Keyloggers work in a different fashion. They typically record the keystrokes you make with your keyboard and periodically “phone home” with this information. This can include Web site URLs, usernames, and passwords. Armed with this information, the keylogger owner can access any information you enter into “protected” Web sites: your banking accounts, your brokerage accounts—in essence, any online activity you undertake.

Marketing spyware is designed to track your Web surfing activity and deliver ads targeted toward your activity profile. Although this doesn’t really have any direct negative effects, it’s still an intrusion into your online privacy. For example, searching online for a serious medical condition may reveal certain health issues that you would want to keep confidential.

Spyware isn’t restricted to computer programs written by stereotypical hackers. Mainstream companies have released some notable spyware applications, as well. For instance, a few years ago, Sony BMG distributed a rootkit on numerous music CDs that had deleterious effects on Windows computers. In addition, online mega-merchant Amazon.com is a prime backer behind the Alexa toolbar that many antispyware programs consider spyware.

Finally, the wave of identity theft can be partially traced to the increase in spyware infections. Armed with private data you’ve entrusted to your computer, it is relatively easy for someone to impersonate you. Recovering from this can be both time-consuming and costly.

Spyware by design prefers to be anonymous; it doesn’t do its makers much good if it’s easily detected. Despite this, numerous studies have reported incredible infection rates. For Windows users, the problem is particularly acute because Internet Explorer is so tightly integrated into the operating system. A common computer security adage is that if you haven’t been hacked yet, you probably have—you’re just unaware of it.

The Spread Of Spyware

By definition, spyware is installed without your permission. This can happen when you visit a Web site that issues you a tracking cookie designed to monitor your browsing activities. It can happen when you install software from a nonreputable site because the software may include a Trojan horse (applications that masquerade as legitimate software programs). It can occur if you give someone access to your computer without properly vetting them.

Many spyware programs are included with legitimate applications. When you install the legitimate program, a spyware program is also installed without your consent. This methodology is particularly problematic: Without knowing the details of each application you install, you’re vulnerable to a software developer taking advantage of your trusting nature.

Detect & Remove Spyware

Like termites chewing on your house, spyware silently compromises your confidential data. Even when you’ve decontaminated your computer, there’s no knowing how long you were infected, much less what was revealed. The best course is to avoid being infected in the first place.

Spyware is designed to function surreptitiously, so it’s no surprise that detecting its presence can be a challenge. The symptoms you may experience range from unexpected pop-up advertisements to a sluggishly performing computer. Many users attribute performance problems as a general issue with Windows, when in reality, it’s a spyware program using up system resources.

Step one in securing your computer from spyware is keeping your operating system up-to-date. This means configuring Windows to automatically download and install updates. In Windows Vista, click Start, open the Control Panel, and select Security. Under Windows Update, select Turn Automatic Updating On Or Off to configure the settings.

Next, make sure that Windows Defender is also enabled. This is an integral part of Vista's security. Designed to protect your computer from spyware and malware, Windows Defender is enabled by default. However, some spyware and viruses may attempt to disable it (and antivirus software). To access the settings, click Start, open the Control Panel, click Security, and select Windows Defender.

Finally, the simplest way of detecting and removing any spyware on your system is through the use of an antispyware utility. These utilities are similar to antivirus software and perform a minimum of two functions: preventing the installation of spyware and removing any existing spyware. These utilities are an essential weapon in your arsenal. Use them consistently to protect your computer. For an antispyware software overview, see “Avoid Virtual Spies” on page 66.

Big Brother Is Watching

The idea that a third party is using your computer to watch your every step is a chilling one. As is the idea that otherwise reputable companies are participating in spreading this type of software. We trust our computers to do what we tell them; unfortunately, they often receive mixed messages from the applications we knowingly install, as well as applications that install themselves surreptitiously.

It can be challenging to keep your computer safe from these digital spies, but the alternative is revealing more of your private information than is prudent. And with most computers being connected in some fashion to the Internet, it’s far too easy for your computer to betray your trust at the most inopportune moment.

Yet by understanding the threat posed by spyware, as well as following our recommendations for preventing spyware from infesting your computer, you’ll be able to make sound choices about what applications to install, which Web sites to visit, and how to take action when a rogue software application slips through your defenses.

by Chris Jackson