Nero Caught Out Using Spyware

[sharedholder]

From some forum :


ahead Nero, been caught using adware / spyware.

In the ahead folder, in the folder named nero, is a .dll file named

drweb32.DLL this is the adware / spyware.

I just deleted the actual .dll file, got rid of the adware / spyware, with no difference to the running of nero.

Dam sleazy bastards.




here is the log from the program that found it

C:program filesaheadnerodrweb32.dll

Eacceleration

Eacceleration collects information about webpages you visit as well as delivers pop-up advertisements.


eAcceleration Privacy (http://www.eacceleration.com/privacy/)

SpywareGuide Info (http://www.spywareguide.com/creator_show.php?id=23)

[mEtho]

:blink:

[{I}{K}{E}]

why should they wanna know which websites we are visiting :huh:

[sharedholder]

Its not only that :


as well as delivers pop-up advertisements.

[{I}{K}{E}]

Originally posted by sharedholder@14 February 2004 - 11:24
Its not only that :


as well as delivers pop-up advertisements.

now thats a reason to crack it instead of buying it :angry: :lol:

[skelley521]

Yep, deleted it plus the drweb32.VDB file also.
No more nag to access the internet when you start nero!!

Good find sharedholder ;)

[zapjb]

Yes thanks SH. :)

[tutv]

Hmmm, file is described as 'Dr.Web ® Virus-Finding Engine'.

[atiVidia]

and thats exactly what it is. i tested it out with the file removed and nero could not check for viruses at all...

get zonealarm and keep the prog from accessing the net and u should be fine, if it is indeed spyware/adware

[sharedholder]

Originally posted by tutv@14 February 2004 - 13:17
Hmmm, file is described as 'Dr.Web ® Virus-Finding Engine'.

August 20, 2002: patch 4.28d of Doctor Web Anti-Virus released
This patch upgrades the antivirus engine module (drweb32.dll) to version 4.28d.
The following major changes and improvements were made to the previous version:
some bugs in mail files analysis fixed;
Doctor Web users can obtain either a new distribution kit, all amendments included, or the patch alone in the form of an archive (0,6 Mb) drw428p4.zip. The patch can be downloaded from FTP-site of DialogueScience, Inc.

Its a sort of advertising for Dr.WEB antivirus, overwise what should do a antivirus dll file in NERO ?


as well as delivers pop-up advertisements.


http://www.dials.ru/english/inf/drwupgr_428e.htm

[DWk]

If my adaware isn't finding it, I'm not removing. Nero is fine as it is....

One thing though - which version are you talking about, SH?

[atiVidia]

Originally posted by sharedholder@14 February 2004 - 08:55
what should do a antivirus dll file in NERO ?

NERO scans the files which are about to be burned to a cd before it is actually burned


very useful

[Marius24]

so you dont burn a virus to disk? It would seem reasonable

[mEtho]

Whats the final verdict, do we need those files or we don’t??

They seems ok to me and my Adware Programy seems to like those file ;)

[atiVidia]

Originally posted by mEtho@14 February 2004 - 09:40
Whats the final verdict, do we need those files or we don’t??

They seems ok to me and my Adware Programy seems to like those file ;)
dont delete it

if it seriously is bugging you, dload zone alarm and see if it tries to get to the net

if it does then block it




but yes, final verdict is that the file should not be deleted

[mEtho]

Cheers

[fkdup74]

dude, adaware and spybot arent 100%
dont get me wrong, theyre good, i still use em both,
but they can only detect stuff thats been identified as spy/adware
if this file become a big enough problem to privacy,
it will probably be submitted into the detection rules
maybe in future updates, maybe not

read this and decide about the accuracy of spybot or adaware:
http://filesharingtalk.com/index.php?showtopic=100062

[Nightwolf]

I renamed both of those files and now Nero seems to start up faster. Thanks for the tip guys. They should give you the option to disable virus scanning in Preferences.

[iMartin]

Originally posted by Nightwolf@14 February 2004 - 14:44
I renamed both of those files and now Nero seems to start up faster.
Yeah, I noticed that too, good deal.

[shn]

I&#39;ll be uninstalling Nero. I knew there was something sneaky about it <_<

[iMartin]

I don&#39;t think it&#39;s serious enough to uninstall Nero, it&#39;s nothing major.

[Robert00000]

Originally posted by DWk@14 February 2004 - 14:08
If my adaware isn&#39;t finding it, I&#39;m not removing. Nero is fine as it is....

I second that. This isnt a real problem to be concerned about.

As a rule of thumb you shouldn&#39;t allow internet access to any software that wants internet access, when it doesnt need it to function.

Nero as far as i know doesnt request internet access, so any processes these files carry out are within the system.

[Xero Grid]

I had it. I was about to post my findings on this forum, but I accidently deleted my log fileso I lost my proof.
I found it and got rid of it using Spy Sweeper. Hasn&#39;t let me down yet. Nero still working fine.
Doesn&#39;t matter. Nero is still the best overall burning program.

-- Xero Grid --

[fkdup74]

Originally posted by Robert00000@14 February 2004 - 17:35
As a rule of thumb you shouldn&#39;t allow internet access to any software that wants internet access, when it doesnt need it to function.

definately ;)
especially with a cracked app :ph34r:

thats why i like alcohol, it was dumb enough to ask for permission...

i told it to feck off :P