Go Back   Wireless and Wifi Forums > Cellular Communications > US Networks > alt.cellular.verizon
Register FAQ Forum Rules Members List Calendar Search Today's Posts Advertise Mark Forums Read

 
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-31-2012, 03:28 PM
SMS
Guest
 
Posts: n/a
Default San Francisco Man Stops Using his Smart Phone

From San Francisco's SF Sketchfest Comedy Festival

<http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
at 7 minutes 20 seconds.

Reply With Quote
  #2 (permalink)  
Old 01-31-2012, 10:27 PM
mikeyhsd
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

do not download/view, this appears to be a VIRUS


mikeyshd



"SMS" <scharf.steven@geemail.com> wrote in message news:4f2816a4$0$78855$742ec2ed@news.sonic.net...
From San Francisco's SF Sketchfest Comedy Festival

<http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
at 7 minutes 20 seconds.

Reply With Quote
  #3 (permalink)  
Old 01-31-2012, 11:15 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

Geez are you clueless. This is the KQED website. You can go here to
listen online without any download:
<http://www.kqed.org/a/forum/R201201271000>. Is there something wrong
with your capslock key?

On 1/31/2012 3:27 PM, mikeyhsd wrote:
> do not download/view, this appears to be a VIRUS
>
> mikeyshd




Reply With Quote
  #4 (permalink)  
Old 02-01-2012, 12:08 PM
mikeyhsd
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

do not post items that have the extension of EXE.

you for sure are clueless.



mikeyshd



"SMS" <scharf.steven@geemail.com> wrote in message news:4f288436$0$78857$742ec2ed@news.sonic.net...
Geez are you clueless. This is the KQED website. You can go here to
listen online without any download:
<http://www.kqed.org/a/forum/R201201271000>. Is there something wrong
with your capslock key?

On 1/31/2012 3:27 PM, mikeyhsd wrote:
> do not download/view, this appears to be a VIRUS
>
> mikeyshd




Reply With Quote
  #5 (permalink)  
Old 02-01-2012, 01:39 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/1/2012 5:08 AM, mikeyhsd wrote:
> do not post items that have the extension of EXE.
> you for sure are clueless.


Read for comprehension. No one posted anything with a .exe extension.

The link had a .mp3 extension. MP3 files are audio files that you play
with an audio player such as Windows Media Player, QuickTime, or Winamp.
They will not harm a computer. You can learn about what an mp3 file is
here: <http://en.wikipedia.org/wiki/MP3>.

A 'virus' can only be attached to a .exe, .rar, or .zip file (or other
archive formats that can contain .exe files.

Consider downloading an anti-virus and anti-malware program such as
Microsoft Security Essentials if you are having problems with viruses,
but understand that playing an mp3 file is not going to harm your
system, whether you play it directly from a website or whether you
download it to your system.

<http://windows.microsoft.com/en-US/windows/products/security-essentials>.

Also you should understand that trusted web sites will rarely be
promulgating viruses, and one of the largest public radio & TV stations
in the country is highly unlikely to be distributing viruses.

What on earth made you believe that a harmless mp3 file was some sort of
virus?

Reply With Quote
  #6 (permalink)  
Old 02-01-2012, 10:41 PM
mikeyhsd
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

looking at the attachment it did indeed have an EXE extension.

case closed.


mikeyshd



"SMS" <scharf.steven@geemail.com> wrote in message news:4f294e9b$0$78808$742ec2ed@news.sonic.net...
On 2/1/2012 5:08 AM, mikeyhsd wrote:
> do not post items that have the extension of EXE.
> you for sure are clueless.


Read for comprehension. No one posted anything with a .exe extension.

The link had a .mp3 extension. MP3 files are audio files that you play
with an audio player such as Windows Media Player, QuickTime, or Winamp.
They will not harm a computer. You can learn about what an mp3 file is
here: <http://en.wikipedia.org/wiki/MP3>.

A 'virus' can only be attached to a .exe, .rar, or .zip file (or other
archive formats that can contain .exe files.

Consider downloading an anti-virus and anti-malware program such as
Microsoft Security Essentials if you are having problems with viruses,
but understand that playing an mp3 file is not going to harm your
system, whether you play it directly from a website or whether you
download it to your system.

<http://windows.microsoft.com/en-US/windows/products/security-essentials>..

Also you should understand that trusted web sites will rarely be
promulgating viruses, and one of the largest public radio & TV stations
in the country is highly unlikely to be distributing viruses.

What on earth made you believe that a harmless mp3 file was some sort of
virus?

Reply With Quote
  #7 (permalink)  
Old 02-01-2012, 11:58 PM
Paul Miner
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd" <mikeyhsd@hotmail.com>
wrote:

>looking at the attachment it did indeed have an EXE extension.
>
>case closed.


Case opened.

Here's the link that started all of this:
<http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>

Note that there is an mp3 extension, not an exe extension. The mp3
extension indicates a well known audio format, not any kind of
executable file. It's completely unknown where you got the idea that
there was an exe extension involved.

Case closed again.

--
Paul Miner

Reply With Quote
  #8 (permalink)  
Old 02-02-2012, 03:18 AM
tlvp
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Wed, 01 Feb 2012 18:58:16 -0600, Paul Miner wrote:

> On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd" <mikeyhsd@hotmail.com>
> wrote:
>
>>looking at the attachment it did indeed have an EXE extension.
>>
>>case closed.

>
> Case opened.
>
> Here's the link that started all of this:
> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>
> Note that there is an mp3 extension, not an exe extension. The mp3
> extension indicates a well known audio format, not any kind of
> executable file. It's completely unknown where you got the idea that
> there was an exe extension involved.
>
> Case closed again.


Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?

Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP.

Reply With Quote
  #9 (permalink)  
Old 02-02-2012, 05:28 AM
Paul Miner
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Wed, 1 Feb 2012 23:18:34 -0500, tlvp <mPiOsUcB.EtLlLvEp@att.net>
wrote:

>On Wed, 01 Feb 2012 18:58:16 -0600, Paul Miner wrote:
>
>> On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd" <mikeyhsd@hotmail.com>
>> wrote:
>>
>>>looking at the attachment it did indeed have an EXE extension.
>>>
>>>case closed.

>>
>> Case opened.
>>
>> Here's the link that started all of this:
>> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>>
>> Note that there is an mp3 extension, not an exe extension. The mp3
>> extension indicates a well known audio format, not any kind of
>> executable file. It's completely unknown where you got the idea that
>> there was an exe extension involved.
>>
>> Case closed again.

>
>Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
>mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?


That's as good an explanation as any. ;-)

--
Paul Miner

Reply With Quote
  #10 (permalink)  
Old 02-02-2012, 02:31 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/1/2012 4:58 PM, Paul Miner wrote:
> On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> wrote:
>
>> looking at the attachment it did indeed have an EXE extension.
>>
>> case closed.

>
> Case opened.
>
> Here's the link that started all of this:
> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>
> Note that there is an mp3 extension, not an exe extension. The mp3
> extension indicates a well known audio format, not any kind of
> executable file. It's completely unknown where you got the idea that
> there was an exe extension involved.
>
> Case closed again.


Thanks, but explaining it to him is apparently hopeless. He wants to
think that a .mp3 file is a .exe file and the facts have no bearing on
his beliefs.

What likely happened is that he read somewhere that you should never
open unknown files because they could be executable files that contain
viruses, and he extrapolated this advice into the notion that every
unknown file must be a .exe file regardless of the extension. Now he
needs to spread this "knowledge" around.

Better advice would be to not download files from unknown sources. If
you're downloading freeware, start at <http://download.cnet.com> where
you at least have some assurance that the downloads are legitimate software.

In this case, a .mp3 file from one of the largest radio stations in the
country was obviously safe.

Reply With Quote
  #11 (permalink)  
Old 02-02-2012, 02:40 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/1/2012 8:18 PM, tlvp wrote:

> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?


Must be defective because a proper ROT13 decode would yield zc3. He
should take his computer to an expert and have the ROT13 decoding
checked out. Some machines do ROT13 decode in hardware because they
don't want to burden the CPU with such a compute intensive process, but
most do it in software now. I think that there may be a sleeper cell
that's infecting computers with faulty ROT13 decoding routines.

Reply With Quote
  #12 (permalink)  
Old 02-02-2012, 03:56 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/1/2012 10:28 PM, Paul Miner wrote:
> On Wed, 1 Feb 2012 23:18:34 -0500, tlvp<mPiOsUcB.EtLlLvEp@att.net>
> wrote:
>
>> On Wed, 01 Feb 2012 18:58:16 -0600, Paul Miner wrote:
>>
>>> On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
>>> wrote:
>>>
>>>> looking at the attachment it did indeed have an EXE extension.
>>>>
>>>> case closed.
>>>
>>> Case opened.
>>>
>>> Here's the link that started all of this:
>>> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>>>
>>> Note that there is an mp3 extension, not an exe extension. The mp3
>>> extension indicates a well known audio format, not any kind of
>>> executable file. It's completely unknown where you got the idea that
>>> there was an exe extension involved.
>>>
>>> Case closed again.

>>
>> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
>> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?

>
> That's as good an explanation as any. ;-)


He should just admit his mistake and move on. No one would think any
worse of him if he just admitted the error versus digging himself in
deeper. Maybe he's just our long lost troll JN.


Reply With Quote
  #13 (permalink)  
Old 02-02-2012, 10:20 PM
mikeyhsd
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

there is NO mistake.

all the mp3's on my computer register as MP3 except for the EXE file you tried to foster on the public.


mikeyshd



"SMS" <scharf.steven@geemail.com> wrote in message news:4f2ac030$0$78821$742ec2ed@news.sonic.net...
On 2/1/2012 10:28 PM, Paul Miner wrote:
> On Wed, 1 Feb 2012 23:18:34 -0500, tlvp<mPiOsUcB.EtLlLvEp@att.net>
> wrote:
>
>> On Wed, 01 Feb 2012 18:58:16 -0600, Paul Miner wrote:
>>
>>> On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
>>> wrote:
>>>
>>>> looking at the attachment it did indeed have an EXE extension.
>>>>
>>>> case closed.
>>>
>>> Case opened.
>>>
>>> Here's the link that started all of this:
>>> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>>>
>>> Note that there is an mp3 extension, not an exe extension. The mp3
>>> extension indicates a well known audio format, not any kind of
>>> executable file. It's completely unknown where you got the idea that
>>> there was an exe extension involved.
>>>
>>> Case closed again.

>>
>> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
>> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?

>
> That's as good an explanation as any. ;-)


He should just admit his mistake and move on. No one would think any
worse of him if he just admitted the error versus digging himself in
deeper. Maybe he's just our long lost troll JN.


Reply With Quote
  #14 (permalink)  
Old 02-02-2012, 10:37 PM
Paul Miner
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Thu, 2 Feb 2012 17:20:09 -0600, "mikeyhsd" <mikeyhsd@hotmail.com>
wrote:

>there is NO mistake.
>
>all the mp3's on my computer register as MP3 except for the EXE file you tried to foster on the public.


Since you seem to be the only person who is being redirected to
another resource, an EXE file in your case, you might want to check
for browser hijacks or other exploits on your system. For the rest of
us, it was a simple mp3 audio file.

--
Paul Miner

Reply With Quote
  #15 (permalink)  
Old 02-03-2012, 02:32 AM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/2/2012 3:37 PM, Paul Miner wrote:
> On Thu, 2 Feb 2012 17:20:09 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> wrote:
>
>> there is NO mistake.
>>
>> all the mp3's on my computer register as MP3 except for the EXE file you tried to foster on the public.

>
> Since you seem to be the only person who is being redirected to
> another resource, an EXE file in your case, you might want to check
> for browser hijacks or other exploits on your system. For the rest of
> us, it was a simple mp3 audio file.


He could definitely have some malware or a browser exploit on his system
if an mp3 file shows up as a .exe file, presuming he's telling the truth
rather than simply trolling.

Unfortunately the malware on his system may not let him install and run
anti-malware software like MalwareBytes or Microsoft Security
Essentials. I've seen systems where the only way to get around that was
to take the disk drive out of the system and plug it in as an external
drive to another system that already had the anti-malware software
installed, and then scan the external drive and remove the malware.

If it's a browser exploit he could try a different browser to see if it
still shows up as a .exe.

Whatever the cause, he should get his system looked at by a professional
who can figure out the cause of the problem.

Reply With Quote
  #16 (permalink)  
Old 02-03-2012, 01:05 PM
mikeyhsd
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

I already run MS SE, have been since beta.

have run super anti spyware, and several others recently.

nothing found EVER.

there is NOTHING wrong with my system.

you are just upset because you got caught.




mikeyshd



"SMS" <scharf.steven@geemail.com> wrote in message news:4f2b5564$0$78796$742ec2ed@news.sonic.net...
On 2/2/2012 3:37 PM, Paul Miner wrote:
> On Thu, 2 Feb 2012 17:20:09 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> wrote:
>
>> there is NO mistake.
>>
>> all the mp3's on my computer register as MP3 except for the EXE file you tried to foster on the public.

>
> Since you seem to be the only person who is being redirected to
> another resource, an EXE file in your case, you might want to check
> for browser hijacks or other exploits on your system. For the rest of
> us, it was a simple mp3 audio file.


He could definitely have some malware or a browser exploit on his system
if an mp3 file shows up as a .exe file, presuming he's telling the truth
rather than simply trolling.

Unfortunately the malware on his system may not let him install and run
anti-malware software like MalwareBytes or Microsoft Security
Essentials. I've seen systems where the only way to get around that was
to take the disk drive out of the system and plug it in as an external
drive to another system that already had the anti-malware software
installed, and then scan the external drive and remove the malware.

If it's a browser exploit he could try a different browser to see if it
still shows up as a .exe.

Whatever the cause, he should get his system looked at by a professional
who can figure out the cause of the problem.

Reply With Quote
  #17 (permalink)  
Old 02-03-2012, 02:35 PM
sms88
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone



On 2/2/2012 3:37 PM, Paul Miner wrote:
> On Thu, 2 Feb 2012 17:20:09 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> wrote:
>
>> there is NO mistake.
>>
>> all the mp3's on my computer register as MP3 except for the EXE file you tried to foster on the public.

>
> Since you seem to be the only person who is being redirected to
> another resource, an EXE file in your case, you might want to check
> for browser hijacks or other exploits on your system. For the rest of
> us, it was a simple mp3 audio file.


While it doesn't apply in this case, there is (or was) a way that older
versions of Quicktime could execute malicious mp3 files. It could be
caused by .qtl files (which Quicktime still executed as qtl files even
if named with a .mp3 extension.

All of the anti-virus software now checks for these files sorts of mp3
files, and Quicktime appears to have been updated to recognize these
sorts of files.

For this case, it's the opposite problem, his system has malware or a
browser exploit that is re-directing his browser to some other place
that wants to launch an executable file when he clicks on a legitimate
mp3 link. This is very dangerous, and it he's serious about clicking on
the .mp3 file and ending up with some executable file he should
definitely have his system looked at by someone that is an expert in
malware removal.

Reply With Quote
  #18 (permalink)  
Old 02-04-2012, 01:13 AM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/1/2012 8:18 PM, tlvp wrote:

> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?


I mentioned ROT13 encoding at an Android developer workshop I was giving
today. Only 2 out of 7 people knew what it was.

Reply With Quote
  #19 (permalink)  
Old 02-04-2012, 02:45 AM
Paul Miner
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Fri, 03 Feb 2012 18:13:57 -0800, SMS <scharf.steven@geemail.com>
wrote:

>On 2/1/2012 8:18 PM, tlvp wrote:
>
>> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
>> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?

>
>I mentioned ROT13 encoding at an Android developer workshop I was giving
>today. Only 2 out of 7 people knew what it was.


Really blow their minds and tell them everything will be double ROT-13
encoded.

--
Paul Miner

Reply With Quote
  #20 (permalink)  
Old 02-04-2012, 04:14 AM
tlvp
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Fri, 03 Feb 2012 18:13:57 -0800, SMS wrote:

> On 2/1/2012 8:18 PM, tlvp wrote:
>
>> Paul, I think mikeyhsd had a little trouble with a defective RoT-13 routine
>> mis-decoding .mp3 into .exe :-) . Could happen to anyone, ya know?

>
> I mentioned ROT13 encoding at an Android developer workshop I was giving
> today. Only 2 out of 7 people knew what it was.


Mmm ... at a Postal ZIP code developer workshop, you might have done a mite
better, with two out of five :-) .

Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP.

Reply With Quote
  #21 (permalink)  
Old 02-04-2012, 08:48 PM
W
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

mikey, can you explain the vector by which a Windows system downloading the
posted .mp3 file would execute it as an .exe?

I assume that a trojan could load a .dll hidden inside of a data format and
then execute that, but you would need to already have the active trojan
loaded in your system at time of download?

--
W

"mikeyhsd" <mikeyhsd@hotmail.com> wrote in message
news:CYidncbAhMspdLbSnZ2dnUVZ5tqdnZ2d@giganews.com ...
I already run MS SE, have been since beta.

have run super anti spyware, and several others recently.

nothing found EVER.

there is NOTHING wrong with my system.

you are just upset because you got caught.




mikeyshd

"SMS" <scharf.steven@geemail.com> wrote in message
news:4f2b5564$0$78796$742ec2ed@news.sonic.net...
On 2/2/2012 3:37 PM, Paul Miner wrote:
> On Thu, 2 Feb 2012 17:20:09 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> wrote:
>
>> there is NO mistake.
>>
>> all the mp3's on my computer register as MP3 except for the EXE file you

tried to foster on the public.
>
> Since you seem to be the only person who is being redirected to
> another resource, an EXE file in your case, you might want to check
> for browser hijacks or other exploits on your system. For the rest of
> us, it was a simple mp3 audio file.


He could definitely have some malware or a browser exploit on his system
if an mp3 file shows up as a .exe file, presuming he's telling the truth
rather than simply trolling.

Unfortunately the malware on his system may not let him install and run
anti-malware software like MalwareBytes or Microsoft Security
Essentials. I've seen systems where the only way to get around that was
to take the disk drive out of the system and plug it in as an external
drive to another system that already had the anti-malware software
installed, and then scan the external drive and remove the malware.

If it's a browser exploit he could try a different browser to see if it
still shows up as a .exe.

Whatever the cause, he should get his system looked at by a professional
who can figure out the cause of the problem.



Reply With Quote
  #22 (permalink)  
Old 02-04-2012, 09:03 PM
W
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

"SMS" <scharf.steven@geemail.com> wrote in message
news:4f2aac37$0$78808$742ec2ed@news.sonic.net...
> On 2/1/2012 4:58 PM, Paul Miner wrote:
> > On Wed, 1 Feb 2012 17:41:27 -0600, "mikeyhsd"<mikeyhsd@hotmail.com>
> > wrote:
> >
> >> looking at the attachment it did indeed have an EXE extension.
> >>
> >> case closed.

> >
> > Case opened.
> >
> > Here's the link that started all of this:
> >

<http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
> >
> > Note that there is an mp3 extension, not an exe extension. The mp3
> > extension indicates a well known audio format, not any kind of
> > executable file. It's completely unknown where you got the idea that
> > there was an exe extension involved.
> >
> > Case closed again.

>
> Thanks, but explaining it to him is apparently hopeless. He wants to
> think that a .mp3 file is a .exe file and the facts have no bearing on
> his beliefs.
>
> What likely happened is that he read somewhere that you should never
> open unknown files because they could be executable files that contain
> viruses, and he extrapolated this advice into the notion that every
> unknown file must be a .exe file regardless of the extension. Now he
> needs to spread this "knowledge" around.


I did not look at the MP3 that is the subject of this thread, so what
follows is just general discussion relevant to this context.

My understanding of how a virus transmission via MP3 file could work is
something like the following:

1) You go to a page with an exploit loaded on the page. Obviously that
assumes you have a particular browser or release of a particular release
that is subject to the exploit. There are known cases of browser exploits
that can execute under Windows with SYSTEM authority even though the user
was browsing from a non privileged account. Microsoft tries to repair
those exploits when found, but these are complex pieces of software, and the
bad guys keep finding loopholes.

Also, let's not forget that MANY MANY users who run Windows XP do so in an
Administrator security context, making life that much easier for an exploit.
I once read a "security" article in a major publication in which the
author - a known "security" expert - said that he had to run Windows XP as
Administrator because it was too difficult to use any other way. Right.

2) You innocently download what you believe to be a data file, in this case
an MP3. But such MP3 would actually be a DLL or EXE for a full TROJAN.
When you go to play the MP3 it would complain of an unknown format.

3) The exploit then manages to invoke a system EXE through the exploit
interface that loads the MP3 as data and then executes it as a DLL or EXE.

A lot of things have to be simultaneously true for this exploit to work, but
in general it could be done.

There isn't enough information in mikey's posts to understand what he found
that leads him to conclude the MP3 contains malware or executable code.


> In this case, a .mp3 file from one of the largest radio stations in the
> country was obviously safe.


I would never assume that a data file from a radio station was checked for
viruses.

--
W



Reply With Quote
  #23 (permalink)  
Old 02-05-2012, 02:51 AM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/4/2012 2:03 PM, W wrote:

<snip>

> There isn't enough information in mikey's posts to understand what he found
> that leads him to conclude the MP3 contains malware or executable code.


That's true, but since as everyone found out, since that file was simply
a .mp3, it's pretty obvious that he has some sort of malware on his
system that's redirecting him to some mystery .exe file. That is of
course if he's telling the truth. He may just be trolling.

Reply With Quote
  #24 (permalink)  
Old 02-05-2012, 02:55 AM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/4/2012 1:48 PM, W wrote:
> mikey, can you explain the vector by which a Windows system downloading the
> posted .mp3 file would execute it as an .exe?
>
> I assume that a trojan could load a .dll hidden inside of a data format and
> then execute that, but you would need to already have the active trojan
> loaded in your system at time of download?


It's more likely that he has a browser exploit that re-directs whenever
the user clicks on a .mp3. Especially since as everyone else that has
looked at that .mp3 realizes that it's just an .mp3.

What's rather sad is that he has a problem with his system but he's too
stubborn to admit it. Of course the actual explanation is much more
likely--he's just making the whole thing up to be annoying! Thankfully,
Thunderbird has good filters on their Usenet reader.


Reply With Quote
  #25 (permalink)  
Old 02-06-2012, 11:59 AM
Roger 2008
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone


"SMS" <scharf.steven@geemail.com> wrote in message
news:4f2816a4$0$78855$742ec2ed@news.sonic.net...
> From San Francisco's SF Sketchfest Comedy Festival
>
> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
> at 7 minutes 20 seconds.


Thanks and I heard the part at 7 minutes 20 seconds and it was pretty good.
Too bad someone thought an MP3 was an EXE.



Reply With Quote
  #26 (permalink)  
Old 02-06-2012, 02:25 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/6/2012 4:59 AM, Roger 2008 wrote:
> "SMS"<scharf.steven@geemail.com> wrote in message
> news:4f2816a4$0$78855$742ec2ed@news.sonic.net...
>> From San Francisco's SF Sketchfest Comedy Festival
>>
>> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>> at 7 minutes 20 seconds.

>
> Thanks and I heard the part at 7 minutes 20 seconds and it was pretty good.
> Too bad someone thought an MP3 was an EXE.


Actually it's highly unlikely that he thought that. It's likely that he
read somewhere to never click on unknown links which can be good advice
if you're an inexperienced computer user because the links could be
executables that can harm your computer (actually this is unlikely if
you have decent AV and Malware software installed). He was trying to
"help" people, not realizing that, in general, Usenet users are pretty
savvy and can tell the difference between an audio file and an
executable. It's also possible that he has some malware in the form a
browser exploit on his system, and that it's redirecting him to some
rogue .exe.

What he should do is to take a screen shot of the redirect and upload a
jpg of it to <http://tinypic.com/> and let us look at it so we could
advise him of what his problem is. Alas he'll probably think that
<http://tinypic.com/> is an executable as well!

Reply With Quote
  #27 (permalink)  
Old 02-06-2012, 03:40 PM
Roger 2008
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone


"SMS" <scharf.steven@geemail.com> wrote in message
news:4f2ff105$0$12035$742ec2ed@news.sonic.net...
> On 2/6/2012 4:59 AM, Roger 2008 wrote:
>> "SMS"<scharf.steven@geemail.com> wrote in message
>> news:4f2816a4$0$78855$742ec2ed@news.sonic.net...
>>> From San Francisco's SF Sketchfest Comedy Festival
>>>
>>> <http://www.kqed.org/.stream/anon/radio/forum/2012/01/2012-01-27b-forum.mp3>
>>> at 7 minutes 20 seconds.

>>
>> Thanks and I heard the part at 7 minutes 20 seconds and it was pretty
>> good.
>> Too bad someone thought an MP3 was an EXE.

>
> Actually it's highly unlikely that he thought that. It's likely that he
> read somewhere to never click on unknown links which can be good advice if
> you're an inexperienced computer user because the links could be
> executables that can harm your computer (actually this is unlikely if you
> have decent AV and Malware software installed). He was trying to "help"
> people, not realizing that, in general, Usenet users are pretty savvy and
> can tell the difference between an audio file and an executable. It's also
> possible that he has some malware in the form a browser exploit on his
> system, and that it's redirecting him to some rogue .exe.
>
> What he should do is to take a screen shot of the redirect and upload a
> jpg of it to <http://tinypic.com/> and let us look at it so we could
> advise him of what his problem is. Alas he'll probably think that
> <http://tinypic.com/> is an executable as well!


And I also forgot to thank you for using the full URL in your first post.
Thanks. Yes, I hate those links that says stuff like tinyurl etc.

Now what I'm doing on ATTWS is I want to know if the release date for the
AT&T Galaxy Note will really be February 19, 2012.

Rocky



Reply With Quote
  #28 (permalink)  
Old 02-06-2012, 05:00 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/6/2012 8:40 AM, Roger 2008 wrote:

> And I also forgot to thank you for using the full URL in your first post.
> Thanks. Yes, I hate those links that says stuff like tinyurl etc.


Tinyurls can be dangerous, but a lot of people don't know how to use a
long URL on Usenet in a way that it doesn't get chopped up (enclosing it
in <>) so they use a tinyurl instead. What's better to do with tinyurl
is to post the preview link so someone that clicks on it can see where
it redirects to prior to deciding whether to go there or not. Alas, for
those people that believe that a .mp3 is a .exe, that's not going to
help them anyway.

I can't believe that the posting of a simple audio file that was an
amusing bit about smart phones actually turned into such a ridiculous
thread. But such is Usenet and newbies.

Reply With Quote
  #29 (permalink)  
Old 02-07-2012, 06:07 AM
tlvp
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On Mon, 06 Feb 2012 07:25:49 -0800, SMS wrote:

> ... Alas he'll probably think that
> <http://tinypic.com/> is an executable as well!


Obviously -- what .com file *isn't* an executable :-) ?

Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP.

Reply With Quote
  #30 (permalink)  
Old 02-07-2012, 04:52 PM
SMS
Guest
 
Posts: n/a
Default Re: San Francisco Man Stops Using his Smart Phone

On 2/6/2012 11:07 PM, tlvp wrote:
> On Mon, 06 Feb 2012 07:25:49 -0800, SMS wrote:
>
>> ... Alas he'll probably think that
>> <http://tinypic.com/> is an executable as well!

>
> Obviously -- what .com file *isn't* an executable :-) ?
>
> Cheers, -- tlvp


LOL, unlikely since he would know that because it was so long ago.

However there is actually something to the .com file thing since prior
to 64 bit versions of Windows, Windows would execute a DOS .com file
just fine. Primitive virus writers would name virus files things like
"paint.com" and since if there are both .com and .exe files the .com
file will execute if the user types in just the file name without the
extension, and they hoped that the user would run in a DOS window and
run paint.com.

You can still execute a .com file in 64 bit Windows using DOSBox, but I
don't know if you could launch a virus that way since it's more of a
virtual machine.

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Do you want to use a smart phone with Verizon and NOT PAY for a data plan? Zalek Bloom alt.cellular.verizon 60 12-22-2011 07:53 AM
iPhone FAQ rev 3.00 ira.j.schechtman@gmail.com alt.cellular.attws 133 05-23-2009 04:10 PM
Why Buy A Cell Phone When You Can Get One Free? bs866806@163.com alt.cellular.verizon 0 12-31-2007 02:44 AM
Could anything more go wrong with an o2 upgrade than this? (long) Anim uk.telecom.mobile 8 12-09-2006 08:30 AM
Myopic Economist article: Skype and "How the internet killed the phone business" Valiant uk.telecom.voip 5 09-16-2005 04:11 PM


All times are GMT. The time now is 12:46 AM.



Powered by vBulletin® Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.6.0 PL2

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45