Downloader-UA.h — MP3, MPG trojan

p2pnet news | P2P:- More than half a million adware programs disguised as MP3s or MPEGs are loose on the Net.
Downloader-UA.h was added to the company’s files several days ago, posts Craig Schmugar on its McAfee Avert Labs blog.
Anyone who tries to load one of these MP3 and MPG files is instead told to download PLAY_MP3.exe and, “the MP3/MPG file they downloaded was completely fake, playing no media clip what so ever,” says Schmugar.
Users who run PLAY_MP3.exe see a 4,800 word EULA, he says, going on that sizes vary as these files are padded with nulls and citing as examples >>>
preview-t-3545425-adult.mpg
preview-t-3545425-changing times earth wind .mp3
preview-t-3545425-girls aloud st trinnians.mp3
preview-t-3545425-heartbroken fast t2 ft jodie.mp3
preview-t-3545425-jij bent zo jeroen van den.mp3
preview-t-3545425-meet bambi in kings harem.mp3
preview-t-3545425-middle eastern chick.mpg
preview-t-3545425-paint me bunmingham.mp3
preview-t-3545425-paralyized by you.mp3
preview-t-3545425-pull over levert.mp3
preview-t-3545425-say it right remix.mp3
preview-t-3545425-st trinnians girls aloud.mp3
preview-t-3545425-theme godfather.mp3
t-3545425-bentley bizzle.mp3
t-3545425-dx vs randi orton 2007.mpg
t-3545425-haloween special.mp3
t-3545425-just got lucky.mp3
t-3545425-lion king portugues.mpg
t-3545425-los padres de ella.mpg
t-3545425-para sayo freestyle.mp3
t-3545425-peanut butter jelly amende.mp3
t-3545425-stare at sun thrice.mp3
t-3545425-suicide bride dana.mp3
t-3545425-wayne and jane.mp3
Stay tuned.
blog - Fake MP3s Running Rampant, May 6, 2007
.
.Stumble It!
blog - Fake MP3s Running Rampant, May 6, 2008
Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for details. Download here.



p2pnet - rss feed: 

May 9th, 2008 at 11:48 am
Getting those little unannounced extras is why I won’t allow any player other than one I normally use on my box to be used. That also includes movie players, required codec beyond standard ones, as well as any readers or other additional out-of-the-blue requirements. If it isn’t a standard, forget it. I’ll trash the file as not being worth messing with.
May 9th, 2008 at 2:11 pm
Good ol’ Ubuntu…
May 10th, 2008 at 6:53 am
People still use mp3s ? I switched to ogg, flac along time ago.
May 12th, 2008 at 12:41 am
^ “People still use mp3s ?” Obviously, what else is there? As good as u can get, and always will be. I’ve never found an ogg of equal quality to a 192 br mp3. And Flac? Give us a break. Nobody wants that overbloated resource wasting junk.
I mean, u can’t get any better than hi-q vbr. That’s why mp3 is a standard which isn’t going away. There’s no point wanting better until CDs are improved on, and even then mp3 would most likely remain up to the task
May 12th, 2008 at 8:33 am
http://www.winamp.com/player
For a less bloated version: http://www.oldversion.com/program.php?n=winamp
May 12th, 2008 at 8:42 am
WTF, my last 2 posts did not go through!!!!!!
May 12th, 2008 at 8:43 am
OK, THIRD try for this…
The One: http://www.winamp.com
Less bloated: http://www.oldversion.com/program.php?n=winamp
May 12th, 2008 at 8:44 am
Are posting links now banned??
May 12th, 2008 at 9:15 am
“Are posting links now banned??”
Nope. But Akismet queues comments if they have two or more links, a, “common characteristic of comment spam is a large number of hyperlinks”.
I don’t see new comments until I check WP admin page.
I do it as often as I can in between writing posts, etc. I just hadn’t gotten there at that point.
Cheers!
May 13th, 2008 at 1:02 pm
Ooops! Sorry for the double post. Now that I know there is a delay for posts with links it won’t happen again.