virus alert

[BriGy86]

link for info

just giving a heads up

(posted on myspace forums)

 

[globalcitizen]

edit: good info then

 

[BriGy86]

i fixed it

(screwed up and hit return too soon when making it)

 

[BespinReactorShaft]

Sophos. Any other AV programs detecting this one?

 

[arod]

damn riaa probably hired some hacker to write this....

 

[BriGy86]

Originally posted by: ming2020
Sophos. Any other AV programs detecting this one?

i dunno, haven't looked into it

a guy posted it in the computer forum on myspace

 

[SagaLore]

You're worried about the mp3's, and the first thing I see is that it deletes .com's. 😛

 

[tm37]

What are .com files?

But it also says it travels Peer to peer so does that meen one would need to download this file to have it get you?

 

[3chordcharlie]

Originally posted by: tm37
What are .com files?

But it also says it travels Peer to peer so does that meen one would need to download this file to have it get you?

They're a lot more important than Mp3s.

 

[radioouman]

Originally posted by: Sophos Virus Analisys
W32/Nopir-B will display an anti-piracy image on the screen when run.

What the hell? lol

 

[Spooner]

this would suck big time

 

[DrPizza]

thanks for the info.
Just another reason for me to perhaps finally back up my mp3 collection to dvd (or CD's or both)

 

[BriGy86]

it makes you think its a DVD decrypting program then when you install the "program" it runs

 

[hevnsnt]

lol

W32/Nopir-B will display an anti-piracy image on the screen when run. The worm will then delete all COM and MP3 files from the computer. The worm will also disable taskmanager, registry tools, and access to the control panel. W32/Nopir-B will also check for debuggers and may attempt to disable any such software that it finds.

 

[BriGy86]

Originally posted by: 3chordcharlie

Originally posted by: tm37
What are .com files?

But it also says it travels Peer to peer so does that meen one would need to download this file to have it get you?

They're a lot more important than Mp3s.

name a file that some one might regonize that ends with .com

i don't know what they exactly are either

 

[hevnsnt]

lol you guys are so young..

.com files are an older "exe" .. How about any of these:
Directory of C:\WINNT\system32

2/07/1999 12:00p 8,464 chcp.com
7/22/2002 12:05p 50,620 command.com
6/19/2003 11:05a 10,512 DISKCOMP.COM
6/19/2003 11:05a 8,464 DISKCOPY.COM
2/07/1999 12:00p 69,886 edit.com
6/19/2003 11:05a 34,064 FORMAT.COM
2/07/1999 12:00p 34,576 graftabl.com
2/07/1999 12:00p 19,694 graphics.com
2/07/1999 12:00p 14,710 kb16.com
2/07/1999 12:00p 1,131 loadfix.com
2/07/1999 12:00p 20,752 mode.com
2/07/1999 12:00p 16,656 more.com
2/07/1999 12:00p 12,560 tree.com
2/07/1999 12:00p 24,848 win.com
14 File(s) 326,937 bytes

 

[y2kc]

thanks for the heads up.

 

[BriGy86]

Originally posted by: hevnsnt
lol you guys are so young..

.com files are an older "exe" .. How about any of these:
Directory of C:\WINNT\system32

2/07/1999 12:00p 8,464 chcp.com
7/22/2002 12:05p 50,620 command.com
6/19/2003 11:05a 10,512 DISKCOMP.COM
6/19/2003 11:05a 8,464 DISKCOPY.COM
2/07/1999 12:00p 69,886 edit.com
6/19/2003 11:05a 34,064 FORMAT.COM
2/07/1999 12:00p 34,576 graftabl.com
2/07/1999 12:00p 19,694 graphics.com
2/07/1999 12:00p 14,710 kb16.com
2/07/1999 12:00p 1,131 loadfix.com
2/07/1999 12:00p 20,752 mode.com
2/07/1999 12:00p 16,656 more.com
2/07/1999 12:00p 12,560 tree.com
2/07/1999 12:00p 24,848 win.com
14 File(s) 326,937 bytes

ah! gotcha

i remember learning about win 9X boot up

that includes command.com right

 

[BespinReactorShaft]

Originally posted by: BriGy86
it makes you think its a DVD decrypting program then when you install the "program" it runs

Phew. I was afraid it could be one of those worms that get into your system via ports like msblast... no user intervention required. :Q

 

[BriGy86]

well that may also be true... it is a worm... but on that site it just talked about how it discised itself as a DVD decrypting program

P.S. do i sense sarcasm?

 

[knyghtbyte]

blatently been created by a hacker who has been paid off by the music consortiums...lol

i cant imagine anyone in the world who uses computers etc lots would want to destroy MP3 files unless they got paid a spitload for it....

 

[YBS1]

Originally posted by: ming2020
Sophos. Any other AV programs detecting this one?

Yes, quite a few actually...

P2P-Worm.Win32.VB.cz (Kaspersky Lab) is also known as: Generic Del (McAfee), W32/Nopir-B (Sophos), WORM_NOPIR.B (Trend Micro), W32/Nopir.B (H+BEDV), Worm.P2P.Fupi (ClamAV), W32/Spybot.SC.worm (Panda), Win32/VB.CZ (Eset)

 

[MercenaryForHire]

Originally posted by: ming2020
Sophos. Any other AV programs detecting this one?

Yeah, the "Don't run untrusted EXE's" AV, (C) 2005 M4H. 😛

- M4H

 

[tm37]

Originally posted by: hevnsnt
lol you guys are so young..

.com files are an older "exe" .. How about any of these:
Directory of C:\WINNT\system32

2/07/1999 12:00p 8,464 chcp.com
7/22/2002 12:05p 50,620 command.com
6/19/2003 11:05a 10,512 DISKCOMP.COM
6/19/2003 11:05a 8,464 DISKCOPY.COM
2/07/1999 12:00p 69,886 edit.com
6/19/2003 11:05a 34,064 FORMAT.COM
2/07/1999 12:00p 34,576 graftabl.com
2/07/1999 12:00p 19,694 graphics.com
2/07/1999 12:00p 14,710 kb16.com
2/07/1999 12:00p 1,131 loadfix.com
2/07/1999 12:00p 20,752 mode.com
2/07/1999 12:00p 16,656 more.com
2/07/1999 12:00p 12,560 tree.com
2/07/1999 12:00p 24,848 win.com
14 File(s) 326,937 bytes

Ok

THX

It's all coming back to me.