GameSpy Arcade bundler software program contains adware (Spyware_PH_GameSpyArcade)

About this signature or vulnerability

Proventia Network MFS, IBM Security Server Protection for Windows, Proventia Desktop, Proventia Network IDS, Proventia-G 1.1 and earlier, BlackICE Agent for Server, BlackICE PC Protection, BlackICE Server Protection, RealSecure Network, RealSecure Server Sensor, RealSecure Desktop, RealSecure Desktop Protector 3.6, Proventia Network IPS, Proventia Server IPS for Linux technology, Virtual Server Protection for Vmware:

This signature looks for GameSpy Arcade spyware making a phone home type request after it has been installed.


Default risk level

Medium risk vulnerability  Medium

Sensors that have this signature

Proventia Network MFS: XPU 1.42, IBM Security Server Protection for Windows: 2.1.14.2400, IBM Security Server Protection for Windows: 1.0.914.0, Proventia Desktop: 8.0.614.1, Proventia Network IDS: XPU 24.3, Proventia-G 1.1 and earlier: XPU 24.3, BlackICE Agent for Server: 3.6eof, BlackICE PC Protection: 3.6cpa, BlackICE Server Protection: 3.6.cpa, RealSecure Network: XPU 24.3, RealSecure Server Sensor: XPU 24.3, RealSecure Desktop: eob, RealSecure Desktop Protector 3.6: eob, Proventia Network IPS: XPU 1.42, Proventia Server IPS for Linux technology: 1.0, Virtual Server Protection for Vmware: 1.0

Systems affected

Microsoft Windows 95, Microsoft Windows NT: 4.0, Microsoft Windows 98, Microsoft Windows 98SE, Microsoft Windows 2000, Microsoft Windows Me, Microsoft Windows XP, Microsoft Windows 2003 Server

Type

Unauthorized Access Attempt

Vulnerability description

GameSpy Arcade is a bundler software program that contains advertising-oriented spyware (adware) that is installed when GameSpy Arcade is downloaded on your system, with or without your permission. GameSpy Arcade itself is not spyware or adware, but it does install other pieces of spyware and adware. The bundled adware and spyware can be used to collect browsing session information to send it back to company servers and download and display new advertisements in a popup window while you are browsing the Web.

How to remove this vulnerability

If the GameSpy Arcade software is not desired, uninstall it from your system. Use an up-to-date antivirus or spyware removal program to determine if the target computer is host to a spyware program.

References

GIANT Labs Web site
GameSpy Arcade
http://www.spynet.com/spyware/spyware-GameSpy-Arcade.aspx

GameSpy Arcade Web site
GameSpy Arcade
http://www.gamespyarcade.com/legal.shtml

ISS X-Force
GameSpy Arcade bundler software program contains adware
http://www.iss.net/security_center/static/18252.php