Bugtraq: trojaned Reality Fusion app

[J Edgar Hoover <zorch () TOTALLY RIGHTEOUS NET>]

The executable rfupd.exe included in the Reality Fusion products bundled
with many popular cameras sends the following data to 204.176.10.168 port
80 every time you use the app, reboot your computer or change
configuration.

-----
GET /GCSE/Messages/todolist04.tag HTTP/1.1
If-Modified-Since: Sat, 03 Mar 2001 00:43:39 GMT
If-None-Match: "e9ffe1fc7aa3c01:87a"
User-Agent: RFUPD
Host: www.RealityFusion.com
Connection: Keep-Alive
-----

This is particularly disturbing since the application by its nature
enables video/audio surveillance of the user.

I'm real curious what kind of information is obfuscated in the string
If-None-Match: "e9ffe1fc7aa3c01:87a" too.

Anyone interested in dissecting the (windows) application can find it at
http://totally.righteous.net/rfupd.exe

Cheers,
zorch