Vulnerability Development mailing list archives

R: Icq 2000 ads


From: Ettore Caprella <ettore.caprella () CSELT IT>
Date: Wed, 21 Feb 2001 12:09:31 +0100

This morning same thing happened to me (ICQ 2000Beta v 4.60). I uninstalled
it and I installed new version (4.63) and now the problem has gone.
I think this is a feature which is switched on by the ICQ server with a
message during authentication or something like this.

Bye.
________________________________________________
Ettore Caprella
Centro Sicurezza Be-Secure
CSELT
Centro Studi e Laboratori Telecomunicazioni
Via G. Reiss Romoli, 274
10148 Torino - ITALY
Phone: +39 011 228.6012
Fax: +39 011 228.6360
E-Mail: ettore.caprella () cselt it
________________________________________________


-----Messaggio originale-----
Da: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]Per conto di Sommer
Ishay
Inviato: martedì 20 febbraio 2001 17.00
A: VULN-DEV () SECURITYFOCUS COM
Oggetto: Re: Icq 2000 ads


Same thing happened to me few days ago, didn't investigate, ICQ 2000A.

Ishay

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of Taylan
Develioglu
Sent: Tuesday, February 20, 2001 12:37 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Icq 2000 ads


This morning I woke up, booted up win98 and showered. When I got back
and tried to send a message through icq (2000 beta 4.60), each message
suddenly formed a little window underneath the message body window with
ads. Now I have ads underneath each message I send...

The odd thing is, noone else I know has this behaviour (yet?), I noticed

the client behaving fairly strange lately as suddenly the 'first-time'
messages started appearing again (as in the don't show this message
again messages - left/right mouse button, you are now in invisible
etc..).

To get to the point, does icq utilize some form of spyware no one has
noticed untill now? Do earlier versions exhibit this kind of behaviour
as well? Why me not others?

Now I am really pissed at aol, you install an upgraded (new) version of
their client. And 10 months later ads pop up.. BAM! No turning back
because the db is now 2000-steelo. I also noticed that this is
db-specific (as in my personal settings are changed), other uins
installed on the same machine do NOT have the ads.


Current thread: