RE: Note about Trojan detection
The antivirus companies will NOT be fixing this bug because well, it isn't a bug. Although the Messenger Plus program itself is clean, the bundled adware does not get uninstalled when you uninstall Messenger Plus. In particular, a file name wcivbovm.exe is left behind in the Application Data folder and a setup.exe is left behind in a c2media folder. Both of these are trojans because when ran they connect to another web site and download and install programs to the computer with absolutely no interaction from the user. Among the things my users experience are pop up ads asking to play poker, menu toolbars, and data mining utilities. The virus companies will not change their minds about this because this is by definition a trojan. These sponsor programs have caused major headaches here. I've notified Mcafee and Symantec of the issues and sent documentation so that this stuff stays classified as a virus.
Also, the installation of a Trojan from within a network will not necessarily trigger a firewall alert as stated. The firewall is predominately used to control outside connections. I realize that Patchou may not understand the depth of this ad software but since his program installed it, he should accept some of the responsiblity for not being thorough about what his sponsor programs install.
We have decided to completely remove Messenger Plus from all systems here as a result of these problems. Its the most irresponsible thing I've ever seen done with a piece of free software.
Drew
|