View Single Post
Old 06-01-2005, 13:27   #15
Bifta
Inactive
 
Join Date: Jul 2003
Location: Eglinton, Co. Derry
Posts: 7,640
Bifta has a nice shiny starBifta has a nice shiny star
Bifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny starBifta has a nice shiny star
Re: MS Anti-Spyware Beta

Quote:
Originally Posted by Acathla
You say that but it found my logitech desktop messenger, RealVNC and WinPCap as potential spyware. Now I would have thought alexia and tracking cookies are more of a threat than bloody VNC!
The Logitech Desktop Manager used to contain Backweb, probably still does

Quote:
BackWeb is a generic, background downloading tool that software vendors can incorporate into their product to download data (e.g. product updates) to the user's PC. Its operation depends on the instructions given to it by the individual software vendor who bundles it.

BackWeb has been associated with numerous large companies working on a corporate level to deliver timely information and updates. Essentially, BackWeb is a communications program whereby a large amount of users may be contacted in an instant.

Information may be collected from many sources including applications which may then be delivered to the collection site. Further, this technology is based upon an open architecture whereby third-party developers may develop customized applications to meet their needs.

BackWeb has plug-in module capabilities to further extend features and capabilities of the core program. One such established plug-in module is the "BackWeb Polite Upstream" which allows for the reverse flow of communications. Communications from the client may be delivered to the server for assimilation into a collection point for further processing.

May use port 6670 (as may Deep Throat 1,2 & 3.x, Foreplay, Reduced Foreplay, WinNuke eXtreame, and other programs.)
If it's sending data from your machine to a remote server, I'd say it's spyware.


WinPCap can also be exploited by other malware programs, they use it's libraries send out usage habit data to remote servers.


RealVNC - VNC is open source and can be installed within certain malware programs, see here for details:

http://research.sunbelt-software.com...m?name=RealVNC
Bifta is offline   Reply With Quote