Kazaa possible backdoor?

[cha_chi]

I searched the threads and didn't find anything, so I thought I'd post about this

I'm currently running Win2k with Zone Alarm and Norton. I have Kazaa Lite running every once in awhile to share files. My question is about what I see, and don't see, in my Zone Alarm logs. My first concern is that when Norton starts up it is automatically disabled, and automatically enables itself. My second concern is that my Zone Alarm logs seem to have been totally erased every time I close the program or restart my computer. And finally, (I know this is getting long but bear with me) When I do a "lock down" and totally shut off internet access (without Kazaa running) my log file lights up with port 1214 access attempts. So my concern is these alerts I'm getting when I lock down my computer. I'm wondering if Kazaa is just built to attempt to connect like this or am I part of a huge DDoS network? I really don't want to format my drive, but I'm getting a bit more paranoid every day. If anyone can answer some of these questions if it would GREATLY appreciated! Thanks!

[neta1o]

Kazaa has somewhat of a backdoor called Cydoor. It is, by definition, spyware, that logs the websites that you visit and customizes pop-up ads accordingly. You may want to unistall Kazaa and use its spyware free alternative at www.kazaalite.com . If that doesn't fix it you may want to scan your pc to make sure there is no trojan on it. www.housecall.antivirus.com. Hope gets ya going in the right direction.

neta1o

Originally posted here by cha_chi
I searched the threads and didn't find anything, so I thought I'd post about this

I'm currently running Win2k with Zone Alarm and Norton. I have Kazaa Lite running every once in awhile to share files. My question is about what I see, and don't see, in my Zone Alarm logs. My first concern is that when Norton starts up it is automatically disabled, and automatically enables itself. My second concern is that my Zone Alarm logs seem to have been totally erased every time I close the program or restart my computer. And finally, (I know this is getting long but bear with me) When I do a "lock down" and totally shut off internet access (without Kazaa running) my log file lights up with port 1214 access attempts. So my concern is these alerts I'm getting when I lock down my computer. I'm wondering if Kazaa is just built to attempt to connect like this or am I part of a huge DDoS network? I really don't want to format my drive, but I'm getting a bit more paranoid every day. If anyone can answer some of these questions if it would GREATLY appreciated! Thanks!

[cha_chi]

Thanks But I don't know if I spoke right there. I do have Kazaa Lite installed, so I apologize for simply saying "KaZaa" when I meant Kazaa Lite. But I will check that site out and have my computer scanned. What I'm thinking is that it's a DDoS network that hasn't been detected yet, and wondering if someone could tell me about how KaZaa connects to your computer using port 1214 and why it repeats itself when it can't connect?

[Neo-Icarus]

Kazaa is not a virus it is a Cydoor,Spware for people who want to advertise junk and expand there network

[mayhem991]

Here is the disclaimer from ZD net.

Editor's note: This download includes additional applications that are bundled within the software's installer file, some of which may be provided by parties other than the developer of this download. These applications may deliver advertisements, collect information, overlay content or graphics on the Web site you are viewing, or modify your system settings. As with all downloads, CNET recommends that you pay close attention to the options presented to you during the installation process. Mandatory third-party applications bundled with this download include Cydoor. Optional third-party applications include SaveNow, DelFin, MediaLoads, b3d Projector, and New.net.

[zaggy]

If you are concerned with what is on your system, try running Adware to check for spyware that may be installed on your machine. Then run a full system scan with your anti-virus and get a good trojan scanner as well.

If your machine is clean, I wouldn't worry too much. There is as noted elsewhere in this thread, a certain amount of risk involved with any p2p software.

[neel]

Kazzaa is in my opinion nothing more then a trojan with a nice jacket. A prohgramm that allows acces to yer harddisk never is totally secure (history proves). And that combined with the psychology of kazzaa... sharing (copyrighted) files and track the people who use the infrasctruture so you can send em the right adverts.

I have a sepparate windows partition with no access to other partitions, if it tries to by just raw editting my harddisk the progam get's "suspened", like virusscanners can hold the computer if any programmm tries to write to the masterbootrecord. You could also use a separate computer for that... I have installed a nice browser and an irc client and that's all I need if I want to have something from kazzaa. It's a little paranoid, but it's safe and I don't care about any kazzaa virus, because there isn't anything usefull on that box.

Of course there still is a decent firewalland AV. My hardware firewall treats it like a separate network, so it also isn't a danger for my LAN...

**** my story is a mess, sorry for that, I don't even know what I tried to say really... I have a headache from here to the USA and back along the other side of the world.

[ShagDevil]

Yeah, I gotta admit, Kazaa's antics are pretty lame. It targets a large audience of mostly computer illiterate people (in my household anyways). The average user in my household doesn't understand the implications of trojans and viruses. Even though a few weeks prior the entire system couldn't even boot up because of a trojan unloaded on the computer via Kazaa. No matter how much I explain how vile Kazaa is, I get the same response "well, 'so and so' is using it, and they're having no problems. Well, 5 out of 6 times you won't die from playing russian roulette either. To be perfectly honest, I'd rather just buy the damn CD or tape and not have to spend 15 hours trying to figure out why my computer won't boot up.

[KILLA_SIN]

go to K-LITE home page this is where the real kazaalite is!!
.com has a lil kiddie hack of it pluse their jockin our K++ and tools for kazaa!!! and also drop by the forum where all the devlopers are!! the forum is down at this moment due to the server being switched!! but it will be up shortly very soon!!!
the forum will also be converted soon so we will have all the verifieds back up!!!!

ShagDevil Yeah, I gotta admit, Kazaa's antics are pretty lame. It targets a large audience of mostly computer illiterate people (in my household anyways). The average user in my household doesn't understand the implications of trojans and viruses. Even though a few weeks prior the entire system couldn't even boot up because of a trojan unloaded on the computer via Kazaa. No matter how much I explain how vile Kazaa is, I get the same response "well, 'so and so' is using it, and they're having no problems. Well, 5 out of 6 times you won't die from playing russian roulette either. To be perfectly honest, I'd rather just buy the damn CD or tape and not have to spend 15 hours trying to figure out why my computer won't boot up.

well ya go spend ****in 20 dollars for a cd i will d/l all them for nuthing!!!! get all you buy for free!!!!!kazaa is not a back door to virus's if you use it right you wont get virus's!!if you use some judgement and your brain!!! and there are tones of verified web sites to cut the virus bullshit and fake file crap!!!! and also a good firewall thats configured right will cover all attempted access attempts so kazaa is no back door!!!and that kazaa inbound that you see on ya firewall is kazaa connecting to supernods!!!!come on ppl i thought this site was filled with good info and smart ppl till i seen these posts!!!!get sum knowledge befor you condem a program!!and if you dont know the forum will explain all your question that you may have conserning kazaa and computers related problems!!!!and the forum will also shoot ya stupid ass scare tatic's to hell!!there is nothing going to happin to kazaa "no riaa no body will ever shut it down cause they will have to bust all supernodes that are runnin"and thats impossable cause alot of them are in countries that fileshareing is legal!!and the usa cant stop kazaa cause kazaa is not bound by us law!!!cause its was made by a offshore company
called sherman networks and also the ppl that own the fasttrack network are in a country where file shareing is legal !!!so scare tatic smear tatics!!! you are not scareing anyone cause ppl that read this will come to your site and see its all false!!!!!if ya wana smear sumtin go smear roxio for shoty programs or microsoft for makin a patch for a patch!!!!

get real here ppl!!
im not here to diss anyone im just saying its all bullshit!!!
well anywho im going to d/l a movie now and i will be thinkin bout you buying it at the same time and laughin my ass off !!!! have fun blowing ya money!!! you all know i dunn saved $2.000 on software and two hundred dollars on music cd's!!!!!

[Und3ertak3r]

I don't believe it..cha_chi has said now atleast twice that KAZAA-LITE is the installed programm.. Why is everyone talking KAZAA?? All the other Issues aside...

My advice may not be much help..
Spybot S&D..or Ad-Aware to find Parasite/Spyware.. (your concern maybe away from Kazaa-Lite)
The Cleaner or Tauscan to check for most trojans.. these will pick up a lot of the common backdoor/key-hookers/trojan.
Or try Process Explorer- and see what is running in your machine.. do some real sluthing.. read about it here


Cheers