Go Back   Velocity Reviews > Newsgroups > Computer Security
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply

Computer Security - Nopir-B worm...

 
Thread Tools Search this Thread
Old 04-24-2005, 10:01 PM   #1
Default Nopir-B worm...


Now, who really thinks this was NOT sponsored by the Music Industry?

http://www.securityfocus.com/news/10985?ref=rss

Michael
--

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvald


Michael Pelletier
  Reply With Quote
Old 04-25-2005, 12:17 AM   #2
DANG
 
Posts: n/a
Default Re: Nopir-B worm...


"Michael Pelletier" <> schreef in bericht
news:RNTae.64982$A31.39726@fed1read03...
> Now, who really thinks this was NOT sponsored by the Music Industry?
>
> http://www.securityfocus.com/news/10985?ref=rss


Which "music industry" are you referring to? It is allegedly thought to
originate from France and poses as a commercial dvd copier application. Have
you peformed any search of known dvd copier apps on any p2p platform? I
think you'll find a meagre haul... it just isn't that popular for sharing.
Hypothetically, if "the" or any "music industry" you care to name or refer
to, wished to sabotage the p2p community by indiscriminate damage to mp3's
and/or .com applications don't you think they'd use a better vehicle?
No, I believe they will continue their actions through the courts and close
down a variety of torrents websites... as for viral p2p sabotage, regardless
of how ineffective it is... no, just conspiracy theory.
DANG


  Reply With Quote
Old 04-25-2005, 12:24 AM   #3
David H. Lipman
 
Posts: n/a
Default Re: Nopir-B worm...

From: "Michael Pelletier" <>

| Now, who really thinks this was NOT sponsored by the Music Industry?
|
| http://www.securityfocus.com/news/10985?ref=rss
|
| Michael
| --
|
| "Microsoft isn't evil, they just make really crappy operating systems." -
| Linus Torvald

Well this isn't the first infector to target MP3 files.

The W32/Bibrog.a@MM has been around for over two years and deletes all MP3 files.
The VBS/Tobar has been around for 3 years and overwrites all MP3 files.

Just the fact that the Nopir worm displays an anti piracy statement doesn't mean much.
There are *many* infectors that target media files and have been around for years.

I will say it just another reason to steer away from P2P networks.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


  Reply With Quote
Old 04-25-2005, 01:02 AM   #4
Michael Pelletier
 
Posts: n/a
Default Re: Nopir-B worm...

David H. Lipman wrote:

> From: "Michael Pelletier" <>
>
> | Now, who really thinks this was NOT sponsored by the Music Industry?
> |
> | http://www.securityfocus.com/news/10985?ref=rss
> |
> | Michael
> | --
> |
> | "Microsoft isn't evil, they just make really crappy operating systems."
> | - Linus Torvald
>
> Well this isn't the first infector to target MP3 files.
>
> The W32/Bibrog.a@MM has been around for over two years and deletes all MP3
> files. The VBS/Tobar has been around for 3 years and overwrites all MP3
> files.
>
> Just the fact that the Nopir worm displays an anti piracy statement
> doesn't mean much. There are *many* infectors that target media files and
> have been around for years.
>
> I will say it just another reason to steer away from P2P networks.
>


The funny thing is why delete mp3 files in the first place. There are lot of
other things one could do when your virus has been installed on someone's
system. I still think there is a purpose to it. I do think that the Music
industry is behind it. In the case of this one, why display an anti-piracy
message? You you telling me there is some computer virus writer out there
that is so concerned with the piracy of music that he/she took it upon
himself/herself to write it? No way.

If the Music industry is behind it, I hope someone can prove it so they can
now be sued. Writting a virus no matter what the reason is a criminal act.

Mihcael
--

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvald
  Reply With Quote
Old 04-25-2005, 01:22 AM   #5
Michael Pelletier
 
Posts: n/a
Default Re: Nopir-B worm...

DANG wrote:

>
> "Michael Pelletier" <> schreef in bericht
> news:RNTae.64982$A31.39726@fed1read03...
>> Now, who really thinks this was NOT sponsored by the Music Industry?
>>
>> http://www.securityfocus.com/news/10985?ref=rss

>
> Which "music industry" are you referring to?


Could be IFPI or RIAA...

> It is allegedly thought to
> originate from France and poses as a commercial dvd copier application.
> Have you peformed any search of known dvd copier apps on any p2p platform?
> I think you'll find a meagre haul... it just isn't that popular for
> sharing.


DVD rippers and DVD to Divix stuff? They are very popular...

> Hypothetically, if "the" or any "music industry" you care to name
> or refer to, wished to sabotage the p2p community by indiscriminate damage
> to mp3's and/or .com applications don't you think they'd use a better
> vehicle?


That is the best vehicle. You hit them where they do it. You hit them where
it hurts.

> No, I believe they will continue their actions through the courts
> and close down a variety of torrents websites... as for viral p2p
> sabotage, regardless of how ineffective it is... no, just conspiracy
> theory. DANG


Sure the Music Industry will continue their court cases. But, you can not
close down some of the newer P2P sites because they are not centralized.
Only the first generations were. In short they will never stop piracy. No
matter how much money they sink into pushing new laws.

Like I said before. It just seems to suspicious to me. You get someone to
download your trojan. Since most Windows users log in with administrator
privs your trojan now has full access to the system. At this point you can
pretty much do anything and your telling me that they only decide to delete
mp3 files? That does not seem strange to you? Usually the people that write
these things could not care less about the laws....why would they all of a
sudden get morals?

Michael
--

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvald
  Reply With Quote
Old 04-25-2005, 04:49 AM   #6
David H. Lipman
 
Posts: n/a
Default Re: Nopir-B worm...

From: "Michael Pelletier" <>

| David H. Lipman wrote:
|
>> From: "Michael Pelletier" <>
>>

|>> Now, who really thinks this was NOT sponsored by the Music Industry?
|>>
|>> http://www.securityfocus.com/news/10985?ref=rss
|>>
|>> Michael
|>> --
|>>
|>> "Microsoft isn't evil, they just make really crappy operating systems."
|>> - Linus Torvald
>>
>> Well this isn't the first infector to target MP3 files.
>>
>> The W32/Bibrog.a@MM has been around for over two years and deletes all MP3
>> files. The VBS/Tobar has been around for 3 years and overwrites all MP3
>> files.
>>
>> Just the fact that the Nopir worm displays an anti piracy statement
>> doesn't mean much. There are *many* infectors that target media files and
>> have been around for years.
>>
>> I will say it just another reason to steer away from P2P networks.
>>

| The funny thing is why delete mp3 files in the first place. There are lot of
| other things one could do when your virus has been installed on someone's
| system. I still think there is a purpose to it. I do think that the Music
| industry is behind it. In the case of this one, why display an anti-piracy
| message? You you telling me there is some computer virus writer out there
| that is so concerned with the piracy of music that he/she took it upon
| himself/herself to write it? No way.
|
| If the Music industry is behind it, I hope someone can prove it so they can
| now be sued. Writting a virus no matter what the reason is a criminal act.
|
| Mihcael
| --
|
| "Microsoft isn't evil, they just make really crappy operating systems." -
| Linus Torvald

It deletes MP3 files to be malicious. The same reason BMP and JPEG files are also targeted.

As for the possibillity of a non-RIAA contected individual writing malware which deletes MP3
files, I think the possibility is very possible. Not because of the music industry looses
money and they feel high and mighty and moral but because of the value the public places on
MP3 files. The writer feels good because he/she knows that the malware has caused the
recipient damage.

The two examples are not alone. There are many other malicious media targeting infectors.

Go to; http://vil.nai.com/vil/advsearch.asp and put MP3 into the search field.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


  Reply With Quote
Old 04-25-2005, 05:09 AM   #7
Michael Pelletier
 
Posts: n/a
Default Re: Nopir-B worm...

David H. Lipman wrote:

> From: "Michael Pelletier" <>
>
> | David H. Lipman wrote:
> |
>>> From: "Michael Pelletier" <>
>>>

> |>> Now, who really thinks this was NOT sponsored by the Music Industry?
> |>>
> |>> http://www.securityfocus.com/news/10985?ref=rss
> |>>
> |>> Michael
> |>> --
> |>>
> |>> "Microsoft isn't evil, they just make really crappy operating
> |>> systems." - Linus Torvald
>>>
>>> Well this isn't the first infector to target MP3 files.
>>>
>>> The W32/Bibrog.a@MM has been around for over two years and deletes all
>>> MP3 files. The VBS/Tobar has been around for 3 years and overwrites all
>>> MP3 files.
>>>
>>> Just the fact that the Nopir worm displays an anti piracy statement
>>> doesn't mean much. There are *many* infectors that target media files
>>> and have been around for years.
>>>
>>> I will say it just another reason to steer away from P2P networks.
>>>

> | The funny thing is why delete mp3 files in the first place. There are
> | lot of other things one could do when your virus has been installed on
> | someone's system. I still think there is a purpose to it. I do think
> | that the Music industry is behind it. In the case of this one, why
> | display an anti-piracy message? You you telling me there is some
> | computer virus writer out there that is so concerned with the piracy of
> | music that he/she took it upon himself/herself to write it? No way.
> |
> | If the Music industry is behind it, I hope someone can prove it so they
> | can now be sued. Writting a virus no matter what the reason is a
> | criminal act.
> |
> | Mihcael
> | --
> |
> | "Microsoft isn't evil, they just make really crappy operating systems."
> | - Linus Torvald
>
> It deletes MP3 files to be malicious. The same reason BMP and JPEG files
> are also targeted.
>
> As for the possibillity of a non-RIAA contected individual writing malware
> which deletes MP3
> files, I think the possibility is very possible. Not because of the music
> industry looses money and they feel high and mighty and moral but because
> of the value the public places on
> MP3 files. The writer feels good because he/she knows that the malware
> has caused the recipient damage.
>
> The two examples are not alone. There are many other malicious media
> targeting infectors.
>
> Go to; http://vil.nai.com/vil/advsearch.asp and put MP3 into the search
> field.
>
>


I noticed a lot of the viruses listed pretend to be a mp3 when in fact they
were not. I wonder how many of them actually target the removal of mp3s? I
am gonna take a closer look at the list.

I still think there is more to it than what it seems. At least this one.

Michael
--

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvald
  Reply With Quote
Old 04-25-2005, 05:35 AM   #8
Technobarbarian
 
Posts: n/a
Default Re: Nopir-B worm...


"DANG" <> wrote in message
news:hOVae.78569$...
>
> "Michael Pelletier" <> schreef in bericht
> news:RNTae.64982$A31.39726@fed1read03...
>> Now, who really thinks this was NOT sponsored by the Music Industry?
>>
>> http://www.securityfocus.com/news/10985?ref=rss

>
> Which "music industry" are you referring to? It is allegedly thought to
> originate from France and poses as a commercial dvd copier application.
> Have
> you peformed any search of known dvd copier apps on any p2p platform? I
> think you'll find a meagre haul... it just isn't that popular for sharing.
> Hypothetically, if "the" or any "music industry" you care to name or refer
> to, wished to sabotage the p2p community by indiscriminate damage to mp3's
> and/or .com applications don't you think they'd use a better vehicle?
> No, I believe they will continue their actions through the courts and
> close
> down a variety of torrents websites... as for viral p2p sabotage,
> regardless
> of how ineffective it is... no, just conspiracy theory.
> DANG


I have to agree. The potential downside for the industry if this blew up
in their faces is HUGE. The upside is miniscule--petty harassment. If they
wanted to go out with a big splash they certainly have the resources to come
up with something a lot bigger than this.

TB


  Reply With Quote
Old 04-25-2005, 06:00 AM   #9
David H. Lipman
 
Posts: n/a
Default Re: Nopir-B worm...

From: "Michael Pelletier" <>


>>
>> It deletes MP3 files to be malicious. The same reason BMP and JPEG files
>> are also targeted.
>>
>> As for the possibillity of a non-RIAA contected individual writing malware
>> which deletes MP3
>> files, I think the possibility is very possible. Not because of the music
>> industry looses money and they feel high and mighty and moral but because
>> of the value the public places on
>> MP3 files. The writer feels good because he/she knows that the malware
>> has caused the recipient damage.
>>
>> The two examples are not alone. There are many other malicious media
>> targeting infectors.
>>
>> Go to; http://vil.nai.com/vil/advsearch.asp and put MP3 into the search
>> field.
>>

| I noticed a lot of the viruses listed pretend to be a mp3 when in fact they
| were not. I wonder how many of them actually target the removal of mp3s? I
| am gonna take a closer look at the list.
|
| I still think there is more to it than what it seems. At least this one.
|
| Michael
| --
|
| "Microsoft isn't evil, they just make really crappy operating systems." -
| Linus Torvald

Maybe it is Michael, however the same speculation was made on previous ones as well.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


  Reply With Quote
Old 04-25-2005, 06:00 AM   #10
Michael Pelletier
 
Posts: n/a
Default Re: Nopir-B worm...

Technobarbarian wrote:

>
> "DANG" <> wrote in message
> news:hOVae.78569$...
>>
>> "Michael Pelletier" <> schreef in bericht
>> news:RNTae.64982$A31.39726@fed1read03...
>>> Now, who really thinks this was NOT sponsored by the Music Industry?
>>>
>>> http://www.securityfocus.com/news/10985?ref=rss

>>
>> Which "music industry" are you referring to? It is allegedly thought to
>> originate from France and poses as a commercial dvd copier application.
>> Have
>> you peformed any search of known dvd copier apps on any p2p platform? I
>> think you'll find a meagre haul... it just isn't that popular for
>> sharing. Hypothetically, if "the" or any "music industry" you care to
>> name or refer to, wished to sabotage the p2p community by indiscriminate
>> damage to mp3's and/or .com applications don't you think they'd use a
>> better vehicle? No, I believe they will continue their actions through
>> the courts and close
>> down a variety of torrents websites... as for viral p2p sabotage,
>> regardless
>> of how ineffective it is... no, just conspiracy theory.
>> DANG

>
> I have to agree. The potential downside for the industry if this blew
> up
> in their faces is HUGE. The upside is miniscule--petty harassment. If they
> wanted to go out with a big splash they certainly have the resources to
> come up with something a lot bigger than this.
>
> TB


Well also remember that about a month ago Canada said that they would not
support additions to the Millennium act...also P2P is not centralized so
who do you sue? I agree with you on one thing, if there is some kind of
"sponsoring" by the Music industry it could blowup in their face...


Michael
--

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvald
  Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump