Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Verizon Spyware?


  • Please log in to reply
6 replies to this topic

#1 Rondil

Rondil

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:49 AM

Posted 21 October 2006 - 01:18 AM

I had Installed Verizons DSL software on 1 of my machines. Anyway I had noticed activity leading me to suspect a spyware/Trojan infection. I downloaded a copy of Spybot S&D, updated it and ran it. It would get just a short way thru the scan and abort. (Scan aborted by user) But I didnt abort it. This made me very suspicious. I opened the task manager and looked at the currently running Proceses. I noticed 3 that I had no knowledge of. MotiveBrowser.exe, VzOpenUIServer.exe, and MotiveSB.exe. I did a search and found a Motive directory in my program files directory. Next I shut down all 3 processes by right clicking and clicking End Process tree. That killed all 3 processes. I then tried running Spybot. No problems at this point.
Anyway I had traced all these programs to the Verizon Installation so I opened Control panel--> Add remove Programs and removed all of it. No more problems at this point. Spybot functions fine. I did a Hyjackthis scan and it looks clean.
I guess the point of this is to not install any software that you don't need. At the time I didn't realise, I didn't need it.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,758 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:49 AM

Posted 21 October 2006 - 07:46 AM

"MotiveBrowser.exe".
"VzOpenUIServer.exe"
"MotiveSB.exe"

...I did a Hyjackthis scan and it looks clean.

Are you trained in the use and investigation of the entries listed in the log this program generates?

HijackThis is an advanced tool that requires advanced knowledge about the Windows Operating System. Most of the log entries are required to run a computer and removing essential ones can potentially cause serious damage such as your Internet no longer working or problems with running Windows itself.

HijackThis is an enumerator and similar in some respects to a registry editor program which displays areas of the Windows registry where the majority of Viruses, Trojans, Spyware, Adware, and Malware reside. HJT will scan certain areas of your system and then create a log to help diagnose the presence of undetected malware in these known hiding places. It then relies on experts to interpret the log entries and determine what needs to be fixed.

Futher, removing entries in HJT before the problem is properly identified can make the malware undetectable to other detection and removal tools. Full system scanning tools like Ad-aware, Spybot S&D and SpySweeper will remove the registry entries as well as the related files which results in a more complete removal process. HJT this should only be used to clean up the entries left behind, after you have properly removed the malware.

If you do not have advanced knowledge about computers you should NOT fix anything using HijackThis without consulting a expert as to what to fix. If you choose to fix anything by yourself, you do so at your own risk.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Rondil

Rondil
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:49 AM

Posted 22 October 2006 - 01:26 AM

Lets see. I used Hijackthis only for scanning. I didn't use it to modify anything. Im not that dumb. While I'm not an expert I am not a casual user either. I would rate myself above average on Windows knowledge. By saying the Hyjack log looked fine. I went thru every entry and traced out the applications to see if they were legitimate. It wasn't that hard since I don't have very many apps installed on that machine.
I love being insulted. :thumbsup:

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,758 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:49 AM

Posted 22 October 2006 - 06:13 AM

No insult intended. Just a few words of caution. You would be surprised as to the number of folks who use this tool incorrectly and end up with a a host of problems. Plus others, with less knowledge than you read these topic threads and get the impression that using Hijackthis is the quick fix answer to resolve their problems.

Anyway, your topic title questioned whether Verizon DSL software included spyware. Two of the files you found were related to Verison Online Support and one to AT&T. I did not find any of them related to malware and no similar reports from others using their software so I'm not sure why Spybot had a problem completing a scan while they were running.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Rondil

Rondil
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:03:49 AM

Posted 22 October 2006 - 06:48 PM

Who's to say it wasn't spyware. I followed those links you gave and learned exactly nothing. The only info provided was info I already knew.
1. Large companies love to spy on folks hoping to get an advertising edge. Maybe verizon was trying to amass my and your browseing habits. Who knows.
2. If I was a clever hacker I would write my trojan to take over from a legitimate service. IE on bootup delete the legitimate service and substitute mine. If I write it to limit propagation then it would escape notice from honeypots etc and stay in the wild longer. Most virus and spyware scanners would miss it. Anyway its now deleted and off my PC so the point is Moot. I relate this so other folks will look at software with suspicion and hopefully keep their machines clean of bad applications.

#6 rcobleigh

rcobleigh

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:03:49 AM

Posted 25 November 2007 - 12:11 AM

Let me start by saying I know JACK about computers! but I read the entire thread abouve and decide to disable the process labelled vzOpenUIServer.exe, my internet connection SOAREDafter that! I too have Verizon DSL, and it's kinda slow at times, but after this.... WOW!

#7 tos226

tos226

    BleepIN--BleepOUT


  • Members
  • 1,577 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:LocalHost
  • Local time:04:49 AM

Posted 25 November 2007 - 04:55 PM

While I have no idea whether it includes spyware or not, that Motive smart bridge (or similar name) serves no purpose whatsoever in my opinion.

When long ago my company was pitching in for the cost of routers, their procedure clearly stated to not install any software provided by the ISP.

DSL worked fine for several years without it (changed to FIOS 2 years ago or so).

When you think about it, the purpose V. states is to help diagnose network connection. It is not needed. They can do it remotely. Secondly, if you have no connection, how would you connect in order to diagnose a network connection. I've been wondering about this logic now for several years :thumbsup: :flowers:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users