The Spyware Information Center serves as a rich, up-to-minute resource, containing information on latest spyware and malware provided by the ZoneAlarm Security Research Team. The team is constantly identifying new spyware, adware, and other potentially unwanted software by monitoring the latest security threat trends 24 hours, 365 days a year, and updating detections to protect systems immediately.
Adware or Ad ware
A program that displays pop-up ads, or links to advertising sites while you are using your computer. Ads are displayed based on your browsing habits, or just randomly displayed. Adware programs may also collect and send information about your browsing habits back to their controlling servers, possibly including personal information that is used to make a profile of your browsing habits. Adware is often bundled with freeware.
Browser Plugin
A program that runs when your web browser is in use, and changes your browser settings. This includes changing your home page, re-routing your searches through a specific site, adding a toolbar to your browser, hiding regular toolbars, adding items to your favorites list, blocking access to specific sites, displaying ads (either pop-ups or in your search results), and re-route your error pages.
Cookie
A file sent by a web site and stored in your browser. Typically, cookies store your preferences and login information, and are used by any web site that you access. In these cases, the cookie is sent back to the website's server when you access the web site. There are two types of cookies; persistent and session. Tracking cookies may be sent by a 3rd party web site.
Commercial Remote Access Tools
Commercial Remote Access Tools are commercially developed programs that are often used for legitimate remote administration as well as malicious purposes. It allows a remote user to access and control a remote computer. Many trojans are CRATs that allow a remote user to secretly access and use your computer. Once the CRAT is running and your computer is connected to the internet, the CRAT notifies the remote user.
Dialer
A program that re-routes your dial-up modem connections through an alternate (usually high-priced) phone service provider by editing your existing connection profiles or by creating new connections. A dialer may also use your modem to call premium-rate numbers without your prompting. These calls may be placed in the middle of the night, or during the day when no one is home. Dialers may use 10-10 codes to incur long distance charges even if you do not have long-distance service.
Denial of Service Attack (DoS)
When a system is deprived of one its services. DoS attacks are often Distributed Denial of Service (DDoS) attacks where multiple compromised computers simultaneously attack a system (such as a web site). The compromised computers use methods such as sending fragmented packets, large packets, or large numbers (floods) of packets, or creating half-open TCP connections to cause the system's performance to degrade, or actually crash the system. Computers are compromised by hackers who use trojans and other methods to circumvent a computer's security controls and gain control over the computer.
Hacker Tool
A program whose primary purpose is to circumvent a computer's security controls. Hacker tools can do things like monitor your internet traffic at the packet level, attempt to figure out your passwords, circumvent your firewall software, and crash (nuke) your computer or modem. A hacker tool may be used against you, or installed on your computer and used against other computers.
Inject a DLL (into a process)
A technique that some programs (particularly spyware programs) use to avoid detection. The program's DLL is injected into a trusted program process. This makes it appear that the trusted program is running, when it is actually another program.
Keystroke Logger
a program that records all keystrokes on your computer in log files. Log files may be stored on your computer or sent to an external computer or email address. Keystroke loggers can record user names, passwords, and any other personal or confidential information you type.
Nuker
A program that damages registry values of your system, a particular program, crucial executable files of the system or program, to disrupt the program or system. A nuker can crash your computer, or make it restart.
Other
Any software or program which exhibits the traits or behaviors associated with potentially unwanted software which does not fit into one of the above categories.
Packet
A small unit of data that is used when transmitting data from one computer to another. It has a well-defined format which describes the contents and the data being sent.
Persistent Cookies
A cookie that remains on your computer for some length of time, even after you exit your browser.
Port
a place where information goes into or out of a computer.
Registry
A database used by the Windows operating system to store configuration information. Most Windows applications write data to the Registry, at least during installation. You can edit the Registry directly by using the Registry Editor (regedit.exe) provided with the operating system.
Screen Logger
A program that makes images or screen captures of your screen. The captures are saved and stored on your computer, and/or sent to an external computer. Screen loggers can record user names, passwords, and any other personal or confidential information that is visible on your screen. Screen loggers can be set to take screen captures at specific time intervals, or based on a number of keystrokes, or mouse events or specific types of keystrokes, or mouse events.
Server
a server is a program that runs on one computer and distributes (serves) information to other computers. A server operates in conjunction with a client program; the client receives the served information. The server listens on a particular port (or ports) and accepts client connections on the port or ports.
Session Cookie
A cookie that only remains on your computer until you exit your browser.
Tracking Cookie
A small text or data file that is saved (set) on your computer by a website for the purpose of tracking your browsing activities. Generally, tracking cookies are set by a 3rd party web site and are persistent. If you are visiting a web site that displays content from another web site, the 3rd party sites can put tracking cookies on your computer which contain information such as which links you clicked on. Tracking cookies may also be accessed by other web sites.
Trojan
A program that is disguised as a useful program or hidden inside another program to get you to install it. Many trojans are Remote Access Tools (RATs). A RAT trojan can give a remote user administrative privileges, and allow him or her full access to and control over your computer. Many Trojans have built-in tools, including tools to manage files (upload, download, and run executables on your computer), control your computer, and retrieve your passwords, log your keystrokes, capture your screens, etc..
Worm
A program which attempts to copy itself to other computer systems. A worm can propagate through email or directly over a network. Worms are frequently disguised as useful attachments, or hidden inside attachments. When you open an infected attachment, the worm installs. Once on your computer, a worm, which may have its own email engine for sending emails, may also email itself to any address in your address book, search your hard drive for email addresses, spoof the 'From' address in infected emails it sends, open a back door on your computer, and use your computer for DoS attacks. Worms can clog networks and information systems by creating large amounts of traffic.
