New KaZaA Worm!

Quote:

---

W32.HLLW.Gotorm is a worm that steals sensitive information from some video games and attempts to spread through the KaZaA file-sharing network.
When W32.HLLW.Gotorm is executed, it displays the fake error message, titled "Win Zip Self-Extractor."

Type: Worm
Infection Length: 196,608 bytes


Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, Windows Me
Systems Not Affected: Macintosh, OS/2, UNIX, Linux

---

THREAT ASSESSMENT
_____________________________

Wild:

Number of infections: 0 - 49
Number of sites: 0 - 2
Geographical distribution: Low
Threat containment: Easy
Removal: Moderate


Visit
http://securityresponse.symantec.com...lw.gotorm.html

for all the details.

BD]Hobbit

Yet another reason NOT to use Kazaa...

I wonder how many unsuspecting users this one will get?

Probably more than anyone could keep track of. so glad I don't use kazaa :D

This does not surprise me any I have seen people download things off of Kazza and they don't even bother to look at the extension of the file. I hate to see how many people get infected by it

Kazza becomes a vector of propagation to more and more worms. But it is not really more rampant than on IRC or newsgroups during their gold ages. Factors of infections are always the same, for each of those mediums: credulity.

Quote:

---

Originally posted here by KissCool
Kazza becomes a vector of propagation to more and more worms. But it is not really more rampant than on IRC or newsgroups during their gold ages. Factors of infections are always the same, for each of those mediums: credulity.

---

Very true, very true indeed.. Also, education of users is a factor - if there were more educated users out there who knew simply some basics of Internet/online/virus transmission, etc., we wouldn't have nearly the amount of problems that we do today.. But on the flipside of that, if there were more educated users out there, there may be more unemployed IT professionals!

Does that include kazaa clones such as Grokster? www.grokster.com

I havn't really heard of anything to dl music besides Kazaa. What do you guys use?

Use Kazaa - Get Antivirus - Update Antivirus Daily

So much of my extra consulting money comes from people coming to me after their computer recieved a virus that they downloaded from Kazaa. Oh well. I suppose it makes me money. ;)

Quote:

---

Originally posted here by Cybr1d
Does that include kazaa clones such as Grokster? www.grokster.com

---

I would figure that it would work just the same between Grokster, BearShare, Imesh, and the other thousands of file sharing programs that popped up lately. Didnt Napster give out the coding for the P2P thing right before they shut down? Well, if they did, that means most of the new P2P programs are running off of the same core coding, and would pretty much make them all target.

One can just use FTP servers to find what you want. It will take longer, and you will still need to scan stuff, but its better than having everything you download tracked by a system that is being hounded by the RIAA.

I dont know if Napster gave out the core coding, because wasnt Napster based on a central server and not a open architechure? The fact is though, with any file sharing program, you should watch what you download and execute.

thnx :)

Quote:

---

Originally posted here by CXGJarrod
I dont know if Napster gave out the core coding, because wasnt Napster based on a central server and not a open architechure? The fact is though, with any file sharing program, you should watch what you download and execute.

---

AFAIK, this is true. I never heard of any information regarding Napster giving out their code for their program. And my understanding was that Napster used centralized servers - not like the P2P of today in which there are no centralized servers.

Not just with file sharing programs, but ANYTHING you download you should be weary of, only download from a trusted source, scan the file with a virus scanner using the latest DAT files, etc.

I'm glad to see i've actually started a good discussion!
Thank You

Quote:

---

Originally posted here by CXGJarrod
Use Kazaa - Get Antivirus - Update Antivirus Daily

---

My version:

Use Kazaa -> Get Subpoena -> Pay Big $$

And as for the virus... its one of the million flying around p2p networks but a good post indeed...:)

kazaa it's the perfect blank to the cracker's, because the crakers use kazaa to send virus, and we only think that the programs that we download by kazaa are safe programs and the true is that the 45% of all that program are infected with a lot of diferent kind of virus.
i know that but unfortunately my big brother think that kazaa is the modern technology, so inagine what is the velocity of my pc eh....... well bye see you

oh it could be considered modern, but i just call it file sharing.

i use Blubster to download mp3's...never had a problem with it..

This dont surprise me either

Quote:

---

But it is not really more rampant than on IRC or newsgroups during their gold ages.

---

While usenet (Newsgroups) isn't as prolific as it used to be, a litttle test of mine to prove a point to some a-holes produced almost 16 times more viri on usenet during the test period. Both involved a broad sweep of both Kazza and some off-color newsgroups. I pulled about 10 gb down from both and had thousands of positive virus IDs. Mostly sub7 and other backdoors.

These A-holes put Kazaa on my box at HOME to download some Cyprus Hill, since it kind of went with our party theme.... I was so ****ing mad I felt I had to prove something.... touch my keyboard again and yer mine... :D

Kazaa is a risk and as stated in another thread, you can rape someone with it. Usenet is also a risk, been infected there serveral times NOT paying attention. But I can't break the addiction... there is too much info there to ingnore and not play.