topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Saturday December 14, 2024, 9:58 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Public Service Announcement: AIMP2 is Evilware  (Read 5657 times)

Innuendo

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,266
    • View Profile
    • Donate to Member
Public Service Announcement: AIMP2 is Evilware
« on: September 22, 2009, 09:39 AM »
This morning I thought I'd check out AIMP2 to see if it had the right stuff to become the mp3 player on my system. Surfing over to www.aimp.ru showed that v2.60 RC 1 is the latest version which I promptly downloaded from their server and installed.

Everything was going great & I thought I might have a winner until about 10 minutes into my tests AIMP2 was sitting idle & my firewall program informed me AIMP2 was trying to make a connection to www.007guard.com. Odd, I thought, as I denied the connection request. As I sat and mulled this over AIMP2 tried to contact that web site again no less than three times every time on a different port. Very odd indeed.

Hitting up Google revealed that there's only one purpose for www.007guard.com's existence and that is to spread the 007guard adware program. It's an evil little program that monitors all of your internet traffic and redirects all internet searches.

EDIT: AIMP2 v2.51 does not seem to have this behavior and seems to be clean thus far.

When did AIMP2 cross over to the dark side? I guess the author got tired of not being compensated for his work. I suggest anyone who has installed this lately check to see if they are infected.
« Last Edit: September 22, 2009, 11:12 AM by Innuendo »

Innuendo

  • Charter Member
  • Joined in 2005
  • ***
  • default avatar
  • Posts: 2,266
    • View Profile
    • Donate to Member
Re: Public Service Announcement: AIMP2 is Evilware
« Reply #1 on: October 01, 2009, 10:21 AM »
Yesterday AIMP2 v2.60 Build 505 RC1 was released and it still tried to contact 007guard.com. Stay away.

joby_toss

  • Supporting Member
  • Joined in 2008
  • **
  • Posts: 114
    • View Profile
    • Donate to Member
Re: Public Service Announcement: AIMP2 is Evilware
« Reply #2 on: October 02, 2009, 08:22 AM »
I am sorry but I can't replicate this behavior.
Anyone else?!

LE: here is somebody saying a toolbar is installed along with Aimp.
I now realize I never install AIMP. I just use UniversalExtractor. I did notice however a file called "YandexPackSetup.msi" is extracted, a file that I always delete. Maybe you installed silently and this toolbar or whatever it is was installed without your knowledge?
I am a 3D body trapping a single dimension soul.
« Last Edit: October 02, 2009, 02:03 PM by joby_toss »