Article View: sci.astro
Article #3989Re: Well that's a new trick
From: richard
Date: Fri, 19 Dec 2008 18:07
Date: Fri, 19 Dec 2008 18:07
28 lines
2408 bytes
2408 bytes
On Fri, 19 Dec 2008 15:57:22 GMT, Bluuuue Rajah <Bluuuuue@Rajah.> wrote: > >I just tried to download Darlele Love's excellent Christmas song, "All >Alone This Christmas," with Limewire, and was surprised when it tried to >install a virus on my PC. Normally I'm quite adept at distinguishing the >thinl disguised viri from the useful content, but this time the malware >designers fooled me. They managed to make the file lok like it had the >correct length for a three minute pop song, and they managed to translate >my search string "nobody alone christmas" into "Darlene Love - All Alone >This Chritsmas." I wonder how they did that, and what I should do (besides >the obvious of keeping my AV s/w current) to identify the disguised >viruses, when I'm downloading with P2P music. Limewire apparently uses a search enging similar to google. In which any word in the search string is matched, not just the phrase. so it found a match for "alone christmas". you probably didn't look closely at the listing. When I have done p2p and got plenty of hits, I usually sort the list by artist. So why go to limewire? I found the tune on youtube with no problem. http://www.youtube.com/watch?v=tdvjI9aUqhY now rip the mp3 and no virus.
Technical Details
Message-ID:
<98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!news.glorb.com!wns13feed!worldnet.att.net!199.45.49.37!cyclone1.gnilink.net!gnilink.net!spln!extra.newsguy.com!newsp.newsguy.com!news2References:
<Xns9B79703B96735fdgdfjhsrtg@207.115.17.102>Show Full Headers
Complete Article Headers
X-Google-Thread: f74ae,e75017b9cb0937d2 X-Google-Thread: 109d8a,e75017b9cb0937d2 X-Google-Thread: 10bb54,e75017b9cb0937d2 X-Google-Thread: 1050a2,e75017b9cb0937d2 X-Google-Thread: faa3c,e75017b9cb0937d2 X-Google-Attributes: gidf74ae,gid109d8a,gid10bb54,gid1050a2,gidfaa3c,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!news.glorb.com!wns13feed!worldnet.att.net!199.45.49.37!cyclone1.gnilink.net!gnilink.net!spln!extra.newsguy.com!newsp.newsguy.com!news2 From: richard <member@newsguy.com> Newsgroups: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk Subject: Re: Well that's a new trick Date: Fri, 19 Dec 2008 13:07:39 -0500 Organization: NewsGuy - Unlimited Usenet $19.95 Lines: 30 Message-ID: <98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com> References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> NNTP-Posting-Host: p2b1cfbbfff0000007a3e74794883c83008dce7a451ece3eb.newsdawg.com Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Newsreader: Forte Agent 4.2/32.1118