View Single Post
  #1 (permalink)  
Old June 2nd, 2005
mstfyd mstfyd is offline
Gnutella Jewel
 
Join Date: August 24th, 2004
Location: stasis field
Posts: 77
mstfyd is flying high
Lightbulb A Forum place to Warn of the Infected?

How about a warning area, where those people who share infected files can be identified, by name, IP, file name, or any combination


Someone (69.113.125.235.6346) - I don't know who, but I had used the "browse host" function & the list of files shows a strong preference for dancehall - thoughtfully included W32.Alcra.A in the files.

From the symantec site: this is a worm that spreads through file-sharing networks, such as Kazaa, Ares, eMule, Morpheus, Grokster, Bearshare, Limewire eDonkey2000, Gnucleus, Shareaza, and Rapigator. The worm also drops a W32.Spybot.Worm variant into the compromised computer.The dropped W32.Spybot.Worm variant opens a back door that allows a remote attacker to have unauthorized access to the compromised computer. The description continues, mentioning, stealing passwords, information, connecting to remote servers, etc.

There have been Beagles, new trojans, malware, all sorts of nasties. File sharing is not for the faint of heart or those without very good updated antivirus/adware programs.

But even a month later, the same infected pgm is still up there, being shared! Accidents do happen, and even the most vigilant users/software can slip up. Having the infected hanging around here for so long increases the odds.

I find it really hard to believe that it's just some innocent user who has no idea his files are infected. Wouldn't his computer acting up haven given a clue? The fact that user/IP address/file are around for so long leads to the conclusion that it must be deliberate & malicious.

Does anyone have any thoughts on why having this kind of warning area might be a bad idea?
Reply With Quote