Korean
<< Back
VID 27315
Severity 30
Port 139,445
Protocol TCP
Class MALWARE
Detailed Description The "TimeSink" program has been installed on the system.
The presence of this program is sometimes perceived as Spyware that can secretly monitor system activity, or as Adware that can display ads. Generally, Spyware and Adware may gather your browsing habits or confidential information and expose it to attacker or a central ad server. It may also violate your privacy. The TimeSink connects to an advertisement server of Conducent Technologies, downloads new ads and displays flashing ad banners and full screen ads. It may also record your web browsing history, cache files, and other personal information.

* Note: This check requires an account with Guest or upper privileges which can access the registry of the remote host to scan. Absence of these condition will result in the check not being performed and a False Negative for all vulnerable hosts.

* References:
http://securityresponse.symantec.com/avcenter/venc/data/adware.tsadbot.html
http://simplythebest.net/info/spyware/conducent_spyware.html
http://www.safersite.com/PestInfo/t/timesink.asp

* Platforms Affected:
Microsoft Windows Any version
Recommendation Remove it from your system using the following methods, if it's silently installed without the users knowledge or the use of it dose not match your security policy.

1. Using the uninstaller for it on the Add/Remove Program entry.
2. Using spyware/adware removal program or Vaccine(Anti-Virus) program. You can use the following programs:
- Norton AntiVirus: http://www.symantec.com/downloads
- McAfee VirusScan: http://download.mcafee.com/default.asp
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)