But in this case Corel appears to me to be acting in a very guilty manner. I am, of course, working with scant evidence and many assumptions. Corel says that before they can answer that question I must deliver to them comprehensive information on the configuration of my computer system, including all communication port configuration. Here, I have requested security-related information about a Corel program installer with a possible connection to a serious spyware threat. This report is more than 100 pages of very fine print that includes, along with a list of all installed software, includes details on all communications ports. The second reply I received from Corel informed me, “In order to properly assess the circumstances at hand, require a copy of your MSINFO32 report and a WinAudit report from your Windows OS.” (?!!) They sent an executable to produce the WinAudit report, and I ran it to produce the report so I could see what it was reporting. (?!) I asked that they reread my inquiry as it was a security-related question and not (necessarily) a Corel software error. The first response I received asked me to send them a screen shot of the error message.
Therefore, I contacted Corel via their technical support to inquire whether their PaingShop Pro installer also installed Infatica proxy software, and if so why was it being contacted by a “known, malicious” actor. But, I also found a registry link between Corel and this Infatica proxy service. Upon further investigation, I found a Scheduled Task for Infatica that launched whenever the computer was started, as soon as a network connection became available. They feature stealth and wide support for “scraping” system and software usage. It is a Peer business-to-business proxy service. That program was “infatica-service-app.exe”.
I recently had a firewall security alert that an external site characterized as ‘known, malicious” had attempted to contact a program on my computer.
0 kommentar(er)
