Thursday, March 24, 2005

Grokster now has a fat payload (and I don't mean phat)

As reported earlier, broadcastpc.tv is responsible for a big fat backdoor download of .net. Well, we have confirmed that Grokster is now including broadcastpc.tv in their payload.

Mind you, the .net download is about 23MBs, but installed it's close to 65MBs.

And from the Deliciously Ironic Department, broadcastpc.tv displays movie trailers. So you have a peer-to-peer application now promoting movie trailers.

A recent Grokster download by one of our researchers showed it installed the following adware programs:

  • AltNet BDE (Brilliant Digital Entertainment)
  • BroadcastPC.tv
  • DelfinProject
  • FlashTrack
  • GAIN/Gator
  • MyWay
  • SurfSideKick2
  • Topmoxie WebCPR


Fun pic below with a Fat Albert ad (and a careful eye will see the Grokster icons):




Alex Eckelberry

No comments:

Post a Comment