Keylogger 007

[David Halpern]

Anyone have to deal with this Spyware app?

I downloaded something probably Bearshare
and now my spyware scanner keeps finding it.

Also my firewall keeps saying something is trying to send stuff to port
5050.

Anyone have any experience?

Thanks in advance.

D. H.

 

[Vanguardx]

Anyone have to deal with this Spyware app?

I downloaded something probably Bearshare
and now my spyware scanner keeps finding it.

Also my firewall keeps saying something is trying to send stuff to
port 5050.

Anyone have any experience?

Thanks in advance.

D. H.

http://www.google.com/search?sourceid=navclient&ie=UTF-8&q="Keylogger+007"

Is his a work or home computer?

 

[David Halpern]

http://www.google.com/search?sourceid=navclient&ie=UTF-8&q="Keylogger+007"

It is a home computer.

Anyone have any thoughts for removal?

Thanks in advance.

D. H.

 

[Vanguardx]

It is a home computer.

Anyone have any thoughts for removal?

Thanks in advance.

D. H.

If it is the 007 Keylogger program then it might not have arrived as a
covert piggyback on some other software that you installed. Maybe
someone else deliberately installed it, like your parents. See
http://www.e-spy-software.com/faq.htm#B6. You can contact them on how
to remove their software but they will probably require some proof that
the system from which you want to eradicate their software is actually
owned by you rather than being a monitored host inuse by an employee, a
child, or patron using someone else's computer property.

The have their iSpyNow Remote Spy program which gets delivered as an
e-mail attachment, but that would mean that you haven't practiced safe
hex and not only extracted the attachment from an e-mail (i.e., you
choose to save it) but also chose to run it.

 

[David Halpern]

If it is the 007 Keylogger program then it might not have arrived as a
covert piggyback on some other software that you installed. Maybe
someone else deliberately installed it, like your parents. See
http://www.e-spy-software.com/faq.htm#B6. You can contact them on how
to remove their software but they will probably require some proof that
the system from which you want to eradicate their software is actually
owned by you rather than being a monitored host inuse by an employee, a
child, or patron using someone else's computer property.

The have their iSpyNow Remote Spy program which gets delivered as an
e-mail attachment, but that would mean that you haven't practiced safe
hex and not only extracted the attachment from an e-mail (i.e., you
choose to save it) but also chose to run it.

Well Vanguard I really appreciate your help with that.
Normally I don't run attachments from e-mail.
I think it showed up from downloading Bearshare
since I scan almost constantly.
It only showed up rght after I started downloading Bearshare again.
I don't someone deliberately installed it here since it is my computer
and I am the only one to use it.

Thank you though.

Sincerely,

Marc

 

[Vanguardx]

Well Vanguard I really appreciate your help with that.
Normally I don't run attachments from e-mail.
I think it showed up from downloading Bearshare
since I scan almost constantly.
It only showed up rght after I started downloading Bearshare again.
I don't someone deliberately installed it here since it is my computer
and I am the only one to use it.

Thank you though.

Sincerely,

Marc

Does the keylogger alert go away if you uninstall Bearshare (which I
presume is some P2P file sharing program)? From a search in their
forums, there have been questions about spyware (and adware) getting
buried in BS, along with several reports of hacking after installing BS.

There have been security problems with BS (e.g.,
http://snipurl.com/bearshare). Could be your host got compromised.
Could be FreePeers decided to do more with their free Bearshare product
besides just proliferate adware with it
(http://www.giantcompany.com/antispyware/research/spyware/spyware-BearShare.aspx),
and since they probably don't develop the adware in the "bundled
software" then they probably don't know what it really does. There are
users in its forums bitching about the Save and Weathercast crapware.

http://www.bearshare.com/downloads.htm says the free version comes with
"bundled software". Know what that is? The Pro version does *not*
include the bundled software so it is obviously not required for the
real Bearshare product alone and which implies the bundled software is
something other than Bearshare.