Email Harvesting ?

[sp250]

Hi all, after installing Kazaa lite K++ 2.4.3 everything works as it should but a file ~ was left on my desktop (Win2000)
Opening this file with notepad revealed some email addresses, so I renamed a copy of it with a WAB extension and on double cliking on it, it opened OE address book with a complete listing of all email adresses on my PC. So at some stage the install copied my addresbook to the desktop but to what perpose? I can only guess that an atempt to harvest email address has been made, but by Whom? I'm sure we are all very trusting of the developers of kazzalite but should we be? or is this an as yet undocumented feature of KMD?
Any one else had this experience?

[AndrewBarker]

it depends on where you downloaded it from

did you d/l it from a link within the forum

[sp250]

I can't remember where I DL it (before Xmas) but the file is klitekpp243e.exe 3366186 bytes with a date 03/12/2003 11:53:02 am

[Switeck]

Originally posted by sp250@8 January 2004 - 18:33
Hi all, after installing Kazaa lite K++ 2.4.3 everything works as it should but a file ~ was left on my desktop (Win2000)
Opening this file with notepad revealed some email addresses, so I renamed a copy of it with a WAB extension and on double cliking on it, it opened OE address book with a complete listing of all email adresses on my PC.
The timing may have just been coincidence.

You probably have an email harvestor TROJAN on your computer and should get very recent, very good antivirus software ASAP.

[Jg427]

Originally posted by sp250@8 January 2004 - 17:33

Any one else had this experience?
Yes, I have seen the same "~" file on the desktop. It's not a trojan, it's a bug in a patch for outlook express.
Windows makes a backup copy of your address book, but misnames it and puts it in the wrong place.

In my OS (xp home) the address book and backup are at C:\doucments and settings\username\application data\microsoft\address book.

The address book is the file default.wab and the backup is default.wa~. In some operating systems I think it is username.wab and username.wa~

That ~ copy is the newest backup, so if you want, you can delete the old backup, move it to the proper folder and rename it.

More information. (http://www.pchell.com/support/tildefile.shtml)

[Entity101]

Thanks for the info Jg427!

[Switeck]

Originally posted by Switeck+9 January 2004 - 15:10--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Switeck &#064; 9 January 2004 - 15:10)</td></tr><tr><td id='QUOTE'>You probably have an email harvestor TROJAN on your computer and should get very recent, very good antivirus software ASAP.[/b]
Originally posted by Jg427@9 January 2004 - 16:30
<!--QuoteBegin-sp250@8 January 2004 - 17:33

Any one else had this experience?Yes, I have seen the same "~" file on the desktop. It&#39;s not a trojan, it&#39;s a bug in a patch for outlook express.
Windows makes a backup copy of your address book, but misnames it and puts it in the wrong place.[/quote]Wow, boy was I wrong...

It wasn&#39;t a trojan, unless Outlook Express is thought of as one. :lol:

[exeus]

Originally posted by Switeck@10 January 2004 - 18:44

It wasn&#39;t a trojan, unless Outlook Express is thought of as one. :lol:
Or windows...

[Mr. Blunt]

Originally posted by Jg427+9 January 2004 - 13:30--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Jg427 @ 9 January 2004 - 13:30)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-sp250@8 January 2004 - 17:33

Any one else had this experience?
Yes, I have seen the same "~" file on the desktop. It&#39;s not a trojan, it&#39;s a bug in a patch for outlook express.
Windows makes a backup copy of your address book, but misnames it and puts it in the wrong place.

In my OS (xp home) the address book and backup are at C:&#092;doucments and settings&#092;username&#092;application data&#092;microsoft&#092;address book.

The address book is the file default.wab and the backup is default.wa~. In some operating systems I think it is username.wab and username.wa~

That ~ copy is the newest backup, so if you want, you can delete the old backup, move it to the proper folder and rename it.

More information. (http://www.pchell.com/support/tildefile.shtml) [/b][/quote]
Ah thanks for that info. I have gotten that "~" file on my desktop too. I didn&#39;t bother to try opening it. I just simply deleted it. Thanks again.

[Jg427]

Your welcome, glad I could help.

The first time I saw that mystey file, I opened it with notepad and was suprised to see e-mail addresses. I searched for a while before I found any information.

Jg427

[sp250]

Thanks all for the help.

I apologise for passing doubt about the kazaalite developers in my original post, shame on me.

I should have done more research befor posting <_<

[Switeck]

Originally posted by sp250@12 January 2004 - 17:03
I should have done more research befor posting <_<
It&#39;s hard to do ENOUGH research to keep up with all the &#39;behind the scenes&#39; stuff Microsoft likes to do. :angry: