Home > Security Tips > Threat Monitor > End user's spyware prevention checklist
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

THREAT MONITOR

End user's spyware prevention checklist


Joel Dubin
09.13.2005
Rating: -4.67- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Here are some tips for safe Web surfing to pass along to your employees for preventing spyware from entering your company's network. (Download and print the PDF.)

  • Never deliberately download software to your workstation or desktop from the Internet, no matter how helpful or interesting it may appear. Even innocuous toolbars and nifty utilities can be packed with unwanted spyware. Be especially wary of file-sharing programs, which you shouldn't be using in the office anyways.

  • Stay away from any questionable sites, including pornography, gambling, hacking or other off-beat sites. But you shouldn't be, in any case, visiting these types of sites at work either. At most companies, you could be terminated for doing so.

  • Whenever an unwanted or unexpected pop-window appears, shut it down immediately by clicking on the "x" in the upper right hand corner of the window. Never click on any button, even if it says "Cancel" or "Close" on the window itself. These buttons can masquerade as innocent features that inadvertently start an unwanted download of spyware.

  • Be suspicious if endless pop-up windows start opening simultaneously, or if the performance of your workstation turns into a crawl. Assume that you've been hit by spyware and seek assistance from the Help Desk.

  • If you're using Internet Explorer as your browser, change its settings to block Active X objects. Go to Tools > Internet Options > Security > Custom Level. There is a section near the top of the dialogue box devoted to Active X controls. At the very least, disable downloading of both signed and unsigned Active X controls and those marked as unsafe. Some Active X objects are spyware. This will block them.

  • If you're workstation is running Windows XP SP2, then turn on the pop-up blocker feature in Internet Explorer and activate the firewall now bundled as part of SP2. The pop-blocker is listed under Tools in Internet Explorer's menu bar, and the firewall can be turned on from the Windows Firewall icon in Control Panel. These actions won't stop spyware altogether, but they can help.


MORE INFORMATION:

  • Learn how to educate employees about spyware.
  • Take our quiz to find out if spyware is getting the best of you.
  • Get more tips and expert advice on preventing and cleaning up spyware.


    About the author
    Joel Dubin is an independent computer security consultant based in Chicago. He specializes in Web and application security and is the author of the recently released book
    The Little Black Book of Computer Security available from Amazon.


    Rate this Tip
    To rate tips, you must be a member of SearchSecurity.com.
    Register now to start rating these tips. Log in if you are already a member.




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Threat Monitor
    Tracing malware's steps with RE:Trace
    Worst practices: Learning from bad security tips
    Worst practices: Encryption conniptions
    Stopping malware in its tracks
    Built-in Windows commands to determine if a system has been hacked
    Exploit research: Keeping tabs on the hacker underground
    Data loss prevention from the inside out
    Enterprise security in 2008: Malware trends suggest new twists on old tricks
    Thinking fast-flux: New bait for advanced phishing tactics
    Lessons learned from TJX: Best practices for enterprise wireless encryption

    Web Security Advisor
    PCI compliance and Web applications: Code review or firewalls?
    Worst practices: Security incidents to avoid
    Web scanning and reporting best practices
    Social networking Web site threats manageable with good enterprise policy
    Enterprise security in 2008: Building trust into the application development process
    PCI DSS Section 6: A plan for tackling application security
    Making the case for Web application vulnerability scanners
    Preparing for uniform resource identifier (URI) exploits
    How to avoid dangling pointers: Tiny programming errors leave serious security vulnerabilities
    Java security: Is it getting worse?

    Spyware, Adware and Trojans
    Yahoo, McAfee to warn users of dangerous websites
    Botnets and ethics
    Trojan downloaders, droppers skyrocket, Microsoft says
    Kraken botnet balloons to dangerous levels
    New Storm attack exploits April Fool's Day
    Panda latest AV firm trying to adapt with the times
    PDF spam reemerges in some inboxes
    Trojan toolkit infected 10,000 Web sites in December
    New rootkit threatens Windows users
    Spam continues surge as spammers become clever in '07
    Spyware, Adware and Trojans Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    barnacle  (SearchSecurity.com)
    botnet  (SearchSecurity.com)
    browser hijacker  (SearchSecurity.com)
    crimeware  (SearchSecurity.com)
    DSO exploit  (SearchSecurity.com)
    government Trojan  (SearchSecurity.com)
    I-SPY Act  (SearchSecurity.com)
    keylogger  (SearchSecurity.com)
    PUP  (SearchSecurity.com)
    talking Trojan  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

  • TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineWebcastsWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts