Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

Spyware and Adware Protection

Attack ID: CPAI-2004-70
Publish Date:
Category: Spyware/Adware
Vulnerable Systems: Windows machines
Source:

Zone Labs
Description:

Spyware, which includes malware, trackware and adware, refers to any application that may track a user's online and/or offline PC activity and is capable of locally saving or transmitting those findings for third parties with or without the user's knowledge or permission.

Spyware can compromise network and data security, corporate assets and trade secrets, as well as steal identity and private information. Spyware may also lead to system crashes and/or slower performance as a result of computer resource and bandwidth consumption.

Severity:
Details: The following Adware/Spyware have been blocked by SmartDefense:
MyWeb Search
Atwola
ClickSpring/Purity Scan
18p Solutions
Google Desktop Search
MarketScore
WhenU
Iwon-Fun web Products
ISTBar/Aupdate
TopRebates
TopMoxie
TargetSaver
WildTangent
AltNet Peer Point Manager
MySearch
Grokster Ads
In addition, Check Point has provided protection against Gator in May 2003. Read CPAI-2003-16 for more information.
Attack Detection:

Using SmartView Tracker, users of VPN-1 NG with Application Intelligence R54, R55, R55W and InterSpect who have performed the Update outlined below, will be able to identify this attack by the following logging entries:

Resource: http://for.example.com
Attack Info: HTTP Header filter matched: MyWeb Search
Solution:

Users of VPN-1 NG with Application Intelligence R55 and InterSpect should update their SmartDefense by clicking the Update Now button on the SmartDefense SmartDashboard General window.

Users of VPN-1 NG with Application Intelligence R55W should update their SmartDefense by clicking the Online Update button on the SmartDefense SmartDashboard General window. 

To enable the protection (R54, R55, InterSpect):

  1. On the SmartDefense navigation tree, select Application Intelligence > Web> HTTP Protocol Inspection>Peer to Peer.
  2. Enable MyWeb Search, Atwola, Purity Scan, 180 Solutions, WhenU, Iwon-Fun web Products, ISTBar, TopRebates, TopMoxie, Target Saver, WildTangent, AltNet Peer Point Manager, MySearch, Grokster Ads.
  3. Install policy on all modules.

    To enable the protection (R55W):     
  1. On the Web Intelligence navigation tree, select HTTP Protocol Inspection > Header Rejection.
  2. Enable MyWeb Search, Atwola, Purity Scan, 180 Solutions, WhenU, Iwon-Fun web Products, ISTBar, TopRebates, TopMoxie, Target Saver, WildTangent, AltNet Peer Point Manager, MySearch, Grokster Ads.



  3. Install policy on all modules.
Industry Reference:
Additional Information:

Webroot Top Spyware Threats