Arrow-right Camera
The Spokesman-Review Newspaper
Spokane, Washington  Est. May 19, 1883

Caught in the spyware net


Internet researcher and Harvard grad student Benjamin Edelman sits next to computer screens with pop-up ads. Edelman says an Ask Jeeves toolbar generates ads without users' full consent, while Google's search listings appear in queries made through a questionable third-party toolbar. 
 (Associated Press / The Spokesman-Review)
Michael Gormley Associated Press

First of two parts

ALBANY, N.Y. — Unwanted software slithered into Patti McMann’s home computer over the Internet and unleashed an annoying barrage of pop-up ads that sometimes flashed on her screen faster than she could close them.

Annoying, for sure. But the last straw came a year ago when the pop-ups began plugging such household names as J.C. Penney Co. and Capital One Financial Corp., companies McMann expected to know better.

Didn’t they realize that trying to reach people through spyware and its ad-delivering subset, called adware, would only alienate them?

“It irritated the heck out of me,” said McMann, a 45-year-old former corporate executive from Klamath Falls, Ore. Pop-up ads carried by spyware and adware aren’t just employed by fringe companies hawking dubious wares — such as those tricky messages that tell you your computer has been corrupted.

You can count some big tech companies among its users, including broadband phone provider Vonage Holdings Corp., online employment agency Monster Worldwide Inc. and online travel agencies Expedia Inc., Priceline.com Inc. and Orbitz LLC.

These companies acknowledge they’ve used adware to reach potential customers, though they say they shun any programs that monitor online surfing or extract personal information.

Even Fortune 500 companies have turned to adware: Sprint Corp., major banks peddling Visa credit cards, Sony Corp. and retailers including Circuit City Stores Inc. Attempts to reach officials at J.C. Penney and Capital One about their use of adware pop-ups were unavailing. Neither returned repeated calls for comment.

Spyware and adware often land on computers without their owners’ full knowledge, hitching a ride during visits to porn and gambling sites or in downloads of free games and screensavers. Often, the payload arrives with downloads of cartoon-character wares aimed at children.

Infected computer users can get barraged with pop-up ads and find the unwanted programs difficult to remove.

So far, law enforcement has mostly targeted the transmitters. Intermix Media Inc. has agreed to pay $7.5 million in a tentative settlement of a lawsuit by New York Attorney General Eliot Spitzer.

But Spitzer isn’t stopping there. He is threatening to hold accountable household-name advertisers that use adware networks. No longer, says Spitzer, can companies play dumb.

That’s making many advertisers nervous, though they insist they work with subcontractors and often don’t know about any adware use until they get a complaint.

“There’s plausible deniability at each tier,” said Chris King, a manager at anti-spyware vendor Blue Coat Systems Inc.

Vonage Chief Executive Officer Jeffrey Citron said, “We do everything we can to make sure our partners adhere to our standards.”

Yet a pop-up ad for Vonage appeared in a screen shot that Spitzer used in his case against Intermix. Citron said he was unaware of the ad and promised to look into it, as he said the company does with similar complaints.

It’s not just big advertisers who have ties to spyware and adware.

Yahoo Inc. made a deal with adware company Claria Corp., formerly known as Gator Corp., to provide search listings for its SearchScout toolbar. The popular search engines Ask Jeeves and Google also benefit from adware, says Internet researcher Benjamin Edelman.

He says an Ask Jeeves toolbar generates ads without users’ full consent, while Google’s search listings appear in queries made through a questionable third-party toolbar. Ask Jeeves and Google officials dispute Edelman’s account and say they don’t use any spyware or adware.