Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   General Windows Support (https://www.gnutellaforums.com/general-windows-support/)
-   -   spyware? (https://www.gnutellaforums.com/general-windows-support/6598-spyware.html)

Zildy December 22nd, 2001 01:22 AM

spyware?
 
After installing LimeWire 2.0.2, i noticed two new processes running on my machine:

c:\Program Files\Bargain Buddy\bin\bargains.exe

...and...

c:\windows\explorer\explorer.exe

The explorer.exe appears to be related to that "clicktilluwin" thing or whatever.

This is more LimeWire spyware?

Zildy

VTOLfreak December 22nd, 2001 07:40 PM

LOL
 
Didn't bother to actually read what the installer said ?
That bargain buddy program is optional

explorer.exe is a component of the Windows GUI .
Without it you would have a black screen with C:\WINDOWS> in the corner !

Zildy December 22nd, 2001 09:10 PM

um
 
I re-ran the LimeWire 2.0.2 installer, there's no option to choose whether or not to install the Bargain Buddy stuff, only Gator and TopText iLookup. Of course, i uncheck both.

Yes, I know all about the cydoor ad retrieval and caching stuff, THIS ISN'T CYDOOR STUFF.

Upon installing LimeWire 2.0.2, the Bargain Buddy files are installed in c:\program files\bargain buddy, without my permission of course.

Then, a "bargains.exe" process is started, which is run from c:\program files\bargain buddy\bin\bargains.exe. There's no reason to have a process that is ALWAYS RUNNING installed if limewire really doesn't track it's users.

Additionally, the file c:\program files\bargain buddy\bin\apuc.dll is hooked DIRECTLY into Windows Explorer and Internet Explorer. If you kill the "bargains.exe" process, then open either an Explorer window, or Internet Explorer, "bargains.exe" is automatically started again. Reminder, this is all being done even if you install limewire but never actually run it!

Not to mention that, in the registry, apuc.dll has an entry:

HKEY_CLASSES_ROOT\CLSID\{CE31A1F7-3D90-4874-8FBE-A5D97F8BC8F1}

...which is named "UrlCatcher Class". You gotta be kidding me.

Then there are the programs in the registry that are set to run after you install LimeWire, which are located in HKLM\Software\Microsoft\Windows\CurrentVersion\Run :

C:\Program Files\adp\bin\adp.exe
C:\Program Files\Bargain Buddy\bin\bargains.exe
C:\WINDOWS\dlder.exe

I'm not 100% sure what "adp.exe" does. "bargains.exe" is obvious, to make sure the "urlcatcher" is running on startup.

"dlder.exe" creates a HIDDEN folder in the c:\windows directory called "explorer", then puts a file called "explorer.exe" in there. Once that's done, the "explorer.exe" file is run, which creates a permanent process, and a "run" entry in the registry is created for it.

A quick scan of the "c:\windows\explorer\explorer.exe" file shows the text "clicktilluwin". Why must a process be run from a HIDDEN folder? Why must it stay running? Why are all of these things present, when time and again Limewire claims there is no tracking being done of it's users?

Zildy

Unregistered December 24th, 2001 07:32 AM

FYI, Bargain Buddy is definitely not optional; it gets installed EVERY TIME.

I'm not pleased, since LimeWire DOES NOT TELL what is installed, when and where.

I DO ACCEPT the ads etc, when they're related to LimeWire and only run when LimeWire is active, but it's just bad form when something gets installed with LimeWire which will load everytime I turn on my computer and WILL NOT get uninstalled when I uninstall LimeWire.

LimeWire has become a definitive SpyWare.

B Rgds,
Maccara

Unregistered December 29th, 2001 12:49 AM

Spyware Made It Byeware
 
I used to recommend limewire to everyone, but now that they install these programs without telling you, I'm not only going to stop using it and recommending it, but I'm also going to encourage people to stay far far away from it. I uninstalled limewire hoping it would uninstall this junk, but they're still running. I'm extremely displeased. Bad move limewire guys, bad move.

crohrs December 31st, 2001 02:55 PM

See http://www.gnutellaforums.com/showth...1&pagenumber=2


All times are GMT -7. The time now is 10:07 AM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.