Re: Altova XMLSPY is spyware and can screw your network


Adding an exception to the firewall is reasonable but it should have
warned you and gave you an option to say no (in which case it can
choose not to install).

But changing the DisableUnicastResponsesToMulticastBroadcast setting
is ridiculous.

Personally, I stopped using Altova software a few years ago 'cause it
got way too bloated and slow. It's nice and featureful, but it's such
a hog for what it does.

Sam

------------------------------------------------------------
We're hiring! B-Line Medical is seeking .NET
Developers for exciting positions in medical product
development in MD/DC. Work with a variety of technologies
in a relaxed team environment. See ads on Dice.com.



On Tue, 16 Oct 2007 03:32:48 +0100, "Connected"
<someone@xxxxxxxxxxxxx> wrote:

The following info could be useful for anyone getting weird behaviour after
installing Altova xmlSPY (so aptly named!)

I've just wasted 3 days of my life trying to find out why I've lost network
browsing capabilty (network neighborhood) on my xp home network. Recently
installed XMLSPY was to blame.

Without my permission (other than a vague meaningless sentence in the EULA),
Altova's install program opened ports on my firewall and wrote values to my
registry preventing my machine being able to act as a master browser (thus
screwing my network).

These are the new keys it adds to the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\

Value : 2799:UDP
Data : 2799:UDP:*:Enabled:Altova License Metering Port (UDP)

Value : 2799:TCP
Data : 2799:TCP:*:Enabled:Altova License Metering Port (TCP)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\

Value: DisableUnicastResponsesToMulticastBroadcast
Data : 1

If you uninstall the software, these keys are not removed (a sure sign of
crap software). Even if you cancel the install before it's completed, these
keys are still written to your registry and not removed. So you don't even
have to install their software - you just have to think about doing it!

Note to Altova: You do not own my PC nor have any right to compromise my
security by opening ports in my firewall and otherwise altering the setup of
my network protocols without my authority. Needless to say I'll not be using
any of your software ever again. In fact I intend to inform as many people
as possible about your underhand practices.

If you need to check with their support team call (001)-978-816-1602

Connected


.

Relevant Pages

  • Re: need help re. office network install
    ... > and their network is a mess, the result of years of neglect. ... they have a gateway server w/ no special ... > firewall rules on it, they have a large DMZ that serves no purpose ... install anymore software on the firewall machine than is absolutely ...
    (comp.os.linux.networking)
  • Re: RWW 403 forbidden error
    ... I JUST SO WISH AV suppliers would leave my freakin network alone. ... I don't use their firewall services. ... Install and run a scan with the SBS 2003 BPA: ... Virtual Website Directory Security; what I have is exactly as you ...
    (microsoft.public.windows.server.sbs)
  • Re: [fw-wiz] Layer 2 (stealth) firewalls - PBR?
    ... Does running a stealth firewall remove the need for PBR? ... determines traffic flow between them based on destination MACs... ... and both of them are on the same IP network and go to ... But, through laborious insanity, you manage to install whatever ...
    (Firewall-Wizards)
  • Re: XP Update kills network
    ... There's no firewall Enabled? ... The updates by themselves are not killing the network, rather, the issue is occurring in conjunction with an outdated NSW and the attempt to update. ... you can set Automatic Updates to " Download updates for me but let me choose when to install them " to avoid the reinstallation of the problematic update ... ...
    (microsoft.public.windowsupdate)
  • Re: Can anyone tell me how this trojan horse program got thru my
    ... >Go there, downalod, install, update and scan ur system for trojans. ... >download of the program that allows you to disable it. ... >Want a good firewall that is really simple to operate and incredibly ... >would-be intruders are prevented from viewing and accessing your network. ...
    (comp.security.firewalls)