🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.astro
Article #3989

Re: Well that's a new trick

#3989
From: richard
Date: Fri, 19 Dec 2008 18:07
28 lines
2408 bytes
On Fri, 19 Dec 2008 15:57:22 GMT, Bluuuue Rajah <Bluuuuue@Rajah.>
wrote:

>
>I just tried to download Darlele Love's excellent Christmas song, "All 
>Alone This Christmas," with Limewire, and was surprised when it tried to 
>install a virus on my PC.  Normally I'm quite adept at distinguishing the 
>thinl disguised viri from the useful content, but this time the malware 
>designers fooled me.  They managed to make the file lok like it had the 
>correct length for a three minute pop song, and they managed to translate 
>my search string "nobody alone christmas" into "Darlene Love - All Alone 
>This Chritsmas."  I wonder how they did that, and what I should do (besides 
>the obvious of keeping my AV s/w current) to identify the disguised 
>viruses, when I'm downloading with P2P music.

Limewire apparently uses a search enging similar to google.
In which any word in the search string is matched, not just the
phrase. so it found a match for "alone christmas". you probably didn't
look closely at the listing.


When I have done p2p and got plenty of hits, I usually sort the list
by artist.

So why go to limewire?
I found the tune on youtube with no problem.
http://www.youtube.com/watch?v=tdvjI9aUqhY
now rip the mp3 and no virus.
Technical Details
Message-ID: <98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com>
Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!news.glorb.com!wns13feed!worldnet.att.net!199.45.49.37!cyclone1.gnilink.net!gnilink.net!spln!extra.newsguy.com!newsp.newsguy.com!news2
References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102>

Show Full Headers
Complete Article Headers
X-Google-Thread: f74ae,e75017b9cb0937d2
X-Google-Thread: 109d8a,e75017b9cb0937d2
X-Google-Thread: 10bb54,e75017b9cb0937d2
X-Google-Thread: 1050a2,e75017b9cb0937d2
X-Google-Thread: faa3c,e75017b9cb0937d2
X-Google-Attributes: gidf74ae,gid109d8a,gid10bb54,gid1050a2,gidfaa3c,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!news.glorb.com!wns13feed!worldnet.att.net!199.45.49.37!cyclone1.gnilink.net!gnilink.net!spln!extra.newsguy.com!newsp.newsguy.com!news2
From: richard <member@newsguy.com>
Newsgroups: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk
Subject: Re: Well that's a new trick
Date: Fri, 19 Dec 2008 13:07:39 -0500
Organization: NewsGuy - Unlimited Usenet $19.95
Lines: 30
Message-ID: <98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com>
References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102>
NNTP-Posting-Host: p2b1cfbbfff0000007a3e74794883c83008dce7a451ece3eb.newsdawg.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Newsreader: Forte Agent 4.2/32.1118