Re: Question regarding Marketscore spyware

["Schultz, Stephen" <SSchultz () CALSTATE EDU>]

Hello,
I have reviewed much of the discussion on this and have a couple additional comments. We have blocked (actually 
redirected) users attempting to access any of the 23 California State University campuses PeopleSoft applications as 
well. Rather then dropping the users into a bit bucket, we provide a message something like this:
*******************************************************
Important Information Regarding Your Privacy 

Your attempt to access a California State University application has been redirected to this page to provide you with 
important information regarding your privacy. It has been determined that you are accessing this page through a 3rd 
party proxy server that is compromising the security of this session....
********************************************************

We are also blocking a wider range of addresses. Here are the addresses we are blocking:

66.119.33.0   / 0.0.0.255 
66.119.34.0   / 0.0.0.255 
170.224.224.0 / 0.0.0.255 
216.148.244.0 / 0.0.0.255 
216.148.246.0 / 0.0.0.255

I can also confirm that Lavasoft Ad-aware 6.0 detects Marketscore software as a 'Browser Hijack'.  

Bye for now

Stephen Schultz
CMS Security Project Director
California State University
Office of the Chancellor
               

sschultz () calstate edu


-----Original Message-----
From: Jason Richardson [mailto:A00JER2 () WPO CSO NIU EDU]
Sent: Wednesday, December 01, 2004 3:26 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Question regarding Marketscore spyware


Hi all, I just read an article about the threat that this flavor of
spyware poses to edus and that several, including those represented by
frequent posters here and on Unisog, have blocked all access to/from
their networks.  Has anyone else had any experience with it?  We have
not (yet) to the best of my knowledge.  Here's the story -
http://www.pcworld.com/news/article/0,aid,118757,tk,dn120104X,00.asp.

TIA,

---
Jason Richardson
Manager, IT Security and Client Development
Enterprise Systems Support
Northern Illinois University
Voice: 815-753-1678
Fax: 815-753-2555
jasrich () niu edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.