SCI: Tech Fears Arise Over Norton and Pifts.exe, page 1
Pages: <<  1    2    3    4  >>
ATS Members have flagged this thread 267 times
Topic started on 10-3-2009 @ 01:32 AM by sadisticwoman
"hey /g I was running my dad's computer tonight when a popup from norton asked me if I wanted to allow pifts.exe, I tried googling to see what it was and I am not getting any information. Anyone know what the hell this exe is? Also apparently any thread related to pifts.exe is being deleted on the norton forums."
zip.4chan.org...

Yep, that's right. Something that Norton is saying is just a regular update is requesting internet access. I know 4chan isn't everyone's idea of a good news source, but this is being talked about all over the internet, despite Norton's attempts to delete everything concerning the issue.


www.tech-linkblog.com...#

Hey /x/, /g/ needs your help on something. Some seriously shady # is going doing. The makers of Norton are involved in a coverup of some sort. A part of the program tried to access something in Africa. People asked them what it was.

They are deleting every single message about it on their forum and banning users who post them about PIFTS.EXE. We are trying to figure out what the hell it does, and why they are trying to cover it up. If you search Google for it you will find deleted posts in their forums.

What is pifts.exe and why are they trying to cover it up?

zip.4chan.org...

Whether you believe this is something malicious or not, it is worrying the lengths the company will go to stop people from asking questions about pifts.exe
It's also strange that it's trying to access Africa.

If you have Norton on your computer, I currently advise you to not allow pifts.exe through your firewall. Looking through its .dll, it accesses your IE history, and for some reason accesses Google as well.

[edit on 10-3-2009 by sadisticwoman]

[edit on 10-3-2009 by sadisticwoman]


reply posted on 10-3-2009 @ 01:44 AM by sadisticwoman
Originally posted by Gemwolf
Very interesting.

It seems to be true (that they're deleting the topic).

Google search results

All topics deleted.

Time to do some digging...


Exactly, and even if they're only covering up something silly and benign, a coverup is still completely unacceptable.



reply posted on 10-3-2009 @ 01:54 AM by choujeap
Howdy folks,

Somebody over at /g/ managed to finally track down the actual executable and all of its creepy files.

I present to you, Pifts.exe.

www.mediafire.com...

Scanned by Spybot, MBAM and McAfee-- it's "clean", but I wouldn't go opening that .exe just yet.

Open them up as .txt and look through them-- there's evidence in the .pf that it's doing something with the Internet Temporary Files, the History, and, for some reason, Google.


pastebin.com...

All the strings in the .exe for your perusal.


I personally have no idea how they're thinking it's contacting Africa-- the two IP addresses given by the Tech blog don't resolve to it in any way, just Washington Swapdrive and Microsoft Search Companion.


reply posted on 10-3-2009 @ 01:57 AM by sadisticwoman
reply to post by choujeap



That it resolves to swapdrive is also interesting, though, in that they may be sending our information out to be stored on their servers in Washington.

For those who don't know, Yahoo, Symantec, and Swapdrive (being owned by Symantec) are all basically the same company.

[edit on 10-3-2009 by sadisticwoman]



reply posted on 10-3-2009 @ 02:02 AM by choujeap
reply to post by sadisticwoman



Since we're getting Yahoo! Answer questions about PIFTS taken down, too, I have to wonder just how bad this thing is.


reply posted on 10-3-2009 @ 02:13 AM by sadisticwoman
reply to post by Gemwolf



That's a very good read.

Without new viruses, antivirus companies would cease to exist. Of course they have a hand in making new ones.


reply posted on 10-3-2009 @ 02:18 AM by Ian McLean
Confirmed, via google cache, that messages were deleted from Symantic's message board.

Here's a "Yahoo Answers" question on the subject:
Anyone know what PIFTS.exe is?

Let's see if that remains open. Additionally, here is a report from someone who posted on the Symantic boards, claiming they have now been blocked from creating new posts there:

Even more interestingly now, after posting a single post asking about PIFTS.exe, which was deleted, and a subsequent post to another forum asking about the deleted posts, which got deleted, I've now been blocked from creating new posts or replies on the Norton forums. They really don't want to talk about whatever this was.

Source

Pages: <<  1    2    3    4  >>    ^^TOP^^



Antartica 2012
  Posted 17 days ago with 126 member flags
Tor (anonymity network)
  Posted 13 days ago with 46 member flags
Top 10 Most Incredible Pieces Of Nanoscale Art
  Posted 1 days ago with 40 member flags
Logical Proofs of Infinite External Consciousness
  Posted 15 days ago with 17 member flags