Is my graphics card spyware?

[Dennisthemenace]

I just updated all the software and drivers for my ATI graphics card, and i'm puzzled.

Why is it every time i fire up the new catalyst software for a tinkering it does an ET and calls 194.74.65.68

Every time i fire it up, poof, off it goes calling home again. I can rule out any auto updating because you have to go and get the Catalyst software from them, it don't come to you. It seems to be one way traffic.

Can someone with better knowledge of ATI and the Catalyst software please explain why it needs to ring home via a third party website every time i open up.

 

[Dennisthemenace]

Nope, no banners or spyware. Run Adaware, Spybot, and norton, and visited Housecall for luck.

This is my ATI graphics card driver software, and ATI have a bloody cheek. The only thing i can think of is spyware in the drivers. The worst thing is there is no way to switch the attempted connections off except by the firewall.

Category: Firewall
Date,User,Message,Details
17/01/2006 18:45:42,Supervisor,"Rule ""ATI Technologies Catalyst Control Centre"" permitted (194.74.65.68,domain(53)).","Rule ""ATI Technologies Catalyst Control Centre"" permitted (194.74.65.68,domain(53)). Outbound UDP packet. Local address,service is (DENNIS(86.137.91.241),0). Remote address,service is (194.74.65.68,domain(53)). Process name is ""C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe""."
17/01/2006 18:45:42,Supervisor,An instance of "C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe" is preparing to access the Internet.,An instance of "C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe" is preparing to access the Internet.
17/01/2006 18:45:33,Supervisor,"Rule ""Default Block Microsoft Windows 2000 SMB"" blocked (86.137.5.217,microsoft-ds(445)).","Rule ""Default Block Microsoft Windows 2000 SMB"" blocked (86.137.5.217,microsoft-ds(445)). Inbound TCP connection. Local address,service is (DENNIS(86.137.91.241),microsoft-ds(445)). Remote address,service is (86.137.5.217,1251). Process name is ""System""."
17/01/2006 18:45:30,Supervisor,"Rule ""Default Block Microsoft Windows 2000 SMB"" blocked (86.137.5.217,microsoft-ds(445)).","Rule ""Default Block Microsoft Windows 2000 SMB"" blocked (86.137.5.217,microsoft-ds(445)). Inbound TCP connection. Local address,service is (DENNIS(86.137.91.241),microsoft-ds(445)). Remote address,service is (86.137.5.217,1251). Process name is ""System""."

Lively little gits whatever they're up to

 

[Dennisthemenace]

It gets more sinister. The whole firewall log is down to one action, firing up ATI's Catalyst Control Centre, even the incoming stuff. I cleared the log three times and repeated it. I'm building two systems at the moment, and boy am i glad the firewall alarmed out before i went shopping for a couple of cards.

Untill ATI can come up with a reasonable excuse i think i'll treat their products like i would the lurgy, and avoid them at all costs. Pitty about that, i think their latest cards are awsome.

 

[Dennisthemenace]

194.74.65.68 is well outside my stand alone computer, and CLI.exe tried to jump ship more than once.