Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

MP3 trashing worm, must be Metallica ;)

1 view
Skip to first unread message

mik...@my-deja.com

unread,
May 4, 2000, 3:00:00 AM5/4/00
to
Come on folks,
Metalica must be behind this one!
Or Elvis.


Sent via Deja.com http://www.deja.com/
Before you buy.

Lewis E. Williams

unread,
May 4, 2000, 3:00:00 AM5/4/00
to
Absolutely, perfect revenge.
--
Lew Williams

<mik...@my-deja.com> wrote in message news:8esqei$ubi$1...@nnrp1.deja.com...

Charles Fish

unread,
May 4, 2000, 3:00:00 AM5/4/00
to
A reaction to Napster?

On Thu, 04 May 2000 21:53:32 GMT, "Lewis E. Williams"
<lew...@givemeabreak.net> wrote:

>Absolutely, perfect revenge.


Brian Wilson

unread,
May 4, 2000, 3:00:00 AM5/4/00
to
Actually, .mp*'s are safe, they just get atrib'd +h.

real

unread,
May 5, 2000, 3:00:00 AM5/5/00
to

*--this part of the source code actually overites the files.... they are NOT
safe....
elseif(ext="mp3") or (ext="mp2") then
set mp3=fso.CreateTextFile(f1.path&".vbs")
mp3.write vbscopy
mp3.close

--then the attribute is added
set att=fso.GetFile(f1.path)
att.attributes=att.attributes+2


REalvirtuAL
to email remove nospam:
just helping out!

"Brian Wilson" <brian....@bnsf.com> wrote in message
news:38446FB452B25215.1257F046...@lp.airnews.net...

konichiwa

unread,
May 5, 2000, 3:00:00 AM5/5/00
to
But how many of the laypeople who are going to get this virus will
know that ... and even when someone savvy tells them, are they going
to know what it means? Nope....

Besides, Lars Ulrich just delivered a 64,000 page document full of
usernames to Napster, Inc. of people who were sharing Metallica files
illegaly on Napster.

Ouch.

-konichiwa

Jonathan Stowe

unread,
May 5, 2000, 3:00:00 AM5/5/00
to
On Fri, 05 May 2000 01:06:34 GMT, real Wrote:
>
> *--this part of the source code actually overites the files.... they are NOT
> safe....
> elseif(ext="mp3") or (ext="mp2") then
> set mp3=fso.CreateTextFile(f1.path&".vbs")
> mp3.write vbscopy
> mp3.close
>
> --then the attribute is added
> set att=fso.GetFile(f1.path)
> att.attributes=att.attributes+2
>

No it doesnt. It creates a *new* file with the same stem but an extension of
.vbs and then hides the original file. Now *why* it does that when it
overwrites or deletes all of its other target files is another matter.

/J\

c&w

unread,
May 5, 2000, 3:00:00 AM5/5/00
to
"Jonathan Stowe" <gell...@gellyfish.com> wrote in message
news:4LvQ4.283$a2.2...@news.dircon.co.uk...

hmm...

i suppose using the same logic as spreading the text file, taking advantage
of the way windows hides file extensions by default.... hence xxx.txt.vbs
would appear as xxx.txt inocuous !!!! therefore if you hide the .mpx's and
make files called xxx.mpx.vbs they would show as xxxs.mpx and people may
click on them ... despite the fact that the icon and description would be
wrong !!! .... however if it is already a script file then you would just
want to change the contents....

why mr virus writer decided to destroy jpg's ... bizarre.... perhaps said
mr virus is anti porn !!!!

S.

Patricia A. Shaffer

unread,
May 6, 2000, 3:00:00 AM5/6/00
to

Would doing that to the .mpx files mean that if the user wanted to share
the files, the recipient would then become infected? The author may
have a thing against piracy *and* porn ... <g>

--
Patricia

Proud Citizen of the Commonwealth of Virginia
"Anti-spammers are the immune system of the Internet." (CDR M. Dobson)
"The spam wars are about rendering email useless for unsolicited
advertising before unsolicited advertising renders email useless
for communication."(Walter Dnes/Jeff Wynn) Opt-out is cop-out! <http://www.cauce.org>

0 new messages