True number or not, way too common.. by Anonymous Coward · · Score: 0

      Would she have been able to install it on her own? I doubt it. Linux is still a configuration file nightmare. No casual computer user is going to pick up "grep" and "/etc" without lots of help.

    7. Re:True number or not, way too common.. by qwijibo · · Score: 1

      No casual computer user is going to be able to install Windows or configure it well either. Why do you think there are so many Windows machines with so many self-inflicted problems? There is a point at which people accept that they can't do everything and ask for help.

    8. Re:True number or not, way too common.. by Deathlizard · · Score: 1

      I work for a Small Private College. We have a laptop program for students as well as maintain some computer labs with desktops (roughly 80 Machines). The labs have had the same Operating system (XP) on them for over two years under heavy usage and not one of them ever had spyware/viruses or any of the other happy fun "screw your box" exploits that seem to plague every laptop 15 minutes after we hand it to a student. Why? Because we protect the Lab PC's that's why, and not with some exotic "erase the drive every time" solution like Clean Slate or the Shared Computer Toolkit. In fact the only security program on them is F-secure Internet Security with only the antivirus and spyware modules install, and the spyware scanning was recently installed about 6 months ago when it was included with the latest F-secure version.

      All we use is the built in security protections and policies to protect the PC's from what would basically be described as PC hell. On the laptops, the Students have admin access and can have a field day installing every porn and P2P Program they find, and they get spyware filled almost immediately. I seriously had a Laptop come in and it scored 17079 on Adaware. I've yet to see adaware score anything above 50 cookies on any of the lab boxes because they can't install anything on them because of the guest/user setup that we use in the labs.

    9. Re:True number or not, way too common.. by Anonymous Coward · · Score: 0
      Yes. Thats exactly the point. Windows is not only wide open to spyware (and all sorts of other nasties), but even if the casual user is aware of these things, they are not going to be able to do anything about it. Chances are they are only using Microsoft Windows because someone else installed it for them. Chances are it has never been patched since. Or had a defrag. Any any forms of security update. Heck, the 90-day trial version of Norton probably stopped working years ago (but still has a nice pop-up). Without constant maintenance, a Windows system will eventually become unusable. Thats a fact.


      Thing is, once someone has set up a Linux system for a casual user the job is done - and it will run for a long, long time before anything needs to be done again.


      On top of that, as the OP stated, _even a well-kept Microsoft Windows system_ is *still* going to get infected. Its the way Microsoft software "works". And once that happens, it can be real pig to disinfect.


      I'd also like to add - in a compnay, when a Microsoft Windows system get infected and starts dishing out corporate secrets, who is to blame? The systems guy - even though he did the best job he could? The person who uses the pc? The software supplier? The software manufacturer? Yup. Its the systems guy who gets the blame.

    10. Re:True number or not, way too common.. by Ravenscall · · Score: 1

      That is a good point, but the average user does not know how to configure a Windows box for security out of the box. My girlfriend's Windows box has been clean for over six months because we both are pretty security conscious, but every so often a piece of malware does get through.

      However, when I was doing end user DSL support, I found myself explaining to them over and over again that all these security programs mean nothing if they click every popup they get and then do not run the scans.

      --
      You say you want a revolution....
    11. Re:True number or not, way too common.. by Anonymous Coward · · Score: 0

      Nice story man...about your old lady:-) I think these are also the steps most linux users should take too. Try to influence people around you about the merits of open source software. I'm also tired to go to friends houses and be busy removing spyware and virus. Will start spreading the open source option by installing as much of Ubuntu for them as possible.

    12. Re:True number or not, way too common.. by The+Spoonman · · Score: 1

      even the most well looked after Microsoft Windows machine is going to get infected

      Depends on who's in charge of them. We have some 13,000 Windows computers, none of which has any spyware on them.

      --
      Which is more painful? Going to work or gouging your eye out with a spoon? Find out!
      http://www.workorspoon.com
    13. Re:True number or not, way too common.. by Marxist+Hacker+42 · · Score: 1

      Agreed, way too common- but most spyware removal programs count even a single registry entry as a piece of spyware- so I'd say the estimate is a bit low. I usually run into 20-100 pieces of spyware on an infected machine.

      --
      SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
    14. Re:True number or not, way too common.. by Changa_MC · · Score: 1

      Well, right, but if you ever connected them to the internet, that would change fairly quickly.

      --
      Changa hates change.
    15. Re:True number or not, way too common.. by Dmala · · Score: 1

      I have to agree. I don't even have anti-spyware or anti-virus software running full time. Every now and again I'll run a scan, just for my peace of mind, and I've pretty much always come up clean. And it's not like I don't surf around some pretty shady sites from time to time.

      Avoid IE/OE like the plague, stay current with the latest updates, stay behind a firewall and NAT, and use a little common sense. It's really not that hard.

    16. Re:True number or not, way too common.. by advocate_one · · Score: 1
      Would she have been able to install it on her own? I doubt it. Linux is still a configuration file nightmare. No casual computer user is going to pick up "grep" and "/etc" without lots of help.

      fsck off... try Ubuntu... absolutely NO need to edit any config file by hand... the installer only asks a couple of simple questions and that's it... and the next version (6.04) is even easier to install... X was done completely automatically...

      even Debian Sarge is easy to install

      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
    17. Re:True number or not, way too common.. by giorgosts · · Score: 1

      main cause of this is "bundled software" If you like getting software for free, thats what you get. The programmers, the developers, the bandwidth, have to be paid somehow, usually by making your PC an advertizing machine. Probably your ma's machine would have stayed clean from malware as long as you confined her to a LUA account and don't tell her the admin password, as you pressumably have done with Linux. Why don't you let her play with the repositories and see how quick the Linux box will get broken?

    18. Re:True number or not, way too common.. by The+Spoonman · · Score: 1

      Yeah, because there are companies these days who don't have Internet access.

      --
      Which is more painful? Going to work or gouging your eye out with a spoon? Find out!
      http://www.workorspoon.com
    19. Re:True number or not, way too common.. by whoever57 · · Score: 1
      Every Windows PC I get to repair has at least 10 pieces of spyware running.
      The last Windows PC I was asked to help with had a program that would not uninstall, kept re-inserting itself into the registry and seemed to have hidden the key program that was responsible for this activity (since I booted into the recovery console from CDs, and re-named the relevent directories under "Program Files".

      Sounds like spyware, right? It was Symantec/Norton Internet Security 2005.

      The reason I was trying to fix this was that the anti-virus component was broken (it would not actually scan, so programs like Excel hung up when opening files) and it would not re-install.

      --
      The real "Libtards" are the Libertarians!
    20. Re:True number or not, way too common.. by HermanAB · · Score: 1

      Yup, I battle that gawddamm bl00dy @wfull POS on a regular basis. My solution is to edit the registry to remove it by hand, then reboot and delete the dir in /program files.

      --
      Oh well, what the hell...
    21. Re:True number or not, way too common.. by barefootgenius · · Score: 1

      And there I was, proudly going to proclaim 384 as the largest amount of spyware I have found on a computer (Dell 4600) which was bought to me by a friend as it was running slow. Amazingly it had no virus's, no updates from later than the sale date and the antivirus had never been updated.
      I tried to explain what had happened and simple steps to stop it and received an entirely blank look. Wrote step by step instructions on how to run AdAware and a virus update/scan. Received another blank look. Walked friend through the instructions. Saw the dawning of compre...no, just another blank look. So I got a beer, set up everything as automatically as I could, and told friend to come back next time the computer ran slow.

      --
      /. bug #926803 - Why I can post.
    22. Re:True number or not, way too common.. by IllForgetMyNickSoonA · · Score: 1

      As a big Ubuntu fan, I hate having to ask how you made shared vfat windows partition world-writeable without editing /etc/fstab and setting the umask accordingly? I wasn't able to find another (beginner-friendlier) way to do it. And yes, I did RTFM.

    23. Re:True number or not, way too common.. by plover · · Score: 1
      So how much fixing is typically required on a non-infected PC? Isn't that like a doctor proclaiming "100% of people are sick" because everyone who comes to see him is sick? :-) I keed, I keed!

      Anyway, I suspect you were intending to include people who are bringing them in because "the network card is broke" or "my 'W', 'T', and 'F' keys are worn out." But even in the case of things like a "broken network card" don't you find that many of those problems are actually malware related -- clean up the crap and suddenly the network comes back?

      --
      John
    24. Re:True number or not, way too common.. by HermanAB · · Score: 1

      I never see any working Windows PCs. The only working, uninfected XP PC I know of is my own, which is usually booted into Linux... Hardware problems are very few and far between - usually a broken disk drive. The most common complaint is: My computer is slow - when I click on Explorer, it takes ages to do something. Without Microsoft's crappy Winblows, I'll go bankrupt...

      --
      Oh well, what the hell...
    25. Re:True number or not, way too common.. by techno-vampire · · Score: 1
      Why don't you let her play with the repositories and see how quick the Linux box will get broken?

      Yes, it probably will get borken because sooner or later she'll install something that doesn't work and/or causes a dependancy conflict. However, that can happen no matter how good you are with Linux because things like that aren't completely under your control and never will be. Right now, she's not going to get her box pwned because crackers and spript-kiddies aren't targetting Linux that way. Eventually, they'll decide it's worth their time to learn something about Linux and try to break in to it, but not yet. For now, at least, the main thing the average home Linux user has to concern themselves with is tracking cookies, and playing around with the repositories isn't going to affect that one way or the other.

      --
      Good, inexpensive web hosting
    26. Re:True number or not, way too common.. by cbreaker · · Score: 1

      If you say "mum" one more fucking time I'll fucking kill you.

      --
      - It's not the Macs I hate. It's Digg users. -
    27. Re:True number or not, way too common.. by GlL · · Score: 1

      I manage the tech bench at a local ISP. We offer a service to clean customer pcs of viruses and spyware. The average number of spyware items on a pc (this is taken from the number of hits given by various pieces of anti-spyware not including cookies 585816 divided by the number of PCs we serviced since we started recording 462) is 1268. These are all machines that were brought in for service though, so these are machines that were so ground down that they couldn't access the internet.

      Even so, I think that 10 is an overly optimistic number, so I think that webroot is downplaying the actual threat.

      The anti spyware tools that we use are Spybot, AdAware, Pest Patrol Corporate Edition v4 (v5 is trash), EWIDO, and MS Anti-Spyware.

      --
      I'm a happy pessimist. I expect and prepare for the worst, when it doesn't happen I am pleasantly surprised.
    28. Re:True number or not, way too common.. by Ravatar · · Score: 2, Informative

      Use the symantec removal tool to get rid of NIS 2005. It's available on their website.

      The reason it exhibits this behavior is because otherwise, it would be WAY too easy for viruses to disable antivirus if it didn't fight back.

    29. Re:True number or not, way too common.. by glassjaw+rocks · · Score: 1

      Ha! I usually see them with 400-500 on average.

      --
      -gjr
    30. Re:True number or not, way too common.. by scottv67 · · Score: 1

      We have some 13,000 Windows computers, none of which has any spyware on them.

      I call shenanigans.

      What tools have you used to determine that all 13,000 of your Windows PCs are completely spyware free?

      -s

    31. Re:True number or not, way too common.. by advocate_one · · Score: 1
      As a big Ubuntu fan, I hate having to ask how you made shared vfat windows partition world-writeable without editing /etc/fstab and setting the umask accordingly? I wasn't able to find another (beginner-friendlier) way to do it. And yes, I did RTFM.

      see, there's your problem, you're going outside the normal installation. I DON'T duel-boot... I run Linux exclusively... I consider duel-booting to be a crutch, water wings for those too scared to go for it properly... If you're duel-booting, then there's just too much temptation to "oh, I'll just boot into windows to do this little thing"

      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
    32. Re:True number or not, way too common.. by IllForgetMyNickSoonA · · Score: 1

      While my computer is a dual-boot machine, I boot windows inly 2-3 times a year. Besides, I do know how to set the umask in /etc/fstab. No problems here.

      What I was talking about, is two computers, which I installed in a dual-boot fashion for a friend and for a relative, so that they don't have to worry about their windows environments getting infected by a virus/trojan/spyware/whatever over and over again, despite all installed patches and expensive anti-virus software. So far - so good, they are happily surfing and reading their mails via Linux for three months already.

      Now, those people also use their computers for work. On one computer, there is a strong requirement for a specific CAD software not available for Linux, on the other one, it is MS Word (no, OpenOffice filters are not yet working perfectly). For these people, Windows is still a MUST. They use Linux in order to access Internet, and they *need* a nice way to make their windows partitions writeable from Linux. As time passes, you'll see more and more such Linux users. I was very surprised to see that there is no nice way in Ubuntu to achieve that.

      It was funny, though, to see that they have accepted that something as trivial as that is not possible to do without my help, and are still very happy with their Ubuntu installations. If there is something we can thank Microsoft for, then it is lowering the people's expectations on what computers can and can not do (and how hard it can be to make them do something they are supposed to do).

    33. Re:True number or not, way too common.. by advocate_one · · Score: 1
      They use Linux in order to access Internet, and they *need* a nice way to make their windows partitions writeable from Linux. As time passes, you'll see more and more such Linux users. I was very surprised to see that there is no nice way in Ubuntu to achieve that.

      have they never heard of a USB keydrive??? it's so simple...

      --
      Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
    34. Re:True number or not, way too common.. by IllForgetMyNickSoonA · · Score: 1

      Yes, they transferred the data between Linux and Windows using the USB memory stick as a work-around, while they were waiting for me to find some time and fix their /etc/fstab. But, what was the point of your question? How does the ability of Ubuntu to automatically mount a USB stick change the fact that there is no nice way to make a windows partition world-writeable? Besides, a few days ago, one of the computers stopped mounting the USB drive automatically, for whatever reason. Luckily, it was the relative's computer, and she is not afraid of mounting/unmounting the USB stick manually.

    35. Re:True number or not, way too common.. by Changa_MC · · Score: 1
      OK, perhaps you'd like to share with me how you do it then. The computers I have are connected to our intranet, but not directly to the internet. They have limited access to internet resources, filtered through two firewalls. We have limited accounts and spyware blockers of all sorts. We autoupdate patches from windowsupdate.com every night in some labs (a vulnerability in and of itself, but nevermind). Even so, users bring amazing amounts of spyware with them.

      I connect my OS/X and my Linux servers between the two firewalls, so that there's only one relaxed layer on them, and they have no problems. I don't have any virus checkers or spyware blockers at all.

      Windows is an insecure environment, and no amount of precaution on my part changes that. Perhaps you've found a magic bullet?

      --
      Changa hates change.
    36. Re:True number or not, way too common.. by The+Spoonman · · Score: 1

      Perhaps you've found a magic bullet?

      There is no magic bullet. Any OS is only as secure as the person in charge of it has skill. You listed a huge array of defenses against the bad stuff, but your users still manage to bring things in. The problem, I think, is you're relying too much on technology to fight technology. All of your defenses are great, but they should be a last line of defense, one that reports to you that there's a problem, not be the solution.

      It's ok, I once thought the problem was the software, then I realized it was me. So, I figured out what I was doing wrong and corrected it. Here's the first step: what OS do you think Bill Gates uses? Now, ask yourself, do you think the techs that maintain his machine, or the developers who write his software, can say "Well, it's Windows, what do you expect?" Well, if they can't say it, why should you? Take that hammer out of your toolbox, things become a lot clearer.

      --
      Which is more painful? Going to work or gouging your eye out with a spoon? Find out!
      http://www.workorspoon.com
    37. Re:True number or not, way too common.. by Changa_MC · · Score: 1

      Just because it can be done, doesn't mean it should.
      My windows servers stay spyware/virus free due to constant vigilance and exhaustive maintanence. I don't have the time to do that with every computer, so without a magic bullet, I'm going to continue moving to Linux.
      Even Bill gets the BSOD sometimes.

      --
      Changa hates change.
    38. Re:True number or not, way too common.. by The+Spoonman · · Score: 1

      I don't have the time to do that with every computer

      Nor do I. That's the beauty of getting it right the first time...you don't need to ever worry about it again. Build 'em, rack 'em, forget 'em. I choose to work no harder than that.

      I'm going to continue moving to Linux.

      If it works for you, great! There's far too many things we do today that we couldn't do on Linux without a huge amount of coding.

      Even Bill gets the BSOD [itvibe.com] sometimes.

      Yup, so do I. I get 'em about as often, too. I think I can count the number I've had in the last 10 years on one hand. And, that's on literally thousands of servers, not just desktops.

      --
      Which is more painful? Going to work or gouging your eye out with a spoon? Find out!
      http://www.workorspoon.com
  2. Why not? by rahrens · · Score: 3, Funny

    Why shouldn't the anti-spyware companies do it? The anti-virus people over hype the threats all the time anyway. The press plays along cause it sells newspapers and ups the ratings...

    --
    "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    1. Re:Why not? by rahrens · · Score: 1

      Disclaimer:

      Not to denigrate the threat - its real, and is a lot more criminal now than it used to be, but I think these companies over play the numbers like this to sell and for no other reason.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    2. Re:Why not? by Cat_Byte · · Score: 1

      I wish that were true. I was contracted by a legal firm to update all of their systems and run a couple of new network connections. I found over 500 spyware programs on their 10 pc's. This is in a place where a couple of them already ran Ad-Aware or spybot. Unfortunately, they had good intentions but thought you just installed it and it ran in the background like antivirus does. It was outdated and hadn't been run in months.

      Yes I know spybot has the taskbar thing, but it really doesn't work that well for average users. It just warns you about changes, but most people don't know what triggered it and don't know if they should click accpt or deny.

      --
      Two roads diverged in a wood, and I - I took the one the bus load of girls just went down.
    3. Re:Why not? by k12linux · · Score: 1
      The anti-virus people over hype the threats all the time anyway.

      That's just not true. A plague of linux viruses is just on the horizon and will probably strike any day now!

      And when it does, both people who get infected will be mighty pissed they didn't buy anti-virus software!

  3. Seems like a statisticians nightmare by antifoidulus · · Score: 4, Insightful

    How can you really tell how many people are infected with spyware? It's not a question like, "do you support proposition 84?" where you can call people at random or talk to them on the street. I would be afraid of the guy who came to my door asking if he could test whether or not my computer was infected with spyware(doubly so since I use a mac :P), and if you just ask people, 9/10 they won't know but will probably make up a answer anyway. They could use the numbers sent to them by customers, but that isn't random at all. Their customers are much more likely to have spyware infections or else they wouldn't be seeking their help.
    So yeah, it's a number, but not a very convincing one...

    1. Re:Seems like a statisticians nightmare by voice_of_all_reason · · Score: 1

      Not too hard. Just ask a few computer repair centers to run scans before working on the machines and report their findings for a modest fee.

      Of course, the results would be slightly skewed. Not from a pool of all computer users, but from all users that encounter severe problems && lack the skill to fix it themselves

    2. Re:Seems like a statisticians nightmare by LiquidCoooled · · Score: 4, Funny

      I wouldn't be surprised if they have installed a little program on peoples machines to monitor and upload the stats about how much spyware a person has on their machine.

      --
      liqbase :: faster than paper
    3. Re:Seems like a statisticians nightmare by tdemark · · Score: 2, Insightful
      I would be afraid of the guy who came to my door asking if he could test whether or not my computer was infected with spyware(doubly so since I use a mac :P), and if you just ask people, 9/10 they won't know but will probably make up a answer anyway.

      It's funny you mention this. Last year (Sept, 2005), Consumer Reports had an issue dealing with personal computers. This is an actual quote from the article:

      Only 20 percent of Mac owners surveyed reported detecting a virus in the past two years, compared with 66 percent of Windows PC owners. Just 8 percent of Mac users reported a spyware infection in the last six months vs. 54 percent of Windows PC users.


      There is NO WAY those Mac results are accurate. I think what happened is that these Mac users got occasional pop-ups saying "Your machine is infected with (spyware|viruses). Protect yourself now by clicking here". So, they did and the problem "went away". As far as they were concerned, they were infected.

      I wouldn't blame the users as they shouldn't have to know better. I would blame CR for a faulty survey - if you ask questions that either require specialized knowledge (how many Mac users know what spyware is) or could generate a false positive (such as a user confusing an infection with a pop-up), then you really aren't doing a good job providing accurate results.

      - Tony
    4. Re:Seems like a statisticians nightmare by zCyl · · Score: 1

      How can you really tell how many people are infected with spyware?

      For starters, you could use the median, and not the average, for a number with any sort of meaning. One computer with 20 million copies of a spyware program, and a million computers with no spyware programs, have an average of 20 spyware programs per computer. They also have a median of around 0.

      Not that spyware is not a problem, but this statistic does not show it.

    5. Re:Seems like a statisticians nightmare by Anonymous Coward · · Score: 0

      I can't believe this post scored a 5 and insightful.

    6. Re:Seems like a statisticians nightmare by winwar · · Score: 1

      "Of course, the results would be slightly skewed. Not from a pool of all computer users, but from all users that encounter severe problems && lack the skill to fix it themselves"

      SLIGHTLY SKEWED!?! Try worthless. Unless you use a random sample the results will be pretty worthless.

      Unless of course you want to sell something. :)

    7. Re:Seems like a statisticians nightmare by Anonymous Coward · · Score: 0

      They do infact have a completely opt-in piece of software called the 'Spy Audit' which provides them with this information. It scans the user's machine, and reports the findings both to the user and to the company for aggregate analysis like this. Its all pretty clear in the messaging in the program, I believe. No other real way to get the data accurately.

    8. Re:Seems like a statisticians nightmare by Anonymous Coward · · Score: 0

      How can you really tell how many people are infected with spyware?

      I have a nice little program that flies out over the internet and tells me what is on everyones' computer. :-D

  4. Oh James... by digitaldc · · Score: 3, Funny

    The BBC is reporting that PCs in the UK are infected with over 20 pieces of spyware on average...It is this international reach that concerns those in authority trying to combat the spread of spyware."

    Quick, get Q on the line, I think we are going to need the services of 007 for this one!

    --
    He who knows best knows how little he knows. - Thomas Jefferson
    1. Re:Oh James... by cmorgan47 · · Score: 1

      wouldn't you want M?

      --
      no i have not shot my gun in the air and gone 'Ahh!'
  5. And, typical of scaremongering tactics... by Caspian · · Score: 4, Insightful

    ...they are (probably deliberately) confusing the terms "trojan" and "spyware". Is it any wonder that the average user doesn't know the difference between a "virus", "spyware" or "adware", doesn't know the umbrella term "malware", and thinks that any antivirus program is all they need to stay safe?

    To this day, most end-users I talk to think that "spyware" is something good, since they hear people talking about "Spybot", which they think is "a program that gets rid of the viruses".

    When will we get some REAL end-user education in this topic? Public schools have Sex Ed classes where they teach you how to reduce your risk of getting HIV and the Clap... how about Computer Safety classes where they teach you how to reduce your risk of getting viruses or spyware?

    --
    With spending like this, exactly what are "conservatives" conserving?
    1. Re:And, typical of scaremongering tactics... by rahrens · · Score: 1

      ...assuming the teachers know the difference, too?

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    2. Re:And, typical of scaremongering tactics... by luvirini · · Score: 3, Insightful
      The problem is, with the threat environments changing so fast, schools are definitely not the best place to teach this, as schools should give lifelong skills.

      Anything they would teach about spyware today could very well be moot in 5 years if most people use secure systems.

      More proper thing would likely be going the route of licencing.. that is in order to allow use of a computer that is connected, you need a computer lisence, the same way you need a drivers license to drive a car on roads. That lisence could then be limited in duration and you would need to get updated on newest things, from behavior to threaths.

      Ofcourse that would bring many other problems in itself...

    3. Re:And, typical of scaremongering tactics... by Opportunist · · Score: 1

      Because you'd first of all find someone who knows more about the topic than the kids AND is taken serious by them.

      Forget your average teacher. Best he could do is slap together some buzzwords and hope and pray that the kids won't ask questions. Unlike sex ed, where you could prolly get snickered on by your peers for asking questions ("Hey, Jimmy wanna get boned in the butt!"), kids could actually ask questions about security issues and, hell, they will have a LOT more detail at hand than your average teacher.

      Now, inviting an expert for the topic could do it, but then, where do you get one, preferably for free? You might get one from organisations like the BSA, but then they'll hear more about software licensing and other crap they don't want to hear.

      And they won't listen.

      So the idea is good, just the question is, how do you want to teach something nobody is appearantly interested in? First of all, you gotta raise the awareness that it IS a problem.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    4. Re:And, typical of scaremongering tactics... by argStyopa · · Score: 1

      Even further, how are they defining 'spyware'?
      I run spybot on my mom's computer, and I get 50 items that need cleaning. Of course 40 are simply icky cookies that need to be swept, 8 are bad links that show up in her cache, and only a couple are what I would actually call something suspicious.

      Yes, malware is a problem, but the numbers are just meaningless statistics meant to startle people who don't really understand it anyway.

      --
      -Styopa
    5. Re:And, typical of scaremongering tactics... by edenapple · · Score: 1

      They are also likely including questionable spyware in the study. Most of these programs report certain cookies as "spyware".

    6. Re:And, typical of scaremongering tactics... by hobo+sapiens · · Score: 1

      ah, yes, time tested rhetorical devices! You see, "spyware" will make your PC's motherboard melt, it will cause your kid to worship the devil, it will cause you to smell funny, et al.

      Then, ironically, companies like AOL can advertise anti-spyware software thereby totally obfuscating the fact that AOL's software is just about every bit as malicious as any spyware you can install.

      Use secure software, such as Mozilla and Open Office, resist the overwhelming temptation to install the "Next Generation of Free Smileys!", and you can ignore this silliness.

      But then again, this whole article is a bit suspect, I mean, this is kind of like publishing the results of an "independant" study which claims Microsoft software saves money and is like really nifty and stuff. Of course guys like webroot want you to be scared.

      --
      blah blah blah
    7. Re:And, typical of scaremongering tactics... by fyoder · · Score: 4, Funny
      Public schools have Sex Ed classes where they teach you how to reduce your risk of getting HIV and the Clap... how about Computer Safety classes where they teach you how to reduce your risk of getting viruses or spyware?

      In Republican states that would amount to "Don't use computers, kids, and you won't get infected. Take the computer abstinence pledge."

      --
      Loose lips lose spit.
    8. Re:And, typical of scaremongering tactics... by richlv · · Score: 2

      When will we get some REAL end-user education in this topic? Public schools have Sex Ed classes where they teach you how to reduce your risk of getting HIV and the Clap... how about Computer Safety classes where they teach you how to reduce your risk of getting viruses or spyware?

      and what exactly would be the topics there ? what about exceptions ?

      now, let's say jhonny uses linux at home and tommy's father has bough mac for everybody in the family. are they free to go from these classes (in which case everybody will claim to have something-else-but-windows that year) or maybe we should allow them to sit there and ridicule others (which, i must admit, might be pretty cool & effective way to deal with the problem ;) )

      of course, short, informative classes/lections that are very generic might be usable, but i just do not see how could this be done in sufficient way. additionally, this situation is changing very, very rapidly - unless a person is interested in these things, i just do not see how classes like these could help much.

      for example, i haven't used windows for some 3+ years. it was around that time when spy/ad/whatever ware started to appear. i do not have an idea what to do with all those programs - spybot, adware and, i think ms had one, too - that i keep hearing about.

      should i be sent to some class about them ? or, maybe, as another poster has reminded about 'license' thingie, maybe i should be prohibited connecting to internet unless i, um, somehow learn about all that stuff and somehow even install them ? ;)

      now, one thing i agree with you completely - education is important. but that should start with, let's say, journalists. computers have become pretty important part of our everyday life, so there is more and more information in mass media about things like virus outbreaks or big happenings in it - and pretty big part of them are very low quality.

      now, what seemed funny to me... there was an ad in local supermarket. big letters said "GET RID OF VIRUSES - PERMANENTLY*". at the background some sort of designed, semi-transparent blue computer monitor was displayed.

      small letters at the bottom said "there has been no single virus for mac"

      so, probably customers are interested in security after all - maybe it will not be mass media or opensource backers who will change the things - marketing people might pick up this and other facts so the information will catch the eye and people will start examining the options available. hopefully.

      --
      Rich
    9. Re:And, typical of scaremongering tactics... by winwar · · Score: 1

      "...they are (probably deliberately) confusing the terms "trojan" and "spyware"."

      On the other hand, does it really matter? Both can do bad things-you don't want any of them.

      Unless of course they will organize your bookmarks, provide you with emoticons or .... :)

    10. Re:And, typical of scaremongering tactics... by Anonymous Coward · · Score: 0

      "Of course that would bring many other problems in itself..."

      Yeah, tech support and repair techs would have nothing to do.

    11. Re:And, typical of scaremongering tactics... by techno-vampire · · Score: 1
      Yeah, tech support and repair techs would have nothing to do.

      Are you kidding? First, you don't think that this class/training would teach everybody how to repair their computers, do you? It would teach them the basics, and how to tell when they need more experienced help. Not only that, most people would have a professional go over their machine before it gets tested for recertification, just like they take it into the shop before having it smog tested. Depending on how often they need to do this, I could easily see a cottage industry springing up of part-time techs cleaning up PCs so their owners can get their Internet License renewed.

      --
      Good, inexpensive web hosting
    12. Re:And, typical of scaremongering tactics... by CFrankBernard · · Score: 1

      Funny, but bad anology (sex to computers) because the problem is on the OS level--almost exclusively Microsoft Windows. But "Don't use Windows..." isn't as funny:)

  6. Not necessarily that much scaremongering by DagdaMor · · Score: 5, Insightful

    When I help out none-techies with their crippled system, they often have in excess of 100 pieces of various malware. I can well believe as an average of the uk that 21 would not be a too unreasonable figure.

    --
    All is fair in love and war... ...as long as I'm not losing!
    1. Re:Not necessarily that much scaremongering by tinkerghost · · Score: 1

      I think 21 might be low, there are several out there that run multiple instances under different names so they can restart them when someone shuts one down. I know my son had 1 with 4 seperate instances running & if you shut one down it would restart in under 5 seconds.
      Nice how something that starts under your std user can infect the admin account too.

    2. Re:Not necessarily that much scaremongering by mdwh2 · · Score: 1

      Indeed, this is a classic problem of mean averages being misleading. The "average" PC may well be free of spyware, with a minority of machines that are poorly maintained being infected with hundreds. A median average would probably be a better indicator...

    3. Re:Not necessarily that much scaremongering by arkhan_jg · · Score: 1

      Couldn't agree more. I work as a techie in a school, and we run a spyware check as a matter of course on all the student laptops that come in for something (usually just for a hand with setting up the wireless access so the can 'get on the internet') and virtually all of them have some form of spyware on them. Quite a few of the staff laptops do too, even though we tell them about the hazards and even provide AV and AS software, so it doesn't surprise me that the UK has the highest rate of infection in europe.

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
  7. More Information by TripMaster+Monkey · · Score: 4, Informative

    From TFA:
    If the FTC gathers evidence of a crime, it can - and does - launch prosecutions. Last month two companies were ordered to hand back more than $2m (£1.14m) garnered through selling fake anti-spyware products.
    More information regarding those settlements can be found here.
    --
    ____

    ~ |rip/\/\aster /\/\onkey

    1. Re:More Information by pipingguy · · Score: 1


      selling fake anti-spyware products.

      This needs to be punished even more than the actual spyware, for obvious reasons.

  8. Spyware?? by Anonymous Coward · · Score: 4, Interesting

    Well it would all depend on what was being classed as spyware. Are they including tracking cookies, in which case anyone using google with cookies turned on will be infected.

    And why oh why can't the BBC specify "Windows" users. Why do they report every piece of Malware as being a threat to PC users. It's not. Most malware is operating system specific. if it affects Windows, say Windows.

    Sloppy journalism...slipping standards, blah blah...

    1. Re:Spyware?? by Anonymous Coward · · Score: 0

      I agree with you wholeheartedly, but instead of posting here why not email the BBC about. Of course you could do both.
          I recently complained to the BBC's Board ogf Govorners about the apparent bias towards Microsoft. OK so my email alone will change nothing, but if they get enough responses, then things might change.

  9. Cookies by Anonymous Coward · · Score: 1, Funny

    It is not scare-mongering, it is real and I am surprised it is only 20 pieces of spyware. Pretty much any website will usually drop a half dozen advertising tracking cookies.

    1. Re:Cookies by rahrens · · Score: 2

      Tracking cookies in and of themselves are not malware. Spyware is an app, perhaps in java, that specifically targets user's info and sends it independently back to a parent server/site. It may be stand-alone, or it may be part of another app, but a tracking cookie in and of itself is NOT spyware!

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
  10. Yes, by techefnet · · Score: 0

    This is bad. What we need is better education of the users I think. And of course better operating systems. *g* Well, a step forward is that Microsoft is now including their spyware-scanner by default, if I remember correctly.

  11. Education is key by gihan_ripper · · Score: 3, Insightful

    Education is the real key to computer protection, not the purchase of spyware removal tools.

    I've only ever had one piece of malware, which was ten years ago (the Tai Pei virus). In the meantime, I've learned good computer habits. These include being cautious about downloading and installing software, using the free firewall which comes with Windows XP, and employing the Mozilla range of browsers / email clients.

    If users don't learn to be cautious when using a computer, they're going to run afoul of phishers, which will be much more of an incovenience that a bit of adware.

    --
    Phoenix, Boston, Little Rock, see a pattern?
    1. Re:Education is key by Anonymous Coward · · Score: 0

      I work in education.

      I teach GCSE and A level ICT. some of my students can parot fashon use the interne t to look at stuff and playt flash/java games. But educating them to the fact that a mouse is an input device and a monitor is an output device has me crying at times. I fear for the future. Education would be the ideal solution except for two problems

      1: attempting to educate the un educable
      2: attempting to educate people who "don't want to understand how it all works, the just want it to work".

      GGGGGGGHHHHHHHHHHHHHHHAAAAAAAAAAAAAAAAAAAAAAAAAAAA

  12. However... by inphinity · · Score: 2, Funny
    Isn't it also true that most spyware that these programs detect are somewhat-benign tracking cookies for sites like FastClick? I wouldn't necessarily classify those as spyware.

    However, if they are, then I'm sure most of the computers I own (Linux, OS X, Win) will have at least a dozen such "spyware" infections...

  13. I could easily believe that. by edunbar93 · · Score: 2, Interesting

    Hell, I've seen computers that would push that average *way* up all on their own.

    You have: 10,489 viruses on your computer

    No, I did not make that up. There are actually people out there (many, in fact) that think that the computer is running really slow because it's getting old, and not because there's three billion pieces of crap bogging it down. It just never occurs to them.

    --
    "No problem. I have the capacity to do infinite work so long as you don't mind that my quality approaches zero."-Dilbert
    1. Re:I could easily believe that. by rahrens · · Score: 1

      I can understand. I do desktop support, and I've seen PCs with over 400 spyware items we've had to remove, and that's behind a professionally maintained firewall. The user HAD to get that stuff by visiting sites where it was downloaded.

      We are now locking down the desktop for our users to cut back on this crap.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    2. Re:I could easily believe that. by walt-sjc · · Score: 2, Informative

      You have: 10,489 viruses on your computer

      I've seen similar, although generally it's ONE virus infecting 10,489 files...

    3. Re:I could easily believe that. by voice_of_all_reason · · Score: 1

      We are now locking down the desktop for our users to cut back on this crap.

      That's just going to make them try a little hard to find away around the block, and make you work a big hard to keep patching things.

      Never underestimate the combination of a fool with too much free time on his hands.

    4. Re:I could easily believe that. by jayloden · · Score: 1

      Back when I still did Windows support at a help desk level, we had one virus that came out that was infecting anywhere from 20,000 to 50,000 files and up. (I think it was a MyDoom variant?) The thing would make copy after copy of itself, infect files, all kinds of crap. We'd scan the computers with McAfee and it'd sit there just constantly finding more files.

      It used to be almost fun fixing all the computers back then, because I was good at it and I could get just about anything cleaned up. Now these things are turning into these nasty rootkit-based nightmares that make me oh so glad I'm not in that business anymore. I've since moved to a completely Linux-based platform for everything I do and I no longer do desktop support (Although I do maintain an antivirus tool). I can't imagine how much it would suck to be still back at the support center; I'm sure they'd just end up reformatting everything. Granted, it's not impossible to clean these new variants, but at a certain point you:
      a) Go beyond the technical capabilities of the student workers at the help desk to fix
      b) Go beyond a reasonable time limit to get this computer fixed so you can move on to the fifty other computers in the queue
      c) give up in frustration

    5. Re:I could easily believe that. by DjLizard · · Score: 1

      If they want to keep bypassing security and visiting sites that they shouldn't while at someone else's company, perhaps they should no longer be employed.

    6. Re:I could easily believe that. by edunbar93 · · Score: 1

      Here's a hint: these people are typically still running windows 98 or earlier. And they've never reinstalled the operating system.

      So yeah. 10,000? A piece of cake. And then there's what ad-aware finds...

      --
      "No problem. I have the capacity to do infinite work so long as you don't mind that my quality approaches zero."-Dilbert
    7. Re:I could easily believe that. by rahrens · · Score: 1

      If they can figure out how to make themselves local admins, then more power to 'em, but they won't. Our group security policies will put 'em back the next time they log in. Repeated instances of infected machines can get them isolated from using the network, and that's devestating to doing their jobs.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
    8. Re:I could easily believe that. by rahrens · · Score: 1

      And going to inappropriate sites CAN get them fired. It has happened before. If we can keep them from doing just the stupid, thoughtless things average users do, it'll still reduce our load appreciably, though.

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
  14. its a concern by dotpavan · · Score: 2, Interesting
    sometimes it concerns me as to how much of valuable resources get wasted in trying to remove these malicious progs. It is sheer ignorance, utter haughtiness and no intention to prevent damage to systems from the users that cause such stats to occur.

    On the other hand, doesnt it lead to waste of:

    (*) valuable time, because every now and then you have to scan/remove/update/etc

    (*) valuable comp resources/processing because you HAVE to have your anti-****(whatever)-ware ALWAYS on, which are generally bloated and eat up memory/processing (*) and imagine the rebooting and re-installing

    Its sad that the 'wonderful pc experience' has now come to a stage that the price one pays is getting heavier. And with some very basic steps/prevention measures (as explained by many at /. during such stories), it could be enhanced many times.

  15. Calling cookies of simple webcounters spyware by Anonymous Coward · · Score: 0, Insightful

    A lot of anti-spy/adware tools are targetting the cookies of webcounters. These are not spying on people but just used to destinguish between visitors that are visiting a site once or a steady visitor. This cookie information is also used to give more reliable statistics and this information is used to improve the website.

    This has nothing to do with spy- and ad-ware.

    Please don't call a cookie spyware unless it is used over different sites or it contains personal information.

  16. I believe it... by thatoneguy_jm · · Score: 1
    Over Christmas I "cleaned up" my parents computer - and found well over 600 instances of spyware.

    It was a wonder the thing was even running....

  17. Gotta get away from MS by slackaddict · · Score: 1

    Unfortunately, the current versions of Windows are too exploitable and unmanageable. The average Joe User isn't going to know how to set up a firewall or disable services he doesn't need. What we need is a fundamental shift from the current MS way of doing things.

    --
    ConsultingFair.com
    1. Re:Gotta get away from MS by dc29A · · Score: 1

      Unfortunately, the current versions of Windows are too exploitable

      I beg to differ about Windows being too easy to exploit. Run Linux with root access and you are just as vulnerable. Windows, since Win2K has a very good security framework. The problem is not Windows itself, but the shoddy practices of Microsoft by letting everyone and their dogs run as root (hopefully Vista will change this).

      I haven't had an Anti-Virus nor Anti-Spyware installed, ever. I only install one for shits and giggles to see if anything got through. Guess what? Nothing got through. You have to do few basic security steps and your Windows installation is pretty rock solid security wise, most importantly: DO NOT run Windows with root security and use as much as possible open source applications for your needs. Create yourself a non root account. Oh and ditch IE. Common sense will make any Windows installation secure.

      For Joe User, nothing will change unless Joe User is educated about security. You can give him the best firewall with Star Trek like AI built into it, if he decides to execute an email attachement that flushes his own files or massemails crap to people on his address list, nothing is there to stop him.

    2. Re:Gotta get away from MS by Ravenscall · · Score: 1

      I beg to differ about Windows being too easy to exploit. Run Linux with root access and you are just as vulnerable.

      Well, seeing as how most Linux distros do not make root access and Windows does......

      Also, I have yet to see one piece of malware (tracking cookies excepted) that will actually affect Linux.

      So, vulnerable to hacking yes, but see my comment on default access.

      --
      You say you want a revolution....
    3. Re:Gotta get away from MS by Ravenscall · · Score: 1

      That should be make root access default

      --
      You say you want a revolution....
    4. Re:Gotta get away from MS by lip_spork · · Score: 1

      Of course it's not in Microsoft's interest to prevent malware.

      First, think about the average PC user. They don't read Slashdot...think your mom. The PC that she had 8 years ago is *PLENTY* sufficient for her needs: surfing the net, doing email, some word processing and maybe some spreadsheet work. But Microsoft doesn't get paid if people don't keep buying Windows.

      After a few years, mom's computer "got old". It used to be zippy, but now it just doesn't work like it used to. It takes a long time to boot up, all programs function slower, IE keeps crashing and popups keep happening even when she's not browsing. What's she going to do? Wipe her hard drive and reinstall windows? If you think more than 2% of the general population could successfully do this, then you've been locked away in the IT department for too long. She's going to go to the Gateway store over by the mall and shell out for brand new computer, complete with a full copy of Windows and maybe even Office ($$$). So rather than selling just one license per person, Microsoft sucks hundreds of dollars out of them every few years.

      As has been pointed out, most of the worst malware got there because she agreed to run an executable - a screen saver, an Active X control hosted on some web site, a free file-sharing program bundled to the hilt with adware, etc. Norton may keep your mom from falling for the latest email-borne virus but is it going to stop her from launching a setup program that she really wants to run? You can't blame Microsoft for this.

      Now on the other hand, those of us that do know something about computers should understand that virus protection software is for the fools that don't know any better. I've been running Win2k on the same box for years. It is *CLEAN*, and I've never paid for virus protection. I get curious every once in a while, run a scan, and it will warn me about my infected cookies - yeah whatever. I don't run questionable executables and I keep up with the Windows updates...that's it. There's nothing I hate more than a bunch of memory resident applications clogging up my system, and I'll be damned if I'm going to load one that checks out every single file operation I perform, and actually *PAY* an annual fee for it.

  18. Depends on your definition of "spyware" by Opportunist · · Score: 5, Interesting

    I'm working for an antivirus company (and you have NO idea, the problem with spyware is not that you couldn't remove it, it's the legal issues around removing it and labeling it spyware), and from my perspective, there are 2 kinds of spyware out there.

    The kind that comes in the form of a cookie like doubleclick. It's tracking you, so it is technically spyware, even though it does not modify anything on your PC, does not have any negative impact on your stability or anything else. All it does is to monitor your browsing behaviour.

    If you count this kind of spyware then yes, the infection rate is crippling. 99% I'd wager. And 20 on average is reaching kinda low.

    If you only count those pesky popups that come as BHOs and other installed services, then my count would be a LOT lower. Still way too high but WAY lower.

    And yes, the average infected computer carries a tremenduous load of spyware. If you have one, you have them all. If I didn't know better, I'd say they download each other. :)

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:Depends on your definition of "spyware" by ScottCooperDotNet · · Score: 1
      I had guessed that, which is why I use the free AntiVIR since it doesn't bother with legal issues (being EU based) and removes whatever it finds.

      It's hard to recommend Norton when they require manual removal of malware files that aren't in memory. C'mon Symantec, that helps nobody!

  19. 20 Spyware Packages? by bmo · · Score: 4, Informative

    Hah!

    DOUBLE HAH!

    Them: "Dude, my computer is slow and it's got some sort of popup that comes on when I turn it on"

    Me: "You're infected"

    Them: "But how? I don't go to any porn sites...." yadda yadda yadda.

    And when I get to the sick peecee, I see that not only does it have _one_ piece of malware, but it barely boots from the hundreds (sometimes thousands) of evil packages all fighting for control of the poor machine.

    It's a losing battle. No, it's not scare mongering. It's reality.

    --
    BMO

    1. Re:20 Spyware Packages? by Esion+Modnar · · Score: 2, Interesting
      it barely boots from the hundreds (sometimes thousands) of evil packages

      When I first start to clean a PC, I don't even try to boot it. I just yank the HD, put it in an external USB case, then plug it into a malware cleaning workstation to run a whole slew of programs against it: AVG, Spybot, AdAware, Spysweeper, etc. By the time I replace it in the original box, what few evil programs that remain have been so crippled that finishing the job is a breeze.

      I also get a printout of the list of evil programs and hand it to the customer. Helps the customer's sense of value of my services.

      --

      They say the first thing to go is your penis. Well, it's either that or your brain. I forget which...
    2. Re:20 Spyware Packages? by AndroidCat · · Score: 1

      I hope you wear latex gloves when you hand them that list.

      --
      One line blog. I hear that they're called Twitters now.
    3. Re:20 Spyware Packages? by Anonymous Coward · · Score: 0

      And yes ... people still install software like iMesh everyday.

  20. "Pieces?" by voice_of_all_reason · · Score: 0

    What kind of half-assed shit is this?

    A single spyware application (ex. Gator) will have several files and registry keys that need to be cleaned. An anti-spyware program will need to highlight each of these for deletion. This is not the same as 20 individual processes on average for machines.

    1. Re:"Pieces?" by HermanAB · · Score: 1

      Well, of the three Peecees I cleaned up last week, each had more than 10 different malware apps running - nevermind the hundreds of tracking cookies and registry entries.

      --
      Oh well, what the hell...
  21. Here's a solution by eyepeepackets · · Score: 2, Insightful

    They can give Microsoft an additional $50 American every year, that should fix their PC problems post haste: Who better than Microsoft to fix Microsoft products?

    Now if you'll excuse me, Guido the wheel man is at the door wanting his $20 American for not trashing my wheels when I'm not using them -- he calls it "assurance" while I call it "insurance" but it's really just plain old extortion. You see, Guido sold me the wheels and tells me he can only keep them working if I pay him forever, otherwise something nasty is sure to happen and it will cost me even more money to get it fixed.

    If the woman in this article is such a heroic professional, why is she only cleaning off the malware and not getting the users off Microsoft OSes? Surely she has figured out by now that the cleaned machines get trashed again. Maybe she just really likes being needed. Maybe this is PR trash planted by some Microsoft goon.

    Maybe Mac and Linux folks are laughing like crazed loons after reading this "heroic" article.

    Cherrios.

    --
    Everything in the Universe sucks: It's the law!
    1. Re:Here's a solution by Anonymous Coward · · Score: 0

      Force customers to a different OS they DON'T want? Yeah, that's the ultimate solution-for-all alright!

      Fact is, stop using IE, pick a GOOD browser (Firefox, Opera, whatever) and spyware will be a thing of the past (unless you willingly install kazaa or whatever). A bit of common sense can't hurt either (don't open attachments from weird spam emails you shouldn't be opening anyways, etc).

      No need to force people to switch OS'es whatsoever. I look after a 2000+ computer corporate site in a country-wide MAN, got a dozen PCs at home, have lots of friends and family members relying on me too, and somehow spyware is never an issue...

    2. Re:Here's a solution by Mistshadow2k4 · · Score: 2, Insightful

      Maybe Mac and Linux folks are laughing like crazed loons after reading this "heroic" article.

      Yes, we are. Seriously though, phishing is growing into a problem for *nix-users these days, and so far as I know, the only state in the US in which phishing is illegal is California (I might be wrong there, though). You'd think "well, they should be smarter" but the phishers can be very clever, such as sending you an email that looks for all the world like it's from your ISP. (Yes, I was smart enough to check with my ISP before clicking that link, but I'm not gonna blame the people who didn't think of that. After all, if looks like a duck and quacks like a duck.....) So no matter what OS you're using, you should be paranoid.

      How to solve the spyware problem on Windows? Well, Peer Guardian can help block tons of it. Besides anti-p2p, it has a spyware list and uses little memory to run in the background. It also updates itself automatically unless that is disabled. And you can keep only the spyware list checked to block, nothing else, if you want.

      Another thing that can help is a router. I worked on a guy's computer that was loaded with spyware and had a few viruses to boot. He had a software firewall, Kerio I think, plus Avast antivrus and ran Ad-Aware twice a week. So why was he still getting all this crap? His ISP. They had no filters whatsoever. Their servers were set to allow anything to come through. Combined with an older computer with 128 mb RAM plus a fast DSL connection and it literally just couldn't keep up with all the malware pouring through from his ISP's servers. So he got a router and poof! After a fresh reinstall of Windows along with Avast, Ad-Aware, Spybot and PG his computer ran fine. But still.... from a *nix-users point of view, it seems ridiculous to have to spend so much money and effort just for basic protection that a more secure OS automatically provides.

      But spyware is always going to be a problem on Windows because of MS's bad security model. If they fixed it so remote users can't install, run or modify anything on your computer without your express permission, it would go a long way towards fighting spyware and a lot of viruses - I know from experience that you don't need to download or click anything to get spyware or a virus, many download themselves straight to your computer. And Windows just lets them do anything it wants. This ability for a remote user to modify your system without needing permission is called a FEATURE by Microsoft, as demonstrated by Active X and the recently-patched .wmf vulnerability. People say "well if these *nix OSes were as widespread in use as Windows they'd have all the same problems", but if that were true, where are all the Unix viruses? If MS changed Windows so that it requires an admin to password to modify the registry, install anything, or for a remote user to run anything on your comptuer you'd see a marked improvement right away.

      --
      I dream of a better world... one in which chickens can cross roads without their motives being questioned.
    3. Re:Here's a solution by trparky · · Score: 1

      YES! FINALLY, A NON-"switch to Linux and your issue is solved" REPLY! OH YES! COMMON SENSE!

      Thing is, I run Windows XP Professional and yes, I admit, I run as Administrator all the time, but I don't get crap.

      What browser do I use? Yeah, that's right, FireFox. I can't remember when I had a virus or spyware, it has been too long ago.

      True, I have an antispyware application installed on my machine and it scans nightly, but you know what? All it ever finds is tracking cookies.

    4. Re:Here's a solution by trparky · · Score: 1
      If MS changed Windows so that it requires an admin to password to modify the registry, install anything, or for a remote user to run anything on your comptuer you'd see a marked improvement right away.
      That is what is happening with Vista.

      There will be a system in which users will be able to run as Administrator, but in reality, it isn't Administrator. Any time software wants to modify the system, a big nasty message box will come up telling you that something is trying to modify the system and that allowing it is potentially dangerous. It would then ask for the Administrator (the true Administrator) account password.

      What does this sound like? Oh yeah, SUDO in Linux!
    5. Re:Here's a solution by Anonymous Coward · · Score: 0

      Why would spyware companies write software for *nix machines, when 95% of the public doesn't use *nix, and that other 5% knows not to install their crap?

      There's no spyware on Linux machines, not because it's more secure, but because it's not a target.

    6. Re:Here's a solution by cswiger2005 · · Score: 1

      Sounds more like the auth panel which MacOS X uses than like sudo.

      --
      "The human race's favorite method for being in control of the facts is to ignore them." -Celia Green
    7. Re:Here's a solution by aj50 · · Score: 1
      I don't think that's quite accurate.

      Its more like, you buy your wheels but you live in a bad neighbourhood. Guido offers his services at $50 a year to stand guard over your new wheels while you're elsewhere.

      You don't have to pay him, he's not going to trash your wheels if you don't. You could pay someone else who may or may not do as good or a better job at looking out for your wheels, or you could look after them yourself, put them in a garage. Up to you. The only questionable thing about Guido's practice is the fact that he can sell you his service with the wheels before anyone else can offer you a better deal and that he hasn't explained how the locks work telling you that its in the manual which can only be read at his shop.

      --
      I wish to remain anomalous
    8. Re:Here's a solution by eyepeepackets · · Score: 1

      "...changed Windows so that it requires an admin to password to modify the registry...That is what is happening with Vista"

      This won't work for Microsoft Windows because Windows has a horrible design flaw which _is_ the registry. All it takes is one mistake, one slip-up by the user and the whole game is over. Why? Because the registry is a single point of control over the _entire_ system: Once the registry is compromised, the whole system is compromised and can never be trusted again until it's wiped and re-installed.

      Vista will be touted as more secure by Microsoft but will end up being just another round of Microsoft suckering the suckers out of their cash. Until the OS is completely rebuilt with a secure design from the foundation up, it will never be more secure than it is now and Microsoft refuses to do that. Why? Because they'd end up with a Unix-type system and they can't compete on that level and they know it. In their minds, it's better money just to milk the Windows cow until it drops dead.

      Microsoft Windows is a classic example of what happens when mistakes aren't acknowledged and are allowed to fester. That Microsoft continues to make money hand over fist with this situation provides a sterling example of the power of putting your business costs off onto others -- in this case, the customers.

      They'll get along with this strategy for a while yet, but the road has a definite end.

      Cheers.

      --
      Everything in the Universe sucks: It's the law!
    9. Re:Here's a solution by Sexy+Commando · · Score: 1

      I think you misunderstood how Registry works. All registry are only writable by admin except HKEY_CURRENT_USER, which is a separate file sotred in each users home directory. A well-designed application will store global settings in HKEY_LOCAL_MACHINE and user-specific settings in HKEY_CURRENT_USER. That's why backing up your home directory will also back up your user registry settings.
      In addition, there is an ACL for each key-value pair for fine-grained security.
      Running as Admin will be a problem because spyware can modify HKLM to enable launching spyware as startup for ALL users. (think /etc/profile)
      Running as normal user will be less problematic because spyware can only modify HKCU to enable startup on current user. (think ~/.bashrc)

    10. Re:Here's a solution by eyepeepackets · · Score: 1

      And the first time that user says okay to the dialog box asking for admin password to modify the registry and the program okayed isn't "a well-designed application" then they loose.

      Having one central point that controls _everything_ is bad design. Comparing the Windows registry to /etc/profile isn't a good comparison since /etc/profile is a directory containing many different files while the registry acts as one control file at the HKLM level as you describe. This makes is awfully easy for one small program to do a lot of changes. Comparing the Windows registry to /etc/profile is comparing apples to oranges -- similar, but different.

      Granted, a Mac or Linux user could find themselves in a similar boat if they say okay to the wrong thing, but the difference is that the one small program is going to have a much harder task of changing a lot of different files than just changing one file in a lot of different ways. It's also much easier to detect changes in a lot of different files than it is to detect alot of changes in one file. When you add in the separate locations for tools vs. config files, directory permissions, program and file permissions -- it becomes a non-trivial task on a Unix box to do what is a slamdunk on the Windows registry.

      Either way, the end user does have responsibility for their actions, but the OS should not make it trivial for such changes to be made. ACLs are a good protective measure provided they are used in such a way as to limit the user's ability to make changes, but again the user has to be able to admin their own machine -- slicing up the pie doesn't make the pie smaller, just renders it into pieces. The user must be able to use the pieces and in a way that doesn't render him completely vulnerable with one click of the mouse.

      Thank you for the reply, best of days to you.

      --
      Everything in the Universe sucks: It's the law!
  22. shotgun spyware protection... by kcornwell · · Score: 1

    clicky :D

  23. When you say 100 pieces... by Anonymous Coward · · Score: 0

    Are you counting, are you counting every single file, every single registry key, every single directory and every single cookie as "a piece?"

    Thats like having a dinner party and counting the total amount of bones that the invitees have...

  24. EASILY believable by Short+Circuit · · Score: 3, Informative

    Here at GRCC, Computer Club runs a monthly event called PC Clinic where we fix machines for free. We've serviced more than 60 machines over the course of the three events we've run. We easily average more than 100 pieces of spyware on each machine we test.

    Three or four machines had over 1000[sic] pieces of spyware, and one machine had over three thousand pieces, plus several variants of either Sasser or Sobig. (I forget which...that machine came in the door on our first day.)

    We don't just service the machines of the elderly...we get a lot of uninformed college students and their parents, as well.

    If you have any questions, drop me an email. I'd be happy to answer them. I'll respond to /. comments later, after class. :)

  25. The aweful truth by Opportunist · · Score: 3, Insightful

    It doesn't matter where you surf. It doesn't matter what you open in mail. It doesn't matter if you keep your system updated.

    What matters is the combination of it all!

    You have to do EVERYTHING to stay clean. No shady porn sites, no clickyclicky on shady mail, daily updates, up to date virus killer, well configured firewall, ...

    "Gaaaaah... too much work!" is the answer you'll get from Joe Schmoe Average. "All I wanna do is surf, I don't wanna worry about system stability, Browser plugins and antivirus."

    Well, all I want to do with my car is drive around. And still I gotta worry about red lights and directional lanes. Why the heck do I? It makes me slower and keeps me from getting right where I want to be!

    Oh. Right. I enjoy being alive and have an operational car.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:The aweful truth by aj50 · · Score: 1
      You have to do EVERYTHING to stay clean. ...up to date virus killer...

      Really?

      When I used windows, I had an up to date virus killer. In about five years of use, it caught two (2) viruses. Both were e-mail attachments which I hadn't and wasn't going to open. (Seriously, how dense do you have to be to open an attachment with an odd extension in an e-mail with no subject and a two word body?)

      Did I need a virus killer?

      --
      I wish to remain anomalous
    2. Re:The aweful truth by Nimey · · Score: 1

      You probably have more clue than the average Windows user. When I boot my XP partition, I've got always-on antivirus, full updates, and firewalls on both the router and Windows. I don't get much email on my POP account and all the nasty stuff is blocked by my ISP anyway. I don't browse with IE. I've only ever gotten one virus (according to AVG (no idea from where)) and it was quarantined immediately.

      The notional average person uses IE and Outhouse Excess, is simply unaware of the concept of malicious emails, and leaves Windows settings to defaults. The 90-day subscription to Norton/McAfee Antivirus expired months or years ago. He might have a hardware firewall if he's got broadband and a software firewall if he's got XP SP2. If he's got Windows before XP SP1, automatic updates probably aren't enabled.

      --
      Hail Eris, full of mischief...

      E pluribus sanguinem
    3. Re:The aweful truth by aj50 · · Score: 1
      Absolutely, the average person knows next to nothing, except they have a virus scanner so they'll be free of viruses, that's what the man in the shop says so it must be true.

      We must be careful not to feed people half-truths about malware, people with loads of viruses & spyware either (a) think they are safe as they have a virus checker or (b) don't think they're safe but don't know what to do about it. Keeping a clueless users pc free of unwanted stuff is difficult at best and impossible at worst it doesn't help that most seem to have a just click on whatever button comes up mentality.

      --
      I wish to remain anomalous
  26. There is a very strong loby to use exclusive MS sw by Anonymous Coward · · Score: 0

    Due to this, most people as well as companys just trust too much over and over again on IE and other MS unsecure software.

    Once again money talks higher than world sanity :(

    I just wish the ones that take care about this could live in peace, but nobody cares if computers are a mess and mess up the world.

    Maybe ISP's could create a paralel clean internet, and when strange network activity was detected it would be pluged to the messy-internet for a week or so after last incident.
    Isn't google trying to do somehing like this?

  27. Fight it, don't clean it off by Simonetta · · Score: 2, Insightful

    The emphasis on preventing spyware from infecting a PC is misplaced. The problem is best addressed by defining what is acceptable and what is not. Then punishing the people who exceed the limit.

        Who will define what is acceptable? We will, of course. We are the technological elite. It's time that we start making the parameters about what is acceptable behavior on the net.

        So the spyware makers pay off the politicians to allow some country to engage in aberant conduct and give them a save haven? Shut off the country from the web.

        It's time that we stop assuming that in the evolving information age that the politicians have more control over society than the technical elite. We control the web, and we need to take responsibility for the assholes and criminals who use it to prey on society. That means shutting down the 419 chuckleheads also.

        We created the environment that allows viruses and spyware to exist. It's time that we and not the politicians put an end to it. And if what we do goes against some jerks 'right' to sell access to your PC for his own profit, then so be it.

    1. Re:Fight it, don't clean it off by Ravenscall · · Score: 1

      And just how do you propose that this be achieved?

      --
      You say you want a revolution....
    2. Re:Fight it, don't clean it off by Anonymous Coward · · Score: 0

      Since when did the technological elite become more powerful than the government or corporations? I agree that the future will be a beautiful place, but I don't think we live there yet.

  28. Irony? by Syberghost · · Score: 1

    Is it just me, or does anybody else see the humor in this coming a few articles after the EFF warning people not to use Google Desktop?

  29. Here we all have license to kill -9 by Anonymous Coward · · Score: 0, Funny

    ... not only 007

  30. On the Average, we're all 90% dead. by Ancient_Hacker · · Score: 1
    The concept of "average" can be very useful. For instance, you can say the average temperature in HAwaii is 68 degrees F. Or the average tinfoil hat liner size is 6 3/4.

    The concept works just swell for data that doesnt vary much, like the two numbers above, and forms a bell-shaped curve.

    The concept doesnt work at all,k and in fact is highly misleading, when the data tends to be at one extreme or the other. Such as, oh, number of spyware apps on a compuiter.

    IMH experience, computers either have 300+ items of spyware (if they've never been scanned), or they have ZERO (if they have a spyware scan program or three, or have no outside Web access).

    So saying the average number is XXXX is a misleading statistic. More than likely, a certain percentage have ZERO, the rest have many hundreds.

    In My Humble Experience.

    1. Re:On the Average, we're all 90% dead. by renrutal · · Score: 0
      IMH experience, computers either have 300+ items of spyware (if they've never been scanned), or they have ZERO (if they have a spyware scan program or three, or have no outside Web access).

      Really, if you want to have Zero malware in your PC, all you need is a trained working brain.

      Works all the time, helps in real life too.
  31. cookies by gEvil+(beta) · · Score: 1

    How many of those 20 pieces are those horribly nasty tracking cookies? I'm not a fan of them, but I'm also well aware that they're not nearly as malicious as many users think they are...

    --
    This guy's the limit!
  32. No wonder... by Arthur+B. · · Score: 1

    the UK has the lowest rate of usage of firefox in europe.

    --
    \u262D = \u5350
    1. Re:No wonder... by Anonymous Coward · · Score: 0

      That would give an intresting statistics of spyware on machines with and without Firefox... or maybe more acurate results (but this would be harder to catch) number of spywares detected on:
      - machines that browse the web exclusivly with firefox;
      - machines that don't use Firefox exclusivly for web browsing.

      Then we could place a banner on MS website like "forGOT this FACTS?" :)

  33. Absolutely not surprised!! by dentar · · Score: 1

    I routinely scan XP machines all the time. I see numbers in the hundreds. If the UK only has that few, they're lucky!

    Spyware hype or scare? No, it's reality!

    --
    -- I am. Therefore, I think!
  34. Not Impressed by reachums · · Score: 1

    My friend was going to get rid of his computer because he didn't think it was running right. I told him to let me look at it first. I ran some virus software and some spyware/adware software on it. I found upwards of 100 viruses and over 400 peices of spyware/adware. His computer runs like a dream now.

    Englands average of 20 does not impress me!

    --
    "Just call me Girly Blank"
  35. over hyped but possibly true. by ssand · · Score: 1

    While these numbers are overhyped, it's certainly not nessesarily unrealistic. More and more sites are including drive by downloads, including the spyware that's pretending to be anti-spyware. We see this with many sites, such as ebaumsworld (which unfortunately steals all of its content) and has recently added the winfixer spyware to its list of trash. I would guess a large amount of people will infect themselves for a little entertainment.

  36. Windows! by Anonymous Coward · · Score: 0
    According to the latest figures from Webroot, there are more than 21 online spies for every Windows PC in the UK, the highest figure in Europe.

    No problems on my OS X or Linux! It's amazing that a company would write insecure software and then have the nerve to sell protection is amazing. If Windows was secure there wouldn't be a need for Mrs Brothwood to be named a Most Valuable Professional by Microsoft for her (volunteer/free) security work!

  37. Obligatory by Headcase88 · · Score: 2, Funny

    Let's count it up. MSN, Internet Explorer, Windows Autoupdate...

    I kid, I kid :P

    --
    "When the atomic bomb goes off there's devastation...but when the atomic bong goes off there's celebraaaaation!"
    1. Re:Obligatory by HermanAB · · Score: 1

      Sure, but those are *essential* spyware... Anyhoo, when I fix a machine, I install Firefox, Thunderbird and Gaim and tell the people that if they can wean themselves off the Windoze apps, their support costs will go down. Some do - some don't. It's a free world - some people choose to be suicide bombers, others choose to run MS Windows...

      --
      Oh well, what the hell...
    2. Re:Obligatory by Anonymous Coward · · Score: 0

      Some people juggle goslings...

  38. Jerks by dtfinch · · Score: 1

    Anyone who says the average computer has more than 2 pieces of spyware is counting cookies.

  39. Doesn't surprise me by Anonymous Coward · · Score: 0

    As someone who works for the IT department of a university cleaning up student laptops (Windows XP and 2000 mainly), I see stuff like this all the time. I've seen Adaware go over 5,000 before. If anything, the average student has more than 20 pieces of spyware usually. Thankfully Spybot, MSAS, HijackThis, Adaware, Sysinterals Auto Runs, a good virus scan and the ability to turn off system restore make fixing them not so difficult.

  40. Re:spyware and fear mongering by Anonymous Coward · · Score: 0

    umm, go to hell...?

  41. Even having 1 Spyware is too many... by Pi55edOff · · Score: 1

    I don't think that it is played up as I have seen very well how well Webroot's SPY SWEEPER cleans up computers where all other Anti-Spyware fail miserably.
    "In fact, the figures come from Webroot - an anti-spyware firm with a commercial interest in playing up the spyware threat." I strongly believe this as a lot of people have NO Clue about protecting their computers at all.
    I just did 10 computers convincing our clients to switch to webroot's spy sweeper and I was able to show them how inferior the other products were compared to this one. Spy Sweeper even stops ALL POPUPs including ones that are run by spyware software outside of IE/Firefox.

    I would recommend that others try spy sweeper out and compare it to your other Anti-Spyware software. This software is worth the money when they get it working 100% of the time vs the poorly made competition.

  42. lies, damn lies, and statistics by buddyglass · · Score: 1

    What counts as a "piece" of spyware? If a particular malware application entails five files, is each of those a "piece"? Are they counting each tracking cookie as a "piece"? Without detailed definitions, "20 pieces" is meaningless.

    1. Re:lies, damn lies, and statistics by techno-vampire · · Score: 1

      Of course they are counted seperately. They all do that, because they have to remove 20 different things to clean you up. However, an honest program (Like Spybot) will show you one item in the list naming the program itself that can be expanded to show you all the different things that need removal, or left closed to show you they're all related. A scare-mongering one will simply list them and make them look unrelated.

      --
      Good, inexpensive web hosting
  43. Cookies by Cromac · · Score: 1

    Anti spyware companies also have an incentive to tout cookies as some huge spyware threat too. How many of those 87% of "infected" machines had nothing more than a doubleclick cookie on them?

  44. Education is NOT answer by roe-roe · · Score: 0

    As per the slashdot article that I happen to agree with ( it ran a month or so ago) Education is not the answer, locking the user out of abilities and controling what they can do and what they can't do is the answer. Most IT people should agree that the fewer things their employees do on their computer that isn't work related (ie download FWD attachemnts, install software, blah blah blah) the better shape the computer is in. Things like spyware and adaware whatever malware should not be able to be installed on a computer in the first place. Until that happens the is always going to be a multibillion dollar market (which may be the point)

  45. Easy for me to see! by StarWreck · · Score: 2, Insightful

    This number is easy for me to see as an "average". Either people are at least mildly educated about spyware like us on /. and have absolutely no spyware or are completely unedcuated and have several thousand pieces of spyware!!! Those with several thousand pieces when averaged with those who have none what-so-ever can easy come up with 20 pieces on average.

    --
    ... and in the DRM, bind them.
  46. Warning: Webroot Software Destroys .ZIP Files! by Teddy_Roosevelt · · Score: 1

    WARNING: Webroot's anti-spyware scanning software (Spy Sweeper 4.5.8, build 683)destroys .ZIP files that were created with the "encrypt filenames" setting turned on. It truncates the files to 1 KB each, deleting all other data, without warning or notice.

    I lost 19 GB of data in the first scan. They were barely responsive when I told them about this.

  47. Tracking Cookies might be malware and spyware by Gary+W.+Longsine · · Score: 1

    Well, tracking cookies may not be executables, but it's probably reasonable to consider many of them to be spyware, at least to the extent that they may be part of or coopted by a larger adware system which may identify a particular user and their web surfing history.

    --
    If you mod me down, I shall become more powerful than you could possibly imagine.
    1. Re:Tracking Cookies might be malware and spyware by rahrens · · Score: 1

      Perhaps, but they really don't fit the definition of malware, not as used by the majority of web sites, although they can be used that way...

      --
      "Money is truthful. If a man speaks of his honor, make him pay cash." Notebooks of Lazarus Long, Robert A. Heinlein
  48. Spyware is even scarier than that... by foQ · · Score: 2, Interesting

    It's always a shocker to see what kind of data is collected by keyloggers. With 20+ pieces of malware on the average PC, how many do you think are in places where you do have personal information. Your company has all of your personal information, somebody had to enter that in by hand. How about banks? They're frequently the target of even nastier things than the article mentions. Remember that the credit card and check scanning devices that are attached to computers input data in the same way that keyboards do. In fact, most of them are daisy-chained to keyboard plugs to get power. This means that if your local florist, butcher, dry cleaner, etc. does transactions on the computer, all of your credit card or check information could be in Russia within the hour! Scary.

  49. Depends on what you classify as spyware by gorbachev · · Score: 1

    Some anti-spyware/virus companies classify tracking cookies as spyware.

    --
    In Soviet Russia, I ruled you
    1. Re:Depends on what you classify as spyware by SwashbucklingCowboy · · Score: 1

      WebRoot does classify certain cookies as spyware. So, the more interesting statistic would be how many non-cookie items are installed on average?

  50. Then look at other studies by sremick · · Score: 3, Informative

    There are plenty of other more-neutral studies that say basically the same thing.

    Late in 2004 some studies were done that were pretty thorough. I know it's kind of old now but I can't imagine things have gotten any better.

    A study was done by AOL and the National Cyber Security Alliance. Some of their findings:

    6% of users thought they had a virus currently on their computer. A scan revealed that actually 19% of all the users had viruses.

    71% of those with antivirus software thought that it updated weekly or daily. However, a scan revealed that only 33% of all the users had actually updated their antivirus within the last week.

    53% thought they had spyware on their computer. A scan revealed that in truth, 80% of all the users had spyware.

    References:
    http://www.infoworld.com/article/04/10/25/HNaolsur vey_1.html
    http://www.staysafeonline.info/pdf/NCSA-AOLIn-Home StudyRelease.pdf
    http://www.staysafeonline.info/pdf/safety_study_v0 4.pdf

    Another study by Dell estimated that nearly 90% of all desktop computers are infected somehow, with 1 out of 5 calls to Dell tech-support being virus/spyware related. Most people aren't even aware that their computers have been compromised:

    http://www.financialexpress.com/fe_full_story.php? content_id=71662
    http://www.webpronews.com/news/ebusinessnews/wpn-4 5-20041015DellsSpywareSurvey.html

    1. Re:Then look at other studies by techno-vampire · · Score: 1
      71% of those with antivirus software thought that it updated weekly or daily. However, a scan revealed that only 33% of all the users had actually updated their antivirus within the last week.

      This isn't always the user's fault, however. Just last week I tried running the update on my anti-virus manually and found out that it was borken and needed to be reinstalled. It'd been failing for several months and never notified me. Naturally, I took care of it right away, ran it again and re-scanned. No problems, but there sure could have been through no fault of my own.

      --
      Good, inexpensive web hosting
  51. wrong-o by Anonymous Coward · · Score: 0

    There is no outright need to use grep for any casual linux user who just wants a functional desktop. None. They wouldn't even to know it exists. That's a complete non issue. Pick any of the top name brand distros (non source based), and they are all easy to install now, and easy to keep patched and are easy to find and install new software with, all with the GUI. That part especially is light years beyond anything MS has. The biggest problems are hardware vendor based, it's hard to find (for your normal user just out shopping) the same level of offerings in your local computer store (ex: there are 4 retail stores in my area that sell complete systems and add-ons and software, zero of them offer any linux anything), and peripherals are a constant hassle, but that is more a political decision by the vendors, they won't say it out loud but they are still afraid of offending MS, some how they think it will hurt them. You can't buy it if it isn't even there on the shelf. You don't even know it's there to buy if the major vendors constantly fail to include it in their offerings.

  52. Spyware scaremongering == business model by ChiliJ · · Score: 2, Informative

    Mark Russinovich of sysinternals has an interesting experiment here.

  53. tires not a good example by Filthysock · · Score: 1

    You DO pay forever to keep them working, either retreading them or buying newer (upgrades!) every couple of years :)

  54. Lowering the average (but not by much, probably) by VIPERsssss · · Score: 1

    I would imagine that most of their data comes from people who have been sent to their website by some tech, "Dude, you're infected...go to this website". This is going to skew their sample population (which they probably knew already. OH NOES!!!11)

    If a bunch of us paranoid MFers who scan regularly with multiple programs went to their site I'm betting that average would drop.

    --
    We are eternal, all this pain is an illusion.
  55. Lucky bastards... by Spy+der+Mann · · Score: 1

    where I live, a computer is infected by 100 spywares in average!

    Let's all move to the UK! :D

  56. Thank you! Pet peeve. by Beryllium+Sphere(tm) · · Score: 1

    > Well it would all depend on what was being classed as spyware. Are they including tracking cookies,

    Articles, surveys, antispyware ads, antispyware product scan reports, need to distinguish sharply between tracking cookies and installed code. They don't, and that clouds any attempt to be realistic about the threat level. Tracking cookies don't measurably slow your system down. Tracking cookies don't destabilize the OS. Tracking cookies don't steal passwords, intercept SSL sessions, or change your home page to a porn popup purveyor.

  57. Affiliate programs by Beryllium+Sphere(tm) · · Score: 1

    >If I didn't know better, I'd say they download each other. :)

    I believe you'll find that they do. They may disable programs from a competing keiretsu, but if they install a moneymaking piece of spyware from a friendly company then they get a piece of the action, kind of like recruiting a downstream Amway sales rep.

  58. Spyware could happen on alternative OS's by Beryllium+Sphere(tm) · · Score: 1

    >If they fixed it so remote users can't install, run or modify anything on your computer without your express permission, it would go a long way towards fighting spyware

    It would go a long way toward fighting the current generation of spyware, which is fond of exploiting Windows bugs and misfeatures to implement a "drive-by download".

    Unfortunately criminals adapt. Block drive-by downloads and they'll all migrate to EULA-ware. OS X would not be immune. Any OS that assumes that software should have complete power of attorney for the user launching it is vulnerable. Users *might* wake up when an installations asks them for an administrator password, but would you count on that?

    >If MS changed Windows so that it requires an admin to password to modify the registry, install anything, or for a remote user to run anything on your comptuer you'd see a marked improvement right away.

    Personal opinion, you'd see an immediate marked improvement followed by a gradual decline to a point almost as bad as what we have now.

  59. In other news by SnarfQuest · · Score: 1

    In other news, 133 out of 1000 PC's in Poland run an OS other than Windows.

    --
    Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
    1. Re:In other news by SamoVasGledamo · · Score: 1

      In case you were wondering what the real statistics were:
      http://counter.li.org/reports/short.php

    2. Re:In other news by chawly · · Score: 1

      Ah ! I thought it was a free copy of Windows that they had.

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  60. Always at least 1 by Anonymous Coward · · Score: 0

    "Agreed, way too common- but most spyware removal programs count even a single registry entry as a piece of spyware- so I'd say the estimate is a bit low. I usually run into 20-100 pieces of spyware on an infected machine."

    Warning: This machine has been found to contain Windows XP Service Pack 2. This software can be used to compromise your system's security, and has been found to have a major role in many major computer security crises in the past. It is suggested that you remove this software at once.

  61. Sounds like a bargain by Anonymous Coward · · Score: 0

    "They can give Microsoft an additional $50 American every year..."

    Americans are only $50 now? I'll take three please. Preferably SWF's under age 25 but old enough to drink.

  62. why would you want to perpetuate... by Anonymous Coward · · Score: 0

    .....the use of windows by brainwashing another young generation of computer users that that is the only system and that windows=the computer? If you want that, then let microsoft pay for it off campus someplace where they can get their victims..I mean customers go to learn how to use windows safely. I am sick of my tax money going to perpetuate the windows bogus monopoly. Please get your expensive and buggy crap out of the public schools, it's a ripoff. And speaking of ripoffs, let's get the damn pro sports farm teams out of the public schools, let the NFL and NBA run their own child indoctrination and addiction centers entirely on their own nickle, some place other than the tax payer funded schools.

  63. More accurate statistic by Anonymous Coward · · Score: 0

    The actual count of infected PCs was 8675309 out of 10000000 total.

  64. If We're Not Talking About The Average User by Master+of+Transhuman · · Score: 1

    I don't think I've ever had a client with LESS than 20 pieces of spyware.

    I fully believe that almost every user not using antispyware products = and using IE on a regular basis - has at LEAST that many pieces of spyware.

    The latest total bitch to get rid of is SpyStrike. You have to use a custom removal tool AND at least two anti-trojan (not anti-spyware, although you need those, too) to get rid of it.

    I'm getting to the point where it might be better just to tell clients to wipe the machine, reinstall the OS and install the antispyware stuff rather than try to clean it. It's just not worth the hours to the client (although it is to me, since I get paid for this - but even then it's hard to justify billing for four to eight hours or even more to get rid of something you can get rid off in less time by reinstalling.) I mean, just to run two to four antispyware and antitrojan scans takes two to three hours if the machine is slow and there are a lot of files to scan. Then you have to dig out and get rid of the ones the scans didn't detect - which is why you have to use at least two or three utilities of each type. It's pathetic. It's so easy to own Windows it's just pathetic.

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  65. I found some really awesome anti-spyware by thegnu · · Score: 1

    It's called "Linux." It works really really well.

    If you're not into that, then spywareblaster, spybot -search & destroy, iespyads, firefox, sun java 1.5

    But really, try "Linux."

    --
    Please stop stalking me, bro.
  66. Seems a little conservative by Zerbey · · Score: 1

    I just fixed a friend's machine that had over 1200 pieces of spyware on it (about 60% where duplicates), the scary thing is that this is not at all uncommon. He had the typical symptoms of the machine getting slower and slower until it finally refused to respond. I had to boot the (XP) thing up in safe mode and manually remove 50 or so malware entries from the registry before it would boot.

    His Anti-Virus software was still sitting sealed in the box from when he bought the machine! He assumed it was installed by his vendor (Compaq).

    What's disturbing is that this is one of the milder cases of spyware infection I've seen. On average, I find 200-300 when testing machines. The record is well over 10,000 - and that was on an employees computer at my former job!! (yes, she was fired). Cutting out IE and replacing it with an alternative is a big help. Hopefully, IE7 will be more resilient towards spyware. The number one defense is to get an anti-virus program and keep it up to date.

  67. Can't patch on 56k? by SanityInAnarchy · · Score: 1

    What, are they charging by the minute again? I can patch on 56k just fine, when I have to. Fortunately, I don't still have 56k...

    --
    Don't thank God, thank a doctor!
    1. Re:Can't patch on 56k? by Anonymous Coward · · Score: 0

      Ever tried downloading 20 MB of patches on a 56K modem?

  68. Depends what you mean by gelfling · · Score: 1

    In normal use even with resident scanners like spybot and avast and a firewall you're going to pick up 20 COOKIES which the tool flags as spyware.

    But I've been wrestling with a hijacker infeced machine that seems resolutel. I have maybe one or more things to try before I give up on removing it. Most of the popups start a blank browser window atleast because I scrupulously add all those urls to my = 127.0.0.1 section of HOSTS. But it's still a pain.

    Anyway if you stop running your resident scanners for any amount of time you'll get spyware up the wazoo -- worse than mere cookies which pushing a few buttons regularly eliminated 90% of the scrubbing the spyware scanners would have to do. In fact I've stopped running my spyware scrubbers very much just like I rely on my resident AV scanner and no longer run a manual AV scan except very rarely.

  69. False positives w/Webroot.. by Anonymous Coward · · Score: 0

    I'll tell you, I was pretty convinced Webroot was far above and beyond all the other anti-spyware software out there when I ran it on several machines that were regularly scanned by Spybot and Ad-Aware, because it found a number of things that the others appeared to have missed.. Until I read something in a computer mag that reviewed a bunch of different anti-spyware solutions, and noted that webroot detected a number of false positives.. It is also relevant to note that both of those free solutions suffered somewhere in the neighborhood of about a 55% detection rate, where the commercial McAfee product was around 97% accurate (IIRC)..

  70. Oblig. Strongbad quote by MirrororriM · · Score: 1

    That is NOT a small number...that is a BIG number. Computer over? Virus = very yes?!...and the Compy...just peed my carpet...

    Strongsad: Strongbad, have you been using the internet irresponsibly?

    Strongbad: No more irresponsibly than usual...

    Strongsad: Strongbad, did you get a virus?

    Strongbad: Uh...Nooooo.....

    Strongsad: Strongbad, did you get 400,000 viruses?

    Strongbad: Yes, VERY YES!

    --
    Content Management System: A pretentious way of saying "text editor."
  71. Stalkware by Anonymous Coward · · Score: 0

    If someone is following me around town, that would be called stalking. If you can't call "tracking" cookies spyware, what's another good descriptive term, stalkware? And exactly how is your average end user supposed to know what cookie does what?

  72. In other news... by smartdreamer · · Score: 1

    The BBC is reporting that in Poland, 133 of every 1,000 domestic PCs are Windows free.

    1. Re:In other news... by chawly · · Score: 1

      which means that they have a free copy of Windows ?

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  73. Damn Lies or Statistics? by jgoemat · · Score: 1
    The BBC is reporting that PCs in the UK are infected with over 20 pieces of spyware on average.
    So my mother who had almost 2000 pieces of spyware made up for 99 people that weren't infected at all.
  74. Not its only problem by swb · · Score: 1

    Enterprise was updated from 2.1 to 2.5 in November, and it's been an utter disaster for us (resellers).

    We've had to uninstall it at about half the sites and Webroot's SE who came to town while helpful, obviously wasn't able to fix what is fundamentally broken software.

    I've found one of the better combinations for eliminating stuff is booting to safe mode and scanning with both MS AntiSpyware and Kaspersky. Ideally I remove the disk and jack it into a USB enclosure and scan it as if it was a passive data drive.

  75. How to stop spyware by swordgeek · · Score: 1

    1) Don't make it profitable to sell spyware blockers, disinfectants, etc.
    2) NAIL the fuckers who use this stuff in their products. The CEO of Gator should have been thrown in jail for the rest of his natural life back when this sort of behaviour started. Unfortunately, no one listens to the warnings when the thin edge of the wedge is pressed against our throats. No one took spam seriously when we were telling the world that Cantor and Seigel should be disbarred, no one worried about browser pop-ups and crappy adware, and now we see that no one expected spyware to be a virulent menace.

    All I can say about is this: Suck it up folks. Through inaction, you've made your own bed.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  76. okay, biggo infection rate ... by Anonymous Coward · · Score: 0

    now the question is, where / how did they get infected.
    i'm guessing here (from my ownz surfing experience)
    that at least 30 % is from infected emails and another
    40 % from "naughty" websites.
    it's pretty logical. people like "naughty" pictures,
    so if i were a malicous person -or- a moral person(*),
    depends on the way you look at it, i'd have many
    references to naked britney spears pics et al. :P

    (*) how to keep the internet "clean"? disable computers
    of horney users, easy. the whole trojan/spyware mess
    might even be a "black op" by the u.s. goverment to
    polish the souls of those dirty white men :P

    disclaimer: i'm with any kind of infection, physical
    or electronic (on xp) and proud of it /:O

  77. how do you propose ? by Simonetta · · Score: 1

    We take responsibility for the web. We hunt down the criminals. We ensure that the young people understand that it is not cool to write and release viruses. If we can have hundreds of thousands of people searching for non-existant aliens with the SETI program, then we can organize the same hundreds of thousands of people to search for data criminals, who are all too real.

        No one takes the geek community seriously because we don't take ourselves seriously. We have no independent review board of the technology that we create before we give it to the politicians or corporations. Then we are free to accept no responsibility for what they do with it.

        What I'm proposing is change in consciousness in the geek community. An awareness that we are responsible for what other people do with what we create, and we have the power to control how this technology that we create will be used.

        When and if this change in consciousness occurs, then we will be more powerful than the governments and the corporations. The geek community can exist without the governments and corporations, but they can't exist without us.

    1. Re:how do you propose ? by Ravenscall · · Score: 1

      What you are proposing is an idealistic fantasy that would never come true in a capitalistic society.

      --
      You say you want a revolution....
  78. Oh give me a break by wookie+geek · · Score: 1

    On average, a whole 20 pieces of spyware? Where I work, on AVERAGE, the PCs we see have in excess of 500. I'm talking ad/spy ware not including the bonus virus, trojans, et al. This crap ranges from mild to extreme. From being installed via customer ignorance or stupidity ( there IS a difference )to coming in thru drive by in IE exploits(which I guess could fall under ignorance or stupidity).

  79. How they get their numbers by JThundley · · Score: 1

    Since everyone is guessing where they get their numbers from, I'd thought I'd add mine: They have a free spyware scan on their site. They can tell where people are when they visit and scan. Their scan doesn't remove spyware by the way, just tells you what you have so that you'll by SpySweeper.