Article View: sci.astro
Article #3960Re: Well that's a new trick
From: Bluuuue Rajah
Date: Sun, 21 Dec 2008 11:46
Date: Sun, 21 Dec 2008 11:46
32 lines
3007 bytes
3007 bytes
"Rolf BillyBong" <reply@nothing.dil> wrote in news:TcednSHuhu3NZNbUnZ2dnUVZ8h-dnZ2d@bt.com: > > "Bluuuue Rajah" <Bluuuuue@Rajah.> wrote in message > news:Xns9B79703B96735fdgdfjhsrtg@207.115.17.102... >> >> I just tried to download Darlele Love's excellent Christmas song, >> "All Alone This Christmas," with Limewire, and was surprised when it >> tried to install a virus on my PC. Normally I'm quite adept at >> distinguishing the thinl disguised viri from the useful content, but >> this time the malware designers fooled me. They managed to make the >> file lok like it had the correct length for a three minute pop song, >> and they managed to translate my search string "nobody alone >> christmas" into "Darlene Love - All Alone This Chritsmas." I wonder >> how they did that, and what I should do (besides >> the obvious of keeping my AV s/w current) to identify the disguised >> viruses, when I'm downloading with P2P music. >> > > And the file that was infected, what extension did it have? > You didn't check that did you, it was probably .exe or it was > a zip file. > And in what way did "They managed to make the file lok like it > had the correct length for a three minute pop song" > Do you mean the file size? > In what way are you "adept at distinguishing" malware, are you > a functioning fully updated firewall? > > And "Alone this Christmas" by Darlele Love is shit. What's the matter with you?
Technical Details
Message-ID:
<Xns9B7B456927543fdgdfjhsrtg@207.115.17.102>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!newsfeed.stanford.edu!newshub.sdsu.edu!flph200.ffdc.sbc.com!prodigy.net!flph199.ffdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!flpi143.ffdc.sbc.com.POSTED!50653037!not-for-mailReferences:
<Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> <TcednSHuhu3NZNbUnZ2dnUVZ8h-dnZ2d@bt.com>Show Full Headers
Complete Article Headers
X-Google-Thread: f74ae,e75017b9cb0937d2 X-Google-Thread: 109d8a,e75017b9cb0937d2 X-Google-Thread: 10bb54,e75017b9cb0937d2 X-Google-Thread: 1050a2,e75017b9cb0937d2 X-Google-Thread: faa3c,e75017b9cb0937d2 X-Google-Attributes: gidf74ae,gid109d8a,gid10bb54,gid1050a2,gidfaa3c,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!newsfeed.stanford.edu!newshub.sdsu.edu!flph200.ffdc.sbc.com!prodigy.net!flph199.ffdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!flpi143.ffdc.sbc.com.POSTED!50653037!not-for-mail Newsgroups: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk Subject: Re: Well that's a new trick From: Bluuuue Rajah <Bluuuuue@Rajah.> References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> <TcednSHuhu3NZNbUnZ2dnUVZ8h-dnZ2d@bt.com> Message-ID: <Xns9B7B456927543fdgdfjhsrtg@207.115.17.102> Followup-To: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk User-Agent: Xnews/5.04.25 Lines: 32 NNTP-Posting-Host: 76.226.70.128 X-Complaints-To: abuse@prodigy.net X-Trace: flpi143.ffdc.sbc.com 1229860012 ST000 76.226.70.128 (Sun, 21 Dec 2008 06:46:52 EST) NNTP-Posting-Date: Sun, 21 Dec 2008 06:46:52 EST Organization: at&t http://my.att.net/ X-UserInfo1: T[OGRWKE]JS[SS\YEJJ@NFXBWR\HPCTL@XT^OBPLAH[\BPIB_NVUAH_[BL[\IRKIANGGJBFNJF_DOLSCENSY^U@FRFUEXR@KFXYDBPWBCDQJA@X_DCBHXR[C@\EOKCJLED_SZ@RMWYXYWE_P@\\GOIW^@SYFFSWHFIXMADO@^[ADPRPETLBJ]RDGENSKQQZN Date: Sun, 21 Dec 2008 11:46:52 GMT