A possible threat???

Question

Using pc pitstop exterminate, I came across a spyware item that may present a threat. The spyware is call KaZaA. The program classifies it as a medium threat and the category is P2P. The item count is 2. I have the option of finding out more about the threat by double clicking on the name, but that doesn't tell me if I should keep it or not. Does this spyware present a threat or can I ignore it?

zbestwun2001 · Answer

Kazaa is not technically malware by itself, but it can install malware because it opens the door for any number of
worms, adware, and spyware infections when you use their network. The courts have decided that current P2P networks are primarily used to trade pirated software and media.
P2P software itself has now been found illegal in some cases. I suggest that you remove Kazaa.

zb1

Bugbatter · Answer

2350, did you research Kazaa before you installed it? That helps to avoid issues such as you have.
After removing Kazaa, run Kazaabegone.
It will remove all the traces left behind by the Kazaa uninstall.

** Because it may break your email connectivity, first download:
LSPFix.exe to
a convenient location. Do NOT run this program. This is only
to be used if you lose Internet Access after removing Kazaa.

Next, download
KazaaBegone.zip,
Alternate download: http://www.computercops.biz/downloads-file-331.html
Unzip it to a convenient location.

Run KazaaBegone

Double click KazaaBegone from where you unzipped it.
Select Search & destroy all installed components
Click Go
Close KazaaBegone

Delete the Kazaa folder if it still exists in your Program Files.

** In the event that you lose Internet access after removing Kazaa, please
double-click LSPFix.exe that you downloaded earlier. Check the
"I know what I'm doing" button. You will see 2 panels. If there is
any file listed in the "Remove" panel on the right-side, leave it as is
and just click " Finish>>" then reboot your computer and you
should now have access to the Internet. If nothing is listed under the
"Remove Panel", do NOT do anything - just close the program. You will need to use another computer to post for help in order to get further instructions on what to do.

Unfortunately, we cannot post detailed fixes today because the Dell forum software is temporarily broken.
Please go to CastleCops and post a HijackThis log so your issue can be handled in a timely manner. Someone there will help you. You will need to register.
http://www.castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Thank you for understanding.

Bugbatter · Answer

It is not a drive-by download. Someone would have had to download, install, and configure it. As zbestwun2001 mentioned, it is a file sharing program.

Maybe it would be good to go to the PC Pitstop forum and ask if it is a false positive. It seems odd that the scan would find a program you never installed.
http://forums.pcpitstop.com/index.php?showforum=29

Message Edited by Bugbatter on 03-20-2007 11:04 PM

2350 · Answer

I have no idea how the Kaza item got on my computer. I'm just asking if it presents a threat or not.

zbestwun2001 · Answer

2350, Is the program listed in your Add/Remove folder in your control panel? zb1

Bugbatter · Answer

Sounds like a FP to me. Did you contact PC Pitstop about it so they can fix their scanner?

2350 · Answer

No

2350 · Answer

I should do that. I'll let you know how things go.

Bugbatter · Answer

PC Pitstop has an excellent forum that it is manned by some of my friends. You will receive good advice there. They need to know if their scanner is not working correctly, though.

2350 · Answer

I have already posted on the forum so now I'm waiting for a response for my issue.

joe53 · Answer

I agree with Bugbatter's opinion of PCPitstop, and their forums.

I'm not so sure of their trial software. Their Exterminate is a licensed clone of Pest Patrol, an antispyware app that has not impressed me in the past, largely due to false positives. Nonetheless, out of interest I downloaded and ran an Exterminate scan.

It detected 5 items for the following 2 medium threats:

Trojan.Regfish.A
Dialer HC

It did not provide any details as to the files infected, and being a trial version, I would have to purchase the program to eliminate them. Since my PC has never been infected with the above (or any other malware that I know of), and exhibits no symptoms of such infections, I conclude that these are likely false positives. A quick Google of these infections confirms these FP detections with Pest Patrol have been reported in the past. I certainly have no intention of purchasing this program, and my opinion of Pest Patrol has not changed.

If I were you, I would uninstall Exterminate.

2350 · Answer

So what exterminate detected is really just a false postive and doesn't present a threat?

joe53 · Answer

2350 wrote:

So what exterminate detected is really just a false postive and doesn't present a threat?

I'm not saying that.

All I'm saying that is that if you are not having a problem with your PC that resembles an infection, I would not trust any detections by the trial version of Exterminate to represent a true infection. Not without some independent confirmataion by another antispyware program I trust.

2350 · Answer

Fair enough. I'll get rid of exterminate.

Virus & Spyware

Was this post helpful?