Website Home IRC Chatroom Software List Who Runs This Support Us MWR University Downloads Good & Bad P2p's Asap Members Our Rules New To The Board Mvp Members Forum Home

MalWare Removal

Malware Removal University - Teaching people to be able to support those with infected computers - Teaching them to never give up till you are safely clean.

Other Links : Nellie2's Blog - Security Garden - SWW Rogue Anti-Malware List - Nellie2 on the Web - Malware Advisor - Nicks Security Ticker - Security-Cadets - Certifiedbug.com - SpyWareFree Blog - vitalsecurity
Tutorials (etc.) : Boot to Safe Mode - Safely. - The Art of Malware Removal (by Blair from g2g).
It is currently Fri 04 Jul, 2008 1:31 pm

All times are UTC [ DST ]


Clean/Infected P2P Programs

Current number of evaluated programs: 43
(List last updated 19th March 2008)




Below is a careful evaluation of Peer-to-Peer applications and whether or not they include so-called "foistware" (bundled adware/spyware). This is an update of sorts of SpywareInfo's excellent Clean and Infected File Sharing Programs, with data that reflects the modern file-sharing scene.

The list below is a summary of each program's status; click on the program's name to see a more detailed description of why it was given the rating it was, along with other details, including download links. Entries will be added and updated constantly, and anyone who feels that a decision was made in error can contact us at p2p [AT] malwareremoval [DOT] com (replacing [AT] with @ and [DOT] with .), and we will retest as needed.

All applications marked as "DEAD" are no longer being developed and may or may not still function.

Please note that we are by no means endorsing any product, nor the use of P2P apps in general -- they add an unsecure access route for malware, whatever the specific program. With the knowledge of which applications are inherently clean, however, one can make an educated decision concerning their use.




UNSAFE
BittorrentUltra
Blubster
eDonkey2000 (DEAD)
Freewire (DEAD)
Kazaa
Kiwi Alpha
NeoNapster
OneMX
Piolet
Warez P2P

CLEAN
Ares
Azureus
BitComet
Bittorrent
DC++
Deepnet Explorer
E-Mule
eXeem (DEAD)
FileCroc
Frostwire
Gnucleus
Halite
KCeasy
Limewire
Phex
Shareaza
Soulseek
µTorrent

CAUTION
BearShare
Crazaa
iMesh
Morpheus
Tuotu

UNCLEAR
Audiogalaxy Satellite (DEAD)
DirectConnect (DEAD)
RockItNet (DEAD)

DEAD & GONE
BearShare Lite (DEAD)
Computwin / FileNavigator (DEAD)
Grokster (DEAD)
Kontiki (DEAD)
MediaSeek (DEAD)
WinMX (DEAD)
Xolox (DEAD)




Clean/Infected P2P Programs - Details

Back to P2P List Summary

Program Name - Version
website
STATUS
Bundled App. Name - Type
Warning/EULA Given? (Optional?)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

(In alphabetical order)



Program Name - Version : Ares - 2.0.1
website : http://aresgalaxy.sourceforge.net
STATUS : CLEAN
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Audiogalaxy Satellite - 2.0
website : DEAD - http://www.audiogalaxy.com/satellite
STATUS : UNCLEAR
Bundled App. Name - Type : Installed Rhapsody Music Service from local installer, froze VMWare
Notes : Site says that P2P network is no longer functional

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Azureus - 2.5.0.0
website : http://azureus.sourceforge.net
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : BearShare - 6
website : www.bearshare.com
STATUS : CAUTION
Bundled App. Name - Type : BearShare MediaBar - Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Notes : Toolbar redirects 404 page to sponsored "search results," often unrelated to original site (gibberish website names result in Adult Friend Finder search results, for example)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : BearShare Lite
website : www.bearshare.com
STATUS : DEAD
Notes : With removal of adware from the regular version of BearShare, BearShare Lite is no longer offered from the main site

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : BitComet - 0.81
website : www.bitcomet.com/
STATUS : CLEAN
Notes : Main site impossible to navigate, and download speeds were < 1 kB/s on cable -- downloaded from afterdawn.com
Added BHO/IE Menu Buttons

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : BitTorrent - 5.0.4
website : www.bittorrent.com
STATUS : CLEAN
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Bittorrent Ultra - 2.2
website : www.bittorrent.com
STATUS : UNSAFE
Bundled App. Name - Type : AdBlaster - Adware
Warning/EULA Given? (Optional?) : NO
Notes : AdBlaster variant had rootkit-like technology to avoid HijackThis detection

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Blubster - 2.6.8
website : www.blubster.com
STATUS : UNSAFE
Bundled App. Name - Type : Blubster Toolbar - Toolbar - Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Bundled App. Name - Type : Dealio Shopping Toolbar - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Computwin/FileNavigator - 3.05
website : www.blubster.com
STATUS : DEAD - CLEAN (Last Version)
Notes : (EULA mentions client-based ads)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Crazaa - 0.16
website : crazaa.com
STATUS : CAUTION
Bundled App. Name - Type :Adblaster - adware
Warning/EULA Given? (Optional?) :YES
Notes : Window to Movies.cn.net opens from installation, and occasionally thereafter. Occasional window for Mecca Bingo when program is in use.

Link to detailed technical topic
This was last checked 23rd of March 2008.
Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : DC++ - .698
website : www.dcpp.net
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Deepnet Explorer - 1.5.3 Beta 3
website : www.deepnetexplorer.com
STATUS : CLEAN
Notes : This is the Advanced version, as Standard does not include P2P capabilities

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : DirectConnect - 2.2
STATUS : DEAD - UNCLEAR
Notes : (Requires .NET framework, not on test VM)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : eDonkey2000 - 1.4.5
STATUS : DEAD - UNSAFE (Last Version)
Bundled App. Name - Type : WhenU SaveNow - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : Yazzle - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Bundled App. Name - Type : UCMore Search Accelerator - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Bundled App. Name - Type : FullContext - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Notes : Site replace with RIAA warning

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : E-Mule - 0.47c
website : www.emule-project.net
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : eXeem - 0.27 beta
STATUS : DEAD - CLEAN(Last Version)
Notes : EULA mentions web-based banner ads

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : FileCroc - 1.0.1
STATUS : CLEAN (Last Version)
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Freewire - 3.2.3
STATUS : DEAD - UNSAFE (Last Version)
Bundled App. Name - Type : nCase - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Bundled App. Name - Type : Bargain Buddy - Adware Toolbar
Warning/EULA Given? (Optional?) : NO (Optional)
Bundled App. Name - Type : SideSearch - Adware Toolbar
Warning/EULA Given? (Optional?) : NO
Bundled App. Name - Type : BookedSpace - Adware Toolbar
Warning/EULA Given? (Optional?) : NO
Bundled App. Name - Type : MyWay Search Assistant - Adware Toolbar
Warning/EULA Given? (Optional?) : NO
Bundled App. Name - Type : Trojan-Downloader.Win32.Agent.i - Trojan
Warning/EULA Given? (Optional?) : NO (Installer, Made itself an autostart entry)
Notes : Installer froze before completion

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Frostwire - 4.13.1.4 Beta
website : www.frostwire.com
STATUS : CLEAN
Notes : Link to download without donating is near-invisible near the bold DONATE button

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Gnucleus - 1.8.6
website : gnucleus.sourceforge.net
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Grokster
STATUS : DEAD

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Halite - 0.2.8-115
website : www.binarynotions.com/halite.php
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : iMesh - 7.0
website : www.imesh.com
STATUS : CAUTION
Bundled App. Name - Type : iMesh MediaBar - ToolBar
Warning/EULA Given? (Optional?) : Yes (Optional)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Kazaa - 3.2.5
website : www.kazaa.com
STATUS : UNSAFE
Bundled App. Name - Type : Bullguard AV - AV Program
Warning/EULA Given? (Optional?) : Yes Optional (Not a risk, just bundled)
Bundled App. Name - Type : Altnet Topsearch - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : Cydoor - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : The Best Offers - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : InstaFinder - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : RXToolbar - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : P2P Networking - Adware/Hijacker
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : Need2Find Toolbar - Adware
Warning/EULA Given? (Optional?) : Yes
Notes : Created autostart entry / ActiveX control

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : KCeasy - 0.18
website : www.kceasy.com
STATUS : CLEAN
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Kiwi Alpha - 3.1.4.0
website : www.kiwialpha.com
STATUS : UNSAFE
Bundled App. Name - Type : WhenU SaveNow - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : RelevantKnowledge - Spyware
Warning/EULA Given? (Optional?) : Yes (Optional)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Kontiki P2P
STATUS : DEAD

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Limewire 4.12
website : www.limewire.com
STATUS : CLEAN
Notes : Created autorun entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : MediaSeek
STATUS : DEAD

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Morpheus - 5.3.2
website : www.morpheus.com
STATUS : CAUTION
Bundled App. Name - Type : Morpheus Toolbar - Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)
Notes : Created autostart entry

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : NeoNapster - 4.0
website : www.neonapster.com
STATUS : UNSAFE
Bundled App. Name - Type : MyGlobalSearch - Adware
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : WebHancer - Spyware
Warning/EULA Given? (Optional?) : Yes

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : OneMX - 0.24a
website : www.onemx.com
STATUS : UNSAFE
Bundled App. Name - Type : MySearchBar - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Phex - 3.0.0.99
website : http://phex.kouk.de
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Piolet - 1.98
website : www.piolet.com
STATUS : UNSAFE
Bundled App. Name - Type : Piolet Toolbar - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes
Bundled App. Name - Type : Dealio Shopping Toolbar - Adware Toolbar
Warning/EULA Given? (Optional?) : Yes (Optional)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : RockItNet - 1.0
STATUS : DEAD - UNCLEAR (Last Version)
Notes : (Cydoor in EULA, but not installed)

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Shareaza - 2.2.30 Beta
website : www.shareaza.com
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Soulseek - 156c
website : www.slsknet.org
STATUS : CLEAN

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : µTorrent - 1.5
website : www.utorrent.com
STATUS : CLEAN
Notes : Offers stand-alone EXE as well

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Tuotu version 3.0.108
website : www.tuotu.com
STATUS : CAUTION
Notes : Created autostart entry
Notes : EULA can be bypassed so you do not know what you have agreed to.
Notes : Installs a TCP patch which can have Pro's & Con's
Link to detailed technical topic.

This was last checked on 17th March 2008
Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Warez P2P - 3.1.1
website : www.warez.com
STATUS : UNSAFE
Bundled App. Name - Type : LOP - Adware
Warning/EULA Given? (Optional?) : NO

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : WinMX
STATUS : DEAD

Back to P2P List Summary

+=+=+=+=+=+=+=+=+=+=+

Program Name - Version : Xolox
STATUS : DEAD

Back to P2P List Summary






Updates


4/10/08 - Added Crazaa 0.16 as 'Caution' Total 44 Programs

3/19/08 - Added Tuotu v 3.0.108 as 'caution'. Total 43 Programs.

1/20/08 - Moved to new pages - BUT - not updated - update being worked on.

1/22/07 - A MRU student has shown me a worrying HJT log after a Crazaa install, containing AdBlaster and a network worm. I will retest the program using both a Virtual Machine and a real system, and I will recategorize it accordingly.

1/13/07 - (Later) Added KCeasy to Clean list. 42 total programs.

1/13/07 - Obviously, it's been far too long since the last update! Programs are now divided between Clean, Unsafe, Caution (self-styled toolbars), Unclear, and Dead & Gone. Programs with two or more installed toolbars, even if one is branded for the application, received an Unsafe rating. Removed P2P ShareSpy, as it was of dubious origins and was not technically P2P upon further investigation, and added WinMX as a Dead & Gone program. Also added Halite as a safe program, along with Deepnet Explorer.
Overall, I'm pleased to see several programs move away from bundling foistware (Bearshare, Filecroc), whereas the recent introduction of the Dealio Shopping Toolbar pushed both Blubster and Piolet firmly into the Unsafe realm. Most designations remained the same, however. 41 total programs.

6/26/06 - I have decided to mark all programs bundling "branded" 3rd-party toolbars (Morpheus, Blubster, Piolet for now) as Infected, as they are bundling a search bar that, by any other name, would be considered foistware. I will consider making a new category for them, but the fact that anyone clicking through "OK" prompts gets their search results hijacked is too important for simply Unclear.
Added Azureus, BearShare Lite, Bittorrent, DC++, Frostwire, Kontiki, P2P ShareSpy (see note on description), Piolet, µTorrent. Moved eDonkey2000 to "Infected" category after finding its free version, Morpheus as well. Count is 39.

5/30/06 - Added BitComet, Crazaa, NeoNapster, and Phex. Count is up to 30.

5/29/06 - Page is up! 26 programs to start, more on the way. Send me any suggestions on popular programs, too!


Entries will be added and updated constantly, and anyone who feels that a decision was made in error can contact us at p2p [AT] malwareremoval [DOT] com (replacing [AT] with @ and [DOT] with .), and we will retest as needed.


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group