Law Office Systems, Inc.
About Us - Law Office Systems, Inc. Services - Law Office Systems, Inc. Products / Materials - Law Office Systems, Inc. Publications - Law Office Systems, Inc. Clients Only - Law Office Systems, Inc. TM User Group - Law Office Systems, Inc.
Spyware, adware and other villainous pests
  By Carol L. Schlein

At least once a week, I get a call from a client whose computer appears to have been taken over by spirits. Occasionally, I’ve even seen my own computer act like it’s in slow motion rather than its usual peppy self. Chalk it up to culprits like Comet Cursor, Radiate, Aureate, Gator and their cousins.

Some of these villains are classified as “adware” or “spy ware,” which is internet jargon for advertised sponsored software. Advertisers began to find banner ads were too passive, since visitors to a site had the option not to click on it. Enter popups. And as technology further developed, the ability to monitor individuals’ activities also improved. Popular music sites like Kaazaa and Napster allow people to share music files stored on their computer. The dark side of this technology has resulted in hidden programs we unknowingly place on our computers.

Another vein of software development was designed to help parents monitor their children’s computer activities and employers keep an eye on workers. These “key logging” programs allow a parent or employer to create a log file capturing every key an unsuspecting child or employee presses. While the latter smacks of Big Brother, it barely holds a candle to the companies that surreptitiously push these logging programs onto unsuspecting browsers visiting their sites.

Even legitimate businesses collect information about actual and potential customers. Many companies publish privacy policies and inform users what information they’re collecting. Even though users may be aware they’re agreeing to share information with legitimate companies, they have little or no control over the scope of information being shared.

The nastiest type of spy ware not only places itself on your computer but also monitors your activities and sends information to spy ware developers or allows them to collect information about you to sell elsewhere.

So, you ask, isn’t this illegal? In short, no. While you may consider it an invasion of privacy, there’s no violation of rules. More important is what you can do to protect yourself and your computer.

De-e-e-fense!

The first line of defense is antivirus software. The most damage can be inflicted through evil attachments to e-mail. Some such rogues travel the internet as popups on websites. When you regularly update antivirus definitions and scan your computer, you are protected from the most serious electronic rogues.

If your computer or office has an “always on” internet connection either through a cable or DSL modem, you also should have a firewall between the modem and the network or computers. It’s preferable to have a hardware firewall, but for home or small offices a software based firewall like Zone Alarms is sufficient protection against hackers. These firewalls also can limit the amount of spam and unsolicited e-mail. Products like McAfee’s Spam Killer, which can be bought along with its Internet Security for Windows, will provide antivirus, firewall and other privacy protection, including spy ware and ad ware defenses. Similarly, Norton AntiSpam 2004 can be combined with Norton Internet Security to provide similar protection, as well as parental controls.

Larger offices are better off with a hardware firewall and a corporate version of antivirus software that will automatically transfer updated definitions to all networked computers. Be aware that older antivirus products don’t protect against ad ware or spy ware — they don’t consider these pests to be worms or viruses.

Even with such safeguards, spy ware and ad ware can invade your computer. Ad ware is especially annoying when popup ads appear before you can even view the site you accessed. Some companies provide “free” software in exchange for advertising on your computer while others pay royalties to website owners to reach their viewers.

Spy ware sends information about you to another party without your knowledge or permission. Usually, this information includes what websites you have visited, but can include more if the spy ware comes from a more unscrupulous source. These vendors entice unsuspecting people into saying yes to receive their programs by answering innocuous questions. Once these programs are installed on your computer, they monitor your activities and can change your settings.

Sometimes, you’ll know you’ve been hit by spy ware because your internet browser no longer opens to your homepage or you get a look-alike site when you try to access Google. I’ve seen computers slow to a crawl from some spy ware variants. Worse, these programs can destroy files needed to start Windows, thereby completely disabling your system.

Prevention

It seems impossible to completely protect yourself from these parasites. However, there are ways to fend them off or regularly eliminate them. The best way is to prevent spy ware from being installed on your computer. It’s usually installed surreptitiously by either tricking you into clicking on a link that installs it or by riding along with free software. Links to spy ware can be deceptive. It might look like a Windows installation screen, but it takes hold when you press the Cancel key. (I told you they were tricky!) Another gimmick is to change the title bar on the dialog windows to make you think you’re doing something else. Once installed, your computer is compromised and is vulnerable to sending information about you and your computer activities.

So, after you’ve installed an up-to-date antivirus program and scan your computer regularly, pay more attention while you work — don’t just click on the Yes or OK button without carefully reading the details or knowing why you’re agreeing to install a product. Read the license agreements carefully, especially when obtaining free software. Check the publisher’s website to determine if it looks legitimate. When I encounter a hijacked internet browser, I often do a Google search on the name of the site it’s showing instead of the desired one. For example, if your web browser is open to The New York Times website and you suddenly see “XYZ Site,” search for that site along with the word “removal” and you probably will be guided to instructions for eliminating that menace.

Installing reputable programs like Spybot or Ad ware and running them regularly will enable you to eliminate these rogues. In fact, if you find your computer “possessed,” often scanning with Spybot and eliminating the files it identifies solves most problems. There are commercial versions of these for office environments.

Another defense is to avoid unintentionally installing ad ware or software. If you weren’t planning to install a program from Microsoft and get a dialog box asking you to do so, don’t do it! If you use Windows XP, you’ll want to update your computer with the latest service pack (SP2), which also builds in protections against spy ware.

There are some settings within your browser that should be disabled so you are prompted when a program is attempting to be installed. As a rule, it is recommended you disable Java, JavaScript and ActiveX controls. (See microsoft.com/office/ork/2003/seven/ch23/SecA05.htm at the Microsoft site for more details and specific instructions.) Recently, the Department of Homeland Security recommended avoiding using Microsoft’s Internet Explorer because of its vulnerabilities. (See uscert.gov/.) There are free alternatives such as Netscape and Mozilla, which are less susceptible to infiltration.

Unfortunately, spy ware and virus writers are always one or two steps ahead of our protections, so stay diligent and remember to regularly back up your system — just in case.

Carol L. Schlein is president of Law Office Systems in Montclair, a training and consulting firm specializing in law firm automation. Copies of previous columns are on her company website, www.losinc.com. For information about her quarterly meetings for Time Matters users, check the website or e-mail info@losinc.com. Schlein formerly chaired the Computer and Technology Division of the ABA Law Practice Management Section.

Questions for Carol L. Schlein on law office technology may be faxed to New Jersey Lawyer at (732) 650-7010, e-mailed to news@njlnews.com or mailed to “Law Technology Questions,” New Jersey Lawyer, Edison Square, 2035 Lincoln Highway, Suite 3005, Edison, N.J. 08817.




Law Office Systems, Inc.

168 Midland Avenue
Montclair, NJ 07042
Phone: 973.746.6454
Fax: 973.509.9066
E-mail: carol@losinc.com
 

Copyright © 2000-, Law Office Systems, Inc., Montclair, New Jersey
Consulting, Training , Automating Law Firms & Small Businesses, Customization, Integration, Implementation Assistance, Personal Computer-Based Software, Hardware & Software Evaluation, Time Matters, Billing Matters, Training Classes, Worldox, Vendor Equipment, Network Proposals, Customization Packages, Training Materials, Installation, Timeslips, Training Manuals, Quick Reference Card, Reference Guide, Adjournment System
Web site by Consultwebs.com, Inc, specializing in Web sites for lawyers.