Kaseya Agents & You

[Lisa Kachold]

It can be used for malicious reasons.

It is currently being used by NSA and government surveillance of citizens of
interest, or it can be used for technical support purposes.

It is currently being delivered for Linux Chrome.

On Thu, Aug 12, 2010 at 7:02 AM, Stephen <cryptworks at gmail.com> wrote:

> so is it a weakness in the client that someone can break into, or is
> it a heathy paranoia of such clients exiting with a managed company
> that you may or may not trust?
>
> On Thu, Aug 12, 2010 at 6:59 AM, Lisa Kachold <lisakachold at obnosis.com>
> wrote:
> > This agent allows a remote party to completely control or watch
> everything
> > done on the desktop on various systems using a Firefox or script plugin.
> > It's similar to LivePerson cookies but much more powerful.
> >
> > On Thu, Aug 12, 2010 at 6:57 AM, Stephen <cryptworks at gmail.com> wrote:
> >>
> >> here is a question from me, you have a weath of information on how to
> >> remove it, but no links as to why?
> >>
> >> this is the first time i have seen this product so i have heard very
> >> little one way or another.
> >>
> >> if you have links as to why its a bad application to have then i would
> >> like to hear it/see it.
> >>
> >> On Wed, Aug 11, 2010 at 7:54 PM, Lisa Kachold <lisakachold at obnosis.com>
> >> wrote:
> >> > Kaseya:
> >> >
> >> > Sometimes a Free Tool, Sometimes a convenient Hack,  Sometimes a
> >> > Government
> >> > Surveillance Tool?
> >> >
> >> > How to Remove a Kaseya Agent:
> >> >
> >> > 1) Windows Hidden Type:
> >> > "%programfiles%\InstallShield Installation
> >> > Information\{48C76121-4F90-11D5-9884-0050BA85A903}\Setup.exe"
> UNINSTALL
> >> >
> >> >
> >> > 2) OS X:
> >> >
> >> > 1. Download the file KaseyaUninstall.pkg.zip file from here, and copy
> it
> >> > onto the Mac.
> >> >
> >> > 2. Expand the ZIP archive.
> >> >
> >> > 3. Run KaseyaUninstall.pkg installer and choose to Install to the
> >> > Macintosh
> >> > Harddrive. Although this appears to be installing a product, it is
> >> > actually
> >> > running the uninstallation script for the Kaseya agent.
> >> >
> >> > 4. Log in with the user that installed the agent initially and delete
> >> > the
> >> > /var/tmp/kpid file. To do this launch Terminal and run the "rm -rf
> >> > /var/tmp/kpid" command.
> >> >
> >> > 5. Remove the agent with root rights, i.e. in Terminal run the "sudo
> rm
> >> > -rf
> >> > /var/tmp/kpid" command and then provide the root password
> >> >
> >> > 6.  The Kaseya agent and associated files will be removed.
> >> >
> >> > WorkArounds:
> >> >
> >> > Chrome does not currently have an active Kaseya Agent plugin for OS X
> or
> >> > Linux Chrome:
> >> > http://www.youtube.com/results?search_query=chrome+kaseya+osx&aq=f
> >> >
> >> > References:
> >> >
> >> > http://www.kaseya.com/free/features.aspx
> >> > http://www.kaseya.com/solutions/government.aspx
> >> >
> >> >
> http://community.kaseya.com/ittoolkit/b/weblog/archive/2010/06/09/creative-ways-to-get-it-toolkit-installed-on-a-computer.aspx
> >> >
> >> >
> >> > --
> >> > Office: (602)239-3392
> >> > AT&T: (503)754-4452
> >> > http://it-clowns.com
> >> > "Faith is, at one and the same time, absolutely necessary and
> altogether
> >> > impossible. "
> >> > --Stanislav Lem
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > ---------------------------------------------------
> >> > PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> >> > To subscribe, unsubscribe, or to change your mail settings:
> >> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >> >
> >>
> >>
> >>
> >> --
> >> A mouse trap, placed on top of your alarm clock, will prevent you from
> >> rolling over and going back to sleep after you hit the snooze button.
> >>
> >> Stephen
> >> ---------------------------------------------------
> >> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> >> To subscribe, unsubscribe, or to change your mail settings:
> >> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
> >
> >
> > --
> > Office: (602)239-3392
> > AT&T: (503)754-4452
> > http://it-clowns.com
> > "Faith is, at one and the same time, absolutely necessary and altogether
> > impossible. "
> > --Stanislav Lem
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change your mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
>
>
>
> --
> A mouse trap, placed on top of your alarm clock, will prevent you from
> rolling over and going back to sleep after you hit the snooze button.
>
> Stephen
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>



-- 
Office: (602)239-3392
AT&T: (503)754-4452
http://it-clowns.com <http://it-clowns.com/wiki/index.php?title=Obnosis>
"Faith is, at one and the same time, absolutely necessary and altogether
impossible. "
--Stanislav Lem
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20100812/f5bed794/attachment.html>