Dear ed7645,
These files are part of BackWeb, a component which is installed on
many new computer systems. It allows detecting and automatically
delivering updates for software installed on a system. Occasionally,
this component is also added to a system during installing new
software for the same reason. According to what I found out, BackWeb
is most commonly used, but by far not limited to, computer systems by
Compaq.
Since it is hard to say what data BackWeb exactly tries to transfer to
or from your system to a remote receiving computer, it might be well
considered spyware. So you might want to block it in order to assure
that this component will not submit information you would not like to
share or not do anything else that could prove harmful. Since the
BackWeb component is not required for running your system, this would
be the most sensible solution.
Sources:
Mark Dormer, "Re: backweb-8876480.exe". Online posting (2002-08-20).
<microsoft.public.windowsxp.general> via Google Groups.
http://groups.google.de/groups?hl=de&lr=&ie=UTF-8&oe=UTF-8&newwindow=1&selm=%237ezVNMSCHA.3920%40tkmsftngp12
Counterexploitation: Suspected Adware/Foistware: BackWeb Client, by B.
Gip, 2002
http://www.cexx.org/dlgli.htm
Malke, "Re: BACKWEB-8876480.EXE-0566499E.pf FILE". Online posting
(2002-08-05). <microsoft.public.windowsxp.general> via Google Groups.
http://groups.google.de/groups?hl=de&lr=&ie=UTF-8&oe=UTF-8&newwindow=1&selm=u5wHL1LPCHA.1852%40tkmsftngp12
Mentors' Resource Guide: Startup Program and Executable Listing -
backweb-8876480.exe, by 'Mentor', 2002
http://www.lafn.org/webconnect/mentor/startup/AXU.HTM
Search terms used:
"8876480.exe":
://www.google.de/search?hl=de&ie=UTF-8&oe=UTF-8&newwindow=1&scoring=d&q=%228876480.exe%22&btnG=Google-Suche&meta=
"8876480.exe":
http://groups.google.de/groups?q=8876480.exe&hl=de&lr=&ie=UTF-8&oe=UTF-8&newwindow=1&sa=N&scoring=d
(in Google Groups)
backweb spyware:
://www.google.de/search?hl=de&ie=UTF-8&oe=UTF-8&newwindow=1&q=backweb+spyware&meta=
Hope this helps!
Regards,
Scriptor |
