Proventia Server IPS for Linux technology, Proventia Network MFS, Proventia-G 1.1 and earlier, Proventia Desktop, Proventia Network IPS, RealSecure Network, RealSecure Server Sensor, BlackICE Agent for Server, BlackICE Server Protection, Proventia Server IPS for Microsoft Windows technology, BlackICE PC Protection:
This signature looks for GameSpy Arcade spyware making a phone home type request after it has been installed.
Medium
Proventia Server IPS for Linux technology: 1.0, Proventia Network MFS: XPU 1.42, Proventia-G 1.1 and earlier: XPU 24.3, Proventia Desktop: 8.0.614.1, Proventia Network IPS: XPU 1.42, RealSecure Network: XPU 24.3, RealSecure Server Sensor: XPU 24.3, BlackICE Agent for Server: 3.6eof, BlackICE Server Protection: 3.6.cpa, Proventia Server IPS for Microsoft Windows technology: 1.0.914.0, BlackICE PC Protection: 3.6cpa
Microsoft Windows 95, Microsoft Windows NT: 4.0, Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows 98SE, Microsoft Windows Me, Microsoft Windows XP, Microsoft Windows 2003 Server
Unauthorized Access Attempt
GameSpy Arcade is a bundler software program that contains advertising-oriented spyware (adware) that is installed when GameSpy Arcade is downloaded on your system, with or without your permission. GameSpy Arcade itself is not spyware or adware, but it does install other pieces of spyware and adware. The bundled adware and spyware can be used to collect browsing session information to send it back to company servers and download and display new advertisements in a popup window while you are browsing the Web.
If the GameSpy Arcade software is not desired, uninstall it from your system. Use an up-to-date antivirus or spyware removal program to determine if the target computer is host to a spyware program.
GIANT Labs Web site
GameSpy Arcade
http://www.spynet.com/spyware/spyware-GameSpy-Arcade.aspx
GameSpy Arcade Web site
GameSpy Arcade
http://www.gamespyarcade.com/legal.shtml
ISS X-Force
GameSpy Arcade bundler software program contains adware
http://www.iss.net/security_center/static/18252.php