Close Combat Series :: View topic - Gamespy == malware / adware ??

through

[^/[Print]\]
Goto page 1, 2 Next :| |:
Close Combat Series -> The Mess

#1: Gamespy == malware / adware ?? Author: MilesBehind,

Posted: Wed Dec 29, 2004 2:15 pm
—
Soldiers,

I've been using gamespy for a while now, enjoying many CC games. It works perfectly and without any charges.

I came across some disturbing news considering gamespy that you're not going to like: http://www3.ca.com/securityadvisor/pest/Pest.aspx?id=453073352

But thats not all. See what comes up when you google for "gamespy malware" or "gamespy adware". It's in the top 5 of high risk applications. There have been reports of potential vunerabilties in the software that are not fixed but denied instead.

For me, I have removed gamespy for the moment - which I dislike since I have no other options to play online.

Any comments??

#2: Re: Gamespy == malware / adware ?? Author: ZAPPI4, Location: Belgium Liege

Posted: Wed Dec 29, 2004 5:32 pm
—

MilesBehind wrote:

Soldiers,

I've been using gamespy for a while now, enjoying many CC games. It works perfectly and without any charges.

I came across some disturbing news considering gamespy that you're not going to like: http://www3.ca.com/securityadvisor/pest/Pest.aspx?id=453073352

But thats not all. See what comes up when you google for "gamespy malware" or "gamespy adware". It's in the top 5 of high risk applications. There have been reports of potential vunerabilties in the software that are not fixed but denied instead.

For me, I have removed gamespy for the moment - which I dislike since I have no other options to play online.

Any comments??

but you ve got other way to play online, check on our Web directory on main menu area...
Anyways, i use game spy since 3 years now, and i never got any trouble about security or so

#3: Author: GS_v_Witzleben, Location: Spessart / Germany

Posted: Wed Dec 29, 2004 8:02 pm
—

Quote:

Adware : Software that brings ads to your computer. Such ads may or may not be targeted, but are "injected" and/or popup, and are not displayed within the form of an ad-sponsored application. Some Adware may hijack the ads of other companies, replacing them with its own. See also Spyware, Browser Helper Object.

gamespy is not dangerous, and if u pay the ad´s are away .... not everything in the electronic world (internet) isn´t free of charge Wink

Quote:

10 million gamers around the world

use it, it can´t be so bad, or?

regards

#4: Author: MilesBehind,

Posted: Thu Dec 30, 2004 1:42 pm
—

Quote:

gamespy is not dangerous, and if u pay the ad´s are away .... not everything in the electronic world (internet) isn´t free of charge Wink

I don't mind the ads, it is the fact that it's classified as spyware worries me:
http://www.thenetworkadministrator.com//top2004hackertools.htm

Martin.

#5: Author: GS_v_Witzleben, Location: Spessart / Germany

Posted: Thu Dec 30, 2004 2:57 pm
—
sorry that i ask, but are u an "expert" about spyware?

i´m not, and maybe my english lacks a bit, but what i read doesnt sound dangerous for me

Quote:

records passwords

god thanks that it does, i hate it if i have to enter the password again and again ;o)

Quote:

Internet visits,

so does the internet explorer, for a faster load (and maybe other things) ... well well, i don´t surf via gamespy but with internet explorer (at moment with firebird for some unspectacular reason)

Quote:

for the password?

Quote:

sometimes control computers services and remotely execute commands

thats the main feature of gamespy i guess Wink

or do u want to exchange ip adress with horrible guys who play war games and maybe hack into your pc for making some war? Wink

most games come out with gamespy on disc.......

.....i don´t want to say that u shouldn´t be carefull about what u do in the net, there surely a lot of really really dangerous, mean, ugly and dirty guys who wants your money and porn pic´s from your desktop....but I (non-expert) would say GameSpy is safe! and for playing close combat very very important....support the community with playing that game!

regards

p.s.: don´t let the fear guide your life, that´s depressing ;o)

#6: Author: bambam887, Location: Belgium

Posted: Thu Dec 30, 2004 6:16 pm
—

Quote:

p.s.: don´t let the fear guide your life

Well put

You can install adaware if it would make you feel more comfortable.
PS they only scan your pc if you allow it though

#7: Author: nomada_EgoSanti,

Posted: Mon Jan 03, 2005 3:40 pm
—
my spybot shearch&destroy dont detect nothing.
Dont use Iexplorer use firefox

#8: Author: MilesBehind,

Posted: Tue Jan 04, 2005 7:44 pm
—
Try with Norton antivirus.

For other spyware/adware/malware: use more than one detection program, they don't cover all variants.

I use firefox also, that's much better than exploiter. But don't forget: spyware uses iexplore components.

M.

#9: Author: nomada_EgoSanti,

Posted: Wed Jan 05, 2005 1:18 am
—
i have norton 2005, spybot shearh&destroy, the cleaner, spyhunter and softspy, and no one detect nothin, and i think that Game Spy soft is no adware.

#10: Author: mooxe,

Posted: Wed Jan 05, 2005 2:20 am
—
GameSpy is adware within itself.

#11: Author: nomada_EgoSanti,

Posted: Wed Jan 05, 2005 10:11 am
—
do you say like Kazaa media???? because spy bot and others detect it and erase it.

Why?????

does GS open hide conections?????

Send my info????

What??????

#12: Author: mooxe,

Posted: Wed Jan 05, 2005 12:54 pm
—
I say that because GameSpy shows you advertisements within the Gamespy Arcade program. I do not think it sends data out about users anywhere.

#13: Author: kwp,

Posted: Thu Jan 06, 2005 3:07 am
—
Gamespy also requires you to open ports in your firewall that are commonly exploited by Trojans.

#14: Author: mooxe,

Posted: Thu Jan 06, 2005 4:20 am
—
6667 (IRC) - possibly can be closed if you dont want to chat
3783 (Voice Chat Port) - Can be closed
27900 (Master Server UDP Heartbeat) - also used by MSN Zone
28900 (Master Server List Request) - also used by MSN Zone
29900 (GP Connection Manager) - also used by MSN Zone

29901 (GP Search Manager)
13139 (Custom UDP Pings)
6515 (Dplay UDP)
6500 (Query Port)

The last 4 I am not so sure about. These ports are not opened on my firewall yet GSA functions 100%.

Quote:

Gamespy also requires you to open ports in your firewall that are commonly exploited by Trojans.

Thats a pretty blanket statement. You can say that about Windows (all verisons) also. Every single application you use to interact with the internet needs a port open in order for it to function. If anyone is a bit paranoid of GameSpy running on thier PC then its time to press the power button, thats ultimate safety.

For details on gamespy ports and firewall info...

http://www.gamespyarcade.com/helpers/workshop/firewalls/

#15: Author: kwp,

Posted: Fri Jan 07, 2005 12:22 am
—
port 6667:

Dark FTP
ScheduleAgent
SubSeven
Subseven 2.1.4 DefCon 8
Trinity
WinSatan,
W32.HLLW.Gaobot
IrcContact
Deftcode
IRC.Flood
W32.HLLW.Nool
W32.HLLW.Warpigs
Spigot
W32.HLLW.Studd
W32.Cissi
W32.Mimail
W32.Opasa
Sdbot
W32.Korgo
Hacarmy
W32.Mota
W32.Spybot
Alnica
W32.Mydoom
Maxload
W32.Bofra

http://www.bekkoame.ne.jp/~s_ita/port/port6000-6999.html

#16: Author: mooxe,

Posted: Fri Jan 07, 2005 3:39 am
—
Almost and if not all of those require you to execute a file you've recieved in your email to run. Those that dont would be caught by a virus scanner.

Regardless if your port 6667 is closed. Its most likely not closed for you to send out data. A firewall only blocks incoming traffic, not outgoing unless specifically instructed, not all firewalls will do this either.

If you execute an attachment in your email you've effectively bypassed your firewall. The program, whatever it may be, is now communicating from your PC.

You cant just say having an open port means your vulnerable. It takes user intervention, like executing email/downloaded attachments, not having an up-to-date virus scanner or just plain bad practice on the internet.

#17: Author: kwp,

Posted: Fri Jan 07, 2005 4:21 am
—

Quote:

Regardless if your port 6667 is closed. Its most likely not closed for you to send out data. A firewall only blocks incoming traffic, not outgoing unless specifically instructed, not all firewalls will do this either.

The firewall I am running blocks both incoming and outgoing activity on port 6667 by default for the very reason I posted earlier. If your firewall doesn't block outgoing traffic it's not much of a firewall to begin with and leads one to wonder why someone would buy that product to begin with.

Quote:

If you execute an attachment in your email you've effectively bypassed your firewall. The program, whatever it may be, is now communicating from your PC

.

One could also argue that when you execute GameSpy that port is now open for outgoing traffic and it is communicating from your pc. Do you know what data it is mining? If it scans your computer to see what software you have loaded what else is it recording?

I'm not here to say that GameSpy is either good or bad but personally I don't like it. I am just presenting the information I have at hand and it is up to the individual to decide whether or not they want to use it. An informed decision is better than a decision based on how many people use a computer program as the vast majority of computer users generally don't understand the implications or possible outcome of some of the things they do with their computers.

#18: Author: nomada_EgoSanti,

Posted: Fri Jan 07, 2005 11:14 am
—

kwp wrote:

Gamespy also requires you to open ports in your firewall that are commonly exploited by Trojans.

and messenger too Wink

but you have to be infected, and if your PC is not infected where is the problem, every trojan had to be compiled to work in you PC

#19: Author: nomada_EgoSanti,

Posted: Fri Jan 07, 2005 11:17 am
—

mooxe wrote:

A firewall only blocks incoming traffic, not outgoing unless specifically instructed, not all firewalls will do this either.

this is not correct, firewalls can block incoming and outcoming, only the router block incoming by hardwre, the firewall blocks by software

#20: Author: mooxe,

Posted: Fri Jan 07, 2005 12:43 pm
—
Your right but generally all traffic leaving your PC is assumed to be safe and is not blocked by default.

Close Combat Series -> The Mess

output generated using printer-friendly topic mod. All times are GMT

Goto page 1, 2 Next :| |: Page 1 of 2