PDA

View Full Version : SafeCast Shared Components, howto deal with?


Minsak
November 12th, 2005, 12:48 PM
SafeCast Shared Components,
Macrovision RTS Service
File Version 4.16.052

Original file name: CDANTSRV.EXE
Location:
C:\WINDOWS\system32\drivers\CDAC11BA.EXE

Uninstaller listed under Control Panel-->Add or Remove Programs

The copyprotection SafeCast is associated with an installation of:
Mathcad 11
(This is a math tool I got to use in school)


It was Tenebril SpyCatcher that got me on the track of SafeCast. Now I am worried that if I uninstall and clean the computer for the SafeCast that I will no longer be able to use Mathcad 11.

What should I do? Try removing it, and is there some emulation of SafeCast that would let Mathcad 11 continue run. I would like to continue to run Mathcad 11 which I have received in legal ways. I feel pretty much lost deciding what measurements to enforce on my system.

BlueZannetti
November 12th, 2005, 12:58 PM
{QUOTE-> The copyprotection SafeCast is associated with an installation of:
Mathcad 11
(This is a math tool I got to use in school)


It was Tenebril SpyCatcher that got me on the track of SafeCast. Now I am worried that if I uninstall and clean the computer for the SafeCast that I will no longer be able to use Mathcad 11. <-QUOTE}That is correct, see Mathsoft FAQ (http://support.mathsoft.com/FAQ/). If you want to use Mathcad, see if you can exclude this protection from Spycatcher. Otherwise, ignore it.

Blue

Minsak
November 12th, 2005, 01:23 PM
{QUOTE-> That is correct, see Mathsoft FAQ (http://support.mathsoft.com/FAQ/). If you want to use Mathcad, see if you can exclude this protection from Spycatcher. Otherwise, ignore it.

Blue <-QUOTE}

Reading the following at MathSoft's website:

Q: Some have characterized SafeCast as "monitoring software". Is that accurate?
A: No. SafeCast technology does not do anything by itself; rather, it adds to software products the ability to create and verify licenses for authorized users. Even in implementations that use a background process, that process does not "monitor" anything. It merely waits for commands from the software product it's associated with, and occasionally sets a flag or increments a counter in a license file, so that the licensed product itself can confirm that that file has not been tampered with.

Minsak
November 12th, 2005, 01:30 PM
A computer system with all it's software is rather complex. I did have a keylogger alert. Therefore I was a bit worried, and I have problems understanding the SpyCatcher software fully yet since I am new to it.

I was mixing the locations a bit up, so here is some corrections:

SpyCatcher did give alert on the following files:
C:\WINDOWS\CDAC14BA.DLL
C:\WINDOWS\CDAC13BA.EXE

While the looking in the SpyCatchers --> System Explorer I found this information on the memory resident program CDAC11BA.EXE :
C:\WINDOWS\system32\drivers\CDAC11BA.EXE

Looking in the same "drivers" folder I also see a file called:
C:\WINDOWS\system32\drivers\CdaC15BA.SYS

Summing them up these 4 files only is weighing:
52 kByte
12 kByte
21 kByte
197 kByte

So there must be more stuff hiding since this is far from 2 Megabyte

Not sure yet how to deal with the stuff. Removing it and I may loose access to Mathcad.
Looking for a SafeCast emulation maybe, if that exists at all, and then facing to break the lisence rules??

Leaving it, and it my compromise my privacy !?

There must be a reason why Tenebril first added it to their SpyCatcher product for detection.
It may be a false positive, but it is not good to know for an end-users with the limited knowledge we got.