Does not detect Spectorsoft Eblaster

[InterLake]

Unfortunately it does not detect spectorsoft eblaster, a product we had
trouble with in the past

 

[Bill Sanderson]

Can you submit a Tools, Suspected spyware report from a machine with this
critter in place?

If, as part of that report, you can provide a URL to find more about this
product, that might be useful.

If you find that reporting function doesn't work for you, let me know, and
let me know the nature of what information you have about the product you
mention. I may be able to find another channel.

 

[Jack R]

It's a legitimate commercial product.

http://www.spectorsoft.com/products/eBlaster_Windows/news.html

(I have no connection with this product or company)

Jack R

 

[Bill Sanderson]

A legitimate commercial product may be listed by Microsoft Antispyware.
This doesn't necessarily indicate anything to the discredit of the product,
simply that there is potential for abuse. See this KB article for the
criteria under which a product can be listed:

http://support.microsoft.com/kb/892340 Microsoft Windows AntiSpyware (Beta)
identifies a program as a spyware threat (Listing criteria and Dispute
process)

(I've not looked up this product at all--I'm not expressing an opinion--just
mentioning that fact that other products, including some Microsoft code are
listed by Microsoft Antispyware with appropriate descriptions and default
actions--even though they are legitimate commercial products.)

 

[InterLake]

Hi Bill,

I cannot submit the report - it cannot get Internet Connectivity even when I
turn all firewalls etc off and am not using any proxies.
I will contact you offlist to provide you with whatever info you need.

The URL to the tool is:
http://www.spectorsoft.com/products/eBlaster_Windows/index.html

It may be a commercial product - yet it can be installed by a user on
someone elses machine and records all keystrokes and forwards this along
with copies of all emails to a third party without anyones knowledge. This
is more than just a potential security threat and should be caught, as it is
easy to see the potential for abuse.

Stefan

 

[InterLake]

Yes it might be a commercial product - yet it has been abused on networks to
log keystrokes of other employees and forward this along with copies of all
emails to the spectorsoft server (!) from where they will be forwarded to
the Abusers email account of choice. It does this by changing windows system
files and bypassing security imposed by network admins. I let you be the
judge, but this should at least be caught by detection tools. The spyware
itself is usually not the "bad thing" - its the intruder making use of it -
yet what came first, the chicken or the egg?

My $0.02

 

[Bill Sanderson]

This report here is all that is needed I believe. Thanks.

I want to reiterate for other readers--Software is listed by Microsoft
Antispyware according to a set of objective criteria laid out in this
document:

http://support.microsoft.com/kb/892340 Microsoft Windows AntiSpyware (Beta)
identifies a program as a spyware threat (Listing criteria and Dispute
process

A listing simply means that a products behavior fits within these
guidelines. And the potential for abuse--as noted by Stefan, is probably
sufficient, but I'll leave that judgement to Microsoft.