PDA

View Full Version : MP3 Virus



Fish
03-28-2001, 05:49 PM
I ran across this at http://www.org/right.shtml (http://www..org/right.shtml) I hope this isn't considered spamming, I just wanted to get the word out if anyone else here dl's MP3's. Let me know if this isn't allowable.


In The News:atstake.com -- "As if Napster's days in court were not giving peer-to-peer (P2P) networking a tough enough image, along comes a worm that can spread through a P2P network. This worm takes the name of what ever file the user requests, but can be identified by the fact that it's an executable and it's constant size of 8192 bytes. This particular worm is reportedly mostly harmless, but is an interesting proof of concept. With Napster in legal trouble, watch for increasing security and virus development around distributed P2P networks like Gnutella and others. Ben Houston is credited for finding and tracking the worm."

------------------
I bet I can screw up more PC's faster than you can fix 'em!

[This message has been edited by Fish (edited 03-28-2001).]

[This message has been edited by Paleo Pete (edited 03-29-2001).]

Paleo Pete
03-28-2001, 08:54 PM
yeah, that's not exactly the kind of site I like to see linked here...try not to do that. Often they do have some good info, but those are also the type of sites that drop unwanted goodies on your drive...but that's not the reason, sites of that nature are oriented toward bypassing licensing or outright pirating, and that's not acceptible here.

Find out the name of this trojan, or worm, and look it up, see if you can find info at some of the more reputable security sites. I'd like to know what it's called, and how to deal with it.

------------------
Eagles may soar, but weasels don't get sucked into jet engines!
Note: Please post your questions on the forums, not in my email.

Computer Information Links (http://www.geocities.com/paleopete/)

Fish
03-28-2001, 09:04 PM
Sorry Pete. Just delete it then. I didn't know anything about the site. I guess I better try to run a security scan too. Thanks for the warning.

Pete Help!!! After what you said about that site, I ran a scan and found I had 2 trojans. InnoculateIt didn't/doesn't see it. But, running a scan from PCCillen showed them. I went to my folder and deleted 1 and PCCillen just shows 1 now. It's: TROJ NUKERBSLAP inside of C:\_RESTORE\ARCHIVE\FS10.CAB Do I have to do a reformat to get rid of it? And can the other one change to where it can't be seen now? I hate people like that!

------------------
I bet I can screw up more PC's faster than you can fix 'em!




[This message has been edited by Fish (edited 03-28-2001).]

Fish
03-28-2001, 09:57 PM
It says I can't delete it from PCCillen's site because it's in use.

------------------
I bet I can screw up more PC's faster than you can fix 'em!

Fish
03-29-2001, 12:17 AM
Nevermind, I got rid of it finally.

------------------
I bet I can screw up more PC's faster than you can fix 'em!

Paleo Pete
03-29-2001, 06:09 AM
When browsing sites of that nature it's always best to turn Java off, possibly ActiveX also...Or remember the trojans you just removed and go check out some more reputable sites...and never click Yes or OK to any box that pops up...

------------------
Eagles may soar, but weasels don't get sucked into jet engines!
Note: Please post your questions on the forums, not in my email.

Computer Information Links (http://www.geocities.com/paleopete/)

Technochic
03-29-2001, 10:00 AM
Fish,

Look what I found on the Symantec Virus Encyclopedia Site when I looked up mp3: http://www.symantec.com/avcenter/cgi-bin/vnsf.cgi

------------------
~ Jana

Laziness is the Mother of Technology...

Fish
03-29-2001, 05:59 PM
Or even better than turning it off, just don't go there. http://www.PCGuide.com/ubb/biggrin.gif

------------------
I bet I can screw up more PC's faster than you can fix 'em!

Jeepster56
02-22-2007, 08:45 PM
W32/Blaxe-A is the name of the P2P virus. Aliases: Worm.P2P.Blaxe,
Win32/Lablan.A, W32.HLLW.Blaxe, WORM_BLAXE.A

http://www.sophos.com/virusinfo/analyses/w32blaxea.html

Budfred
02-22-2007, 09:16 PM
W32/Blaxe-A is the name of the P2P virus. Aliases: Worm.P2P.Blaxe,
Win32/Lablan.A, W32.HLLW.Blaxe, WORM_BLAXE.A

http://www.sophos.com/virusinfo/analyses/w32blaxea.html

Welcome to http://www.pcguide.com/ubb/pcgubb.gif

I imagine that may be true today, but it may not have been the same issue 6 years ago when this thread was started... It is a good idea to look at the dates on threads so we don't delete old ones...