Comments on: Comments on 14085

Post number 14085

Neale — Tue, 22 Jan 2002 20:18:58 -0800

Are you using VX2? If you are, you probably don't realise it. It's a piece of spyware hidden with Audiogalaxy that "collects some information from online forms that you fill out". Time to update the Adaware reference file again.

By: bloggboy

bloggboy — Tue, 22 Jan 2002 20:33:29 -0800

Assuming this is true (and I don't think it is), I'm glad that I'm on a Mac running Audiogalaxy.

By: skallas

skallas — Tue, 22 Jan 2002 20:40:52 -0800

No VX2 detected with the latest adaware file and I have audio galaxy. If this is true it doesn't look like audio galaxy is the guilty party here. If this guy is noticing pop-ups from sites that don't use pop-up ads I seriously doubt audio galaxy is causing it.

By: nonreflectiveobject

nonreflectiveobject — Tue, 22 Jan 2002 20:48:36 -0800

bloggboy, what app are you using for mac audiogalaxy? is it for 9 or x? i had macsattelite for 9 and now i have sputnix for x, but i prefer 9 (i do audio).

By: SpecialK

SpecialK — Tue, 22 Jan 2002 20:54:23 -0800

Actually, I don't have adaware, but I'm getting the same symptoms that he was getting. I do have audiogalaxy. It just started recently, and I haven't installed anything new.

By: bargle

bargle — Tue, 22 Jan 2002 23:42:46 -0800

By: boneybaloney

boneybaloney — Tue, 22 Jan 2002 23:53:30 -0800

I've had problems for months with no pop-ups or additional windows opening when they should, IE not functioning when I click on the icon etc. I deleted this piece of shit vx2.dll thing, and everything works perfectly now... I don't think it was with Audiogalaxy though. It was when I installed Morpheus my problems began.

By: AdamJ

AdamJ — Wed, 23 Jan 2002 00:28:37 -0800

I have AudioGalaxy 0.608W installed [Windows 2000] and don't have any of the files [vx2.dll, iehelper.dll, domlst.cch] on my hard drive, nor any of the related registry entries.

By: crasspastor

crasspastor — Wed, 23 Jan 2002 00:48:22 -0800

Audiogalaxy is one of the few filesharing clients who also offer an in-house Linux version. . .not a Linux clone. I don't think it's audiogalaxy either. Though I am dying to find out what they're in business for though.

By: crasspastor

crasspastor — Wed, 23 Jan 2002 00:53:04 -0800

More specifically, I don't not think it's audiogalaxy because I don't have the same symptoms on my Linux system. I just think if they were into propagating spyware they'd hardly release a Linux satellite.

By: juv3nal

juv3nal — Wed, 23 Jan 2002 01:01:03 -0800

i've got the version of audiogalaxy that they're talking about and a fully updated adaware spotted nothing... checking my winnt/system32 didn't show anything either

By: ajbattrick

ajbattrick — Wed, 23 Jan 2002 01:40:19 -0800

Maybe it's the new breed of intelligent spyware that only installs onto computers that look interesting to it... (It was on my machine and I have latest AudioGalaxy under WinME)

By: gd779

gd779 — Wed, 23 Jan 2002 04:03:23 -0800

It's confirmed, folks. Audiogalaxy (for windows, at least) IS a carrier. If anybody knows the domain that this baby reports back to, please post it here. I'd like to block it in my hosts file, just to be thorough.

By: jeremias

jeremias — Wed, 23 Jan 2002 04:36:04 -0800

nonreflectiveobject , you can still use Macsatellite for OS9. Just make sure you get latest version (1.5). Although it's been getting harder to connect, it's not buggy like previous versions.

By: kerplunk

kerplunk — Wed, 23 Jan 2002 10:13:41 -0800

When I installed the exact same version of Audiogalaxy on my machine I chose the installer options not to install any of the parasite software. I don't have the VX2 files anywhere on my machine so maybe it piggybacks on one of those, but not the main app.

By: BobInce

BobInce — Thu, 24 Jan 2002 12:12:53 -0800

AudioGalaxy 0.608W was the most well-known vector of VX2 distribution, but as of some time in November AG no longer carries it. Also, the lastest (16-Jan) reflist for Ad-Aware is apparently capable of detecting/removing VX2. I'll do an update on my VX2 page (that bargle linked to) later, as I've got hold of another new version of the parasite, along with the source code to the 'RespondMiter' version that came with AG. Wired have done a follow-up on Chet's story; Michael's claim here not to have known about VX2 is complete bull, and his attempt to shift the blame onto Onflow pretty disingenuous. Oh, and if you don't mind the self-link: this page will check you for some of the more common parasites, including VX2, if you go there with IE, JavaScript and ActiveX enabled. You can use the same script on your own sites if you like.