Help me figure this out!! Please

[pitupepito2000]

Hi guys,

I have a friend who in his computer, it has been appearing bad p0rn, but nobody has been doing anything to his computer or nobody has been watching or doing anything bad to his computer. What I think that may be happening to his computer is that he downloaded Kazaa, and Morpheous. This is the only thing that I can think of, but I don't have any proof of this. I know that Kazaa had some problems with security letting other people access your computer, and that it had some worms in the network. Has anybody has this problem before with this program. Please, guys if you have had any problems like this, p0rn appearing in your computer out of the blue, tell me or give me a link to a reputable website that documents this kind of problem. This friend of mine used to live next door, but now he is gone to college, please help us.

His rig:

WinME
Pentium4 1.5
GeForce2 MX
128 RDRAM
60 GB HD

Please help us!

 

[Krakerjak]

Real p0rn or executables discuised as p0rn?

If the latter, kazaa virus.
http://zdnet.com.com/2100-1105-942033.html

 

[pitupepito2000]

They were pictures not any executable files.

Thanks for the replies!

 

[Kadarin]

Hmm.. pr0n that just magically appears? Are we talking a lot of pr0n, or just a few random files? Are they all in one directory, or scattered all over the PC? Were they last modified at times when your friend was home and had access to the PC? Is the PC on all the time, connected to DSL, cable, or a satellite internet connection? Is there an ftp server running, or is one of those peer-to-peer programs always running?

I hate to say it, but usually in these kinds of situations, it would be your friend who is responsible for the pr0n, but may not for whatever reason be willing to admit to it.

 

[notfred]

your friend is too embarrassed to admit he downloaded it.

 

[dfi]

Another very possible reason...

Is your friend in college? This is the type of thing that I've seen while in the college dorms. This is caused by a back orfice program. What usually happens is a friend (or an enemy) plays a prank by going on his computer (or sending him a file masquerading as something else... like a trojan horse). When executed, this program gives another user remote access of the computer, allowing them to change settings. A favorite prank seems to be adding gay porn on the person's computer, either as the window's logo or as the desktop background. Or maybe your friend downloaded a file on kazaa/morpheus, and the file was actually a back orfice program.

Unfortunately, I'm not sure how to stop it, short of unplugging the ethernet connection. And then, perhaps finding a suspicious looking dll in the systems folder that was downloaded, or any newly created files that look suspicious, and deleting it. Perhaps look in msconfig and see what unrecognized programs are executing at startup. You could always back-up the files and reformat, but I'm sure no one wants to do that. Other than that, I'm not sure what else to do.

Or, your friend is too ashamed to admit that he is downloading porn.

dfi

 

[pitupepito2000]

Hi,

I know my friend and I know he didn't do it becuase I have already checked it out. Most of this files that I saw in the computer are from the folder in Kazaa. I don't know how they got there. I just want to find something to prove that he is innocent.

Thanks for the input!

 

[dfi]

Ah, files in the folder kazaa. This actually makes complete sense.

Ok, this is not a big deal. Often times, people will put false labels on files in kazaa. For example, say you search for "star wars" on kazaa. Now, you click on a file and download it. Even though this file came up under the "star wars" search, often times the file name is actually "gay porn XXX" or something like that. So, your friend accidentally downloaded porn, thinking they were other files. Just tell your friend to make sure the filename matches the search keywords.

Or, your friend is downloading porn from kazaa.

dfi

 

[pitupepito2000]

Hi,

I am actually the friend, and I am being framed about downloading p0rn onto his computer, which I didn't do. Of course I always as soon as I saw file names like p0rn, I deleted it. So I would really appreciate it if you guys could help me find a reputable argument or source to support the fact that I didn't do it. But he did once find in his start menu an icon to a link, I guess to a p0rn site. I didn't see it so, that's why I can't specify what was this icon.

Thanks for the input!

 

[dfi]

Re-read my previous post. It seems pretty obvious, from what you've told us, that whoever has been using kazaa on that computer has unwittingly downloaded porn. It's a simple mistake, it could happen to anyone. Explain that to your friend. If he is a friend, he will understand that it's probably not you (and that he probably did it himself by mistake), but you might've done it by mistake as well. It's not a big deal. Delete the porn, and be careful next time you download a file from kazaa. Make sure the filename is actually what you want.

dfi

 

[pitupepito2000]

The reason why I didn't say earlier in my post or in the title of the post that I was being framed was because I didn't want people just posting things that would be biased. I never used Kazaa in that computer. But now thanks to you guys I found an answer.

Thanks a lot!

 

[dahunan]

check your history folder
check the size of the porn graphics files

Are these pictures small enough to be from banner ads or from popups?

check the time and date on the files in question to see if that helps track down at least "when" this infraction occurred.

I don't know much about kaaza, but have heard that the recording industry has been putting out fake files for people to download and waste their time on.