shareaza is KEY LOGGING / key log security risks!

[q2006]

My antispyware/malware detective is quarantining shareaza and the downloading files (or just some of the downloading files).

How do i stop this, and i think you should be aware of this.

This doesnt happen instantly i have had it running for over 34hours and then its happend. But this nearly always happens.

This is a major security risk, and we cannot have this running on shareaza. I cannot use my computer for anything that envolves passwords or banking.

I have my port open on my router so shareaza is not firewalled,
i use G2, G1, edonkey.

to increase my downloads, i usually tick, upload and download to networks which are not connected. BUT, it still key logs when i dont have this ticked.

HELP ME PLEASE, for i cannot be the only one suffering this, i hope theres not people out there that lets this key log and carries on, your giving away all your personnal information, didnt you watch the first Futurama film? (Benders big score)

[ocexyz]

I haven't seen anything like this.
Shareaza never ask for any personal data (numbers, adresses card numbers, phone numbers, mails etc), longing in, registration, membership of any kind, especially never for any kins of payments, orders etc. and do not display any kind of adverts, do not contain malware, spyware, adware, installer of any kind, nor keylogger. If anything like this is observed then it is probable either your system is infected or you are not using true Shareaza but so called Fakeaza = malware pretending Shareaza, what mean you have been scummed.
What version do you use? True is Shareaza 2.5.1.0. (current version)
Fakeaza is "V5", "V6" etc. = you are scummed. In such a case please uninstall Fakeaza malware, reset machine, download fresh installer from official and TRUE download page (Shareaza.SourceForge.Net) and from nowhere else please!, and install it again. However Fakeaza can leave unwanted surprises.

[old_death]

[cyko_01]

make sure you download shareaza only from http://shareaza.sourceforge.net. Regardless of what version of shareaza you are using there are sites which offer the real shareaza software for download but they bundle in spyware or malware with it. While shareazav4/5/6 from shareaza*com is the worst offender there are still many other sites which offer fake/modified versions of shareaza for download. I recommend that you uninstall shareaza immediately, download it from http://shareaza.sourceforge.net and install it again. You should also run a full antivirus scan and an anti-spyware scan with a program such as spybot or adaware. both are free, but I recommend using spybot.

As for the files you are downloading you can use the All-In-One AntiSpam Filter to block most of the spam/fake results in your searches

[q2006]

i am using the current version from sourceforge.net, 2.5.1.0 Release 32-bit.

I have done a search on the internet regarding this, i have found a site stating that shareaza posseses the abillity to key log. (i cannot say how reliable the source is, and this does not say that 'shareaza' has programmed shareaza to do this)

Although with my current situation i believe that somehow this is happening
............................
I have fully scanned my computer using the same that detected the earlier key logging, i am sending an image of my system to the spyware detector vendor for furthur analysis. I may also use the online trend micro, just to be sure...
............................
BUT, if shareaza is not programmed to log keys can someone else be using shareaza to log keys somehow?

Is there anyway of avioding these instances without not using shareaza?

when shareaza is detected to be logging keys, it quarantines .. Shareaza.exe, and one or more of the current downloading files.

[q2006]

Scanned with Trend micro House call. Have not found any viruses.

I have been using shareaza for many years and have not had any known problems with it.
(even before the shareaza*com got highjacked by that indian record company that also owns bearshare, i think that infos right)

I have only had the current version on recently (direct download from site sourceforge.net not p2p or other) i might go back to an earlier version to see if it still has this problem, also i will use this on another computer to see if the problem is just localised to my computer.

Untill computing gets to the realms of code i am a moderate to advanced user and work within the administrative computer networking and solutions for companies.

If there is any more info you may need from my system to help slove this problem please post

[ocexyz]

Could you post here the link to that source? Would be very interesting to see that. And install in your FireFox WOT (web of trust), link is in wiki in linktank at main page.

[cyko_01]

Shareaza is an open source project, and we respect your privacy. Our code is freely available for anyone to examine, so it is extremely unlikely that shareaza would be key logging anything or sharing information with another party. Having said that, shareaza generates a wide array of statistics, and displays a history of your activities. We see this as a feature for power users, and something that is also useful for debugging. Most, if not all of this information can be seen in the "system" window in shareaza. This information is NOT shared with anyone, and AFAIK it is not possible for another program to easily gain access to that information. It is possible to modify shareaza to log these things, and the record companies have actually used a modified version of shareaza in the past, against file-sharers, because it aggregates this information so well. I believe it is even banned by some P2P clients because of this.

[induring]

My security suite reports Key Logging/KEYBOARD POLLING also. If I allow it, Shareaza acts normally. If I block it, I cannot use the Shift/Control/PageUp/etc keys in Shareaza. This happens with several other programs I use. Check with your Security Program's website for updates or patches AND more information about their Key Log Protection. I allow it ONLY while using the program and block it again when I close Shareaza. If a program you did not explicitly open wants to Key Log, then you got a big problem. You may also want to look up Key Logging and/or your Security Suite on Wikipedia.com, do some research.

Food for Thought Mmmm... Crunchy

[ocexyz]

[zigozag]

Shareaza is clean. Don't take my word for it, see for yourself: http://www.virustotal.com/analisis/c245 ... 1263456345
Tested with 41 antivirus products, none of them reported any malware.

[taxiboy]

I've had the anti-spy feature of the yahoo toolbar which is the ca anti-spyware program show shareaza as spyware. It lists it along with gnutella, kazza, grokster and emule in registry entries and programs. Funny that it tried to delete emule off my system. I stopped it before it got to the delete part. I just set it to allow. Also, it's not really a great anti-spy program to begin with.

[cyko_01]

If you have the yahoo toolbar installed chances are that any malware it finds is the stuff it put there or is a part of the toolbar itself!