# Presentation: 778949

## Staying Safe on the Internet

**Staying Safe on the Internet**

- CSAD 200709/11/2007Joe Klemencic & Tim Rupp

**Notes:**
Look familiar?

## Slide 2

## Slide 3

## Slide 4

## Real world or Virtual world?

- Recorded shopping (SuperSaver cards...)
- Tracking cookies
- Upselling/Impulse Items/Suggestions
- Data mining, Popups, SPAM
- Peer Pressure
- user reviews, SPAM
- Double swipe of credit card/Discarded receipt
- Phishing, scams, vulnerabilities, keyboard loggers...

## Source: webroot.com

- ~20,000 enterprise machines queried

- >135,000 forms of Spyware detected by Spy Sweeper

- http://www.webroot.com/pdf/2006-q1-sos.pdf

## if INSTALL_BUTTON is clicked{

- 	install malware.exe
- }

- if NOTHANKS_BUTTON is clicked {
- 	install malware.exe anyway  // Bwhahaa!!!
- }

**Notes:**
Remember, the coder has control over the actions of a click! Are you sure nothing got installed when you clicked the No/Cancel button?

## Do you use any of these?

**Do you use any of these?**

**Fake Spyware Cleaners**
**	****    ***** Pest Trap ****    * SpyAxe ****    * AntiVirus Gold ****    * SpywareStrike ****    * Spyware Quake ****    * WorldAntiSpy ****    * Spylocked ****    * SysProtect ****    * Spy Sheriff ****    * Spy Wiper ****    * PAL Spyware Remover ****    * PSGuard ****    * Malware ****    * WinAntiVirus Pro 2006 ****    * WinFixer ****    * Spydawn ****    * ContraVirus ****    * UltimateCleaner ****    * MagicAntiSpy **

**Notable programs distributed with spyware ****    * Bonzi Buddy ****    * Dope Wars**
**    ***** ErrorGuard ****    * Grokster ****    * Kazaa ****    * Morpheus ****    * RadLight ****    * WeatherBug ****    * EDonkey2000 **

- Source: Wikipedia_[http://](http://en.wikipedia.org/wiki/Spyware)__[en.wikipedia.org/wiki/Spyware](http://en.wikipedia.org/wiki/Spyware)_

**Notes:**
You can also get Spyware/Malware from P2P programs, running unknown programs and installing these ‘Web Browser Enhancements’.

## Slide 9

## Cleanup and Prevention

## Slide 11

**Notes:**
You can also get infected via email attachments and following Phishing scam links.

## Slide 12

**Notes:**
Upgrade to XP SP2 and consider using alternate browsers.

## Slide 13

**Notes:**
Many different SpyWare removal tools. None are 100% effective, so try a few out.

## Don’t click on everything that pops up in front of you and READ the messages!!!

- If unsure, visit a different site.

**Notes:**
Dive into your browsers settings and configure the zones and other scripting handlers.

## Spyware and Phishing Resources

- Current Phishing Scams:
- 	_[http://www.antiphishing.org/](http://www.antiphishing.org/)_
- Spyware Discussions:
- 	_[http://](http://www.spywaremanagement.org/)__[www.spywaremanagement.org](http://www.spywaremanagement.org/)__[/](http://www.spywaremanagement.org/)__[http://](http://www.stopbadware.org/)__[www.stopbadware.org](http://www.stopbadware.org/)__[/](http://www.stopbadware.org/)_ _[http://](http://www.antispywarecoalition.org/)__[www.antispywarecoalition.org](http://www.antispywarecoalition.org/)__[/](http://www.antispywarecoalition.org/)_
- E-mail Hoax:
- 	_[http://hoaxbusters.ciac.org/](http://hoaxbusters.ciac.org/)_