Article View: sci.astro
Article #3991Re: Well that's a new trick
From: Bluuuue Rajah
Date: Fri, 19 Dec 2008 19:19
Date: Fri, 19 Dec 2008 19:19
37 lines
3094 bytes
3094 bytes
richard <member@newsguy.com> wrote in news:98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com: > On Fri, 19 Dec 2008 15:57:22 GMT, Bluuuue Rajah <Bluuuuue@Rajah.> > wrote: > >> >>I just tried to download Darlele Love's excellent Christmas song, "All >>Alone This Christmas," with Limewire, and was surprised when it tried >>to install a virus on my PC. Normally I'm quite adept at >>distinguishing the thinl disguised viri from the useful content, but >>this time the malware designers fooled me. They managed to make the >>file lok like it had the correct length for a three minute pop song, >>and they managed to translate my search string "nobody alone >>christmas" into "Darlene Love - All Alone This Chritsmas." I wonder >>how they did that, and what I should do (besides the obvious of >>keeping my AV s/w current) to identify the disguised viruses, when I'm >>downloading with P2P music. > > Limewire apparently uses a search enging similar to google. > In which any word in the search string is matched, not just the > phrase. so it found a match for "alone christmas". you probably didn't > look closely at the listing. Apparently you didn't look closely at my post, because I addressed this issue. > When I have done p2p and got plenty of hits, I usually sort the list > by artist. > > So why go to limewire? > I found the tune on youtube with no problem. > > http://www.youtube.com/watch?v=tdvjI9aUqhY > now rip the mp3 and no virus. Since when does Youtube post naked audio, with no attached video track?
Technical Details
Message-ID:
<Xns9B7991ABC353Efdgdfjhsrtg@207.115.33.102>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.glorb.com!news2!nlpi057.nbdc.sbc.com!prodigy.net!flph199.ffdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!nlpi061.nbdc.sbc.com.POSTED!50653037!not-for-mailReferences:
<Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> <98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Thread: f74ae,e75017b9cb0937d2 X-Google-Thread: 109d8a,e75017b9cb0937d2 X-Google-Thread: 10bb54,e75017b9cb0937d2 X-Google-Thread: 1050a2,e75017b9cb0937d2 X-Google-Thread: faa3c,e75017b9cb0937d2 X-Google-Attributes: gidf74ae,gid109d8a,gid10bb54,gid1050a2,gidfaa3c,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.glorb.com!news2!nlpi057.nbdc.sbc.com!prodigy.net!flph199.ffdc.sbc.com!prodigy.com!flpi107.ffdc.sbc.com!nlpi061.nbdc.sbc.com.POSTED!50653037!not-for-mail Newsgroups: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk Subject: Re: Well that's a new trick From: Bluuuue Rajah <Bluuuuue@Rajah.> References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> <98onk45k9bascdid5ge2o2p808kom1d6ip@4ax.com> Message-ID: <Xns9B7991ABC353Efdgdfjhsrtg@207.115.33.102> Followup-To: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk User-Agent: Xnews/5.04.25 Lines: 37 NNTP-Posting-Host: 99.130.64.177 X-Complaints-To: abuse@prodigy.net X-Trace: nlpi061.nbdc.sbc.com 1229714345 ST000 99.130.64.177 (Fri, 19 Dec 2008 14:19:05 EST) NNTP-Posting-Date: Fri, 19 Dec 2008 14:19:05 EST Organization: at&t http://my.att.net/ X-UserInfo1: [[PAPDON_ZRUBR\[ZZIN_S@@GJT@QDDMEPWXODMMHXMTWA]EPMS[AACY@TZZXQ[KS^ESKCJLOF_J_NGAWNTG^_XGTNTAHULK[X[NRTC@G\P^PLT_OCBRHUO@@TBQZDZMHD[YZ@NLXQXIWMOSXT_KOLK^^CXFF\WHMI^C@EGA_[FXAQ@E^TGNMUXGYNS[QQVL Date: Fri, 19 Dec 2008 19:19:05 GMT