Gnutella Forums  

Go Back   Gnutella Forums > Off Topic Discussion > Tips & Tricks
Register FAQ The Twelve Commandments Members List Calendar Arcade Find the Best VPN Today's Posts

Tips & Tricks For help with file formats, viruses, security, etc. This section is not for questions about problems with Gnutella program clients, downloading, connecting, etc.


Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old May 27th, 2009
Novicius
 
Join Date: May 27th, 2009
Posts: 3
Locomule will become famous soon enough
Lightbulb more virus avoidance tips

(disclaimers at end)
You can avoid the majority of fake files simply by the terms you search with. Let's say you are trying to find the song "Up The Creek" by the band Locomule. Instead of looking for "Up The Creek", look for "Creek Up The" etc. Any result that comes back with the title mixed up like you searched for... AVOID! The real file will show up in your results with the title words in the correct order. This works cause the virus spammers use some app to catch search terms, and rename their viruses thusly. For titles with only one word such as "Firedog" just type in part of the word, ie. "Firedo" as a search term. Again, avoid any results that do not add the missing letters from the correct title. These tips alone can save you a lot of trouble. If your p2p program allows, you can add the people *(isps) offering these fake files to your banned/filter list. Care should be taken to only add isps that provide garbled name results, ie.. if you find a virus with the correct title "Firedog" and ban everyone supplying that file, you will be banning many legtimate users who are unknowingly sharing virus files and therefore you will actually be helping the spammers. These forums are chock full of other tips (avoiding files under 2M, files with excessive instances found, .wma and .wmv type files, etc)

Here's one I didn't see.. Lets say you've been getting various songs. Now you search for a song you don't have yet, "Down the Creek". If you see versions of "Down the Creek" in your results that are marked as already downloaded, they are actually viruses that you already have in your Saved folder under alternate names. Remember, these viri I'm discussing have titles that change to match your search terms. Find the bad files you already downloaded by matching the file sizes (from the p2p search results against your Saved files) and delete the saved files (viri) from your Saved folder. Empty your recycle bin also to make sure you don't accidentally restore the viruses later... (2 days later) "hey, who deleted that song I wanted?"

One trick the spammers use is to add some words to your search title. I looked for the song "lkjhg" (obviously and intentionally NOT a real song) and got a result of 18 copies of "lkjhg greatest hit 2009" so now I know to avoid ANY future search results with the words "greatest hit 2009" at the end. Here are a few other "added title words" that popped up... "lkjhg (hot new track)" "lkjhg extended version" "lkjhg extended live version" etc.

On one hand, it would seems that Limewire/Gnutella/etc developers could institute some feature to automatically weed out these spammers but on the other hand, they would just come up with new, possibly more difficult to detect ways of inserting viri files. So don't be an idiot and blame the developers for viri problems. Blame the success of these awesome, optionally FREE apps and stay one step ahead by keeping yourself informed. Use the content filters and this compedium of knowledge because ultimately, all responsibilty falls on the user. If you doubt that, blindfold yourself and go for a drive. Then, after you wreck, sue the automible manufacturer and see how that works out for you.

---------------------------------------------------------
My tips come from years of Limewire use. I am currently running the free version 5.1.2 on a fully updated Windows Vista over a broadband connection. I use the term "viri" as a general term for any sort of file that is not the file you intended to download. The file names I used in this post were all made up, not real files. These tips apply to all searches, not just songs. Lastly, sorry for any reposting or crossposting. I did fairly extensive searching through various forums before posting this. Peace all.

Last edited by Locomule; May 28th, 2009 at 01:54 AM.
Reply With Quote
  #2 (permalink)  
Old May 27th, 2009
Lord of the Rings's Avatar
ContraBanned
 
Join Date: June 30th, 2004
Location: Middle of the ocean apparently (middle earth)
Posts: 656
Lord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputationLord of the Rings has a distinguished reputation
Default

Excellent tips! Worth a Sticky I think.

BTW LW is experimenting with known spam download hash filters with their present LW 5.2 beta series. LW will automatically delete any such file 'known' to be a virus at completion of download & then mark it as spam in search results. This then prevents people unknowingly sharing known virus spam files. And also protects their computer systems of course.

Welcome to the Gnutella forums. Hope you share more of your experience here. We are always hoping experienced users will stay around giving advice & helping others out.
Reply With Quote
  #3 (permalink)  
Old May 27th, 2009
Novicius
 
Join Date: May 27th, 2009
Posts: 3
Locomule will become famous soon enough
Default Thanks LOTR

Thanks Lord, I see you are doing a great and expedient job moderating these forums. We are all greatly indebted to the work that you and others do on our behalf. I will continue to add to my post (and mark additions as dated updates) as I think of any more good information. The hash filters sound like a good idea. Isn't development of popular apps fun? It just gets easier and easier as you go! >=P

Last edited by Locomule; May 28th, 2009 at 01:58 AM.
Reply With Quote
  #4 (permalink)  
Old May 29th, 2009
Sleepless's Avatar
ReTired
 
Join Date: January 1st, 2006
Location: Unknown
Posts: 3,121
Sleepless is just really nice
Default

Very nice indeed. I'll try and add parts of it to the How To Find Music thread.

... although if into electronic music. I would definitely not add "extended version" to keyword filter, nor any of the two words.
Reply With Quote
  #5 (permalink)  
Old June 2nd, 2009
Novicius
 
Join Date: May 27th, 2009
Posts: 3
Locomule will become famous soon enough
Default

I agree. The only thing I recommended possibly filtering was ip addresses from people who return 'garbled' search results. If I was looking for "Song Whatever Extended Dance Mix", I would instead use a garbled search term, ie.. "Extende Whatev Son" etc. Then I'd avoid (not filter) any results like ""Extende Whatev Son" or "Extende Whatev Son Extended Dance Mix". Btw, I'm not really getting into filtering so much in this post, just in case that's not clear to any future readers.

Thanks for posting Sleepless
Reply With Quote
  #6 (permalink)  
Old June 2nd, 2009
Sleepless's Avatar
ReTired
 
Join Date: January 1st, 2006
Location: Unknown
Posts: 3,121
Sleepless is just really nice
Default

I added the part about mixing up titles to the guide. While many point are good in the post it is also very important not to throw to much info at people at the same time. And it is already rather extensive.

http://www.gnutellaforums.com/limewi...ind-music.html

Feel free to give it a read and PM me any suggestions for changes/additions.
Reply With Quote
  #7 (permalink)  
Old November 7th, 2009
Robinafrica's Avatar
Novicius
 
Join Date: April 27th, 2009
Location: South Africa
Posts: 3
Robinafrica is flying high
Default

Quote:
Originally Posted by Locomule View Post
(disclaimers at end)
You can avoid the majority of fake files simply by the terms you search with. Let's say you are trying to find the song "Up The Creek" by the band Locomule. Instead of looking for "Up The Creek", look for "Creek Up The" etc. Any result that comes back with the title mixed up like you searched for... AVOID! The real file will show up in your results with the title words in the correct order. This works cause the virus spammers use some app to catch search terms, and rename their viruses thusly. For titles with only one word such as "Firedog" just type in part of the word, ie. "Firedo" as a search term. Again, avoid any results that do not add the missing letters from the correct title. These tips alone can save you a lot of trouble. If your p2p program allows, you can add the people *(isps) offering these fake files to your banned/filter list. Care should be taken to only add isps that provide garbled name results, ie.. if you find a virus with the correct title "Firedog" and ban everyone supplying that file, you will be banning many legtimate users who are unknowingly sharing virus files and therefore you will actually be helping the spammers. These forums are chock full of other tips (avoiding files under 2M, files with excessive instances found, .wma and .wmv type files, etc)

Here's one I didn't see.. Lets say you've been getting various songs. Now you search for a song you don't have yet, "Down the Creek". If you see versions of "Down the Creek" in your results that are marked as already downloaded, they are actually viruses that you already have in your Saved folder under alternate names. Remember, these viri I'm discussing have titles that change to match your search terms. Find the bad files you already downloaded by matching the file sizes (from the p2p search results against your Saved files) and delete the saved files (viri) from your Saved folder. Empty your recycle bin also to make sure you don't accidentally restore the viruses later... (2 days later) "hey, who deleted that song I wanted?"

One trick the spammers use is to add some words to your search title. I looked for the song "lkjhg" (obviously and intentionally NOT a real song) and got a result of 18 copies of "lkjhg greatest hit 2009" so now I know to avoid ANY future search results with the words "greatest hit 2009" at the end. Here are a few other "added title words" that popped up... "lkjhg (hot new track)" "lkjhg extended version" "lkjhg extended live version" etc.

On one hand, it would seems that Limewire/Gnutella/etc developers could institute some feature to automatically weed out these spammers but on the other hand, they would just come up with new, possibly more difficult to detect ways of inserting viri files. So don't be an idiot and blame the developers for viri problems. Blame the success of these awesome, optionally FREE apps and stay one step ahead by keeping yourself informed. Use the content filters and this compedium of knowledge because ultimately, all responsibilty falls on the user. If you doubt that, blindfold yourself and go for a drive. Then, after you wreck, sue the automible manufacturer and see how that works out for you.

---------------------------------------------------------
My tips come from years of Limewire use. I am currently running the free version 5.1.2 on a fully updated Windows Vista over a broadband connection. I use the term "viri" as a general term for any sort of file that is not the file you intended to download. The file names I used in this post were all made up, not real files. These tips apply to all searches, not just songs. Lastly, sorry for any reposting or crossposting. I did fairly extensive searching through various forums before posting this. Peace all.
Thank you. That is one of the most informative and helpful posts that I have seen. Well done Locumule.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 09:31 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright © 2020 Gnutella Forums.
All Rights Reserved.