Spyware in Outpost free firewall

I downloaded this: http://majorgeeks.com/Outpost_Firewall_Free_d1056.html today, and went to install it on a Windows 2000 Professional system that I had installed Spybot S&D on, and had Tea Timer from Spybot running...

The firewall install was blocked from completing by Spybot Tea Timer which claimed to have spotted something called "Coulomb Ltd.Content Access Plugin" embedded in Outpost file: C:\Program Files\Agnitum\Outpost Firewall\acs.exe! (! is from Spybot, the whole line is copied from the Tea Timer log)

Fwiw these are the lines Tea Timer recorded while it was installing the firewall:

==========================================================================

12/1/2009 4:03:55 PM Allowed (based on user decision) value "OutpostMonitor" (new data: ""C:\Program Files\Agnitum\Outpost Firewall\op_mon.exe" /tray /noservice") added in System Startup global entry!

12/1/2009 4:04:05 PM Allowed (based on user decision) value "OutpostFeedBack" (new data: ""C:\Program Files\Agnitum\Outpost Firewall\feedback.exe" /dumps_startup") added in System Startup global entry!

12/1/2009 4:05:24 PM Allowed (based on user decision) value "OutpostMonitor" (new data: "C:\Program Files\Agnitum\Outpost Firewall\op_mon.exe /tray /noservice") changed in System Startup global entry!

12/1/2009 4:05:24 PM Encountered and terminated Coulomb Ltd.Content Access Plugin in C:\Program Files\Agnitum\Outpost Firewall\acs.exe!

==========================================================================

Needless to say I blew out that install & just ghosted the last image I had of the system over that mess.

Anyway I wasn't sure who to send this to at Majorgeeks, so I figured I'd just put it out there on the forums, let you guys check it out from there.

Can anybody recommend a decent non-spyware infected freeware firewall program for Windows 2000? Most of the stuff I've run into says XP or newer, but we got an old PC here that can barely run 2000 & are in no need of upgrading to a newer OS. -tia

 

Outpost Firewall has been downloaded 99,697 times, you did not get the malware here. I've been downloading here sine 2005 and not found a problem yet, you were infected prior to the download.

Do the Read & Run Me here:
http://forums.majorgeeks.com/showthread.php?t=35407

* your post count 1, mine 1000+, clean your PC and stop blaming others for your self inflected issues.

 

Hi 68e58654, I have to agree with Cat_w_9_lives here....99,697 downloads can't be wrong, and I download from here too.

I think you should listen to Cat_w_9_lives, as these downloads don't put spyware on yor system.. Time for a cleaning

Here is a link for you, upload the file, and have it scan your infected file:
http://virusscan.jotti.org/en

BUT, you MUST dis-able tea timer BEFORE installing anything, including this scan!

 

OK, 68e58654, maybe this will help you: Here is a link for you, upload the file, and have it scan your infected file:...http://virusscan.jotti.org/en <---- "Your so-called infected file download"..... upload the file and have it scan the file that you said is infected . Also, you MUST dis-able TeaTimer before attempting to install anything, including this… Do let us know what the results are, if you would..

 

Ok the file I downloaded yesterday is 16.6 MB in size. The link you sent to that scanning site says they have a 15 MB file size limit..

Alright so I put the file I downloaded yesterday here: http://www.filedropper.com/outpostfreeinstall so you guys can play with it since I don't have time for this

But I guess I'm confused about Tea Timer's function in Spybot S&D... I thought the point of running Tea Timer was to have it keep track of spyware & malware that is attempting to be installed on a system surreptitiously, so that it could alert you when you stumble onto a page or file that is attempting to silently install spyware & malware in order to allow you to be able to block it from being installed, before it does get installed .. ? or is that a misunderstanding of what Tea Timer is designed to do on my part . . .

tell you guys what, I'll go post to the Spybot S&D forums about this later when I get more time, point them at that file & have them take a look at it & see what they think

also, I must say, the last time I ran into advice that told me to disable malware & spyware scanners before installing applications was back in the late '90s when Norton A/V was still buggy & actually required being disabled before installing apps or drivers on Windows boxes

as I recall that eventually opened the door for malicious hacker types to drive a truck through & before we knew it we had viruses floating around on the LAN back then

excuse me if this comparison isn't exactly correct, but wouldn't disabling Spybot & Tea Timer before installing applications that might be infected with malware & spyware defeat the purpose of running Spybot & Tea Timer in the first place?

isn't that kind of like saying, oh yeah, before you install this trojan.exe file in Windows, better kill your anti-virus program, so it won't screw up the install ...

are people really that stupid to do such things?

if so, no wonder viruses & spyware & malware are propagated so easily on the Internet!

gotta go, I'll deal with it l8r

 

Making a mountain out of an ant hill.

I still have programs (legit!) that conflict during install when antivirus is running. Thats not old school thinking, thats merely reality. Installers and antivrus do not always play together.

Outpost is not infected. Not from this site, anyway. If you got it elsewhere, there are no guarantees.

If you are concerned, download the file from the source, and check the MD5 hash to the one here. Or use a real malware scanner to check it.

You are basing your opinion on the diagnosis of a known problematic program feature. Tea Timer is garbage. Always has been.

 

By the way,

http://www.virustotal.com/analisis/...9b485b68b857827cd5aaca5c33cf21874b-1243212573

 

Guys I don't know if this a false positive Tea Timer is catching here or what. So I updated Spybot yesterday & then attempted to install Outpost Free Firewall on the system after updating, & this is what Tea Timer caught on this second install attempt:

http://i46.tinypic.com/1zwyql0.png

Ok so, different exploit name that Spybot is detecting in acs.exe this time, however it is still flagging the executable as some sort of malware exploit & as you can see, it recommends deleting the file & not allowing it back on the system.

At this point I'm not going to waste my time with the Outpost Free firewall anymore. The Win2K system is on a LAN that is pretty well protected. I was just looking for a firewall that would let users know if apps were attempting to make outgoing connections on the sly, & like that, not really in need of inbound protection, as the machines are well protected internally on the LAN already.

I'll post to the Spybot forums about this later, probably tomorrow when I get some time. For now I'm not going to hassle with this firewall anymore. If you guys want I'll rename this thread ' Spyware in Outpost free firewall - ? ' - since who knows, for all we know this could be a code glitch in any number of places, a false positive, whatever.

Anyway, like I says, I gots no time to mess with it, I'm moving on.

Good luck with it.


-- 'My father was a watchmaker. He abandoned it when Einstein discovered that time is relative'

 

*Bangs head against wall*

 

*rolls on the floor laughing*

Hope you didn't hurt your head too bad

Matt

 

Look at the date of the thread, Mariku. Almost 16 months ago.

 

Hehe, sorry didn't see that. Didn't mean to re-activate the thread, sorry.

Still hilarious

Matt