Editing Spyware (section)

==Routes of infection==

Spyware does not necessarily spread in the same way as a [[Computer virus|virus]] or [[Computer worm|worm]] because infected systems generally do not attempt to transmit or copy the software to other computers. Instead, spyware installs itself on a system by deceiving the user or by [[Exploit (computer security)|exploiting]] software vulnerabilities.

Most spyware is installed without knowledge, or by using deceptive tactics. Spyware may try to deceive users by bundling itself with desirable software. Other common tactics are using a [[Trojan horse (computing)|Trojan horse]], spy gadgets that look like normal devices but turn out to be something else, such as a USB Keylogger. These devices actually are connected to the device as memory units but are capable of recording each stroke made on the keyboard. Some spyware authors infect a system through security holes in the Web browser or in other software. When the user navigates to a Web page controlled by the spyware author, the page contains code which attacks the browser and forces the download and installation of spyware.

The installation of spyware frequently involves [[Internet Explorer]]. Its popularity and history of security issues have made it a frequent target. Its deep integration with the Windows environment make it susceptible to attack into the [[Microsoft Windows|Windows]] [[operating system]]. Internet Explorer also serves as a point of attachment for spyware in the form of [[Browser Helper Object]]s, which modify the browser's behaviour.