Vulnerability Development mailing list archives

Re: Grokster and your email


From: "Michael" <scorpsec () optushome com au>
Date: Sun, 30 Dec 2001 17:31:50 +1100

I updated my AV definitions for Norton's the other day, and it picked up the
dlder.exe stated. Also the explorer.exe was picked up a while ago too. They
both come up with the ID of "Backdoor.Trojan".


----- Original Message -----
From: "Mark L'Italien" <mlitalien () memberdrive com>
To: <yanker () sympatico ca>; <vuln-dev () securityfocus com>
Sent: Sunday, December 30, 2001 3:29 PM
Subject: Re: Grokster and your email


Hi all. Could someone out there with "Grokster" submit it to Symantec so
they can add it to the virus definitions? I can do it if necessary if
someone zips it up and sends it to me.

Thanks!

Mark
----- Original Message -----
From: <yanker () sympatico ca>
To: <vuln-dev () securityfocus com>
Sent: Saturday, December 29, 2001 10:24 PM
Subject: Grokster and your email




Hello.

I too got burned by Grokster, and removed it.
After removal, the dlder.exe program, and the
C:Program Files/Grokster/DB folder remained,
with 2 .dbb files. I opened them, and found one of
them had many, if not all, of my emails from my
Outlook Express Inbox mixed in with what I had
downloaded. I don't know if my firewall stopped
them from getting this information, but it is not
something you want to see. Time for Netscape.

Hank





Current thread: