GameSpy Arcade bundler software program contains adware (Spyware_PH_GameSpyArcade)

About this signature or vulnerability

Proventia Server IPS for Linux technology, Proventia Network MFS, Proventia-G 1.1 and earlier, Proventia Desktop, Proventia Network IPS, RealSecure Network, RealSecure Server Sensor, BlackICE Agent for Server, BlackICE Server Protection, Proventia Server IPS for Microsoft Windows technology, BlackICE PC Protection:

This signature looks for GameSpy Arcade spyware making a phone home type request after it has been installed.


Default risk level

Medium risk vulnerability  Medium

Sensors that have this signature

Proventia Server IPS for Linux technology: 1.0, Proventia Network MFS: XPU 1.42, Proventia-G 1.1 and earlier: XPU 24.3, Proventia Desktop: 8.0.614.1, Proventia Network IPS: XPU 1.42, RealSecure Network: XPU 24.3, RealSecure Server Sensor: XPU 24.3, BlackICE Agent for Server: 3.6eof, BlackICE Server Protection: 3.6.cpa, Proventia Server IPS for Microsoft Windows technology: 1.0.914.0, BlackICE PC Protection: 3.6cpa

Systems affected

Microsoft Windows 95, Microsoft Windows NT: 4.0, Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows 98SE, Microsoft Windows Me, Microsoft Windows XP, Microsoft Windows 2003 Server

Type

Unauthorized Access Attempt

Vulnerability description

GameSpy Arcade is a bundler software program that contains advertising-oriented spyware (adware) that is installed when GameSpy Arcade is downloaded on your system, with or without your permission. GameSpy Arcade itself is not spyware or adware, but it does install other pieces of spyware and adware. The bundled adware and spyware can be used to collect browsing session information to send it back to company servers and download and display new advertisements in a popup window while you are browsing the Web.

How to remove this vulnerability

If the GameSpy Arcade software is not desired, uninstall it from your system. Use an up-to-date antivirus or spyware removal program to determine if the target computer is host to a spyware program.

References

GIANT Labs Web site
GameSpy Arcade
http://www.spynet.com/spyware/spyware-GameSpy-Arcade.aspx

GameSpy Arcade Web site
GameSpy Arcade
http://www.gamespyarcade.com/legal.shtml

ISS X-Force
GameSpy Arcade bundler software program contains adware
http://www.iss.net/security_center/static/18252.php