Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   Feature Requests & Bug Reports (https://www.gnutellaforums.com/feature-requests-bug-reports/)
-   -   spielberg practical joke (https://www.gnutellaforums.com/feature-requests-bug-reports/67060-spielberg-practical-joke.html)

ohand February 11th, 2007 02:11 PM

spielberg practical joke
 
Why is the file joke played on spielberg coming up for every file search? I couldn't find a thread on this subject. Other people must have noticed this:

GregorK February 11th, 2007 03:30 PM

Phex has no file joke or anything related to spielberg..

Uninstall and download the latest original release from http://phex.org

Edit: uhm... sorry I guess I misunderstand you... Aaron is right of course...

AaronWalkhouse February 11th, 2007 04:11 PM

Give me more details on that file. With the SHA1 hash and the exact size (in bytes)
I can start tracking and blocking it if it is spam or another worm.

AaronWalkhouse February 11th, 2007 04:57 PM

Oh wait! I see it. "Steven Spielberg gets a hilarious prank phone call.wma.exe"
is 417,792 bytes long and the hash is QQO5HUWADDEOUOOFR2I4GIMREY4Z67ZG.

Let's see what we have here… Aha, it's a Worm called Delf.ATB.
Might as well start up the main RADAR and see how many copies are out there.

Okay, looks like it started just a week ago. They must have been using infected
machines to seed it because I have already blocked virtually all of the current
sources. It isn't spreading very fast yet. Good thing you caught it so quickly. :D

AaronWalkhouse February 11th, 2007 09:41 PM

A second variant, but it's probably a dud with a data error:

3XBBNMIOCUQQS5WDZSY6BI3KNJA6L5UT

Same size, same place. Also to be avoided in case it still works.

AaronWalkhouse February 11th, 2007 09:51 PM

Only 531 hits so far. I'll add them to the list now and let the search run for
another full 24 hour cycle to catch the rest. ;]

AaronWalkhouse February 12th, 2007 09:46 PM

A third variant, might as well block this hash too.

DEAEPG2N4EOTXMRI3EAYYVBGZDQ346OB

AaronWalkhouse February 12th, 2007 09:50 PM

2V276OX5YM7EFKWQDZM7QOVKRVFPET6K

I hope this isn't a trend. The new variants are coming so slowly that they may
just be damaged copies, but I am starting to see copies of them here and there.

AaronWalkhouse February 12th, 2007 11:04 PM

Time's up. Only 757 hits so far. Not bad.


All times are GMT -7. The time now is 04:07 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.