PDA

View Full Version : Official AIM client contains spyware



Shawn
Mar 2nd, 2004, 04:16:12 AM
Excerpt from Spyware Weekly Newsletter:

Both AOL's internet software and the AOL Instant Messenger program (AIM) are force installing unwanted software called Viewpoint Media Player on people's computers.

There is no option to not install Viewpoint. In fact, if you remove Viewpoint, it will be reinstalled the next time you load AOL! I could hardly believe it when the first person reported this at the message board. Then a dozen more people showed up to report the same thing.

Viewpoint Media Player displays certain multimedia content over the internet. I discovered this software on my own machine last April and I DID NOT AT ALL like finding it there. The reason for that can be found in their privacy policy:
The software creates a unique tracking number ("Customer Unique Identifier" is their term). This number and other information is transmitted, without asking, to Viewpoint servers. The software downloads updates and installs them on the computer, also without asking.

The privacy policy states that "The Viewpoint Media Player will soon be capable of tracking information about the content it displays and how the user interacts with it. When the Viewpoint Media Player displays Viewpoint content, it tracks the URL it is served from, as well as Viewpoint file data tagged by the author in XML. This data can include, but is not limited to: the names of objects and textures displayed, and the names of animations invoked."

Combine all that with the fact that it is installed without permission or proper disclosure. I'm sorry, but you do not install software on my computer that transmits data across the internet without my permission. For that matter, you don't install any software on my computer without my permission, period.

After finding this thing on my computer last year, I sent Viewpoint a letter asking how it is distributed. From their reply, I determined that AIM had installed it. I then downloaded a fresh copy of AIM from AOL's web site and installed it again (I had removed it months earlier). There was absolutely no disclosure whatsoever that it was going to bundle Viewpoint.

There are other things that AOL software does. For instance, some software such as Netscape and ICQ 2000b will insert free.aol.com into Internet Explorer's "Trusted" security zone. When you put a web site in the "Trusted" zone, Internet Explorer will allow that site to download, install and execute any piece of software completely without interaction with the user.

The reason for AOL inserting that entry became clear when we started spotting ActiveX files from free.aol.com in people's HijackThis log files at the message board. AOL is inserting their web site into the "Trusted" zone so that they can install software without the user knowing they are doing it!

AIM is adware. That is, it displays a small banner ad in the program and it also pops up an advertisement window when you launch it. Recently, AIM has even started to download movie trailers and play them at random intervals. You heard me, AOL is using peoples' internet connection to download huge video files in order to play movie trailers.

Both AOL's internet service software and AIM also install a piece of software called Wild Tangent, again without asking. Wild Tangent is used to play games and other multimedia. Some Winamp plugins also use it. The problem with Wild Tangent is that it installs an autoupdater and turns it on by default.

Wild Tangent's updater will transmit data about the computer on which it is installed. That data includes hardware specs, some information about installed software and how the user is interacting with the software. The company says this is done to see how their software is used and that they might share it with third parties. Several antispyware products detect and remove Wild Tangent.

When are software developers going to understand that they cannot transmit data from a person's machine without their permission? There are laws forbidding data theft, so why are they allowed to do this? When are they going to understand that they cannot download and install software without permission?

There are better and cheaper Internet Service Providers. Go to BroadBandReports and find one. There are other instant messenger programs that will let you use the AIM network as well as several other networks such as Yahoo and ICQ. Two very good multi network instant messengers are Trillian and GAIM.

AOL has been losing more subscribers over the past couple of years than they have gained. They are going to lose far more if they don't change this behavior. This is unacceptable and I would never put up with AOL's behavior. I suggest you don't put up with it either and find a company who will treat you with some respect.http://www.computing.net/security/wwwboard/forum/9665.html

Morgan Evanar
Mar 2nd, 2004, 06:58:39 AM
"Crap! I don't know what to do without AIM!?"
http://gaim.sf.net
http://trillian.cc

Now you do.

Crystal
Mar 2nd, 2004, 09:33:13 AM
I've had to uninstall that from my PC before, wondered where it came from.

ReaperFett
Mar 2nd, 2004, 11:06:51 AM
http://www.bigblueball.com/forums/topic.asp?TOPIC_ID=9157

Since I removed it that way, it hasn't reappeared. When it says it reinstalls, does it mean when starting up AOL or AIM?

Shawn
Mar 2nd, 2004, 11:50:10 AM
The author of the article said AOL. If you removed it and it hasn't come back, then that seems to be the case. This part, in particular, caught my eye:
There are other things that AOL software does. For instance, some software such as Netscape and ICQ 2000b will insert free.aol.com into Internet Explorer's "Trusted" security zone. When you put a web site in the "Trusted" zone, Internet Explorer will allow that site to download, install and execute any piece of software completely without interaction with the user.Which means that AOL can download and install anything onto your computer without your knowledge. Neither Wild Tangent nor Viewpoint are mentioned anywhere in the AIM license agreement or at any point during the installation. It's pretty bad business practice to stealth-install 3rd party programs with your software, if you ask me.

James Prent
Mar 2nd, 2004, 12:37:09 PM
So if you uninstall is and you only use AIM, it shouldn't reinstall? I may be being redundant, but I want to be clear. :)

Shawn
Mar 2nd, 2004, 12:54:20 PM
I'd do a sweep with Spybot or Ad-Aware afterward to be on the safe side, but yes.

Darth Viscera
Mar 2nd, 2004, 01:19:02 PM
nuuuuu
spybot = broke PC

Lady Vader
Mar 2nd, 2004, 02:57:12 PM
Found ViewPoint, obliterated it, and will now test to see if it comes back when I load up AIM.

Darth007
Mar 2nd, 2004, 04:36:46 PM
So thats what that is... I think its how AIM plays all those annoying short commercial ads with sound that not even DeadAIM can block.

Marcus Telcontar
Mar 2nd, 2004, 04:37:54 PM
Originally posted by Darth Viscera
nuuuuu
spybot = broke PC

That seems to happen a bit too often. Ad-aware is IMO the ducks guts right now.

I knew this AOL thing, but I have to admit, being a GAIM and Mozilla user, ignored it. The only thing I have up with GAIM right now is that it does not conenct to Yahoo, but that's not worrying me, so I have not bothered to work the problem out

Silus Xilarian
Mar 3rd, 2004, 05:19:01 AM
what kind of problems have people experienced from Spybot, just out of curiousity?

Marcus Telcontar
Mar 3rd, 2004, 05:30:31 AM
Check with S'il and Vis. S'il had to reformat, ehr PC was so borked.

Morgan Evanar
Mar 3rd, 2004, 09:58:19 AM
Originally posted by Marcus Elessar
Check with S'il and Vis. S'il had to reformat, ehr PC was so borked. S'il hadn't reformatted her PC in 5 years.

Darth Viscera
Mar 3rd, 2004, 10:09:19 AM
Originally posted by Silus Xilarian
what kind of problems have people experienced from Spybot, just out of curiousity?

http://www.swforums.net/forum/showthread.php?s=&threadid=34527

Marcus Telcontar
Mar 3rd, 2004, 01:14:19 PM
Originally posted by Morgan Evanar
S'il hadn't reformatted her PC in 5 years.

Whether or not she hasnt reformatted in years, that is still no excuse for a program to bork a PC.

Loklorien s'Ilancy
Mar 3rd, 2004, 01:21:43 PM
it was the last nail in the coffin, methinks