Firewall de Xp tiene una puerta atras????

Windows Firewall Has A Backdoor
Posted at 2005-02-19 20:00:00 GMT
http://habaneronetworks.com/viewArticle.php?ID4

I was just poking around with the Windows Firewall on my

I went to look at the exceptions, I was confronted with

I couldn't recognize, rk.exe. Rk.exe was allowed full

from my computer. I did a quick search for rk.exe on the

came across ProcessLibrary's website which stated the

rk.exe:

rk.exe is a process that belongs to a software from

The software monitors how you use the Internet as well

various surveys in popup windows. This process should be

protect your personal privacy. For more information

privacy policy agreement at
http://www.relevantknowledge.com/Agreement.htm

Let's see, RelevantKnowledge, um, never heard of them, I

software I have installed, and none is from this

else does it say? Um, 'The software monitors how you use

Internet', well, this can't be too good, ok then, how

various surveys in popup windows'. so let's add it up:

Never heard of the company Bad
Monitors My Internet Activity Bad
Displays Popups Bad


Well, to me, this does look like spyware and adware. It

because it is monitoring and probably recording

where I am going and what I am doing on the Internet. It

adware because of the nice popups it will provide me.

Well, I actually have never seen any activity from

system, and infact, the file doesn't even exist. I must

it out with a spyware remover like, AdAware or Webroot's

The point of the matter is that this entry has found

Windows Internet Connection Firewall Exceptions list

knowledge. And as it turns out, isn't that hard to do.

As long as the person currently logged into the computer

Administrative privileges, an application can easily add

the
HKEY_LOCAL_MACHINE/SYSTEM/Services/.../FirewallPolicy/Sta

key that will allow any application full rights to and

computer without the user's interaction or knowledge.


Just because you think that Microsoft and their

Windows Firewall is running doesn't mean that you're

check the settings of the firewall regularily. Always

at the minimum once a week with the anti-spyware tools

you run SpywareBlaster everytime you use your computer.

For more information about SpywareBlaster please visit

information about anti-spyware and anti-adware products,

full review of the top 5 ad / spyware fighters at:
http://habaneronetworks.com/viewArticle.php?ID•.


If you are currently using Window's own firewall to

either ensure that there are no unknown exceptions or

firewall.


PS. If you are ever unsure about a process, head on over

Library and search for the running processes name.


I have added another article that explains that

AntiSpyware Beta also ignores any changes to the

key.
You can read the article here
http://habaneronetworks.com/viewArticle.php?ID6
.

SemiP, no por falsificarme ahora, va a desmerecer mi
mensaje de acusacion inferior.

Y con respecto a ese tema, ya lo planteaste el otro dia y
te lo rebatieron los tecnicos. Sigue pareciendome que te
gusta la prensa amarilla pero no la entiendes. Ni la
respuesta de los tecnicos y solo quieres menospreciar a
Microsoft.

Windows Firewall Has A Backdoor
Posted at 2005-02-19 20:00:00 GMT
http://habaneronetworks.com/viewArticle.php?ID4

I was just poking around with the Windows Firewall on my

system. When

I went to look at the exceptions, I was confronted with

an entry that

I couldn't recognize, rk.exe. Rk.exe was allowed full

access to and

from my computer. I did a quick search for rk.exe on the

internet and

came across ProcessLibrary's website which stated the

following about

rk.exe:

rk.exe is a process that belongs to a software from

RelevantKnowledge.

The software monitors how you use the Internet as well

as displays

various surveys in popup windows. This process should be

removed to

protect your personal privacy. For more information

visit their

privacy policy agreement at
http://www.relevantknowledge.com/Agreement.htm

Let's see, RelevantKnowledge, um, never heard of them, I

know what

software I have installed, and none is from this

company. Anyway, what

else does it say? Um, 'The software monitors how you use

the

Internet', well, this can't be too good, ok then, how

about 'displays

various surveys in popup windows'. so let's add it up:

Never heard of the company Bad
Monitors My Internet Activity Bad
Displays Popups Bad


Well, to me, this does look like spyware and adware. It

is spyware

because it is monitoring and probably recording

information about

where I am going and what I am doing on the Internet. It

is also

adware because of the nice popups it will provide me.

Well, I actually have never seen any activity from

rk.exe on my

system, and infact, the file doesn't even exist. I must

have cleaned

it out with a spyware remover like, AdAware or Webroot's

Spysweeper.

The point of the matter is that this entry has found

it's way into my

Windows Internet Connection Firewall Exceptions list

without my

knowledge. And as it turns out, isn't that hard to do.

As long as the person currently logged into the computer

has

Administrative privileges, an application can easily add

an entry into

the
HKEY_LOCAL_MACHINE/SYSTEM/Services/.../FirewallPolicy/Sta

ndardProfile/AuthorizedApplications/List/

key that will allow any application full rights to and

from the

computer without the user's interaction or knowledge.


Just because you think that Microsoft and their

supposedly secure

Windows Firewall is running doesn't mean that you're

safe. You must

check the settings of the firewall regularily. Always

scan your system

at the minimum once a week with the anti-spyware tools

and ensure that

you run SpywareBlaster everytime you use your computer.

For more information about SpywareBlaster please visit

here, for more

information about anti-spyware and anti-adware products,

please read a

full review of the top 5 ad / spyware fighters at:
http://habaneronetworks.com/viewArticle.php?ID•.


If you are currently using Window's own firewall to

protect you,

either ensure that there are no unknown exceptions or

find a better

firewall.


PS. If you are ever unsure about a process, head on over

to Process

Library and search for the running processes name.


I have added another article that explains that

Microsoft's

AntiSpyware Beta also ignores any changes to the

registry for this

key.
You can read the article here
http://habaneronetworks.com/viewArticle.php?ID6
.

¿Obsesionado conmigo? ese no soy yo.
Y yo no menosprecio a MS, menosprecio a Tella.


"yudego" escribió

SemiP, no por falsificarme ahora, va a desmerecer mi
mensaje de acusacion inferior.

Y con respecto a ese tema, ya lo planteaste el otro

te lo rebatieron los tecnicos. Sigue pareciendome que

gusta la prensa amarilla pero no la entiendes. Ni la
respuesta de los tecnicos y solo quieres menospreciar a
Microsoft.

Windows Firewall Has A Backdoor
Posted at 2005-02-19 20:00:00 GMT
http://habaneronetworks.com/viewArticle.php?ID4

I was just poking around with the Windows Firewall on

system. When

I went to look at the exceptions, I was confronted with

an entry that

I couldn't recognize, rk.exe. Rk.exe was allowed full

access to and

from my computer. I did a quick search for rk.exe on

internet and

came across ProcessLibrary's website which stated the

following about

rk.exe:

rk.exe is a process that belongs to a software from

RelevantKnowledge.

The software monitors how you use the Internet as well

as displays

various surveys in popup windows. This process should

removed to

protect your personal privacy. For more information

visit their

privacy policy agreement at
http://www.relevantknowledge.com/Agreement.htm

Let's see, RelevantKnowledge, um, never heard of them,

know what

software I have installed, and none is from this

company. Anyway, what

else does it say? Um, 'The software monitors how you

the

Internet', well, this can't be too good, ok then, how

about 'displays

various surveys in popup windows'. so let's add it up:

Never heard of the company Bad
Monitors My Internet Activity Bad
Displays Popups Bad


Well, to me, this does look like spyware and adware. It

is spyware

because it is monitoring and probably recording

information about

where I am going and what I am doing on the Internet.

is also

adware because of the nice popups it will provide me.

Well, I actually have never seen any activity from

rk.exe on my

system, and infact, the file doesn't even exist. I must

have cleaned

it out with a spyware remover like, AdAware or

Spysweeper.

The point of the matter is that this entry has found

it's way into my

Windows Internet Connection Firewall Exceptions list

without my

knowledge. And as it turns out, isn't that hard to do.

As long as the person currently logged into the

has

Administrative privileges, an application can easily

an entry into

the
HKEY_LOCAL_MACHINE/SYSTEM/Services/.../FirewallPolicy/S

ndardProfile/AuthorizedApplications/List/

key that will allow any application full rights to and

from the

computer without the user's interaction or knowledge.


Just because you think that Microsoft and their

supposedly secure

Windows Firewall is running doesn't mean that you're

safe. You must

check the settings of the firewall regularily. Always

scan your system

at the minimum once a week with the anti-spyware tools

and ensure that

you run SpywareBlaster everytime you use your computer.

For more information about SpywareBlaster please visit

here, for more

information about anti-spyware and anti-adware

please read a

full review of the top 5 ad / spyware fighters at:
http://habaneronetworks.com/viewArticle.php?ID•.


If you are currently using Window's own firewall to

protect you,

either ensure that there are no unknown exceptions or

find a better

firewall.


PS. If you are ever unsure about a process, head on

to Process

Library and search for the running processes name.


I have added another article that explains that

Microsoft's

AntiSpyware Beta also ignores any changes to the

registry for this

key.
You can read the article here
http://habaneronetworks.com/viewArticle.php?ID6
.

.