File Sharing and Viruses

[Code]

I've noticed a direct corelation to file sharing and people with computer "problems".

Meaning, the folks here at EF and my friends who avidly share files, are the same idiots that end up desperately asking for help with their virus problems.

This is purely anectdotal and speculative, but file sharing might be the digital version of Natural Selection.

 

[supersizeme]

how exactly do you think they get the viruses though? the majority of shit people are downloading are mp3s and maybe some video files. they'd have to somehow inadvertently get ahold of an executable(i.e. trying to download a video game) or document and run it. i can understand not paying attention but i've never been sent an executable while looking for music or videos

 

[from zero]

how exactly do you think they get the viruses though? the majority of shit people are downloading are mp3s and maybe some video files. they'd have to somehow inadvertently get ahold of an executable(i.e. trying to download a video game) or document and run it. i can understand not paying attention but i've never been sent an executable while looking for music or videos

A virus can be embedded into an mp3.

 

[supersizeme]

no it can't bor

 

[strongsmartsexy]

What is likely to be happening is that the people who file share also likely get "free" software. And as soon as one person has an undetected virus, it's fairly easily transmitted. Especially as people aren't as likely to keep up to date with virus/worm definitions also.

 

[from zero]

no it can't bor

Eh well.

I tried.

 

[supersizeme]

E for Effort though

you used the word "embedded" though which probably scared half the people who read your post into thinking you are the resident authority on mp3 viruses

points for that

 

[Code]

47% of files on Kazaa and Limewire are infected with maliscious code.

It's like russian roulette. If you're dumb enough to wade into those odds, go for it.

how exactly do you think they get the viruses though? the majority of shit people are downloading are mp3s and maybe some video files. they'd have to somehow inadvertently get ahold of an executable(i.e. trying to download a video game) or document and run it. i can understand not paying attention but i've never been sent an executable while looking for music or videos

 

[supersizeme]

how is it so high(47%)? i would think that the overhwelming majority of the files being swapped back and forth are mp3s and .avis which can't carry a virus.

 

[Code]

Yeah, you can put a virus into an MP3, but I think the bulk of it is from viruses labeled as music or something.

Let me find the article about the infected files.

Also, a p2p network is only useful if there is more good data than junk. So if the RIAA uploads shit to a p2p network, it makes it useless over time.

how is it so high(47%)? i would think that the overhwelming majority of the files being swapped back and forth are mp3s and .avis which can't carry a virus.

 

[supersizeme]

yeah i'd like to read that. everything i've seen so far talks about how the idea of an mp3 virus is a hoax

 

[Code]

It was 45%, I was misquoting.

http://www.wired.com/news/business/0,1367,61852,00.html?tw=wn_story_related

 

[supersizeme]

So far, however, music, picture and movie files have not been infected with malicious code, because they aren't executables, Hughes said. Users can't run them simply by clicking on them. People need to open them through another program, such as a multimedia program like Real Player.

That 45% figure he gave was in reference to downloading executable files only. The media files are still cool.

 

[Code]

I'm pretty sure you can piggy-back any type of code into a windows media file. It just hasn't been done yet.

Might go on my Todo list for next week......

So far, however, music, picture and movie files have not been infected with malicious code, because they aren't executables, Hughes said. Users can't run them simply by clicking on them. People need to open them through another program, such as a multimedia program like Real Player.

That 45% figure he gave was in reference to downloading executable files only. The media files are still cool.

 

[supersizeme]

you are a bad, bad man. that said, i would be willing to discuss payment in exchange for you infecting a bunch of Creed and Linkin Park songs and then distributing them to the masses

 

[Code]

If I were a bettin' man, I'd place good money on the RIAA already working on this.

you are a bad, bad man. that said, i would be willing to discuss payment in exchange for you infecting a bunch of Creed and Linkin Park songs and then distributing them to the masses

 

[strongsmartsexy]

I think what would be really effective is to have a coordinated effort across the US where people don't buy and music from stores for a month.

 

[supersizeme]

If I were a bettin' man, I'd place good money on the RIAA already working on this.

ooooh good one. i didn't even think about that. that would be effective...for a while until the p2p programs come with some sort of virus detection in them. i love the never ending battle.

 

[BileStew]

47% of files on Kazaa and Limewire are infected with maliscious code.

It's like russian roulette. If you're dumb enough to wade into those odds, go for it.

Maybe we should get Paul Hornings synopsis on this. If they lower their standards, then it would easier to download a virus.

 

[string_bean00]

My brother goes hog wild downloading warez and cracks and stuff on Kazaa. Last virus can I found 12 different worms/viruses.

He's a little fucker.

 

[TheProject]

I've been using P2P for several years, never gotten a virus.

But then again, I'm clever.

 

[Taps]

You can d/l Norton Anti-Virus off Kazaa. Problem solved.

 

[PHATchik]

But then again, I'm clever.

That one I'll actually give you.

 

[jnuts]

I'm pretty sure you can piggy-back any type of code into a windows media file. It just hasn't been done yet.

Might go on my Todo list for next week......

I've seen a few exploits that would be pretty easy to pull on unexpecting folks.

An exploit here was the ability to embed a URL inside an asx. That URL could link to a site that has/had a code for an IE exploit.

Here is another nice one:

http://www.k-otik.com/exploits/05.08.MediaPlayerExploit.java.php

I'm not sure if the latest media center update fixed that or not. Not that you'd see a high percentage of patched machines.

Then you've got the run of the mil buffer overrun issues.

 

[TheProject]

You can d/l Norton Anti-Virus off Kazaa. Problem solved.

I wonder how many people put viruses out there in the Norton package...