Avoiding Spyware

Alternative browsers and defensive computing can help

Experts say that there's a lot you can do to avoid spyware in the first place, including using alternative browsers and practicing defensive computing.

Currently, most spyware and adware is written to exploit Internet Explorer. Because of that, experts say you can avoid the majority of spyware if you avoid Internet Explorer entirely and switch to an alternative web browser such as Firefox. But while switching might protect you for a while, as other browsers gain market share, spyware and adware writers will target them as well. See our report on web browsers for alternatives to Internet Explorer. If you prefer to stick with IE, make sure you are using the latest version with any current security patches.

Many anti-spyware programs don't work with Firefox. Although you can still scan your system, these spyware removers can't provide any real-time protection if you use an alternative browser.

Defensive computing can keep you safe from some spyware. Don't click inside pop-up windows, and always close them by using the "X" in the corner. If this does not work, close your browser and then reopen your browser. Deleting unsolicited e-mail messages without opening them will protect against most malware spread through e-mail. Read the EULA (end user license agreement) before you install software. When you click "I agree," you may be agreeing to install spyware with the software. Cookies can hold personal profiles and Internet browsing tracks. You can clear the cache (downloaded cookies) in Internet Explorer, but before you do, make sure you have your passwords handy, as you'll need to reenter them. Only download executable (*.exe) files from known and trustworthy websites.

Keep your operating system updated with the latest security patches and service packs. Use Microsoft's automatic updates for greater security. In Internet Explorer, make sure your security level is set to medium or higher. Lower settings allow spyware to enter your system's memory. Set your browser to deny installing Active X controls without asking permission.

Regularly back up your system, so you can reinstall your files in case a spyware invasion or crashes force you to reinstall your operating system. Be prepared with emergency disks or other system restoration tools.

Beware of fake anti-spyware programs

Some spyware masquerades as legitimate spyware-removal tools. Experts say you should never click on a pop-up or e-mail link that offers to scan your computer for viruses or spyware. While some of these are time-wasting marketing tools that will identify -- but not remove -- malware, others are spyware installers. A notable exception is Trend Micro, which offers a free web-based scan and removal program at Housecall.trendmicro.com. It scans for viruses and spyware. The program is slow, however. Experts recommend verifying any anti-spyware product at sites like SpywareWarrior.com or 2-Spyware.com, which maintain a list of legitimate anti-spyware software.

Experts say that there are more than 200 spyware programs masquerading as anti-spyware, and more are appearing all of the time. Many of them have names that are similar to top-rated spyware removers, aiming to confuse potential victims. Some examples of these anti-anti-spyware programs (according to SpywareWarrior) are SpyKiller and InternetShield, both of which have already been subject to prosecution. Others include SpyEliminator, Ad-Eliminator, Doctor Adware Pro and Elimiware.