Article View: sci.astro
Article #3992Re: Well that's a new trick
From: Rolf BillyBong
Date: Fri, 19 Dec 2008 19:43
Date: Fri, 19 Dec 2008 19:43
27 lines
2981 bytes
2981 bytes
"Bluuuue Rajah" <Bluuuuue@Rajah.> wrote in message news:Xns9B79703B96735fdgdfjhsrtg@207.115.17.102... > > I just tried to download Darlele Love's excellent Christmas song, "All > Alone This Christmas," with Limewire, and was surprised when it tried to > install a virus on my PC. Normally I'm quite adept at distinguishing the > thinl disguised viri from the useful content, but this time the malware > designers fooled me. They managed to make the file lok like it had the > correct length for a three minute pop song, and they managed to translate > my search string "nobody alone christmas" into "Darlene Love - All Alone > This Chritsmas." I wonder how they did that, and what I should do > (besides > the obvious of keeping my AV s/w current) to identify the disguised > viruses, when I'm downloading with P2P music. > And the file that was infected, what extension did it have? You didn't check that did you, it was probably .exe or it was a zip file. And in what way did "They managed to make the file lok like it had the correct length for a three minute pop song" Do you mean the file size? In what way are you "adept at distinguishing" malware, are you a functioning fully updated firewall? And "Alone this Christmas" by Darlele Love is shit.
Technical Details
Message-ID:
<TcednSHuhu3NZNbUnZ2dnUVZ8h-dnZ2d@bt.com>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mailReferences:
<Xns9B79703B96735fdgdfjhsrtg@207.115.17.102>Show Full Headers
Complete Article Headers
X-Google-Thread: f74ae,e75017b9cb0937d2 X-Google-Thread: 109d8a,e75017b9cb0937d2 X-Google-Thread: 10bb54,e75017b9cb0937d2 X-Google-Thread: 1050a2,e75017b9cb0937d2 X-Google-Thread: faa3c,e75017b9cb0937d2 X-Google-Attributes: gidf74ae,gid109d8a,gid10bb54,gid1050a2,gidfaa3c,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news2.google.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.bt.com!news.bt.com.POSTED!not-for-mail NNTP-Posting-Date: Fri, 19 Dec 2008 13:43:12 -0600 Reply-To: "Rolf BillyBong" <reply@tnothing.dil> From: "Rolf BillyBong" <reply@nothing.dil> Newsgroups: sci.astro,sci.math,alt.2600,microsoft.public.windowsxp.help_and_support,24hoursupport.helpdesk References: <Xns9B79703B96735fdgdfjhsrtg@207.115.17.102> Subject: Re: Well that's a new trick Date: Fri, 19 Dec 2008 19:43:10 -0000 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-RFC2646: Format=Flowed; Original Message-ID: <TcednSHuhu3NZNbUnZ2dnUVZ8h-dnZ2d@bt.com> Lines: 29 X-Usenet-Provider: http://www.giganews.com X-AuthenticatedUsername: NoAuthUser X-Trace: sv3-t1RbeuAJIyi9FtwP9UTeGXa8M05x6FuwWdr0EZ/ZUT3RbFpMT4hqh8HC9k/WuxdpgvlIZlP1Ex4Zfry!04wRWS9ASa0Kn3RtSMwoYm39pu0bwzbNmiYSBraObj1LsdR55JeTTmhK8LNPrJVWYbrguzuHuWl9 X-Complaints-To: abuse@btinternet.com X-DMCA-Complaints-To: abuse@btinternet.com X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.39