Vodafone chat spyware???

Forums › One New Zealand (including Vodafone, WxC, Farmside) › Vodafone chat spyware???

markwolk

101 posts

Master Geek

#13600 19-May-2007 12:21

I have just done a scan on my Win XP Pro laptop using a-squared free anti trojan and malware scanner. It found one file called Trace.Directory.Inside Chat Spy located at C:\Documents and Settings\Mark\Application Data\ICS . It says here that this is something nasty. So I found the incriminated file and opened it with Notepad, to discover that the word "Vodafone" appears there very often in an otherwise incomprehensible code. Should I delete that file, or is it something legitimate possibly related to my Vodafone Mobile Connect? - I don't want to mess things up right now, since I will be going overseas in a few days, and I do need my Vodafone Mobile Connect to work!

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#71274 19-May-2007 12:32

Inside Chat Spy is a spyware that stealthily monitors and records all chat conversations that took place on a computer. It also monitors both sides of chat conversations. It is not visible in Task Manager.

I would say it's not the Vodafone software, but only the spyware storing some chat and other information for its own use later. Better clean up your computer...

markwolk

101 posts

Master Geek

#71288 19-May-2007 14:34

Thanks, Mauricio; but that appears to have been the wrong answer.

I have quarantined the file and no longer could open my VMC. I got an error saying "no profiles" or something like that.
First thing I did was to remove the file from quarantine. That has not helped.

I have tried to "repair" the install in Control Panel to no avail. So I have uninstalled it totally and reinstalled the previously installed vodafone vmc-v7.03.0004.0.

Unfortunately I still get an error:

"Runtime Error! Program : ...ram Files\Vodafone\Vodafone Mobile Connect\VMConnect.exe - This application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information."

What is your advice?

Given its ridiculous price overseas, that VMC is only a last resort connection; but it's reassuring to have it.

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#71289 19-May-2007 14:36

Try another software to scan... Lavasoftware AdAwre is a good one. It's not unheard of false positives causing problems...

markwolk

101 posts

Master Geek

#71293 19-May-2007 15:04

I do have Lavasoft AdAware, but it does not scan for trojans. The scan I did was trojan-specific.

Anyway I rang Vodafone support and they haven't got a clue on what it could be. They recommended me to take the laptop back to its manufacturer. Yeah, right, if the error message says

"Runtime Error! Program : ...ram Files\Vodafone\Vodafone Mobile Connect\VMConnect.exe - This application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information."

that means I need to contact Vodafone, doesn't it? Anyway, once I insisted, they suggested me to bring the laptop and VMC card to a Vodafone store. We'll see what happens then.

freitasm

BDFL - Memuneh
79309 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#71294 19-May-2007 15:22

AdAware scans for trojans. If it has not returned anything, I'd say it was a false positive from the other software (which I've never heard of before).

Try the Microsoft Windows Defender...

johnr

19282 posts

Uber Geek
Inactive user

#71296 19-May-2007 15:40

What data card are you using mark?

markwolk

101 posts

Master Geek

#71297 19-May-2007 15:54

johnr, glad to see you around; I am using Huawei E618.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

johnr

19282 posts

Uber Geek
Inactive user

#71298 19-May-2007 16:02

As mf advised its a false positive. Pm me your email address and i will email you the fix tomorrow morning.

markwolk

101 posts

Master Geek

#71299 19-May-2007 16:12

Done; thanks!