Conspiracy theories run rampent due to PIFTS.EXE
(Looks like some of this was a 4chan gag, check my other post about it)
All of the sudden people around the World are seeing PIFTS.EXE popping up. Norton Antivirus is asking users if they want to accept it. Here what I do know:
Here’s some information I pulled from my Zone Alarm Logs. Does this make sense to anyone?
2009/03/09 18:26:44 — New Program — PIFTS.exe — Destination IP: 67.134.208.160:80 — outgoing — blocked — Destination: ping.lifecycle.norton.com2009/03/09 18:47:52 — Program Access — PIFTS.exe — Destination IP: — outgoing — blocked — Destination:
2009/03/09 18:48:28 — Changed Program — Windows Explorer — 207.46.248.249.80 — outgoing — blocked — Destination: sa.windows.com
[Via The Symatec Forums]
This indicates that the program tried to change tactics to go out on the net. I look a look for this and it is SwapDrive. So this must be an update to Swapdrive but I am unsure as to why it pops up that way. The other ip is in Africa or at least take the .80 out of the equation and it points to an Africa IP. (It looks to my mistake in that little part, “to error is human” Check out this post about it) Although just recently Norton Decides to Delete that thread and people are really worried about why? Is this a cover up of some sort because there is a exploit in the Wild that we don’t know about? These are good questions that need to be answered. Here is what one posted about this just after they deleted the forum thread:
Taking back Program Controls : For the Beginners!
So, let’s face it, this is one of the most annoying problems there are with programs. Programs that you think are shut down but are actually still active in the Taskmanager. So I figured I’d talk about some of the most common fixes for these problems. Now as you know there can be any number of programs or glitches as they say, causing the problems. So let’s talk about the why, shall we.
Most of the time programs don’t quit because they are waiting for some kind of response from the system or the System is waiting for the program to close by itself. It could also be a problem with a Virus or Root kit? How do you fix it?
Fixing the problem is somewhat just trial and Error. It isn’t always the hardest thing to do but sometimes people overlook the easiest solutions. So here are some easy ones:
- Check to see if one of the Microsoft updates are causing the problem – Sometimes you might not realize it, but having installed an update can cause problems like KB951748. That one caused a major Headache for Zonealarm. So it is wise to check each months updates when you start seeing problems, sometimes it could of been happening for a while but it can sometimes cause troubles.
FYI Zonealarm has a Fix for KB951748
Comments OffIf your like me and have Zonealarm installed there is a fix!! Zone Alarm has found a way to fix the problem so you don’t have to worry about that the little shield constantly being shown on the right hand corner of the desktop.
The Fix from Zonealarm:
http://download.zonealarm.com/bin/free/pressReleases/2008/LossOfInternetAccessIssue.html
I haven’t tried it yet because I just found out, This is for the people who are looking for the fix!
I will apply the fix to my wifes computer today and if there’s a problem I’ll report back!!
A quick note to all that Have installed KB951748
Comments OffMy wife installed the WIndows XP updates without asking me or telling me. The next thing I found out is she couldn’t access the internet. If you install KB951748 and have Zonealarm, you will have to unistall KB951748 to get internet Access.
I have to thank TANJENTSDOTCOM. Thanks for the help. If you worry about that update you can always uninstall Zonealarm but I like the program and feel it has some great protection. I don’t know what Microsoft is doing but I think they did not test this thoroughly!! Hope this helps!!
