MarketScore Hosts Blocked - Spyware

Why have we blocked MarketScore?

iMesh encourages that the user install a technology with the advertised purpose of increasing Internet speed, but in fact directs all of the user's Internet traffic through a "proxy" owned by MarketScore. This proxy is collecting data about your surfing habits, including personal information, and possibly credit card numbers and passwords.

University security policy enters the picture, because users are unknowingly compromising their ONYEN credentials, in addition to exposing HIPAA covered entities. For this reason, we have decided to block campus access to MarketScore's proxies.

Users experiencing problems will need to remove the MarketScore software. Instructions regarding this process follow, with credit to Columbia University.

MarketScore Software

The text that follows is copyright of Columbia University. Please refer to the copyright disclaimer at the end of this document

MarketScore is an internet usage monitoring program. There are two variants, OS Relevant Knowledge, and NS Marketscore.

What it Does

The software can silently download and install arbitrary unsigned code from its controlling server, as a self-update feature.

It can install its own trusted root certificates so it can intercept secure (SSL) connections made by your machine. These certificates are left behind even when the software is uninstalled, allowing MarketScore servers to impersonate any other domain.

1. In the NS variant: Every web connection goes through a remote proxy server where everything you send and fetch (including 'secure' HTTPS connections such as online banking) is stored and analyzed. Because it works as a proxy itself, it won't connect properly through other external proxies.

2. In the OS variant: Makes modifications to email messages you receive or web pages you visit and then monitors/records your responses to the ads they insert. It sends back data to a controlling server.

How Do I Know If I'm Running MarketScore?

California State University - San Bernardino has provided a tool to check whether or not your machine is redirecting traffic through MarketScore proxies. You may check your workstation here .

REMOVAL INSTRUCTIONS

To uninstall the Marketscore software, go to Add/Remove Programs (Start->Settings->Control Panel). Choose to uninstall Marketscore. After doing this, proceed with the following instructions to ensure that your computer is entirely clean of the software. If you need assistance with the instructions at any point in this document, contact us via one of the Other ITS Help Options .

1. Look through all certificates to see if you have either 'Netsetter' or 'Marketscore'. Netsetter is the OS variant, and Marketscore is NS.

    • Launch, and from the menu, choose .
    • Choose the Content tab .
    • Look through all certificates (especially root) to see which certificate you have. Delete it, while you're there.
    • Launch, and from the menu, choose .
    • Select Privacy and Security , then Certificates .
    • Click Manage Certificates .
    • A window will appear. Look through all tabs to view all certificates. See which one you have. Delete it, while you're there.
  • For NS variant, type: cd %WinDir%\System nscheck /uninstall
  • For OS variant, type: cd %WinDir%\System ossproxy -bootremove -uninst:RelevantKnowledge
  • Files to delete for the NS variant: ossproxy.exe nscheck.exe nsconfig.dll
  • Files to delete for the OS variant: ossproxy.exe okshook.dll osmim.dll osconfig.dll

2. Optionally, you can open the registry ( Start > Run > regedit ) and delete the key Software\Netsetter in both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER to clear up.

Columbia Copyright Notice, Restriction and Disclaimer

The document to which this notice is attached is protected by copyright owned in whole or in principal part by The Trustees of Columbia University in the City of New York ("Columbia"). You may download the document for reference and research purposes only.

COLUMBIA MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED WITH RESPECT TO THE DOCUMENT, OR ANY PART THEREOF, INCLUDING ANY WARRANTIES OF TITLE, NONINFRINGEMENT OF COPYRIGHT OR PATENT RIGHTS OF OTHERS, MERCHANTABILITY, OR FITNESS OR SUITABILITY FOR ANY PURPOSE.

Distribution and/or alteration by not-for-profit research or educational institutions for their local use is permitted as long as this notice is kept intact and attached to the document.

Any other distribution of copies of the document or any altered version thereof is expressly prohibited without the prior written consent of Columbia.


Top
University of North Carolina - Chapel Hill