This ensures that the spyware will execute when the operating system is booted, even if some (or most) of the registry links are removed.
If so, they will be automatically restored. Once running, the spyware will periodically check if any of these links are removed. The spyware typically will link itself from each location in the registry that allows execution. Spyware can exploit this design to circumvent attempts at removal.
The Windows Registry contains multiple sections where modification of key values allows software to be executed automatically when the operating system boots.
Many spyware components would also make use of exploits in JavaScript, Internet Explorer and Windows to install without user knowledge or permission. The combination of user ignorance about these changes, and the assumption by Internet Explorer that all ActiveX components are benign, helped to spread spyware significantly. īefore Internet Explorer 6 SP2 was released as part of Windows XP Service Pack 2, the browser would automatically display an installation window for any ActiveX component that a website wanted to install. Computers on which Internet Explorer (IE) is the primary browser are particularly vulnerable to such attacks, not only because IE was the most widely used, but because its tight integration with Windows allows spyware access to crucial parts of the operating system. Īs of 2006, spyware has become one of the preeminent security threats to computer systems running Microsoft Windows operating systems. 92 percent of surveyed users with spyware reported that they did not know of its presence, and 91 percent reported that they had not given permission for the installation of the spyware. Since then, "spyware" has taken on its present sense.Īccording to a 2005 study by AOL and the National Cyber-Security Alliance, 61 percent of surveyed users' computers were infected with form of spyware. Later in 2000, a parent using ZoneAlarm was alerted to the fact that "Reader Rabbit," educational software marketed to children by the Mattel toy company, was surreptitiously sending data back to Mattel. However, in early 2000 the founder of Zone Labs, Gregor Freund, used the term in a press release for the ZoneAlarm Personal Firewall. Spyware at first denoted software meant for espionage purposes. The first recorded use of the term spyware occurred on Octoin a Usenet post that poked fun at Microsoft's business model.