1. Spybot-S&D Course: 60-564 Fall 2004 Presented By: Ataul Bari Instructor: Dr. A. K. Aggarwal

2. Agenda Agenda  Introduction  Download and Installation  The First Run  Exploring Spybot-S&D  Closing Remarks

3. Introduction  Spyware is rampant in the Internet  Spyware  Relatively new kind of threat Relatively new kind of threat  Program that surreptitiously monitors an Internet user’s actions Program that surreptitiously monitors an Internet user’s actions  Gather or helps to gather information about a person or organization without their knowledge  Gather information about the user and relay it to advertisers or other interested parties

4. Introduction (Cont’d..)  Spyware  Currently, just about every Internet user has had to deal with the spyware  Poses serious security and privacy risk  Degrades system performance  By stealing the computer's memory resources  By eating bandwidth, as it sends information back to the spyware's home base

5. Introduction (Cont’d..)  Spybot-S&D  Spybot - Search & Destroy by PepiMK S/W  According to the PC World & Download.com, the best privacy software available According to the PC World & Download.com, the best privacy software available  Free to download from the Internet Free to download from the Internet  Detects and removes: Detects and removes:  Adware and Spyware Adware and Spyware  Dialers Dialers  Keyloggers Keyloggers  Trojans and other baddies Trojans and other baddies  Usage tracks Usage tracks

6. Introduction (Cont’d..)  Permanent blocking: Permanent blocking:  Threatening ActiveX downloads Threatening ActiveX downloads  Known tracking cookies for IE Known tracking cookies for IE  Threatening downloads in IE Threatening downloads in IE  Fix some registry inconsistencies Fix some registry inconsistencies  Provide extended reports Provide extended reports  Provide e-mail list of opt-out addresses (to stop unwanted solicitations) Provide e-mail list of opt-out addresses (to stop unwanted solicitations)  Provide file shredder to securely overwrite unwanted files deleted from PC Provide file shredder to securely overwrite unwanted files deleted from PC

7. Introduction (Cont’d..)  OS support

8. Introduction (Cont’d..)  Features

9. Introduction (Cont’d..)  Languages

10. Download & Installation  Download  Freeware  Donation appreciated  Download link:  http://www.safer-networking.org/en/download/index.html  Current version: Spybot S&D 1.3  Downloaded file name: spybotsd13.exe  Downloaded file size: 4.15 MB

11. Download & Installation (Cont’d..)  Installation  Run spybotsd13.exe  Select setup language  Decide on the options e.g. additional languages, skins to change appearance, permanent protection.  Creates a program group and desktop icon  By default, activates resident tools (SD helper, TeaTimer)

12. The First Run  The First run provides options for:  Creates registry backups  Search for updates  Download available updates  Immunize the system  Read tutorial  Read help files  Start using the system

13. The First Run

14. Exploring Spybot-S&D  System used  PC  Windows XP  Connected to Internet

15. Exploring Spybot-S&D  Scanning the system

16. Exploring Spybot-S&D Cont’d  Fixing the problem

17. Exploring Spybot-S&D Cont’d

18. Exploring Spybot-S&D (Cont’d..)  Recovery

19. Exploring Spybot-S&D (Cont’d..)  Immunize

20. Exploring Spybot-S&D (Cont’d..)  Online Update

21. Exploring Spybot-S&D (Cont’d..)  Advance mode - settings

22. Exploring Spybot-S&D (Cont’d..)  File sets

23. Exploring Spybot-S&D (Cont’d..)

24.  Scheduler Exploring Spybot-S&D (Cont’d..)

25.  Skins

26. Exploring Spybot-S&D (Cont’d..)  Ignore products

27. Exploring Spybot-S&D (Cont’d..)  Ignore cookies

28. Exploring Spybot-S&D (Cont’d..)  Tools

29. Exploring Spybot-S&D (Cont’d..)  Secure Shedder

30. Exploring Spybot-S&D (Cont’d..)  Resident

31. Exploring Spybot-S&D (Cont’d..)  IE tweaks

32. Exploring Spybot-S&D (Cont’d..)  ActiveX

33. Exploring Spybot-S&D (Cont’d..)  BHOs

34. Exploring Spybot-S&D (Cont’d..)  Browser Pages

35. Exploring Spybot-S&D (Cont’d..)  Host Files

36. Exploring Spybot-S&D (Cont’d..)  Opt Out

37. Exploring Spybot-S&D (Cont’d..)  Process List

38. Exploring Spybot-S&D (Cont’d..)  System Internals

39. Exploring Spybot-S&D (Cont’d..)  System Startup

40. Exploring Spybot-S&D (Cont’d..)  Winsock LSPs

41. Exploring Spybot-S&D (Cont’d..)  Statistics

42. Closing Remarks  Free, no e-mail address required  Easy to use interface  Detect other anti-spyware programs installed in the system, warns for possible false-positive results by them  Online support not the best, no network version  Thank You  Questions ?

43. References  http://www.pluck.com/noadware.aspx  http://www.reach.ucf.edu/~coursdev/cdrom/html/help/glossary.html  http://www.safer-networking.org/en/features/index.html  http://www.safer-networking.org/en/paragraphs/spybotsd_ossupport.html  Spybot-S&D Integrated Help files  http://www.spybot.info/en/donations/index.html  http://www.webopedia.com/TERM/S/spyware.html