Earthstation5 P2P application contains malicious code

Uninstall this software imediately if you own it. It has spyware built into it that can delete files on your system on command. See for yourself.

lists.netsys.com...

EartStation 5 P2P application contains malicious code
-----------------------------------------------------

ES5 info
--------
EarthStation 5 (aka ES5, aka ESV) (www.earthstation5.com... and
forums2.es5.com...) is a P2P application first released about 6-12
months ago. The people behind ES5 claim that ES5 is the most secure P2P
software in the world. They also claim that they are security experts, and
that they have more than 15 million simultaneous users on-line 24/7. In
comparison Kazaa, the most popular P2P application, only has about 4
million simultaneous users on-line at any given time of day.

Originally posted by postings
Uninstall this software imediately if you own it. It has spyware built into it that can delete files on your system on command. See for yourself.

lists.netsys.com...

Wow, I don't know if I'd call that spyware....that's damn near a trojan.
Good find, how'd you come across that?

-B.

Nice mother and child posting!

I had never heard of the Earthstation P2P.

It looks like this isn't deliberately malicious code, but it does leave the user open to an attack that deletes any shared file of the attacker's choice. So, come to think of it, maybe it was written that way as an anti-file sharing feature?

Nah, I really think it's just poor programming.

I treat this kind of software as "untrusted." I simply don't run it on my main machine. I use software called VMWare, that creates a virtual copy of my machine, and I run it there. If that machine gets compromised, I reset it, and it just reverts back to the condition it was in before it was copromised. I also bring that machine up to patch before I ever use it for that purpose. I wouldn't advice anyone use any of this software on their personal machines. There is plenty of sensitive data on your machines.

Originally posted by Banshee

Originally posted by postings
Uninstall this software imediately if you own it. It has spyware built into it that can delete files on your system on command. See for yourself.

lists.netsys.com...

Wow, I don't know if I'd call that spyware....that's damn near a trojan.
Good find, how'd you come across that?

-B.

It is bad. I subscribe to a list called "Full Disclosure" It is pretty good for computer security problem discoveries. MA, just so you know here is a direct quote from the author of the advisory:

"IMPORTANT: This is not a bug! They intentionally added this code to ES5."

Apparently there are a lot of other "bugs" but this was intentional.

Thanks for the warning posting postings.

I did not notice that this code was deliberately included.

Sound advice. I hope your cybermom takes it too.