Finding Spyware in Browser Helper Objects
One of the most difficult locations in which spyware can hide is the IE Browser
Helper Object. Browser Helper Objects are designed to provide add-on features
and functionality to IE to improve a user's browsing experience. For example,
many popular IE toolbars are Browser Helper Objects. However, Browser Helper
Objects' level of access to users' browsing data (e.g., URLs entered, form data
provided) is significant. When you combine that with the fact that Browser Helper
Objects are harder to find and remove than simple startup applications, you
can understand why Browser Helper Objects are a popular mechanism for spyware
and malware authors for installing their software.
You can use two techniques to find Browser Helper Objects configured on your
system. If you use XP with Service Pack 2 (SP2), you can use the Add-On Manager
(in IE, select Tools, Manage Add-ons) to view all Browser Helper Objects currently
loaded in IE and disable any of them. Figure
3 shows the IE Manage Addons dialog box. By selecting an add-on from the
list and disabling it, you can effectively remove the capabilities of any application
that has integrated itself into the browser. . . .
Register
