Finding and Snuffing Out Spyware

By Wayne Rash
Special to The Washington Post
Sunday, December 19, 2004; Page F07

A fast Internet connection -- even a not-so-fast one -- can bog down a Windows computer in a hurry. Combine enough surfing time with out-of-date software or inattention to security, and a PC can quickly grow encrusted with spyware.

Too many users have found this out, but the problem doesn't seem to be getting any better. Spyware is a generic name for software installed without notice -- either by other programs' setup routines or by hostile Web sites that exploit flaws in Microsoft's Internet Explorer browser. (Spyware has been absent so far on Mac and Linux computers.)

Once up and running, these programs quietly go about their mischief -- unleashing a flurry of unsolicited pop-up ads or, at worst, collecting sensitive data such as user names, passwords and credit card numbers and forwarding them to third parties.

Many of these programs also tinker with system settings to hide their presence, so many users learn of a spyware problem only when they notice their computer slowing down.

What's the best remedy? We tried five popular anti-spyware utilities, three free and two that sell for $30.

Lavasoft's free Ad-Aware SE Personal (Win 98 or newer, http://www.lavasoftusa.com/) has been one of the most widely used spyware fixes. It's not the fastest, but it's reasonably simple and it removes spyware applications reliably. (Commercial versions of Ad-Aware don't offer additional anti-spyware capabilities.)

But, like many tools in this category, Ad-Aware can lead beginners astray by treating "tracking cookies" -- small text files placed on computers by Web ad networks -- as a threat on a par with actual spyware programs. They're not.

Many users' second choice is Spybot Search & Destroy (Win 95 or newer, http://www.safer-networking.org/), another free program -- a donation is requested but not required -- that takes a more inclusive approach to spyware protection. It overlaps some features of antivirus software, policing Trojan horses (dangerous programs disguised as legitimate software) and other types of malicious code in addition to spyware and tracking cookies. (Spybot is even less helpful than Ad-Aware about the relative threat of tracking cookies.)

A third free option for spyware detection and removal comes via Yahoo's Toolbar add-on to Internet Explorer (Win 98 or newer, toolbar.yahoo.com), which includes a utility called Anti-Spy. This ran much faster than others but missed a few spyware items located by other programs -- while also finding some that its competition had overlooked.

(Note: Never use a free anti-spyware program advertised via junk e-mail or a pop-up ad, lest you wind up only collecting more spyware.)

The leading commercial choice is McAfee's AntiSpyware (Win 98 or newer, http://www.mcafee.com/), a $30 utility often bundled with McAfee's other security programs. Another widely used program, Intermute's SpySubtract (Win 98 SE or newer, http://www.intermute.com/) costs $30 as well.

The price you pay for these programs mainly buys you speed -- both McAfee AntiSpyware and SpySubtract ran about twice as fast as the free programs, with McAfee the slightly faster of the two.

These commercial releases also tend to provide more information, more control and more ways to fine-tune their behavior. (SpySubtract, for example, includes a separate program, CWShredder, to combat a particularly vicious form of browser hijacking.) And McAfee and Intermute clearly distinguished between dangerous spyware and mere tracking cookies.

Paying for a program means you can call for help if you want to. But all of these programs, free or otherwise, offer automatic updates without any subscription charge.

Which to choose? Often, the answer will be "more than one." Start with either Ad-Aware or the Yahoo Toolbar, but add Spybot or one of the commercial products if the problem doesn't go away. Then again, if you're suffering repeat infections, you'd be better served by disciplining your downloads and upgrading your browser.

© 2004 The Washington Post Company