GameSpy Arcade bundler software program contains adware (Spyware_PH_GameSpyArcade)

About this signature or vulnerability

Proventia Network MFS, Proventia-G 1.1 and earlier, Proventia Network IDS, Proventia Network IPS, Proventia Desktop, RealSecure Desktop Protector 3.6, Proventia Server IPS for Linux technology, RealSecure Server Sensor, RealSecure Network, BlackICE Server Protection, Proventia Server IPS for Microsoft Windows technology, BlackICE PC Protection, BlackICE Agent for Server:

This signature looks for GameSpy Arcade spyware making a phone home type request after it has been installed.


Default risk level

Medium risk vulnerability  Medium

Sensors that have this signature

Proventia Network MFS: XPU 1.42, Proventia-G 1.1 and earlier: XPU 24.3, Proventia Network IDS: XPU 24.3, Proventia Network IPS: XPU 1.42, Proventia Desktop: 8.0.614.1, RealSecure Desktop Protector 3.6: eob, Proventia Server IPS for Linux technology: 1.0, RealSecure Server Sensor: XPU 24.3, RealSecure Network: XPU 24.3, BlackICE Server Protection: 3.6.cpa, Proventia Server IPS for Microsoft Windows technology: 1.0.914.0, BlackICE PC Protection: 3.6cpa, BlackICE Agent for Server: 3.6eof, RealSecure Desktop: eob

Systems affected

Microsoft Windows 95, Microsoft Windows NT: 4.0, Microsoft Windows 98, Microsoft Windows 98SE, Microsoft Windows 2000, Microsoft Windows Me, Microsoft Windows XP, Microsoft Windows 2003 Server

Type

Unauthorized Access Attempt

Vulnerability description

GameSpy Arcade is a bundler software program that contains advertising-oriented spyware (adware) that is installed when GameSpy Arcade is downloaded on your system, with or without your permission. GameSpy Arcade itself is not spyware or adware, but it does install other pieces of spyware and adware. The bundled adware and spyware can be used to collect browsing session information to send it back to company servers and download and display new advertisements in a popup window while you are browsing the Web.

How to remove this vulnerability

If the GameSpy Arcade software is not desired, uninstall it from your system. Use an up-to-date antivirus or spyware removal program to determine if the target computer is host to a spyware program.

References

GIANT Labs Web site
GameSpy Arcade
http://www.spynet.com/spyware/spyware-GameSpy-Arcade.aspx

GameSpy Arcade Web site
GameSpy Arcade
http://www.gamespyarcade.com/legal.shtml

ISS X-Force
GameSpy Arcade bundler software program contains adware
http://www.iss.net/security_center/static/18252.php