Spyware: Distributors

Bonzi Buddy - uses Microsoft Agent technology to animate a cartoon character that provides shopping advice.
Dope Wars - uses a turn-based game to introduce spyware into your computer.
ErrorGuard - uses software hyped to repair and protect your computer to introduce spyware.
Grokster - bundles spyware with peer-to-peer file sharing technology.
Kazaa - bundles spyware with peer-to-peer file sharing technology.
LimeWire - installs the Mirar Toolbar among other applications that severely disrupt use of the computer.
StreamCast - bundles adware and spyware with Morpheus peer-to-peer file sharing technology.
RadLight - includes spyware (and anti-spyware-removal!) in a multimedia media player
WeatherBug - includes adware in a free version of application to check local weather.
Sony's Extended Copy Protection - installed spyware from audio discs through autorun.
WildTangent - provides games that may be bundled with adware or spyware.

Spyware: Examples

These common spyware programs illustrate the diversity of behaviors found in these attacks.

CoolWebSearch, a group of programs, takes advantage of Internet Explorer vulnerabilities. The package directs traffic to advertisements on Web sites including coolwebsearch.com. It displays pop-up ads, rewrites search engine results, and alters the infected computer's hosts file to direct DNS lookups to these sites.
Internet Optimizer, also known as DyFuCa, redirects Internet Explorer error pages to advertising. When users follow a broken link or enter an erroneous URL, they see a page of advertisements. However, because password-protected Web sites (HTTP Basic authentication) use the same mechanism as HTTP errors, Internet Optimizer makes it impossible for the user to access password-protected sites.
Zango (formerly 180 Solutions) transmits detailed information to advertisers about the Web sites which users visit. It also alters HTTP requests for affiliate advertisements linked from a Web site, so that the advertisements make unearned profit for the 180 Solutions company. It opens pop-up ads that cover over the Web sites of competing companies.
HuntBar, aka WinTools or Adware.Websearch, was installed by an ActiveX drive-by download at affiliate Web sites, or by advertisements displayed by other spyware programsÂ—an example of how spyware can install more spyware. These programs add toolbars to IE, track aggregate browsing behavior, redirect affiliate references, and display advertisements.
Movieland, also known as Moviepass.tv or Popcorn.net, is a movie download service that has been the subject of thousands of complaints to the Federal Trade Commission (FTC), the Washington State Attorney General's Office, the Better Business Bureau, and others by consumers claiming they were held hostage by its repeated pop-up windows and demands for payment. The FTC has filed a complaint against Movieland.com and eleven other defendants charging them with having "engaged in a nationwide scheme to use deception and coercion to extract payments from consumers." The complaint alleges that the software repeatedly opened oversized pop-up windows that could not be closed or minimized, accompanied by music that lasted nearly a minute, demanding payment of at least $29.95 to end the pop-up cycle; and claiming that consumers had signed up for a three-day free trial but did not cancel their membership before the trial period was over, and were thus obligated to pay.
Zlob trojan, or just Zlob, Downloads itself to your computer via an ActiveX codec and reports information back to Control Server. Some information can be as your search history, the Websites you visited, and even Key Strokes.