The differences between adware, spyware, viruses and hijackware.

Viruses, adware, spyware and malware. 

Those terms can be confusing at times and even mind boggling when purchasing a product to remove malicious code from your computer. 

So what's the difference? And does it really matter?

Let's get down to what each does and how they work, then determine how to remove them.

Adware: Adware in itself is typically not harmful. In a broad sense it's the annoying pop-up ads. Adware often is bundled with free software downloaded from the internet and there's usually an option to opt out of the adware during the installation after the user accepts the EULA. (You know...the small print nobody ever reads while installing software)

An EULA which includes accepting the toolbar and advertisements/pop-ups before installing the software.

Adware is not malicious, and it does not spread to other computers/systems, however it can be annoying and sometime aggravating especially when you are unable to close the advertisement/pop-up window. 

Spyware: Spyware is any code written specifically to gather information and data about a person without their knowledge. That data can be anything from web surfing habits, pages which they visit, login information, banking websites, credit card information, and personal information.. Spyware can be deemed even worse than viruses as it is aimed to obtain personal information which can be used for identify theft. As more people or using online banking and email using spyware to gather personal information is a real concern.

Malwarebytes scan resuts of spyware

Spyware may be installed by clicking on an option in a pop-up or as a "drive by download".

Viruses: 

Malicious code that causes havoc on one system, then spreads to another. The code is written to duplicate itself either in the boot sector of the hard drive, in a program, or by email. Viruses can be activated by opening a certain program or lay dormant and activated on a certain date.A virus that spreads itself by a network message or email attachment are known as "worms".

Hijackware:

Hijackware is software that essentially takes over your browser in order to display a pop-up that advises the user their system is infected with a virus. It redirects the user to spam laden websites to download bogus antivirus software, when in fact the user is actually downloading spyware/viruses.

Hijackware popup

Hijackware may change the browser settings, such as the homepage, add a different search engine, add extra unwanted toolbars and change or add bookmarks.
Hijackware usually comes bundles within free software. Once the user installs the free software the hijackware is activated with it.

Antivirus Security Pro is an example of hijackware presenting itself as authentic "antivirus software". 

My next post will explain what types of software to use to remove viruses, spyware and malware in general.

Orig posted 1/11/16

Tech News: FBI warns ransomware threatens healthcare sector

The FBI, Cybersecurity and Infrastructure Security Agency (CISA), and US-CERT (Computer Emergency Readiness Team.... a branch of Homeland Security) issued a joint alert which stated they had credible information of "an increased and imminent cybercrime to US hospitals and healthcare providers".

The alert stated malicious groups are targeting the public healthcare sector with the purpose of "data theft and disruption of healthcare services".

Ransomware is an specific attack on systems, servers and networks to scramble data and to literally hijack the data until the clients pay up. It may be found on personal PCs as an individual pop-up stating your computer has been infected and to "click here" to remove the infected file. 

However the moment you click on the pop up, a file lurking in the background starts scrambling and locking your data. The pop-up then gives you a notice to contact a phone number to remove the so called "infected" files..... which in reality your paying for tech support to unlock your files...... it's a very evil scheme.

Since the early 2000s, groups have been deviating from private individuals to targeting larger corporations for bigger pay. Major corporations (Norsk-Hydro/Lockergoga in 2019) and entire city governments (Atlanta/SamSam in 2019) have been attacked by ransomware.

A total of 59 U.S. health care providers or systems have been impacted by ransomware in 2020, disrupting patient care at up to 510 facilities.

The alert was posted so healthcare providers, IT and network administrators, can take necessary steps to protect their networks from such attacks.

How to: Removing malware, viruses and spyware

Often malware, the overall term for any virus, worms, spyware, and adware, is installed and can infect a users system without their knowledge. By the time it's realized a system is infected, a system can have constant pop-ups, is slowed to a crawl when accessing files, unable to access or even leave specific web pages, or worse... you're not even able to access the internet at all.

The steps in removing malware are standard throughout the computer industry.

1. Enter Safe Mode
On a Windows system, Safe Mode is a diagnostic tool that includes only the minimum drivers needed to boot your system safely to the desktop without any settings or problematic software interfering. Once there, you can troubleshoot further, to eliminate the problem and boot the system normally again.

The following steps apply for Windows XP through Windows 8. If you have a Windows 10 machine, check out the PC Worlds' video how to enter Safe Mode here.

   a. Turn on (or reboot) your computer.
   You can find Safe Mode in your Advanced Boot Options menu.
   b. Wait for the computer to initialize the hardware and prepare to load the operating system.
   c. Press and hold the F8 key while you wait for the Windows logo to appear. if the Windows logo appears or if the operating system begins to load, you may need to restart the computer and try again.
   d.The Advanced Boot Options screen for Windows will appear. Use the arrow keys on your keyboard to select Safe Mode, and press Return.
   e. If you need access to the Internet or network while in Safe Mode, select Safe Mode with Networking.
   f. Windows will boot into Safe Mode. When the desktop appears, it will display 'Safe Mode' in all four corners to let you know that you're in this special mode.

For Windows 10 getting to Safe Mode is a little different. Check out PC Worlds' video here.

Once you're in Safe Mode, you may find that Windows runs faster. This is usually a good indication that your system has some sort of malware or just alot of programs which are supposed to run in the background at startup.

2. Delete/Remove Temporary files
Before conducting a virus scan you'll want to remove temporary files. Doing this will speed up the scan of the antivirus software. To use the Disk Cleanup utility included with Windows, enter diskcleanup in the search bar at the Start Menu, or select Start, Programs, Accessories, System Tools, Disk Cleanup.

3. Download and install Antispyware/Antivirus software.
It's first recommended to install and run a program to remove spyware and adware first. A good tool for the job is Malwarebytes or Spybot Search & Destroy.

Then scan for antiviruses. There are a number of antivirus/antivirus software which come bundles with both antivirus, anti spyware that also scan for the entire malware spectrum. These commercial products such as Symantec or McAfee are known as 'End Point" software, are very reliable when detecting threats. Avg, Panda, and Kaspersky also provide well known products for removing viruses & spyware. The products come with a yearly subscription, however most of the companies offer a limited free version which scans for viruses only.

 Which provides the best protection? That my friends depends on who you ask. There are dozens of reviews on the internet. Just Google "Symantec vs Mcafee" ad you'll get a host of reviews comparing the two. CNET, PCworld and Techradar have some thorough reviews on antivirus/antispyware packages.

Whichever products you use, it's safe to say it's worth it to have your system stay clean and protected.

How to: Hijackware - how to remove it

Hijackware

It's a term used for the nastiest and cruelest type of

 malware program. It alters your computer's browser settings so that 

you are redirected to Web sites that you had no intention of visiting. 


Sometimes it will appear that you have a virus, however your system is actually 
clean.
This threat shows up in the form of ‘Fake’ antivirus software and you won't be able to 
remove it until you click the link and download the product.

Hijackware advertisement

“Fake Antivirus” software is somewhat difficult to remove, but it can be done.

Here are the steps I recommend.

1. First boot into Safe Mode Using Network Connection (CTL-F8). this will 

prevent

 background processes from starting keep the adware/hijack ware from starting as 

well.

2. Get online and download and install 

MALWAREBYTES from WWW.Malwarebytes.org OR

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button

This is a very good anti-spyware/malware program which will remove the 

hijackware from your hard drive directory as well as remove the entries from the 

registry.

3. Install the Malwarebytes program and run a FULL system scan. (the average 

time takes 20-40 min depending on your system)

4. After the scan has finished, click "Show Results", then click "Remove Selected"

5. After you have removed the hijackware, you'll have to restart you computer. 

Afterwards I would recommend downloading and installing AVG, Avira or another 

Antivirus software as well.

How to: Whats the best software to remove adware, spyware and malware?

So you're surfing the internet, but you constantly are getting these annoying pop-ups to buy the latest free antivirus. You simply close the pop-up and continue on.
Or your computer seems t be running slow even after you cleaned out the trash folder and the hard drive appears to be very busy accessing files.

Or you're on Youtube and you get a pop-up which informs you that your Java needs to be updated. You try to close the pop-up but are unable to. You actually have close and restart your browser!

Three different scenarios typically caused by three separate malicious programs. To remove the unwanted programs, lets go over what each program actually does.

Adware is any software that, once installed on your computer, tracks your internet browsing habits and sends you popups containing advertisements related to the sites and topics you've visited. While this type of software may sound innocent, and even helpful, it consumes and slows down your computer's processor and internet connection speed. 

Spyware - Once installed on a system they run in background and keep on collecting user’s personal data. These data can include your credit card numbers, passwords, important files and many other personal stuff. CoolWebSearch is an example of spyware and is noted by Webroot as the most dangerous programs involving spyware.

Malware is short for malicious software. Malware is a pretty broad term that encompasses computer viruses, worms, 'Trojan horses', and others. Malware is designed to interfere with normal computer operation, usually giving hackers a chance to gain access to your computer. The Mydoom virus of 2004 was noted as the fastest attack of malware ever seen creating havoc across over 1 million computers around the world..

Windows Defender used to be a recommended program for removing adware and spyware. If you're running a Windows machine running Vista or later it comes pre installed. However it's lost out to other third party vendors as it does not offer the strong protection and is not as thorough as it used to be. So which security suite is recommended?

Top brands for antivirus / antispyware are Trend Mico, AVG, Symantec Norton, Panda or Mcafee.

Others not so well known are Bitdefender, Avira, Kapersky Lab and F-Secure.

Definition File
Any antivirus/antispyware depend on whats called a 'definition' file. This file essentially contains a list of virus signatures which have been caught on the internet. 

This list is then used by the software. Its important that the definition file is updated on daily basis. Most antivirus / antispyware software have this done automatically.

Whats the best one?
Two major independent firms test antivirus / antispyware to see where they stand against attacks and threats and how well they protect your system. AV Comparatives is one of the companies which puts each program through a battery of tests.

AV-test.org stress-tested these suites between September 2013 and February 2014. Here’s the virus detection rate of all of the suites. Larger numbers are better

Out of the 9 Antivirus/Antispyware programs Bitdefender, Kaspersky and Trend Micro all ranked the highest in protecting your system. Most of these companies release free or trial versions of their antivirus / antispyware programs. 

It's no guarantee that any of the programs that have performed well n the past will continue to do so, but one thing is sure......that viruses and spyware will continue to infiltrate the internet and attack computers worldwide, so it's best to have your computer protected and secure.