Altova XMLSPY is spyware and can screw your network

[Connected]

The following info could be useful for anyone getting weird behaviour after
installing Altova xmlSPY (so aptly named!)

I've just wasted 3 days of my life trying to find out why I've lost network
browsing capabilty (network neighborhood) on my xp home network. Recently
installed XMLSPY was to blame.

Without my permission (other than a vague meaningless sentence in the EULA),
Altova's install program opened ports on my firewall and wrote values to my
registry preventing my machine being able to act as a master browser (thus
screwing my network).

These are the new keys it adds to the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts\List\

Value : 2799:UDP
Data : 2799:UDP:*:Enabled:Altova License Metering Port (UDP)

Value : 2799:TCP
Data : 2799:TCP:*:Enabled:Altova License Metering Port (TCP)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\

Value: DisableUnicastResponsesToMulticastBroadcast
Data : 1

If you uninstall the software, these keys are not removed (a sure sign of
crap software). Even if you cancel the install before it's completed, these
keys are still written to your registry and not removed. So you don't even
have to install their software - you just have to think about doing it!

Note to Altova: You do not own my PC nor have any right to compromise my
security by opening ports in my firewall and otherwise altering the setup of
my network protocols without my authority. Needless to say I'll not be using
any of your software ever again. In fact I intend to inform as many people
as possible about your underhand practices.

If you need to check with their support team call [phone]-1602

Connected

[=?Utf-8?B?RmFtaWx5IFRyZWUgTWlrZQ==?=]

This is just my opinion, but I think the firewall software is just as much to
blame.
It should have warned you!
"Connected" wrote:

The following info could be useful for anyone getting weird behaviour after
installing Altova xmlSPY (so aptly named!)

I've just wasted 3 days of my life trying to find out why I've lost network
browsing capabilty (network neighborhood) on my xp home network. Recently
installed XMLSPY was to blame.

Without my permission (other than a vague meaningless sentence in the EULA),
Altova's install program opened ports on my firewall and wrote values to my
registry preventing my machine being able to act as a master browser (thus
screwing my network).

These are the new keys it adds to the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts\List\

Value : 2799:UDP
Data : 2799:UDP:*:Enabled:Altova License Metering Port (UDP)

Value : 2799:TCP
Data : 2799:TCP:*:Enabled:Altova License Metering Port (TCP)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\

Value: DisableUnicastResponsesToMulticastBroadcast
Data : 1

If you uninstall the software, these keys are not removed (a sure sign of
crap software). Even if you cancel the install before it's completed, these
keys are still written to your registry and not removed. So you don't even
have to install their software - you just have to think about doing it!

Note to Altova: You do not own my PC nor have any right to compromise my
security by opening ports in my firewall and otherwise altering the setup of
my network protocols without my authority. Needless to say I'll not be using
any of your software ever again. In fact I intend to inform as many people
as possible about your underhand practices.

If you need to check with their support team call [phone]-1602

Connected

[Samuel R. Neff]

Adding an exception to the firewall is reasonable but it should have
warned you and gave you an option to say no (in which case it can
choose not to install).

But changing the DisableUnicastResponsesToMulticastBroadcast setting
is ridiculous.

Personally, I stopped using Altova software a few years ago 'cause it
got way too bloated and slow. It's nice and featureful, but it's such
a hog for what it does.

Sam

------------------------------------------------------------
We're hiring! B-Line Medical is seeking .NET
Developers for exciting positions in medical product
development in MD/DC. Work with a variety of technologies
in a relaxed team environment. See ads on Dice.com.

On Tue, 16 Oct 2007 03:32:48 +0100, "Connected"
<so*****@microsoft.comwrote:

>The following info could be useful for anyone getting weird behaviour after
installing Altova xmlSPY (so aptly named!)

I've just wasted 3 days of my life trying to find out why I've lost network
browsing capabilty (network neighborhood) on my xp home network. Recently
installed XMLSPY was to blame.

Without my permission (other than a vague meaningless sentence in the EULA),
Altova's install program opened ports on my firewall and wrote values to my
registry preventing my machine being able to act as a master browser (thus
screwing my network).

These are the new keys it adds to the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\Standar dProfile\GloballyOpenPorts\List\

Value : 2799:UDP
Data : 2799:UDP:*:Enabled:Altova License Metering Port (UDP)

Value : 2799:TCP
Data : 2799:TCP:*:Enabled:Altova License Metering Port (TCP)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\SharedAccess\Parameters\FirewallPolicy\Standar dProfile\

Value: DisableUnicastResponsesToMulticastBroadcast
Data : 1

If you uninstall the software, these keys are not removed (a sure sign of
crap software). Even if you cancel the install before it's completed, these
keys are still written to your registry and not removed. So you don't even
have to install their software - you just have to think about doing it!

Note to Altova: You do not own my PC nor have any right to compromise my
security by opening ports in my firewall and otherwise altering the setup of
my network protocols without my authority. Needless to say I'll not be using
any of your software ever again. In fact I intend to inform as many people
as possible about your underhand practices.

If you need to check with their support team call [phone]-1602

Connected