OIT looks to fight spyware

OIT is evaluating commercial spyware-blocking products in an effort to rid computers on campus of spyware — unintentionally downloaded software that is often responsible for pop-ups and computer crashes.

"We'd like to have a product that will enable us to buy a copy of anti-spyware for every Windows user in the University," OIT security officer Anthony Scaturro said. "Rather than have each computer user sign for a subscription service, the vendor would send us an up-to-date version. Then, our central server would know and alert us to get new spyware definitions."

OIT began researching corporate versions of spyware programs in November for the purpose of installing a network-wide program like Symantec Antivirus.

The term "adware" describes legal programs that users have consented — even if unknowingly — to having on their computer. "Spyware" refers to programs that install themselves without a user's permission. Both kinds of software can slow Internet connections, generate pop-ups and send information about the user back to a company.

"For the most part, the system performance deteriorates when spyware or adware is put on them. They profile users and give that information out to marketing firms so they can target their advertising," Scaturro said.

About 20 people per day are blocked from the University network because their computers are infected with spyware and viruses, said OIT helpdesk employee Joseph Kovba '07.

"If we disallow a computer access to the network, it can't connect to UNIX, can't access the H drive. [This is because] spyware products try to infect other systems in the network," he said. "The new OIT policy is that the hard drive has to be reformatted before coming onto the network."

Several free spyware removal programs, such as Spybot Search & Destroy and Spyware Blaster, are available on the Internet. However, they are only available to individual users and not for large organizations.

"The anti-spyware world is kind of immature at this point, especially in a corporate environment," Scaturro said. "What we've been looking at are brand new products that are more corporate in nature, meaning we can manage them from OIT."

OIT has been testing a variety of products including Webroot Spy Sweeper, SpyPatrol, CounterSpy and Microsoft Windows Anti-SpyWare. While the Microsoft software works well and is available for download by individual users, Scaturro noted that Microsoft has not reached a decision over whether to make a corporate edition of the product.

"They won't even have an answer for a few months as to what their plan is, and what they will charge," Scaturro said.

For students who want to solve their spyware problems immediately, Scaturro recommended downloading the Microsoft beta program from the Microsoft website in conjunction with other anti-spyware programs.