what is pifts.exe please, and should it be blocked at firewall?

Hi all

I've noticed a lot of internet confusion about a file called "pifts.exe" trying to connect out

It seems there's a bit of a fuss on about all the posts at a Norton forum concerning this file getting deleted - wonderful fodder for conspiracy theorists...

What is this file "pifts.exe" pls? (I've seen mention that it's a kind of keylogger, but am unsure how accurate this information is)

Does it have any legitimate purpose (i.e. should it be allowed through a firewall)

best wishes, HJ.

 

Hi Evan

read your link but it asks more questions than it answers...

(linux at present BTW, Win98 sometimes (but with Firefox or Opera, not IE; behind router w. NAT and a good firewall!) - I don't use Norton)

I heard about the PIFTS scramble at SANS, and became curious.

(AFAIK) It seems that it's ?not limited to Norton, it's just that Norton's attracting attention because they are currently deleting all posts on this topic (plus it seems banning users who post??). There's plently of stuff about PIFTS on the Zone Labs forums, for example.

The furore seems to be mainly because *at least some folks* are linking PIFTS (?= Public Internet and File Tracking System) to Magic Lantern.

for Magic Lantern, see here:
http://en.wikipedia.org/wiki/Magic_Lantern_(software).

Whatever the truth of the matter, your advice to "block it and see if anything breaks" seems good

The only conclusion that I've drawn thus far is that Norton are doing a really good job of destroying their credibility by deleting all the posts without some informed response as to why they are doing this

best wishes, HJ

 

nice one Pete yes I saw that too

yup, news sure travels fast on the internet...

 

SANS now clarify the issue

Hi

According to SANS, it seems that Symantec are now saying that it's merely part of the Norton update process; but still, no ideas yet as to why the posts were getting deleted so avidly (which is what really caused the fuss/interest in the first place).

Also from SANS:

best wishes, HJ.

 

Evan,

Walk away friend