Re: Kazaa?

[AI Jordanov <aj2304 () bristol ac uk>]

Hi,

Kazaa is known for its spyware aftertaste. I would advise you to uninstall
Kazaa and install Kazaa Lite (www.kazaalite.com), which will probably result
in the scanning activity going dead.

AJ

----- Original Message -----
From: "Christian Simatos" <christiansimatos () freesurf fr>
To: <security-basics () securityfocus com>
Sent: Friday, October 11, 2002 12:52 PM
Subject: Kazaa?


> Hello,
>
> My son has installed Kazaa on his pc.
>
> My personal antivirus is reporting that kazaa (I suppose because it's port
> 1214) is scanning my own PC from ports which increase regularly.
> I googled to try and find information, but I have not found this behavior
> described.
> - Can anyone help me?
> - Is it the normal Kazaa behavior?
> - Can I prevent it? (other than de-install kazaa)
>
> FWIN,2002/10/11,12:33:21 +2:00 GMT,192.168.0.3:1031,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1054,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1055,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1056,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1064,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1065,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1066,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1067,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:18 +2:00 GMT,192.168.0.3:1071,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:35 +2:00 GMT,192.168.0.3:1078,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:35:55 +2:00 GMT,192.168.0.3:1119,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1120,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1121,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1122,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1135,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1136,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:38:39 +2:00 GMT,192.168.0.3:1234,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:41:07 +2:00 GMT,192.168.0.3:1284,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:41:37 +2:00 GMT,192.168.0.3:1288,192.168.0.2:1214,TCP
(flags:S)
> FWIN,2002/10/11,12:41:58 +2:00 GMT,192.168.0.3:1290,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:42:49 +2:00 GMT,192.168.0.3:1302,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:43:40 +2:00 GMT,192.168.0.3:1317,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:44:31 +2:00 GMT,192.168.0.3:1318,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,12:48:01 +2:00 GMT,192.168.0.3:1319,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,13:00:26 +2:00 GMT,192.168.0.3:1320,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,13:12:52 +2:00 GMT,192.168.0.3:1330,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,13:25:18 +2:00 GMT,192.168.0.3:1332,192.168.0.2:139,TCP
(flags:S)
> FWIN,2002/10/11,13:37:43 +2:00 GMT,192.168.0.3:1333,192.168.0.2:139,TCP
(flags:S)
>  Thanks, Chris