PLEASE DISTRIBUTE WIDELY.

A number of computers within the University are running software
known as MarketScore. This software is spyware which can potentially
allow the company which controls it to eavesdrop on all web-browsing
activity and information sent to or from web sites.

This includes sites normally protected by encrypted HTTPS sessions
such as online banking sites, York's web-based student enrollment,
email, etc. The service has the potential to gather passwords, credit
card numbers, and any other personal information transmitted to or
from the web sites visited.

This software is sometimes installed as an "internet accelerator" and
can be installed by anyone registering for the MarketScore service,
and also was bundled with iMesh, a popular peer-to-peer file sharing
program. There may be other "partner" arrangements that we are not yet
aware of. In most cases, the user is unaware of the presence of the
software or the security and privacy implications of having it installed.

CNS recommends this software not be used and those who have it installed
should contact their technical support to have it removed safely.
Information on this is below.

HOW TO DETECT IT

Note: this affects only Microsoft Windows systems. The MarketScore
software does not run on Macintosh or any other non-Windows platform.

Visiting the following website will detect if your computer is using the
MarketScore software:

http://netscan.infosec.yorku.ca/

HOW TO REMOVE IT

Please contact your local technical support staff about updating your
anti-virus software or about detecting and removing infections. Manual
removal is possible but complicated. We have had mixed results with common
Anti-spyware tools.

For home copmputers, we have found the recent beta of Microsoft
Anti-Spyware does fully remove recent versions of MarketScore.
It can be downloaded free of charge here:

http://www.microsoft.com/athome/security/spyware/software/default.mspx

Questions or concerns about this note, should be directed to
the CNS Helpdesk in the Computing Commons, William Small Centre,
(voice: 416-736-5800, email: [log in to unmask]).


CNS Announce