spyaza?

[esqobar]

Here's one for you. Shareaza is meant to be spyware free, right? Then how come right after installing it, Pest Patrol found SaveNow spyware on my system?

[Dividend]

Either because it was on your system prior to installing Shareaza, or PestPatrol is deciding to recognize random P2P programs as spyware. You should use Spybot Seek & Destroy or Ad-Aware instead, as they're much more reliable. If you still have your doubts, run programs like Filemon & Regmon, install Shareaza and watch the results - it's clean as a whistle.

Also, always make sure you download from the official site (www.shareaza.com/download).

[Evil_Dweller_01]

Shareaza is spyware free...

PestPatrol had to make a mistake when searching before installing shareaza..

[canrocks]

Shareaza has no spyware. Never has, never will. The programmer, Mike, is a kind generous soul who would never, ever, under any circunstance advertise, and LIE about it, with his software. Before putting adware in his app and lying about it, don't you think he would put ads on his website?

[esqobar]

Ok then, how about this. I cleaned the SaveNow reg keys during the last PP scan (about an hour ago). ALL I have done since then is run Shareaza. I have just re-run PP and they have re-appeared.

I do respect the knowledge of the ZP members, and think that if Shareaza did contain spyware everyone would be screaming about it, but there is something funny going on.

FYI, I have just run a virus scan using an up to date virus def & I am clean there.

[esqobar]

Think I'm gonna grab Regmon & see what's going on...

[Sephiroth]

Think I'm gonna grab Regmon & see what's going on...

Well i hope you find out what exactly is going on and post if you find anything.

[Kevin33134]

Here's one for you. Shareaza is meant to be spyware free, right? Then how come right after installing it, Pest Patrol found SaveNow spyware on my system?
Did you download the installer directly from the download links on the site?

[nukehella]

I installed the latest Shareza 1.8 something(actually the BEta for 1.9 if I recall) 2 days ago. I haven't used Shareza since 1.5
I ran Spybot this morning with the latest update and it came up clean.

[Evil_Dweller_01]

Did you download the installer directly from the download links on the site?


He might have downloaded something a bit fishy from the network itself...

[shawners]

this is the kind of thing the good trusting, sweet natured people at the RIAA headquarters warned us about. God bless each one of their sadistic souls.

[esqobar]

Sorry to post and then answer my own question! I think I know what is going
on. Shareaza IS creating these keys, but (according to the Shareaza forums) they are false positives.

As it is a multi-network client, Shareaza creates reg keys that are being
mistaken by PP for other P2P apps such as BearShare and XoloX. It is also
mistaking the HKLM\software\classes\magnet hive for SaveNow (spyware) because BearShare, which also supports Magnet links, installs SaveNow.

I'm sorry for the scare. I probably should have done this research before
posting this thread (just lazy I guess). I am in no way trying to tarnish
the rep of Shareaza; I am in fact very impressed with it in the 2 weeks or
so I have been using it.

For the record: Shareaza is spyware free and Pest Patrol is Wrong!

I'll shut up now.

[Sephiroth]

That doesnt make any sense though and i doubt your explaination is true especially. You probably got it from something you have installed in the past which could be anything and pest patrol didnt find it.

Which it could have came from alot more places than bearshare or xolox and you never said that you even used either of those programs.

[napho]

There's also a drive-by version that you could've gotten from a website.

[esqobar]

No, the magnet reg keys I was referring to were definately created by Shareaza. Here is the extract from Regmon:

8954 24.94816967 Shareaza.exe:2876 CreateKey HKLM\Software\Magnet SUCCESS Key: 0xE2E4C308
8955 24.94821409 Shareaza.exe:2876 CreateKey HKLM\Software\Magnet\Handlers SUCCESS Key: 0xE1D7A0C8
8956 24.94825404 Shareaza.exe:2876 CreateKey HKLM\Software\Magnet\Handlers\Shareaza SUCCESS Key: 0xE2E87848

...and attached is the screen print of my Pest Patrol results (if I've done it right).

This thread in the Shareaza forum tackles the issue:

http://forums.shareaza.com/showthread.php?threadid=7721&highlight=savenow


Finally, yes it was a legit installer I downloaded from the official Shareaza website and no the regkeys definately weren't there before.

[Sephiroth]

Thats not spyware or adware at all, there was none to begin with. Those registry keys are used for magnet links which is no privacy risk at all.

Pest patrol sucks and the program labels, it uses are wrong because numerous programs have implemented magnet links.

[esqobar]

Yeah, I agree! That's what I said earlier. They are false positives...and I will be replacing Pest Patrol asap!

[gnutellafan]

this post should be deleted by mods since its all misinformation. There is no spyware in shareaza

[RACKnRAIL]

Here's one for you. Shareaza is meant to be spyware free, right? Then how come right after installing it, Pest Patrol found SaveNow spyware on my system?

I use to use PestPatrol too. It was telling me eMule was spyware too. It seems to target all p2p's, even K++.

[The Hunter]

gnutellafan, no it should not be deleted, as it does have usefull information. IE important info about PestPatrol.