Rogue MP3 Trojan streaks across P2P networks

I call MP3's and videos...

...on my hard disks 'Time Shifting' which is perfectly legal :)

@ Dick Emery (time shifting)

VERY clever. Shame on me. I should have thought of that before. I doubt it will stop the MPAA's or RIAA's lawyers though. They have more money than you have, and in the US judiciary system it means that they're right, and you're wrong.

Piracy is theft, murder, rape and kiddy fiddling

and yet I carry on and don't give a crap. While I'll never have time to go through all the 150gb of MP3s that I've downloaded, I've never come across one infected with a virus or spoiled in some other way.

@Michael C - it's good for a man to know his limitations, and obviously coping with the technicalities of bittorrent downloading is one of yours. I'd like to thank you for sponsoring the music industry so that I can carry on enjoying unlimited music and software for free.

Paris because she probably knows a thing or two about nasty viruses.

another for Mikey C!

hey mike, just had to throw in my tuppence worth on that crock you wrote. most points have already been addressed, but the last paragraph is something i have to come back on...

"To all you kiddies out there that por through torrents to get all the free stuff you can"

well i download a fair bit of stuff from torrents but i ain't a kiddie, either from the perspective of age or technical knowledge...

"first of all sooner or later you're going to get nailed by a virus like this or worse"

as a professional reverse engineer and malware researcher i doubt this is gonna happen... but thanks for your concern

"second, you'll ned up starting all over from scratch regularly since likely you have no backup for your hundreds of GBs of data..."

again cheers for the kind thoughts, but you'll be relieved to know that i have a very thorough system of backups across my machines that ensure that i have at least two and even sometimes three copies of all my data! including all my music and films:o)

crapmadona.mp3.trojan.exe

jebus told me crapmadona.mp3.trojan.exe would start the rapture and save the world (well the god squaders anyway, who cares about normal people) pwaise the lard!!!

@How it works... I reported this vuln 6 years ago.

They're called "URL flips".

http://seclists.org/bugtraq/2002/Feb/0327.html

guilt

funny thing this guilt.

no matter what one does some politically correct anal representitive will say that it is illigal or amoral and will try to pass some screwy law to screw the majority that does not like them in first place... so by this defenition alone we are all guilty. the entertainment industry gestapo screams at us and prosecutes us for listening to music or for watching movies that they produce. goverment screams threatens us for not paying taxes for which they spent like there is no tomorow on worthless crap that no one really needs except for neccesary basics. churches or religious zelots threaten cajole along with screaming at us for not being moral enough by their so called standards(i wonder if goat/sheep sacrifice at midnight counts as an amoral while praying to l ron hubbard ?). i know i missed a few add more if you want.but unfortunetly i have no guilt complex whatsover when it comes to ripping music watching what i want annoy government when possible and piss off any and all religious nutters for my personal enjoyment( some of them have very funny looks when you go against them my fav is when they start ot twitch and foam at the mouth). i do all that so i can annoy these so called politicaly correct anal cavaties with small brains and big multiple orafices that spew crap over everything in range with ever higher efficiency. any how that is my two cents...

i read the blog it seems to be a pre eliminary evaluation as to what it does.we will know soon enough all the details as with everything it will take time and some skull work( some of us seem to forget that part). so critisizing it for being in lacking info is just saying i am a rotten kid and cannot wait for that candy gimmie gimmie gimme or i will throw a tantrum.(if you cannot wait do the work yourself)

as for comment about registered p2p usually kill infected uploads its load of rubbish. i personally had seen files that had been infested with malware, trojans, viruses sit there on trackers for months or longer even after they had been flagged.

as for the comments from both macs linux windows users keep this in mind no matter what os or kit you are using it will be exploited at some point no matter what you say or do even if you follow strict or very strict use policies you are not invincible you are not god/s.

Freetards?

You see I think that it wold be fairer to say that the retards are having a bad day. The Free bit has little to do with it in this case, IMO.

If you can't tell an executable from an MP3 then what do you expect? If you fall for that then you'd probably open a dodgy file if it was emailed to you, or whatever.

BBC are reporting

That the file poses as a girls aloud [no they shouldn't be] song,

If you like that crap you deserve anything you get!

Paris, cos she knows all about releasing any old shyite for money.