[Dshield] incrediappserver.dll

[Jeff Lake]

Jon R. Kibler wrote:
> 
> So, is it spyware, adware, or what?
> 
> And why would there be attempts to post to SOMEURL/incrediappserver.dll ?
> 
> Jon
> 

It is definitely adware. They have the standard spyware denial in their 
privacy policy which you can view here:
http://www.incredimail.com/english/privacy.asp
but they all say that... I haven't looked at the dll specifically to 
know what it is trying to do, but this is from the terms of service:

"IncrediMail may gather information related generally to Users' use of 
the Software, Service, and Site including without limitation:

The number of Messages that a User sends;
The number of Messages that are read;
What elements of the Service are most often used;
User log-in dates and time; and
Message size data. "

J

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
Url : http://lists.sans.org/pipermail/list/attachments/20080116/2154e47f/attachment.bin