lexmark & lxbtcats

toy264 · 03-14-2005, 03:52 PM

I just installed a Lexmark printer. Teattimer asked if I wanted to allow a registry change, and assuming the printer driver was being registered, I allowed the change. However, when I ran Startup Cop, it ID'd a file LXBTCATs as being on the start list, evidently associated with the printer installation. A quick search turned up an INI file with hex entries for "user name" "password", "serial number", survey periods, etc.

So, it would appear if I register the printer w/ Lexmark, they can match me to the serial number, and personally ID any data LXBTCATS slips them. This seems like a very bad idea; however, Adaware didn't flag it, nor did Spybot S&D. What the story?

greyknight17 · 03-15-2005, 10:42 AM

OK, I don't know the whole story, but yes, it seems that it will send those information out to them. I would block it from changing anything in the registry or from contacting the lexmark site. Just disable it from startup if it's running.

toy264 · 03-16-2005, 08:49 AM

I also note that every time I print, LXBTCATS tries to make a change to the registry's start up section.

03-14-2005, 03:52 PM	#1 (permalink)
toy264 Registered User Join Date: Nov 2004 Location: Magnolia Texas Posts: 39 OS: Win2K Pro	lexmark & lxbtcats I just installed a Lexmark printer. Teattimer asked if I wanted to allow a registry change, and assuming the printer driver was being registered, I allowed the change. However, when I ran Startup Cop, it ID'd a file LXBTCATs as being on the start list, evidently associated with the printer installation. A quick search turned up an INI file with hex entries for "user name" "password", "serial number", survey periods, etc. So, it would appear if I register the printer w/ Lexmark, they can match me to the serial number, and personally ID any data LXBTCATS slips them. This seems like a very bad idea; however, Adaware didn't flag it, nor did Spybot S&D. What the story? __________________ "If we knew what we were doing it wouldn't be called research, would it?" A. Einstein

03-15-2005, 10:42 AM	#2 (permalink)
greyknight17 Analyst, Security Team Join Date: Jul 2004 Location: New York Posts: 14,331 OS: Windows 98 & Windows XP Home/Pro My System	OK, I don't know the whole story, but yes, it seems that it will send those information out to them. I would block it from changing anything in the registry or from contacting the lexmark site. Just disable it from startup if it's running. __________________ Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it. Adaware :: CWShredder :: HijackThis :: Panda ActiveScan :: Spybot S&D Anti-Spyware Tutorial :: Spyware Prevention Tools

03-16-2005, 08:49 AM	#3 (permalink)
toy264 Registered User Join Date: Nov 2004 Location: Magnolia Texas Posts: 39 OS: Win2K Pro	I also note that every time I print, LXBTCATS tries to make a change to the registry's start up section. __________________ "If we knew what we were doing it wouldn't be called research, would it?" A. Einstein