RE: Kazaa?

["Kevin Jackson" <smoothop03 () tamu edu>]

Chris,

What is happening is that when your loaded Kazaa, he also loaded a
series of spyware applications that are built into the Kazaa
installation. If you read the user agreement closely, it talks about
these things and actually says that if you delete them, you are in
violation of the user agreement. These spyware tools are harmless to
your system. They are there only for marketing purposes in gathering
information about which websites you visit, etc, and the most that they
might do is slow your computer down a little. There is a great freeware
download call Spybot that will search and destroy any spyware that is
installed on your system. Here is the website: http://beam.to/spybotsd.
Hope this helps.

Kevin Jackson

-----Original Message-----
From: Christian Simatos [mailto:christiansimatos () freesurf fr] 
Sent: Friday, October 11, 2002 6:53 AM
To: security-basics () securityfocus com
Subject: Kazaa?

Hello,

My son has installed Kazaa on his pc.

My personal antivirus is reporting that kazaa (I suppose because it's
port
1214) is scanning my own PC from ports which increase regularly.
I googled to try and find information, but I have not found this
behavior
described.
- Can anyone help me?
- Is it the normal Kazaa behavior?
- Can I prevent it? (other than de-install kazaa)

FWIN,2002/10/11,12:33:21 +2:00 GMT,192.168.0.3:1031,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1054,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1055,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1056,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1064,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1065,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1066,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1067,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:18 +2:00 GMT,192.168.0.3:1071,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:35 +2:00 GMT,192.168.0.3:1078,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:35:55 +2:00 GMT,192.168.0.3:1119,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1120,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1121,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1122,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1135,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1136,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:38:39 +2:00 GMT,192.168.0.3:1234,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:41:07 +2:00 GMT,192.168.0.3:1284,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:41:37 +2:00 GMT,192.168.0.3:1288,192.168.0.2:1214,TCP
(flags:S)
FWIN,2002/10/11,12:41:58 +2:00 GMT,192.168.0.3:1290,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:42:49 +2:00 GMT,192.168.0.3:1302,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:43:40 +2:00 GMT,192.168.0.3:1317,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:44:31 +2:00 GMT,192.168.0.3:1318,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,12:48:01 +2:00 GMT,192.168.0.3:1319,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,13:00:26 +2:00 GMT,192.168.0.3:1320,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,13:12:52 +2:00 GMT,192.168.0.3:1330,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,13:25:18 +2:00 GMT,192.168.0.3:1332,192.168.0.2:139,TCP
(flags:S)
FWIN,2002/10/11,13:37:43 +2:00 GMT,192.168.0.3:1333,192.168.0.2:139,TCP
(flags:S)

 Thanks, Chris