Security Basics: RE: Kazaa?

From: Nicko Demeter <nicko_at_siterra.com>
Date: Fri, 11 Oct 2002 12:46:15 -0700

By definition a peer-to-peer software will need to scan your computer to
find out which one it can use to a) share files in your computer to
other peers and b) download files to your computer.

Kazaa is also spyware. Meaning all your searches/click-on-a-link/etc is
being reported back to them (you got it) on yet another port.

I would suggest using something like Ad-ware to remove the spyware
features of the program, keeping the functionality, and simply do not
download anything you don't know what it is. Even the best firewall
cannot protect you from yourself.

Nicko

-----Original Message-----
From: Christian Simatos [mailto:christiansimatos_at_freesurf.fr]
Sent: Friday, October 11, 2002 4:53 AM
To: security-basics_at_securityfocus.com
Subject: Kazaa?

Hello,

My son has installed Kazaa on his pc.

My personal antivirus is reporting that kazaa (I suppose because it's
port
1214) is scanning my own PC from ports which increase regularly. I
googled to try and find information, but I have not found this behavior
described.
- Can anyone help me?
- Is it the normal Kazaa behavior?
- Can I prevent it? (other than de-install kazaa)

FWIN,2002/10/11,12:33:21 +2:00 GMT,192.168.0.3:1031,192.168.0.2:139,TCP
(flags:S) FWIN,2002/10/11,12:35:00 +2:00
GMT,192.168.0.3:1054,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1055,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:00 +2:00
GMT,192.168.0.3:1056,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1064,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:02 +2:00
GMT,192.168.0.3:1065,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1066,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:02 +2:00
GMT,192.168.0.3:1067,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:35:18 +2:00 GMT,192.168.0.3:1071,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:35 +2:00
GMT,192.168.0.3:1078,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,12:35:55 +2:00 GMT,192.168.0.3:1119,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:56 +2:00
GMT,192.168.0.3:1120,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1121,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:35:56 +2:00
GMT,192.168.0.3:1122,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1135,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:36:12 +2:00
GMT,192.168.0.3:1136,192.168.0.2:1214,TCP (flags:S)
FWIN,2002/10/11,12:38:39 +2:00 GMT,192.168.0.3:1234,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:41:07 +2:00
GMT,192.168.0.3:1284,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,12:41:37 +2:00 GMT,192.168.0.3:1288,192.168.0.2:1214,TCP
(flags:S) FWIN,2002/10/11,12:41:58 +2:00
GMT,192.168.0.3:1290,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,12:42:49 +2:00 GMT,192.168.0.3:1302,192.168.0.2:139,TCP
(flags:S) FWIN,2002/10/11,12:43:40 +2:00
GMT,192.168.0.3:1317,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,12:44:31 +2:00 GMT,192.168.0.3:1318,192.168.0.2:139,TCP
(flags:S) FWIN,2002/10/11,12:48:01 +2:00
GMT,192.168.0.3:1319,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,13:00:26 +2:00 GMT,192.168.0.3:1320,192.168.0.2:139,TCP
(flags:S) FWIN,2002/10/11,13:12:52 +2:00
GMT,192.168.0.3:1330,192.168.0.2:139,TCP (flags:S)
FWIN,2002/10/11,13:25:18 +2:00 GMT,192.168.0.3:1332,192.168.0.2:139,TCP
(flags:S) FWIN,2002/10/11,13:37:43 +2:00
GMT,192.168.0.3:1333,192.168.0.2:139,TCP (flags:S)

Thanks, Chris
Received on Oct 15 2002