| How can we defeat this legal spy program? Hi,
Has anyone heard of this legal spy program called UltraView Plus »www.awarenesstech.com and know if there is any way to detect it and stop it?
On their website they claim it cannot be detected with anti-spyware or anti-virus programs, and it can get past any firewall.
It sounds like it MAY be using some kind of rootkit technology. Has anyone tested the program and know how we can defend ourselves against it?
Thanks for any assistance. |
|
|
|
| Hi yes i recently became aware of it and checked out the www etc. It does seem like some interesting claims are made about it, and if true they will have achieved something many others have tried to.
I have made some, Err, inquires about it and will post back with any further info.
Spanner
--
I Only Know What I Know But I'm Learning all The Time - Stay Safe - Spanner intheWorks/SpannerITWks |
|
 MarillaI Am My Own ArbiterPremium
join:2002-12-06
Belpre, OH | reply to agent x
Of course they claim it's undetectable.
And of course they will 'verify' that when you ask them. |
|
| reply to agent x
said by agent x:
On their website they claim it cannot be detected with anti-spyware or anti-virus programs, and it can get past any firewall.... Has anyone tested the program and know how we can defend ourselves against it? SpyCop detects it. i just queried the database and it is covered
--
look out kid they keep it all hid |
|
 keith2468Premium,MVM
join:2001-02-03
Winnipeg, MB | reply to agent x
legal to sell, but is it legal to run? Any company that has to follow the Sarbanes Oxley Act must closely restrict and monitor any staff if it deploys this tool, and it would be in breach of the act otherwise.
This is because the theft of password feature (aka keystroke logging) creates a situation of passwords and userids being non-confidential and shared. The legitimate business area person's or IT application area person's userid and password would be shared with the IT spy staff.
»www.awarenesstech.com/employees/···ble.html
quote:
So you can rest assured that none of the anti-spyware or anti-virus software currently available can detect UltraView Plus.
By design, UltraView Plus is hidden from everyone except the people authorized to see it. It does not appear in the Registry, the Process List, the System Tray, the Task Manager, on the Desktop, or in Add/Remove programs. There aren’t even an visible files that can be detected!
Not only does UltraView Plus work undetected, but it also circumvents ALL firewall programs, allowing you to gather the information you need without worrying about tripping any alarms.
Invisibility is not a feature that employer-approved or parent-approved spying software needs.
1. If you are the computer's legitimate administrator, you just give the program permission to run, and you tell your AV and ASW products to ignore it.
2. And it should be no secret from your employees or children that their computer activities are being monitored.
If you lead an employee to believe that their computer activities are confidential, and then you monitor those activities, you are probably violating their human rights (depending on the jurisdiction the case is brought in).
quote:
Now you can grab every username and password,
Keystoke logging is another feature with no obvious legitimate use for a commercial enterprise -- so why offer it. It is not worth the headache it creates.
Providing keystoke logging to customers makes the customer's security staff automatic suspects in any identity theft occurance that occurs involving their staff.
Plus your customers can't use your product if their company has to follow Sarbanes Oxley, because it creates the potential for the uncontrolled unaudited sharing of userids and passwords.
--
(Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC) |
|
keith2468Premium,MVM
join:2001-02-03
Winnipeg, MB | I'd say, if you want to fight this company, get a copy of their install file, and send it off to the anti-virus vendors, together with the link to the website you gave us.
While the product clearly has an application in monitoring children and staff, it also has features required only for unauthorized illegitimate spying.
Why spend the money adding the extra features? Maybe over-enthusiasm? Maybe they want to sell to customers that have illegitimate "requirements"?
--
(Virus&Hijacking FAQ + Submit suspected malware + Backups FAQ + Security FAQ TOC) |
|
| reply to agent x
Re: How can we defeat this legal spy program? Hmm, I queried the signature database of my copy of SpyCop and it did not return a result with the 7-26-05 signatures. I updated SpyCop to the 7-29-05 signatures and then I got the same results as boblandy. SpyCop will detect it. |
|
