Author Topic: Possible Spyware/Identity Theft problems....  (Read 1679 times)

Aurun

  • Wayfarer
  • *
  • Posts: 6
    • View Profile
Possible Spyware/Identity Theft problems....
« on: February 17, 2005, 10:59:58 pm »
I found the following spyware and cookies after installing Planescape. Since the only site i visited was the Planescape web site and this one, and nobody else recently on this computer, im not sure where these came from. It detected these on the computer, and not only that, someone is fradulently trying to steal my personal information off the computer, and even called me up with a \"you won lots of money\" bogus story. As these may or may not be related with you game, i am only posting here because i did not have these problems before installing your software. I traced the phone number, and it is bogus. Also, here is the spyware found on my system after i revceived various error problems associated installing your game. (IT MAY NOT BE RELATED TO THE GAME ITSELF, BUT SOMEONE MIGHT BE USING IT FOR BACK DOOR ENTRY INTO COMPUTERS). I know it\'s possible to place a MIRC in the background on a person\'s computer from technical information from a site I have read, without a person\'s knowledge:

The following is a listing of all the spyware i have detected on this computer:

CWS_NS3
go.com cookie
Hitbox Cookie
Statcounter Cookie
Tripod Cookie
Realmedia Cookie
Pricegrabber Cookie
Bizrate Cookie
Ask Cookie
207.net Cookie
247realmedia Cookie
Atlas DMT Cookie
Doubleclick Cooie
Domain Sponsor Cookie
freestat.net Cookie
Bs.serving-sys Cookie
Bravenet Cookie
Com.com Cookie
Counter Cookie
Overture Cookie
Serving-sys Cookie
Rightmedia Cookie
Falkag Cookie

As i have no cookies enabled, i have to assume these must of been put on my computer using the game, or someone nefariously placing them when playing the game....

Also, a program called User Fault Cilent tried to install on my computer, but my detection programs removed it before it could do any damage. Again, im not sure if these are related to the game Planescape, but i had these problems after i installed the game. It could be just coincedence.....

The other problem i am currently having is now i cannot connect to the server without problems which may or may not be related to the spyware/hack programs i found on the computer...

Since this is all circumstance evidence, you must make your own judgement. I am not critisizing or berating the Planescape at all. In fact, i like the game very much. If the error messages i received on my computer when trying to play your game  had not warned me about these hacks, i would of never known they were there.

acraig

  • Administrator
  • Veteran
  • *
  • Posts: 1562
    • View Profile
(No subject)
« Reply #1 on: February 17, 2005, 11:44:05 pm »
I can assure you 100% that PlaneShift has no viruses or cookies or any sort of spyware at all.  You can see every line of source code from the PlaneShift project here.
----------
Andrew
"For all I know, she's lying, everyone's lying; welcome to the Internet"

Moogie

  • Forum Legend
  • *
  • Posts: 4551
  • Artist/Flash Animator
    • View Profile
(No subject)
« Reply #2 on: February 17, 2005, 11:58:51 pm »
Heh, I see someone knows nothing about computers. :)


Basically, you just have alot of cookies, and one possible virus. They could have come from anywhere. I suggest four things:

1. Getting a firewall
2. Getting some anti-virus software
3. Running your spyware checkers more frequently
4. Stop using Internet Explorer and find a real browser (Try Mozilla FireFox), and disable popups so that advertisements cannot install things on your PC.

There is no way for you to stop getting cookies and viruses as long as you\'re using Windows and the Internet. What the rest of us do is check regularly to make sure we remove any infections our computers inevitably pick up from virtually anywhere.
« Last Edit: February 18, 2005, 12:00:33 am by Moogie »

Seytra

  • Forum Addict
  • *
  • Posts: 2052
  • No system can compensate lack of common sense.
    • View Profile
I _hate_ cookies.
« Reply #3 on: February 18, 2005, 12:37:39 am »
Almost all of these cookies I can clearly identify

CWS_NS3 let\'s start with an unknown one. :)

go.com cookie - go.com is a provider for email and operating one of those \"web portals\" that I despise. I guess you are using some of their services. Simply visiting their website gives you this cookie.

Hitbox Cookie There are many \"hitbox\" domains. Most likely from this site:
http://www.hitboxprofessional.com/landing.html
They\'re into online ads and therefore into tracing you. A cookie fits right in. Evil.

Statcounter Cookie a cookie used for tracking your visits to a certain website. Could come from any page that uses a statcount counter.
From their page: \"A free yet reliable invisible web tracker\". Tracking cookie. Evil.

Tripod Cookie tracking cookie of tripod, a hosting provider. You\'ll have caught that visiting a page hosted by them (or an image hosted by them).

Realmedia Cookie real.com tracking cookie

Pricegrabber Cookie internal cookie of pricegrabber.com. Caught by visiting their site.

Bizrate Cookie same as pricegrabber

Ask Cookie search thingy (Ask Jeeves)

207.net Cookie unknown, domain for sale (shady practice IMO)

247realmedia Cookie another real media cookie. Probably specific server of theirs.

Atlas DMT Cookie advertisement / web tracking firm:
http://atlasdmt.com/ Evil.

Doubleclick Cooie Tracking (ad) company. Evil.

Domain Sponsor Cookie could be anyone, but surely is advertisement

freestat.net Cookie another statistics counter, like statcounter

Bs.serving-sys Cookie ad tracking cookie. Evil.

Bravenet Cookie web hosting firm

Com.com Cookie ad tracker. Evil.

Counter Cookie another statistics cookie

Overture Cookie ad / web tracker, owned by Yahoo and partnering with Microsoft. Evil.

Serving-sys Cookie ad / web tracker. evil.

Rightmedia Cookie ad company / web tracker. Evil.

Falkag Cookie Falk AG (advertisement) web tracker. evil.


These are very few cookies. In fact, my cookie blacklist is several times as long as your cookie list. Therefore, you probably have turned off cookies quickly, i.e., before visiting a lot of websites.

None of these is coming from Planeshift, but I\'d want nnone of them on any of my systems.
The virus or whatever it is probably came through the internet, simply because you don\'t have a firewall. Could be from anywhere, and certainly not off PS. The phone call was coincidence, I have had some as well, totally unrelated to PS.

Sarcas

  • Traveller
  • *
  • Posts: 14
    • View Profile
(No subject)
« Reply #4 on: February 18, 2005, 01:22:50 am »
Quote
Originally posted by Moogie

1. Getting a firewall



WARNING: Firewalls can prevent you from doing stuff such as if you have Warcraft III I do and you try to host a server firewalls can make no one able to join it\'s not only for Warcraft.

Seytra

  • Forum Addict
  • *
  • Posts: 2052
  • No system can compensate lack of common sense.
    • View Profile
(No subject)
« Reply #5 on: February 18, 2005, 01:55:34 am »
Quote
Originally posted by Sarcas
WARNING: Firewalls can prevent you from doing stuff such as if you have Warcraft III I do and you try to host a server firewalls can make no one able to join it\'s not only for Warcraft.

Nevertheless, firewalls are highly important, and you can get around almost all problems using port forwarding.

anguis

  • Traveller
  • *
  • Posts: 22
    • View Profile
(No subject)
« Reply #6 on: February 18, 2005, 10:57:06 am »
Quote

Nevertheless, firewalls are highly important, and you can get around almost all problems using port forwarding.


Firewalls are not as important as everyone says... Desktop firewalls on windows are much insufficient to really protect the computer. They only makes the user careless about what they\'re doing on the web.
« Last Edit: February 18, 2005, 10:57:43 am by anguis »

Androgos

  • Guest
(No subject)
« Reply #7 on: February 18, 2005, 11:05:17 am »
Eh.. This isn\'t Planescape, this is PlaneShift

RedMonger

  • Wayfarer
  • *
  • Posts: 7
    • View Profile
(No subject)
« Reply #8 on: February 18, 2005, 11:42:02 am »
CWS_NS3 is a nice little piece that can highjack your websearch, internet explorer settings and home page.

use adaware and it should remove it.

Like Moogie said get a real browser!!!


\"He who reigns within himself and rules his passions, desires and fears is more than a King.\"
 John Milton
 English poet (1608 - 1674)

anguis

  • Traveller
  • *
  • Posts: 22
    • View Profile
(No subject)
« Reply #9 on: February 18, 2005, 12:08:42 pm »
Androgos:
I think it\'s only been a typo ;-)

Kaseijin

  • Hydlaa Resident
  • *
  • Posts: 190
    • View Profile
(No subject)
« Reply #10 on: February 18, 2005, 12:21:14 pm »
Quote
Originally posted by Androgos
Eh.. This isn\'t Planescape, this is PlaneShift


intresting observation....
planescape:torment  is a good game though...
i actually play planeshift

Aurun

  • Wayfarer
  • *
  • Posts: 6
    • View Profile
looks like i learned something new today....
« Reply #11 on: February 18, 2005, 09:20:55 pm »
didn\'t realize about the typo..sorry {Planeshift, not Planescape(oops)}

Also, i didn\'t know IE was soo crappy...thanks for the info....

If the game is 100% proof, apparently my computer isn\'t...

Thanks for the info everybody....sorry just being catious from evil cookies and hijack programs.....

Sarcas

  • Traveller
  • *
  • Posts: 14
    • View Profile
(No subject)
« Reply #12 on: February 18, 2005, 10:16:36 pm »
Quote
Originally posted by Seytra
Quote
Originally posted by Sarcas
WARNING: Firewalls can prevent you from doing stuff such as if you have Warcraft III I do and you try to host a server firewalls can make no one able to join it\'s not only for Warcraft.

Nevertheless, firewalls are highly important, and you can get around almost all problems using port forwarding.



Well yes your right about that lol...

Ashbentiel

  • Wayfarer
  • *
  • Posts: 1
    • View Profile
(No subject)
« Reply #13 on: February 19, 2005, 02:37:26 am »
Quote
WARNING: Firewalls can prevent you from doing stuff such as if you have Warcraft III I do and you try to host a server firewalls can make no one able to join it\'s not only for Warcraft.


That\'s pretty much what they\'re designed to do, not allow access to anything you don\'t expressly give permission to, duh.

Quote
Originally posted by anguis
Quote

Nevertheless, firewalls are highly important, and you can get around almost all problems using port forwarding.


Firewalls are not as important as everyone says... Desktop firewalls on windows are much insufficient to really protect the computer. They only makes the user careless about what they\'re doing on the web.


Are you fscking insane?  The expected connection time of a windows computer surviving virus-free without a firewall is fourteen minutes.  That\'s not even long enough to install the non-servicepack updates from mickeysoft!  They aren\'t meant to be, and will not function as, a cure-all but if you fail to run one you will have extremely bad problems.