It’s in the news frequently, and many security websites list it among their top ten concerns for computer users. Drive by downloads happen on an increasing basis, and while it may be a frightening term, a “drive by download” is fairly easy to understand. Typically initiated by an automated process, not the computer user, these are “automated downloads” not requested by the consumer. In many cases, the site you’re working with will seem to call for an additional piece of software before the site works properly. Usually, the user will see a pop-up suggesting that in order to fully experience the site, you have to “click here” to download the right software. However, clicking simply gives the program full access to your computer and orders the installation of software you weren’t initially notified about.
A drive by download is a characteristic method that some use to change an existing web site or set up a new “rogue” web site that is under their control. Users then visit these unauthorized web sites, and once an unsuspecting consumer lands on it, the unwanted software is installed. This kind of activity is allowed through a glitch or a defect in the browser software or a related browser plug-in. The undesired software can do a number of things, including gain access to your private data. While not always the case, it is possible that data can be used for identity theft purposes, which is why it’s so important to not only protect your PC from problems of this kind, but also to carefully remove any software that was installed using this method.
Recently, a flaw has been discovered with Internet Explorer 7. This flaw affects those consumers using Windows Vista, Windows Vista Service Pack 1, Windows Server 2008, Windows XP Service Packs 2 and 3, and Windows Server 2003 Service Packs 1 and 2. Try as they may, software developers just cannot protect against every known, or plan for every unknown, threat in the universe. That is why it is necessary to have additional protection available, and to use common sense at all times, to assist in defending your computer, and you, from dishonest users.
Stop Drive By Downloads
There are several steps you can take to ensure your system is safe. First, be extremely careful of whatever buttons or pop-ups you click on when using your computer. Keep in mind that every possible button push could bring a potential problem if you are not quite certain of what you are clicking on or where your computer is taking you. Read your Windows computer warnings. Examine all the information, if any, that comes along with a request for you to make an addition to your computer. The first warning sign of a potential drive by download is the lack of information offered about the program or service the pop-up or download is offering to install. DO NOT ASSUME that it is safe. Beware of software “plug-ins.” You may not notice any changes to your computer right away because many of these drive by downloads won’t always be obvious to the casual, or sometimes even the most experienced, computer user right away.
Second, using your computer under the designation “without administrative rights” can diminish the chances of unwanted software gaining access to your computer. If you are surfing the web logged onto your computer as “administrator,” you then have all the rights and privileges that come along with that designation. In turn, that helps to enable questionable software searching for a place to land get a foot hold on your computer. If you are logged in and using the internet as an administrator, anything found or associated with your time spent browsing the web can also have access to those same privileges. This is not a good idea for obvious reasons.
Third, pay attention to any warning screens your computer sends you. Most browsers are on the “look out” for these hostile types of programs and try to help prevent them from hi-jacking your computer. They will give warnings such as “Executable programs!” Some browsers will refuse to directly accept executable software found during an internet browsing session and will force that program to be saved to your hard drive. Once saved to your hard drive, the antivirus or antispyware programs (safely installed on your computer earlier – hopefully – from a secure source) can examine the download before allowing it to work on your computer.
Overall, try to avoid clicking on any pop-ups or download offers that you are not sure about. It will be worth your time to investigate a program further if you think you are interested in it and wait before taking a chance on downloading malicious software to your computer that could put it, and you, in jeopardy.