Latest in trend:

» viruses

Kazaa

What is Kazaa?

Kazaa is a P-2-P file sharing application which is commonly used to exchange media files through the Internet. The official Kazaa client can be downloaded free of charge, bundled with adware and spyware, although there are "No spyware" claims found on Kazaa's website.

What makes Kazaa a badware?

Kazaa is a type of badware which installs spyware even though it advertises itself as spyware free. It has applications which are not completely removed during uninstall process, interferes with the computer use and makes modifications to other software without the consent or knowledge of the user.

How does it affect your PC?

• Bundled application cannot be closed  

One of the bundled software which gets installed along with Kazaa is The Best Offers Network. This application cannot be stopped or closed by the normal user and one has to use the Windows task manager to stop the process.

• Claims "no spyware", but bundled software is considered spyware

Even though Kazaa claims to be spyware free software, yet its bundled components can be considered as a spyware as they subvert the computers operation for the benefit of a third party. Malware installed by Kazaa includes the following:

• Cydoor (spyware): Collects information on the PC's surfing habits and passes it on to the company which created Cydoor.
• B3D (adware): An add-on which causes advertising popups if the PC accesses a website which triggers the B3D code.
• Altnet (adware): A distribution network for paid "gold" files.
• The Best Offers (adware): Tracks your browsing habits and internet usage to display advertisements similar to your interests.
• InstaFinder (hijacker): Redirects your URL typing errors to InstaFinder's web page instead of the standard search page.
• TopSearch (adware): Displays paid songs and media related to your search in Kazaa.
• RX Toolbar (spyware): The toolbar monitors all the sites you visit with Microsoft Internet Explorer and provides links to competitors' websites.
• New.net (hijacker): A browser plug-in that lets you access several of its own unofficial Top Level Domain names, e.g., .chat and .shop. The main purpose of which is to sell domain names such as www.record.shop which is actually www.record.shop.new.net

 

• Fails to uninstall executables and system components

The uninstall process does not eliminate all applications and components related to Kazaa. Some parts like executables and system components remain on the computer even after uninstall including the Kazaa Plus Installer.  

• Adds links to Windows

Kazaa adds two links to the user’s desktop called "Your Free Casino Chips!" and "Play Poker Now!” The addition of these links is not disclosed to the user and is done without the informed consent of the user.  

• Changes default 404 and DNS error pages in Internet Explorer

InstaFinder is one of the software’s which is added along with Kazaa. This software changes the default 404 page and DNS error pages in Internet Explorer and redirects mistyped addresses to InstaFinder web page instead of the standard search page.

• Installs programs that modify Internet Explorer

Kazaa gives the option of installing several applications that modify Internet Explorer, including AltNet's Need2Find Bar, InstaFinder, and RXToolbar. These programs add several new toolbars to Internet Explorer. The bundling of these applications and the addition of these toolbars is disclosed to the user during the installation process, and the user has the option of proceeding with the installation or canceling it

• Installs adware

Kazaa requires the installation of various adware programs, including TopSearch, AltNet Peer Points Manager, Cydoor, and The Best Offers. The bundling of these applications is disclosed to the user during the installation process, and the user has the option of proceeding with the installation or canceling it. This is part of the disclosed malware/Badware behavior of Kazaa.

• Installs file-sharing anti-virus software

Kazaa requires the installation of file-sharing anti-virus software (BullGuard P2P). The bundling of this application is disclosed to the user during the installation process, and the user has the option of proceeding with the installation or canceling it.

How to Remove / Fix the installed Kazaa?

Follow the instructions below to uninstall the programs and associated files attached to Kazaa.

1) Click on Start> Settings> Control Panel
2) Double-click on Add/Remove Programs
3) Find "RX Bar" and click Change/Remove at the bottom of the window to begin its removal.
4) Find "InstaFinderK" and click Change/Remove
5) Find "Need2Find Bar" and click Change/Remove
6) Find "Peer Points Manager" and click Change/Remove
7) Find "P2P Networking" and click Change/Remove. Warning, this program may have already been removed by a previous step. Don't worry if you can’t find it in the list.
8) Find "Kazaa” and click Change/Remove.

Once this is removed restart your computer.

Once the computer is restarted, there are still some files that need to be removed.

• O2 -BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)
• O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll

Check these files and remove them. Next, remove the following folders from the hard drive.

1) Open My Computer > Drive C:
2) Double-click on Program Files folder
3) Right-click and delete the following folders:

ALTNET,
INSTALFNK
KAZAA
NEED2FIND
RXTOOLBAR

Also delete the file UNINSTALLNEED2FIND.DLL file in the Program Files folder.

4) For Advanced Users - Remove the following folders in the Registry.

• A. Click on Start> Run, and type REGEDIT and click OK
• B. Click on the pluses (+) next to the following folders:
  

HKEY_CURRENT_USER
SOFTWARE

• C. Right-click and delete the following folders if they exist:

INSTAFNK
KAZAA
NEED2FIND
P2P NETWORKING
RX TOOLBAR
SKYPE

• D. Click on the pluses (+) next to the following folders (starting from the top again)

HKEY_LOCAL_MACHINE
SOFTWARE

• E. Right-click and delete the following folders if they exist:

ALTNET
KAZAA
MAGNET
NEED2FIND
P2P NETWORKING
RX RESULTS
SHARMAN NETWORKS LTD


• F. Close the Registry Editor and restart the Computer.
Now Kazaa and the other associated files should be removed from your computer.

 Recommendations for users / customers

It is recommended to the users that unless one is aware and comfortable with the intensity and level of risk and until the application is released or available without the unwanted characteristics, one should not install Kazza.

 

© 2008 System-Protector.com All Rights Reserved.