HardwareHeaven.com

HardwareHeaven.com

Looking for the skin chooser?
 
 
  • Home

  • Hardware reviews

  • Articles

  • News

  • Tools

  • Gaming at HardwareHeaven

  • Forums

 

Go Back   HardwareHeaven.com > Forums > HardwareHeaven's Heaven > Feedback


Feedback Site or Forum problems? suggestions?

Closed Thread
 
Thread Tools
Old Apr 29, 2004, 07:38 PM   #1
DriverHeaven Newbie
 
Join Date: Apr 2004
Posts: 4
Rep Power: 0
Murtceps is on a distinguished road

Spyware in Omega drivers?

I was going to install the Omega drivers but noticed a warning of Spybot(1.3 RC4) that found "2020search" in the setup program of the Omega drivers.
More people seen this?

UPDATE BY OMEGADRIVE:
Problem solved, no spyware, read here:
http://www.hardwareheaven.com/showthre...5&pagenumber=3

Last edited by Murtceps; Apr 29, 2004 at 08:32 PM.
Murtceps is offline  


Old Apr 29, 2004, 08:22 PM   #2
DriverHeaven Lover
 
Join Date: Nov 2003
Location: Toronto,Ontario
Posts: 111
Rep Power: 0
stormy13 is on a distinguished road
System Specs

haven't tried the Omega 4.4s, but after seeing your post I decided to try installing them just to see, and this is what i got,



Info on 2020Search available here,

http://www.spywareguide.com/product_show.php?id=640

now I realize Omega modifies and provides his drivers for free, but if he has to resort to this to pay the bills, it will be a long time before I use them again.
stormy13 is offline  
Old Apr 29, 2004, 08:30 PM   #3
HardwareHeaven Extreme Member
 
zerodamage's Avatar
 
Join Date: May 2003
Location: Virginia, USA
Posts: 3,478
Rep Power: 0
zerodamage is on a distinguished road
System Specs

I will check this out tonight guys and get back with you. I need to check something else out for a friend as well. Omega doesn't install Spyware in his files. This could be anything. I will let you all know.


Oh, please provide me with the download link you got these files from. Thanks.
zerodamage is offline  
Old Apr 29, 2004, 08:33 PM Threadstarter Thread Starter   #4
DriverHeaven Newbie
 
Join Date: Apr 2004
Posts: 4
Rep Power: 0
Murtceps is on a distinguished road

I tried both the KuuL.net en s24 link. Not the other ones yet.
Murtceps is offline  
Old Apr 29, 2004, 08:35 PM   #5
DriverHeaven Founder
 
Join Date: May 2002
Posts: 32,480
Rep Power: 179
Zardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refute

this matter will be investigated, im moving it to feedback until I can get a hold of angel.
Zardon is offline  
Old Apr 29, 2004, 08:38 PM   #6
DriverHeaven Lover
 
Join Date: Nov 2003
Location: Toronto,Ontario
Posts: 111
Rep Power: 0
stormy13 is on a distinguished road
System Specs

This was the mirror that I used,

http://www.accesswave.ca/~sruxton/dr...mega_2536b.exe
stormy13 is offline  
Old Apr 29, 2004, 08:49 PM   #7
DriverHeaven Newbie
 
Join Date: Feb 2004
Posts: 3
Rep Power: 0
Leaderz0rz is on a distinguished road

i have tried the ones from won tan warriors and chaos, and get the same message from spybot
__________________
Leaderz0rz is offline  
Old Apr 29, 2004, 08:49 PM   #8
HardwareHeaven Addict
 
Join Date: May 2003
Location: Bayside, NY USA
Posts: 360
Rep Power: 0
kelston is on a distinguished road

Uh... I thought that was an official mirror. It's Chaos' mirror...

On top of this... if Omega has Spyware in his drivers, how come it's only detected upon installation of the drivers and never after? I'm running Omega's 4.4s from Chao's accesswave mirror and no 2020search has ever been found either by Adaware or 3 versions of Spybot (Official 1.2 and 2 1.3 release candidates).
kelston is offline  
Old Apr 29, 2004, 08:53 PM   #9
DriverHeaven Lover
 
Join Date: Nov 2003
Location: Toronto,Ontario
Posts: 111
Rep Power: 0
stormy13 is on a distinguished road
System Specs

This is who the mirror is provided by,

RADEON WIN 2K/XP OMEGA DRIVERS 2.5.36b
PROVIDED BY: Chaos

I tried d/ling them from DH, but I'm not going to take an hour at 5k when I'm on an 3mb cable connection. Besides for 2020Search to have come from the mirror, Spybot would have notified me while I was there, not after IE was closed and while trying to install the drivers (unless Chaos or someone else managed to add it to the installer).
stormy13 is offline  
Old Apr 29, 2004, 08:55 PM Threadstarter Thread Starter   #10
DriverHeaven Newbie
 
Join Date: Apr 2004
Posts: 4
Rep Power: 0
Murtceps is on a distinguished road

Could be that Spybot is giving a false warning, it still is a Release Candidate. I'll try to just install and see if Spybots finds something after installing.
Murtceps is offline  
Old Apr 29, 2004, 08:59 PM   #11
DriverHeaven Newbie
 
Join Date: Feb 2004
Posts: 3
Rep Power: 0
Leaderz0rz is on a distinguished road

i tried all the offical mirrors, they are all infected
__________________
Leaderz0rz is offline  
Old Apr 29, 2004, 09:00 PM   #12
DriverHeaven Founder
 
Join Date: May 2002
Posts: 32,480
Rep Power: 179
Zardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refuteZardon has a reputation beyond refute

This looks like its been confirmed guys. I cant get a hold of omega right now, but rest assured ill be asking WHY, when I get him. Thanks for finding this issue.
Zardon is offline  
Old Apr 29, 2004, 09:02 PM   #13
Demonic
 
Asmoday's Avatar
 
Join Date: May 2002
Location: In the cold, dark north...
Posts: 5,198
Rep Power: 92
Asmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seen
System Specs

Shit....i tried installing the omegas ive got on the hdd....every single one of them reports that spyware.....
ive got every set from 2460 to 2536b..
I haven't had spybot installed before...so ive never noticed this before...
Asmoday is offline  
Old Apr 29, 2004, 09:04 PM   #14
DriverHeaven Newbie
 
Join Date: Feb 2004
Posts: 3
Rep Power: 0
Leaderz0rz is on a distinguished road

if it comes up for all of them, it could be a false alarm....have to talk to omega though
__________________
Leaderz0rz is offline  
Old Apr 29, 2004, 09:07 PM   #15
HardwareHeaven Addict
 
Join Date: May 2003
Location: Bayside, NY USA
Posts: 360
Rep Power: 0
kelston is on a distinguished road

Quote:
Originally posted by Zardon
This looks like its been confirmed guys. I cant get a hold of omega right now, but rest assured ill be asking WHY, when I get him. Thanks for finding this issue.
Personally I think it's a false positive. Spybot's 1.3 Release Candidates are the first Spybots to actually include active spyware monitoring. It is very much still in the beta stages. I have Spyware Blaster and Adaware and neither of them detects the Omegas as having 2020search or any sort of spy/adware.
kelston is offline  
Old Apr 29, 2004, 09:07 PM   #16
Demonic
 
Asmoday's Avatar
 
Join Date: May 2002
Location: In the cold, dark north...
Posts: 5,198
Rep Power: 92
Asmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seen
System Specs

Quote:
Originally posted by Leaderz0rz
if it comes up for all of them, it could be a false alarm....have to talk to omega though
Well...i sure hope that it is an false alarm....otherwise i will NEVER download a Omegadriver again!!
Asmoday is offline  
Old Apr 29, 2004, 09:11 PM   #17
Still watching...
 
wertret's Avatar
 
Join Date: Nov 2002
Location: Orihuela (Spain)
Posts: 1,560
Rep Power: 0
wertret is on a distinguished road

Donator
I think everyone here expect this to be a false alarm, otherwise it would be a very bad new for the DH community.
__________________

"They who dream by day are cognizant of many things which escape those who dream only by night."
wertret is offline  
Old Apr 29, 2004, 09:14 PM Threadstarter Thread Starter   #18
DriverHeaven Newbie
 
Join Date: Apr 2004
Posts: 4
Rep Power: 0
Murtceps is on a distinguished road

Could be false alarm, Spybots sees the irsetup.exe and that filename is also used by 2020search for their toolbar adware.
Murtceps is offline  
Old Apr 29, 2004, 09:16 PM   #19
HardwareHeaven Extreme Member
 
The_Neon_Cowboy's Avatar
 
Join Date: Dec 2002
Location: U.S.A.
Posts: 16,009
Rep Power: 92
The_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the rough
System Specs

Quote:
Originally posted by Zardon
This looks like its been confirmed guys. I cant get a hold of omega right now, but rest assured ill be asking WHY, when I get him. Thanks for finding this issue.
I'm looking into as we speek I happend to have both spybot and Omega's driver readily available in my rig since i'm readying for testing
__________________
The_Neon_Cowboy is offline  
Old Apr 29, 2004, 09:29 PM   #20
HardwareHeaven Extreme Member
 
zerodamage's Avatar
 
Join Date: May 2003
Location: Virginia, USA
Posts: 3,478
Rep Power: 0
zerodamage is on a distinguished road
System Specs

I use a firewall on my system, software type. I've used it for years and if anything like this tried to connect out, I would know about it. I am super anal about this. I am still researching this but I did detect this also. I checked and it is not a part of the 3 accompanying utlities but in the installer itself. This COULD be a falst positive.

Please, everyone take it easy until I finish this.
zerodamage is offline  
Old Apr 29, 2004, 09:34 PM   #21
Banned
 
Join Date: May 2002
Posts: 2,092
Rep Power: 0
HawK is on a distinguished road

Donator
Could irsetup.exe be part of the install program Omega uses ?
I found it on my system to (new Spy-bot found it) but it never "did" anything as far as i know
i'm using a firewall also
HawK is offline  
Old Apr 29, 2004, 09:51 PM   #22
HardwareHeaven Extreme Member
 
The_Neon_Cowboy's Avatar
 
Join Date: Dec 2002
Location: U.S.A.
Posts: 16,009
Rep Power: 92
The_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the rough
System Specs

[SIZE=xx-large]There is no spyware[/SIZE]

it's a flase positive it it does detect it so..... then its becouse of the file name ! and no dll files or nothing prestint the would even hint at spyware


this file irsetup.ext is part of setup factory... and it actally doesnt destect on my system screen shots shortly
__________________
The_Neon_Cowboy is offline  
Old Apr 29, 2004, 09:52 PM   #23
BANNED
 
Join Date: Jul 2002
Location: Indiana , USA
Posts: 2,677
Rep Power: 0
Sourcer_2002 is on a distinguished road

Ok i believe that IS part of the installer just by checking the web first off i searched for irsetup.exe i google and got this http://www.indigorose.com/forums/showthread.php?t=7198 which is useless BUT it pointed me to the indigo rose software company which happens to make setup factory which i believe omega uses to make his installer http://www.indigorose.com/products/
Sourcer_2002 is offline  
Old Apr 29, 2004, 09:53 PM   #24
BANNED
 
Join Date: Jul 2002
Location: Indiana , USA
Posts: 2,677
Rep Power: 0
Sourcer_2002 is on a distinguished road

Hmm neon beat me
Sourcer_2002 is offline  
Old Apr 29, 2004, 09:53 PM   #25
HardwareHeaven Extreme Member
 
zerodamage's Avatar
 
Join Date: May 2003
Location: Virginia, USA
Posts: 3,478
Rep Power: 0
zerodamage is on a distinguished road
System Specs

FALSE ALARM!!!!

It just so happens that the installer process name is the same as the 2020search which happens to be irsetup.exe. I've found nothing to show that there is spyware being installed. I've allowed the process to do it's thing. I terminated it which results in Omega installer going away. I have allowed this with all my protections TURNED OFF. Then done a complete Scan for anything that is associated with this adware/spyware and found nothing. No firewall activity or anything. Spybot and Adaware which both detect this found nothing after allowing this program to do it's thing.


So once again, at this time OMEGA's DRIVERS DO NOT CONTAIN SPYWARE

The program of TeaTimer is better suited to monitoring additions to the startup list in windows and registry key changes for IE's settings like homepage, etc. So disable this program when installing these drivers and doing Windows updates, etc.
zerodamage is offline  
Old Apr 29, 2004, 09:55 PM   #26
Demonic
 
Asmoday's Avatar
 
Join Date: May 2002
Location: In the cold, dark north...
Posts: 5,198
Rep Power: 92
Asmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seenAsmoday has a divinity and aura the likes we have never seen
System Specs

Phew...sounds good, i would have had a very hard time understanding why Omega would want to put spyware in his drivers...
Asmoday is offline  
Old Apr 29, 2004, 09:56 PM   #27
BANNED
 
Join Date: Jul 2002
Location: Indiana , USA
Posts: 2,677
Rep Power: 0
Sourcer_2002 is on a distinguished road

Anyone tryed to see if this warning comes up with other programs useing the setup factory to create the installer?
Sourcer_2002 is offline  
Old Apr 29, 2004, 09:57 PM   #28
HardwareHeaven Extreme Member
 
zerodamage's Avatar
 
Join Date: May 2003
Location: Virginia, USA
Posts: 3,478
Rep Power: 0
zerodamage is on a distinguished road
System Specs

I do know that there is a registry entry detected on the 4.4 Cats. This program should be turned OFF when installing critical drivers / software.
zerodamage is offline  
Old Apr 29, 2004, 10:00 PM   #29
Cake or Death?
 
Join Date: Jun 2003
Location: Sweden
Posts: 259
Rep Power: 0
ZzzombieBunny is on a distinguished road

perhaps someone should change the thread topic before rumours get started.
ZzzombieBunny is offline  
Old Apr 29, 2004, 10:01 PM   #30
HardwareHeaven Extreme Member
 
The_Neon_Cowboy's Avatar
 
Join Date: Dec 2002
Location: U.S.A.
Posts: 16,009
Rep Power: 92
The_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the roughThe_Neon_Cowboy is a jewel in the rough
System Specs

here is the error when you try to install omega just as his setup/ installer sets to unpack to the temp place to run.


but when i scan it finds nothing


becouse its a temp file it gets deleted after the install unpack is done


here is the file in question


her is the inf for the file in question







[SIZE=xx-large]IT IS SETUP FACTORY-not spyware- case closed[/SIZE]
__________________
The_Neon_Cowboy is offline  
Closed Thread

Thread Tools