|
SPYWARE in Programs
|
View this Thread in Original format
| Eugene |
Many software programs install ad-banners and/or "spyware" -- hidden files that you can't see, but which transmit information about you whenever you are on-line, to some hidden source. Information may include your Registry entries, your computer configuration, what kind of system you have, even your name. (If you haven't heard about this, visit this site: http://www.gismo.at/aureata_english.htm)
I was just wondering, what are some of the music programs that do this ? Do Napster, AudioGalaxy do it? Cause I may have some spy DLL's still left on my comp... I know for sure Go!Zilla does it, but I removed all of its spyware a long time ago. |
|
|
| Blik |
| I know that Audiogalaxy uses one, don't know about other proggies |
|
|
| [A|ienFactory] |
| quote: | Originally posted by Blik
I know that Audiogalaxy uses one, don't know about other proggies |
That sux. |
|
|
| Eugene |
Can someone list all the spy DLL's that AudioGalaxy installs... for my and other people's reference?
The bad thing is, if you delete them, the proggie stops working :mad: |
|
|
| Fatboy |
| Why exactly do programmers put such in their proggies?? |
|
|
| TrAnCe CoNtRoL |
| yeah why the hell do they do it. and where do they tell you thats its in there? is it in the terms of service which no one reads? cause if they dont tell you its in there i dont think they can legally do it. |
|
|
| Wicked Neo |
| quote: | Originally posted by Fatboy
Why exactly do programmers put such in their proggies?? |
Ok here we go
Audiogalaxy DOES use spyware
it uses Webhancer and Gator .
the Audiogalaxy Satalitte will not function if this spyware is not installed.
the satalitte looks for a registry entry each time its loaded up
remove the spyware, u lose the satalitte.
However if u use a firewall in conjunction with audiogalaxy u can set the firewall to block the spywares attempts to connect to the internet and transmit its data back.
Its not the programmers that put that crap in but the site owners.
Webhancer and gator pay the site owners to include that software in the package. and as sites like audiogalaxy are " free " they need to make revenue from somewhere hence the wide spread use of spyware.
There are applicatons available to remove spyware from your systems but as i said stuff like Audiogalaxy will not work unless it see's the spyware installed in the registry.
Due to the nature of the internet the use of Spyware is at the moment perfectly legal.
however this is being looked at by main ISP's due to the huge volume of complaints about spyware.
|
|
|
| Wicked Neo |
here is a scan of my system
i highlighted the gator entrys
Logfile generated on 04/05/01 at 00:50:12
Version 4.60, using Signaturefile 215-04.04.2001.
Scan initialized..
Started memory scan.
====================
Running processes:
1 : C:\WINDOWS\SYSTEM\KERNEL32.DLL
2 : C:\WINDOWS\SYSTEM\MSGSRV32.EXE
3 : C:\WINDOWS\SYSTEM\MPREXE.EXE
4 : C:\WINDOWS\SYSTEM\mmtask.tsk
5 : C:\WINDOWS\SYSTEM\MSTASK.EXE
6 : C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
7 : C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE
8 : C:\WINDOWS\EXPLORER.EXE
9 : C:\WINDOWS\TASKMON.EXE
10 : C:\WINDOWS\SYSTEM\SYSTRAY.EXE
11 : C:\WINDOWS\STARTER.EXE
12 : C:\WINDOWS\SYSTEM\ATICWD32.EXE
13 : C:\WINDOWS\MK9805.EXE
14 : C:\PROGRAM FILES\HP CD-WRITER\DIRECTCD\DIRECTCD.EXE
15 : C:\PROGRAM FILES\HP CD-WRITER\MMENU\HPCDTRAY.EXE
16 : C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
17 : C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
18 : C:\WINDOWS\SYSTEM\MSWHEEL.EXE
19 : C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
20 : C:\WINDOWS\SYSTEM\DDHELP.EXE
21 : C:\PROGRAM FILES\MEDIASCIENCE\SONIQUE\SQSTART.EXE
22 : C:\PROGRAM FILES\MEDIASCIENCE\SONIQUE\SONIQUE.EXE
23 : C:\PROGRAM FILES\ICQ\ICQ.EXE
24 : C:\WINDOWS\SYSTEM\PSTORES.EXE
25 : C:\PROGRAM FILES\LAVASOFT AD-AWARE\AD-AWARE.EXE
Total modules found : 25
Suspicious modules found : 0
Started registry scan.
======================
OnFlow key:HKEY_LOCAL_MACHINE\software\onflow\
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
{{these are the gator entrys in the registry for audiogalaxy }}
Suspicious keys found : 3
Started folder scan.
==================
OnFlow folder:C:\Program Files\onflow
Suspicious folders found : 1
Started file examination.
=========================
Gator file:C:\WINDOWS\GatorSilentSetup.log
Gator file:C:\WINDOWS\GatorFileDrop.log
Gator file:C:\WINDOWS\GatorUninstaller.log
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\ieonflow.dll
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\nponflow.dll
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowplayer0.dll
OnFlow file:C:\Program Files\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Program Files\onflow\uninstall onflow.exe
Timesink file:C:\Program Files\GlobalSCAPE\CuteFTP\CTInstall.exe
Timesink file:C:\Program Files\GlobalSCAPE\CuteFTP\TSUninstaller.exe
Suspicious files found : 21
Scan complete.
Total spyware references found on this system:25
Yep Cute ftp has spyware too . . . |
|
|
| wasmario |
Hey WICKED NEO, how u scan your regestry for like this???
wouldlike to know either what progs send infos to somewhere!!
thx & greetz |
|
|
| Wicked Neo |
Wasmario
visit this site
www.lavasoft.de
and download the app there called Ad-Aware
its that program that scans your system for Spyware and it can also clean off all spyware crap :)
|
|
|
| Lynx |
| yes yes...ad-aware is a great program that was created to get rid of such spyware . when installing audio galaxy, DO NOT install the webhancer software afterwards. the spyware is contained within there. |
|
|
| wasmario |
thx, will try it!!
l8rz |
|
|
|
|
