Drive by Download and Drive by Install – Different Avenues, Same Destination

Virus, spyware, Trojan, and worm attacks have been getting rampant recently. It seems that one could easily get infected with any of the malware mentioned. Nowadays, being careful in cyberspace is just not enough. An antivirus or anti-spyware software is now an indispensable tool that every Web surfer should have.

Are They the Same?

Generally, malicious software, like adware or spyware, resorts to the drive-by download approach to get itself inside the user´s system. This method merely involves accessing a Web site that is infested with unwanted or destructive programs.

The same thing happens in drive-by installs. The user´s computer gets infected when he accesses a Web site that hosts different types of malware. However, unlike in drive-by downloads where infection immediately sets in upon accessing the site, the user would first encounter a few pop up boxes or windows before the malware installs itself in the visiting system.

Both methods are very similar and are often referred to as the same. The difference lies on the stage or process of infection which they emphasize. Their respective terms say it all. Drive by-installs lay emphasis on the installation process, while drive-by downloads focus on the infection during the download stage.

Drive-Bys – How Did They Get In?

Drive-bys crash in to your computer by exploiting the security loopholes either in your operating system or Web browser. Users also inadvertently contract it by opening infected e-mails or programs. It´s understandable why users easily fall into this trap as most of the infected mails, pop ups, or applications that they open look legitimate or harmless.

Putting a Stop to Drive-bys

As with most malware infections, drive-bys can be stemmed by installing and running a good anti-spyware software. You could also forestall any drive-by attacks by taking into consideration the following tips:

• Use a reliable antivirus software and keep its virus definition list updated on a regular basis.


• Make sure that your operating system´s firewall or a third-party software that offers this security feature is turned on at all times. This would help you prevent any drive-by attacks as it will screen all files that come in and out of your system. Firewalls also issue warnings whenever it detects the presence of malicious data.


• Install an anti-spyware software and update it frequently. Perform a full system scan on a regular basis. Updating the software is important as destructive applications are being released everyday.


• Configure your browser´s security settings to strengthen its defenses against all malicious software. As Microsoft´s Internet Explorer is the most widely-used browser in the world, it is not surprising that it has also received the most number of drive-by attacks. This can also be attributed to the fact that it automatically installs software from the Internet to the user´s computer. To change this, click on Tools –> Internet Options –> Security (tab) –> Custom Level. In the dialog box, look for ActiveX controls and Plug-ins headings and make the following changes:


• Select the Prompt radio button below Download Signed ActiveX Controls.


• Select the Disable radio button below Download Unsigned ActiveX Controls.


• Select the Disable radio button below Initialize And Script ActiveX Controls Not Marked As Safe.


• Select the Prompt radio button below Run ActiveX Controls And Plug-ins.


• Select the Prompt radio button below Script ActiveX Controls Marked Safe For Scripting.

Not every system survives a spyware attack, nor does every antivirus or anti-spyware forestall the same. Hence, it is important to back up your data in case your system crashes and the files therein become irretrievable. Be careful when surfing the Web. Ignore pop ups, especially if you´re quite clueless as to its origin or content.

Run a FREE PC Check Up NOW! Select Your Operating System: Windows Vista Windows XP Windows 2000 Windows Me Windows 98 Windows 95 Click Now for a FREE Scan!

Back >>>