Spyware

System administrators are keenly aware that running their desktops while being logged on as an administrator can cause serious security problems. Because administrators have total system authority, any program beginning under this account can perform almost any activity. Recently, spyware pushers have developed means of adding their covert programs to the Windows Firewall’s list of so-called trusted applications. Although trusted applications generally transmit traffic out from the said computer, adding a registry subkey that references the application under the subkey storing trusted applications works only if someone is logged in as an administrator. Administrative accounts should be using sparingly and with caution.

A white paper available from Symantec Security Response outlines various risks affiliated with spyware and adware, cites tests available for discovering spyware, and offers security strategies for dealing with these when discovered. The white paper is at http://enterprisesecurity .symantec.com/content.cfm?articleid=5667.

See Also: Electronic Mail or Email; Firewall; Symantec Corporation.