waldwolf

Hackers Hijack Windows Media Player

January 13, 2005

Hackers are using the digital rights management feature in Microsoft's Windows Media Player to fool people into downloading spyware and viruses, a security company claimed on Wednesday.

According to a warning posted on security company Panda Software's Web site, virus writers have released licence-protected multimedia files containing Trojan horses that overcome the anti-piracy features in version 10 of the Media Player and Windows XP SP2.

Normally, when a user tries to play a licence-protected file but doesn't own the necessary licence, Media Player goes onto the Internet to find a site where they can buy one.

This Trojan, dubbed WmvDown.A, subverts this process by sending the player to a malicious Web site (serve.alcena.com) from which it downloads malware.

According to Panda Software, the Trojan is easy to spot once it has run. After connecting to the Internet, it displays the message: "Thanks for downloading this file. Click Play to listen."

A Microsoft spokesperson was not immediately able to comment on Panda's claims.

For the reasons bkk_mike and cdnvic have both indicated, shutting down a computer by "pulling the plug" is not a wise practice.

In the case of a desktop, pulling the power plug (or equivelant) will result in much faster discharge of the internal CMOS battery, than if the system were left plugged-in, then shut down normally. (Somewhat akin to your clock radio running down its "time-memory battery", when there is a power outrage.)

This is an extremely dangerous practice.

The shock to ones system can cause your blood pressure to jump (almost instantly) from normal to over 300, possibly causing an aneurysm which then may lead to a hemorrhagic stroke.

It has also been documented that jumping into extremely cold water may result in drowning. The shock of the cold water on ones nervious system could cause the victum to take an involuntary breath while under water.

This practice is "not conducive to longevity".

......and this should prove WHAT????

that you spend 15 minutes booting into safe mode for What???

 

It's a computer, it's not voodoo.

Windows98/98SE/ME have a few of the very early "driver repair capabilities", which Microsoft later expanded and built into Win2k, IE6 and WinXP. To activate those capabilities in Win98x one needs to work from "SafeMode" (where drivers are not loaded).

If you have the opportunity, try it. You'll find it often fixes "strange" little problems.

Merry Christmas

Would agree with cdnvic. My first suspicion is the firewall.

You may want to try this test:

While offline, shut firewall down completely.

Then with browser window closed, go online.

Now launch browser, and check to see if it loads the "home page" you've selected.

If you are now able to "surf", disconnect from ISP and do a complete shutdown.

Now, do a restart but boot into "SafeMode".

Again, do a full shutdown. DO THIS 3 TIMES, each time booting into "SafeMode".

Now do a normal shutdown/restart, allowing Windows to boot into normal mode.

Connect to ISP with browser closed.

Launch browser and see if it loads "home page".

Post back results to above tests, if additional assistance needed.

cheers

francois - Thank you for the update.

This appears to be a follow-on to the earlier discovery of "buffer-overflow" virus's being hidden within jpeg images. The poisoned picture could then be displayed on a website, sent in e-mail, or circulated on a P2P network.

More about "Buffer-Overflow" here:

cheers

....I am 29 years old...have never had any health problems...

Well you apparently do now.

It could be a number of things from simple eczema to the beginning of gout. (I personally would lean towards the gout diagnosis.) Alcohol is a prime contributor to gout and the reduced circulation from smoking only adds to the problem. Renal (Kidney) mal-function may also be a factor.

Strongly recommend you consult a medical professional.

.......As an experiment, I started playing with a Mac this year, .....

While the Apple machines are excellent for certain specialized work, the steady decline in available software, combined with the much higher cost of available programs, make for a dubious life expectancy. Sadly, in the last few years, Apple's share of the computer market has declined from 5% to less than 3% today. In fact, the computer side of the company is operating in the red. Their salvation this past year has been iPod sales (reportedly over 4 million). It's doubtful they can sustain this over the long haul, as Sony and others have "smaller and better" players in the pipeline.

............spyware creators haven't bothered to write programs aimed at OS X.....

There are a few virus's out there aimed at Apple's OS (and Linux), but as you stated, the authors of those virus's don't get as much publicity as they would, for example, by shutting down a few hundred large Corporate networks. So this mainly accounts for the lack of OS-X virus's.

"You pays ur money and takes ur choice."

There is a small downside to this.  I have a MS wireless explorer mouse (matrix design) and if you leave it idle for a while and then move it, it will take a moment to actually move the cursor on the screen.  It's not a long pause, but it's noticeable.  Otherwise, it's pretty responsive.  I use rechargeable batteries, and they last about 1 month (extensive use).

<{POST_SNAPBACK}>

Yes......and I've also recently heard a lot of similar complaints about the start-up "time lag" on laptops with the Intel "Centrino" mobile processor.

......And there doesn't appear to be a free trial version to download 

In their press release, Microsoft said the free beta test version should be available for downloading, "within a month."

cheers

........I understand I could install a keylogger on my own computer- that's my right I suppose. But what about sending keylogger software via email to another person's computer? Not that I would ever consider such a thing, but how difficult is it? What are the possible problems that could arise and just how illegal is it?

ChiangMaiThai - If I remember correctly, one or both of the listed keyloggers have "Remote Installation" capabilities. Check their FAQ's.

As to legality, I'm not a lawyer, so I can't give you a definitive answer. Besides, confidentiality laws vary from country to country. These laws, however, don't stop the "spyware" vendors from trying to secretly put similar utilities on your computer, then sending information "back home".

My personal position in this matter? .......I'd probably go by the old school thinking "nothing's illegal until you get caught." (Mitigating circumstances and that sort of thing.)

Then you could always hire a third party to do the "leg work", if you get my drift.

I feel your pain.

Good luck.

(PS - The "keyloggers", properly configured, record both incoming as well as out going material, so if your personal computer is in the loop, you should be able to capture everything, coming or going.)

I wonder how many EU residents would be willing to purchase a new WindowsXP (sans WMP) version, should Microsoft decide to charge more for the "stripped" version, which they could do, legally.

As Microsoft will surely appeal this ruling, it may be years before a "final" decision is reached. If these appeals results in any reversal, Microsoft could then legally refuse to support the "stripped" versions, in future.

I doubt we've heard the last of this, as this rulling opens other avenues for legal filings from so-called "damaged" parties. Microsoft will undoubtly fight those through the courts too.

Then there's the Windows IE Browser, OE, Defragmenter, Notepad, WordPad, Drive Converter, Compression Utility, Firewall, Imaging, etc., etc., etc. Basically all these other Windows built-in's have competators offering replacements. Should Microsoft be required to "remove" those too?

As several people have noted, there are alternatives to Windows.

Apparently their called "Outback Straw Hats".

One similar to that you pictured, is named "Outback Straw Hat w/Aztec Band"

Link here:

(Looks good. Might order one myself.)

Microsoft Acquires Anti-Spyware Leader GIANT Company

REDMOND, Wash. -- Dec. 16, 2004 -- Microsoft Corp. today announced that it has acquired GIANT Company Software Inc., a provider of top-rated anti-spyware and Internet security products. Microsoft will use intellectual property and technology assets from the acquisition to provide Microsoft® Windows® customers with new tools to help protect them from the threat of spyware and other deceptive software. In addition, key personnel from GIANT Company will be joining Microsoft's security efforts.

Additional details here:

Giant Company (website) here:

Everything you ever wanted to know about circumcision, and more (including a video w/audio of the proceedure.)

The Circumcision Information and Resource Page here:

(If you have not already done so, would strongly suggest you discuss this matter with your doctor or other medical specialist, before committing to the proceedure.)

good ........ (luck?)

mussen - Some of the latest Microsoft wireless mice* have "a breakthrough, power-saving technology that extends battery life", according to Microsoft.

One of the ways Microsoft extends battery life is by using a light in the mouse’s optical sensor that illuminates only as brightly as necessary, using minimal power. Microsoft wireless mouse products also go into standby mode after a certain period of inactivity, which minimizes unnecessary battery drain.

Microsoft claim this new technology extends battery life up to 6 months. (Note the words "up to".) It would appear from your description, you have one of these new models.

More info here.

cheers

(* or should it be mouse's? )

apophyss - There are a number of "free" online translation websites, which will translate between various languages.

Two which I use are:

Babel Fish Translation

PROMT-Online

Of course, the above are no subsitute for help offered by native-born speakers, like our good friend francois.

Hope this helps.

ChiangMaiThai - It appears your only concerned with emails. What about things like AOL/Yahoo/MSN's instant messaging, chatrooms and other online "meeting places".

You may want to look into a type of software generically called "Keyloggers", which you can install on your computer. They capture keystrokes and take periodic "pictures" of the monitor screen, store them in invisible files or send them to a designated email address. They even have "word" alert notification capability, such as "love", "sex", "meeting place", etc., etc.. The software is invisable to the user and the emails even pass through firewalls, without triggering an alert.

A google search for "Keyloggers" will return dozens of options, but here are a couple of the "better" ones to checkout, if your interested:

Perfect Keylogger by BlazingTools

Ghost Keylogger by SureShot

I hope your concerns prove unfounded.

cheers.

STA Travel Insurance (International Policy) here:

Policy covers:

» Trip Cancellation

» Lost or stolen baggage

» Trip Interruption

» Delayed baggage

» Trip Delay

» Sickness or accident

» Accidental death & dismemberment

» Emergency Evacuation

» Terrorism

» 24-hour travel & medical emergency assistance

» Pre-Existing Medical Conditions

» Emergency cash transfer

» Travel Supplier Financial Insolvency

Cost, Coverage, and Services are detailed on the link. Be sure to read the small print.

Hope this helps.

cheers

Here's a novel idea, why not PAY for music and film instead of supporting the illegal acvtivity which is damaging it, and don't bother pasting some news article claiming otherwise. Not paying for music and film is theft.-peter

<{POST_SNAPBACK}>

Now why didn't I think of that before.

dancali - It would help to know the make and model of your mouse.

What does the cursor look like, when the auto-scrolling occurs?

(Some mice (or is it mouse's) have this feature built-in. When activated, you will see a circle on the right "slider" which has a two-headed up/down arrow displayed. When the mouse is moved, the scroll follows.)

Oh yes.....per-chance did you read the "mickey-mouse" manual?

cheers

Ah yes.....the good old DOS days. Peter Norton's utilities way-back-then were first rate. Unfortunately, after Symantec bought his company and started to "improve" on his work, things slowly went to pot. But thats a very long, sad story.

In any event, I understand your reluctance at shutting down various systems, such as your antivirus, however, it will eventually be necessary to do so, to see what is causing your problem.

First, let me comfort you in the fact that, being on dialup, the chances of anyone getting into your system is rather slim, as with most dialup connections you have a different ISP address each time you connect online. Therefore someone looking for you specifically, first needs to find your ISP address. Now, in the case of broadband, in most instances you have the same address each time you connect and many if not most "broadbanders" stay connected 24/7. That presents many problems, as the "targeter" knows exactly where to find you, anytime, any day.

Second, you also have (in my opinion) the best software firewall available, so even if someone were lucky enough to find you, Zone Alarm (properly configured) will stop them cold.

OK.....Now, another way you can do the checks, is to reconfigure the System Properties window, so as to Notify you of the updates, but not automatically download/install them. Then when you get the notice of new updates, you just shutdown Norton, reconfigure the "System Properties" to update automatically, reconnect and see if it now works. After the test you can "reactivate" Norton, and you'll then be back to square one.

Don't worry about "Connection Keep Alive", as I doubt it is capable of causing your problem. As you indicated, its just a pinger, similar to InkLineGlobal's "Stay Connected".

Keep us posted on your findings.

cheers

francois - Over the last few years, the music and motion picture industry have been filing law suits against individuals who uploaded/downloaded copyrighted material via P2P networks. Most of those individuals sued, have settled out of court, agreeing to stop their P2P activities and paying an average $3,000 (US) in damages.

This is similar to what Microsoft and other software companies were doing, to shutdown many warez (pirate software) websites. In Microsoft's case, the million or so $ they collected in damages, were donated to charity. (I'm sure they also took a tax writeoff for that donation.)

It was recently reported, the annual sale of "counterfit" products in the USA alone (everything from watches to medicine to aircraft parts) is a 1 trillion dollar business, and growing rapidly. Not a very pleasent thought while flying at 40,000 feet from SFO, CDG or LHR to BKK, wondering if the bolts holding your aircraft's wings on, are counterfit.

I've also heard that 95%+ of "western" products offered for sale in Asia, are counterfit. You may recall the recent case of "counterfit baby formula" in China, which resulted in many infant deaths and illnesses.

I wouldn't worry too much about the current P2P crackdown. Its somewhat like seeing one cockroach in your kitchen. For every one you see, there are a hundred more hiding elsewhere.

Music industry sales declined 15-25% after the original Napster was shutdown. Now many of those music industry execs realize, Napster and the other similar outlets actually contributed to increased music sales. Back in the late 1940's, the movie industry wouldn't allow films to be broadcast on TV for fear people wouldn't go out to theatres. Then the same thing happened when home video recorders (VHS/Beta) came along. Today, over 60% of motion picture profits come from video sales alone, so they're not starving, yet.

As the old saying goes. "don't worry about things over which you have no control".

cheers

RDN - I should have mentioned earlier, that I am not of fan of anything which automatically installs, uninstalls or tweaks my computer settings. I personally want to know, in advance, all details of such operations, so I may elect or reject their implementation. In other words, I want to know in advance, all possible effects any new software might have on my computers overall operation.

For reference, the WinXP "Auto-Update" feature only downloads/installs what Microsoft designates as "high-priority updates", which includes security updates, critical updates, and service packs . It will not download/install ALL updates offered.

I am highly suspicious of the Norton SystemWorks your running. Over the years it has caused more problems than it reports to cure. (Akin to their "CrashGuard" which caused more crashes than it saved. A fact Symantec finally admitted to, just before it was discontinued.) Of all the Symantec products, the only one I still use is WinFaxPro. All the others, including Norton AV, have become so bloated and cause so many problems, I've retired them.

I would suggest you shut-down all Norton programs running in the background, then test the update function for a week or two to see how it reacts. Even though the Norton programs will not be running in the background, you will still have full-manual control to run things like virus checks, etc., when necessary.

Question: The "Connection Keep Alive" routine you mentioned. Are you on dial-up or is this a MTU/MSS/RWIN tweaking utility?

cheers

........The auto update feature is not new to SP2, it is also available on SP1

You are correct, I should have indicated that with SP2, Microsoft made a number of changes and added new features such as the "Windows Security Center", which provides more secure and easier recognition of ones settings.

Note difference between "System Properties" window I posted and that posted by RDN which contains what I like to call "Norton Type Shields", such as:

cheers